This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/3cdd5774-30dd-4a00-b1a9-9b12826930c2/0/F7A5C0897A1AB31BFD31BE0AF21D825C5AA6972D.mft File: F7A5C0897A1AB31BFD31BE0AF21D825C5AA6972D.mft (raw, json) Hash identifier: Ubx8/4ZHgf5g8kLVCH2Vi/sSTyoPbVVzaYOlaJB57Gc= Subject key identifier: 3E:E9:B1:2F:94:88:79:D6:C9:71:6C:66:06:3D:E6:9A:32:92:BE:8E Authority key identifier: F7:A5:C0:89:7A:1A:B3:1B:FD:31:BE:0A:F2:1D:82:5C:5A:A6:97:2D Certificate issuer: /CN=F7A5C0897A1AB31BFD31BE0AF21D825C5AA6972D Certificate serial: 2CEF655FAEC2B121D20A5D0D14209410944CCC5F Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F7A5C0897A1AB31BFD31BE0AF21D825C5AA6972D.cer Subject info access: rsync://repo-rpki.idnic.net/repo/3cdd5774-30dd-4a00-b1a9-9b12826930c2/0/F7A5C0897A1AB31BFD31BE0AF21D825C5AA6972D.mft Manifest number: 024A Signing time: Mon 01 Dec 2025 13:41:13 +0000 Manifest this update: Mon 01 Dec 2025 13:36:13 +0000 Manifest next update: Fri 05 Dec 2025 01:10:13 +0000 Files and hashes: 1: 3130332e3135392e3139362e302f32332d3233203d3e20313430343730.roa (hash: K1+FytjoejdmG1Rus/G2hZCtW5hkde5AWHgsou+ZdZo=) 2: F7A5C0897A1AB31BFD31BE0AF21D825C5AA6972D.crl (hash: MAU2AbpTVN8QC0MzWtBohDExP2bcG2LJQp44jGmZ8BU=) 3: 3130332e3135392e3139362e302f32342d3234203d3e20313430343730.roa (hash: g1aV9FkDrLUpjctEPjCk3eEqDOG7iPplwBZej8bhpjM=) 4: 3130332e3135392e3139372e302f32342d3234203d3e20313430343730.roa (hash: M+p5nzecECxGFfN8VhgDof1M+5/v42AUXWVnabcezYY=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/3cdd5774-30dd-4a00-b1a9-9b12826930c2/0/F7A5C0897A1AB31BFD31BE0AF21D825C5AA6972D.crl rsync://repo-rpki.idnic.net/repo/3cdd5774-30dd-4a00-b1a9-9b12826930c2/0/F7A5C0897A1AB31BFD31BE0AF21D825C5AA6972D.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F7A5C0897A1AB31BFD31BE0AF21D825C5AA6972D.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 05 Dec 2025 01:10:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2c:ef:65:5f:ae:c2:b1:21:d2:0a:5d:0d:14:20:94:10:94:4c:cc:5f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F7A5C0897A1AB31BFD31BE0AF21D825C5AA6972D Validity Not Before: Dec 1 13:36:13 2025 GMT Not After : Dec 5 01:10:13 2025 GMT Subject: CN=3EE9B12F948879D6C9716C66063DE69A3292BE8E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:2b:37:fe:34:36:6a:e5:8b:bf:62:1d:9c:c2: 5c:32:27:9a:27:83:13:3f:90:7c:ec:d3:8e:8f:4c: b1:70:8f:30:8d:fd:f2:eb:c4:be:25:49:4a:af:bd: 9e:64:f7:c9:4f:a7:c0:ec:18:1e:7b:98:3f:d5:b5: e3:32:f7:90:3a:5e:10:dc:a3:1c:b3:f3:82:f9:bb: 79:ad:8d:93:a5:c7:89:fb:4e:90:8e:6c:84:68:e9: e0:e5:ed:01:85:c6:86:be:de:7e:a8:e8:e4:a3:98: 72:5b:22:cc:8d:90:7c:1d:f0:36:91:de:a3:c9:57: d1:fe:ad:df:9c:28:49:b0:ff:95:e0:99:53:fd:4d: e9:6f:a1:cc:0f:c2:f7:6e:98:f3:08:92:87:db:af: 67:f5:aa:d4:85:e0:ec:c4:cb:85:d8:e3:19:9e:ef: 38:10:29:9e:c1:5d:ce:c6:c5:c1:bb:c9:d7:c2:1a: c2:69:16:d2:7e:fc:ac:c2:6c:be:ae:a8:cb:1d:f7: b3:ac:ec:e8:47:2c:ec:5a:db:64:9d:08:75:31:06: 89:02:19:61:be:9f:86:51:64:73:81:4e:d5:27:17: ae:0a:0a:7a:37:53:0f:a7:25:ad:8d:6f:41:2d:8b: 0f:a9:c6:6a:62:be:e0:49:72:d0:1f:ef:54:0a:97: dc:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:E9:B1:2F:94:88:79:D6:C9:71:6C:66:06:3D:E6:9A:32:92:BE:8E X509v3 Authority Key Identifier: keyid:F7:A5:C0:89:7A:1A:B3:1B:FD:31:BE:0A:F2:1D:82:5C:5A:A6:97:2D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/3cdd5774-30dd-4a00-b1a9-9b12826930c2/0/F7A5C0897A1AB31BFD31BE0AF21D825C5AA6972D.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F7A5C0897A1AB31BFD31BE0AF21D825C5AA6972D.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3cdd5774-30dd-4a00-b1a9-9b12826930c2/0/F7A5C0897A1AB31BFD31BE0AF21D825C5AA6972D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7f:35:14:19:e5:92:3e:59:fa:47:25:23:d5:91:d0:6f:28:15: 37:c5:e1:00:70:83:cd:f9:c8:a0:0f:e1:b4:37:e2:17:a8:7c: cb:33:94:94:2b:c0:3d:e0:2d:5f:bd:00:32:4c:33:96:57:76: d8:73:78:af:cf:dd:ae:57:38:e6:dd:93:3c:4e:2f:f2:1a:19: bc:0d:07:13:ad:cf:3c:6f:b5:f9:82:0a:cf:0e:9b:e0:4a:15: b1:f8:d9:74:3e:6e:3f:42:ec:60:2a:9f:0c:bb:c1:17:b8:28: a8:70:c1:dc:3e:84:3b:6c:22:07:1e:3b:65:11:17:df:92:f3: 37:c1:8e:a2:de:88:6c:24:ce:b4:5f:82:2f:91:9c:14:d1:f3: af:40:c9:4e:89:83:32:b7:35:6a:95:13:c5:eb:15:cd:39:09: a1:9e:27:a9:fd:c6:fa:0f:ee:76:87:13:13:a8:4a:a7:17:c0: b2:0e:cd:b3:8f:0f:8d:d3:8e:e1:ba:e8:92:65:94:01:86:67: 2c:9c:f5:12:9c:ae:27:50:4b:60:f0:cd:b5:b5:da:86:0f:0f: ce:3a:06:b6:6d:8d:fe:1d:55:ca:47:23:ca:1a:fd:d0:b1:62: 5f:a2:75:64:e3:64:0c:2c:1c:29:31:5d:4a:38:1f:81:1e:06: f5:a2:c7:6a -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIULO9lX67CsSHSCl0NFCCUEJRMzF8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjdBNUMwODk3QTFBQjMxQkZEMzFCRTBBRjIxRDgyNUM1 QUE2OTcyRDAeFw0yNTEyMDExMzM2MTNaFw0yNTEyMDUwMTEwMTNaMDMxMTAvBgNV BAMTKDNFRTlCMTJGOTQ4ODc5RDZDOTcxNkM2NjA2M0RFNjlBMzI5MkJFOEUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCyKzf+NDZq5Yu/Yh2cwlwyJ5on gxM/kHzs046PTLFwjzCN/fLrxL4lSUqvvZ5k98lPp8DsGB57mD/VteMy95A6XhDc oxyz84L5u3mtjZOlx4n7TpCObIRo6eDl7QGFxoa+3n6o6OSjmHJbIsyNkHwd8DaR 3qPJV9H+rd+cKEmw/5XgmVP9TelvocwPwvdumPMIkofbr2f1qtSF4OzEy4XY4xme 7zgQKZ7BXc7GxcG7ydfCGsJpFtJ+/KzCbL6uqMsd97Os7OhHLOxa22SdCHUxBokC GWG+n4ZRZHOBTtUnF64KCno3Uw+nJa2Nb0Etiw+pxmpivuBJctAf71QKl9z1AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUPumxL5SIedbJcWxmBj3mmjKSvo4wHwYDVR0j BBgwFoAU96XAiXoasxv9Mb4K8h2CXFqmly0wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z Y2RkNTc3NC0zMGRkLTRhMDAtYjFhOS05YjEyODI2OTMwYzIvMC9GN0E1QzA4OTdB MUFCMzFCRkQzMUJFMEFGMjFEODI1QzVBQTY5NzJELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRjdBNUMwODk3QTFBQjMxQkZEMzFCRTBBRjIxRDgyNUM1QUE2 OTcyRC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vM2NkZDU3NzQtMzBkZC00YTAwLWIx YTktOWIxMjgyNjkzMGMyLzAvRjdBNUMwODk3QTFBQjMxQkZEMzFCRTBBRjIxRDgy NUM1QUE2OTcyRC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAH81FBnlkj5Z+kclI9WR0G8oFTfF4QBwg835 yKAP4bQ34heofMszlJQrwD3gLV+9ADJMM5ZXdthzeK/P3a5XOObdkzxOL/IaGbwN BxOtzzxvtfmCCs8Om+BKFbH42XQ+bj9C7GAqnwy7wRe4KKhwwdw+hDtsIgceO2UR F9+S8zfBjqLeiGwkzrRfgi+RnBTR869AyU6JgzK3NWqVE8XrFc05CaGeJ6n9xvoP 7naHExOoSqcXwLIOzbOPD43TjuG66JJllAGGZyyc9RKcridQS2DwzbW12oYPD846 BrZtjf4dVcpHI8oa/dCxYl+idWTjZAwsHCkxXUo4H4EeBvWix2o= -----END CERTIFICATE-----Generated at Wed Dec 3 16:09:12 2025 by rpki-client