This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/7620b423-dd5d-448f-bbd3-04530ec1715d/0/A7D53EB5451EAF8ACAB638487FBDEB40177A0F8A.mft File: A7D53EB5451EAF8ACAB638487FBDEB40177A0F8A.mft (raw, json) Hash identifier: nayZS92hRynR81i1CvY5cZcoTe6JdeVDT9iIkm+j9lM= Subject key identifier: D6:EC:B6:C8:5C:C3:58:F0:EE:46:38:69:2B:62:75:5B:E8:EF:AD:D6 Authority key identifier: A7:D5:3E:B5:45:1E:AF:8A:CA:B6:38:48:7F:BD:EB:40:17:7A:0F:8A Certificate issuer: /CN=A7D53EB5451EAF8ACAB638487FBDEB40177A0F8A Certificate serial: 78CFA5385D5AAC5D0C22B73C340492E624BAC8A2 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A7D53EB5451EAF8ACAB638487FBDEB40177A0F8A.cer Subject info access: rsync://repo-rpki.idnic.net/repo/7620b423-dd5d-448f-bbd3-04530ec1715d/0/A7D53EB5451EAF8ACAB638487FBDEB40177A0F8A.mft Manifest number: 01E2 Signing time: Tue 02 Dec 2025 14:11:36 +0000 Manifest this update: Tue 02 Dec 2025 14:06:36 +0000 Manifest next update: Fri 05 Dec 2025 20:11:36 +0000 Files and hashes: 1: A7D53EB5451EAF8ACAB638487FBDEB40177A0F8A.crl (hash: 0oMUqzA0uiwh71YqDhGLltuTcaeFvih6Cf25tW4PHXw=) 2: 3130332e3139302e36322e302f32332d3234203d3e20313439383938.roa (hash: ucCbwXx4y4Y9tjJj1wWolRQrWsXSQxItRBf8rwecRXg=) 3: 3130332e3139302e36332e302f32342d3234203d3e20313439383938.roa (hash: zf/PohLzFCJiUqI9Mgfrev7PucURzdNsl2RNcKVdXxg=) 4: 3130332e3139302e36322e302f32342d3234203d3e20313439383938.roa (hash: cp5AZz8jsj7lkSzSuyAiGgYK8cjqibH/qG2rGgK+9is=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/7620b423-dd5d-448f-bbd3-04530ec1715d/0/A7D53EB5451EAF8ACAB638487FBDEB40177A0F8A.crl rsync://repo-rpki.idnic.net/repo/7620b423-dd5d-448f-bbd3-04530ec1715d/0/A7D53EB5451EAF8ACAB638487FBDEB40177A0F8A.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A7D53EB5451EAF8ACAB638487FBDEB40177A0F8A.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 05 Dec 2025 20:11:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 78:cf:a5:38:5d:5a:ac:5d:0c:22:b7:3c:34:04:92:e6:24:ba:c8:a2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A7D53EB5451EAF8ACAB638487FBDEB40177A0F8A Validity Not Before: Dec 2 14:06:36 2025 GMT Not After : Dec 5 20:11:36 2025 GMT Subject: CN=D6ECB6C85CC358F0EE4638692B62755BE8EFADD6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:28:c4:32:e6:ab:10:79:28:5c:9a:25:72:20: 3c:a4:15:48:63:52:91:b1:98:88:a6:c2:59:2f:52: 4c:c6:bb:a5:cf:23:64:f4:c6:3b:56:18:3a:41:a2: 54:51:95:11:63:6c:c0:4f:95:0a:ba:bb:1d:db:b8: 2b:a4:f8:37:25:fc:de:89:c7:c2:d1:e0:15:49:d9: 98:9b:81:9f:34:a1:ea:4c:84:e2:62:1f:e3:b7:d2: 4f:c4:ab:28:5c:0a:37:92:d5:7c:87:57:36:be:cb: 93:f3:11:93:a5:7b:b8:2c:f5:6d:f5:bd:44:42:a5: 3d:e5:af:57:91:d5:3d:b9:7b:50:10:ae:30:d5:73: c2:24:c8:2c:33:80:9f:b0:30:8c:ec:89:16:4f:57: de:c1:2f:0b:e1:5b:04:b2:b8:4f:2e:48:b9:c4:1a: ea:00:62:bc:76:21:cd:57:99:d3:c9:9a:69:49:00: 27:7f:8b:60:48:7d:47:39:b4:56:20:8e:c8:2d:29: e5:de:2f:36:e7:05:b6:b1:d4:b8:76:c6:c1:07:37: 96:cd:f8:a5:50:75:c6:66:e6:06:54:78:ce:0c:98: 66:5a:7c:92:1b:ac:9b:05:4d:15:09:3a:ab:03:84: ea:fa:1b:04:5f:61:f8:6e:7c:02:8b:b4:57:95:1c: 0d:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D6:EC:B6:C8:5C:C3:58:F0:EE:46:38:69:2B:62:75:5B:E8:EF:AD:D6 X509v3 Authority Key Identifier: keyid:A7:D5:3E:B5:45:1E:AF:8A:CA:B6:38:48:7F:BD:EB:40:17:7A:0F:8A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/7620b423-dd5d-448f-bbd3-04530ec1715d/0/A7D53EB5451EAF8ACAB638487FBDEB40177A0F8A.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A7D53EB5451EAF8ACAB638487FBDEB40177A0F8A.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7620b423-dd5d-448f-bbd3-04530ec1715d/0/A7D53EB5451EAF8ACAB638487FBDEB40177A0F8A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 50:fc:f6:fa:48:47:98:ba:65:02:39:cd:04:6e:80:77:f5:68: 7f:25:fd:47:9f:57:8f:d4:ad:14:13:ef:d3:94:29:08:9d:60: fb:d0:ee:76:ce:f9:52:82:69:3f:b3:93:70:83:fb:28:7f:de: cc:5b:e6:19:41:a5:68:f4:06:ae:75:b6:ce:ef:cc:e6:c3:72: 0e:42:62:18:ac:69:39:94:37:c1:54:e0:32:bb:35:cb:ab:33: ed:00:5e:72:eb:13:00:d4:bf:b8:04:98:49:6f:2c:3a:f4:c5: 09:a4:12:62:11:1d:29:af:38:b4:bc:21:6f:14:85:2b:6a:cd: c4:ff:cd:1a:5f:d7:32:46:56:7d:98:db:a4:16:69:e1:84:19: dc:3d:ae:8e:c7:cf:06:8d:14:ab:0b:0c:71:f9:0c:20:05:dc: db:c1:ab:da:39:fc:f1:d4:70:0a:d0:b4:81:86:f6:e6:1c:06: 99:02:7e:b8:c8:dd:98:96:ce:18:18:eb:ff:36:ac:36:df:27: ff:f8:9c:a5:1f:7c:1a:e5:9f:0f:41:d5:c8:51:97:f7:6f:5f: 08:86:66:f5:8e:63:22:3e:56:18:a1:28:bf:c1:2c:2b:d6:bb: c2:e7:f0:22:95:02:0f:a2:c1:68:70:72:00:78:58:e6:68:76: 2b:70:c3:ae -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUeM+lOF1arF0MIrc8NASS5iS6yKIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTdENTNFQjU0NTFFQUY4QUNBQjYzODQ4N0ZCREVCNDAx NzdBMEY4QTAeFw0yNTEyMDIxNDA2MzZaFw0yNTEyMDUyMDExMzZaMDMxMTAvBgNV BAMTKEQ2RUNCNkM4NUNDMzU4RjBFRTQ2Mzg2OTJCNjI3NTVCRThFRkFERDYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCxKMQy5qsQeShcmiVyIDykFUhj UpGxmIimwlkvUkzGu6XPI2T0xjtWGDpBolRRlRFjbMBPlQq6ux3buCuk+Dcl/N6J x8LR4BVJ2ZibgZ80oepMhOJiH+O30k/EqyhcCjeS1XyHVza+y5PzEZOle7gs9W31 vURCpT3lr1eR1T25e1AQrjDVc8IkyCwzgJ+wMIzsiRZPV97BLwvhWwSyuE8uSLnE GuoAYrx2Ic1XmdPJmmlJACd/i2BIfUc5tFYgjsgtKeXeLzbnBbax1Lh2xsEHN5bN +KVQdcZm5gZUeM4MmGZafJIbrJsFTRUJOqsDhOr6GwRfYfhufAKLtFeVHA3ZAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU1uy2yFzDWPDuRjhpK2J1W+jvrdYwHwYDVR0j BBgwFoAUp9U+tUUer4rKtjhIf73rQBd6D4owDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 NjIwYjQyMy1kZDVkLTQ0OGYtYmJkMy0wNDUzMGVjMTcxNWQvMC9BN0Q1M0VCNTQ1 MUVBRjhBQ0FCNjM4NDg3RkJERUI0MDE3N0EwRjhBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQTdENTNFQjU0NTFFQUY4QUNBQjYzODQ4N0ZCREVCNDAxNzdB MEY4QS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNzYyMGI0MjMtZGQ1ZC00NDhmLWJi ZDMtMDQ1MzBlYzE3MTVkLzAvQTdENTNFQjU0NTFFQUY4QUNBQjYzODQ4N0ZCREVC NDAxNzdBMEY4QS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFD89vpIR5i6ZQI5zQRugHf1aH8l/UefV4/U rRQT79OUKQidYPvQ7nbO+VKCaT+zk3CD+yh/3sxb5hlBpWj0Bq51ts7vzObDcg5C YhisaTmUN8FU4DK7NcurM+0AXnLrEwDUv7gEmElvLDr0xQmkEmIRHSmvOLS8IW8U hStqzcT/zRpf1zJGVn2Y26QWaeGEGdw9ro7HzwaNFKsLDHH5DCAF3NvBq9o5/PHU cArQtIGG9uYcBpkCfrjI3ZiWzhgY6/82rDbfJ//4nKUffBrlnw9B1chRl/dvXwiG ZvWOYyI+VhihKL/BLCvWu8Ln8CKVAg+iwWhwcgB4WOZoditww64= -----END CERTIFICATE-----Generated at Wed Dec 3 14:57:24 2025 by rpki-client