This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/871ada9e-e2a9-400e-8dff-9be481aba583/0/007C91B049F735F71F2BE8CF92AEAA538D6B1F0B.mft File: 007C91B049F735F71F2BE8CF92AEAA538D6B1F0B.mft (raw, json) Hash identifier: aT3UIc4Hkjr1eS39cDM+XBNdvXX0VGuEnAK38diBVFs= Subject key identifier: 9B:68:8E:C3:8B:9B:12:CA:81:63:FB:0B:BC:43:F3:DF:0C:41:F9:39 Authority key identifier: 00:7C:91:B0:49:F7:35:F7:1F:2B:E8:CF:92:AE:AA:53:8D:6B:1F:0B Certificate issuer: /CN=007C91B049F735F71F2BE8CF92AEAA538D6B1F0B Certificate serial: 676770822DB85B6428D71F77D74A01CB7E90BB66 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/007C91B049F735F71F2BE8CF92AEAA538D6B1F0B.cer Subject info access: rsync://repo-rpki.idnic.net/repo/871ada9e-e2a9-400e-8dff-9be481aba583/0/007C91B049F735F71F2BE8CF92AEAA538D6B1F0B.mft Manifest number: 015D Signing time: Tue 02 Dec 2025 18:32:12 +0000 Manifest this update: Tue 02 Dec 2025 18:27:12 +0000 Manifest next update: Sat 06 Dec 2025 05:18:12 +0000 Files and hashes: 1: 007C91B049F735F71F2BE8CF92AEAA538D6B1F0B.crl (hash: /L3+EtAEPN7cPA3KBLKPTUZN94y8r98j525KTVnTDGI=) 2: 3130332e35382e3130342e302f32322d3234203d3e20313333383334.roa (hash: ubAgdugDvQaB/HJfz4fY63v3MFp+bq+KP7AGcGBA1hw=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/871ada9e-e2a9-400e-8dff-9be481aba583/0/007C91B049F735F71F2BE8CF92AEAA538D6B1F0B.crl rsync://repo-rpki.idnic.net/repo/871ada9e-e2a9-400e-8dff-9be481aba583/0/007C91B049F735F71F2BE8CF92AEAA538D6B1F0B.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/007C91B049F735F71F2BE8CF92AEAA538D6B1F0B.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 06 Dec 2025 05:18:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 67:67:70:82:2d:b8:5b:64:28:d7:1f:77:d7:4a:01:cb:7e:90:bb:66 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=007C91B049F735F71F2BE8CF92AEAA538D6B1F0B Validity Not Before: Dec 2 18:27:12 2025 GMT Not After : Dec 6 05:18:12 2025 GMT Subject: CN=9B688EC38B9B12CA8163FB0BBC43F3DF0C41F939 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:84:37:a6:1b:9d:f3:c3:ca:1a:6d:be:7a:f1: e3:2a:bb:94:58:d3:87:cb:00:1d:e6:1a:3b:9c:ba: 76:be:f1:42:88:e7:94:26:b8:10:57:ca:dd:1d:c5: 2f:16:26:80:4c:9b:59:6b:c6:23:ea:67:9f:d2:f6: ef:b4:24:d2:9e:f1:cb:2f:5b:4c:7d:d5:07:3d:e3: e7:a6:ec:27:d1:73:7f:47:b3:7d:7f:be:eb:53:ef: 9d:74:b4:63:16:29:36:ed:c1:3e:82:8b:9c:8b:5b: 19:f9:c2:2e:7d:e2:71:a9:e0:64:21:c7:66:e7:1b: d0:0f:d5:b0:e4:59:bc:9e:1b:ca:cf:41:fe:73:17: cb:98:13:38:5c:67:e1:fd:f1:dc:32:a1:78:79:4e: 8a:d0:dc:b8:6c:fc:4d:92:d5:57:3f:8b:1a:1e:50: df:6c:6c:d4:8c:0f:ae:50:a1:ed:d2:62:b8:dd:43: b8:e3:ea:12:f2:e5:70:67:f8:8a:00:50:03:28:30: 7e:cd:b7:84:9b:d9:64:34:1d:a2:be:11:88:1a:cf: 22:0f:86:e6:a9:53:a3:c0:97:15:e2:4e:17:73:fa: 60:5e:b7:31:32:af:33:b5:b7:8b:39:81:5e:57:0a: 57:23:5b:ae:4a:d1:cd:10:6d:5b:e5:8d:50:23:4f: 30:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9B:68:8E:C3:8B:9B:12:CA:81:63:FB:0B:BC:43:F3:DF:0C:41:F9:39 X509v3 Authority Key Identifier: keyid:00:7C:91:B0:49:F7:35:F7:1F:2B:E8:CF:92:AE:AA:53:8D:6B:1F:0B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/871ada9e-e2a9-400e-8dff-9be481aba583/0/007C91B049F735F71F2BE8CF92AEAA538D6B1F0B.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/007C91B049F735F71F2BE8CF92AEAA538D6B1F0B.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/871ada9e-e2a9-400e-8dff-9be481aba583/0/007C91B049F735F71F2BE8CF92AEAA538D6B1F0B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 73:e2:73:83:65:02:0d:5c:85:41:0d:c4:42:9d:67:bf:e6:a3: 6f:01:2e:16:66:81:d9:04:44:94:6d:a5:0f:b3:2f:1f:5e:5e: 84:22:98:95:81:50:cc:ba:11:5e:79:28:03:21:0a:43:11:b7: 52:a5:14:39:08:7d:93:1e:71:35:27:72:3f:e2:60:51:6a:4a: 94:fb:61:c7:2e:d3:ad:60:a9:c8:fc:d0:16:b1:8a:65:e4:7e: 55:26:2d:88:7a:6d:79:0b:2e:fc:d9:55:dd:97:70:42:ed:5c: 07:c6:b7:e4:32:22:da:6b:d6:8b:3c:67:9c:a6:af:ee:c9:aa: a9:78:33:07:29:92:e3:fc:a9:ee:6b:38:0e:3c:ef:cd:3b:8b: 12:ea:99:f8:b9:96:81:34:cf:87:b8:57:48:b9:73:9e:d8:d9: 65:a0:d1:85:75:c7:1f:45:c8:93:d6:2a:57:63:e0:ad:c8:49: ed:54:e5:9c:2f:08:ce:bc:db:d2:98:6e:bb:e6:8d:0b:2e:d5: 6b:d2:b4:64:0d:3d:70:ce:0d:5e:83:5e:07:8a:93:17:99:eb: 0d:ea:18:49:81:c9:e2:27:e6:ab:38:46:22:4f:19:74:7b:7d: bd:38:02:94:fb:fd:4a:ab:93:3c:01:99:c0:cf:68:24:e0:fe: 98:09:f2:8a -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUZ2dwgi24W2Qo1x9310oBy36Qu2YwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDA3QzkxQjA0OUY3MzVGNzFGMkJFOENGOTJBRUFBNTM4 RDZCMUYwQjAeFw0yNTEyMDIxODI3MTJaFw0yNTEyMDYwNTE4MTJaMDMxMTAvBgNV BAMTKDlCNjg4RUMzOEI5QjEyQ0E4MTYzRkIwQkJDNDNGM0RGMEM0MUY5MzkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/hDemG53zw8oabb568eMqu5RY 04fLAB3mGjucuna+8UKI55QmuBBXyt0dxS8WJoBMm1lrxiPqZ5/S9u+0JNKe8csv W0x91Qc94+em7CfRc39Hs31/vutT7510tGMWKTbtwT6Ci5yLWxn5wi594nGp4GQh x2bnG9AP1bDkWbyeG8rPQf5zF8uYEzhcZ+H98dwyoXh5TorQ3Lhs/E2S1Vc/ixoe UN9sbNSMD65Qoe3SYrjdQ7jj6hLy5XBn+IoAUAMoMH7Nt4Sb2WQ0HaK+EYgazyIP huapU6PAlxXiThdz+mBetzEyrzO1t4s5gV5XClcjW65K0c0QbVvljVAjTzAPAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUm2iOw4ubEsqBY/sLvEPz3wxB+TkwHwYDVR0j BBgwFoAUAHyRsEn3NfcfK+jPkq6qU41rHwswDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 NzFhZGE5ZS1lMmE5LTQwMGUtOGRmZi05YmU0ODFhYmE1ODMvMC8wMDdDOTFCMDQ5 RjczNUY3MUYyQkU4Q0Y5MkFFQUE1MzhENkIxRjBCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMDA3QzkxQjA0OUY3MzVGNzFGMkJFOENGOTJBRUFBNTM4RDZC MUYwQi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vODcxYWRhOWUtZTJhOS00MDBlLThk ZmYtOWJlNDgxYWJhNTgzLzAvMDA3QzkxQjA0OUY3MzVGNzFGMkJFOENGOTJBRUFB NTM4RDZCMUYwQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHPic4NlAg1chUENxEKdZ7/mo28BLhZmgdkE RJRtpQ+zLx9eXoQimJWBUMy6EV55KAMhCkMRt1KlFDkIfZMecTUncj/iYFFqSpT7 Yccu061gqcj80BaximXkflUmLYh6bXkLLvzZVd2XcELtXAfGt+QyItpr1os8Z5ym r+7Jqql4MwcpkuP8qe5rOA487807ixLqmfi5loE0z4e4V0i5c57Y2WWg0YV1xx9F yJPWKldj4K3ISe1U5ZwvCM6829KYbrvmjQsu1WvStGQNPXDODV6DXgeKkxeZ6w3q GEmByeIn5qs4RiJPGXR7fb04ApT7/UqrkzwBmcDPaCTg/pgJ8oo= -----END CERTIFICATE-----Generated at Wed Dec 3 14:14:26 2025 by rpki-client