This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/33dc034f-3823-48af-953d-aaa873b0fb6a/1/7E8DE1549E89D4B480B556695CABE9CE7FDF5F24.mft File: 7E8DE1549E89D4B480B556695CABE9CE7FDF5F24.mft (raw, json) Hash identifier: gNnoq8XpE+JJWtJ/Hjf7OkjhU451ViYjpw7v3reTU9o= Subject key identifier: 9E:A2:DB:E5:EE:3A:37:6C:E4:36:B0:21:00:72:F2:65:92:9E:D0:06 Authority key identifier: 7E:8D:E1:54:9E:89:D4:B4:80:B5:56:69:5C:AB:E9:CE:7F:DF:5F:24 Certificate issuer: /CN=7E8DE1549E89D4B480B556695CABE9CE7FDF5F24 Certificate serial: 44F873038311FFF3BEF14AEEF8AC00B9CA95036C Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7E8DE1549E89D4B480B556695CABE9CE7FDF5F24.cer Subject info access: rsync://repo-rpki.idnic.net/repo/33dc034f-3823-48af-953d-aaa873b0fb6a/1/7E8DE1549E89D4B480B556695CABE9CE7FDF5F24.mft Manifest number: AA Signing time: Wed 17 Dec 2025 12:21:06 +0000 Manifest this update: Wed 17 Dec 2025 12:16:06 +0000 Manifest next update: Sat 20 Dec 2025 14:54:06 +0000 Files and hashes: 1: 323030313a6466343a396134303a3a2f34382d3438203d3e20313533313439.roa (hash: ScM8Q2LMGZOkrNtPg/8PjLIyPY1b7rJ+ByzrKdDmKiU=) 2: 7E8DE1549E89D4B480B556695CABE9CE7FDF5F24.crl (hash: OjMTTFnGsTD0xxYZYykAJ1sGPK1G4KSMqtp6QFqVqAU=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/33dc034f-3823-48af-953d-aaa873b0fb6a/1/7E8DE1549E89D4B480B556695CABE9CE7FDF5F24.crl rsync://repo-rpki.idnic.net/repo/33dc034f-3823-48af-953d-aaa873b0fb6a/1/7E8DE1549E89D4B480B556695CABE9CE7FDF5F24.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7E8DE1549E89D4B480B556695CABE9CE7FDF5F24.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 20 Dec 2025 14:54:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 44:f8:73:03:83:11:ff:f3:be:f1:4a:ee:f8:ac:00:b9:ca:95:03:6c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7E8DE1549E89D4B480B556695CABE9CE7FDF5F24 Validity Not Before: Dec 17 12:16:06 2025 GMT Not After : Dec 20 14:54:06 2025 GMT Subject: CN=9EA2DBE5EE3A376CE436B0210072F265929ED006 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:fb:56:1f:81:47:b5:1d:d6:ff:0d:39:55:76:c3: 98:23:72:5f:0d:bc:13:ba:a6:32:6f:08:4d:65:d4: ea:8e:f6:93:97:4e:3f:f9:8f:0a:e2:0d:0b:99:67: 36:ab:dd:8c:5d:d7:5f:41:b3:7a:f4:d7:70:73:f6: 5d:d8:73:f3:28:54:72:f3:df:6c:86:42:e4:b4:22: b6:50:62:db:4b:b0:38:26:27:9a:da:8a:45:81:70: 4c:a6:a7:15:90:88:e2:ab:b0:2c:60:e6:a1:9b:80: 8d:03:32:bb:a5:83:0a:7d:47:e9:ea:f2:06:a0:ef: 53:33:63:e4:d7:1f:44:47:27:db:c2:60:b4:30:38: f1:56:c9:b9:25:b8:b3:28:e3:35:b4:f2:34:d9:87: d1:e0:e2:b5:63:d7:3d:5d:c6:b8:f2:d0:12:0b:29: a2:f7:ec:c0:3f:0c:c4:aa:cc:7e:c2:d6:a4:94:e1: 0c:5a:c4:01:1c:f4:4d:71:09:48:46:57:5a:4d:4d: e0:a8:94:19:0e:d3:00:32:74:b4:e2:1f:73:07:5a: 42:9c:77:45:f6:71:86:f4:9d:14:39:e2:5d:81:86: d2:51:83:74:0d:aa:33:92:b6:f9:dc:8d:94:db:52: 05:6e:6b:bf:30:09:14:23:8b:32:60:78:98:0e:ff: 77:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:A2:DB:E5:EE:3A:37:6C:E4:36:B0:21:00:72:F2:65:92:9E:D0:06 X509v3 Authority Key Identifier: keyid:7E:8D:E1:54:9E:89:D4:B4:80:B5:56:69:5C:AB:E9:CE:7F:DF:5F:24 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/33dc034f-3823-48af-953d-aaa873b0fb6a/1/7E8DE1549E89D4B480B556695CABE9CE7FDF5F24.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7E8DE1549E89D4B480B556695CABE9CE7FDF5F24.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/33dc034f-3823-48af-953d-aaa873b0fb6a/1/7E8DE1549E89D4B480B556695CABE9CE7FDF5F24.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 02:49:45:67:cb:f1:80:e3:dc:56:24:fc:4b:90:0b:d7:bf:52: 96:19:a0:31:63:4b:63:8a:e4:64:28:e6:d5:99:ba:a3:fd:14: 42:01:e0:cb:d8:fc:46:04:06:b7:fe:89:d5:c4:63:d9:3e:c9: 37:17:23:c1:c7:67:20:a2:56:68:cd:8d:6d:50:15:c8:28:11: 2f:e5:32:fc:29:d6:2a:42:0f:b7:77:ca:38:f6:94:23:39:f2: 1f:51:0b:2e:d9:80:87:19:17:ee:65:ee:34:55:5c:db:a3:4d: 30:0a:b1:b9:8e:78:1d:f7:4e:e3:81:99:69:76:1c:5a:c7:97: 22:16:20:45:ab:52:67:3b:03:37:29:a8:22:9e:19:1b:f8:1a: 3b:2a:0a:c4:50:ab:9a:aa:ad:6b:90:a8:a6:eb:8e:63:d9:72: ab:5a:d3:76:68:f1:27:9d:eb:1e:6e:d7:e6:ed:5c:ac:f1:29: 3f:51:9d:b9:3a:f0:a7:3b:7b:36:77:c7:bd:2a:40:91:55:1b: 50:fc:ee:a4:e0:a6:b0:5e:a7:12:d0:43:f8:92:76:9b:e3:aa: b8:9b:14:61:72:38:b5:04:dc:f6:e0:52:b8:5a:57:a1:7d:d9: 28:4f:5a:84:08:52:f3:5b:94:5b:69:d9:fe:07:ac:60:96:5d: 3c:a8:12:fe -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIURPhzA4MR//O+8Uru+KwAucqVA2wwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoN0U4REUxNTQ5RTg5RDRCNDgwQjU1NjY5NUNBQkU5Q0U3 RkRGNUYyNDAeFw0yNTEyMTcxMjE2MDZaFw0yNTEyMjAxNDU0MDZaMDMxMTAvBgNV BAMTKDlFQTJEQkU1RUUzQTM3NkNFNDM2QjAyMTAwNzJGMjY1OTI5RUQwMDYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD7Vh+BR7Ud1v8NOVV2w5gjcl8N vBO6pjJvCE1l1OqO9pOXTj/5jwriDQuZZzar3Yxd119Bs3r013Bz9l3Yc/MoVHLz 32yGQuS0IrZQYttLsDgmJ5raikWBcEympxWQiOKrsCxg5qGbgI0DMrulgwp9R+nq 8gag71MzY+TXH0RHJ9vCYLQwOPFWybkluLMo4zW08jTZh9Hg4rVj1z1dxrjy0BIL KaL37MA/DMSqzH7C1qSU4QxaxAEc9E1xCUhGV1pNTeColBkO0wAydLTiH3MHWkKc d0X2cYb0nRQ54l2BhtJRg3QNqjOStvncjZTbUgVua78wCRQjizJgeJgO/3dBAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUnqLb5e46N2zkNrAhAHLyZZKe0AYwHwYDVR0j BBgwFoAUfo3hVJ6J1LSAtVZpXKvpzn/fXyQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z M2RjMDM0Zi0zODIzLTQ4YWYtOTUzZC1hYWE4NzNiMGZiNmEvMS83RThERTE1NDlF ODlENEI0ODBCNTU2Njk1Q0FCRTlDRTdGREY1RjI0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvN0U4REUxNTQ5RTg5RDRCNDgwQjU1NjY5NUNBQkU5Q0U3RkRG NUYyNC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMzNkYzAzNGYtMzgyMy00OGFmLTk1 M2QtYWFhODczYjBmYjZhLzEvN0U4REUxNTQ5RTg5RDRCNDgwQjU1NjY5NUNBQkU5 Q0U3RkRGNUYyNC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAJJRWfL8YDj3FYk/EuQC9e/UpYZoDFjS2OK 5GQo5tWZuqP9FEIB4MvY/EYEBrf+idXEY9k+yTcXI8HHZyCiVmjNjW1QFcgoES/l Mvwp1ipCD7d3yjj2lCM58h9RCy7ZgIcZF+5l7jRVXNujTTAKsbmOeB33TuOBmWl2 HFrHlyIWIEWrUmc7AzcpqCKeGRv4GjsqCsRQq5qqrWuQqKbrjmPZcqta03Zo8Sed 6x5u1+btXKzxKT9Rnbk68Kc7ezZ3x70qQJFVG1D87qTgprBepxLQQ/iSdpvjqrib FGFyOLUE3PbgUrhaV6F92ShPWoQIUvNblFtp2f4HrGCWXTyoEv4= -----END CERTIFICATE-----Generated at Fri Dec 19 08:07:16 2025 by rpki-client