This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/e03e71fe-ad33-4d12-8720-43143ff01dbf/0/D807B5A7716CB56D036EDE4CE994632C0D3A2501.mft File: D807B5A7716CB56D036EDE4CE994632C0D3A2501.mft (raw, json) Hash identifier: ZfIkKhZ89cMjbV6Thqs1i1isry/uiR3Plr8WjXb+lWs= Subject key identifier: E7:F6:7B:B8:5E:C9:63:D5:52:90:E6:15:9F:35:CF:0D:76:D5:0B:EB Authority key identifier: D8:07:B5:A7:71:6C:B5:6D:03:6E:DE:4C:E9:94:63:2C:0D:3A:25:01 Certificate issuer: /CN=D807B5A7716CB56D036EDE4CE994632C0D3A2501 Certificate serial: 1C798D11143C1C92E7343E303A41BD9AAC3B4636 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D807B5A7716CB56D036EDE4CE994632C0D3A2501.cer Subject info access: rsync://repo-rpki.idnic.net/repo/e03e71fe-ad33-4d12-8720-43143ff01dbf/0/D807B5A7716CB56D036EDE4CE994632C0D3A2501.mft Manifest number: 01DA Signing time: Sat 06 Dec 2025 21:52:14 +0000 Manifest this update: Sat 06 Dec 2025 21:47:14 +0000 Manifest next update: Wed 10 Dec 2025 09:25:14 +0000 Files and hashes: 1: D807B5A7716CB56D036EDE4CE994632C0D3A2501.crl (hash: Po5xL9AJl6cz9ZTPZo28D9SW9wv7ohIygWiH30zAP8M=) 2: 3130332e3139312e3230302e302f32342d3234203d3e20313432333636.roa (hash: PoHfbIWBTAgg6GV0EgVNoxxVcZmuQWnVjc1te2yrEhM=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/e03e71fe-ad33-4d12-8720-43143ff01dbf/0/D807B5A7716CB56D036EDE4CE994632C0D3A2501.crl rsync://repo-rpki.idnic.net/repo/e03e71fe-ad33-4d12-8720-43143ff01dbf/0/D807B5A7716CB56D036EDE4CE994632C0D3A2501.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D807B5A7716CB56D036EDE4CE994632C0D3A2501.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 09 Dec 2025 15:57:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1c:79:8d:11:14:3c:1c:92:e7:34:3e:30:3a:41:bd:9a:ac:3b:46:36 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D807B5A7716CB56D036EDE4CE994632C0D3A2501 Validity Not Before: Dec 6 21:47:14 2025 GMT Not After : Dec 10 09:25:14 2025 GMT Subject: CN=E7F67BB85EC963D55290E6159F35CF0D76D50BEB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:2c:cd:d8:5a:c1:71:01:35:cf:a4:f6:ef:3e: f5:19:08:03:46:89:7a:d2:3b:14:6b:72:e3:f6:89: 04:70:ad:0e:3f:73:43:41:a7:83:aa:59:1b:fd:9b: 42:90:7a:4c:82:27:bc:7e:55:a3:e5:da:89:3f:d6: 66:12:f6:04:46:c9:b9:4b:d0:a4:48:b9:cc:ef:07: 6f:70:60:53:0e:35:60:8a:b4:3b:b1:5b:f5:d9:38: 33:34:eb:0c:e4:77:82:0d:8f:2f:32:8b:de:2b:14: 04:79:44:6a:0c:2b:7b:47:3c:f5:04:30:2b:8b:45: 64:db:45:db:3a:db:32:98:31:ba:2d:d2:69:a9:f0: 63:c8:2b:4e:24:1f:19:90:c4:ac:9e:76:ce:e3:56: b6:18:60:72:24:31:f2:b3:b9:ec:8e:ee:0d:02:09: 7d:53:95:70:ee:83:b2:fb:0d:c8:7d:c1:73:8f:6c: e0:fc:08:74:88:cc:cf:bc:34:c9:db:c6:4e:53:d3: 73:9d:a9:54:49:4b:2e:a6:42:0d:fd:59:dc:cc:bc: a7:4d:c7:1d:b8:4c:53:67:4e:75:51:25:e4:c6:87: 91:12:18:f0:18:1d:89:51:a1:39:8c:9e:65:0f:57: ec:d3:cb:69:4f:b7:f6:29:d1:4e:94:27:82:a1:00: 60:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E7:F6:7B:B8:5E:C9:63:D5:52:90:E6:15:9F:35:CF:0D:76:D5:0B:EB X509v3 Authority Key Identifier: keyid:D8:07:B5:A7:71:6C:B5:6D:03:6E:DE:4C:E9:94:63:2C:0D:3A:25:01 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/e03e71fe-ad33-4d12-8720-43143ff01dbf/0/D807B5A7716CB56D036EDE4CE994632C0D3A2501.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D807B5A7716CB56D036EDE4CE994632C0D3A2501.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e03e71fe-ad33-4d12-8720-43143ff01dbf/0/D807B5A7716CB56D036EDE4CE994632C0D3A2501.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7c:83:b0:11:51:39:89:d5:34:76:b9:f0:81:af:6c:49:14:66: 11:00:e7:f2:db:aa:43:cf:74:47:5f:b9:10:da:e8:70:02:1d: e6:45:f8:95:ee:e4:6f:dc:9e:c4:67:04:e4:ff:c1:ea:ef:ea: d3:4e:bb:07:7d:9c:24:1a:9e:e0:a3:d2:4e:fe:e5:c5:64:82: 47:12:67:b6:ab:79:a9:2a:00:8b:3c:de:77:3a:05:27:36:16: f3:a8:a4:c6:81:67:6d:ab:f3:4f:25:58:e3:ff:b5:a8:25:39: 1d:b2:a2:a6:58:23:60:f8:9c:09:38:c5:05:36:98:b3:af:32: fa:96:5e:28:cd:a1:76:72:5b:44:bf:e0:92:14:ab:4a:09:b6: 31:c7:47:3b:49:98:ba:17:c7:3c:14:78:00:99:bd:dd:83:3f: 63:71:96:7e:86:e9:4f:9b:e5:5d:55:a9:b3:2a:4d:63:55:71: ea:40:26:fa:6d:85:5b:7f:c2:77:42:ee:4c:43:39:37:11:5e: 45:a2:cb:4a:00:7d:b2:89:c1:2b:34:c5:79:93:be:a7:36:d7: 8b:c3:54:ea:21:5f:fd:a7:e3:3f:80:cc:67:70:18:a7:40:b0: 60:55:00:7a:7a:f6:97:47:d4:e9:0d:aa:0c:c5:97:6d:ec:3d: 46:21:cd:a1 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUHHmNERQ8HJLnND4wOkG9mqw7RjYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDgwN0I1QTc3MTZDQjU2RDAzNkVERTRDRTk5NDYzMkMw RDNBMjUwMTAeFw0yNTEyMDYyMTQ3MTRaFw0yNTEyMTAwOTI1MTRaMDMxMTAvBgNV BAMTKEU3RjY3QkI4NUVDOTYzRDU1MjkwRTYxNTlGMzVDRjBENzZENTBCRUIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDDLM3YWsFxATXPpPbvPvUZCANG iXrSOxRrcuP2iQRwrQ4/c0NBp4OqWRv9m0KQekyCJ7x+VaPl2ok/1mYS9gRGyblL 0KRIuczvB29wYFMONWCKtDuxW/XZODM06wzkd4INjy8yi94rFAR5RGoMK3tHPPUE MCuLRWTbRds62zKYMbot0mmp8GPIK04kHxmQxKyeds7jVrYYYHIkMfKzueyO7g0C CX1TlXDug7L7Dch9wXOPbOD8CHSIzM+8NMnbxk5T03OdqVRJSy6mQg39WdzMvKdN xx24TFNnTnVRJeTGh5ESGPAYHYlRoTmMnmUPV+zTy2lPt/Yp0U6UJ4KhAGCPAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU5/Z7uF7JY9VSkOYVnzXPDXbVC+swHwYDVR0j BBgwFoAU2Ae1p3FstW0Dbt5M6ZRjLA06JQEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l MDNlNzFmZS1hZDMzLTRkMTItODcyMC00MzE0M2ZmMDFkYmYvMC9EODA3QjVBNzcx NkNCNTZEMDM2RURFNENFOTk0NjMyQzBEM0EyNTAxLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRDgwN0I1QTc3MTZDQjU2RDAzNkVERTRDRTk5NDYzMkMwRDNB MjUwMS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZTAzZTcxZmUtYWQzMy00ZDEyLTg3 MjAtNDMxNDNmZjAxZGJmLzAvRDgwN0I1QTc3MTZDQjU2RDAzNkVERTRDRTk5NDYz MkMwRDNBMjUwMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHyDsBFROYnVNHa58IGvbEkUZhEA5/LbqkPP dEdfuRDa6HACHeZF+JXu5G/cnsRnBOT/werv6tNOuwd9nCQanuCj0k7+5cVkgkcS Z7areakqAIs83nc6BSc2FvOopMaBZ22r808lWOP/taglOR2yoqZYI2D4nAk4xQU2 mLOvMvqWXijNoXZyW0S/4JIUq0oJtjHHRztJmLoXxzwUeACZvd2DP2Nxln6G6U+b 5V1VqbMqTWNVcepAJvpthVt/wndC7kxDOTcRXkWiy0oAfbKJwSs0xXmTvqc214vD VOohX/2n4z+AzGdwGKdAsGBVAHp69pdH1OkNqgzFl23sPUYhzaE= -----END CERTIFICATE-----Generated at Sun Dec 7 01:40:01 2025 by rpki-client