This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/60b590e8-4f89-4785-ae79-2bfffa2c52c9/0/7C7A73B67FFC6664BCCD30B2013C54FCCE0B6254.mft File: 7C7A73B67FFC6664BCCD30B2013C54FCCE0B6254.mft (raw, json) Hash identifier: p058LIo7q0lvk/0Bj+p75FviTQ5BSshdCbGONpDNSTo= Subject key identifier: 16:F9:BF:4E:AA:34:F2:0D:F5:4C:76:BA:DA:89:28:F4:A0:FE:85:62 Authority key identifier: 7C:7A:73:B6:7F:FC:66:64:BC:CD:30:B2:01:3C:54:FC:CE:0B:62:54 Certificate issuer: /CN=7C7A73B67FFC6664BCCD30B2013C54FCCE0B6254 Certificate serial: 580BA11C1F0C51C49307AF3ABDAE178A99EB7D69 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7C7A73B67FFC6664BCCD30B2013C54FCCE0B6254.cer Subject info access: rsync://repo-rpki.idnic.net/repo/60b590e8-4f89-4785-ae79-2bfffa2c52c9/0/7C7A73B67FFC6664BCCD30B2013C54FCCE0B6254.mft Manifest number: 02E4 Signing time: Tue 02 Dec 2025 15:11:13 +0000 Manifest this update: Tue 02 Dec 2025 15:06:13 +0000 Manifest next update: Fri 05 Dec 2025 23:24:13 +0000 Files and hashes: 1: 323030313a6466323a653538303a3a2f34382d3438203d3e20313339393935.roa (hash: co+KBnnYJEQwi8iEhHouifTA/OpTo3Sr/IbcmkaoPho=) 2: 7C7A73B67FFC6664BCCD30B2013C54FCCE0B6254.crl (hash: fzIU6cnBTifM4FgHemY+kSYCtPYIh5s5LDFdORBrnUk=) 3: 3130332e3134382e3139322e302f32332d3233203d3e20313339393935.roa (hash: 6G5VVeMd9f0T1RPqM5MK5BUBT+YheiE43z/FzXMuOVc=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/60b590e8-4f89-4785-ae79-2bfffa2c52c9/0/7C7A73B67FFC6664BCCD30B2013C54FCCE0B6254.crl rsync://repo-rpki.idnic.net/repo/60b590e8-4f89-4785-ae79-2bfffa2c52c9/0/7C7A73B67FFC6664BCCD30B2013C54FCCE0B6254.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7C7A73B67FFC6664BCCD30B2013C54FCCE0B6254.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 05 Dec 2025 23:24:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 58:0b:a1:1c:1f:0c:51:c4:93:07:af:3a:bd:ae:17:8a:99:eb:7d:69 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7C7A73B67FFC6664BCCD30B2013C54FCCE0B6254 Validity Not Before: Dec 2 15:06:13 2025 GMT Not After : Dec 5 23:24:13 2025 GMT Subject: CN=16F9BF4EAA34F20DF54C76BADA8928F4A0FE8562 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:d2:a5:80:bc:65:4e:17:6d:15:57:70:be:9d: 1a:d3:71:e3:1c:86:b8:2d:d2:ae:43:2f:2f:cc:2a: 24:29:38:9d:71:fa:d7:87:39:9e:5a:9c:bf:8d:2c: 26:0f:29:04:cb:8e:e7:97:1a:26:43:3b:24:81:f1: ef:63:29:9a:28:c9:b2:bf:d5:48:d3:a6:18:78:cf: 48:67:97:cf:15:0f:c4:a0:06:c8:00:e7:f0:70:ab: a5:19:80:3e:90:06:9c:4a:23:1e:18:64:d4:d4:e8: 8c:ee:d9:69:74:2e:76:76:58:fb:15:a6:cc:f4:60: d9:70:a2:c8:52:2d:dc:98:81:00:3a:cd:4d:bf:93: 59:26:79:97:00:54:42:c4:37:55:79:48:4e:5e:6f: 28:2a:a0:fd:86:15:72:dd:b6:df:1b:c5:ef:90:69: d6:a0:0b:ab:db:a4:85:e2:7a:93:62:7f:79:1d:27: 94:97:6d:26:a3:3c:9d:38:76:e2:9f:87:ad:60:e3: 89:50:fc:4a:be:cd:0e:c5:d6:c5:ac:00:42:ae:f8: 33:f8:3f:af:6c:fc:cf:e3:cc:4b:8a:b4:a4:13:72: d9:44:e7:e6:cd:58:74:ae:35:eb:55:ef:c6:18:cc: cd:bf:51:e9:bb:0c:8c:3b:ad:a8:73:34:d9:5c:50: a8:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:F9:BF:4E:AA:34:F2:0D:F5:4C:76:BA:DA:89:28:F4:A0:FE:85:62 X509v3 Authority Key Identifier: keyid:7C:7A:73:B6:7F:FC:66:64:BC:CD:30:B2:01:3C:54:FC:CE:0B:62:54 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/60b590e8-4f89-4785-ae79-2bfffa2c52c9/0/7C7A73B67FFC6664BCCD30B2013C54FCCE0B6254.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7C7A73B67FFC6664BCCD30B2013C54FCCE0B6254.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/60b590e8-4f89-4785-ae79-2bfffa2c52c9/0/7C7A73B67FFC6664BCCD30B2013C54FCCE0B6254.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption af:43:78:1b:3a:0b:4c:ed:b4:99:53:7f:07:be:e4:0c:21:6e: 51:5e:ac:3f:61:a4:d5:94:48:12:80:4f:1f:9a:72:19:77:c8: a2:bf:ba:38:d2:e1:d0:2a:d6:cd:fd:0d:b9:2d:44:48:e3:65: f1:14:59:f0:fd:b8:29:da:80:e6:f8:11:ad:fe:f1:18:6f:89: ee:25:c3:6c:1b:28:e0:7b:6e:5e:66:eb:ff:a5:53:81:8c:aa: 77:3c:fb:8c:54:26:38:e0:96:82:10:3c:55:6a:b0:b1:1c:e5: 01:fc:9e:80:b9:c4:c4:70:1c:9f:60:e3:60:e1:f2:7b:c7:42: 19:71:f6:60:a2:f4:ab:53:92:23:61:b9:2f:ad:dd:21:79:4f: 3d:da:89:cc:cf:67:4c:45:42:17:12:be:44:9c:29:6c:a2:4e: 89:02:9f:c5:39:7c:be:50:0a:ff:47:b0:df:84:fa:29:2f:f6: 8f:d8:ad:9b:0a:da:4d:16:45:6c:d0:a3:24:b0:9b:de:61:67: 03:61:bf:49:c6:7f:df:a3:b7:ae:47:d0:90:96:5d:f5:45:95: 64:66:4a:cc:9d:d1:b7:f3:47:96:37:c9:99:88:5a:24:80:6c: c9:ef:ec:df:9a:73:c3:af:79:f7:a4:43:a0:40:5b:b6:2d:8f: d6:e2:f3:06 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUWAuhHB8MUcSTB686va4XipnrfWkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoN0M3QTczQjY3RkZDNjY2NEJDQ0QzMEIyMDEzQzU0RkND RTBCNjI1NDAeFw0yNTEyMDIxNTA2MTNaFw0yNTEyMDUyMzI0MTNaMDMxMTAvBgNV BAMTKDE2RjlCRjRFQUEzNEYyMERGNTRDNzZCQURBODkyOEY0QTBGRTg1NjIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCr0qWAvGVOF20VV3C+nRrTceMc hrgt0q5DLy/MKiQpOJ1x+teHOZ5anL+NLCYPKQTLjueXGiZDOySB8e9jKZooybK/ 1UjTphh4z0hnl88VD8SgBsgA5/Bwq6UZgD6QBpxKIx4YZNTU6Izu2Wl0LnZ2WPsV psz0YNlwoshSLdyYgQA6zU2/k1kmeZcAVELEN1V5SE5ebygqoP2GFXLdtt8bxe+Q adagC6vbpIXiepNif3kdJ5SXbSajPJ04duKfh61g44lQ/Eq+zQ7F1sWsAEKu+DP4 P69s/M/jzEuKtKQTctlE5+bNWHSuNetV78YYzM2/Uem7DIw7rahzNNlcUKjhAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUFvm/Tqo08g31THa62oko9KD+hWIwHwYDVR0j BBgwFoAUfHpztn/8ZmS8zTCyATxU/M4LYlQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 MGI1OTBlOC00Zjg5LTQ3ODUtYWU3OS0yYmZmZmEyYzUyYzkvMC83QzdBNzNCNjdG RkM2NjY0QkNDRDMwQjIwMTNDNTRGQ0NFMEI2MjU0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvN0M3QTczQjY3RkZDNjY2NEJDQ0QzMEIyMDEzQzU0RkNDRTBC NjI1NC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNjBiNTkwZTgtNGY4OS00Nzg1LWFl NzktMmJmZmZhMmM1MmM5LzAvN0M3QTczQjY3RkZDNjY2NEJDQ0QzMEIyMDEzQzU0 RkNDRTBCNjI1NC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAK9DeBs6C0zttJlTfwe+5AwhblFerD9hpNWU SBKATx+achl3yKK/ujjS4dAq1s39DbktREjjZfEUWfD9uCnagOb4Ea3+8Rhvie4l w2wbKOB7bl5m6/+lU4GMqnc8+4xUJjjgloIQPFVqsLEc5QH8noC5xMRwHJ9g42Dh 8nvHQhlx9mCi9KtTkiNhuS+t3SF5Tz3aiczPZ0xFQhcSvkScKWyiTokCn8U5fL5Q Cv9HsN+E+ikv9o/YrZsK2k0WRWzQoySwm95hZwNhv0nGf9+jt65H0JCWXfVFlWRm Ssyd0bfzR5Y3yZmIWiSAbMnv7N+ac8OvefekQ6BAW7Ytj9bi8wY= -----END CERTIFICATE-----Generated at Wed Dec 3 14:14:28 2025 by rpki-client