This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/2cf35a47-2cce-487f-aa27-c9e9de635bec/0/0A7E222F0C3C8914351404FC05DB0FDD9CD4EB20.mft File: 0A7E222F0C3C8914351404FC05DB0FDD9CD4EB20.mft (raw, json) Hash identifier: qOluYcniJyUvCfTvUb9WbPhNNMimVNY5KaIIrJr7MVI= Subject key identifier: 6F:52:93:8A:36:6D:44:1C:ED:F4:F0:FC:D2:9D:48:D5:C0:7F:6A:E6 Authority key identifier: 0A:7E:22:2F:0C:3C:89:14:35:14:04:FC:05:DB:0F:DD:9C:D4:EB:20 Certificate issuer: /CN=0A7E222F0C3C8914351404FC05DB0FDD9CD4EB20 Certificate serial: 260A65F90DEE53BEDDCC1BE4851410C7FCA3BE44 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0A7E222F0C3C8914351404FC05DB0FDD9CD4EB20.cer Subject info access: rsync://repo-rpki.idnic.net/repo/2cf35a47-2cce-487f-aa27-c9e9de635bec/0/0A7E222F0C3C8914351404FC05DB0FDD9CD4EB20.mft Manifest number: 0133 Signing time: Wed 03 Dec 2025 10:11:02 +0000 Manifest this update: Wed 03 Dec 2025 10:06:02 +0000 Manifest next update: Sat 06 Dec 2025 12:36:02 +0000 Files and hashes: 1: 3130332e3136352e3135342e302f32342d3234203d3e20313431393635.roa (hash: HXtuxYqcWdK3Z+G4WjO9NmoomTpcMABeA4gw2T3aG9E=) 2: 0A7E222F0C3C8914351404FC05DB0FDD9CD4EB20.crl (hash: U7jdVm5xM+4eTLjoP4OJ5axUp0sHi83RUjmUMPpaK2Y=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/2cf35a47-2cce-487f-aa27-c9e9de635bec/0/0A7E222F0C3C8914351404FC05DB0FDD9CD4EB20.crl rsync://repo-rpki.idnic.net/repo/2cf35a47-2cce-487f-aa27-c9e9de635bec/0/0A7E222F0C3C8914351404FC05DB0FDD9CD4EB20.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0A7E222F0C3C8914351404FC05DB0FDD9CD4EB20.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 06 Dec 2025 12:07:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 26:0a:65:f9:0d:ee:53:be:dd:cc:1b:e4:85:14:10:c7:fc:a3:be:44 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0A7E222F0C3C8914351404FC05DB0FDD9CD4EB20 Validity Not Before: Dec 3 10:06:02 2025 GMT Not After : Dec 6 12:36:02 2025 GMT Subject: CN=6F52938A366D441CEDF4F0FCD29D48D5C07F6AE6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:39:06:41:59:50:2a:1d:79:e9:f7:72:9e:5a: 38:76:a1:a3:7a:b4:3e:96:34:81:9e:30:0c:29:04: 67:b6:85:81:a5:02:48:36:4c:e0:09:7d:a9:56:ca: 8e:f5:d1:6c:35:2a:de:3b:71:cf:97:ae:ce:da:63: c8:00:46:af:4c:ae:2f:91:b8:49:80:34:cc:b9:1e: c5:a6:a5:88:80:a8:27:1d:32:08:10:ee:ce:09:96: c1:ad:23:b3:94:fc:41:76:f4:9d:d6:f9:90:95:ff: c5:06:0c:b8:c5:66:8d:0f:35:84:1f:e1:59:f8:a2: 4e:c3:48:5b:72:2b:7e:0a:fb:76:5b:28:fd:f0:f8: d8:d9:90:08:65:52:8b:b7:58:8e:fe:e3:1e:62:ea: af:e0:b1:56:5d:2e:ec:87:7d:0d:5c:92:fc:e5:08: d7:4d:74:1c:72:6c:a0:a6:42:d9:09:64:5c:0c:5c: d7:0b:e7:6c:90:da:ea:05:0a:ed:3b:e1:cc:59:38: b3:3a:35:3a:be:cf:47:0e:16:92:e3:55:19:85:c7: c4:22:90:a1:a0:a1:5a:b1:ef:4c:88:a5:0d:e8:03: 05:57:ca:b6:d7:7a:e6:43:07:1e:d9:7a:ad:f2:56: ad:e5:fc:11:98:5a:fa:a8:dc:3d:b9:a1:2d:95:b7: 27:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6F:52:93:8A:36:6D:44:1C:ED:F4:F0:FC:D2:9D:48:D5:C0:7F:6A:E6 X509v3 Authority Key Identifier: keyid:0A:7E:22:2F:0C:3C:89:14:35:14:04:FC:05:DB:0F:DD:9C:D4:EB:20 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/2cf35a47-2cce-487f-aa27-c9e9de635bec/0/0A7E222F0C3C8914351404FC05DB0FDD9CD4EB20.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0A7E222F0C3C8914351404FC05DB0FDD9CD4EB20.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/2cf35a47-2cce-487f-aa27-c9e9de635bec/0/0A7E222F0C3C8914351404FC05DB0FDD9CD4EB20.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b9:96:0c:0e:42:97:a7:00:31:43:da:cf:f8:e3:52:b2:25:b4: fb:57:aa:3e:0d:d8:fd:d1:cd:07:87:dd:78:6c:90:98:9a:5e: 49:82:bf:91:86:d7:97:70:4d:12:ed:10:8c:b3:98:78:5e:85: 88:7e:7b:be:8c:68:01:cc:da:04:46:fa:34:72:fd:60:0c:44: f5:c5:71:57:8f:f8:c3:bf:3b:95:da:5c:de:de:3f:35:ad:08: c4:94:35:f6:ad:dc:1a:be:eb:f2:4a:dc:df:af:8c:58:32:1c: e4:ad:c5:64:09:cb:11:dd:a6:37:6a:a6:88:ae:02:e8:34:21: c4:48:51:41:ce:1c:2f:12:96:6e:9e:a9:09:7f:af:4b:81:17: 9a:9e:c6:84:5e:e7:2c:8a:a1:8e:79:e7:3b:12:5f:4d:1e:06: 45:89:a1:7e:51:8b:f4:de:14:d5:15:e3:8b:57:d3:db:3e:a8: 18:26:3b:7f:81:27:9f:45:df:55:35:75:63:8c:08:41:47:b0: 33:e5:e0:06:6e:de:b9:44:b6:9b:aa:15:e5:ea:6b:26:ef:1d: 36:fc:3a:a4:b4:2b:6a:50:a2:d5:ee:b0:7a:a3:a4:1a:a1:9c: b4:03:32:83:cc:66:36:ef:85:7a:80:5e:fd:85:25:f9:e2:f2: 90:28:32:b5 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUJgpl+Q3uU77dzBvkhRQQx/yjvkQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMEE3RTIyMkYwQzNDODkxNDM1MTQwNEZDMDVEQjBGREQ5 Q0Q0RUIyMDAeFw0yNTEyMDMxMDA2MDJaFw0yNTEyMDYxMjM2MDJaMDMxMTAvBgNV BAMTKDZGNTI5MzhBMzY2RDQ0MUNFREY0RjBGQ0QyOUQ0OEQ1QzA3RjZBRTYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCzOQZBWVAqHXnp93KeWjh2oaN6 tD6WNIGeMAwpBGe2hYGlAkg2TOAJfalWyo710Ww1Kt47cc+Xrs7aY8gARq9Mri+R uEmANMy5HsWmpYiAqCcdMggQ7s4JlsGtI7OU/EF29J3W+ZCV/8UGDLjFZo0PNYQf 4Vn4ok7DSFtyK34K+3ZbKP3w+NjZkAhlUou3WI7+4x5i6q/gsVZdLuyHfQ1ckvzl CNdNdBxybKCmQtkJZFwMXNcL52yQ2uoFCu074cxZOLM6NTq+z0cOFpLjVRmFx8Qi kKGgoVqx70yIpQ3oAwVXyrbXeuZDBx7Zeq3yVq3l/BGYWvqo3D25oS2VtyfZAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUb1KTijZtRBzt9PD80p1I1cB/auYwHwYDVR0j BBgwFoAUCn4iLww8iRQ1FAT8BdsP3ZzU6yAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y Y2YzNWE0Ny0yY2NlLTQ4N2YtYWEyNy1jOWU5ZGU2MzViZWMvMC8wQTdFMjIyRjBD M0M4OTE0MzUxNDA0RkMwNURCMEZERDlDRDRFQjIwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMEE3RTIyMkYwQzNDODkxNDM1MTQwNEZDMDVEQjBGREQ5Q0Q0 RUIyMC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMmNmMzVhNDctMmNjZS00ODdmLWFh MjctYzllOWRlNjM1YmVjLzAvMEE3RTIyMkYwQzNDODkxNDM1MTQwNEZDMDVEQjBG REQ5Q0Q0RUIyMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALmWDA5Cl6cAMUPaz/jjUrIltPtXqj4N2P3R zQeH3XhskJiaXkmCv5GG15dwTRLtEIyzmHhehYh+e76MaAHM2gRG+jRy/WAMRPXF cVeP+MO/O5XaXN7ePzWtCMSUNfat3Bq+6/JK3N+vjFgyHOStxWQJyxHdpjdqpoiu Aug0IcRIUUHOHC8Slm6eqQl/r0uBF5qexoRe5yyKoY555zsSX00eBkWJoX5Ri/Te FNUV44tX09s+qBgmO3+BJ59F31U1dWOMCEFHsDPl4AZu3rlEtpuqFeXqaybvHTb8 OqS0K2pQotXusHqjpBqhnLQDMoPMZjbvhXqAXv2FJfni8pAoMrU= -----END CERTIFICATE-----Generated at Wed Dec 3 14:42:26 2025 by rpki-client