This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/e03e71fe-ad33-4d12-8720-43143ff01dbf/0/D807B5A7716CB56D036EDE4CE994632C0D3A2501.mft File: D807B5A7716CB56D036EDE4CE994632C0D3A2501.mft (raw, json) Hash identifier: Elty95ER/n83VQtL2ufO90BSqMBXThdZeK5mmDExFR8= Subject key identifier: 38:53:3E:B0:34:56:4E:1B:19:AF:B8:82:38:2F:BA:F6:5B:7D:08:D8 Authority key identifier: D8:07:B5:A7:71:6C:B5:6D:03:6E:DE:4C:E9:94:63:2C:0D:3A:25:01 Certificate issuer: /CN=D807B5A7716CB56D036EDE4CE994632C0D3A2501 Certificate serial: 7100B3866C5C47D1726E4398F9E38E575F4760C6 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D807B5A7716CB56D036EDE4CE994632C0D3A2501.cer Subject info access: rsync://repo-rpki.idnic.net/repo/e03e71fe-ad33-4d12-8720-43143ff01dbf/0/D807B5A7716CB56D036EDE4CE994632C0D3A2501.mft Manifest number: 01DE Signing time: Tue 16 Dec 2025 06:42:15 +0000 Manifest this update: Tue 16 Dec 2025 06:37:15 +0000 Manifest next update: Fri 19 Dec 2025 06:43:15 +0000 Files and hashes: 1: 3130332e3139312e3230302e302f32342d3234203d3e20313432333636.roa (hash: PoHfbIWBTAgg6GV0EgVNoxxVcZmuQWnVjc1te2yrEhM=) 2: D807B5A7716CB56D036EDE4CE994632C0D3A2501.crl (hash: czZlQXJTFuPAW+RsjJGa2ni1mEm8ZbvJ6fbfrdeyjd4=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/e03e71fe-ad33-4d12-8720-43143ff01dbf/0/D807B5A7716CB56D036EDE4CE994632C0D3A2501.crl rsync://repo-rpki.idnic.net/repo/e03e71fe-ad33-4d12-8720-43143ff01dbf/0/D807B5A7716CB56D036EDE4CE994632C0D3A2501.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D807B5A7716CB56D036EDE4CE994632C0D3A2501.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 19 Dec 2025 06:43:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 71:00:b3:86:6c:5c:47:d1:72:6e:43:98:f9:e3:8e:57:5f:47:60:c6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D807B5A7716CB56D036EDE4CE994632C0D3A2501 Validity Not Before: Dec 16 06:37:15 2025 GMT Not After : Dec 19 06:43:15 2025 GMT Subject: CN=38533EB034564E1B19AFB882382FBAF65B7D08D8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:a3:47:66:96:3f:4c:be:3c:7b:a0:9d:8b:79: ee:b9:46:44:f4:8d:60:4a:a4:cc:cf:9b:de:e1:10: 0e:ea:04:a7:e7:15:28:de:1a:a4:39:c4:41:d3:47: aa:51:16:bd:f8:47:bf:a6:ad:0d:cb:23:e3:a7:b8: de:cc:bb:c5:50:a2:37:88:46:47:a8:4a:89:29:31: f0:72:b1:55:3d:34:71:1a:41:00:79:e9:d4:8e:68: 34:c7:7c:1e:f7:d8:1f:f2:89:a1:b6:75:2a:9d:9a: 97:3d:e8:f7:ac:02:26:78:9c:3b:25:f7:7e:6f:1e: e7:60:32:81:01:ec:59:74:9b:c5:20:0b:9d:6b:bb: 5d:1f:3d:75:51:23:00:3c:33:be:94:de:1d:e8:82: 84:8e:6f:65:43:06:d4:05:de:bb:64:08:7a:93:a7: 6f:06:a3:73:8b:dc:f4:f6:ca:52:05:0f:65:41:ad: cc:21:58:06:bf:a2:e6:ea:6e:c3:96:69:c8:bc:5a: 12:19:58:15:05:0a:d3:ca:a3:89:ab:a1:d3:97:ee: 6e:28:4f:da:98:35:dd:87:fa:7c:2e:68:f5:37:bb: d1:71:75:da:eb:4a:c9:1b:f2:ed:23:6a:7a:f5:82: 05:d9:33:c9:06:54:28:67:09:9c:f7:ce:d3:55:4c: 90:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:53:3E:B0:34:56:4E:1B:19:AF:B8:82:38:2F:BA:F6:5B:7D:08:D8 X509v3 Authority Key Identifier: keyid:D8:07:B5:A7:71:6C:B5:6D:03:6E:DE:4C:E9:94:63:2C:0D:3A:25:01 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/e03e71fe-ad33-4d12-8720-43143ff01dbf/0/D807B5A7716CB56D036EDE4CE994632C0D3A2501.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D807B5A7716CB56D036EDE4CE994632C0D3A2501.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e03e71fe-ad33-4d12-8720-43143ff01dbf/0/D807B5A7716CB56D036EDE4CE994632C0D3A2501.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 59:ac:68:e1:ac:63:1c:89:f9:c1:35:0d:f5:9c:f3:b4:9c:59: 7a:58:ae:1d:23:78:50:0d:3d:6f:c2:30:d7:a2:f6:3e:8a:55: ec:fd:40:1b:ab:ac:bf:04:19:55:5d:9f:67:46:31:72:0e:45: a3:37:a0:26:fa:82:66:ed:3e:93:02:d7:e0:cb:76:34:9d:98: d9:73:36:2c:4b:c5:c3:91:e2:2f:8f:a1:94:46:38:95:c7:a1: e5:be:cd:cb:17:da:7a:2c:b9:32:60:45:54:9d:08:81:24:e1: 44:08:16:1a:25:bc:8f:27:ed:69:37:4d:97:91:7e:42:8b:18: 97:13:5a:86:a5:08:89:b2:28:36:26:4f:32:ad:9d:27:69:45: 00:b2:02:58:58:f4:8f:21:ad:74:b7:9f:38:4f:fe:fb:98:95: 55:4b:93:1a:05:34:92:78:d2:b8:c6:24:38:52:ae:98:4b:b9: d9:c3:37:26:22:a5:75:03:f6:d1:16:77:be:d4:fa:ea:26:fe: fb:9a:83:3c:fe:3a:05:07:a9:33:6a:2d:97:77:f3:b6:bd:8b: 46:6b:6d:6f:eb:9c:a0:91:5c:54:05:bb:dd:48:bf:d9:50:e8: 67:7d:c8:56:35:40:b4:17:74:75:aa:bd:50:b4:c9:57:27:a7: 9c:a8:e8:a2 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUcQCzhmxcR9FybkOY+eOOV19HYMYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDgwN0I1QTc3MTZDQjU2RDAzNkVERTRDRTk5NDYzMkMw RDNBMjUwMTAeFw0yNTEyMTYwNjM3MTVaFw0yNTEyMTkwNjQzMTVaMDMxMTAvBgNV BAMTKDM4NTMzRUIwMzQ1NjRFMUIxOUFGQjg4MjM4MkZCQUY2NUI3RDA4RDgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDYo0dmlj9Mvjx7oJ2Lee65RkT0 jWBKpMzPm97hEA7qBKfnFSjeGqQ5xEHTR6pRFr34R7+mrQ3LI+OnuN7Mu8VQojeI RkeoSokpMfBysVU9NHEaQQB56dSOaDTHfB732B/yiaG2dSqdmpc96PesAiZ4nDsl 935vHudgMoEB7Fl0m8UgC51ru10fPXVRIwA8M76U3h3ogoSOb2VDBtQF3rtkCHqT p28Go3OL3PT2ylIFD2VBrcwhWAa/oubqbsOWaci8WhIZWBUFCtPKo4mrodOX7m4o T9qYNd2H+nwuaPU3u9FxddrrSskb8u0janr1ggXZM8kGVChnCZz3ztNVTJAJAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUOFM+sDRWThsZr7iCOC+69lt9CNgwHwYDVR0j BBgwFoAU2Ae1p3FstW0Dbt5M6ZRjLA06JQEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l MDNlNzFmZS1hZDMzLTRkMTItODcyMC00MzE0M2ZmMDFkYmYvMC9EODA3QjVBNzcx NkNCNTZEMDM2RURFNENFOTk0NjMyQzBEM0EyNTAxLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRDgwN0I1QTc3MTZDQjU2RDAzNkVERTRDRTk5NDYzMkMwRDNB MjUwMS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZTAzZTcxZmUtYWQzMy00ZDEyLTg3 MjAtNDMxNDNmZjAxZGJmLzAvRDgwN0I1QTc3MTZDQjU2RDAzNkVERTRDRTk5NDYz MkMwRDNBMjUwMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFmsaOGsYxyJ+cE1DfWc87ScWXpYrh0jeFAN PW/CMNei9j6KVez9QBurrL8EGVVdn2dGMXIORaM3oCb6gmbtPpMC1+DLdjSdmNlz NixLxcOR4i+PoZRGOJXHoeW+zcsX2nosuTJgRVSdCIEk4UQIFholvI8n7Wk3TZeR fkKLGJcTWoalCImyKDYmTzKtnSdpRQCyAlhY9I8hrXS3nzhP/vuYlVVLkxoFNJJ4 0rjGJDhSrphLudnDNyYipXUD9tEWd77U+uom/vuagzz+OgUHqTNqLZd387a9i0Zr bW/rnKCRXFQFu91Iv9lQ6Gd9yFY1QLQXdHWqvVC0yVcnp5yo6KI= -----END CERTIFICATE-----Generated at Wed Dec 17 16:39:28 2025 by rpki-client