This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/3a923397-8cf8-4cef-8856-0d268d73edb1/0/7C4DFD78914DC1F66130F256AE69D9FA843948DC.mft File: 7C4DFD78914DC1F66130F256AE69D9FA843948DC.mft (raw, json) Hash identifier: v15+NjZFUcdsiToqQTjpgo7bpN7Mg/shLpeQ41ouZ4s= Subject key identifier: 56:AE:0D:FB:49:79:5E:AF:63:52:3A:09:D5:F1:46:68:A8:0D:12:25 Authority key identifier: 7C:4D:FD:78:91:4D:C1:F6:61:30:F2:56:AE:69:D9:FA:84:39:48:DC Certificate issuer: /CN=7C4DFD78914DC1F66130F256AE69D9FA843948DC Certificate serial: 52F14A402DA5876B1CF06CB81A266C9B120CE922 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/7C4DFD78914DC1F66130F256AE69D9FA843948DC.cer Subject info access: rsync://repo-rpki.idnic.net/repo/3a923397-8cf8-4cef-8856-0d268d73edb1/0/7C4DFD78914DC1F66130F256AE69D9FA843948DC.mft Manifest number: B3 Signing time: Mon 01 Dec 2025 17:51:16 +0000 Manifest this update: Mon 01 Dec 2025 17:46:16 +0000 Manifest next update: Thu 04 Dec 2025 22:57:16 +0000 Files and hashes: 1: 7C4DFD78914DC1F66130F256AE69D9FA843948DC.crl (hash: ERBbsCZNCDzcqipse4h8OOnZkaRumMtLKbD9KR7L+zA=) 2: 3136302e3138372e3133362e302f32342d3234203d3e20313533313233.roa (hash: HJdK4DRAmRrZWLjILXhoJkILfMyC0BwC4uGRxH8TEAM=) 3: 3136302e3138372e3133372e302f32342d3234203d3e20313533313233.roa (hash: lAtUfGS13GDkvr/Pm9PSGFkJR4Rstob6+L+fcyUN72Q=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/3a923397-8cf8-4cef-8856-0d268d73edb1/0/7C4DFD78914DC1F66130F256AE69D9FA843948DC.crl rsync://repo-rpki.idnic.net/repo/3a923397-8cf8-4cef-8856-0d268d73edb1/0/7C4DFD78914DC1F66130F256AE69D9FA843948DC.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/7C4DFD78914DC1F66130F256AE69D9FA843948DC.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 04 Dec 2025 22:57:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 52:f1:4a:40:2d:a5:87:6b:1c:f0:6c:b8:1a:26:6c:9b:12:0c:e9:22 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7C4DFD78914DC1F66130F256AE69D9FA843948DC Validity Not Before: Dec 1 17:46:16 2025 GMT Not After : Dec 4 22:57:16 2025 GMT Subject: CN=56AE0DFB49795EAF63523A09D5F14668A80D1225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:67:e0:51:de:78:6d:89:9b:b3:82:61:b8:33: 44:52:d9:56:35:85:f9:0d:71:bc:f2:83:b8:67:ae: b8:ce:5c:c5:c2:b9:d4:05:94:c3:54:9b:7f:be:9e: b5:8f:9b:17:3e:23:03:10:3f:5a:b9:98:e0:4e:c9: 48:8d:0a:4f:97:93:e9:72:47:31:76:1e:44:48:d1: 0d:a5:c0:4b:d3:fc:8c:1c:01:61:00:cc:32:55:43: 7f:6c:da:38:74:88:88:98:f0:7c:7d:82:8c:f4:c1: b8:c8:5a:14:79:02:57:d8:af:03:e0:55:23:42:b5: 2c:28:9e:14:77:80:85:3d:6f:4c:f3:c9:22:80:f9: 8e:92:14:8e:33:2a:65:bf:53:2d:77:0a:28:36:5f: 10:73:f6:4a:80:2d:12:f3:32:27:8f:b6:80:e5:5f: 61:17:a7:a6:ef:bd:1c:03:0e:c9:f7:5c:14:ce:c8: ce:b8:bf:c5:32:17:2e:ed:ca:7d:f4:5f:81:0a:fa: e5:da:a8:18:63:9c:49:dd:01:56:c5:07:9c:74:dd: 68:ae:d1:49:bf:c7:5f:61:37:16:92:b5:45:ce:57: d6:f8:35:3e:61:6b:53:80:98:7d:69:17:bc:73:b3: a5:76:61:3f:d0:8f:5c:c1:7a:dc:63:67:7a:2c:6f: a4:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 56:AE:0D:FB:49:79:5E:AF:63:52:3A:09:D5:F1:46:68:A8:0D:12:25 X509v3 Authority Key Identifier: keyid:7C:4D:FD:78:91:4D:C1:F6:61:30:F2:56:AE:69:D9:FA:84:39:48:DC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/3a923397-8cf8-4cef-8856-0d268d73edb1/0/7C4DFD78914DC1F66130F256AE69D9FA843948DC.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/7C4DFD78914DC1F66130F256AE69D9FA843948DC.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3a923397-8cf8-4cef-8856-0d268d73edb1/0/7C4DFD78914DC1F66130F256AE69D9FA843948DC.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 27:03:e4:37:17:3d:c5:25:f0:02:69:26:35:6c:55:9d:14:b0: 2e:b5:cb:86:0d:bb:26:e5:40:8e:cb:2a:2e:ca:81:7b:d8:9f: 89:b0:c1:b6:38:6f:33:a0:96:f9:fe:11:95:4b:5b:07:36:0e: 00:a9:a1:13:2f:49:73:af:37:5c:8f:ed:80:f3:5b:ce:ad:44: e7:52:50:f3:71:41:f3:f3:0e:dc:9d:b5:ec:cf:81:23:a2:38: 96:8d:ab:d7:81:d7:de:18:07:28:26:ff:35:1d:57:a3:d6:48: 75:64:7b:4c:cc:8e:29:9f:5a:13:d4:75:2b:d1:50:1a:20:85: e4:71:ef:c2:23:a3:a0:58:29:5e:11:ed:b5:61:d9:ef:49:d7: ca:e8:d0:16:5a:69:dd:06:ad:b5:8d:9f:1b:92:dc:fd:87:57: 40:2a:ec:d7:30:60:c2:b7:01:de:d9:54:65:ad:8a:06:60:5e: 3b:e5:44:b9:3c:cc:38:52:43:7f:c8:b0:38:1b:f1:54:80:27: 8a:72:aa:bf:58:11:bf:12:35:e1:cf:01:ec:bf:b1:3e:74:32: c6:33:82:85:2a:f4:13:3e:98:41:b2:3e:4d:cc:9a:1d:9e:58: 4e:d9:50:fe:7c:6b:00:2f:39:72:fc:97:f1:02:f9:93:d0:17: f7:a2:48:8c -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUUvFKQC2lh2sc8Gy4GiZsmxIM6SIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoN0M0REZENzg5MTREQzFGNjYxMzBGMjU2QUU2OUQ5RkE4 NDM5NDhEQzAeFw0yNTEyMDExNzQ2MTZaFw0yNTEyMDQyMjU3MTZaMDMxMTAvBgNV BAMTKDU2QUUwREZCNDk3OTVFQUY2MzUyM0EwOUQ1RjE0NjY4QTgwRDEyMjUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDDZ+BR3nhtiZuzgmG4M0RS2VY1 hfkNcbzyg7hnrrjOXMXCudQFlMNUm3++nrWPmxc+IwMQP1q5mOBOyUiNCk+Xk+ly RzF2HkRI0Q2lwEvT/IwcAWEAzDJVQ39s2jh0iIiY8Hx9goz0wbjIWhR5AlfYrwPg VSNCtSwonhR3gIU9b0zzySKA+Y6SFI4zKmW/Uy13Cig2XxBz9kqALRLzMiePtoDl X2EXp6bvvRwDDsn3XBTOyM64v8UyFy7tyn30X4EK+uXaqBhjnEndAVbFB5x03Wiu 0Um/x19hNxaStUXOV9b4NT5ha1OAmH1pF7xzs6V2YT/Qj1zBetxjZ3osb6TxAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUVq4N+0l5Xq9jUjoJ1fFGaKgNEiUwHwYDVR0j BBgwFoAUfE39eJFNwfZhMPJWrmnZ+oQ5SNwwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z YTkyMzM5Ny04Y2Y4LTRjZWYtODg1Ni0wZDI2OGQ3M2VkYjEvMC83QzRERkQ3ODkx NERDMUY2NjEzMEYyNTZBRTY5RDlGQTg0Mzk0OERDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvN0M0REZENzg5MTREQzFGNjYxMzBGMjU2QUU2OUQ5RkE4NDM5 NDhEQy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vM2E5MjMzOTctOGNmOC00Y2VmLTg4 NTYtMGQyNjhkNzNlZGIxLzAvN0M0REZENzg5MTREQzFGNjYxMzBGMjU2QUU2OUQ5 RkE4NDM5NDhEQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACcD5DcXPcUl8AJpJjVsVZ0UsC61y4YNuybl QI7LKi7KgXvYn4mwwbY4bzOglvn+EZVLWwc2DgCpoRMvSXOvN1yP7YDzW86tROdS UPNxQfPzDtydtezPgSOiOJaNq9eB194YBygm/zUdV6PWSHVke0zMjimfWhPUdSvR UBogheRx78Ijo6BYKV4R7bVh2e9J18ro0BZaad0GrbWNnxuS3P2HV0Aq7NcwYMK3 Ad7ZVGWtigZgXjvlRLk8zDhSQ3/IsDgb8VSAJ4pyqr9YEb8SNeHPAey/sT50MsYz goUq9BM+mEGyPk3Mmh2eWE7ZUP58awAvOXL8l/EC+ZPQF/eiSIw= -----END CERTIFICATE-----Generated at Wed Dec 3 16:53:04 2025 by rpki-client