This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/0463ae7c-a6ff-4fd8-96f2-0ba1880133c7/0/B7959E04EF090801395CE53E099D09F7AF2EF81B.mft File: B7959E04EF090801395CE53E099D09F7AF2EF81B.mft (raw, json) Hash identifier: Pyn3XXEceC9dJ25ARd6O4tHU2Myq9n6IlGQGfHS/evY= Subject key identifier: CA:74:5A:B0:D2:48:45:0D:C3:B2:2E:9B:4B:77:8C:98:98:0C:E6:9B Authority key identifier: B7:95:9E:04:EF:09:08:01:39:5C:E5:3E:09:9D:09:F7:AF:2E:F8:1B Certificate issuer: /CN=B7959E04EF090801395CE53E099D09F7AF2EF81B Certificate serial: 6714F6B53C827FD5EEC7C31A044D1028E2D8116D Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B7959E04EF090801395CE53E099D09F7AF2EF81B.cer Subject info access: rsync://repo-rpki.idnic.net/repo/0463ae7c-a6ff-4fd8-96f2-0ba1880133c7/0/B7959E04EF090801395CE53E099D09F7AF2EF81B.mft Manifest number: 021D Signing time: Mon 01 Dec 2025 22:01:04 +0000 Manifest this update: Mon 01 Dec 2025 21:56:04 +0000 Manifest next update: Fri 05 Dec 2025 04:41:04 +0000 Files and hashes: 1: 3230332e3131342e3232372e302f32342d3234203d3e203435373033.roa (hash: S8koCw5Zpdz9WUfwrWHvdyG3BqQzOLzzd7o5WN4coH4=) 2: 3230332e3131342e3232362e302f32342d3234203d3e203435373033.roa (hash: 1cX8i6kVHz142LzobmEyC/+1K1VM1wldny1qyaPLfIA=) 3: B7959E04EF090801395CE53E099D09F7AF2EF81B.crl (hash: LOXh/4pFFsS46LaaQ3Xf1T6I4c6uEy0XMI46z89dD0o=) 4: 3230332e3131342e3232362e302f32332d3233203d3e203435373033.roa (hash: 6Ec3PjRbQ83AgMPSDqdSdFcRTMZUzCno6pS4ublkNCA=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/0463ae7c-a6ff-4fd8-96f2-0ba1880133c7/0/B7959E04EF090801395CE53E099D09F7AF2EF81B.crl rsync://repo-rpki.idnic.net/repo/0463ae7c-a6ff-4fd8-96f2-0ba1880133c7/0/B7959E04EF090801395CE53E099D09F7AF2EF81B.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B7959E04EF090801395CE53E099D09F7AF2EF81B.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 05 Dec 2025 04:41:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 67:14:f6:b5:3c:82:7f:d5:ee:c7:c3:1a:04:4d:10:28:e2:d8:11:6d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B7959E04EF090801395CE53E099D09F7AF2EF81B Validity Not Before: Dec 1 21:56:04 2025 GMT Not After : Dec 5 04:41:04 2025 GMT Subject: CN=CA745AB0D248450DC3B22E9B4B778C98980CE69B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:66:6f:a2:d6:49:11:c9:6b:5e:92:14:e3:70: 0f:fe:a6:15:32:91:ae:5d:3e:05:cf:d7:8b:3a:e5: 8e:0a:c5:33:ca:ea:87:80:88:45:19:7d:b6:ef:d4: ce:16:cb:9a:e0:f3:d1:9d:97:6a:25:01:3c:3f:81: f4:89:43:cf:63:f3:84:97:57:f7:e0:0a:6b:d7:07: 5d:b4:75:48:d9:ec:7f:e8:29:0c:bd:48:ee:08:22: 14:7b:3c:88:68:ae:18:e6:b3:2e:fb:8b:68:d2:ce: e2:a9:0c:b7:93:1a:a9:ab:1d:98:f7:87:b9:e1:d6: c2:b2:4c:5a:ac:49:42:36:b7:d9:28:2d:d2:9e:70: af:df:0a:86:cf:55:90:b6:b2:65:59:53:5a:e8:d6: 7f:59:3e:6d:07:4e:2e:0e:91:95:6d:04:3e:ea:ae: b8:92:2b:31:72:5a:1c:4d:81:89:de:c7:6f:4b:0b: d1:be:fe:76:2c:a6:e4:24:8c:0f:f0:63:29:8a:fe: 46:13:6f:35:eb:98:7e:e9:6b:ab:3e:e4:91:60:a1: f6:34:93:32:ae:e8:b9:2e:c8:89:28:b1:b7:6b:f9: ba:dc:90:37:37:79:6a:28:6e:16:ed:ee:73:dc:af: e2:36:d0:77:6c:f5:0c:cf:24:0b:38:b0:db:e7:3a: b3:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:74:5A:B0:D2:48:45:0D:C3:B2:2E:9B:4B:77:8C:98:98:0C:E6:9B X509v3 Authority Key Identifier: keyid:B7:95:9E:04:EF:09:08:01:39:5C:E5:3E:09:9D:09:F7:AF:2E:F8:1B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/0463ae7c-a6ff-4fd8-96f2-0ba1880133c7/0/B7959E04EF090801395CE53E099D09F7AF2EF81B.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B7959E04EF090801395CE53E099D09F7AF2EF81B.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/0463ae7c-a6ff-4fd8-96f2-0ba1880133c7/0/B7959E04EF090801395CE53E099D09F7AF2EF81B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1f:c8:f8:65:82:22:24:74:4f:9e:6d:a2:39:5d:f1:64:fd:b2: 0e:ef:ab:34:e5:88:db:9b:d1:02:dc:4c:1a:ed:6d:83:25:29: 33:fc:3f:30:9f:ef:45:fe:12:9b:3d:24:c4:ce:16:7a:c8:de: 60:9b:5c:29:0a:96:7e:b1:56:1c:aa:dd:dc:6e:a1:e3:cc:a8: b9:6d:30:1b:cb:64:7c:79:60:18:00:cb:e0:07:ae:a8:d4:7e: 86:58:d9:8a:12:c3:c0:47:ee:78:8a:c1:70:ff:d6:1a:39:4d: a7:56:89:46:9f:7e:61:a9:ff:5f:6b:66:e3:55:2e:f0:4b:8b: d8:01:a2:0d:4b:0a:a4:18:b8:ce:61:8f:5d:ed:2f:15:27:dc: c4:66:8e:45:3e:19:56:9e:c8:18:98:af:7a:91:60:1f:2a:70: e6:4f:0f:64:34:ad:16:37:63:ee:0c:ba:79:5c:33:74:e1:6b: 8f:ae:6c:8f:84:f5:a2:ff:f4:b7:21:a1:d1:4b:71:3c:18:35: 28:f2:47:6b:e0:d8:a5:8f:d3:84:50:17:39:b0:d8:72:fb:f4: 16:5a:53:28:e6:36:2b:b4:53:fc:56:53:7d:0d:6f:4b:c5:ba: 23:5e:35:70:74:69:66:88:54:b6:5c:4c:5e:e9:df:b6:2e:88: 82:3e:e4:11 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUZxT2tTyCf9Xux8MaBE0QKOLYEW0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjc5NTlFMDRFRjA5MDgwMTM5NUNFNTNFMDk5RDA5RjdB RjJFRjgxQjAeFw0yNTEyMDEyMTU2MDRaFw0yNTEyMDUwNDQxMDRaMDMxMTAvBgNV BAMTKENBNzQ1QUIwRDI0ODQ1MERDM0IyMkU5QjRCNzc4Qzk4OTgwQ0U2OUIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQChZm+i1kkRyWtekhTjcA/+phUy ka5dPgXP14s65Y4KxTPK6oeAiEUZfbbv1M4Wy5rg89Gdl2olATw/gfSJQ89j84SX V/fgCmvXB120dUjZ7H/oKQy9SO4IIhR7PIhorhjmsy77i2jSzuKpDLeTGqmrHZj3 h7nh1sKyTFqsSUI2t9koLdKecK/fCobPVZC2smVZU1ro1n9ZPm0HTi4OkZVtBD7q rriSKzFyWhxNgYnex29LC9G+/nYspuQkjA/wYymK/kYTbzXrmH7pa6s+5JFgofY0 kzKu6LkuyIkosbdr+brckDc3eWoobhbt7nPcr+I20Hds9QzPJAs4sNvnOrPHAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUynRasNJIRQ3Dsi6bS3eMmJgM5pswHwYDVR0j BBgwFoAUt5WeBO8JCAE5XOU+CZ0J968u+BswDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w NDYzYWU3Yy1hNmZmLTRmZDgtOTZmMi0wYmExODgwMTMzYzcvMC9CNzk1OUUwNEVG MDkwODAxMzk1Q0U1M0UwOTlEMDlGN0FGMkVGODFCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQjc5NTlFMDRFRjA5MDgwMTM5NUNFNTNFMDk5RDA5RjdBRjJF RjgxQi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMDQ2M2FlN2MtYTZmZi00ZmQ4LTk2 ZjItMGJhMTg4MDEzM2M3LzAvQjc5NTlFMDRFRjA5MDgwMTM5NUNFNTNFMDk5RDA5 RjdBRjJFRjgxQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAB/I+GWCIiR0T55tojld8WT9sg7vqzTliNub 0QLcTBrtbYMlKTP8PzCf70X+Eps9JMTOFnrI3mCbXCkKln6xVhyq3dxuoePMqLlt MBvLZHx5YBgAy+AHrqjUfoZY2YoSw8BH7niKwXD/1ho5TadWiUaffmGp/19rZuNV LvBLi9gBog1LCqQYuM5hj13tLxUn3MRmjkU+GVaeyBiYr3qRYB8qcOZPD2Q0rRY3 Y+4MunlcM3Tha4+ubI+E9aL/9LchodFLcTwYNSjyR2vg2KWP04RQFzmw2HL79BZa UyjmNiu0U/xWU30Nb0vFuiNeNXB0aWaIVLZcTF7p37YuiII+5BE= -----END CERTIFICATE-----Generated at Wed Dec 3 14:55:20 2025 by rpki-client