This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/835048c6-8ccd-463d-ad34-ae7428647a9c/0/7008868799E77C42E437F0D7ACCF683CF5B2AA4E.mft File: 7008868799E77C42E437F0D7ACCF683CF5B2AA4E.mft (raw, json) Hash identifier: SZMza8obXHqGfV/ESyqpYuoIVjn8mn8qTFaRZ1xODVE= Subject key identifier: 08:4C:92:35:7B:AF:92:B2:93:39:83:BB:90:A4:CB:E0:9A:89:34:86 Authority key identifier: 70:08:86:87:99:E7:7C:42:E4:37:F0:D7:AC:CF:68:3C:F5:B2:AA:4E Certificate issuer: /CN=7008868799E77C42E437F0D7ACCF683CF5B2AA4E Certificate serial: 093B6E041C3CAB00765E57906D4135CD5DAB871F Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7008868799E77C42E437F0D7ACCF683CF5B2AA4E.cer Subject info access: rsync://repo-rpki.idnic.net/repo/835048c6-8ccd-463d-ad34-ae7428647a9c/0/7008868799E77C42E437F0D7ACCF683CF5B2AA4E.mft Manifest number: 04C7 Signing time: Tue 02 Dec 2025 08:11:24 +0000 Manifest this update: Tue 02 Dec 2025 08:06:24 +0000 Manifest next update: Fri 05 Dec 2025 10:48:24 +0000 Files and hashes: 1: 3130332e3134362e3139362e302f32332d3233203d3e20313339393431.roa (hash: KEUVODDrcsujN0g1v6DrUa6Mji4U9jJWIyDXhx1aJNY=) 2: 3130332e3134362e3139372e302f32342d3234203d3e20313339393431.roa (hash: p7Jtuo2fT9SMHQpNlniVY5E8TDvsdgf0sorpgXPSACM=) 3: 7008868799E77C42E437F0D7ACCF683CF5B2AA4E.crl (hash: ZS9jdlpuXUQyDk8vDRfGmijXVgmP8xzJhpot0UcBHyo=) 4: 3130332e3134362e3139362e302f32342d3234203d3e20313339393431.roa (hash: WkFNZS79+nq1P3vYzsoqHasGlqkPwC3TJbG5gTcIHd8=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/835048c6-8ccd-463d-ad34-ae7428647a9c/0/7008868799E77C42E437F0D7ACCF683CF5B2AA4E.crl rsync://repo-rpki.idnic.net/repo/835048c6-8ccd-463d-ad34-ae7428647a9c/0/7008868799E77C42E437F0D7ACCF683CF5B2AA4E.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7008868799E77C42E437F0D7ACCF683CF5B2AA4E.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 05 Dec 2025 10:48:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 09:3b:6e:04:1c:3c:ab:00:76:5e:57:90:6d:41:35:cd:5d:ab:87:1f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7008868799E77C42E437F0D7ACCF683CF5B2AA4E Validity Not Before: Dec 2 08:06:24 2025 GMT Not After : Dec 5 10:48:24 2025 GMT Subject: CN=084C92357BAF92B2933983BB90A4CBE09A893486 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:71:ae:eb:55:7f:32:51:59:d1:bc:71:b4:2b: f4:5a:ed:0d:69:b3:ad:91:a8:8f:21:d7:7b:52:f6: 93:70:69:11:b0:e1:81:9c:69:bb:d3:07:30:ea:07: a5:03:74:ca:7f:6b:ed:1a:0f:55:f6:e7:bd:bf:5e: 9a:76:6f:2e:e5:3a:01:f0:af:d2:fc:0c:d5:4c:99: bf:57:16:94:af:de:d0:53:d6:de:b8:d9:aa:5d:03: 3b:6e:d3:6b:0c:a6:10:93:5c:de:a4:bf:25:73:f0: 23:af:10:88:c3:87:2a:3d:1c:31:12:5f:98:94:d4: 66:fe:9f:bd:f7:e4:48:cb:fb:a0:e7:c2:0e:c2:bf: 1e:c4:df:fa:11:40:63:8d:f5:59:8b:76:fe:55:9c: aa:84:6e:9b:1b:a2:69:74:bf:dd:19:0e:1d:83:6a: a4:03:0a:4c:e9:58:81:af:da:f3:7e:26:60:a6:96: bb:d3:34:23:1b:80:38:ca:fe:5d:05:e4:a9:08:4f: 0a:a3:22:cc:af:00:70:33:4d:e3:60:0d:ad:2c:05: b9:70:89:32:06:d5:0a:b4:c6:0d:62:13:37:e2:af: e2:53:21:2b:39:16:88:c0:b9:67:d8:1c:55:68:8b: 15:9f:9b:32:75:9e:c0:50:0a:90:82:fe:49:00:53: af:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 08:4C:92:35:7B:AF:92:B2:93:39:83:BB:90:A4:CB:E0:9A:89:34:86 X509v3 Authority Key Identifier: keyid:70:08:86:87:99:E7:7C:42:E4:37:F0:D7:AC:CF:68:3C:F5:B2:AA:4E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/835048c6-8ccd-463d-ad34-ae7428647a9c/0/7008868799E77C42E437F0D7ACCF683CF5B2AA4E.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7008868799E77C42E437F0D7ACCF683CF5B2AA4E.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/835048c6-8ccd-463d-ad34-ae7428647a9c/0/7008868799E77C42E437F0D7ACCF683CF5B2AA4E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption be:6b:55:bb:b3:8a:44:d9:88:99:fa:c4:f4:26:a4:41:d5:d9: 6f:59:aa:68:97:9b:49:42:16:fa:52:5c:15:27:05:bf:4d:b5: c4:cf:97:8d:df:30:33:6b:7d:d1:da:96:f4:6a:2e:ce:79:29: 29:66:b2:99:62:f7:eb:59:7d:e3:db:f3:96:85:5d:b3:e2:9e: 04:8d:b7:b1:43:b2:b6:6b:e7:b5:9f:89:83:9d:8e:34:79:83: 80:d2:89:d1:8f:24:40:80:ab:db:44:9d:ee:15:ae:59:98:88: 80:28:1f:6c:fe:5f:ac:52:0e:f1:3b:a7:17:8d:db:03:25:0f: d3:a1:9b:f4:c9:77:77:6f:73:56:ed:30:27:d1:e9:4d:45:e7: 87:df:02:3e:8e:09:45:82:66:ee:93:3e:a5:e1:55:f4:3f:f8: bd:f9:86:c0:63:da:91:d5:eb:92:bc:6e:64:96:f2:06:eb:3d: 15:73:5b:fc:bb:27:ba:0c:25:82:30:84:5f:78:4b:6b:08:08: 37:f3:c5:86:53:b9:cd:97:b4:df:d2:51:5d:7e:73:ad:03:f5: 49:c3:39:cf:4d:72:3f:7f:69:80:53:43:91:2e:6f:ec:1c:3c: 4c:c9:e2:30:e1:c5:ee:34:8f:93:39:ba:f4:70:0f:07:5d:62: 85:8a:31:66 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUCTtuBBw8qwB2XleQbUE1zV2rhx8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzAwODg2ODc5OUU3N0M0MkU0MzdGMEQ3QUNDRjY4M0NG NUIyQUE0RTAeFw0yNTEyMDIwODA2MjRaFw0yNTEyMDUxMDQ4MjRaMDMxMTAvBgNV BAMTKDA4NEM5MjM1N0JBRjkyQjI5MzM5ODNCQjkwQTRDQkUwOUE4OTM0ODYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDOca7rVX8yUVnRvHG0K/Ra7Q1p s62RqI8h13tS9pNwaRGw4YGcabvTBzDqB6UDdMp/a+0aD1X2572/Xpp2by7lOgHw r9L8DNVMmb9XFpSv3tBT1t642apdAztu02sMphCTXN6kvyVz8COvEIjDhyo9HDES X5iU1Gb+n7335EjL+6Dnwg7Cvx7E3/oRQGON9VmLdv5VnKqEbpsboml0v90ZDh2D aqQDCkzpWIGv2vN+JmCmlrvTNCMbgDjK/l0F5KkITwqjIsyvAHAzTeNgDa0sBblw iTIG1Qq0xg1iEzfir+JTISs5FojAuWfYHFVoixWfmzJ1nsBQCpCC/kkAU6/5AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUCEySNXuvkrKTOYO7kKTL4JqJNIYwHwYDVR0j BBgwFoAUcAiGh5nnfELkN/DXrM9oPPWyqk4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 MzUwNDhjNi04Y2NkLTQ2M2QtYWQzNC1hZTc0Mjg2NDdhOWMvMC83MDA4ODY4Nzk5 RTc3QzQyRTQzN0YwRDdBQ0NGNjgzQ0Y1QjJBQTRFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNzAwODg2ODc5OUU3N0M0MkU0MzdGMEQ3QUNDRjY4M0NGNUIy QUE0RS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vODM1MDQ4YzYtOGNjZC00NjNkLWFk MzQtYWU3NDI4NjQ3YTljLzAvNzAwODg2ODc5OUU3N0M0MkU0MzdGMEQ3QUNDRjY4 M0NGNUIyQUE0RS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAL5rVbuzikTZiJn6xPQmpEHV2W9ZqmiXm0lC FvpSXBUnBb9NtcTPl43fMDNrfdHalvRqLs55KSlmspli9+tZfePb85aFXbPingSN t7FDsrZr57WfiYOdjjR5g4DSidGPJECAq9tEne4VrlmYiIAoH2z+X6xSDvE7pxeN 2wMlD9Ohm/TJd3dvc1btMCfR6U1F54ffAj6OCUWCZu6TPqXhVfQ/+L35hsBj2pHV 65K8bmSW8gbrPRVzW/y7J7oMJYIwhF94S2sICDfzxYZTuc2XtN/SUV1+c60D9UnD Oc9Ncj9/aYBTQ5Eub+wcPEzJ4jDhxe40j5M5uvRwDwddYoWKMWY= -----END CERTIFICATE-----Generated at Wed Dec 3 14:57:22 2025 by rpki-client