This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/0260cf16-74ff-4f2f-b56c-e581eaea251c/0/7C8592B080A17A9CE2F782DEA4C1297A97B60CDC.mft File: 7C8592B080A17A9CE2F782DEA4C1297A97B60CDC.mft (raw, json) Hash identifier: Uapr9VLmhnJZ7VsQDSw5aNWdej6Jm1oLb58N5oUO0Tg= Subject key identifier: B6:71:89:6F:84:B1:31:F3:BA:68:CE:59:A6:A8:84:57:FC:54:C2:7E Authority key identifier: 7C:85:92:B0:80:A1:7A:9C:E2:F7:82:DE:A4:C1:29:7A:97:B6:0C:DC Certificate issuer: /CN=7C8592B080A17A9CE2F782DEA4C1297A97B60CDC Certificate serial: 23AEAF68FF2F09DBB7E411C5D60A713230066CA2 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7C8592B080A17A9CE2F782DEA4C1297A97B60CDC.cer Subject info access: rsync://repo-rpki.idnic.net/repo/0260cf16-74ff-4f2f-b56c-e581eaea251c/0/7C8592B080A17A9CE2F782DEA4C1297A97B60CDC.mft Manifest number: 01CF Signing time: Mon 01 Dec 2025 18:11:36 +0000 Manifest this update: Mon 01 Dec 2025 18:06:36 +0000 Manifest next update: Fri 05 Dec 2025 02:54:36 +0000 Files and hashes: 1: 3130332e36382e3231332e302f32342d3234203d3e20313530353330.roa (hash: 2/Qb3c0bt3pvu3MOhYdRbpd22v0hv9oGMy4MRimk3NI=) 2: 7C8592B080A17A9CE2F782DEA4C1297A97B60CDC.crl (hash: Vj/w9J4QMlU0sKL5w2RpzfVcwq2zhhS2Iv6WAtkmj4o=) 3: 3130332e36382e3231322e302f32332d3234203d3e20313530353330.roa (hash: ZT9C4ozjXu7zgMyjGuykG3d8zzHdnxWgyq99AWHagU0=) 4: 3130332e36382e3231322e302f32342d3234203d3e20313530353330.roa (hash: TpxCUfp4Af1tupXiHm2v8CcxDZArBtsyxFgzO8Ydoi8=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/0260cf16-74ff-4f2f-b56c-e581eaea251c/0/7C8592B080A17A9CE2F782DEA4C1297A97B60CDC.crl rsync://repo-rpki.idnic.net/repo/0260cf16-74ff-4f2f-b56c-e581eaea251c/0/7C8592B080A17A9CE2F782DEA4C1297A97B60CDC.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7C8592B080A17A9CE2F782DEA4C1297A97B60CDC.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 05 Dec 2025 02:54:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 23:ae:af:68:ff:2f:09:db:b7:e4:11:c5:d6:0a:71:32:30:06:6c:a2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7C8592B080A17A9CE2F782DEA4C1297A97B60CDC Validity Not Before: Dec 1 18:06:36 2025 GMT Not After : Dec 5 02:54:36 2025 GMT Subject: CN=B671896F84B131F3BA68CE59A6A88457FC54C27E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:dd:06:b1:9d:1b:38:c4:6a:85:a9:e2:38:bc: dc:43:81:bc:93:5d:6f:50:a2:d9:bd:07:14:40:be: b5:5b:0a:e7:2b:47:a8:27:0b:6e:77:57:97:8d:43: 1e:dd:73:01:f5:e7:a2:89:9e:ac:af:99:91:25:e6: 63:e0:ba:91:26:8b:b4:b7:ab:4c:b3:97:b5:a5:8e: cc:4d:7d:bb:3e:90:3a:d5:17:8e:c0:8e:fe:d8:1c: b6:0f:2a:5f:e1:9a:cd:6a:fa:18:46:4d:7c:1f:62: 8d:23:ec:86:3e:bd:6d:20:94:9b:f6:9e:49:38:5d: 1d:19:b3:01:1c:60:58:0e:4f:c9:4b:93:42:ad:9b: ed:6b:91:d8:20:5b:7a:99:84:b8:c4:6e:a6:80:96: 12:eb:44:4e:0d:24:f6:45:5c:0e:1b:00:45:f3:b7: e9:cf:92:52:92:ce:58:99:46:d6:f8:15:d7:11:a7: 16:4f:6f:65:c1:1a:90:f9:cc:82:12:ad:ec:a1:0e: 6c:e1:0f:09:6e:90:f3:ff:89:e5:59:0b:8e:81:5c: 6d:47:90:00:80:54:b8:3b:0c:f8:c5:fa:43:a9:e1: 51:ce:9b:c5:09:8a:74:20:f4:56:6d:23:22:ea:f1: bd:be:b8:e0:e9:29:99:bc:0c:5b:d7:46:0f:74:67: a6:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B6:71:89:6F:84:B1:31:F3:BA:68:CE:59:A6:A8:84:57:FC:54:C2:7E X509v3 Authority Key Identifier: keyid:7C:85:92:B0:80:A1:7A:9C:E2:F7:82:DE:A4:C1:29:7A:97:B6:0C:DC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/0260cf16-74ff-4f2f-b56c-e581eaea251c/0/7C8592B080A17A9CE2F782DEA4C1297A97B60CDC.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7C8592B080A17A9CE2F782DEA4C1297A97B60CDC.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/0260cf16-74ff-4f2f-b56c-e581eaea251c/0/7C8592B080A17A9CE2F782DEA4C1297A97B60CDC.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 91:86:c1:c6:a8:db:df:7c:bc:c8:3c:08:e4:84:f4:37:8d:c4: ec:ff:d2:67:a3:aa:a5:dc:68:c8:dd:53:27:cb:8f:f5:22:06: 9d:4a:b4:1e:14:a4:9f:8f:57:d8:2b:b6:2b:85:6d:5d:cf:dc: 0e:e6:73:3e:46:97:27:fb:15:8f:ee:1c:09:9f:4a:8e:57:6b: 70:0d:9e:90:de:50:89:cd:53:41:1b:a1:33:fb:34:d0:ce:f8: d5:57:ad:23:09:08:ed:65:a7:eb:42:62:98:d7:93:07:cb:fa: ff:48:42:49:e7:f8:d4:39:a8:6e:0e:ca:e4:eb:60:21:88:af: d9:3e:4f:0f:43:3b:0c:da:cc:3f:f7:40:8e:24:24:d1:2a:c6: e4:0b:a2:f5:1b:e7:b6:de:51:e9:19:07:16:7f:97:cf:b0:c8: 18:a9:d5:d8:1d:c5:e0:a5:d8:93:ba:a1:2b:1c:4e:27:e7:9b: 5d:96:e9:05:b1:cc:19:f0:cd:3a:13:90:87:16:3a:df:03:c1: 94:cd:bd:2b:49:15:62:a4:1c:0f:74:e0:e8:b9:d1:ea:2e:30: 0d:44:8a:a2:f7:94:0b:7e:a8:15:8f:74:db:49:80:f3:19:06: 6e:4c:3d:82:45:07:97:7d:39:83:c8:6e:02:d9:da:98:80:ca: 01:a3:fb:42 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUI66vaP8vCdu35BHF1gpxMjAGbKIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoN0M4NTkyQjA4MEExN0E5Q0UyRjc4MkRFQTRDMTI5N0E5 N0I2MENEQzAeFw0yNTEyMDExODA2MzZaFw0yNTEyMDUwMjU0MzZaMDMxMTAvBgNV BAMTKEI2NzE4OTZGODRCMTMxRjNCQTY4Q0U1OUE2QTg4NDU3RkM1NEMyN0UwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDU3QaxnRs4xGqFqeI4vNxDgbyT XW9Qotm9BxRAvrVbCucrR6gnC253V5eNQx7dcwH156KJnqyvmZEl5mPgupEmi7S3 q0yzl7WljsxNfbs+kDrVF47Ajv7YHLYPKl/hms1q+hhGTXwfYo0j7IY+vW0glJv2 nkk4XR0ZswEcYFgOT8lLk0Ktm+1rkdggW3qZhLjEbqaAlhLrRE4NJPZFXA4bAEXz t+nPklKSzliZRtb4FdcRpxZPb2XBGpD5zIISreyhDmzhDwlukPP/ieVZC46BXG1H kACAVLg7DPjF+kOp4VHOm8UJinQg9FZtIyLq8b2+uODpKZm8DFvXRg90Z6ZXAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUtnGJb4SxMfO6aM5ZpqiEV/xUwn4wHwYDVR0j BBgwFoAUfIWSsIChepzi94LepMEpepe2DNwwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w MjYwY2YxNi03NGZmLTRmMmYtYjU2Yy1lNTgxZWFlYTI1MWMvMC83Qzg1OTJCMDgw QTE3QTlDRTJGNzgyREVBNEMxMjk3QTk3QjYwQ0RDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvN0M4NTkyQjA4MEExN0E5Q0UyRjc4MkRFQTRDMTI5N0E5N0I2 MENEQy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMDI2MGNmMTYtNzRmZi00ZjJmLWI1 NmMtZTU4MWVhZWEyNTFjLzAvN0M4NTkyQjA4MEExN0E5Q0UyRjc4MkRFQTRDMTI5 N0E5N0I2MENEQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJGGwcao2998vMg8COSE9DeNxOz/0mejqqXc aMjdUyfLj/UiBp1KtB4UpJ+PV9grtiuFbV3P3A7mcz5Glyf7FY/uHAmfSo5Xa3AN npDeUInNU0EboTP7NNDO+NVXrSMJCO1lp+tCYpjXkwfL+v9IQknn+NQ5qG4OyuTr YCGIr9k+Tw9DOwzazD/3QI4kJNEqxuQLovUb57beUekZBxZ/l8+wyBip1dgdxeCl 2JO6oSscTifnm12W6QWxzBnwzToTkIcWOt8DwZTNvStJFWKkHA904Oi50eouMA1E iqL3lAt+qBWPdNtJgPMZBm5MPYJFB5d9OYPIbgLZ2piAygGj+0I= -----END CERTIFICATE-----Generated at Wed Dec 3 15:28:41 2025 by rpki-client