This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/171a847d-2531-4d7f-9241-9777850605d6/0/7EF89B45692D93E9CA15DA4CF9D439300632EFD4.mft File: 7EF89B45692D93E9CA15DA4CF9D439300632EFD4.mft (raw, json) Hash identifier: MCklyTLRd/avIh2VPnluEe4sdGQ3REYLDh0VQHvy1UI= Subject key identifier: 5D:20:15:52:DB:21:8E:FC:3B:4C:5F:19:91:01:2B:9E:20:2A:AA:4A Authority key identifier: 7E:F8:9B:45:69:2D:93:E9:CA:15:DA:4C:F9:D4:39:30:06:32:EF:D4 Certificate issuer: /CN=7EF89B45692D93E9CA15DA4CF9D439300632EFD4 Certificate serial: 2FD60F8B3D42313AA0EC4F19D6F7E16849BD79CD Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7EF89B45692D93E9CA15DA4CF9D439300632EFD4.cer Subject info access: rsync://repo-rpki.idnic.net/repo/171a847d-2531-4d7f-9241-9777850605d6/0/7EF89B45692D93E9CA15DA4CF9D439300632EFD4.mft Manifest number: 0254 Signing time: Sun 14 Dec 2025 10:30:02 +0000 Manifest this update: Sun 14 Dec 2025 10:25:02 +0000 Manifest next update: Wed 17 Dec 2025 11:54:02 +0000 Files and hashes: 1: 7EF89B45692D93E9CA15DA4CF9D439300632EFD4.crl (hash: PWbaIJXEWHD163kAGNm5jNN9hyt67CI6NzKDS18QZms=) 2: 3130332e3138302e35382e302f32332d3233203d3e2039333431.roa (hash: lr7nUWH/7raRlFDZhAD65ANTChYQYYLQIg/z8dK94J4=) 3: 3130332e3138302e35382e302f32342d3234203d3e2039333431.roa (hash: FdloWvzwT5E7bV0h2MrBbwdyadkn1oI1JIyg7UwS1zQ=) 4: 3130332e3138302e35392e302f32342d3234203d3e2039333431.roa (hash: i2rSOVglupsSuL0ZoSXVd/tHmiF7pW8+dps3wslED5c=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/171a847d-2531-4d7f-9241-9777850605d6/0/7EF89B45692D93E9CA15DA4CF9D439300632EFD4.crl rsync://repo-rpki.idnic.net/repo/171a847d-2531-4d7f-9241-9777850605d6/0/7EF89B45692D93E9CA15DA4CF9D439300632EFD4.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7EF89B45692D93E9CA15DA4CF9D439300632EFD4.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 17 Dec 2025 11:54:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2f:d6:0f:8b:3d:42:31:3a:a0:ec:4f:19:d6:f7:e1:68:49:bd:79:cd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7EF89B45692D93E9CA15DA4CF9D439300632EFD4 Validity Not Before: Dec 14 10:25:02 2025 GMT Not After : Dec 17 11:54:02 2025 GMT Subject: CN=5D201552DB218EFC3B4C5F1991012B9E202AAA4A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:cc:c9:cd:ee:07:d2:0b:8b:e9:d7:b9:ad:b8: 60:8a:c8:48:15:35:14:d3:8a:72:a6:f4:cc:44:e4: d6:9a:f0:4f:a7:eb:9a:bc:3c:d4:77:62:6b:82:0a: 6e:86:92:8a:f7:37:ce:ff:df:64:de:ed:59:47:7d: 9a:3f:6f:d7:52:59:69:72:de:dd:fb:f0:a9:23:7f: 97:bb:94:54:af:36:4b:63:50:d7:93:36:03:fa:d9: d7:ca:85:de:2a:da:2f:27:2b:a2:e8:36:22:7f:d7: df:22:90:06:d9:fd:d9:ee:0e:4b:fb:a3:21:43:00: 7b:58:8e:f6:17:07:6c:e5:29:05:a9:1c:d2:2c:e3: f0:27:39:2d:69:58:d5:67:ba:b1:d5:d7:92:2a:4d: c3:20:59:e4:80:57:a0:4a:31:82:c2:ea:8c:ef:5c: e4:4c:8a:22:33:6a:aa:3e:ed:22:44:0a:f9:4c:4f: e3:da:13:45:0e:60:61:84:b5:9d:a1:f4:06:4f:aa: d5:0c:cc:79:60:09:e0:94:e5:ab:e7:06:12:76:dc: aa:97:ba:00:fb:9c:18:e9:fa:aa:14:6d:12:05:45: e2:50:00:8b:7c:74:63:a3:51:bd:54:99:5c:2d:c7: d3:9a:e4:ff:bf:25:36:3e:39:f8:f0:9a:1d:c9:7b: b8:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5D:20:15:52:DB:21:8E:FC:3B:4C:5F:19:91:01:2B:9E:20:2A:AA:4A X509v3 Authority Key Identifier: keyid:7E:F8:9B:45:69:2D:93:E9:CA:15:DA:4C:F9:D4:39:30:06:32:EF:D4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/171a847d-2531-4d7f-9241-9777850605d6/0/7EF89B45692D93E9CA15DA4CF9D439300632EFD4.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7EF89B45692D93E9CA15DA4CF9D439300632EFD4.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/171a847d-2531-4d7f-9241-9777850605d6/0/7EF89B45692D93E9CA15DA4CF9D439300632EFD4.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4a:e7:a5:a7:c3:86:33:19:40:84:af:5f:e1:6c:22:2b:f1:64: 3b:b6:8a:af:cb:fc:fd:82:c8:48:20:04:ce:a9:5a:25:30:0f: f7:68:44:6f:dc:7c:4f:36:3b:19:8b:cf:e9:eb:8d:63:74:6d: 5d:a1:b4:f8:2b:8f:f1:c3:ba:03:34:fa:4c:e8:fe:77:c4:a5: b1:b5:42:7a:e1:a8:e7:f5:67:8a:64:bb:fe:ac:b4:46:10:f7: e5:48:d5:5e:70:a3:3d:62:d1:e4:cc:f5:2f:c5:b5:3c:60:c6: 21:0c:da:62:28:e0:b2:b3:16:62:78:2f:bd:bc:68:09:5c:dc: 77:1b:4b:43:6b:4e:ee:ca:c2:3d:90:da:89:fe:a1:d9:9c:16: be:bd:db:02:21:57:59:a3:fc:c6:8b:78:44:45:49:dc:85:e0: 7b:31:10:2f:94:ba:6c:7b:d1:57:37:c6:d3:68:9e:b0:55:62: 26:a4:0a:5b:ce:6d:01:b8:68:61:e8:60:3b:a6:09:d3:c2:72: df:bb:80:91:de:e3:1a:cf:9a:23:78:e8:be:98:b7:2e:5b:49: 50:5b:a5:6a:7d:6d:12:e0:0d:c3:d9:35:10:52:b4:17:af:2e: 62:9a:66:68:f6:76:0c:eb:b5:e3:ac:7a:4b:f9:94:91:20:cf: e5:71:8c:ae -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUL9YPiz1CMTqg7E8Z1vfhaEm9ec0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoN0VGODlCNDU2OTJEOTNFOUNBMTVEQTRDRjlENDM5MzAw NjMyRUZENDAeFw0yNTEyMTQxMDI1MDJaFw0yNTEyMTcxMTU0MDJaMDMxMTAvBgNV BAMTKDVEMjAxNTUyREIyMThFRkMzQjRDNUYxOTkxMDEyQjlFMjAyQUFBNEEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDNzMnN7gfSC4vp17mtuGCKyEgV NRTTinKm9MxE5Naa8E+n65q8PNR3YmuCCm6Gkor3N87/32Te7VlHfZo/b9dSWWly 3t378Kkjf5e7lFSvNktjUNeTNgP62dfKhd4q2i8nK6LoNiJ/198ikAbZ/dnuDkv7 oyFDAHtYjvYXB2zlKQWpHNIs4/AnOS1pWNVnurHV15IqTcMgWeSAV6BKMYLC6ozv XORMiiIzaqo+7SJECvlMT+PaE0UOYGGEtZ2h9AZPqtUMzHlgCeCU5avnBhJ23KqX ugD7nBjp+qoUbRIFReJQAIt8dGOjUb1UmVwtx9Oa5P+/JTY+Ofjwmh3Je7jJAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUXSAVUtshjvw7TF8ZkQErniAqqkowHwYDVR0j BBgwFoAUfvibRWktk+nKFdpM+dQ5MAYy79QwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x NzFhODQ3ZC0yNTMxLTRkN2YtOTI0MS05Nzc3ODUwNjA1ZDYvMC83RUY4OUI0NTY5 MkQ5M0U5Q0ExNURBNENGOUQ0MzkzMDA2MzJFRkQ0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvN0VGODlCNDU2OTJEOTNFOUNBMTVEQTRDRjlENDM5MzAwNjMy RUZENC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMTcxYTg0N2QtMjUzMS00ZDdmLTky NDEtOTc3Nzg1MDYwNWQ2LzAvN0VGODlCNDU2OTJEOTNFOUNBMTVEQTRDRjlENDM5 MzAwNjMyRUZENC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAErnpafDhjMZQISvX+FsIivxZDu2iq/L/P2C yEggBM6pWiUwD/doRG/cfE82OxmLz+nrjWN0bV2htPgrj/HDugM0+kzo/nfEpbG1 QnrhqOf1Z4pku/6stEYQ9+VI1V5woz1i0eTM9S/FtTxgxiEM2mIo4LKzFmJ4L728 aAlc3HcbS0NrTu7Kwj2Q2on+odmcFr692wIhV1mj/MaLeERFSdyF4HsxEC+Uumx7 0Vc3xtNonrBVYiakClvObQG4aGHoYDumCdPCct+7gJHe4xrPmiN46L6Yty5bSVBb pWp9bRLgDcPZNRBStBevLmKaZmj2dgzrteOsekv5lJEgz+VxjK4= -----END CERTIFICATE-----Generated at Mon Dec 15 21:54:41 2025 by rpki-client