This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/33dc034f-3823-48af-953d-aaa873b0fb6a/1/7E8DE1549E89D4B480B556695CABE9CE7FDF5F24.mft File: 7E8DE1549E89D4B480B556695CABE9CE7FDF5F24.mft (raw, json) Hash identifier: Vo1gu2MwtEF30yoT+vTr6aZAgTo7xvcr3OY5NJfbUYE= Subject key identifier: 79:DE:F7:0B:0E:64:EE:E6:31:6F:98:ED:10:42:32:5F:E6:D1:DB:8A Authority key identifier: 7E:8D:E1:54:9E:89:D4:B4:80:B5:56:69:5C:AB:E9:CE:7F:DF:5F:24 Certificate issuer: /CN=7E8DE1549E89D4B480B556695CABE9CE7FDF5F24 Certificate serial: 7439674935C6828D3004B31806C0A478270523EC Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7E8DE1549E89D4B480B556695CABE9CE7FDF5F24.cer Subject info access: rsync://repo-rpki.idnic.net/repo/33dc034f-3823-48af-953d-aaa873b0fb6a/1/7E8DE1549E89D4B480B556695CABE9CE7FDF5F24.mft Manifest number: A3 Signing time: Mon 01 Dec 2025 14:31:05 +0000 Manifest this update: Mon 01 Dec 2025 14:26:05 +0000 Manifest next update: Thu 04 Dec 2025 17:30:05 +0000 Files and hashes: 1: 7E8DE1549E89D4B480B556695CABE9CE7FDF5F24.crl (hash: 5x1azeGK0gh7dRfZAJs9EYHM/iDFCy9c/eZQvkXJGKs=) 2: 323030313a6466343a396134303a3a2f34382d3438203d3e20313533313439.roa (hash: ScM8Q2LMGZOkrNtPg/8PjLIyPY1b7rJ+ByzrKdDmKiU=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/33dc034f-3823-48af-953d-aaa873b0fb6a/1/7E8DE1549E89D4B480B556695CABE9CE7FDF5F24.crl rsync://repo-rpki.idnic.net/repo/33dc034f-3823-48af-953d-aaa873b0fb6a/1/7E8DE1549E89D4B480B556695CABE9CE7FDF5F24.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7E8DE1549E89D4B480B556695CABE9CE7FDF5F24.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 04 Dec 2025 17:30:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 74:39:67:49:35:c6:82:8d:30:04:b3:18:06:c0:a4:78:27:05:23:ec Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7E8DE1549E89D4B480B556695CABE9CE7FDF5F24 Validity Not Before: Dec 1 14:26:05 2025 GMT Not After : Dec 4 17:30:05 2025 GMT Subject: CN=79DEF70B0E64EEE6316F98ED1042325FE6D1DB8A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:ea:68:a7:84:0a:1e:f4:e4:63:95:74:16:0f: af:f6:2c:8d:60:ad:1a:bf:9a:73:b8:66:7a:e7:c4: ef:b7:98:f5:38:9a:86:31:98:80:12:52:dd:6e:bb: 0f:a8:aa:e8:d0:d3:89:58:50:3e:32:7d:d2:0a:ce: 89:f3:e1:f9:f8:ba:56:81:2c:a5:7d:87:fe:9c:5d: aa:57:41:31:ca:cd:49:6f:d3:dd:18:34:a5:5d:81: fe:bf:4f:97:48:ab:16:a6:0a:b6:3d:4e:44:f4:9b: e1:c1:0b:f4:c6:3e:8c:72:c9:03:29:1e:3f:04:83: fd:e0:5b:8a:08:73:ed:26:16:34:cf:40:60:72:2e: 0a:0c:86:d1:08:1f:9b:c0:ef:2e:b7:f7:b6:0f:46: 86:ca:1d:73:f7:4a:f3:02:5a:6a:fd:b3:c9:80:4d: 2d:98:72:83:3b:3e:86:cd:19:8f:1e:92:f9:e6:a5: 98:3b:14:e8:96:65:f0:84:eb:ba:f8:85:f0:b9:78: 05:27:e2:28:5a:67:df:92:00:80:37:51:1a:77:c9: f0:31:16:87:27:4d:1f:e6:e1:db:6b:a1:0a:90:20: 37:f8:7d:cb:21:ec:56:31:24:31:ad:5a:52:84:fe: f4:95:90:aa:86:b6:c7:ef:e7:e9:b5:b0:8a:da:48: ee:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 79:DE:F7:0B:0E:64:EE:E6:31:6F:98:ED:10:42:32:5F:E6:D1:DB:8A X509v3 Authority Key Identifier: keyid:7E:8D:E1:54:9E:89:D4:B4:80:B5:56:69:5C:AB:E9:CE:7F:DF:5F:24 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/33dc034f-3823-48af-953d-aaa873b0fb6a/1/7E8DE1549E89D4B480B556695CABE9CE7FDF5F24.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7E8DE1549E89D4B480B556695CABE9CE7FDF5F24.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/33dc034f-3823-48af-953d-aaa873b0fb6a/1/7E8DE1549E89D4B480B556695CABE9CE7FDF5F24.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 59:7a:04:44:81:37:14:35:fb:1a:43:42:fb:07:c8:48:5a:a6: 51:d8:7c:64:3a:85:fd:43:0a:9e:fb:23:80:aa:9c:49:e8:dd: 4e:4f:63:66:4d:04:a2:c1:bb:5c:3f:eb:b0:e7:f3:db:68:f3: 99:4c:86:92:6d:be:11:5d:47:63:fb:a3:07:af:17:47:81:b7: 34:af:40:bb:39:63:4d:4d:12:f8:2d:02:07:40:c3:78:98:01: 6c:63:b6:11:97:5a:d2:65:dd:41:6a:6a:72:d3:41:80:00:1c: 08:95:5c:c2:a5:11:68:ef:4c:72:68:6c:0e:2e:a2:90:9a:20: ef:bb:c5:d7:c7:33:0b:5c:eb:6f:b5:ee:f5:81:ca:6b:84:69: df:73:22:e5:c6:b3:16:cb:64:7c:87:fb:9a:e5:2c:c7:85:fe: 96:e8:9e:e3:68:08:34:67:93:10:a2:de:29:97:6c:3e:04:ff: 50:ba:86:9e:8d:de:bf:d9:e1:0d:07:e8:72:0f:1b:09:40:24: e3:79:78:e7:44:2e:6c:77:0f:91:1c:64:5c:91:0f:47:f4:d2: ef:e2:9a:99:2d:04:3c:0a:3c:9c:8e:5f:56:d1:5c:6f:09:d4: 1a:20:a3:72:8b:9e:2e:c5:03:91:45:66:bc:e7:e3:41:e3:7f: 92:ce:1a:74 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUdDlnSTXGgo0wBLMYBsCkeCcFI+wwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoN0U4REUxNTQ5RTg5RDRCNDgwQjU1NjY5NUNBQkU5Q0U3 RkRGNUYyNDAeFw0yNTEyMDExNDI2MDVaFw0yNTEyMDQxNzMwMDVaMDMxMTAvBgNV BAMTKDc5REVGNzBCMEU2NEVFRTYzMTZGOThFRDEwNDIzMjVGRTZEMURCOEEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCu6minhAoe9ORjlXQWD6/2LI1g rRq/mnO4ZnrnxO+3mPU4moYxmIASUt1uuw+oqujQ04lYUD4yfdIKzonz4fn4ulaB LKV9h/6cXapXQTHKzUlv090YNKVdgf6/T5dIqxamCrY9TkT0m+HBC/TGPoxyyQMp Hj8Eg/3gW4oIc+0mFjTPQGByLgoMhtEIH5vA7y6397YPRobKHXP3SvMCWmr9s8mA TS2YcoM7PobNGY8ekvnmpZg7FOiWZfCE67r4hfC5eAUn4ihaZ9+SAIA3URp3yfAx FocnTR/m4dtroQqQIDf4fcsh7FYxJDGtWlKE/vSVkKqGtsfv5+m1sIraSO6jAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUed73Cw5k7uYxb5jtEEIyX+bR24owHwYDVR0j BBgwFoAUfo3hVJ6J1LSAtVZpXKvpzn/fXyQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z M2RjMDM0Zi0zODIzLTQ4YWYtOTUzZC1hYWE4NzNiMGZiNmEvMS83RThERTE1NDlF ODlENEI0ODBCNTU2Njk1Q0FCRTlDRTdGREY1RjI0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvN0U4REUxNTQ5RTg5RDRCNDgwQjU1NjY5NUNBQkU5Q0U3RkRG NUYyNC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMzNkYzAzNGYtMzgyMy00OGFmLTk1 M2QtYWFhODczYjBmYjZhLzEvN0U4REUxNTQ5RTg5RDRCNDgwQjU1NjY5NUNBQkU5 Q0U3RkRGNUYyNC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFl6BESBNxQ1+xpDQvsHyEhaplHYfGQ6hf1D Cp77I4CqnEno3U5PY2ZNBKLBu1w/67Dn89to85lMhpJtvhFdR2P7owevF0eBtzSv QLs5Y01NEvgtAgdAw3iYAWxjthGXWtJl3UFqanLTQYAAHAiVXMKlEWjvTHJobA4u opCaIO+7xdfHMwtc62+17vWBymuEad9zIuXGsxbLZHyH+5rlLMeF/pbonuNoCDRn kxCi3imXbD4E/1C6hp6N3r/Z4Q0H6HIPGwlAJON5eOdELmx3D5EcZFyRD0f00u/i mpktBDwKPJyOX1bRXG8J1Bogo3KLni7FA5FFZrzn40Hjf5LOGnQ= -----END CERTIFICATE-----Generated at Wed Dec 3 13:57:02 2025 by rpki-client