This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/09a9e835-f3a1-4c36-b47d-6f2f71eb8aa4/0/F7007FFDA66A99D7588DA93FFAF26BDE57B3CA64.mft File: F7007FFDA66A99D7588DA93FFAF26BDE57B3CA64.mft (raw, json) Hash identifier: vBlhainzySFs5Ym5LDUf91D9EqFYdNYU/MD8+l1z1jc= Subject key identifier: B3:28:78:C7:2D:59:FB:DB:CD:A0:77:8D:7C:D8:7E:25:9D:11:43:FE Authority key identifier: F7:00:7F:FD:A6:6A:99:D7:58:8D:A9:3F:FA:F2:6B:DE:57:B3:CA:64 Certificate issuer: /CN=F7007FFDA66A99D7588DA93FFAF26BDE57B3CA64 Certificate serial: 430AFF72BE309422C53B4ABED4D6C7D75F9F0CE0 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F7007FFDA66A99D7588DA93FFAF26BDE57B3CA64.cer Subject info access: rsync://repo-rpki.idnic.net/repo/09a9e835-f3a1-4c36-b47d-6f2f71eb8aa4/0/F7007FFDA66A99D7588DA93FFAF26BDE57B3CA64.mft Manifest number: 0249 Signing time: Mon 01 Dec 2025 15:01:24 +0000 Manifest this update: Mon 01 Dec 2025 14:56:24 +0000 Manifest next update: Thu 04 Dec 2025 17:16:24 +0000 Files and hashes: 1: 3130332e3138362e3230392e302f32342d3234203d3e20313336383733.roa (hash: LoEOvDkV9bQaYXTmNRoMjCJnrRw7dRDwtZgFA/xt/mM=) 2: 3130332e3138362e3230382e302f32342d3234203d3e20313337333331.roa (hash: 7ko0bxN2Z7aHh5HxpPGcoXd3wiTgQprx370mdkriXlU=) 3: F7007FFDA66A99D7588DA93FFAF26BDE57B3CA64.crl (hash: tYipC1zXreJh0/oyccKACTliPss+q7y0JuocSCe7ubw=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/09a9e835-f3a1-4c36-b47d-6f2f71eb8aa4/0/F7007FFDA66A99D7588DA93FFAF26BDE57B3CA64.crl rsync://repo-rpki.idnic.net/repo/09a9e835-f3a1-4c36-b47d-6f2f71eb8aa4/0/F7007FFDA66A99D7588DA93FFAF26BDE57B3CA64.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F7007FFDA66A99D7588DA93FFAF26BDE57B3CA64.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 04 Dec 2025 17:16:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 43:0a:ff:72:be:30:94:22:c5:3b:4a:be:d4:d6:c7:d7:5f:9f:0c:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F7007FFDA66A99D7588DA93FFAF26BDE57B3CA64 Validity Not Before: Dec 1 14:56:24 2025 GMT Not After : Dec 4 17:16:24 2025 GMT Subject: CN=B32878C72D59FBDBCDA0778D7CD87E259D1143FE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:a6:ae:f1:fd:8a:f1:1d:49:15:7c:ec:c5:6d: d4:31:db:22:3f:88:61:ad:3b:34:90:cf:7b:8e:48: e4:f6:9a:46:db:9b:4b:ba:08:ea:fd:5b:41:ea:8a: e2:8d:4f:46:80:14:1b:54:2f:e3:2a:a5:7c:7e:92: 34:41:f8:49:fc:99:b9:b0:53:11:ca:98:84:0b:4b: e5:ef:19:23:94:d4:03:ec:b9:31:49:23:0d:11:3d: a2:51:e2:ae:10:49:00:94:59:81:00:c9:a8:38:50: 0a:fe:08:e0:0a:7a:59:0f:a1:c7:9c:6a:50:2e:f3: ef:9b:48:67:6a:2d:b4:a4:49:6b:e2:a8:e6:d1:07: 9f:6c:5e:57:f2:0b:50:c5:dc:69:76:c4:65:ab:b6: 1e:e4:57:7d:1f:bf:4a:20:0b:ca:79:9e:40:df:fb: c6:43:a8:9e:43:64:2a:e6:10:15:e1:1c:42:10:07: 9e:54:91:0b:15:f7:93:7a:5d:77:a7:d1:d9:e8:e1: 31:c5:59:a6:60:a2:03:a3:fd:f0:2d:26:48:3f:29: 74:52:1d:73:55:08:d4:ac:55:df:7c:65:56:a1:98: 45:76:a3:9f:4f:fe:d3:41:26:ca:db:cc:ab:f5:d5: 39:c7:13:ac:da:35:79:af:1b:10:21:0d:73:5b:92: 27:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B3:28:78:C7:2D:59:FB:DB:CD:A0:77:8D:7C:D8:7E:25:9D:11:43:FE X509v3 Authority Key Identifier: keyid:F7:00:7F:FD:A6:6A:99:D7:58:8D:A9:3F:FA:F2:6B:DE:57:B3:CA:64 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/09a9e835-f3a1-4c36-b47d-6f2f71eb8aa4/0/F7007FFDA66A99D7588DA93FFAF26BDE57B3CA64.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F7007FFDA66A99D7588DA93FFAF26BDE57B3CA64.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/09a9e835-f3a1-4c36-b47d-6f2f71eb8aa4/0/F7007FFDA66A99D7588DA93FFAF26BDE57B3CA64.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 56:9f:8f:5b:5c:b6:77:9b:2c:16:b4:63:90:79:bb:66:7a:dc: f1:3c:29:3f:d1:36:6a:10:b8:84:d7:68:6f:34:bf:9d:ce:b3: 4b:47:c0:f7:0b:9f:33:09:50:fb:9f:f8:15:80:a5:a7:6d:1c: 59:4d:e4:46:b5:fb:1a:e7:38:de:24:a3:ea:98:b7:4e:96:8a: 87:ab:9f:b3:da:f2:9a:44:75:1d:6c:dd:c5:14:38:d3:b2:25: e8:ba:33:69:d9:bc:9b:e9:0d:4c:ae:7d:a8:4c:be:d1:04:91: b0:06:4a:cd:df:23:c4:8b:47:65:e7:8d:b3:7f:87:fc:e2:5b: 7f:92:94:93:cf:ad:61:e2:a1:47:58:b7:ed:6d:8b:46:26:c1: 2c:6d:25:5d:1b:a6:d1:ce:0f:0e:e5:fd:0c:de:ae:4d:78:83: b0:f1:fa:5a:7c:4d:4c:bb:2a:4c:19:28:83:5f:71:d1:88:11: 9e:cf:77:f3:b9:9f:14:46:ca:81:a6:6a:ef:76:0d:f4:1e:de: 29:f7:10:94:f1:d6:56:47:0d:5d:eb:bf:07:53:db:e0:3c:70: 47:bc:db:bf:a1:02:f0:ac:01:3e:89:1c:8d:1e:6a:60:bc:ae: 34:7b:5b:90:4d:35:be:4d:33:b9:49:12:94:9b:ce:9b:b7:09: 0d:98:4e:4d -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUQwr/cr4wlCLFO0q+1NbH11+fDOAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjcwMDdGRkRBNjZBOTlENzU4OERBOTNGRkFGMjZCREU1 N0IzQ0E2NDAeFw0yNTEyMDExNDU2MjRaFw0yNTEyMDQxNzE2MjRaMDMxMTAvBgNV BAMTKEIzMjg3OEM3MkQ1OUZCREJDREEwNzc4RDdDRDg3RTI1OUQxMTQzRkUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCmpq7x/YrxHUkVfOzFbdQx2yI/ iGGtOzSQz3uOSOT2mkbbm0u6COr9W0HqiuKNT0aAFBtUL+MqpXx+kjRB+En8mbmw UxHKmIQLS+XvGSOU1APsuTFJIw0RPaJR4q4QSQCUWYEAyag4UAr+COAKelkPocec alAu8++bSGdqLbSkSWviqObRB59sXlfyC1DF3Gl2xGWrth7kV30fv0ogC8p5nkDf +8ZDqJ5DZCrmEBXhHEIQB55UkQsV95N6XXen0dno4THFWaZgogOj/fAtJkg/KXRS HXNVCNSsVd98ZVahmEV2o59P/tNBJsrbzKv11TnHE6zaNXmvGxAhDXNbkieFAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUsyh4xy1Z+9vNoHeNfNh+JZ0RQ/4wHwYDVR0j BBgwFoAU9wB//aZqmddYjak/+vJr3lezymQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w OWE5ZTgzNS1mM2ExLTRjMzYtYjQ3ZC02ZjJmNzFlYjhhYTQvMC9GNzAwN0ZGREE2 NkE5OUQ3NTg4REE5M0ZGQUYyNkJERTU3QjNDQTY0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRjcwMDdGRkRBNjZBOTlENzU4OERBOTNGRkFGMjZCREU1N0Iz Q0E2NC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMDlhOWU4MzUtZjNhMS00YzM2LWI0 N2QtNmYyZjcxZWI4YWE0LzAvRjcwMDdGRkRBNjZBOTlENzU4OERBOTNGRkFGMjZC REU1N0IzQ0E2NC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFafj1tctnebLBa0Y5B5u2Z63PE8KT/RNmoQ uITXaG80v53Os0tHwPcLnzMJUPuf+BWApadtHFlN5Ea1+xrnON4ko+qYt06Wioer n7Pa8ppEdR1s3cUUONOyJei6M2nZvJvpDUyufahMvtEEkbAGSs3fI8SLR2XnjbN/ h/ziW3+SlJPPrWHioUdYt+1ti0YmwSxtJV0bptHODw7l/Qzerk14g7Dx+lp8TUy7 KkwZKINfcdGIEZ7Pd/O5nxRGyoGmau92DfQe3in3EJTx1lZHDV3rvwdT2+A8cEe8 27+hAvCsAT6JHI0eamC8rjR7W5BNNb5NM7lJEpSbzpu3CQ2YTk0= -----END CERTIFICATE-----Generated at Wed Dec 3 13:55:25 2025 by rpki-client