This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/2d0927e6-8a0a-4fa7-8969-9fb9d694397c/0/7EFA64C11573C292E192C2CDEAC4D5F8B8C21DBD.mft File: 7EFA64C11573C292E192C2CDEAC4D5F8B8C21DBD.mft (raw, json) Hash identifier: AQERHJF5bkJoTFkLsex/xVZK8NWma7NWZwDCDHrqls4= Subject key identifier: 80:E5:9C:C5:75:83:BC:B3:07:3C:96:05:EC:FC:A0:DB:DB:DD:15:63 Authority key identifier: 7E:FA:64:C1:15:73:C2:92:E1:92:C2:CD:EA:C4:D5:F8:B8:C2:1D:BD Certificate issuer: /CN=7EFA64C11573C292E192C2CDEAC4D5F8B8C21DBD Certificate serial: 7C344C9EA73300D81A5C84E4612384A696F09C4D Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7EFA64C11573C292E192C2CDEAC4D5F8B8C21DBD.cer Subject info access: rsync://repo-rpki.idnic.net/repo/2d0927e6-8a0a-4fa7-8969-9fb9d694397c/0/7EFA64C11573C292E192C2CDEAC4D5F8B8C21DBD.mft Manifest number: 052A Signing time: Mon 01 Dec 2025 20:02:32 +0000 Manifest this update: Mon 01 Dec 2025 19:57:32 +0000 Manifest next update: Fri 05 Dec 2025 05:43:32 +0000 Files and hashes: 1: 7EFA64C11573C292E192C2CDEAC4D5F8B8C21DBD.crl (hash: sCLkBlfl9xGfce1hXaRhLu/DkQXZA2HUaAEHAzJzHNk=) 2: 3130332e31392e35392e302f32342d3234203d3e20313332363337.roa (hash: 9iu7ypE0DOgzIq5HMAnIVo4kGKAs2AlVlOiv5hSXbmQ=) 3: 323430323a333263303a3a2f33322d3332203d3e20313332363337.roa (hash: alekTqBBNWqAI5oX1dPM5eFA94/uemvvhURj4TPNUr4=) 4: 3130332e31392e35372e302f32342d3234203d3e20313332363337.roa (hash: 3QyxS0wngZcXbj5VM1EbTD1iHrmW5SRruXkHQg8JcfQ=) 5: 3130332e31392e35362e302f32342d3234203d3e20313332363337.roa (hash: 1GyJK6Rqd4FApqF94uFU3YdEq/5dWlAXo/swD/OMmMQ=) 6: 3130332e31392e35382e302f32342d3234203d3e20313332363337.roa (hash: Pfzw8Y0xsuh7UKTJV02Yk1orDZhcKdBrnY+4Hy9M/Ss=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/2d0927e6-8a0a-4fa7-8969-9fb9d694397c/0/7EFA64C11573C292E192C2CDEAC4D5F8B8C21DBD.crl rsync://repo-rpki.idnic.net/repo/2d0927e6-8a0a-4fa7-8969-9fb9d694397c/0/7EFA64C11573C292E192C2CDEAC4D5F8B8C21DBD.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7EFA64C11573C292E192C2CDEAC4D5F8B8C21DBD.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 05 Dec 2025 05:43:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7c:34:4c:9e:a7:33:00:d8:1a:5c:84:e4:61:23:84:a6:96:f0:9c:4d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7EFA64C11573C292E192C2CDEAC4D5F8B8C21DBD Validity Not Before: Dec 1 19:57:32 2025 GMT Not After : Dec 5 05:43:32 2025 GMT Subject: CN=80E59CC57583BCB3073C9605ECFCA0DBDBDD1563 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:be:f7:25:08:e5:a5:fe:68:1a:9a:7f:ed:5b: d1:c1:55:c8:84:35:e1:c7:0c:12:55:32:60:22:4b: 26:6b:af:87:b6:d1:60:df:1b:f4:a3:2e:de:8c:e4: b6:dd:70:e0:eb:d0:a5:a6:7b:31:8f:26:c0:ec:20: 84:9f:b8:3c:e8:db:7c:98:6e:75:56:13:3d:0b:2c: be:82:b1:54:c3:bd:d6:e0:ba:ef:87:b1:5d:5d:f5: dd:b0:0d:3c:4e:f5:85:9d:b1:c0:6a:68:20:21:b8: 4f:af:ef:c2:76:86:5d:18:8e:f5:42:57:0e:19:3c: bb:8d:71:4b:4e:8e:7f:6b:43:2f:8b:6d:b9:5d:85: 58:2a:fc:c0:f7:d9:90:57:66:36:b1:1a:0b:4b:92: bb:89:02:b2:01:a0:ae:96:a9:05:4a:16:5b:f2:18: 6b:e0:5c:7c:ee:07:76:05:ab:d5:cf:6e:8c:04:a6: e4:1d:a8:07:ba:bd:fb:26:af:6d:be:83:3f:59:7d: 19:08:be:ae:3a:1c:ee:d4:1b:d0:34:d3:ec:33:91: 6d:93:68:12:41:27:43:63:9f:0e:71:1e:6f:74:02: 71:12:5e:0f:7a:f9:0b:86:fd:7a:2f:76:45:67:08: 95:ee:c9:db:fb:95:d7:15:b3:6c:ad:77:f7:d5:c3: 76:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 80:E5:9C:C5:75:83:BC:B3:07:3C:96:05:EC:FC:A0:DB:DB:DD:15:63 X509v3 Authority Key Identifier: keyid:7E:FA:64:C1:15:73:C2:92:E1:92:C2:CD:EA:C4:D5:F8:B8:C2:1D:BD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/2d0927e6-8a0a-4fa7-8969-9fb9d694397c/0/7EFA64C11573C292E192C2CDEAC4D5F8B8C21DBD.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7EFA64C11573C292E192C2CDEAC4D5F8B8C21DBD.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/2d0927e6-8a0a-4fa7-8969-9fb9d694397c/0/7EFA64C11573C292E192C2CDEAC4D5F8B8C21DBD.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 25:fd:37:b2:19:86:43:ea:cc:b2:d9:57:3c:a6:68:c9:1f:3e: e0:23:75:4b:30:c4:81:6d:e8:dd:38:ff:b3:e7:65:cb:70:5c: 45:af:d5:3d:46:ca:6f:e8:c0:9b:b2:1f:10:14:7e:84:4c:58: 15:23:45:4d:50:cc:01:84:fe:6e:55:5f:5e:66:b3:f9:76:46: ff:47:86:5c:b0:67:c8:d7:c4:5e:35:ba:1b:4e:53:d2:79:e5: c4:01:aa:0b:37:7b:05:a2:64:82:be:f0:ff:a5:46:95:4e:2c: fa:a7:79:f0:21:bf:43:71:73:1a:13:11:b4:91:63:19:78:89: 9a:89:d6:43:6d:26:c1:73:74:bd:2b:b2:1b:2f:a0:ca:c9:24: 21:28:b9:8d:f6:17:ae:56:be:95:02:d1:a9:af:b1:5e:93:e0: 0b:d7:a7:1c:d8:0e:1c:6b:74:1d:7f:e0:57:23:fd:1f:dd:b4: 0b:1c:f3:65:81:6b:3e:3c:89:94:bb:fa:ff:a4:b3:b2:a2:60: 3d:aa:df:9b:ef:6c:c7:c5:d1:b0:02:7a:47:39:6c:64:ad:13: cf:ca:3d:f1:00:e3:21:d4:06:68:d8:34:ac:e5:37:e2:a4:58: 6f:74:c2:55:1a:39:5e:be:44:d0:71:aa:cc:f7:a0:7f:06:91: c8:b9:c0:e7 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUfDRMnqczANgaXITkYSOEppbwnE0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoN0VGQTY0QzExNTczQzI5MkUxOTJDMkNERUFDNEQ1RjhC OEMyMURCRDAeFw0yNTEyMDExOTU3MzJaFw0yNTEyMDUwNTQzMzJaMDMxMTAvBgNV BAMTKDgwRTU5Q0M1NzU4M0JDQjMwNzNDOTYwNUVDRkNBMERCREJERDE1NjMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDIvvclCOWl/mgamn/tW9HBVciE NeHHDBJVMmAiSyZrr4e20WDfG/SjLt6M5LbdcODr0KWmezGPJsDsIISfuDzo23yY bnVWEz0LLL6CsVTDvdbguu+HsV1d9d2wDTxO9YWdscBqaCAhuE+v78J2hl0YjvVC Vw4ZPLuNcUtOjn9rQy+LbbldhVgq/MD32ZBXZjaxGgtLkruJArIBoK6WqQVKFlvy GGvgXHzuB3YFq9XPbowEpuQdqAe6vfsmr22+gz9ZfRkIvq46HO7UG9A00+wzkW2T aBJBJ0Njnw5xHm90AnESXg96+QuG/XovdkVnCJXuydv7ldcVs2ytd/fVw3a/AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUgOWcxXWDvLMHPJYF7Pyg29vdFWMwHwYDVR0j BBgwFoAUfvpkwRVzwpLhksLN6sTV+LjCHb0wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y ZDA5MjdlNi04YTBhLTRmYTctODk2OS05ZmI5ZDY5NDM5N2MvMC83RUZBNjRDMTE1 NzNDMjkyRTE5MkMyQ0RFQUM0RDVGOEI4QzIxREJELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvN0VGQTY0QzExNTczQzI5MkUxOTJDMkNERUFDNEQ1RjhCOEMy MURCRC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMmQwOTI3ZTYtOGEwYS00ZmE3LTg5 NjktOWZiOWQ2OTQzOTdjLzAvN0VGQTY0QzExNTczQzI5MkUxOTJDMkNERUFDNEQ1 RjhCOEMyMURCRC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACX9N7IZhkPqzLLZVzymaMkfPuAjdUswxIFt 6N04/7PnZctwXEWv1T1Gym/owJuyHxAUfoRMWBUjRU1QzAGE/m5VX15ms/l2Rv9H hlywZ8jXxF41uhtOU9J55cQBqgs3ewWiZIK+8P+lRpVOLPqnefAhv0NxcxoTEbSR Yxl4iZqJ1kNtJsFzdL0rshsvoMrJJCEouY32F65WvpUC0amvsV6T4AvXpxzYDhxr dB1/4Fcj/R/dtAsc82WBaz48iZS7+v+ks7KiYD2q35vvbMfF0bACekc5bGStE8/K PfEA4yHUBmjYNKzlN+KkWG90wlUaOV6+RNBxqsz3oH8Gkci5wOc= -----END CERTIFICATE-----Generated at Wed Dec 3 14:43:52 2025 by rpki-client