This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/f700292f-2868-47b3-ac21-600a467a7237/0/7F8FE9F94ED4A8F169D2C8A37966D06216684756.mft File: 7F8FE9F94ED4A8F169D2C8A37966D06216684756.mft (raw, json) Hash identifier: LqdQRlOlcVmZG48uUEsJJvw0LF1W/ePE62vtVsTZx9k= Subject key identifier: 7F:D9:EA:53:52:83:32:6E:52:D7:99:AC:3F:03:71:57:8E:45:C2:55 Authority key identifier: 7F:8F:E9:F9:4E:D4:A8:F1:69:D2:C8:A3:79:66:D0:62:16:68:47:56 Certificate issuer: /CN=7F8FE9F94ED4A8F169D2C8A37966D06216684756 Certificate serial: 331817E9114E85755E333A3714D19DD8C70EC970 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7F8FE9F94ED4A8F169D2C8A37966D06216684756.cer Subject info access: rsync://repo-rpki.idnic.net/repo/f700292f-2868-47b3-ac21-600a467a7237/0/7F8FE9F94ED4A8F169D2C8A37966D06216684756.mft Manifest number: D6 Signing time: Fri 05 Dec 2025 11:30:01 +0000 Manifest this update: Fri 05 Dec 2025 11:25:01 +0000 Manifest next update: Mon 08 Dec 2025 16:46:01 +0000 Files and hashes: 1: 7F8FE9F94ED4A8F169D2C8A37966D06216684756.crl (hash: dKdxztaQ+GeDn7R87C689RNw1ZHRdU0kGaKavtw0OHQ=) 2: 33362e35302e3135342e302f32332d3234203d3e20313532303738.roa (hash: Op7L0f6zgAVUDBqJ1dF3rBL4LfH2t/QTkoViKXEVCPk=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/f700292f-2868-47b3-ac21-600a467a7237/0/7F8FE9F94ED4A8F169D2C8A37966D06216684756.crl rsync://repo-rpki.idnic.net/repo/f700292f-2868-47b3-ac21-600a467a7237/0/7F8FE9F94ED4A8F169D2C8A37966D06216684756.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7F8FE9F94ED4A8F169D2C8A37966D06216684756.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 08 Dec 2025 16:46:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 33:18:17:e9:11:4e:85:75:5e:33:3a:37:14:d1:9d:d8:c7:0e:c9:70 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7F8FE9F94ED4A8F169D2C8A37966D06216684756 Validity Not Before: Dec 5 11:25:01 2025 GMT Not After : Dec 8 16:46:01 2025 GMT Subject: CN=7FD9EA535283326E52D799AC3F0371578E45C255 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:b2:83:bc:06:cc:50:14:cb:a2:68:fe:17:08: 43:25:8b:de:af:fb:b9:b0:ad:c7:d0:8f:49:44:29: cf:e3:47:3f:70:3e:8a:e8:de:5d:ea:10:61:a2:4c: 30:dc:2a:3b:05:b6:4a:f1:57:ec:82:30:e9:f2:7e: 62:4d:fd:1e:10:11:ea:f4:30:3c:57:47:90:fa:66: 6a:94:0d:b9:93:9b:ac:c0:b3:f7:89:8a:ac:b0:38: b5:9a:ee:72:1f:d3:e1:84:ea:f7:8f:00:51:4f:6b: a8:92:4b:fa:a7:ee:07:33:c1:c5:bb:32:1c:5d:07: 26:f1:18:96:cb:5d:77:d2:0b:42:09:79:61:f1:c0: de:92:c8:3b:2d:35:8f:65:e0:9c:50:a3:33:b9:b3: 55:8c:95:a3:20:f3:ab:71:3b:14:02:ec:c6:45:77: d2:5a:a7:1f:54:42:cc:3e:87:36:61:89:26:c9:be: 99:9a:f0:60:6e:62:bd:67:34:85:fe:28:eb:72:55: 14:54:48:ce:36:0a:26:d5:ea:17:7a:94:17:a6:c0: 70:d7:13:b2:07:5c:15:fa:d3:af:5e:10:fb:3c:07: 9e:79:44:3d:20:cd:37:d9:67:e7:a0:49:b3:97:9e: 22:e1:69:2b:54:af:b4:92:14:98:65:26:1c:d4:60: 5f:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7F:D9:EA:53:52:83:32:6E:52:D7:99:AC:3F:03:71:57:8E:45:C2:55 X509v3 Authority Key Identifier: keyid:7F:8F:E9:F9:4E:D4:A8:F1:69:D2:C8:A3:79:66:D0:62:16:68:47:56 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/f700292f-2868-47b3-ac21-600a467a7237/0/7F8FE9F94ED4A8F169D2C8A37966D06216684756.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7F8FE9F94ED4A8F169D2C8A37966D06216684756.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f700292f-2868-47b3-ac21-600a467a7237/0/7F8FE9F94ED4A8F169D2C8A37966D06216684756.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 19:aa:fc:65:db:75:a7:ee:71:02:ab:fb:a6:ff:d1:76:89:70: d1:64:50:a7:ce:26:47:cc:90:f4:bb:95:9e:26:b6:8d:d0:8d: 40:c0:9c:7e:db:1d:2c:4d:8b:9d:7c:0c:72:94:3b:11:4d:3f: 4e:a0:70:33:95:f6:64:66:50:cd:b7:57:e5:67:19:87:2d:31: 3f:ee:c0:fd:54:a2:d1:bf:06:26:29:71:aa:2b:96:92:b6:2a: 27:a6:11:4e:29:aa:80:2a:20:64:ec:18:c6:79:44:63:ad:7e: 58:10:85:3f:58:95:3d:4b:57:8e:94:a2:48:0e:53:f6:4a:6d: 5e:60:78:ad:c9:61:ec:0a:45:a7:b6:52:0b:4d:ab:52:6b:12: 3c:4d:ca:c6:40:44:95:45:bc:63:a4:95:8e:fb:42:bc:1c:e1: 7e:5b:a9:30:1f:ba:51:72:26:b3:ea:f2:2f:75:a6:e9:49:e9: d0:f4:7f:5b:9b:ad:79:81:00:2c:6e:83:22:6c:96:54:19:b8: db:ca:30:48:e0:41:f8:c2:b2:3d:08:ae:01:e4:9f:02:7a:f6: c6:29:fa:67:67:7f:75:1b:56:ca:a3:7d:37:91:fd:09:42:ec: 45:32:be:07:e4:f2:92:ab:c2:ac:f3:28:78:5f:a4:35:47:73: df:80:60:85 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUMxgX6RFOhXVeMzo3FNGd2McOyXAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoN0Y4RkU5Rjk0RUQ0QThGMTY5RDJDOEEzNzk2NkQwNjIx NjY4NDc1NjAeFw0yNTEyMDUxMTI1MDFaFw0yNTEyMDgxNjQ2MDFaMDMxMTAvBgNV BAMTKDdGRDlFQTUzNTI4MzMyNkU1MkQ3OTlBQzNGMDM3MTU3OEU0NUMyNTUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCvsoO8BsxQFMuiaP4XCEMli96v +7mwrcfQj0lEKc/jRz9wPoro3l3qEGGiTDDcKjsFtkrxV+yCMOnyfmJN/R4QEer0 MDxXR5D6ZmqUDbmTm6zAs/eJiqywOLWa7nIf0+GE6vePAFFPa6iSS/qn7gczwcW7 MhxdBybxGJbLXXfSC0IJeWHxwN6SyDstNY9l4JxQozO5s1WMlaMg86txOxQC7MZF d9Japx9UQsw+hzZhiSbJvpma8GBuYr1nNIX+KOtyVRRUSM42CibV6hd6lBemwHDX E7IHXBX6069eEPs8B555RD0gzTfZZ+egSbOXniLhaStUr7SSFJhlJhzUYF+vAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUf9nqU1KDMm5S15msPwNxV45FwlUwHwYDVR0j BBgwFoAUf4/p+U7UqPFp0sijeWbQYhZoR1YwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m NzAwMjkyZi0yODY4LTQ3YjMtYWMyMS02MDBhNDY3YTcyMzcvMC83RjhGRTlGOTRF RDRBOEYxNjlEMkM4QTM3OTY2RDA2MjE2Njg0NzU2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvN0Y4RkU5Rjk0RUQ0QThGMTY5RDJDOEEzNzk2NkQwNjIxNjY4 NDc1Ni5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZjcwMDI5MmYtMjg2OC00N2IzLWFj MjEtNjAwYTQ2N2E3MjM3LzAvN0Y4RkU5Rjk0RUQ0QThGMTY5RDJDOEEzNzk2NkQw NjIxNjY4NDc1Ni5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABmq/GXbdafucQKr+6b/0XaJcNFkUKfOJkfM kPS7lZ4mto3QjUDAnH7bHSxNi518DHKUOxFNP06gcDOV9mRmUM23V+VnGYctMT/u wP1UotG/BiYpcaorlpK2KiemEU4pqoAqIGTsGMZ5RGOtflgQhT9YlT1LV46UokgO U/ZKbV5geK3JYewKRae2UgtNq1JrEjxNysZARJVFvGOklY77Qrwc4X5bqTAfulFy JrPq8i91pulJ6dD0f1ubrXmBACxugyJsllQZuNvKMEjgQfjCsj0IrgHknwJ69sYp +mdnf3UbVsqjfTeR/QlC7EUyvgfk8pKrwqzzKHhfpDVHc9+AYIU= -----END CERTIFICATE-----Generated at Sun Dec 7 02:54:48 2025 by rpki-client