This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/871ada9e-e2a9-400e-8dff-9be481aba583/0/007C91B049F735F71F2BE8CF92AEAA538D6B1F0B.mft File: 007C91B049F735F71F2BE8CF92AEAA538D6B1F0B.mft (raw, json) Hash identifier: XkousA3sTv9QNKX7db78Swds2rLXWYsqMnkSnb4C2W0= Subject key identifier: C2:27:DC:2F:38:21:C9:0A:D1:C5:E9:2F:35:9E:D8:E7:AE:29:8F:44 Authority key identifier: 00:7C:91:B0:49:F7:35:F7:1F:2B:E8:CF:92:AE:AA:53:8D:6B:1F:0B Certificate issuer: /CN=007C91B049F735F71F2BE8CF92AEAA538D6B1F0B Certificate serial: 16A6EB09748A5FA3447584691E7F3973C457C406 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/007C91B049F735F71F2BE8CF92AEAA538D6B1F0B.cer Subject info access: rsync://repo-rpki.idnic.net/repo/871ada9e-e2a9-400e-8dff-9be481aba583/0/007C91B049F735F71F2BE8CF92AEAA538D6B1F0B.mft Manifest number: 0164 Signing time: Thu 18 Dec 2025 15:32:10 +0000 Manifest this update: Thu 18 Dec 2025 15:27:10 +0000 Manifest next update: Sun 21 Dec 2025 23:25:10 +0000 Files and hashes: 1: 007C91B049F735F71F2BE8CF92AEAA538D6B1F0B.crl (hash: VQVVJzbIq0tRDcFARJyU01DFeFzqTIUXiGUrzQi1SVM=) 2: 3130332e35382e3130342e302f32322d3234203d3e20313333383334.roa (hash: ubAgdugDvQaB/HJfz4fY63v3MFp+bq+KP7AGcGBA1hw=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/871ada9e-e2a9-400e-8dff-9be481aba583/0/007C91B049F735F71F2BE8CF92AEAA538D6B1F0B.crl rsync://repo-rpki.idnic.net/repo/871ada9e-e2a9-400e-8dff-9be481aba583/0/007C91B049F735F71F2BE8CF92AEAA538D6B1F0B.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/007C91B049F735F71F2BE8CF92AEAA538D6B1F0B.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 21 Dec 2025 23:25:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 16:a6:eb:09:74:8a:5f:a3:44:75:84:69:1e:7f:39:73:c4:57:c4:06 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=007C91B049F735F71F2BE8CF92AEAA538D6B1F0B Validity Not Before: Dec 18 15:27:10 2025 GMT Not After : Dec 21 23:25:10 2025 GMT Subject: CN=C227DC2F3821C90AD1C5E92F359ED8E7AE298F44 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:c1:8f:15:0b:8d:c1:90:37:e7:15:cf:80:71: 6c:ba:5f:36:83:e2:0a:a3:5d:6d:f7:7f:b3:49:4a: 9f:3f:04:48:fa:03:4a:47:55:67:39:90:38:04:65: 57:78:eb:c4:54:75:65:20:20:62:71:10:2a:a5:ff: 55:75:f8:fd:84:2a:0c:59:fb:70:6d:3c:77:e5:bd: 5c:5c:c7:35:60:56:4a:d3:3f:1e:13:a2:db:3f:00: 74:ec:24:ae:ed:97:5e:cf:b3:c3:bf:6f:80:da:bf: e9:9c:32:90:3f:e4:24:5a:ed:d5:29:b8:58:e7:8d: 47:1e:4d:a7:0e:b3:90:57:17:50:68:e8:0f:4f:f5: 36:1d:81:3a:59:ea:88:b6:5d:83:08:8e:9a:f0:10: 08:7c:69:c6:fd:47:28:23:0a:77:81:55:f8:dd:fe: 72:d3:2d:f9:92:7e:88:d1:72:1f:57:6f:86:7a:c1: 9a:7a:e4:8f:78:61:62:6e:0e:e8:65:89:0e:ef:c3: ee:c6:9e:98:6a:b2:d2:ed:99:79:37:87:a0:cf:9a: 8e:dc:e0:9c:73:d2:f8:95:ca:62:3a:3d:a0:3e:3f: 35:15:ec:e1:99:10:fd:9a:28:fd:95:2c:dd:55:9f: 0a:90:c9:24:a1:b7:30:a2:d9:f5:f7:65:2a:21:08: ae:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:27:DC:2F:38:21:C9:0A:D1:C5:E9:2F:35:9E:D8:E7:AE:29:8F:44 X509v3 Authority Key Identifier: keyid:00:7C:91:B0:49:F7:35:F7:1F:2B:E8:CF:92:AE:AA:53:8D:6B:1F:0B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/871ada9e-e2a9-400e-8dff-9be481aba583/0/007C91B049F735F71F2BE8CF92AEAA538D6B1F0B.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/007C91B049F735F71F2BE8CF92AEAA538D6B1F0B.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/871ada9e-e2a9-400e-8dff-9be481aba583/0/007C91B049F735F71F2BE8CF92AEAA538D6B1F0B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5b:bf:18:ce:f1:e0:20:e3:ed:2f:ea:50:0c:5d:0c:14:2b:4c: c5:9d:7c:32:66:a4:b6:63:ad:c5:8b:a8:4e:e6:bd:be:f4:6c: 3d:fe:9a:40:ee:ae:ba:4b:0f:12:cb:89:5d:aa:32:45:8f:8b: f7:98:ce:86:c6:dc:46:b3:5c:1c:ae:9b:d6:be:d3:cf:bb:13: 0f:76:31:ee:4c:0f:1e:a7:b6:36:fd:99:df:44:91:2c:59:47: 7a:13:8c:6b:84:91:91:2a:1d:ef:9c:75:ac:78:01:aa:19:2d: 54:e5:ad:0e:1e:a5:39:35:92:97:a7:5b:d0:df:79:95:da:07: 04:94:a8:03:78:eb:37:5a:ff:fb:e0:10:77:b6:07:9a:74:3a: ae:73:79:3f:d6:88:f3:96:1f:bc:50:e5:3e:78:33:82:88:cd: ca:ad:a9:dd:4a:67:9b:3d:d3:f8:18:92:54:e7:7a:e7:39:7d: f8:67:b7:dc:1f:eb:ee:be:44:6e:fb:b4:8c:c1:c0:3b:ea:41: 6c:d9:3a:e4:85:7a:e8:40:bf:e4:87:88:50:89:7a:61:00:f5: e9:5e:8e:42:ec:60:bb:bb:17:da:e5:26:96:29:eb:e1:39:fd: b4:23:87:2b:e7:cb:9b:f7:f0:f0:74:62:d5:94:02:ed:2e:94: 2b:c5:68:2b -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUFqbrCXSKX6NEdYRpHn85c8RXxAYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDA3QzkxQjA0OUY3MzVGNzFGMkJFOENGOTJBRUFBNTM4 RDZCMUYwQjAeFw0yNTEyMTgxNTI3MTBaFw0yNTEyMjEyMzI1MTBaMDMxMTAvBgNV BAMTKEMyMjdEQzJGMzgyMUM5MEFEMUM1RTkyRjM1OUVEOEU3QUUyOThGNDQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCnwY8VC43BkDfnFc+AcWy6XzaD 4gqjXW33f7NJSp8/BEj6A0pHVWc5kDgEZVd468RUdWUgIGJxECql/1V1+P2EKgxZ +3BtPHflvVxcxzVgVkrTPx4Tots/AHTsJK7tl17Ps8O/b4Dav+mcMpA/5CRa7dUp uFjnjUceTacOs5BXF1Bo6A9P9TYdgTpZ6oi2XYMIjprwEAh8acb9RygjCneBVfjd /nLTLfmSfojRch9Xb4Z6wZp65I94YWJuDuhliQ7vw+7GnphqstLtmXk3h6DPmo7c 4Jxz0viVymI6PaA+PzUV7OGZEP2aKP2VLN1VnwqQySShtzCi2fX3ZSohCK55AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUwifcLzghyQrRxekvNZ7Y564pj0QwHwYDVR0j BBgwFoAUAHyRsEn3NfcfK+jPkq6qU41rHwswDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 NzFhZGE5ZS1lMmE5LTQwMGUtOGRmZi05YmU0ODFhYmE1ODMvMC8wMDdDOTFCMDQ5 RjczNUY3MUYyQkU4Q0Y5MkFFQUE1MzhENkIxRjBCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMDA3QzkxQjA0OUY3MzVGNzFGMkJFOENGOTJBRUFBNTM4RDZC MUYwQi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vODcxYWRhOWUtZTJhOS00MDBlLThk ZmYtOWJlNDgxYWJhNTgzLzAvMDA3QzkxQjA0OUY3MzVGNzFGMkJFOENGOTJBRUFB NTM4RDZCMUYwQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFu/GM7x4CDj7S/qUAxdDBQrTMWdfDJmpLZj rcWLqE7mvb70bD3+mkDurrpLDxLLiV2qMkWPi/eYzobG3EazXByum9a+08+7Ew92 Me5MDx6ntjb9md9EkSxZR3oTjGuEkZEqHe+cdax4AaoZLVTlrQ4epTk1kpenW9Df eZXaBwSUqAN46zda//vgEHe2B5p0Oq5zeT/WiPOWH7xQ5T54M4KIzcqtqd1KZ5s9 0/gYklTneuc5ffhnt9wf6+6+RG77tIzBwDvqQWzZOuSFeuhAv+SHiFCJemEA9ele jkLsYLu7F9rlJpYp6+E5/bQjhyvny5v38PB0YtWUAu0ulCvFaCs= -----END CERTIFICATE-----Generated at Sat Dec 20 10:34:52 2025 by rpki-client