This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/87c432e0-dc3e-42cc-bcc0-629b16206c9a/0/2976ADC7448BF0CA9B57DCD78849A1E0F95F2B45.mft File: 2976ADC7448BF0CA9B57DCD78849A1E0F95F2B45.mft (raw, json) Hash identifier: Ds5KZ7biasCVsG3rqnTOSz7bQHKd94xsnUQK4LC4XP8= Subject key identifier: 7D:A7:E3:C3:31:7C:7F:D5:94:02:3E:01:49:91:D6:DA:D0:D5:14:F8 Authority key identifier: 29:76:AD:C7:44:8B:F0:CA:9B:57:DC:D7:88:49:A1:E0:F9:5F:2B:45 Certificate issuer: /CN=2976ADC7448BF0CA9B57DCD78849A1E0F95F2B45 Certificate serial: 01A7601E2630E9534490B18E9E42CE2374D8CAF1 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/2976ADC7448BF0CA9B57DCD78849A1E0F95F2B45.cer Subject info access: rsync://repo-rpki.idnic.net/repo/87c432e0-dc3e-42cc-bcc0-629b16206c9a/0/2976ADC7448BF0CA9B57DCD78849A1E0F95F2B45.mft Manifest number: E8 Signing time: Sat 06 Dec 2025 04:10:59 +0000 Manifest this update: Sat 06 Dec 2025 04:05:59 +0000 Manifest next update: Tue 09 Dec 2025 06:47:59 +0000 Files and hashes: 1: 2976ADC7448BF0CA9B57DCD78849A1E0F95F2B45.crl (hash: CRhuIdiKXz4wz0BpWZio04v9LHO+pLV2NdsKBdwIEZA=) 2: 3136302e32352e3137382e302f32332d3234203d3e20313533303735.roa (hash: FYy5UtFCXZKGCZxosr1oqFzrTkMP7sB8ytiR2n56UZs=) 3: 3136302e32352e3137382e302f32342d3234203d3e20313533303735.roa (hash: iPqRbkelW4W9hPKQlPKh7dVapT99d9ruqUsqOdahl18=) 4: 3136302e32352e3137392e302f32342d3234203d3e20313533303735.roa (hash: duCuSDamX6IXj6dNr3R2KvTWuX1Y0Ld9dMd4eFNkJZc=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/87c432e0-dc3e-42cc-bcc0-629b16206c9a/0/2976ADC7448BF0CA9B57DCD78849A1E0F95F2B45.crl rsync://repo-rpki.idnic.net/repo/87c432e0-dc3e-42cc-bcc0-629b16206c9a/0/2976ADC7448BF0CA9B57DCD78849A1E0F95F2B45.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/2976ADC7448BF0CA9B57DCD78849A1E0F95F2B45.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 09 Dec 2025 06:47:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a7:60:1e:26:30:e9:53:44:90:b1:8e:9e:42:ce:23:74:d8:ca:f1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2976ADC7448BF0CA9B57DCD78849A1E0F95F2B45 Validity Not Before: Dec 6 04:05:59 2025 GMT Not After : Dec 9 06:47:59 2025 GMT Subject: CN=7DA7E3C3317C7FD594023E014991D6DAD0D514F8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:3d:91:e4:78:e8:52:53:7a:d3:35:72:64:b5: 7a:61:d6:6c:de:55:cf:47:9f:25:5b:26:dd:45:10: b7:7a:26:ac:55:8b:41:fe:b9:b1:e6:de:7a:6b:b6: 27:7d:df:7a:52:d0:c5:ae:15:10:eb:fc:e3:00:82: d5:c8:b5:ea:48:33:b2:0e:28:db:cc:0b:64:89:8b: c4:27:18:10:81:76:d9:7c:33:b7:1b:3c:9c:34:8b: 03:2b:73:d4:92:36:ca:18:5f:b0:06:82:ad:c7:2b: e6:a7:4f:d5:96:81:dc:bd:01:17:d6:b0:98:5b:c9: a9:55:9f:8c:b7:f5:de:a5:39:06:a1:f5:11:44:99: 70:0b:59:b0:e0:9e:ee:41:31:b9:aa:fa:be:7a:35: cb:09:3d:ac:0e:34:1e:6e:f2:07:ac:84:23:da:69: 3e:ec:e6:df:1a:a5:e9:ec:dd:77:db:b4:8a:28:81: 17:93:4f:72:c6:1b:cf:59:44:7e:46:97:da:0c:a8: 8d:8b:e0:62:8f:1c:9a:28:5a:bb:34:e8:26:0a:ef: 16:29:c6:93:e8:35:20:8a:0d:5f:6e:8b:51:ca:f2: 96:58:bb:85:d6:a7:8d:92:d3:e0:07:a8:f8:5a:8b: d5:1a:13:56:2b:dc:e8:1e:1e:da:08:f3:26:e0:0a: 10:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7D:A7:E3:C3:31:7C:7F:D5:94:02:3E:01:49:91:D6:DA:D0:D5:14:F8 X509v3 Authority Key Identifier: keyid:29:76:AD:C7:44:8B:F0:CA:9B:57:DC:D7:88:49:A1:E0:F9:5F:2B:45 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/87c432e0-dc3e-42cc-bcc0-629b16206c9a/0/2976ADC7448BF0CA9B57DCD78849A1E0F95F2B45.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/2976ADC7448BF0CA9B57DCD78849A1E0F95F2B45.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/87c432e0-dc3e-42cc-bcc0-629b16206c9a/0/2976ADC7448BF0CA9B57DCD78849A1E0F95F2B45.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1b:da:55:22:41:66:4b:a2:07:71:01:ec:81:17:9c:08:bb:c2: 3a:52:57:ae:68:c9:d8:d2:61:09:d3:39:e4:bd:2f:57:c7:7b: d0:a5:db:20:d6:f2:db:60:66:d9:1d:b9:8c:5e:f4:9d:1a:88: 10:c7:d8:0d:ab:08:9f:d5:87:d3:84:5d:96:29:92:e6:60:7f: 51:16:f1:83:c0:83:14:bd:4c:44:e8:c8:b6:01:a1:8c:35:61: af:9c:9f:ac:5f:9a:c9:1b:3a:36:15:9b:48:0e:ee:da:a7:47: 4e:02:ab:b3:8c:99:85:a6:71:09:ed:c4:83:e9:a6:1e:7e:fe: 05:77:1b:fe:09:25:29:29:95:f8:64:80:af:6f:03:1a:16:c0: 54:0d:e6:97:a6:36:da:80:ee:9d:fe:dd:af:5d:9a:a2:0d:02: 92:83:cd:08:1d:04:c2:5d:ca:ef:8b:9b:e9:52:b6:ed:95:e2: 2c:f1:12:b4:df:9c:f2:06:14:58:73:67:e1:c5:d0:f2:cf:22: 7c:6c:b5:0b:ba:df:42:c6:9e:0e:ae:a0:3d:37:f5:cf:9e:a0: e7:00:4c:7c:26:04:8e:3d:72:c8:7e:97:f6:65:04:0d:2a:3c: 6b:87:4b:c5:ea:8a:05:23:d2:3a:cc:6e:d5:26:c1:13:97:e0: 2e:f2:e3:f1 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUAadgHiYw6VNEkLGOnkLOI3TYyvEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjk3NkFEQzc0NDhCRjBDQTlCNTdEQ0Q3ODg0OUExRTBG OTVGMkI0NTAeFw0yNTEyMDYwNDA1NTlaFw0yNTEyMDkwNjQ3NTlaMDMxMTAvBgNV BAMTKDdEQTdFM0MzMzE3QzdGRDU5NDAyM0UwMTQ5OTFENkRBRDBENTE0RjgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDHPZHkeOhSU3rTNXJktXph1mze Vc9HnyVbJt1FELd6JqxVi0H+ubHm3nprtid933pS0MWuFRDr/OMAgtXItepIM7IO KNvMC2SJi8QnGBCBdtl8M7cbPJw0iwMrc9SSNsoYX7AGgq3HK+anT9WWgdy9ARfW sJhbyalVn4y39d6lOQah9RFEmXALWbDgnu5BMbmq+r56NcsJPawONB5u8geshCPa aT7s5t8apens3XfbtIoogReTT3LGG89ZRH5Gl9oMqI2L4GKPHJooWrs06CYK7xYp xpPoNSCKDV9ui1HK8pZYu4XWp42S0+AHqPhai9UaE1Yr3OgeHtoI8ybgChCLAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUfafjwzF8f9WUAj4BSZHW2tDVFPgwHwYDVR0j BBgwFoAUKXatx0SL8MqbV9zXiEmh4PlfK0UwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 N2M0MzJlMC1kYzNlLTQyY2MtYmNjMC02MjliMTYyMDZjOWEvMC8yOTc2QURDNzQ0 OEJGMENBOUI1N0RDRDc4ODQ5QTFFMEY5NUYyQjQ1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvMjk3NkFEQzc0NDhCRjBDQTlCNTdEQ0Q3ODg0OUExRTBGOTVG MkI0NS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vODdjNDMyZTAtZGMzZS00MmNjLWJj YzAtNjI5YjE2MjA2YzlhLzAvMjk3NkFEQzc0NDhCRjBDQTlCNTdEQ0Q3ODg0OUEx RTBGOTVGMkI0NS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABvaVSJBZkuiB3EB7IEXnAi7wjpSV65oydjS YQnTOeS9L1fHe9Cl2yDW8ttgZtkduYxe9J0aiBDH2A2rCJ/Vh9OEXZYpkuZgf1EW 8YPAgxS9TEToyLYBoYw1Ya+cn6xfmskbOjYVm0gO7tqnR04Cq7OMmYWmcQntxIPp ph5+/gV3G/4JJSkplfhkgK9vAxoWwFQN5pemNtqA7p3+3a9dmqINApKDzQgdBMJd yu+Lm+lStu2V4izxErTfnPIGFFhzZ+HF0PLPInxstQu630LGng6uoD039c+eoOcA THwmBI49csh+l/ZlBA0qPGuHS8XqigUj0jrMbtUmwROX4C7y4/E= -----END CERTIFICATE-----Generated at Sun Dec 7 18:54:26 2025 by rpki-client