This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/3a923397-8cf8-4cef-8856-0d268d73edb1/0/7C4DFD78914DC1F66130F256AE69D9FA843948DC.mft File: 7C4DFD78914DC1F66130F256AE69D9FA843948DC.mft (raw, json) Hash identifier: 24zN6vLc/KI/zwmdPa9rn7Fb5n8ZgohimmR4RAvqHNg= Subject key identifier: 4E:B2:5D:FC:72:41:86:E7:7F:EA:3C:D6:B8:54:16:F4:CB:1E:5B:B5 Authority key identifier: 7C:4D:FD:78:91:4D:C1:F6:61:30:F2:56:AE:69:D9:FA:84:39:48:DC Certificate issuer: /CN=7C4DFD78914DC1F66130F256AE69D9FA843948DC Certificate serial: 4069C2606D2B28AC70D3159011C54BB92590A077 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/7C4DFD78914DC1F66130F256AE69D9FA843948DC.cer Subject info access: rsync://repo-rpki.idnic.net/repo/3a923397-8cf8-4cef-8856-0d268d73edb1/0/7C4DFD78914DC1F66130F256AE69D9FA843948DC.mft Manifest number: B9 Signing time: Mon 15 Dec 2025 05:51:17 +0000 Manifest this update: Mon 15 Dec 2025 05:46:17 +0000 Manifest next update: Thu 18 Dec 2025 07:16:17 +0000 Files and hashes: 1: 3136302e3138372e3133372e302f32342d3234203d3e20313533313233.roa (hash: lAtUfGS13GDkvr/Pm9PSGFkJR4Rstob6+L+fcyUN72Q=) 2: 7C4DFD78914DC1F66130F256AE69D9FA843948DC.crl (hash: 50G77zrbLfcwuowUfPli4q8NqtHJrstZt0s/dQigPEQ=) 3: 3136302e3138372e3133362e302f32342d3234203d3e20313533313233.roa (hash: HJdK4DRAmRrZWLjILXhoJkILfMyC0BwC4uGRxH8TEAM=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/3a923397-8cf8-4cef-8856-0d268d73edb1/0/7C4DFD78914DC1F66130F256AE69D9FA843948DC.crl rsync://repo-rpki.idnic.net/repo/3a923397-8cf8-4cef-8856-0d268d73edb1/0/7C4DFD78914DC1F66130F256AE69D9FA843948DC.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/7C4DFD78914DC1F66130F256AE69D9FA843948DC.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 18 Dec 2025 07:16:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 40:69:c2:60:6d:2b:28:ac:70:d3:15:90:11:c5:4b:b9:25:90:a0:77 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7C4DFD78914DC1F66130F256AE69D9FA843948DC Validity Not Before: Dec 15 05:46:17 2025 GMT Not After : Dec 18 07:16:17 2025 GMT Subject: CN=4EB25DFC724186E77FEA3CD6B85416F4CB1E5BB5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:04:75:20:e6:70:43:11:77:aa:13:07:60:31: 7c:59:62:74:81:66:35:2e:2d:6b:dd:bd:fc:4e:5b: 5c:9a:ce:ab:1b:4e:cf:fa:71:80:d4:02:14:58:30: 9b:26:df:49:9b:ef:c8:92:cf:e0:7a:91:59:01:37: d4:7e:f8:89:f9:34:a7:19:79:fd:45:bc:20:c8:f6: 6c:95:44:f5:fc:1c:ed:cc:59:92:cd:2b:c0:3e:b4: 01:5c:2a:d7:ac:87:70:78:69:90:cc:01:21:d7:b9: 07:bc:c4:5f:82:68:8d:54:73:79:46:7d:53:f4:4a: a8:16:8f:99:9c:9b:85:b3:01:26:a7:05:e2:8e:2c: f2:b5:82:93:3e:8d:9f:15:1e:87:ea:34:13:5c:0d: f1:ed:64:b7:80:dc:82:bc:dc:0f:62:78:4b:52:bf: 12:da:64:c2:99:b0:43:60:fa:9b:3a:cb:18:26:58: 1c:11:b2:fa:b9:f3:0b:2a:32:f4:3c:54:e4:e7:57: 64:d7:14:15:b2:5e:dc:7d:b6:3e:f6:82:5a:e3:a7: e8:03:a9:59:72:b9:39:99:ed:ea:7d:19:15:06:b9: 7c:f2:cd:7f:e3:28:4f:40:4b:4d:67:9d:a7:59:85: ec:22:39:31:33:1d:ad:1c:cf:eb:4e:c3:b7:20:b2: 85:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:B2:5D:FC:72:41:86:E7:7F:EA:3C:D6:B8:54:16:F4:CB:1E:5B:B5 X509v3 Authority Key Identifier: keyid:7C:4D:FD:78:91:4D:C1:F6:61:30:F2:56:AE:69:D9:FA:84:39:48:DC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/3a923397-8cf8-4cef-8856-0d268d73edb1/0/7C4DFD78914DC1F66130F256AE69D9FA843948DC.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/7C4DFD78914DC1F66130F256AE69D9FA843948DC.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3a923397-8cf8-4cef-8856-0d268d73edb1/0/7C4DFD78914DC1F66130F256AE69D9FA843948DC.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 07:fc:e8:27:56:6c:16:99:0f:5f:42:08:f4:1e:63:a4:47:58: 99:a5:fd:d8:b8:4c:6c:69:a2:86:ad:2e:3f:15:89:2b:e5:cd: 86:bb:a9:8f:fa:00:c7:44:b8:4a:96:dc:e3:2b:09:89:62:b3: be:77:e2:40:f6:f7:50:31:e8:80:06:29:90:0c:24:d2:f2:2d: 0f:19:00:a3:ce:f3:55:de:7c:5d:f0:b3:e1:42:2a:de:b8:da: ef:9c:19:ff:44:ac:89:79:9a:da:43:4f:a9:3c:df:fe:c0:47: 38:de:eb:3b:11:3c:ad:28:37:ab:e4:6f:b8:a8:19:59:c1:c1: 47:0b:1b:b4:8e:d0:82:98:16:8d:2d:6f:bb:60:32:fb:3a:a3: a8:b7:39:39:6a:9d:56:93:c1:00:27:91:11:10:a5:0f:e4:d6: 15:c9:8a:de:67:ea:2d:06:5f:fd:fe:d6:4a:db:dd:4a:86:00: ca:38:8b:b5:65:c2:0d:a3:b5:1e:f1:6e:5e:a2:e9:f1:e3:a8: b3:51:c2:7d:73:62:4e:06:7f:a0:95:75:fc:89:e8:b4:d0:66: 3d:f5:a2:b5:73:db:40:77:98:f4:d1:2b:00:a6:4b:1c:6c:ca: 0b:57:f9:02:56:2d:a3:51:59:73:45:43:e3:c7:ed:fe:b5:b8: 62:94:e2:eb -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUQGnCYG0rKKxw0xWQEcVLuSWQoHcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoN0M0REZENzg5MTREQzFGNjYxMzBGMjU2QUU2OUQ5RkE4 NDM5NDhEQzAeFw0yNTEyMTUwNTQ2MTdaFw0yNTEyMTgwNzE2MTdaMDMxMTAvBgNV BAMTKDRFQjI1REZDNzI0MTg2RTc3RkVBM0NENkI4NTQxNkY0Q0IxRTVCQjUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDVBHUg5nBDEXeqEwdgMXxZYnSB ZjUuLWvdvfxOW1yazqsbTs/6cYDUAhRYMJsm30mb78iSz+B6kVkBN9R++In5NKcZ ef1FvCDI9myVRPX8HO3MWZLNK8A+tAFcKtesh3B4aZDMASHXuQe8xF+CaI1Uc3lG fVP0SqgWj5mcm4WzASanBeKOLPK1gpM+jZ8VHofqNBNcDfHtZLeA3IK83A9ieEtS vxLaZMKZsENg+ps6yxgmWBwRsvq58wsqMvQ8VOTnV2TXFBWyXtx9tj72glrjp+gD qVlyuTmZ7ep9GRUGuXzyzX/jKE9AS01nnadZhewiOTEzHa0cz+tOw7cgsoWBAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUTrJd/HJBhud/6jzWuFQW9MseW7UwHwYDVR0j BBgwFoAUfE39eJFNwfZhMPJWrmnZ+oQ5SNwwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z YTkyMzM5Ny04Y2Y4LTRjZWYtODg1Ni0wZDI2OGQ3M2VkYjEvMC83QzRERkQ3ODkx NERDMUY2NjEzMEYyNTZBRTY5RDlGQTg0Mzk0OERDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvN0M0REZENzg5MTREQzFGNjYxMzBGMjU2QUU2OUQ5RkE4NDM5 NDhEQy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vM2E5MjMzOTctOGNmOC00Y2VmLTg4 NTYtMGQyNjhkNzNlZGIxLzAvN0M0REZENzg5MTREQzFGNjYxMzBGMjU2QUU2OUQ5 RkE4NDM5NDhEQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAf86CdWbBaZD19CCPQeY6RHWJml/di4TGxp ooatLj8ViSvlzYa7qY/6AMdEuEqW3OMrCYlis7534kD291Ax6IAGKZAMJNLyLQ8Z AKPO81XefF3ws+FCKt642u+cGf9ErIl5mtpDT6k83/7ARzje6zsRPK0oN6vkb7io GVnBwUcLG7SO0IKYFo0tb7tgMvs6o6i3OTlqnVaTwQAnkREQpQ/k1hXJit5n6i0G X/3+1krb3UqGAMo4i7Vlwg2jtR7xbl6i6fHjqLNRwn1zYk4Gf6CVdfyJ6LTQZj31 orVz20B3mPTRKwCmSxxsygtX+QJWLaNRWXNFQ+PH7f61uGKU4us= -----END CERTIFICATE-----Generated at Mon Dec 15 14:51:04 2025 by rpki-client