This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/52292ba8-ad1a-4139-8c20-5b526da970bd/0/7E6A786ACEF684F37758FC4A6D8517CAD165FA77.mft File: 7E6A786ACEF684F37758FC4A6D8517CAD165FA77.mft (raw, json) Hash identifier: krnWlBmTgb8K68rjD+aSAf/aQPdMgzJIdFrSkUzLO0k= Subject key identifier: 32:15:F1:EA:9B:AF:29:B0:88:3F:D8:65:46:4C:32:ED:BA:EA:DC:AC Authority key identifier: 7E:6A:78:6A:CE:F6:84:F3:77:58:FC:4A:6D:85:17:CA:D1:65:FA:77 Certificate issuer: /CN=7E6A786ACEF684F37758FC4A6D8517CAD165FA77 Certificate serial: 5E1A949DAEA9F9016F2CA0152A6FA2A8B4C7379A Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7E6A786ACEF684F37758FC4A6D8517CAD165FA77.cer Subject info access: rsync://repo-rpki.idnic.net/repo/52292ba8-ad1a-4139-8c20-5b526da970bd/0/7E6A786ACEF684F37758FC4A6D8517CAD165FA77.mft Manifest number: 01E1 Signing time: Tue 02 Dec 2025 17:32:05 +0000 Manifest this update: Tue 02 Dec 2025 17:27:05 +0000 Manifest next update: Sat 06 Dec 2025 02:17:05 +0000 Files and hashes: 1: 7E6A786ACEF684F37758FC4A6D8517CAD165FA77.crl (hash: pgzoEfXGB9KgLLspW2FRV8uGMLkIKIK23a7jYUTIpJ0=) 2: 3130332e3231332e3233312e302f32342d3234203d3e20313431313236.roa (hash: LgrwV1f0ZUMT2nBDfwKWYCZTwrW8QfuLgJJFAHp0cWA=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/52292ba8-ad1a-4139-8c20-5b526da970bd/0/7E6A786ACEF684F37758FC4A6D8517CAD165FA77.crl rsync://repo-rpki.idnic.net/repo/52292ba8-ad1a-4139-8c20-5b526da970bd/0/7E6A786ACEF684F37758FC4A6D8517CAD165FA77.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7E6A786ACEF684F37758FC4A6D8517CAD165FA77.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 06 Dec 2025 02:17:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5e:1a:94:9d:ae:a9:f9:01:6f:2c:a0:15:2a:6f:a2:a8:b4:c7:37:9a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7E6A786ACEF684F37758FC4A6D8517CAD165FA77 Validity Not Before: Dec 2 17:27:05 2025 GMT Not After : Dec 6 02:17:05 2025 GMT Subject: CN=3215F1EA9BAF29B0883FD865464C32EDBAEADCAC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:0b:5e:63:24:04:d0:ed:af:3a:a2:cb:9d:2f: e4:6a:c4:2f:04:03:90:0b:6e:bb:f1:ab:7a:fa:7d: 8c:ab:1b:61:e2:3c:71:36:bc:ee:3f:5d:e2:f0:26: 0f:d7:51:67:a8:e3:48:bc:1e:00:2d:ea:7d:b2:79: 29:20:35:49:7d:32:33:b2:59:b5:21:bc:4c:e1:df: f3:1f:16:c6:68:6b:99:75:51:27:be:c4:d7:29:d2: e1:ff:94:2a:97:0d:85:b1:e3:a2:d3:b0:c0:13:c2: 97:e5:d2:ec:e9:95:52:57:de:0f:f9:d3:57:9e:3a: 38:a7:d8:7e:4b:8c:26:17:33:58:8d:38:e5:84:bf: 43:bc:6f:e9:3e:35:9a:2f:c1:c2:c0:de:05:a1:8f: 15:1f:1a:8d:d9:a7:56:a3:40:32:ad:c0:86:3d:fc: 1a:b0:9d:f6:7f:8c:15:6a:dc:0f:49:31:b2:56:ec: 6f:63:d1:42:b3:c9:c7:2b:bc:20:d0:9e:c2:a4:d4: fb:e6:d6:27:b7:3c:d9:4c:89:71:ab:57:0c:0f:5a: a1:57:2f:9f:11:9f:fd:d1:8c:63:44:5a:5f:ee:26: 44:10:f8:01:1a:8c:60:5a:a3:48:21:98:6c:57:77: 4f:d9:0c:f9:ea:a6:cd:40:e9:41:1c:3d:ff:bf:c9: 05:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:15:F1:EA:9B:AF:29:B0:88:3F:D8:65:46:4C:32:ED:BA:EA:DC:AC X509v3 Authority Key Identifier: keyid:7E:6A:78:6A:CE:F6:84:F3:77:58:FC:4A:6D:85:17:CA:D1:65:FA:77 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/52292ba8-ad1a-4139-8c20-5b526da970bd/0/7E6A786ACEF684F37758FC4A6D8517CAD165FA77.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7E6A786ACEF684F37758FC4A6D8517CAD165FA77.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/52292ba8-ad1a-4139-8c20-5b526da970bd/0/7E6A786ACEF684F37758FC4A6D8517CAD165FA77.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9f:74:ae:a0:89:4f:0e:37:18:40:17:6f:ae:6b:cd:ac:06:05: 39:5f:b8:38:f2:fe:9d:00:83:aa:4f:e3:49:67:53:cc:64:ec: f5:96:c6:a6:dc:9e:7d:e5:f1:8d:4c:d4:65:07:44:45:53:90: 98:74:1a:dc:61:ce:5f:2e:0d:9e:05:73:c8:7c:85:c8:d8:f5: 05:99:44:5b:3b:86:48:4f:f3:07:40:e3:e0:68:53:87:69:ef: 57:33:85:9e:d8:32:e1:0a:e8:ea:89:9d:d3:6b:06:cd:5f:70: 9e:eb:b8:89:4f:01:0e:1b:bc:b7:c3:7b:f1:75:29:42:a4:a8: cc:5c:4b:41:62:c4:9a:68:24:bc:62:c9:2a:e4:20:23:fd:06: 63:4c:48:cc:ed:17:3b:30:2c:9a:6d:bc:7c:8a:95:bf:b8:c0: 60:b3:66:c8:f3:dc:35:53:14:01:de:5d:05:3a:52:3f:8c:1c: 90:77:79:8f:7f:9b:9f:40:b2:90:32:85:e9:eb:b3:1c:c9:e4: 0d:e2:d3:71:1e:6d:be:2a:74:c8:ec:0c:f4:93:65:65:55:3e: 3b:01:b5:9c:ef:60:92:45:21:e3:e1:92:a5:c3:d1:45:4f:ba: 62:48:b8:91:70:4a:77:f5:55:44:90:05:0a:64:ee:8e:86:ab: 09:27:72:19 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUXhqUna6p+QFvLKAVKm+iqLTHN5owDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoN0U2QTc4NkFDRUY2ODRGMzc3NThGQzRBNkQ4NTE3Q0FE MTY1RkE3NzAeFw0yNTEyMDIxNzI3MDVaFw0yNTEyMDYwMjE3MDVaMDMxMTAvBgNV BAMTKDMyMTVGMUVBOUJBRjI5QjA4ODNGRDg2NTQ2NEMzMkVEQkFFQURDQUMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDlC15jJATQ7a86osudL+RqxC8E A5ALbrvxq3r6fYyrG2HiPHE2vO4/XeLwJg/XUWeo40i8HgAt6n2yeSkgNUl9MjOy WbUhvEzh3/MfFsZoa5l1USe+xNcp0uH/lCqXDYWx46LTsMATwpfl0uzplVJX3g/5 01eeOjin2H5LjCYXM1iNOOWEv0O8b+k+NZovwcLA3gWhjxUfGo3Zp1ajQDKtwIY9 /BqwnfZ/jBVq3A9JMbJW7G9j0UKzyccrvCDQnsKk1Pvm1ie3PNlMiXGrVwwPWqFX L58Rn/3RjGNEWl/uJkQQ+AEajGBao0ghmGxXd0/ZDPnqps1A6UEcPf+/yQVxAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUMhXx6puvKbCIP9hlRkwy7brq3KwwHwYDVR0j BBgwFoAUfmp4as72hPN3WPxKbYUXytFl+ncwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 MjI5MmJhOC1hZDFhLTQxMzktOGMyMC01YjUyNmRhOTcwYmQvMC83RTZBNzg2QUNF RjY4NEYzNzc1OEZDNEE2RDg1MTdDQUQxNjVGQTc3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvN0U2QTc4NkFDRUY2ODRGMzc3NThGQzRBNkQ4NTE3Q0FEMTY1 RkE3Ny5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNTIyOTJiYTgtYWQxYS00MTM5LThj MjAtNWI1MjZkYTk3MGJkLzAvN0U2QTc4NkFDRUY2ODRGMzc3NThGQzRBNkQ4NTE3 Q0FEMTY1RkE3Ny5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJ90rqCJTw43GEAXb65rzawGBTlfuDjy/p0A g6pP40lnU8xk7PWWxqbcnn3l8Y1M1GUHREVTkJh0Gtxhzl8uDZ4Fc8h8hcjY9QWZ RFs7hkhP8wdA4+BoU4dp71czhZ7YMuEK6OqJndNrBs1fcJ7ruIlPAQ4bvLfDe/F1 KUKkqMxcS0FixJpoJLxiySrkICP9BmNMSMztFzswLJptvHyKlb+4wGCzZsjz3DVT FAHeXQU6Uj+MHJB3eY9/m59AspAyhenrsxzJ5A3i03Eebb4qdMjsDPSTZWVVPjsB tZzvYJJFIePhkqXD0UVPumJIuJFwSnf1VUSQBQpk7o6Gqwknchk= -----END CERTIFICATE-----Generated at Wed Dec 3 14:42:29 2025 by rpki-client