This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/e9f575db-c738-4b8e-b36a-6b020c66849d/0/C7F3F7AC648C6073C7FE736271A1A8E7277962B7.mft File: C7F3F7AC648C6073C7FE736271A1A8E7277962B7.mft (raw, json) Hash identifier: j4yjcZj6Q/2hzO1WAqhdVEe8KGnFzm9JvTMRznQlceU= Subject key identifier: 80:E8:D5:3F:5C:DE:D3:AF:61:35:D3:2D:5A:31:17:E8:F7:78:33:F8 Authority key identifier: C7:F3:F7:AC:64:8C:60:73:C7:FE:73:62:71:A1:A8:E7:27:79:62:B7 Certificate issuer: /CN=C7F3F7AC648C6073C7FE736271A1A8E7277962B7 Certificate serial: 755C401A4F20070D8923AC2A00BC860BB766DEC4 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C7F3F7AC648C6073C7FE736271A1A8E7277962B7.cer Subject info access: rsync://repo-rpki.idnic.net/repo/e9f575db-c738-4b8e-b36a-6b020c66849d/0/C7F3F7AC648C6073C7FE736271A1A8E7277962B7.mft Manifest number: 0154 Signing time: Sun 07 Dec 2025 01:51:33 +0000 Manifest this update: Sun 07 Dec 2025 01:46:33 +0000 Manifest next update: Wed 10 Dec 2025 09:24:33 +0000 Files and hashes: 1: 3130332e3134342e3132382e302f32332d3233203d3e20313339343333.roa (hash: NWx313Eak6ryGXrEQpkxOKGoXHPpAIUkV1kgoiWIcbI=) 2: 3130332e3134342e3132382e302f32342d3234203d3e20313339343333.roa (hash: qJyum2At3OQ0/Mui5d66zUzvrRUlMyLgYJNLgluGsro=) 3: 3130332e3134342e3132392e302f32342d3234203d3e20313339343333.roa (hash: 8BRGIjefty8sLc1ZfWkrubhQIyt7J7+He/FXFv8R2Vs=) 4: C7F3F7AC648C6073C7FE736271A1A8E7277962B7.crl (hash: DZwZqL40gJvbBqScN45mDUgdIakZ24NUU/PIuGTdz9g=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/e9f575db-c738-4b8e-b36a-6b020c66849d/0/C7F3F7AC648C6073C7FE736271A1A8E7277962B7.crl rsync://repo-rpki.idnic.net/repo/e9f575db-c738-4b8e-b36a-6b020c66849d/0/C7F3F7AC648C6073C7FE736271A1A8E7277962B7.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C7F3F7AC648C6073C7FE736271A1A8E7277962B7.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 09 Dec 2025 15:57:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 75:5c:40:1a:4f:20:07:0d:89:23:ac:2a:00:bc:86:0b:b7:66:de:c4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C7F3F7AC648C6073C7FE736271A1A8E7277962B7 Validity Not Before: Dec 7 01:46:33 2025 GMT Not After : Dec 10 09:24:33 2025 GMT Subject: CN=80E8D53F5CDED3AF6135D32D5A3117E8F77833F8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:90:5f:e0:0c:5f:76:cb:95:93:12:7c:a0:95: cf:c0:39:6c:6d:b4:f0:0e:e5:7b:c8:0e:74:30:d3: 56:e6:1c:b5:1b:75:79:27:80:35:02:bc:66:d2:a3: 6b:ca:27:f7:a2:e9:0c:b0:bb:a5:3d:2c:29:8c:27: 5a:40:e7:18:6d:a6:a0:e0:7d:c2:d5:8e:5c:27:ea: eb:be:78:dc:23:0b:e7:e2:a4:c6:ab:bf:a6:f9:00: 9f:c2:5d:b2:c9:e8:bb:40:84:c2:d9:b8:c8:ef:71: 97:9b:ef:2f:6b:25:50:78:b7:f3:49:79:f7:63:0f: e8:88:20:5e:04:27:34:24:23:2d:29:56:7e:8f:07: a5:7d:80:86:51:75:f3:fe:ea:7d:e5:1e:3a:89:71: f1:ab:ff:bc:41:d6:cf:e6:33:c2:f2:c8:19:41:b0: 85:10:d3:42:9d:65:bd:f8:2b:11:6d:02:1f:7a:c0: 1b:da:87:16:76:88:85:60:a9:64:81:42:4e:7e:54: 99:7c:5a:a4:a6:86:14:04:f8:1f:09:3e:93:63:50: dd:f5:16:c6:f6:ab:88:52:5c:d7:05:a4:d7:fc:34: 3d:dc:da:74:33:af:19:30:a1:c8:c7:54:2c:da:4f: 3d:d8:9a:00:fa:59:07:3d:5a:e2:79:98:93:f5:10: 10:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 80:E8:D5:3F:5C:DE:D3:AF:61:35:D3:2D:5A:31:17:E8:F7:78:33:F8 X509v3 Authority Key Identifier: keyid:C7:F3:F7:AC:64:8C:60:73:C7:FE:73:62:71:A1:A8:E7:27:79:62:B7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/e9f575db-c738-4b8e-b36a-6b020c66849d/0/C7F3F7AC648C6073C7FE736271A1A8E7277962B7.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C7F3F7AC648C6073C7FE736271A1A8E7277962B7.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e9f575db-c738-4b8e-b36a-6b020c66849d/0/C7F3F7AC648C6073C7FE736271A1A8E7277962B7.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4d:0c:e0:db:08:10:29:ef:bc:dc:42:52:30:09:58:45:5c:30: cb:77:49:3e:26:47:f5:7b:38:43:d0:94:cf:73:74:5e:28:46: aa:a3:66:4e:2a:ce:78:29:bf:68:fe:46:19:db:90:6f:29:01: a9:db:4e:ca:a4:fe:43:ec:4d:cf:8a:19:88:7b:66:2c:e0:bf: 45:80:3f:ed:73:4b:48:b4:06:e3:b9:c2:21:8c:51:6f:bf:db: c0:84:23:4d:55:59:dd:d7:6c:b8:cd:2f:47:0a:f8:b3:8f:1f: 69:47:39:9c:df:bf:5e:00:26:09:d8:3b:79:51:79:28:bb:68: 70:fc:ee:c4:fd:e3:c0:a2:4d:96:23:a3:e2:8b:33:9a:f2:19: 07:ed:e5:7c:6f:bc:e7:51:cc:8f:ac:b5:bf:b4:21:4f:09:ed: 78:aa:6e:22:f7:4c:78:5f:23:00:63:77:fd:44:f5:18:2a:e0: d2:76:85:90:11:cd:a9:46:47:21:01:b7:17:87:e4:15:4c:b3: 7d:4d:30:8d:1e:b2:b8:81:e7:56:ed:a7:18:07:20:3c:f1:ff: 31:b8:28:31:76:eb:0b:79:58:d2:bf:ab:7c:d3:a4:03:b4:a2: a3:fd:70:cb:de:d1:fd:b0:c5:e0:b7:ff:b2:6c:bc:68:2e:cb: ad:a0:99:bb -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUdVxAGk8gBw2JI6wqALyGC7dm3sQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzdGM0Y3QUM2NDhDNjA3M0M3RkU3MzYyNzFBMUE4RTcy Nzc5NjJCNzAeFw0yNTEyMDcwMTQ2MzNaFw0yNTEyMTAwOTI0MzNaMDMxMTAvBgNV BAMTKDgwRThENTNGNUNERUQzQUY2MTM1RDMyRDVBMzExN0U4Rjc3ODMzRjgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC6kF/gDF92y5WTEnyglc/AOWxt tPAO5XvIDnQw01bmHLUbdXkngDUCvGbSo2vKJ/ei6Qywu6U9LCmMJ1pA5xhtpqDg fcLVjlwn6uu+eNwjC+fipMarv6b5AJ/CXbLJ6LtAhMLZuMjvcZeb7y9rJVB4t/NJ efdjD+iIIF4EJzQkIy0pVn6PB6V9gIZRdfP+6n3lHjqJcfGr/7xB1s/mM8LyyBlB sIUQ00KdZb34KxFtAh96wBvahxZ2iIVgqWSBQk5+VJl8WqSmhhQE+B8JPpNjUN31 Fsb2q4hSXNcFpNf8ND3c2nQzrxkwocjHVCzaTz3YmgD6WQc9WuJ5mJP1EBBJAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUgOjVP1ze069hNdMtWjEX6Pd4M/gwHwYDVR0j BBgwFoAUx/P3rGSMYHPH/nNicaGo5yd5YrcwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l OWY1NzVkYi1jNzM4LTRiOGUtYjM2YS02YjAyMGM2Njg0OWQvMC9DN0YzRjdBQzY0 OEM2MDczQzdGRTczNjI3MUExQThFNzI3Nzk2MkI3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQzdGM0Y3QUM2NDhDNjA3M0M3RkU3MzYyNzFBMUE4RTcyNzc5 NjJCNy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZTlmNTc1ZGItYzczOC00YjhlLWIz NmEtNmIwMjBjNjY4NDlkLzAvQzdGM0Y3QUM2NDhDNjA3M0M3RkU3MzYyNzFBMUE4 RTcyNzc5NjJCNy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAE0M4NsIECnvvNxCUjAJWEVcMMt3ST4mR/V7 OEPQlM9zdF4oRqqjZk4qzngpv2j+RhnbkG8pAanbTsqk/kPsTc+KGYh7Zizgv0WA P+1zS0i0BuO5wiGMUW+/28CEI01VWd3XbLjNL0cK+LOPH2lHOZzfv14AJgnYO3lR eSi7aHD87sT948CiTZYjo+KLM5ryGQft5XxvvOdRzI+stb+0IU8J7XiqbiL3THhf IwBjd/1E9Rgq4NJ2hZARzalGRyEBtxeH5BVMs31NMI0esriB51btpxgHIDzx/zG4 KDF26wt5WNK/q3zTpAO0oqP9cMve0f2wxeC3/7JsvGguy62gmbs= -----END CERTIFICATE-----Generated at Sun Dec 7 03:35:26 2025 by rpki-client