This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/2050dcc3-84dd-4595-ba2c-bc69989692f1/0/D7C76122426491B81F84E5A824E4ABEB8582BAC4.mft File: D7C76122426491B81F84E5A824E4ABEB8582BAC4.mft (raw, json) Hash identifier: FUk92iKnZziYSaOGcBXljUUYLpdlxQawFXkd/V/jUB4= Subject key identifier: C1:0A:D1:39:ED:AC:BD:BF:67:5A:0A:95:2C:00:54:2A:31:A1:86:03 Authority key identifier: D7:C7:61:22:42:64:91:B8:1F:84:E5:A8:24:E4:AB:EB:85:82:BA:C4 Certificate issuer: /CN=D7C76122426491B81F84E5A824E4ABEB8582BAC4 Certificate serial: 047E28EBDD7DFA53D4B1BDB137DEB5A788964E9D Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D7C76122426491B81F84E5A824E4ABEB8582BAC4.cer Subject info access: rsync://repo-rpki.idnic.net/repo/2050dcc3-84dd-4595-ba2c-bc69989692f1/0/D7C76122426491B81F84E5A824E4ABEB8582BAC4.mft Manifest number: 023E Signing time: Tue 02 Dec 2025 04:50:48 +0000 Manifest this update: Tue 02 Dec 2025 04:45:48 +0000 Manifest next update: Fri 05 Dec 2025 11:14:48 +0000 Files and hashes: 1: D7C76122426491B81F84E5A824E4ABEB8582BAC4.crl (hash: rVJwHJO9cWGhLXvo0ouP8NsPD+liQT5/BTcpsmmEW6I=) 2: 3130332e3138352e34322e302f32342d3234203d3e20313439363733.roa (hash: dkX3mi6UtP2EclKtk4Ns5Our6XJ4lNIlC+WY5pkrMVA=) 3: 3130332e3138352e34332e302f32342d3234203d3e20313333333630.roa (hash: pZz62m1gD3j25rkNtr+ZrpUFopI0lVMRASTdO0j7bx0=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/2050dcc3-84dd-4595-ba2c-bc69989692f1/0/D7C76122426491B81F84E5A824E4ABEB8582BAC4.crl rsync://repo-rpki.idnic.net/repo/2050dcc3-84dd-4595-ba2c-bc69989692f1/0/D7C76122426491B81F84E5A824E4ABEB8582BAC4.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D7C76122426491B81F84E5A824E4ABEB8582BAC4.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 05 Dec 2025 11:14:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 04:7e:28:eb:dd:7d:fa:53:d4:b1:bd:b1:37:de:b5:a7:88:96:4e:9d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D7C76122426491B81F84E5A824E4ABEB8582BAC4 Validity Not Before: Dec 2 04:45:48 2025 GMT Not After : Dec 5 11:14:48 2025 GMT Subject: CN=C10AD139EDACBDBF675A0A952C00542A31A18603 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:8b:b0:ef:40:f8:f4:b0:cd:91:f2:bf:99:f5: 2e:cd:8d:9d:30:82:88:6a:e1:76:cd:63:66:09:e1: 79:da:ba:83:81:21:b2:0f:01:12:c9:e0:35:f5:43: 54:29:6e:41:1e:92:a0:dc:ee:9d:09:ee:6a:fe:6a: 8b:0d:19:d9:a5:2d:29:f6:c5:3b:a8:ef:e0:3e:83: bf:05:6d:bd:c1:b4:6b:40:25:4b:bd:c8:29:12:04: 7f:c4:e8:bb:a2:a4:a6:c8:0b:27:d5:92:9b:31:41: 8f:cf:7a:63:aa:69:ee:23:b9:31:c9:4e:d0:12:bf: 40:50:cb:86:a4:a7:a0:ff:79:9f:1c:d7:51:d7:c2: 69:fa:43:0e:52:e2:59:cf:2a:9e:f4:eb:cb:70:31: 37:0e:27:c3:72:f3:b4:9b:a4:01:08:71:32:bd:76: ee:d5:df:2d:a2:36:9a:d8:e6:ca:8c:cf:39:9d:e2: e4:04:19:70:e2:95:ad:e4:81:ab:cd:2e:b9:22:6f: 6e:ed:fd:96:c9:5d:76:56:c1:8d:c6:6d:ba:d2:bc: ea:fa:73:e6:71:ff:08:f5:ac:de:b1:c0:03:0e:c5: e5:08:0e:5d:6a:4a:b8:62:c6:e5:e0:7e:db:9f:b1: 30:75:9f:73:f3:cf:bf:d9:5b:20:80:6b:c1:8e:fb: dd:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:0A:D1:39:ED:AC:BD:BF:67:5A:0A:95:2C:00:54:2A:31:A1:86:03 X509v3 Authority Key Identifier: keyid:D7:C7:61:22:42:64:91:B8:1F:84:E5:A8:24:E4:AB:EB:85:82:BA:C4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/2050dcc3-84dd-4595-ba2c-bc69989692f1/0/D7C76122426491B81F84E5A824E4ABEB8582BAC4.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D7C76122426491B81F84E5A824E4ABEB8582BAC4.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/2050dcc3-84dd-4595-ba2c-bc69989692f1/0/D7C76122426491B81F84E5A824E4ABEB8582BAC4.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 80:1c:65:82:8e:c9:83:8e:83:0b:40:5b:9e:82:b1:7a:57:74: fc:02:e0:06:bc:89:70:38:bf:17:3c:b3:4f:ef:e2:87:8f:9b: 8a:a3:12:6a:07:89:99:1f:8b:4a:30:3d:f9:80:e8:c3:9a:83: 5f:e6:29:c6:c5:10:8f:b3:ff:4a:39:7e:6f:11:d8:59:46:d5: fa:17:b2:30:5e:09:64:7b:36:60:77:82:fb:2e:44:82:b1:1e: 25:5d:aa:4a:68:8e:ee:87:95:1f:44:e8:07:82:b9:dd:a2:67: 18:1a:2d:56:28:43:4f:57:60:e3:f3:1d:5b:da:f5:2b:59:49: a6:95:29:47:6a:11:31:92:53:5e:fc:e2:bb:b5:19:42:2b:bc: 15:12:ea:b8:10:3d:cd:98:e8:a0:48:1a:c7:de:b3:f7:e8:de: 3e:61:ff:e3:c8:45:21:73:11:5c:35:67:de:ed:96:58:4f:d8: b4:a0:a0:dc:3f:26:05:8a:9e:19:d9:fb:50:89:1d:85:b8:de: 4a:52:72:19:0f:70:9a:15:a0:81:77:bb:69:7f:9c:5a:c3:e2: 89:5c:87:29:32:93:a0:2e:e1:63:5a:bc:fc:3e:9e:ba:f7:65: ec:1e:7a:a9:ec:37:75:01:b5:5f:db:29:cb:65:33:ea:c0:d1: 9b:1e:33:1d -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUBH4o6919+lPUsb2xN961p4iWTp0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDdDNzYxMjI0MjY0OTFCODFGODRFNUE4MjRFNEFCRUI4 NTgyQkFDNDAeFw0yNTEyMDIwNDQ1NDhaFw0yNTEyMDUxMTE0NDhaMDMxMTAvBgNV BAMTKEMxMEFEMTM5RURBQ0JEQkY2NzVBMEE5NTJDMDA1NDJBMzFBMTg2MDMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDji7DvQPj0sM2R8r+Z9S7NjZ0w gohq4XbNY2YJ4XnauoOBIbIPARLJ4DX1Q1QpbkEekqDc7p0J7mr+aosNGdmlLSn2 xTuo7+A+g78Fbb3BtGtAJUu9yCkSBH/E6LuipKbICyfVkpsxQY/PemOqae4juTHJ TtASv0BQy4akp6D/eZ8c11HXwmn6Qw5S4lnPKp7068twMTcOJ8Ny87SbpAEIcTK9 du7V3y2iNprY5sqMzzmd4uQEGXDila3kgavNLrkib27t/ZbJXXZWwY3GbbrSvOr6 c+Zx/wj1rN6xwAMOxeUIDl1qSrhixuXgftufsTB1n3Pzz7/ZWyCAa8GO+91XAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUwQrROe2svb9nWgqVLABUKjGhhgMwHwYDVR0j BBgwFoAU18dhIkJkkbgfhOWoJOSr64WCusQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y MDUwZGNjMy04NGRkLTQ1OTUtYmEyYy1iYzY5OTg5NjkyZjEvMC9EN0M3NjEyMjQy NjQ5MUI4MUY4NEU1QTgyNEU0QUJFQjg1ODJCQUM0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRDdDNzYxMjI0MjY0OTFCODFGODRFNUE4MjRFNEFCRUI4NTgy QkFDNC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMjA1MGRjYzMtODRkZC00NTk1LWJh MmMtYmM2OTk4OTY5MmYxLzAvRDdDNzYxMjI0MjY0OTFCODFGODRFNUE4MjRFNEFC RUI4NTgyQkFDNC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIAcZYKOyYOOgwtAW56CsXpXdPwC4Aa8iXA4 vxc8s0/v4oePm4qjEmoHiZkfi0owPfmA6MOag1/mKcbFEI+z/0o5fm8R2FlG1foX sjBeCWR7NmB3gvsuRIKxHiVdqkpoju6HlR9E6AeCud2iZxgaLVYoQ09XYOPzHVva 9StZSaaVKUdqETGSU1784ru1GUIrvBUS6rgQPc2Y6KBIGsfes/fo3j5h/+PIRSFz EVw1Z97tllhP2LSgoNw/JgWKnhnZ+1CJHYW43kpSchkPcJoVoIF3u2l/nFrD4olc hykyk6Au4WNavPw+nrr3ZeweeqnsN3UBtV/bKctlM+rA0ZseMx0= -----END CERTIFICATE-----Generated at Wed Dec 3 14:44:26 2025 by rpki-client