This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/303ebabb-999f-4f3e-84c1-bf279bfe1787/0/7FEF6BF53FA3122A0F09CEF4B408E13792A14545.mft File: 7FEF6BF53FA3122A0F09CEF4B408E13792A14545.mft (raw, json) Hash identifier: b88rD3lRya4lEqwy1uGpF07qkRbhr3OTZBgmVyxKsbc= Subject key identifier: D0:C7:F8:80:63:88:22:14:E9:9B:74:5A:29:6C:90:55:B9:D5:71:0B Authority key identifier: 7F:EF:6B:F5:3F:A3:12:2A:0F:09:CE:F4:B4:08:E1:37:92:A1:45:45 Certificate issuer: /CN=7FEF6BF53FA3122A0F09CEF4B408E13792A14545 Certificate serial: 7B7BD57081EE2D4157BDEF0DF6B9885DEA750FE4 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7FEF6BF53FA3122A0F09CEF4B408E13792A14545.cer Subject info access: rsync://repo-rpki.idnic.net/repo/303ebabb-999f-4f3e-84c1-bf279bfe1787/0/7FEF6BF53FA3122A0F09CEF4B408E13792A14545.mft Manifest number: 0235 Signing time: Wed 17 Dec 2025 08:21:39 +0000 Manifest this update: Wed 17 Dec 2025 08:16:39 +0000 Manifest next update: Sat 20 Dec 2025 19:47:39 +0000 Files and hashes: 1: 7FEF6BF53FA3122A0F09CEF4B408E13792A14545.crl (hash: tb3X/Zsg8DoHHyMEFC0ePhtHPr+Ph44cB23vUFQo6Sw=) 2: 3130332e3136372e3130342e302f32342d3234203d3e20313339343130.roa (hash: SapOMMIVothLtXId44y92PXYWgqYBrvZdRlhJ/EEALc=) 3: 3130332e3136372e3130352e302f32342d3234203d3e203338333230.roa (hash: ruqE2F34CZN/5KqJhiyDZO8euZHnYhKqfwBiaFPn2lc=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/303ebabb-999f-4f3e-84c1-bf279bfe1787/0/7FEF6BF53FA3122A0F09CEF4B408E13792A14545.crl rsync://repo-rpki.idnic.net/repo/303ebabb-999f-4f3e-84c1-bf279bfe1787/0/7FEF6BF53FA3122A0F09CEF4B408E13792A14545.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7FEF6BF53FA3122A0F09CEF4B408E13792A14545.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 20 Dec 2025 19:47:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7b:7b:d5:70:81:ee:2d:41:57:bd:ef:0d:f6:b9:88:5d:ea:75:0f:e4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7FEF6BF53FA3122A0F09CEF4B408E13792A14545 Validity Not Before: Dec 17 08:16:39 2025 GMT Not After : Dec 20 19:47:39 2025 GMT Subject: CN=D0C7F88063882214E99B745A296C9055B9D5710B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:87:64:bb:cd:c7:f8:83:70:f5:f0:54:bd:39: fa:4d:32:06:8b:7d:8e:57:97:f1:96:70:9a:c1:11: fd:3d:fd:8b:4d:68:b5:70:26:13:e4:58:0b:a4:7f: 97:cb:ea:16:47:25:bf:5c:f2:06:1d:91:81:0f:08: c9:ee:2a:bb:1b:c6:63:13:7b:52:45:fe:bb:8d:e8: de:2d:80:2d:8c:0f:a9:29:e2:64:4b:ca:3b:de:89: d5:a2:85:46:83:ab:ab:f3:44:1d:db:8a:01:43:55: ea:ce:63:7d:62:f0:3a:a4:e3:b5:27:20:f3:78:62: a0:a7:2d:d7:9e:fa:1f:0c:85:bb:9a:b8:5a:84:57: 4f:56:f4:91:d0:b2:bc:f5:f5:1a:3d:16:d6:7e:d0: 9d:fe:51:53:b1:9a:7b:58:87:45:bc:99:78:9c:78: b8:94:63:65:b9:4e:b9:63:d5:7c:27:53:36:6a:4a: 55:63:40:22:2f:6d:a2:73:d0:2b:cc:d9:70:88:d4: e4:b9:21:96:96:94:44:0b:32:bb:78:d9:de:ad:91: e5:16:49:04:f0:f2:cf:dc:0c:52:f8:33:ad:29:63: 6a:c9:a8:ad:3a:15:f0:18:dc:eb:72:91:40:c9:34: 74:0a:fc:01:b2:7d:7a:15:80:93:08:41:b3:61:2e: e4:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D0:C7:F8:80:63:88:22:14:E9:9B:74:5A:29:6C:90:55:B9:D5:71:0B X509v3 Authority Key Identifier: keyid:7F:EF:6B:F5:3F:A3:12:2A:0F:09:CE:F4:B4:08:E1:37:92:A1:45:45 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/303ebabb-999f-4f3e-84c1-bf279bfe1787/0/7FEF6BF53FA3122A0F09CEF4B408E13792A14545.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7FEF6BF53FA3122A0F09CEF4B408E13792A14545.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/303ebabb-999f-4f3e-84c1-bf279bfe1787/0/7FEF6BF53FA3122A0F09CEF4B408E13792A14545.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 30:98:7e:3d:0b:26:b9:b3:fb:7c:5f:60:52:12:17:92:7e:45: 0a:61:61:d0:c8:af:e6:3d:a6:57:d2:bf:28:6f:e8:ba:83:b1: dd:1b:58:f3:2f:cc:b5:b4:7a:ad:6f:7b:d1:96:89:50:68:36: 10:5d:6e:5e:6b:52:3c:86:49:3e:12:3c:ba:46:ac:9d:fd:a9: 42:94:d5:b3:27:f4:3e:09:ca:dd:56:8e:6a:d9:7b:49:8a:0f: 24:0e:87:0b:58:31:1a:68:83:4f:44:71:cf:10:73:3a:d2:b5: e0:d9:48:50:3f:67:cb:31:8f:89:4d:6d:89:ee:f6:f8:bc:46: a7:84:38:d4:2a:97:05:f1:33:4e:0b:5e:d9:73:44:68:5c:39: f3:cf:11:2e:a4:4a:37:b7:8e:f8:83:19:b8:a8:93:f7:f2:a0: 67:9e:53:9d:b6:bc:0e:b1:4c:d8:ec:f6:d8:75:e5:71:fa:75: 40:fc:dc:c5:91:e8:5f:92:c1:1a:11:8d:19:6b:46:5c:ff:54: 49:ba:c6:90:fe:21:aa:da:a4:46:a9:2d:b8:ab:8a:78:33:1e: 98:0f:50:39:50:53:ed:e6:c5:71:17:c1:16:a6:c3:fb:d7:4c: 36:06:de:65:a8:5f:65:a8:85:2b:57:a9:76:5a:45:68:e3:78: 69:4c:28:18 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUe3vVcIHuLUFXve8N9rmIXep1D+QwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoN0ZFRjZCRjUzRkEzMTIyQTBGMDlDRUY0QjQwOEUxMzc5 MkExNDU0NTAeFw0yNTEyMTcwODE2MzlaFw0yNTEyMjAxOTQ3MzlaMDMxMTAvBgNV BAMTKEQwQzdGODgwNjM4ODIyMTRFOTlCNzQ1QTI5NkM5MDU1QjlENTcxMEIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDQh2S7zcf4g3D18FS9OfpNMgaL fY5Xl/GWcJrBEf09/YtNaLVwJhPkWAukf5fL6hZHJb9c8gYdkYEPCMnuKrsbxmMT e1JF/ruN6N4tgC2MD6kp4mRLyjveidWihUaDq6vzRB3bigFDVerOY31i8Dqk47Un IPN4YqCnLdee+h8MhbuauFqEV09W9JHQsrz19Ro9FtZ+0J3+UVOxmntYh0W8mXic eLiUY2W5Trlj1XwnUzZqSlVjQCIvbaJz0CvM2XCI1OS5IZaWlEQLMrt42d6tkeUW SQTw8s/cDFL4M60pY2rJqK06FfAY3OtykUDJNHQK/AGyfXoVgJMIQbNhLuQFAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU0Mf4gGOIIhTpm3RaKWyQVbnVcQswHwYDVR0j BBgwFoAUf+9r9T+jEioPCc70tAjhN5KhRUUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z MDNlYmFiYi05OTlmLTRmM2UtODRjMS1iZjI3OWJmZTE3ODcvMC83RkVGNkJGNTNG QTMxMjJBMEYwOUNFRjRCNDA4RTEzNzkyQTE0NTQ1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvN0ZFRjZCRjUzRkEzMTIyQTBGMDlDRUY0QjQwOEUxMzc5MkEx NDU0NS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMzAzZWJhYmItOTk5Zi00ZjNlLTg0 YzEtYmYyNzliZmUxNzg3LzAvN0ZFRjZCRjUzRkEzMTIyQTBGMDlDRUY0QjQwOEUx Mzc5MkExNDU0NS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADCYfj0LJrmz+3xfYFISF5J+RQphYdDIr+Y9 plfSvyhv6LqDsd0bWPMvzLW0eq1ve9GWiVBoNhBdbl5rUjyGST4SPLpGrJ39qUKU 1bMn9D4Jyt1WjmrZe0mKDyQOhwtYMRpog09Ecc8QczrSteDZSFA/Z8sxj4lNbYnu 9vi8RqeEONQqlwXxM04LXtlzRGhcOfPPES6kSje3jviDGbiok/fyoGeeU522vA6x TNjs9th15XH6dUD83MWR6F+SwRoRjRlrRlz/VEm6xpD+IarapEapLbiringzHpgP UDlQU+3mxXEXwRamw/vXTDYG3mWoX2WohStXqXZaRWjjeGlMKBg= -----END CERTIFICATE-----Generated at Fri Dec 19 09:49:03 2025 by rpki-client