This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/e3295de6-2058-46a7-936b-052cf2fa920d/0/7FDB761B09E7A9A80CD28C84A5FFDB12F5C9BBD0.mft File: 7FDB761B09E7A9A80CD28C84A5FFDB12F5C9BBD0.mft (raw, json) Hash identifier: 71mW0KbQqxmjm0CWecUSJEruVm+Cz+j450YkBX8kR/Q= Subject key identifier: 31:E9:9A:2D:97:16:89:2D:E7:AA:B4:60:A8:96:96:78:1C:4F:8A:F3 Authority key identifier: 7F:DB:76:1B:09:E7:A9:A8:0C:D2:8C:84:A5:FF:DB:12:F5:C9:BB:D0 Certificate issuer: /CN=7FDB761B09E7A9A80CD28C84A5FFDB12F5C9BBD0 Certificate serial: 113FE9A27627FCD6C8D6B28CFF2EE1DA6E9B9ACC Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7FDB761B09E7A9A80CD28C84A5FFDB12F5C9BBD0.cer Subject info access: rsync://repo-rpki.idnic.net/repo/e3295de6-2058-46a7-936b-052cf2fa920d/0/7FDB761B09E7A9A80CD28C84A5FFDB12F5C9BBD0.mft Manifest number: 022B Signing time: Sun 07 Dec 2025 01:41:02 +0000 Manifest this update: Sun 07 Dec 2025 01:36:02 +0000 Manifest next update: Wed 10 Dec 2025 11:53:02 +0000 Files and hashes: 1: 3130332e3138362e38392e302f32342d3234203d3e20313439373137.roa (hash: d85h85v2ptQz3vrVN5qkUm0+GStqZnlOAr5LKlkna3k=) 2: 3130332e3138362e38382e302f32342d3234203d3e20313439373137.roa (hash: qKtIrqocYRtH9mFT0B1bJLwWXs7q8vOuLUP4J+rTPCk=) 3: 7FDB761B09E7A9A80CD28C84A5FFDB12F5C9BBD0.crl (hash: Y1GWJlFeoO1oHKwq+xkwJ/6rBehOUbi1cRIUyW6M6og=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/e3295de6-2058-46a7-936b-052cf2fa920d/0/7FDB761B09E7A9A80CD28C84A5FFDB12F5C9BBD0.crl rsync://repo-rpki.idnic.net/repo/e3295de6-2058-46a7-936b-052cf2fa920d/0/7FDB761B09E7A9A80CD28C84A5FFDB12F5C9BBD0.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7FDB761B09E7A9A80CD28C84A5FFDB12F5C9BBD0.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 09 Dec 2025 15:57:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 11:3f:e9:a2:76:27:fc:d6:c8:d6:b2:8c:ff:2e:e1:da:6e:9b:9a:cc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7FDB761B09E7A9A80CD28C84A5FFDB12F5C9BBD0 Validity Not Before: Dec 7 01:36:02 2025 GMT Not After : Dec 10 11:53:02 2025 GMT Subject: CN=31E99A2D9716892DE7AAB460A89696781C4F8AF3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:97:cd:27:89:e0:39:59:05:8f:7f:b2:c7:3a: 1c:52:da:17:6d:fd:4b:a1:77:2f:bf:7c:12:7d:61: dd:03:ac:0c:4a:5a:e9:0a:d2:b3:a6:f6:61:1b:74: b8:85:27:6a:03:3a:eb:75:b8:09:3e:42:a3:4b:ef: 5a:67:e5:e5:3b:d4:8a:4f:71:eb:56:ba:91:10:b8: a5:7a:57:a1:b3:45:4f:a9:a5:d7:42:0b:00:24:60: ed:24:9c:c1:42:dd:86:ab:72:b5:61:a2:01:24:ac: 46:3b:f7:84:44:93:67:65:07:1b:c7:a0:a8:a1:ee: e5:34:38:b1:f9:19:dc:d9:bb:c8:65:29:f7:65:39: b1:5f:b1:25:ba:eb:0f:a1:0d:de:21:d1:4c:67:11: 1e:b8:ba:c9:33:e8:c4:bc:2b:f1:41:d2:12:70:90: 53:14:c8:3b:19:c9:34:97:87:c1:62:3f:68:d5:ae: cb:2f:a0:af:82:ca:e6:93:7d:95:9b:4e:ce:11:bf: 9d:37:06:f7:c9:26:3e:d4:6e:1b:e2:55:5a:cd:7c: 6f:25:12:8e:d5:5d:ff:bb:2c:69:0c:32:ae:31:c3: cd:40:0d:3e:5b:34:60:e4:1d:da:bd:83:57:31:af: e2:38:67:9f:ca:f6:93:03:3d:df:49:fd:d3:97:6c: c5:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 31:E9:9A:2D:97:16:89:2D:E7:AA:B4:60:A8:96:96:78:1C:4F:8A:F3 X509v3 Authority Key Identifier: keyid:7F:DB:76:1B:09:E7:A9:A8:0C:D2:8C:84:A5:FF:DB:12:F5:C9:BB:D0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/e3295de6-2058-46a7-936b-052cf2fa920d/0/7FDB761B09E7A9A80CD28C84A5FFDB12F5C9BBD0.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7FDB761B09E7A9A80CD28C84A5FFDB12F5C9BBD0.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e3295de6-2058-46a7-936b-052cf2fa920d/0/7FDB761B09E7A9A80CD28C84A5FFDB12F5C9BBD0.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1b:06:02:c0:83:ed:47:1e:ea:75:64:0f:88:d5:66:f1:40:e0: 27:66:8b:a4:1a:4a:b4:dc:24:35:cd:83:ce:14:2f:01:d0:a6: 46:5e:ed:f4:44:00:5d:8b:ff:f4:9e:3c:12:d5:94:f0:8f:f7: 37:05:ec:7f:ac:49:d1:2b:8d:78:dc:d5:3b:85:54:c8:2d:a7: 38:b3:98:93:66:6e:81:dc:ab:ab:6d:d9:50:1c:fe:8e:c2:17: e7:65:46:7a:40:55:50:65:7c:64:50:9c:cf:b9:25:8d:3d:f3: cc:23:4e:ed:8a:ba:21:70:79:a9:71:90:b1:3a:cc:f7:74:01: 5e:31:ad:d2:92:7c:ff:db:b1:cc:a9:0a:d5:29:cc:37:c1:0f: 26:0e:6d:e3:4e:6c:70:28:74:78:43:f1:52:95:81:54:21:bd: 47:10:8b:1c:9e:4d:14:fc:3f:49:2e:25:45:ef:79:18:9f:1a: 06:63:98:87:7f:16:ab:a4:3d:7f:10:f2:43:71:d0:b2:18:9c: 6a:6e:18:8f:1a:b5:22:e3:1c:21:00:0d:47:83:c0:e7:bc:f1: e0:67:85:21:07:3d:b0:c1:1d:9a:4e:d0:53:f5:13:98:e8:07: 53:4e:af:4f:fa:6a:49:19:72:90:1b:42:93:a7:20:a4:c8:fe: a3:3a:e1:82 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUET/ponYn/NbI1rKM/y7h2m6bmswwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoN0ZEQjc2MUIwOUU3QTlBODBDRDI4Qzg0QTVGRkRCMTJG NUM5QkJEMDAeFw0yNTEyMDcwMTM2MDJaFw0yNTEyMTAxMTUzMDJaMDMxMTAvBgNV BAMTKDMxRTk5QTJEOTcxNjg5MkRFN0FBQjQ2MEE4OTY5Njc4MUM0RjhBRjMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDVl80nieA5WQWPf7LHOhxS2hdt /Uuhdy+/fBJ9Yd0DrAxKWukK0rOm9mEbdLiFJ2oDOut1uAk+QqNL71pn5eU71IpP cetWupEQuKV6V6GzRU+ppddCCwAkYO0knMFC3YarcrVhogEkrEY794REk2dlBxvH oKih7uU0OLH5GdzZu8hlKfdlObFfsSW66w+hDd4h0UxnER64uskz6MS8K/FB0hJw kFMUyDsZyTSXh8FiP2jVrssvoK+CyuaTfZWbTs4Rv503BvfJJj7UbhviVVrNfG8l Eo7VXf+7LGkMMq4xw81ADT5bNGDkHdq9g1cxr+I4Z5/K9pMDPd9J/dOXbMXdAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUMemaLZcWiS3nqrRgqJaWeBxPivMwHwYDVR0j BBgwFoAUf9t2GwnnqagM0oyEpf/bEvXJu9AwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l MzI5NWRlNi0yMDU4LTQ2YTctOTM2Yi0wNTJjZjJmYTkyMGQvMC83RkRCNzYxQjA5 RTdBOUE4MENEMjhDODRBNUZGREIxMkY1QzlCQkQwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvN0ZEQjc2MUIwOUU3QTlBODBDRDI4Qzg0QTVGRkRCMTJGNUM5 QkJEMC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZTMyOTVkZTYtMjA1OC00NmE3LTkz NmItMDUyY2YyZmE5MjBkLzAvN0ZEQjc2MUIwOUU3QTlBODBDRDI4Qzg0QTVGRkRC MTJGNUM5QkJEMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABsGAsCD7Uce6nVkD4jVZvFA4Cdmi6QaSrTc JDXNg84ULwHQpkZe7fREAF2L//SePBLVlPCP9zcF7H+sSdErjXjc1TuFVMgtpziz mJNmboHcq6tt2VAc/o7CF+dlRnpAVVBlfGRQnM+5JY0988wjTu2KuiFwealxkLE6 zPd0AV4xrdKSfP/bscypCtUpzDfBDyYObeNObHAodHhD8VKVgVQhvUcQixyeTRT8 P0kuJUXveRifGgZjmId/FqukPX8Q8kNx0LIYnGpuGI8atSLjHCEADUeDwOe88eBn hSEHPbDBHZpO0FP1E5joB1NOr0/6akkZcpAbQpOnIKTI/qM64YI= -----END CERTIFICATE-----Generated at Sun Dec 7 07:25:32 2025 by rpki-client