This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/44eb6edd-f13b-49f0-ad87-6b8ee614dc8f/0/7CD524052467F22DD8E57E02A1C99EDE5A8CF249.mft File: 7CD524052467F22DD8E57E02A1C99EDE5A8CF249.mft (raw, json) Hash identifier: aDcnaavzRQ4Ey48Qm+ac5LhkYzg1O1+JuKsK9OT6cio= Subject key identifier: 60:3D:73:C2:1B:D4:21:7E:52:3A:E0:A6:12:DE:D1:75:BF:72:71:01 Authority key identifier: 7C:D5:24:05:24:67:F2:2D:D8:E5:7E:02:A1:C9:9E:DE:5A:8C:F2:49 Certificate issuer: /CN=7CD524052467F22DD8E57E02A1C99EDE5A8CF249 Certificate serial: 5813865B7524B0F2FD646B36093A0B772D1B3A96 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7CD524052467F22DD8E57E02A1C99EDE5A8CF249.cer Subject info access: rsync://repo-rpki.idnic.net/repo/44eb6edd-f13b-49f0-ad87-6b8ee614dc8f/0/7CD524052467F22DD8E57E02A1C99EDE5A8CF249.mft Manifest number: 0520 Signing time: Tue 16 Dec 2025 23:40:42 +0000 Manifest this update: Tue 16 Dec 2025 23:35:42 +0000 Manifest next update: Sat 20 Dec 2025 02:00:42 +0000 Files and hashes: 1: 7CD524052467F22DD8E57E02A1C99EDE5A8CF249.crl (hash: mM9B/Efk0oAfJ6pnDAxRVF1ldQvTf4fJtUEgIxm+tqM=) 2: 3130332e3135302e34342e302f32332d3234203d3e20313430333838.roa (hash: 9wWnuvCPEe0C8U6UVGeFeb9Dd9afvhSHPrMKavtgge8=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/44eb6edd-f13b-49f0-ad87-6b8ee614dc8f/0/7CD524052467F22DD8E57E02A1C99EDE5A8CF249.crl rsync://repo-rpki.idnic.net/repo/44eb6edd-f13b-49f0-ad87-6b8ee614dc8f/0/7CD524052467F22DD8E57E02A1C99EDE5A8CF249.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7CD524052467F22DD8E57E02A1C99EDE5A8CF249.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 20 Dec 2025 02:00:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 58:13:86:5b:75:24:b0:f2:fd:64:6b:36:09:3a:0b:77:2d:1b:3a:96 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7CD524052467F22DD8E57E02A1C99EDE5A8CF249 Validity Not Before: Dec 16 23:35:42 2025 GMT Not After : Dec 20 02:00:42 2025 GMT Subject: CN=603D73C21BD4217E523AE0A612DED175BF727101 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:01:36:fc:65:5b:cc:73:f2:78:ec:31:67:98: 26:02:38:29:2e:0a:12:9d:49:fa:c4:3b:07:c0:5d: 31:e1:e1:41:1c:05:1f:78:88:7b:73:1d:4e:60:a1: ee:5b:36:43:ee:63:5a:0d:a0:0c:08:3b:0d:68:f9: 89:49:81:d4:9c:a4:c1:50:9f:6c:f4:ac:32:2d:e7: d6:a1:09:fe:92:25:a0:0e:c6:d4:ee:42:d4:81:72: de:54:ea:ea:7c:51:39:c4:21:8a:4e:95:62:58:2a: bd:31:6a:28:3d:a6:01:fc:92:b3:1a:5a:7d:0b:2a: 6a:39:63:90:ac:a3:d7:0d:12:73:b0:68:f1:7d:6a: 64:56:15:d9:b7:9c:f6:a5:e9:2d:64:0d:46:b1:23: 87:b3:c3:19:74:6c:7f:86:c2:77:c7:74:eb:92:2d: 2c:91:97:44:a4:d3:e0:9c:69:84:f9:7f:73:b5:a6: 6a:19:46:ec:fa:ac:f3:67:c7:a8:5b:a9:60:69:47: 7f:4d:8c:3c:9c:81:de:12:7a:83:fa:da:74:36:1d: 0b:2a:bd:15:d7:f5:93:51:5f:84:83:ee:8f:22:26: 3b:58:70:89:ea:e1:fb:88:09:25:1a:98:f6:8e:f9: 6e:49:6e:f0:58:96:88:7b:d6:d1:99:18:8c:60:a6: 20:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 60:3D:73:C2:1B:D4:21:7E:52:3A:E0:A6:12:DE:D1:75:BF:72:71:01 X509v3 Authority Key Identifier: keyid:7C:D5:24:05:24:67:F2:2D:D8:E5:7E:02:A1:C9:9E:DE:5A:8C:F2:49 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/44eb6edd-f13b-49f0-ad87-6b8ee614dc8f/0/7CD524052467F22DD8E57E02A1C99EDE5A8CF249.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7CD524052467F22DD8E57E02A1C99EDE5A8CF249.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/44eb6edd-f13b-49f0-ad87-6b8ee614dc8f/0/7CD524052467F22DD8E57E02A1C99EDE5A8CF249.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0c:0d:53:15:92:e1:f8:d3:7f:10:8f:77:38:96:e2:ea:d9:77: 2f:55:52:b5:26:74:a0:da:62:62:e0:7e:5e:2d:61:e4:6e:d1: 64:75:65:10:e0:0a:07:4e:50:6b:3f:80:ef:9a:6e:7c:51:36: 46:00:b4:ba:9e:39:96:c9:8b:b0:f8:28:46:26:49:2e:ee:fc: 04:06:59:2d:5c:ff:43:9d:28:14:57:c5:0f:2e:9f:39:e9:f0: 20:36:4f:e7:2a:65:94:cb:d4:70:0d:27:88:85:14:6a:12:a5: 08:2f:07:49:9b:4d:8f:03:9c:ee:e0:9a:c4:b5:24:8a:53:9f: 7a:f3:68:bd:e2:ad:72:62:34:72:e5:e3:4f:bb:1b:06:99:81: 9c:cd:51:56:3b:79:5e:e1:1f:31:3c:3f:c6:20:40:a1:d8:d8: ca:50:bf:6f:89:e0:9e:48:dd:57:24:32:0d:d3:dc:4d:7c:bc: ba:c4:81:9a:fd:51:99:79:0f:6a:b3:95:a3:dc:c4:6d:e7:35: af:65:bc:98:b3:53:09:5d:38:f0:f0:48:4c:fd:1f:9c:bb:81: e2:3b:56:06:6d:e6:1e:3b:eb:a2:76:61:c9:59:4b:02:c3:3c: 94:db:19:c0:22:eb:f4:3e:85:18:dc:fc:33:82:c6:a5:6e:e3: 5a:2b:6e:6c -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUWBOGW3UksPL9ZGs2CToLdy0bOpYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoN0NENTI0MDUyNDY3RjIyREQ4RTU3RTAyQTFDOTlFREU1 QThDRjI0OTAeFw0yNTEyMTYyMzM1NDJaFw0yNTEyMjAwMjAwNDJaMDMxMTAvBgNV BAMTKDYwM0Q3M0MyMUJENDIxN0U1MjNBRTBBNjEyREVEMTc1QkY3MjcxMDEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC9ATb8ZVvMc/J47DFnmCYCOCku ChKdSfrEOwfAXTHh4UEcBR94iHtzHU5goe5bNkPuY1oNoAwIOw1o+YlJgdScpMFQ n2z0rDIt59ahCf6SJaAOxtTuQtSBct5U6up8UTnEIYpOlWJYKr0xaig9pgH8krMa Wn0LKmo5Y5Cso9cNEnOwaPF9amRWFdm3nPal6S1kDUaxI4ezwxl0bH+GwnfHdOuS LSyRl0Sk0+CcaYT5f3O1pmoZRuz6rPNnx6hbqWBpR39NjDycgd4SeoP62nQ2HQsq vRXX9ZNRX4SD7o8iJjtYcInq4fuICSUamPaO+W5JbvBYloh71tGZGIxgpiC1AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUYD1zwhvUIX5SOuCmEt7Rdb9ycQEwHwYDVR0j BBgwFoAUfNUkBSRn8i3Y5X4Cocme3lqM8kkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 NGViNmVkZC1mMTNiLTQ5ZjAtYWQ4Ny02YjhlZTYxNGRjOGYvMC83Q0Q1MjQwNTI0 NjdGMjJERDhFNTdFMDJBMUM5OUVERTVBOENGMjQ5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvN0NENTI0MDUyNDY3RjIyREQ4RTU3RTAyQTFDOTlFREU1QThD RjI0OS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNDRlYjZlZGQtZjEzYi00OWYwLWFk ODctNmI4ZWU2MTRkYzhmLzAvN0NENTI0MDUyNDY3RjIyREQ4RTU3RTAyQTFDOTlF REU1QThDRjI0OS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAwNUxWS4fjTfxCPdziW4urZdy9VUrUmdKDa YmLgfl4tYeRu0WR1ZRDgCgdOUGs/gO+abnxRNkYAtLqeOZbJi7D4KEYmSS7u/AQG WS1c/0OdKBRXxQ8unznp8CA2T+cqZZTL1HANJ4iFFGoSpQgvB0mbTY8DnO7gmsS1 JIpTn3rzaL3irXJiNHLl40+7GwaZgZzNUVY7eV7hHzE8P8YgQKHY2MpQv2+J4J5I 3VckMg3T3E18vLrEgZr9UZl5D2qzlaPcxG3nNa9lvJizUwldOPDwSEz9H5y7geI7 VgZt5h4766J2YclZSwLDPJTbGcAi6/Q+hRjc/DOCxqVu41orbmw= -----END CERTIFICATE-----Generated at Fri Dec 19 08:07:24 2025 by rpki-client