This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/56e63cd2-fb3c-41b2-b96b-ab234420a211/0/7D5AE085968DC7CB311023F7EBE0BF8E126706E4.mft File: 7D5AE085968DC7CB311023F7EBE0BF8E126706E4.mft (raw, json) Hash identifier: 8UuYbY8RkpCBcL5PxwWz/Cf2f+TnRocsrd2kP150pCw= Subject key identifier: 4F:6B:B9:28:F9:5B:7A:A5:48:1D:B1:1B:57:C0:EA:65:BE:1E:6F:49 Authority key identifier: 7D:5A:E0:85:96:8D:C7:CB:31:10:23:F7:EB:E0:BF:8E:12:67:06:E4 Certificate issuer: /CN=7D5AE085968DC7CB311023F7EBE0BF8E126706E4 Certificate serial: 134C0FFA644AD38E96776CC7F9766759727221F2 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7D5AE085968DC7CB311023F7EBE0BF8E126706E4.cer Subject info access: rsync://repo-rpki.idnic.net/repo/56e63cd2-fb3c-41b2-b96b-ab234420a211/0/7D5AE085968DC7CB311023F7EBE0BF8E126706E4.mft Manifest number: B5 Signing time: Fri 19 Dec 2025 20:33:41 +0000 Manifest this update: Fri 19 Dec 2025 20:28:41 +0000 Manifest next update: Mon 22 Dec 2025 20:42:41 +0000 Files and hashes: 1: 7D5AE085968DC7CB311023F7EBE0BF8E126706E4.crl (hash: vM7qGzjs56c1Yp6DisfsZ3OBfUZAec7AKYiLiS9298w=) 2: 3130332e38372e3139362e302f32342d3234203d3e20313336303837.roa (hash: qDPmCUCvpl2ggw/iTR1lXmer3/EVY6LQXV8BhrJSCJQ=) 3: 3130332e38372e3139392e302f32342d3234203d3e20313336303837.roa (hash: da7FZv0wwu0NgAl+k4INGAA7MG+JDxJrpPp3i49uNg8=) 4: 3130332e38372e3139382e302f32342d3234203d3e20313336303837.roa (hash: oiY8bQ+d3an3MLZGl2PnLxS3g6sHhrZaRpjEwIP9wlY=) 5: 3130332e38372e3139372e302f32342d3234203d3e20313336303837.roa (hash: 0rqaY28k1qKmtYy4sqNJeu6TR3NmCct3st2uKHz4Kkw=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/56e63cd2-fb3c-41b2-b96b-ab234420a211/0/7D5AE085968DC7CB311023F7EBE0BF8E126706E4.crl rsync://repo-rpki.idnic.net/repo/56e63cd2-fb3c-41b2-b96b-ab234420a211/0/7D5AE085968DC7CB311023F7EBE0BF8E126706E4.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7D5AE085968DC7CB311023F7EBE0BF8E126706E4.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 22 Dec 2025 20:42:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13:4c:0f:fa:64:4a:d3:8e:96:77:6c:c7:f9:76:67:59:72:72:21:f2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7D5AE085968DC7CB311023F7EBE0BF8E126706E4 Validity Not Before: Dec 19 20:28:41 2025 GMT Not After : Dec 22 20:42:41 2025 GMT Subject: CN=4F6BB928F95B7AA5481DB11B57C0EA65BE1E6F49 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:89:d4:2c:94:30:75:cf:2d:95:b8:fe:a0:5f: a4:41:08:af:5d:eb:63:7d:cd:0c:86:e7:28:31:fd: 5a:2d:7a:48:c2:d6:05:76:ab:d8:1c:fb:2a:33:39: 11:ca:c2:ff:ec:65:1b:1a:2b:48:81:d2:eb:89:07: 0a:83:a8:35:82:97:53:f0:44:84:82:19:55:76:80: 14:00:9f:f8:4e:82:af:68:77:9f:63:56:6d:95:05: 25:bb:92:78:9b:f1:97:35:e3:d6:01:7b:bb:58:6a: 6f:b6:5a:cb:31:bc:e7:ff:7c:ba:9d:5c:f9:0e:c2: 7a:01:85:15:9a:79:70:68:fe:e9:b0:21:d6:67:d6: c5:f3:ee:bf:a7:64:88:1f:20:fa:bd:bc:ba:b1:76: 31:42:2e:95:33:2b:f2:93:c2:20:7b:77:6f:8e:5a: b8:89:86:8d:cc:0b:c5:67:cb:8b:d8:04:28:18:88: 55:a8:48:e6:7a:60:ef:22:fd:1d:d7:cd:a1:1e:d6: 0c:4a:c3:0e:3e:15:32:56:8b:b0:d3:9c:5e:3c:9f: 5d:fe:53:fd:4a:bb:12:de:4f:3a:dd:eb:a4:47:1f: db:ef:c2:d9:c6:17:81:f0:15:cf:36:a8:73:32:67: 3e:50:ad:73:e7:a6:af:aa:27:71:51:99:7c:a2:48: a8:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:6B:B9:28:F9:5B:7A:A5:48:1D:B1:1B:57:C0:EA:65:BE:1E:6F:49 X509v3 Authority Key Identifier: keyid:7D:5A:E0:85:96:8D:C7:CB:31:10:23:F7:EB:E0:BF:8E:12:67:06:E4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/56e63cd2-fb3c-41b2-b96b-ab234420a211/0/7D5AE085968DC7CB311023F7EBE0BF8E126706E4.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7D5AE085968DC7CB311023F7EBE0BF8E126706E4.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/56e63cd2-fb3c-41b2-b96b-ab234420a211/0/7D5AE085968DC7CB311023F7EBE0BF8E126706E4.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 81:f2:93:ff:dd:26:83:f9:e6:7b:e8:c5:9f:82:55:40:b1:e5: d6:0f:b1:4b:72:88:63:8b:ce:ac:3a:48:75:d8:a1:6b:e6:0c: 82:3a:a4:63:fd:0e:dd:61:b4:e9:3c:9e:51:b8:58:7c:6a:f5: 2d:f7:ac:97:1d:f4:f9:00:3c:ef:82:c2:da:aa:5f:1b:6e:e7: 36:ef:5d:76:5c:c4:2f:e5:fc:b8:21:c1:23:89:95:dc:6c:0e: 77:92:08:d0:0f:7a:b9:86:ea:89:39:d9:47:85:c8:6f:fb:a6: 19:82:3c:9d:7b:b6:d5:a9:ae:1f:02:c3:95:94:ca:aa:c0:9e: 0f:2e:2b:61:70:a8:f6:39:6e:92:d2:61:36:ce:24:6d:68:08: 8e:1b:6f:ca:fb:1c:b5:2c:ae:20:9b:82:19:6c:c7:44:02:8f: c7:b2:0d:a6:0b:03:f8:00:b5:3d:d4:31:00:2b:1e:1a:09:c0: aa:2e:bf:38:9a:ba:c3:50:58:c2:21:ce:1a:e1:81:19:e1:9f: 3e:da:96:73:e3:cb:7c:fa:2c:d2:10:bc:90:9e:47:63:2e:c7: 6f:4d:e6:34:38:dd:9d:91:7a:08:25:e1:2e:3e:29:65:9f:3d: fd:47:d6:ed:49:90:5f:9e:cf:e2:77:c8:0e:6a:48:d9:84:6d: 17:f7:79:e9 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUE0wP+mRK046Wd2zH+XZnWXJyIfIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoN0Q1QUUwODU5NjhEQzdDQjMxMTAyM0Y3RUJFMEJGOEUx MjY3MDZFNDAeFw0yNTEyMTkyMDI4NDFaFw0yNTEyMjIyMDQyNDFaMDMxMTAvBgNV BAMTKDRGNkJCOTI4Rjk1QjdBQTU0ODFEQjExQjU3QzBFQTY1QkUxRTZGNDkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDfidQslDB1zy2VuP6gX6RBCK9d 62N9zQyG5ygx/VotekjC1gV2q9gc+yozORHKwv/sZRsaK0iB0uuJBwqDqDWCl1Pw RISCGVV2gBQAn/hOgq9od59jVm2VBSW7knib8Zc149YBe7tYam+2WssxvOf/fLqd XPkOwnoBhRWaeXBo/umwIdZn1sXz7r+nZIgfIPq9vLqxdjFCLpUzK/KTwiB7d2+O WriJho3MC8Vny4vYBCgYiFWoSOZ6YO8i/R3XzaEe1gxKww4+FTJWi7DTnF48n13+ U/1KuxLeTzrd66RHH9vvwtnGF4HwFc82qHMyZz5QrXPnpq+qJ3FRmXyiSKhVAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUT2u5KPlbeqVIHbEbV8DqZb4eb0kwHwYDVR0j BBgwFoAUfVrghZaNx8sxECP36+C/jhJnBuQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 NmU2M2NkMi1mYjNjLTQxYjItYjk2Yi1hYjIzNDQyMGEyMTEvMC83RDVBRTA4NTk2 OERDN0NCMzExMDIzRjdFQkUwQkY4RTEyNjcwNkU0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvN0Q1QUUwODU5NjhEQzdDQjMxMTAyM0Y3RUJFMEJGOEUxMjY3 MDZFNC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNTZlNjNjZDItZmIzYy00MWIyLWI5 NmItYWIyMzQ0MjBhMjExLzAvN0Q1QUUwODU5NjhEQzdDQjMxMTAyM0Y3RUJFMEJG OEUxMjY3MDZFNC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIHyk//dJoP55nvoxZ+CVUCx5dYPsUtyiGOL zqw6SHXYoWvmDII6pGP9Dt1htOk8nlG4WHxq9S33rJcd9PkAPO+CwtqqXxtu5zbv XXZcxC/l/LghwSOJldxsDneSCNAPermG6ok52UeFyG/7phmCPJ17ttWprh8Cw5WU yqrAng8uK2FwqPY5bpLSYTbOJG1oCI4bb8r7HLUsriCbghlsx0QCj8eyDaYLA/gA tT3UMQArHhoJwKouvziausNQWMIhzhrhgRnhnz7alnPjy3z6LNIQvJCeR2Mux29N 5jQ43Z2Reggl4S4+KWWfPf1H1u1JkF+ez+J3yA5qSNmEbRf3eek= -----END CERTIFICATE-----Generated at Sat Dec 20 05:31:13 2025 by rpki-client