This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/e6adae2a-47b6-4ae5-9c3f-3e8cb92a3987/0/7CA3F2C40FE453CEE230AF594985B275514F5ECF.mft File: 7CA3F2C40FE453CEE230AF594985B275514F5ECF.mft (raw, json) Hash identifier: fEzaFWeQXkR4q8qo9YJ1EvzZQ5hu5Hi28oWxrMZOgdI= Subject key identifier: C2:23:69:1F:52:40:BB:49:7A:19:70:82:3A:6A:73:08:11:69:31:BC Authority key identifier: 7C:A3:F2:C4:0F:E4:53:CE:E2:30:AF:59:49:85:B2:75:51:4F:5E:CF Certificate issuer: /CN=7CA3F2C40FE453CEE230AF594985B275514F5ECF Certificate serial: 3D324F180B06FF43E4908BC4AD87082C883F7BA4 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7CA3F2C40FE453CEE230AF594985B275514F5ECF.cer Subject info access: rsync://repo-rpki.idnic.net/repo/e6adae2a-47b6-4ae5-9c3f-3e8cb92a3987/0/7CA3F2C40FE453CEE230AF594985B275514F5ECF.mft Manifest number: 01C4 Signing time: Sun 07 Dec 2025 03:01:24 +0000 Manifest this update: Sun 07 Dec 2025 02:56:24 +0000 Manifest next update: Wed 10 Dec 2025 03:09:24 +0000 Files and hashes: 1: 3130332e3139312e3131372e302f32342d3234203d3e20313439393137.roa (hash: MMOGS7T9X8x7JT9s8oWcj5fdpc4Z+j40BumMkZopolM=) 2: 3130332e3139312e3131362e302f32342d3234203d3e20313439393137.roa (hash: fdBGaDwbA3O0q2/vBfcwU5qvE8WWWviCtFtejPXVA+I=) 3: 7CA3F2C40FE453CEE230AF594985B275514F5ECF.crl (hash: 9SVOVEg6+yG+uAV5k7kKIo7ulUddSjHXNeMbZTKwnUg=) 4: 3130332e3139312e3131362e302f32332d3233203d3e20313439393137.roa (hash: yloFFDOEavyW9OOZ+KM+O5lOWtq7g/hDtLKYHcYmJYE=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/e6adae2a-47b6-4ae5-9c3f-3e8cb92a3987/0/7CA3F2C40FE453CEE230AF594985B275514F5ECF.crl rsync://repo-rpki.idnic.net/repo/e6adae2a-47b6-4ae5-9c3f-3e8cb92a3987/0/7CA3F2C40FE453CEE230AF594985B275514F5ECF.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7CA3F2C40FE453CEE230AF594985B275514F5ECF.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 09 Dec 2025 15:57:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3d:32:4f:18:0b:06:ff:43:e4:90:8b:c4:ad:87:08:2c:88:3f:7b:a4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7CA3F2C40FE453CEE230AF594985B275514F5ECF Validity Not Before: Dec 7 02:56:24 2025 GMT Not After : Dec 10 03:09:24 2025 GMT Subject: CN=C223691F5240BB497A1970823A6A7308116931BC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:7b:a7:ed:8f:aa:5f:c5:96:55:3b:5a:98:64: c9:5c:5a:16:31:74:0b:62:3e:cb:f4:ef:9d:24:f3: 2d:ea:53:3f:b4:28:03:7c:8a:ab:f4:b1:fe:7b:bd: 5e:80:3d:fa:17:a0:d4:8b:80:9b:22:a3:66:9f:fc: e3:d9:3e:ff:d6:77:c6:e9:6d:53:ab:7d:24:14:f6: b7:10:41:ef:92:d8:fb:6b:c2:82:a2:d4:23:a0:ad: 84:de:7a:38:39:53:f4:69:d8:f1:57:44:80:8e:a7: 6b:71:d7:d8:95:63:f6:ff:3f:50:ba:fd:55:69:e8: 2c:f4:bb:50:7c:2b:a9:0c:2f:a2:93:36:a0:3b:c8: e2:bb:b1:3f:cc:a7:27:01:b0:8c:1b:44:f7:24:40: e5:97:dd:00:88:f0:8b:bb:24:4b:f2:9e:10:7d:a8: ed:4a:ac:82:40:a7:84:82:bd:c1:b2:27:74:d8:94: ea:3c:b0:b7:0e:b8:ad:4b:b8:11:27:7b:4e:bc:53: 2c:a2:8a:80:a4:17:c0:2f:a7:89:20:b7:d0:cd:22: be:f5:bd:59:95:41:ed:eb:e5:dd:2e:be:e4:35:d0: 2a:9c:09:4c:bb:f3:af:b9:17:35:79:df:6c:5b:e6: 2b:3a:bf:d3:b7:cd:90:e7:ce:81:05:e8:ef:48:99: 89:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:23:69:1F:52:40:BB:49:7A:19:70:82:3A:6A:73:08:11:69:31:BC X509v3 Authority Key Identifier: keyid:7C:A3:F2:C4:0F:E4:53:CE:E2:30:AF:59:49:85:B2:75:51:4F:5E:CF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/e6adae2a-47b6-4ae5-9c3f-3e8cb92a3987/0/7CA3F2C40FE453CEE230AF594985B275514F5ECF.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7CA3F2C40FE453CEE230AF594985B275514F5ECF.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e6adae2a-47b6-4ae5-9c3f-3e8cb92a3987/0/7CA3F2C40FE453CEE230AF594985B275514F5ECF.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b9:04:d0:23:1f:24:f9:25:11:04:fc:ef:d9:8c:97:d2:1f:01: d6:3a:1a:70:77:c8:c9:18:61:9e:0d:d3:a1:5b:59:7e:ab:94: 50:e7:69:ae:03:98:19:0a:75:85:d9:c3:c9:9f:ad:a4:5d:b6: 25:f9:dc:b1:33:6f:0a:03:2f:10:5b:f8:17:1a:a6:e8:18:9d: 31:5a:2e:e7:d5:20:df:0f:a4:de:b9:d4:37:e0:b8:f9:de:97: ed:e9:ce:98:43:8b:f5:8a:a4:08:d4:c4:89:cb:d8:5f:93:29: 33:40:c3:f4:15:73:87:1a:b9:e2:f7:55:07:8e:3a:66:7a:5b: 08:8a:ea:2e:f6:61:6e:96:7a:77:b6:d5:74:01:de:19:73:9c: 7f:f4:04:8c:5a:44:6e:e0:dd:7d:23:18:4a:c5:ce:62:3b:8e: 07:db:9b:42:ae:36:80:06:33:21:6d:e4:33:13:ee:2c:a9:70: 98:a9:98:91:48:8c:35:9f:66:36:c4:df:8c:c3:4d:a8:c0:c2: 25:24:70:6e:a7:e3:0c:ae:a4:78:00:51:4a:0b:96:60:17:9b: 2e:d0:6d:c5:81:3a:40:b3:12:f3:09:f8:9c:dc:07:62:83:f0: 69:94:14:fc:c5:ef:8d:69:ae:9b:f0:f5:3f:f0:30:36:86:fd: cd:79:f8:f7 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUPTJPGAsG/0PkkIvErYcILIg/e6QwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoN0NBM0YyQzQwRkU0NTNDRUUyMzBBRjU5NDk4NUIyNzU1 MTRGNUVDRjAeFw0yNTEyMDcwMjU2MjRaFw0yNTEyMTAwMzA5MjRaMDMxMTAvBgNV BAMTKEMyMjM2OTFGNTI0MEJCNDk3QTE5NzA4MjNBNkE3MzA4MTE2OTMxQkMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDie6ftj6pfxZZVO1qYZMlcWhYx dAtiPsv0750k8y3qUz+0KAN8iqv0sf57vV6APfoXoNSLgJsio2af/OPZPv/Wd8bp bVOrfSQU9rcQQe+S2PtrwoKi1COgrYTeejg5U/Rp2PFXRICOp2tx19iVY/b/P1C6 /VVp6Cz0u1B8K6kML6KTNqA7yOK7sT/MpycBsIwbRPckQOWX3QCI8Iu7JEvynhB9 qO1KrIJAp4SCvcGyJ3TYlOo8sLcOuK1LuBEne068UyyiioCkF8Avp4kgt9DNIr71 vVmVQe3r5d0uvuQ10CqcCUy786+5FzV532xb5is6v9O3zZDnzoEF6O9ImYlJAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUwiNpH1JAu0l6GXCCOmpzCBFpMbwwHwYDVR0j BBgwFoAUfKPyxA/kU87iMK9ZSYWydVFPXs8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l NmFkYWUyYS00N2I2LTRhZTUtOWMzZi0zZThjYjkyYTM5ODcvMC83Q0EzRjJDNDBG RTQ1M0NFRTIzMEFGNTk0OTg1QjI3NTUxNEY1RUNGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvN0NBM0YyQzQwRkU0NTNDRUUyMzBBRjU5NDk4NUIyNzU1MTRG NUVDRi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZTZhZGFlMmEtNDdiNi00YWU1LTlj M2YtM2U4Y2I5MmEzOTg3LzAvN0NBM0YyQzQwRkU0NTNDRUUyMzBBRjU5NDk4NUIy NzU1MTRGNUVDRi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALkE0CMfJPklEQT879mMl9IfAdY6GnB3yMkY YZ4N06FbWX6rlFDnaa4DmBkKdYXZw8mfraRdtiX53LEzbwoDLxBb+BcapugYnTFa LufVIN8PpN651DfguPnel+3pzphDi/WKpAjUxInL2F+TKTNAw/QVc4caueL3VQeO OmZ6WwiK6i72YW6Wene21XQB3hlznH/0BIxaRG7g3X0jGErFzmI7jgfbm0KuNoAG MyFt5DMT7iypcJipmJFIjDWfZjbE34zDTajAwiUkcG6n4wyupHgAUUoLlmAXmy7Q bcWBOkCzEvMJ+JzcB2KD8GmUFPzF741prpvw9T/wMDaG/c15+Pc= -----END CERTIFICATE-----Generated at Sun Dec 7 04:57:08 2025 by rpki-client