This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/5ce6ac01-8eac-46c5-9469-35efa36099fd/0/7892183ECB217EAEF2D3DD16491BE535CA5C5A61.mft File: 7892183ECB217EAEF2D3DD16491BE535CA5C5A61.mft (raw, json) Hash identifier: f1PPKmDNlWbzAxKZEIgzIgug5mf6oTNo8ieU9fYa99k= Subject key identifier: 3D:71:43:5C:D1:0C:BD:6F:AA:4A:1B:F1:E1:1E:9B:24:E6:9E:6C:B4 Authority key identifier: 78:92:18:3E:CB:21:7E:AE:F2:D3:DD:16:49:1B:E5:35:CA:5C:5A:61 Certificate issuer: /CN=7892183ECB217EAEF2D3DD16491BE535CA5C5A61 Certificate serial: 43232226881DF478E968325A3DA49F245E1FDF49 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7892183ECB217EAEF2D3DD16491BE535CA5C5A61.cer Subject info access: rsync://repo-rpki.idnic.net/repo/5ce6ac01-8eac-46c5-9469-35efa36099fd/0/7892183ECB217EAEF2D3DD16491BE535CA5C5A61.mft Manifest number: 0207 Signing time: Mon 01 Dec 2025 13:40:40 +0000 Manifest this update: Mon 01 Dec 2025 13:35:40 +0000 Manifest next update: Thu 04 Dec 2025 23:56:40 +0000 Files and hashes: 1: 3130332e3232352e34342e302f32332d3234203d3e2034383030.roa (hash: OSaJ9H+pyoyoyW3zEewmfSIETQNngkI7dg9yZKfTzxI=) 2: 7892183ECB217EAEF2D3DD16491BE535CA5C5A61.crl (hash: hYIm2f9cSnu/o2DdDcw0iUfGa0GpVRr128MCDDHoKmY=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/5ce6ac01-8eac-46c5-9469-35efa36099fd/0/7892183ECB217EAEF2D3DD16491BE535CA5C5A61.crl rsync://repo-rpki.idnic.net/repo/5ce6ac01-8eac-46c5-9469-35efa36099fd/0/7892183ECB217EAEF2D3DD16491BE535CA5C5A61.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7892183ECB217EAEF2D3DD16491BE535CA5C5A61.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 04 Dec 2025 23:56:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 43:23:22:26:88:1d:f4:78:e9:68:32:5a:3d:a4:9f:24:5e:1f:df:49 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7892183ECB217EAEF2D3DD16491BE535CA5C5A61 Validity Not Before: Dec 1 13:35:40 2025 GMT Not After : Dec 4 23:56:40 2025 GMT Subject: CN=3D71435CD10CBD6FAA4A1BF1E11E9B24E69E6CB4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:42:1d:7a:17:ca:18:ec:d3:d6:78:f7:ef:bc: 56:9e:6c:e3:9a:81:74:1a:8e:80:9c:32:07:36:b4: 3b:24:ea:82:ae:ea:5f:55:ff:9d:a8:d3:a0:0a:45: bb:24:d1:af:18:46:1a:33:ee:3d:b4:99:ce:78:a2: bc:3d:0c:43:6e:45:fc:2a:71:d4:84:dc:66:e8:eb: 12:10:fa:34:a9:b0:4e:f8:90:86:d5:be:b4:93:4a: b4:c2:e4:68:67:0f:46:e7:30:86:df:ab:7c:d8:31: 95:ec:38:7d:6f:c8:c2:d2:74:01:13:fd:1a:9d:4f: a1:05:74:e3:03:74:3d:1b:8a:8e:e1:ef:09:31:0a: 5f:55:f9:d3:1d:ca:31:d8:85:18:f1:ef:4e:27:61: ba:49:c0:77:fe:63:69:3c:39:64:d8:2a:89:ac:bd: 3e:bf:b4:b4:f0:8d:5a:08:2d:94:3a:d4:01:8a:0e: 8f:1f:8e:40:85:b6:22:e1:64:22:d8:de:19:e9:5d: e2:dd:fe:cc:89:6a:6e:a7:5a:74:94:7d:14:a8:2a: 85:61:c4:5e:a1:5b:77:2c:8b:4f:ca:3e:93:ab:ad: 42:5d:c8:a8:ca:80:5c:24:bd:85:29:18:7a:32:93: fb:1e:68:f6:fd:cd:2b:f7:ed:d3:60:1c:1a:06:4a: bc:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:71:43:5C:D1:0C:BD:6F:AA:4A:1B:F1:E1:1E:9B:24:E6:9E:6C:B4 X509v3 Authority Key Identifier: keyid:78:92:18:3E:CB:21:7E:AE:F2:D3:DD:16:49:1B:E5:35:CA:5C:5A:61 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/5ce6ac01-8eac-46c5-9469-35efa36099fd/0/7892183ECB217EAEF2D3DD16491BE535CA5C5A61.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7892183ECB217EAEF2D3DD16491BE535CA5C5A61.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/5ce6ac01-8eac-46c5-9469-35efa36099fd/0/7892183ECB217EAEF2D3DD16491BE535CA5C5A61.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 89:95:6e:a9:e3:76:93:d5:7a:65:24:a4:28:00:10:e5:c6:ec: dc:26:07:ec:ff:4b:f5:b7:20:8d:35:57:8f:34:f5:97:e7:79: f8:91:3c:e6:ae:d3:95:6d:7e:1c:06:d2:fa:8b:99:65:a5:22: 5d:c5:44:b6:c4:cf:af:da:3e:d2:e1:9f:38:35:41:39:82:b6: 2d:42:08:e8:66:c1:f0:5b:07:af:9b:61:5c:41:8f:21:93:bd: 5a:9c:54:17:a4:0f:b5:59:34:bd:22:46:83:cc:76:bd:a0:81: 62:2c:08:66:7b:ec:1b:db:b1:f5:df:ca:ab:37:d0:03:0c:82: 5f:b0:c6:32:58:81:2d:ee:12:6a:7b:1d:a2:0a:59:6f:bb:1c: e3:49:6f:93:ed:5a:38:6e:d2:ac:91:d1:90:12:13:4f:ef:11: 53:c8:01:68:23:76:9a:bb:19:ee:a9:ff:43:9e:cc:ad:c1:2b: ed:3c:d9:57:12:11:c5:e1:e0:ec:1e:44:66:52:72:e8:48:be: c2:b4:e9:d8:92:02:7e:1e:47:e2:aa:93:d6:b4:07:67:ef:69: 4e:58:dc:f7:a7:d3:43:7f:1f:ed:90:a4:66:3e:13:d6:ef:22: 51:27:56:a8:b1:d5:42:4e:c9:62:64:45:6c:4e:12:6b:c9:f7: 8c:81:ed:7d -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUQyMiJogd9HjpaDJaPaSfJF4f30kwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzg5MjE4M0VDQjIxN0VBRUYyRDNERDE2NDkxQkU1MzVD QTVDNUE2MTAeFw0yNTEyMDExMzM1NDBaFw0yNTEyMDQyMzU2NDBaMDMxMTAvBgNV BAMTKDNENzE0MzVDRDEwQ0JENkZBQTRBMUJGMUUxMUU5QjI0RTY5RTZDQjQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDSQh16F8oY7NPWePfvvFaebOOa gXQajoCcMgc2tDsk6oKu6l9V/52o06AKRbsk0a8YRhoz7j20mc54orw9DENuRfwq cdSE3Gbo6xIQ+jSpsE74kIbVvrSTSrTC5GhnD0bnMIbfq3zYMZXsOH1vyMLSdAET /RqdT6EFdOMDdD0bio7h7wkxCl9V+dMdyjHYhRjx704nYbpJwHf+Y2k8OWTYKoms vT6/tLTwjVoILZQ61AGKDo8fjkCFtiLhZCLY3hnpXeLd/syJam6nWnSUfRSoKoVh xF6hW3csi0/KPpOrrUJdyKjKgFwkvYUpGHoyk/seaPb9zSv37dNgHBoGSrylAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUPXFDXNEMvW+qShvx4R6bJOaebLQwHwYDVR0j BBgwFoAUeJIYPsshfq7y090WSRvlNcpcWmEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 Y2U2YWMwMS04ZWFjLTQ2YzUtOTQ2OS0zNWVmYTM2MDk5ZmQvMC83ODkyMTgzRUNC MjE3RUFFRjJEM0REMTY0OTFCRTUzNUNBNUM1QTYxLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNzg5MjE4M0VDQjIxN0VBRUYyRDNERDE2NDkxQkU1MzVDQTVD NUE2MS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNWNlNmFjMDEtOGVhYy00NmM1LTk0 NjktMzVlZmEzNjA5OWZkLzAvNzg5MjE4M0VDQjIxN0VBRUYyRDNERDE2NDkxQkU1 MzVDQTVDNUE2MS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAImVbqnjdpPVemUkpCgAEOXG7NwmB+z/S/W3 II01V4809ZfnefiRPOau05VtfhwG0vqLmWWlIl3FRLbEz6/aPtLhnzg1QTmCti1C COhmwfBbB6+bYVxBjyGTvVqcVBekD7VZNL0iRoPMdr2ggWIsCGZ77BvbsfXfyqs3 0AMMgl+wxjJYgS3uEmp7HaIKWW+7HONJb5PtWjhu0qyR0ZASE0/vEVPIAWgjdpq7 Ge6p/0OezK3BK+082VcSEcXh4OweRGZScuhIvsK06diSAn4eR+Kqk9a0B2fvaU5Y 3Pen00N/H+2QpGY+E9bvIlEnVqix1UJOyWJkRWxOEmvJ94yB7X0= -----END CERTIFICATE-----Generated at Wed Dec 3 14:14:29 2025 by rpki-client