This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/91e0d17c-edd1-4202-b736-3b527efa6ba2/0/708351A7D650085780AA7D6B77F317953F16F999.mft File: 708351A7D650085780AA7D6B77F317953F16F999.mft (raw, json) Hash identifier: KbNdArhM4qx2A/7XSZJAlRn7o2F2Ks9/d9P5A/ZuSFM= Subject key identifier: 7D:5B:39:82:02:54:C0:BB:83:32:43:BE:49:93:CC:49:69:24:9C:31 Authority key identifier: 70:83:51:A7:D6:50:08:57:80:AA:7D:6B:77:F3:17:95:3F:16:F9:99 Certificate issuer: /CN=708351A7D650085780AA7D6B77F317953F16F999 Certificate serial: 0CF478474627A996195D7FF105A5145CA79E5C72 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/708351A7D650085780AA7D6B77F317953F16F999.cer Subject info access: rsync://repo-rpki.idnic.net/repo/91e0d17c-edd1-4202-b736-3b527efa6ba2/0/708351A7D650085780AA7D6B77F317953F16F999.mft Manifest number: 01BB Signing time: Mon 01 Dec 2025 13:00:47 +0000 Manifest this update: Mon 01 Dec 2025 12:55:47 +0000 Manifest next update: Fri 05 Dec 2025 00:54:47 +0000 Files and hashes: 1: 708351A7D650085780AA7D6B77F317953F16F999.crl (hash: HpZ0Hpqmq4TKUOV/Ntck7/cRJx/LGV1Uahud+0TJpBI=) 2: 3130332e3139362e3135362e302f32342d3234203d3e20313530393531.roa (hash: 0UTf1+BQXj8Ras4zkWL/wgGnY3awXAg7yXF2OUkmNfo=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/91e0d17c-edd1-4202-b736-3b527efa6ba2/0/708351A7D650085780AA7D6B77F317953F16F999.crl rsync://repo-rpki.idnic.net/repo/91e0d17c-edd1-4202-b736-3b527efa6ba2/0/708351A7D650085780AA7D6B77F317953F16F999.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/708351A7D650085780AA7D6B77F317953F16F999.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 05 Dec 2025 00:54:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0c:f4:78:47:46:27:a9:96:19:5d:7f:f1:05:a5:14:5c:a7:9e:5c:72 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=708351A7D650085780AA7D6B77F317953F16F999 Validity Not Before: Dec 1 12:55:47 2025 GMT Not After : Dec 5 00:54:47 2025 GMT Subject: CN=7D5B39820254C0BB833243BE4993CC4969249C31 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:19:fe:e1:4f:27:d2:87:42:03:bb:2e:bc:0d: 45:a4:20:e4:e4:0d:5a:ff:72:41:d1:91:2e:fe:47: 2a:45:23:42:4d:ff:90:9c:da:16:be:ec:c6:c8:ce: e0:00:cb:40:d8:3e:35:1c:b7:2a:0a:90:65:2d:a6: 9b:b8:fd:1d:dc:42:c4:03:3d:84:87:03:4c:24:ec: 99:91:39:bc:0f:69:b3:b4:d7:c5:cd:45:d3:3d:5b: e4:24:05:f3:cc:ec:70:e6:25:72:cf:83:bb:4f:5a: 93:74:42:16:c6:e7:dd:3d:36:01:9f:e5:4f:23:3e: c1:7e:b5:fe:c9:4f:e0:19:45:69:28:46:68:81:6e: d0:f5:27:15:50:b2:2b:e3:97:62:a7:59:52:9d:3d: d3:3b:1d:b8:4c:f4:c2:09:7d:9d:5f:87:df:00:8c: fd:65:2e:47:b9:94:52:3b:a4:e8:39:58:d9:e9:b8: 90:f5:b8:bb:9c:ad:4c:14:49:b8:a2:ea:22:49:8c: 9d:6b:af:61:07:87:ba:eb:b8:41:fd:fe:b7:2d:f6: ac:5d:cd:67:8c:53:b9:8e:63:51:f5:9a:c4:1a:5b: 9b:09:b6:53:98:19:7f:e1:df:3c:42:bd:69:a9:e7: e6:04:14:25:e0:c0:9f:71:ea:ac:1b:52:73:91:78: 0d:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7D:5B:39:82:02:54:C0:BB:83:32:43:BE:49:93:CC:49:69:24:9C:31 X509v3 Authority Key Identifier: keyid:70:83:51:A7:D6:50:08:57:80:AA:7D:6B:77:F3:17:95:3F:16:F9:99 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/91e0d17c-edd1-4202-b736-3b527efa6ba2/0/708351A7D650085780AA7D6B77F317953F16F999.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/708351A7D650085780AA7D6B77F317953F16F999.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/91e0d17c-edd1-4202-b736-3b527efa6ba2/0/708351A7D650085780AA7D6B77F317953F16F999.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a8:37:7d:93:86:71:2d:cd:5e:fc:74:7d:a8:7c:6b:e9:b3:b6: 83:17:05:4f:65:c4:5c:5f:f4:18:04:9a:10:ca:86:08:8d:ed: 41:79:9d:27:53:47:7e:63:6b:c2:b7:f7:07:cd:f8:b0:dd:58: 18:0a:a4:d1:ad:8c:34:8b:01:9f:ab:1f:0e:f3:07:61:33:97: b0:53:21:8a:78:76:fe:55:2a:a3:01:cb:b1:fb:00:56:f5:74: cc:ad:45:40:65:fa:33:3e:04:e3:dd:08:ce:83:ba:05:ce:0a: de:bd:9f:77:b3:0d:c5:8f:7d:08:c6:9c:45:8b:ed:58:c1:28: a7:82:29:1b:b7:2f:eb:57:74:bb:15:b5:58:6f:07:b5:a5:d8: d1:bd:9c:d8:14:f1:53:93:18:68:a3:87:59:03:ed:73:b7:0f: a8:47:c2:fb:df:8f:95:76:38:01:1f:e9:ef:93:8c:e0:03:76: 68:f1:b9:fd:5b:3e:a0:42:06:66:26:d8:1c:b7:31:f9:db:86: e2:2f:1d:89:33:2f:fd:b9:c0:f2:8e:86:f1:2d:5c:88:34:5e: cb:af:44:2e:57:0d:e8:98:0a:5d:2a:9b:b0:b4:cb:b3:c0:24: c8:32:8d:47:12:71:5d:e9:48:7a:86:38:e6:2c:d6:e3:bf:84: 83:f9:f3:65 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUDPR4R0YnqZYZXX/xBaUUXKeeXHIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzA4MzUxQTdENjUwMDg1NzgwQUE3RDZCNzdGMzE3OTUz RjE2Rjk5OTAeFw0yNTEyMDExMjU1NDdaFw0yNTEyMDUwMDU0NDdaMDMxMTAvBgNV BAMTKDdENUIzOTgyMDI1NEMwQkI4MzMyNDNCRTQ5OTNDQzQ5NjkyNDlDMzEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC7Gf7hTyfSh0IDuy68DUWkIOTk DVr/ckHRkS7+RypFI0JN/5Cc2ha+7MbIzuAAy0DYPjUctyoKkGUtppu4/R3cQsQD PYSHA0wk7JmRObwPabO018XNRdM9W+QkBfPM7HDmJXLPg7tPWpN0QhbG5909NgGf 5U8jPsF+tf7JT+AZRWkoRmiBbtD1JxVQsivjl2KnWVKdPdM7HbhM9MIJfZ1fh98A jP1lLke5lFI7pOg5WNnpuJD1uLucrUwUSbii6iJJjJ1rr2EHh7rruEH9/rct9qxd zWeMU7mOY1H1msQaW5sJtlOYGX/h3zxCvWmp5+YEFCXgwJ9x6qwbUnOReA1bAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUfVs5ggJUwLuDMkO+SZPMSWkknDEwHwYDVR0j BBgwFoAUcINRp9ZQCFeAqn1rd/MXlT8W+ZkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 MWUwZDE3Yy1lZGQxLTQyMDItYjczNi0zYjUyN2VmYTZiYTIvMC83MDgzNTFBN0Q2 NTAwODU3ODBBQTdENkI3N0YzMTc5NTNGMTZGOTk5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNzA4MzUxQTdENjUwMDg1NzgwQUE3RDZCNzdGMzE3OTUzRjE2 Rjk5OS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOTFlMGQxN2MtZWRkMS00MjAyLWI3 MzYtM2I1MjdlZmE2YmEyLzAvNzA4MzUxQTdENjUwMDg1NzgwQUE3RDZCNzdGMzE3 OTUzRjE2Rjk5OS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKg3fZOGcS3NXvx0fah8a+mztoMXBU9lxFxf 9BgEmhDKhgiN7UF5nSdTR35ja8K39wfN+LDdWBgKpNGtjDSLAZ+rHw7zB2Ezl7BT IYp4dv5VKqMBy7H7AFb1dMytRUBl+jM+BOPdCM6DugXOCt69n3ezDcWPfQjGnEWL 7VjBKKeCKRu3L+tXdLsVtVhvB7Wl2NG9nNgU8VOTGGijh1kD7XO3D6hHwvvfj5V2 OAEf6e+TjOADdmjxuf1bPqBCBmYm2By3MfnbhuIvHYkzL/25wPKOhvEtXIg0Xsuv RC5XDeiYCl0qm7C0y7PAJMgyjUcScV3pSHqGOOYs1uO/hIP582U= -----END CERTIFICATE-----Generated at Wed Dec 3 14:44:22 2025 by rpki-client