This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/89a6ceaf-d68c-4dcb-8267-fd1a53d99988/0/A7D83EE8703BBD59CDCAA5622ADB35C3F9722728.mft File: A7D83EE8703BBD59CDCAA5622ADB35C3F9722728.mft (raw, json) Hash identifier: UBkT0WESnT20JI4FBcjN9dZgrH+SsoK8NoBKfFtt9tE= Subject key identifier: CD:E8:1F:F4:2D:91:44:70:63:7E:72:7E:CD:B1:3F:21:C9:54:D1:FF Authority key identifier: A7:D8:3E:E8:70:3B:BD:59:CD:CA:A5:62:2A:DB:35:C3:F9:72:27:28 Certificate issuer: /CN=A7D83EE8703BBD59CDCAA5622ADB35C3F9722728 Certificate serial: 5CF0B16D193DFC1CC2C1B3C677C48D1B22BF3294 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A7D83EE8703BBD59CDCAA5622ADB35C3F9722728.cer Subject info access: rsync://repo-rpki.idnic.net/repo/89a6ceaf-d68c-4dcb-8267-fd1a53d99988/0/A7D83EE8703BBD59CDCAA5622ADB35C3F9722728.mft Manifest number: 01D7 Signing time: Sat 20 Dec 2025 00:12:44 +0000 Manifest this update: Sat 20 Dec 2025 00:07:44 +0000 Manifest next update: Tue 23 Dec 2025 05:28:44 +0000 Files and hashes: 1: A7D83EE8703BBD59CDCAA5622ADB35C3F9722728.crl (hash: zhGDMj/w1tNf9hgnT/1btpTYEJ3uZmG1B41fiiGYhH4=) 2: 3130332e36332e32362e302f32342d3234203d3e20313338303839.roa (hash: iiGr+PopU6Hz3cnQVhQvXlHgSkixhRPRwZ/ZW4Nmfrw=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/89a6ceaf-d68c-4dcb-8267-fd1a53d99988/0/A7D83EE8703BBD59CDCAA5622ADB35C3F9722728.crl rsync://repo-rpki.idnic.net/repo/89a6ceaf-d68c-4dcb-8267-fd1a53d99988/0/A7D83EE8703BBD59CDCAA5622ADB35C3F9722728.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A7D83EE8703BBD59CDCAA5622ADB35C3F9722728.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 23 Dec 2025 05:28:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5c:f0:b1:6d:19:3d:fc:1c:c2:c1:b3:c6:77:c4:8d:1b:22:bf:32:94 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A7D83EE8703BBD59CDCAA5622ADB35C3F9722728 Validity Not Before: Dec 20 00:07:44 2025 GMT Not After : Dec 23 05:28:44 2025 GMT Subject: CN=CDE81FF42D914470637E727ECDB13F21C954D1FF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:60:21:7a:fe:ed:6b:06:71:48:64:1e:b6:ec: 19:ae:04:6a:4b:0f:3d:d9:c8:e9:51:21:d2:1c:30: e3:b4:ec:ba:de:5d:05:5e:47:4c:d4:79:19:e5:01: 34:ac:af:92:26:55:85:59:83:64:69:df:12:5f:9b: 6d:f3:af:86:36:4d:6b:35:61:e7:76:75:02:38:81: b2:f4:e9:d9:a0:9d:14:98:35:01:39:41:45:37:8c: 60:95:17:a4:08:48:7e:f1:8f:fa:65:30:1c:df:fb: fc:7b:50:a1:5c:c4:fd:fa:93:6b:64:ba:d8:18:8a: 44:36:13:58:68:2d:18:d6:19:6c:3c:78:ea:fb:93: 84:d4:85:08:48:e1:9c:b7:7b:3a:f7:7a:4c:8d:b5: 13:03:e9:a7:ee:29:02:27:46:08:92:d7:2d:ef:76: 8d:2a:94:0d:96:55:cd:be:fa:b1:c8:b5:52:69:0e: 0b:26:47:fc:00:dd:e4:68:8b:63:dd:dc:47:39:be: d3:63:d9:14:8b:3e:e8:0d:c8:aa:cf:a3:7f:c9:90: fd:71:76:d9:3b:5d:e4:00:cd:71:52:17:34:1d:c3: ea:b8:87:e6:15:9a:01:19:e6:db:02:7f:fe:a8:87: 9b:64:47:b0:5c:58:db:80:8f:0a:8e:45:36:d4:59: a8:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:E8:1F:F4:2D:91:44:70:63:7E:72:7E:CD:B1:3F:21:C9:54:D1:FF X509v3 Authority Key Identifier: keyid:A7:D8:3E:E8:70:3B:BD:59:CD:CA:A5:62:2A:DB:35:C3:F9:72:27:28 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/89a6ceaf-d68c-4dcb-8267-fd1a53d99988/0/A7D83EE8703BBD59CDCAA5622ADB35C3F9722728.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A7D83EE8703BBD59CDCAA5622ADB35C3F9722728.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/89a6ceaf-d68c-4dcb-8267-fd1a53d99988/0/A7D83EE8703BBD59CDCAA5622ADB35C3F9722728.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 96:39:6d:d3:32:13:8d:67:a8:3f:b3:a4:a8:80:98:20:e4:e1: b0:01:6f:4e:9d:25:bc:0d:6e:75:39:07:1a:8e:16:6f:9d:a7: 79:6b:ba:00:fc:5d:00:01:32:15:12:f1:e9:d2:a4:54:82:43: 33:f9:ab:ef:5a:f4:18:4c:11:e3:55:64:a1:fe:f0:e1:ec:a6: f8:35:35:b5:a7:52:e6:e2:c3:35:54:60:be:b7:fe:42:ae:4c: 19:5e:b2:8b:f0:31:3e:ce:3d:e7:51:81:44:26:d3:35:d2:43: b4:40:fe:c7:82:c4:62:10:46:48:b5:ab:00:9d:b4:5f:55:51: b6:97:57:69:9d:16:3e:b7:06:88:36:6c:9d:55:31:90:b7:47: fc:25:e4:de:33:12:21:e2:1a:de:49:5e:ed:10:c1:3c:28:6f: a2:6d:46:49:10:ef:ba:47:a3:97:fc:e1:d5:5c:08:29:52:44: 48:d6:d1:ea:c1:bf:59:8f:3a:c7:9f:fc:ef:46:f2:41:ca:e6: e5:12:8c:16:a3:aa:c4:03:fa:10:94:7e:89:bf:fe:89:1a:f5: c0:0e:ec:dd:9b:ab:c9:5f:b0:71:ce:d8:92:77:98:a3:ce:a2: 64:4b:78:e1:08:26:89:be:8a:d3:98:e9:74:1b:b3:89:fe:a9: ad:67:39:a3 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUXPCxbRk9/BzCwbPGd8SNGyK/MpQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTdEODNFRTg3MDNCQkQ1OUNEQ0FBNTYyMkFEQjM1QzNG OTcyMjcyODAeFw0yNTEyMjAwMDA3NDRaFw0yNTEyMjMwNTI4NDRaMDMxMTAvBgNV BAMTKENERTgxRkY0MkQ5MTQ0NzA2MzdFNzI3RUNEQjEzRjIxQzk1NEQxRkYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDdYCF6/u1rBnFIZB627BmuBGpL Dz3ZyOlRIdIcMOO07LreXQVeR0zUeRnlATSsr5ImVYVZg2Rp3xJfm23zr4Y2TWs1 Yed2dQI4gbL06dmgnRSYNQE5QUU3jGCVF6QISH7xj/plMBzf+/x7UKFcxP36k2tk utgYikQ2E1hoLRjWGWw8eOr7k4TUhQhI4Zy3ezr3ekyNtRMD6afuKQInRgiS1y3v do0qlA2WVc2++rHItVJpDgsmR/wA3eRoi2Pd3Ec5vtNj2RSLPugNyKrPo3/JkP1x dtk7XeQAzXFSFzQdw+q4h+YVmgEZ5tsCf/6oh5tkR7BcWNuAjwqORTbUWailAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUzegf9C2RRHBjfnJ+zbE/IclU0f8wHwYDVR0j BBgwFoAUp9g+6HA7vVnNyqViKts1w/lyJygwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 OWE2Y2VhZi1kNjhjLTRkY2ItODI2Ny1mZDFhNTNkOTk5ODgvMC9BN0Q4M0VFODcw M0JCRDU5Q0RDQUE1NjIyQURCMzVDM0Y5NzIyNzI4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQTdEODNFRTg3MDNCQkQ1OUNEQ0FBNTYyMkFEQjM1QzNGOTcy MjcyOC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vODlhNmNlYWYtZDY4Yy00ZGNiLTgy NjctZmQxYTUzZDk5OTg4LzAvQTdEODNFRTg3MDNCQkQ1OUNEQ0FBNTYyMkFEQjM1 QzNGOTcyMjcyOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJY5bdMyE41nqD+zpKiAmCDk4bABb06dJbwN bnU5BxqOFm+dp3lrugD8XQABMhUS8enSpFSCQzP5q+9a9BhMEeNVZKH+8OHspvg1 NbWnUubiwzVUYL63/kKuTBlesovwMT7OPedRgUQm0zXSQ7RA/seCxGIQRki1qwCd tF9VUbaXV2mdFj63Bog2bJ1VMZC3R/wl5N4zEiHiGt5JXu0QwTwob6JtRkkQ77pH o5f84dVcCClSREjW0erBv1mPOsef/O9G8kHK5uUSjBajqsQD+hCUfom//oka9cAO 7N2bq8lfsHHO2JJ3mKPOomRLeOEIJom+itOY6XQbs4n+qa1nOaM= -----END CERTIFICATE-----Generated at Sun Dec 21 09:24:29 2025 by rpki-client