This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/56e63cd2-fb3c-41b2-b96b-ab234420a211/0/7D5AE085968DC7CB311023F7EBE0BF8E126706E4.mft File: 7D5AE085968DC7CB311023F7EBE0BF8E126706E4.mft (raw, json) Hash identifier: QVWfucK7hp/t7B63pQH1LgQpd+ZGVZtfJzGlTx/ig1U= Subject key identifier: 44:FD:45:CA:15:4F:FD:AC:B6:EB:A3:F8:0C:D7:28:E3:20:7C:8E:49 Authority key identifier: 7D:5A:E0:85:96:8D:C7:CB:31:10:23:F7:EB:E0:BF:8E:12:67:06:E4 Certificate issuer: /CN=7D5AE085968DC7CB311023F7EBE0BF8E126706E4 Certificate serial: 1BACAEF3A4EC3D9F291E408E0E3C136862091CA5 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7D5AE085968DC7CB311023F7EBE0BF8E126706E4.cer Subject info access: rsync://repo-rpki.idnic.net/repo/56e63cd2-fb3c-41b2-b96b-ab234420a211/0/7D5AE085968DC7CB311023F7EBE0BF8E126706E4.mft Manifest number: AE Signing time: Wed 03 Dec 2025 09:32:29 +0000 Manifest this update: Wed 03 Dec 2025 09:27:29 +0000 Manifest next update: Sat 06 Dec 2025 20:40:29 +0000 Files and hashes: 1: 3130332e38372e3139392e302f32342d3234203d3e20313336303837.roa (hash: da7FZv0wwu0NgAl+k4INGAA7MG+JDxJrpPp3i49uNg8=) 2: 3130332e38372e3139382e302f32342d3234203d3e20313336303837.roa (hash: oiY8bQ+d3an3MLZGl2PnLxS3g6sHhrZaRpjEwIP9wlY=) 3: 7D5AE085968DC7CB311023F7EBE0BF8E126706E4.crl (hash: /GUTv90Qd/EFyInoXgGylIoom1TizERP7JWCJ6pchKw=) 4: 3130332e38372e3139362e302f32342d3234203d3e20313336303837.roa (hash: qDPmCUCvpl2ggw/iTR1lXmer3/EVY6LQXV8BhrJSCJQ=) 5: 3130332e38372e3139372e302f32342d3234203d3e20313336303837.roa (hash: 0rqaY28k1qKmtYy4sqNJeu6TR3NmCct3st2uKHz4Kkw=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/56e63cd2-fb3c-41b2-b96b-ab234420a211/0/7D5AE085968DC7CB311023F7EBE0BF8E126706E4.crl rsync://repo-rpki.idnic.net/repo/56e63cd2-fb3c-41b2-b96b-ab234420a211/0/7D5AE085968DC7CB311023F7EBE0BF8E126706E4.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7D5AE085968DC7CB311023F7EBE0BF8E126706E4.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 06 Dec 2025 12:07:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1b:ac:ae:f3:a4:ec:3d:9f:29:1e:40:8e:0e:3c:13:68:62:09:1c:a5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7D5AE085968DC7CB311023F7EBE0BF8E126706E4 Validity Not Before: Dec 3 09:27:29 2025 GMT Not After : Dec 6 20:40:29 2025 GMT Subject: CN=44FD45CA154FFDACB6EBA3F80CD728E3207C8E49 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:3b:c6:0c:91:94:9b:15:22:88:26:b8:06:89: 2e:09:7a:b3:14:00:f3:6a:08:30:ee:4f:7a:7b:71: 63:86:6a:28:26:21:75:e6:f3:3d:03:6f:49:4e:cf: 77:57:0c:98:84:6b:ed:85:9f:cc:81:36:0a:07:eb: ff:1a:6a:34:69:1d:cc:e0:f1:66:7a:49:36:b0:1e: 8d:b9:0e:7a:e8:0b:d0:4c:20:04:2b:8b:18:d3:1c: 3a:ff:51:51:15:55:7d:fb:ec:84:2c:36:e5:02:da: b2:5b:41:be:82:6e:64:72:bf:6c:92:aa:59:ab:76: 23:d8:7b:67:d4:29:31:88:f0:7c:25:2b:dd:2d:e6: f1:a5:97:2a:70:9f:86:67:4a:b8:47:49:a9:76:0b: 07:64:b7:40:a3:a7:35:00:cc:27:76:56:63:e8:f9: a2:51:36:9d:93:a2:73:0b:c4:40:5f:64:5f:e7:8b: 74:8b:d3:01:31:ac:52:98:07:5e:a4:4d:50:e0:d1: 93:78:34:dd:6d:66:bf:6c:b4:16:14:bd:1b:78:82: 70:21:a3:49:12:2a:89:91:c6:d7:d8:bd:5a:57:33: 6f:14:95:ea:24:ae:d4:71:d4:d0:95:65:a6:f6:16: de:0c:d3:68:00:29:34:16:a1:2f:db:0c:57:d1:17: d5:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:FD:45:CA:15:4F:FD:AC:B6:EB:A3:F8:0C:D7:28:E3:20:7C:8E:49 X509v3 Authority Key Identifier: keyid:7D:5A:E0:85:96:8D:C7:CB:31:10:23:F7:EB:E0:BF:8E:12:67:06:E4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/56e63cd2-fb3c-41b2-b96b-ab234420a211/0/7D5AE085968DC7CB311023F7EBE0BF8E126706E4.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7D5AE085968DC7CB311023F7EBE0BF8E126706E4.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/56e63cd2-fb3c-41b2-b96b-ab234420a211/0/7D5AE085968DC7CB311023F7EBE0BF8E126706E4.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 79:e4:06:97:f1:93:68:1a:a7:99:86:f9:77:e3:77:1f:bc:c5: 88:9f:e7:fb:2f:79:ef:09:2f:3f:5c:8b:28:63:93:3f:28:9c: 58:21:1b:8f:bf:b8:c3:82:7b:67:4a:c8:a9:8d:2b:de:41:9c: c9:45:54:52:05:a5:94:68:6c:dd:8b:33:42:bb:90:20:77:ef: 36:52:28:e5:31:db:46:91:fe:ee:d4:6b:09:f2:cb:e7:fd:a3: ce:ad:13:8d:b3:39:1d:5c:eb:40:ca:ca:18:43:74:4e:85:99: f2:c1:de:70:84:3f:09:8e:d1:3f:dd:e0:00:a9:df:06:fd:15: 23:89:f0:84:1f:8e:c3:4f:ad:4d:e4:21:70:9c:6c:fc:5a:5b: 12:55:7b:88:8c:31:26:12:c3:b6:90:d5:a6:e5:83:27:3f:5b: 36:f3:4f:e1:32:cb:96:a2:03:13:0d:03:70:1b:02:34:c9:16: 4a:69:49:99:48:fa:d9:70:c6:8a:93:1f:d1:7f:8c:23:9f:81: 2b:c4:ff:d4:8c:1e:cc:64:d8:cd:72:bf:2f:a9:9d:e8:6a:18: e5:15:3a:4e:5d:b5:1a:f0:f9:cd:c2:be:9e:b8:b6:f5:15:bb: 22:7f:e2:12:9b:3e:69:2e:fe:ec:87:c9:8d:bb:0c:1a:39:64: da:c4:f3:c1 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUG6yu86TsPZ8pHkCODjwTaGIJHKUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoN0Q1QUUwODU5NjhEQzdDQjMxMTAyM0Y3RUJFMEJGOEUx MjY3MDZFNDAeFw0yNTEyMDMwOTI3MjlaFw0yNTEyMDYyMDQwMjlaMDMxMTAvBgNV BAMTKDQ0RkQ0NUNBMTU0RkZEQUNCNkVCQTNGODBDRDcyOEUzMjA3QzhFNDkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDYO8YMkZSbFSKIJrgGiS4JerMU APNqCDDuT3p7cWOGaigmIXXm8z0Db0lOz3dXDJiEa+2Fn8yBNgoH6/8aajRpHczg 8WZ6STawHo25DnroC9BMIAQrixjTHDr/UVEVVX377IQsNuUC2rJbQb6CbmRyv2yS qlmrdiPYe2fUKTGI8HwlK90t5vGllypwn4ZnSrhHSal2Cwdkt0CjpzUAzCd2VmPo +aJRNp2TonMLxEBfZF/ni3SL0wExrFKYB16kTVDg0ZN4NN1tZr9stBYUvRt4gnAh o0kSKomRxtfYvVpXM28UleokrtRx1NCVZab2Ft4M02gAKTQWoS/bDFfRF9XFAgMB AAGjggI8MIICODAdBgNVHQ4EFgQURP1FyhVP/ay266P4DNco4yB8jkkwHwYDVR0j BBgwFoAUfVrghZaNx8sxECP36+C/jhJnBuQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 NmU2M2NkMi1mYjNjLTQxYjItYjk2Yi1hYjIzNDQyMGEyMTEvMC83RDVBRTA4NTk2 OERDN0NCMzExMDIzRjdFQkUwQkY4RTEyNjcwNkU0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvN0Q1QUUwODU5NjhEQzdDQjMxMTAyM0Y3RUJFMEJGOEUxMjY3 MDZFNC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNTZlNjNjZDItZmIzYy00MWIyLWI5 NmItYWIyMzQ0MjBhMjExLzAvN0Q1QUUwODU5NjhEQzdDQjMxMTAyM0Y3RUJFMEJG OEUxMjY3MDZFNC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHnkBpfxk2gap5mG+Xfjdx+8xYif5/svee8J Lz9ciyhjkz8onFghG4+/uMOCe2dKyKmNK95BnMlFVFIFpZRobN2LM0K7kCB37zZS KOUx20aR/u7Uawnyy+f9o86tE42zOR1c60DKyhhDdE6FmfLB3nCEPwmO0T/d4ACp 3wb9FSOJ8IQfjsNPrU3kIXCcbPxaWxJVe4iMMSYSw7aQ1ablgyc/WzbzT+Eyy5ai AxMNA3AbAjTJFkppSZlI+tlwxoqTH9F/jCOfgSvE/9SMHsxk2M1yvy+pnehqGOUV Ok5dtRrw+c3Cvp64tvUVuyJ/4hKbPmku/uyHyY27DBo5ZNrE88E= -----END CERTIFICATE-----Generated at Wed Dec 3 13:58:00 2025 by rpki-client