This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/07c8a0c3-37f5-4667-a430-6fa111d343aa/0/7433AB64571BE1827F0BC97ED291976B6E3429FA.mft File: 7433AB64571BE1827F0BC97ED291976B6E3429FA.mft (raw, json) Hash identifier: l8OXf6/0UcgbEm4G/HaGbyvCD1eGSSglfrbwqws06sA= Subject key identifier: FF:1E:1B:35:D0:7B:9F:DE:45:7A:AA:DF:16:70:1B:48:47:6E:56:6A Authority key identifier: 74:33:AB:64:57:1B:E1:82:7F:0B:C9:7E:D2:91:97:6B:6E:34:29:FA Certificate issuer: /CN=7433AB64571BE1827F0BC97ED291976B6E3429FA Certificate serial: 7471B64EDC54C2F4752888447644FCB2FB9FEFCF Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7433AB64571BE1827F0BC97ED291976B6E3429FA.cer Subject info access: rsync://repo-rpki.idnic.net/repo/07c8a0c3-37f5-4667-a430-6fa111d343aa/0/7433AB64571BE1827F0BC97ED291976B6E3429FA.mft Manifest number: 01CD Signing time: Mon 15 Dec 2025 10:22:23 +0000 Manifest this update: Mon 15 Dec 2025 10:17:23 +0000 Manifest next update: Thu 18 Dec 2025 21:07:23 +0000 Files and hashes: 1: 3130332e37352e36322e302f32342d3234203d3e20313530353339.roa (hash: U3QvM9qWK+TJhBGDojanDKA8oPNCYIB5ZhNuA/z08gw=) 2: 7433AB64571BE1827F0BC97ED291976B6E3429FA.crl (hash: 3K3FDes/kyGecazrKwMCwJB3Vz8wyWbae0WBi/LTMhY=) 3: 3130332e37352e36322e302f32332d3234203d3e20313530353339.roa (hash: 96CJnoxRV4HGvhsn3PFsL8qIqJQvuSs5NCO8lzcHZm0=) 4: 3130332e37352e36332e302f32342d3234203d3e20313530353339.roa (hash: OMSstG+v7qZjFWCJ4NvuRl4cKaVI80js4sry1SoLSN0=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/07c8a0c3-37f5-4667-a430-6fa111d343aa/0/7433AB64571BE1827F0BC97ED291976B6E3429FA.crl rsync://repo-rpki.idnic.net/repo/07c8a0c3-37f5-4667-a430-6fa111d343aa/0/7433AB64571BE1827F0BC97ED291976B6E3429FA.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7433AB64571BE1827F0BC97ED291976B6E3429FA.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 18 Dec 2025 21:07:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 74:71:b6:4e:dc:54:c2:f4:75:28:88:44:76:44:fc:b2:fb:9f:ef:cf Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7433AB64571BE1827F0BC97ED291976B6E3429FA Validity Not Before: Dec 15 10:17:23 2025 GMT Not After : Dec 18 21:07:23 2025 GMT Subject: CN=FF1E1B35D07B9FDE457AAADF16701B48476E566A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:79:df:31:32:49:76:60:f1:6d:ac:cd:43:6e: 9f:8b:df:78:c0:7e:cc:32:79:1f:62:64:c1:8d:f2: 88:42:96:28:4b:b0:38:19:96:f1:d3:ac:be:b8:dd: 48:9d:bf:b5:1c:1f:10:dc:c7:13:f3:e6:60:d7:99: 53:b9:fc:57:1a:92:f4:05:8e:c2:4e:10:36:57:38: c4:39:24:8e:cd:83:f4:e9:cd:ac:f7:df:4e:7c:4a: 4e:bc:7c:7d:c5:65:df:00:db:37:e0:a7:c7:4a:59: bd:92:a9:43:53:39:bf:82:a4:0a:b7:4c:f8:fe:77: 5d:8a:dd:8d:d1:46:b9:b0:58:e0:d1:c8:0f:22:93: 20:5d:85:dc:7b:b4:ce:41:5e:0b:42:8b:91:06:69: 05:62:b0:15:7a:95:b0:24:e8:0e:90:c4:b8:45:c6: e5:e8:bf:f5:fc:21:5b:49:d6:0b:45:4b:f2:ff:2e: b5:57:9f:66:5c:47:01:70:6b:af:e0:87:6d:3c:ac: 83:04:75:c7:46:9a:45:b8:89:d2:41:2e:fe:1d:a7: 4b:e9:2a:6e:47:4b:08:8e:3f:9f:be:8c:00:c3:9d: 39:2f:90:1c:09:ff:8b:b6:ca:a4:4b:27:28:0d:d6: 53:45:3f:eb:32:df:5c:f8:77:e3:eb:0f:8c:c4:b2: ce:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:1E:1B:35:D0:7B:9F:DE:45:7A:AA:DF:16:70:1B:48:47:6E:56:6A X509v3 Authority Key Identifier: keyid:74:33:AB:64:57:1B:E1:82:7F:0B:C9:7E:D2:91:97:6B:6E:34:29:FA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/07c8a0c3-37f5-4667-a430-6fa111d343aa/0/7433AB64571BE1827F0BC97ED291976B6E3429FA.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7433AB64571BE1827F0BC97ED291976B6E3429FA.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/07c8a0c3-37f5-4667-a430-6fa111d343aa/0/7433AB64571BE1827F0BC97ED291976B6E3429FA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 26:b0:85:9b:e3:2e:77:58:9d:4f:26:f5:a5:47:17:e7:1d:98: be:a7:bb:4a:85:c7:d4:a6:2c:c3:07:92:67:88:41:1a:67:d1: 43:43:1c:86:f3:c9:3d:17:b7:bc:d9:b9:bf:45:1e:0c:54:37: 19:d3:bf:cd:a8:73:c8:02:bc:01:4f:1c:28:00:e0:2a:d1:5d: 98:47:00:d1:7b:9a:0f:34:62:49:fb:8e:a8:a0:f7:50:28:85: 3b:e1:0d:cb:0f:ed:73:98:af:a4:98:2e:bb:44:4f:83:3a:be: 38:10:98:46:b4:b5:39:b3:3c:7c:07:0a:88:7c:3e:de:1d:a0: bf:78:45:6b:53:ca:42:2f:6d:e6:15:65:8b:ee:73:b1:4c:49: d0:c0:98:00:c7:60:53:59:a0:41:e5:0b:9f:17:35:e7:a5:c1: 07:10:11:79:cb:af:5f:69:01:b1:d3:28:eb:11:cb:b4:23:0f: 10:bc:ea:92:ef:56:1f:a3:af:4f:7a:e2:a8:23:f4:02:02:02: 35:e0:ee:76:bc:58:42:24:53:54:f1:00:60:b5:96:c0:15:37: c7:2b:5a:dd:f2:b0:d4:44:78:0d:99:35:e4:9c:f8:e3:2a:9a: 38:66:78:5b:11:6e:a4:04:ac:c4:ac:5f:be:f7:4b:0d:76:0c: 33:63:f3:7a -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUdHG2TtxUwvR1KIhEdkT8svuf788wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzQzM0FCNjQ1NzFCRTE4MjdGMEJDOTdFRDI5MTk3NkI2 RTM0MjlGQTAeFw0yNTEyMTUxMDE3MjNaFw0yNTEyMTgyMTA3MjNaMDMxMTAvBgNV BAMTKEZGMUUxQjM1RDA3QjlGREU0NTdBQUFERjE2NzAxQjQ4NDc2RTU2NkEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCmed8xMkl2YPFtrM1Dbp+L33jA fswyeR9iZMGN8ohClihLsDgZlvHTrL643Uidv7UcHxDcxxPz5mDXmVO5/FcakvQF jsJOEDZXOMQ5JI7Ng/Tpzaz33058Sk68fH3FZd8A2zfgp8dKWb2SqUNTOb+CpAq3 TPj+d12K3Y3RRrmwWODRyA8ikyBdhdx7tM5BXgtCi5EGaQVisBV6lbAk6A6QxLhF xuXov/X8IVtJ1gtFS/L/LrVXn2ZcRwFwa6/gh208rIMEdcdGmkW4idJBLv4dp0vp Km5HSwiOP5++jADDnTkvkBwJ/4u2yqRLJygN1lNFP+sy31z4d+PrD4zEss4hAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU/x4bNdB7n95FeqrfFnAbSEduVmowHwYDVR0j BBgwFoAUdDOrZFcb4YJ/C8l+0pGXa240KfowDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w N2M4YTBjMy0zN2Y1LTQ2NjctYTQzMC02ZmExMTFkMzQzYWEvMC83NDMzQUI2NDU3 MUJFMTgyN0YwQkM5N0VEMjkxOTc2QjZFMzQyOUZBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNzQzM0FCNjQ1NzFCRTE4MjdGMEJDOTdFRDI5MTk3NkI2RTM0 MjlGQS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMDdjOGEwYzMtMzdmNS00NjY3LWE0 MzAtNmZhMTExZDM0M2FhLzAvNzQzM0FCNjQ1NzFCRTE4MjdGMEJDOTdFRDI5MTk3 NkI2RTM0MjlGQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACawhZvjLndYnU8m9aVHF+cdmL6nu0qFx9Sm LMMHkmeIQRpn0UNDHIbzyT0Xt7zZub9FHgxUNxnTv82oc8gCvAFPHCgA4CrRXZhH ANF7mg80Ykn7jqig91AohTvhDcsP7XOYr6SYLrtET4M6vjgQmEa0tTmzPHwHCoh8 Pt4doL94RWtTykIvbeYVZYvuc7FMSdDAmADHYFNZoEHlC58XNeelwQcQEXnLr19p AbHTKOsRy7QjDxC86pLvVh+jr0964qgj9AICAjXg7na8WEIkU1TxAGC1lsAVN8cr Wt3ysNREeA2ZNeSc+OMqmjhmeFsRbqQErMSsX773Sw12DDNj83o= -----END CERTIFICATE-----Generated at Tue Dec 16 04:38:45 2025 by rpki-client