This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/957b0d7e-eade-4318-ab20-8c7f2d5be69f/0/7D64B8F4CFB687141137D10F9E73FFD0BAB93F67.mft File: 7D64B8F4CFB687141137D10F9E73FFD0BAB93F67.mft (raw, json) Hash identifier: tKvjzDBkzy9Pw2Wd1KS75rm7/473O9Qz0itreufmOrk= Subject key identifier: AA:20:79:3D:CF:A4:FB:EB:A8:50:C2:17:D8:65:CB:08:6C:7E:BE:8C Authority key identifier: 7D:64:B8:F4:CF:B6:87:14:11:37:D1:0F:9E:73:FF:D0:BA:B9:3F:67 Certificate issuer: /CN=7D64B8F4CFB687141137D10F9E73FFD0BAB93F67 Certificate serial: 3F4C1479E3BC03F6621AFD3F46DE6CD87382BBBD Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7D64B8F4CFB687141137D10F9E73FFD0BAB93F67.cer Subject info access: rsync://repo-rpki.idnic.net/repo/957b0d7e-eade-4318-ab20-8c7f2d5be69f/0/7D64B8F4CFB687141137D10F9E73FFD0BAB93F67.mft Manifest number: 02EB Signing time: Wed 03 Dec 2025 12:52:18 +0000 Manifest this update: Wed 03 Dec 2025 12:47:18 +0000 Manifest next update: Sat 06 Dec 2025 20:18:18 +0000 Files and hashes: 1: 323430313a383434303a3331313a3a2f34382d3438203d3e20313336313331.roa (hash: uNKV4J4iyB42iT7YiJbc/obq8TacFQRWwVPHqjYHdt4=) 2: 3130332e39372e37372e302f32342d3234203d3e20313336313331.roa (hash: audNLou8WkSNI41O6Bj42zTe5yNLL3IkDF/evFV7jOs=) 3: 3130332e39372e37392e302f32342d3234203d3e20313336313331.roa (hash: eRLttmDRe4S/HXjiFUVifbleZv0UdgB6j9QBQFrEFVw=) 4: 7D64B8F4CFB687141137D10F9E73FFD0BAB93F67.crl (hash: uwiY/kxkY/qq8wPRjVG7T5roYeEnKFVrr3/0iGIFX9Q=) 5: 3130332e39372e37362e302f32342d3234203d3e20313336313331.roa (hash: b5FyLXJvwHGEGWwekDTqeQDenx7rZLagZD5M467u+1w=) 6: 3130332e39372e37382e302f32342d3234203d3e20313336313331.roa (hash: gTWqsHLXGzmwOn5oUbLdKwsFxUOTG6JntDETCN1uoJg=) 7: 323430313a383434303a3133313a3a2f34382d3438203d3e20313336313331.roa (hash: 7XF+7tNQBQV2Wy0AsX8lBCySJ+ATYXgli7NY4z4VmfM=) 8: 323430313a383434303a33313a3a2f34382d3438203d3e20313336313331.roa (hash: imoDv7fNxiS0ABFe1mnjo4w6QxU9zgowGM6VjXLrifM=) 9: 323430313a383434303a3a2f33322d3332203d3e20313336313331.roa (hash: J/TKA4DxZMeIQk5lGShBOGO9FvcMo90L9nK349bvEzs=) 10: 323430313a383434303a3233313a3a2f34382d3438203d3e20313336313331.roa (hash: 9q0QjNfZ8ZidXQKSI35eyNIOpPTa4MZHY+H9XcdTGqQ=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/957b0d7e-eade-4318-ab20-8c7f2d5be69f/0/7D64B8F4CFB687141137D10F9E73FFD0BAB93F67.crl rsync://repo-rpki.idnic.net/repo/957b0d7e-eade-4318-ab20-8c7f2d5be69f/0/7D64B8F4CFB687141137D10F9E73FFD0BAB93F67.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7D64B8F4CFB687141137D10F9E73FFD0BAB93F67.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 06 Dec 2025 20:18:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3f:4c:14:79:e3:bc:03:f6:62:1a:fd:3f:46:de:6c:d8:73:82:bb:bd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7D64B8F4CFB687141137D10F9E73FFD0BAB93F67 Validity Not Before: Dec 3 12:47:18 2025 GMT Not After : Dec 6 20:18:18 2025 GMT Subject: CN=AA20793DCFA4FBEBA850C217D865CB086C7EBE8C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:df:a6:d0:74:f2:54:74:b4:2d:31:a1:47:2e: 87:ba:18:cc:52:db:d1:df:c3:4d:63:09:f9:fa:81: 02:bb:94:f1:7b:fa:b3:e7:dd:58:19:ae:36:82:5e: b2:54:10:1a:39:f9:76:7d:ce:f1:1d:d8:c2:71:e0: 31:66:9b:09:ba:19:3b:55:c2:c3:93:69:84:98:fe: 8e:cd:93:7c:93:39:43:1a:d0:eb:0f:91:40:09:d4: c9:f5:59:86:dc:33:8b:14:26:50:ab:77:1a:fb:6f: 19:1d:69:69:dd:55:0c:e4:5c:90:7c:24:06:35:8d: b0:39:66:04:53:a5:86:f1:d2:14:f9:ef:cb:cb:3c: 3f:20:41:2c:5d:08:97:92:2f:51:e5:8b:24:47:4f: 1a:51:48:93:b4:26:c0:bc:d1:b8:bb:12:dc:ab:b3: 04:d0:99:12:30:81:99:2d:47:be:fb:05:a8:cc:b2: 36:f4:33:5b:1b:05:7b:91:51:3b:00:d6:58:c6:59: c4:4a:da:99:50:7c:75:d2:19:7b:54:c2:9d:c7:45: ef:e0:3e:4c:2b:0c:3b:82:07:39:4f:1e:8a:93:43: 11:cf:b3:ce:a9:11:4c:7f:95:84:ec:da:a5:df:0f: 37:1c:ce:dc:b8:b7:cd:fb:f5:f1:da:8b:fc:8d:03: 4a:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:20:79:3D:CF:A4:FB:EB:A8:50:C2:17:D8:65:CB:08:6C:7E:BE:8C X509v3 Authority Key Identifier: keyid:7D:64:B8:F4:CF:B6:87:14:11:37:D1:0F:9E:73:FF:D0:BA:B9:3F:67 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/957b0d7e-eade-4318-ab20-8c7f2d5be69f/0/7D64B8F4CFB687141137D10F9E73FFD0BAB93F67.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7D64B8F4CFB687141137D10F9E73FFD0BAB93F67.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/957b0d7e-eade-4318-ab20-8c7f2d5be69f/0/7D64B8F4CFB687141137D10F9E73FFD0BAB93F67.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 84:56:32:67:93:c0:63:bd:52:a6:ef:bd:3a:2a:7b:2e:3b:9b: f8:90:b3:de:08:3c:ef:23:7d:4a:1e:f9:3d:47:4f:6b:8f:79: 2b:15:75:13:b6:d7:19:90:26:02:84:ca:64:5e:ba:7e:f6:2b: b0:a2:f0:7a:5b:47:e3:2f:6d:1d:09:59:d1:0c:d2:5a:a3:9a: 5c:cf:7e:65:65:57:32:ca:0c:21:59:16:4e:16:fc:65:1d:f2: e1:55:9b:ee:24:2b:19:d0:63:e9:b5:82:13:eb:29:6c:a3:84: f4:57:b5:36:26:a8:dd:64:b0:5d:00:a4:f0:e2:f3:6d:0a:4e: 65:db:97:4c:97:25:47:3e:7e:2a:77:3f:08:8c:0a:b2:c8:ad: 9c:e9:89:0d:31:eb:98:97:85:37:35:f0:dd:27:91:61:7f:47: 45:b3:70:26:d1:48:2b:e2:4a:59:6f:68:ea:07:38:54:07:40: 62:50:c5:0f:b6:ed:06:91:4c:4c:f4:25:46:d9:65:0e:12:59: 77:3b:2a:ac:e0:28:36:34:e5:0b:03:87:10:da:76:04:c2:43: 25:5b:35:e4:55:00:c7:f7:ae:e5:c2:57:f0:7d:7e:e1:96:13: 6e:03:14:d6:8b:52:27:80:ba:9f:8d:71:b5:a3:0d:67:61:d3: fd:ee:a2:6f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUP0wUeeO8A/ZiGv0/Rt5s2HOCu70wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoN0Q2NEI4RjRDRkI2ODcxNDExMzdEMTBGOUU3M0ZGRDBC QUI5M0Y2NzAeFw0yNTEyMDMxMjQ3MThaFw0yNTEyMDYyMDE4MThaMDMxMTAvBgNV BAMTKEFBMjA3OTNEQ0ZBNEZCRUJBODUwQzIxN0Q4NjVDQjA4NkM3RUJFOEMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDV36bQdPJUdLQtMaFHLoe6GMxS 29Hfw01jCfn6gQK7lPF7+rPn3VgZrjaCXrJUEBo5+XZ9zvEd2MJx4DFmmwm6GTtV wsOTaYSY/o7Nk3yTOUMa0OsPkUAJ1Mn1WYbcM4sUJlCrdxr7bxkdaWndVQzkXJB8 JAY1jbA5ZgRTpYbx0hT578vLPD8gQSxdCJeSL1HliyRHTxpRSJO0JsC80bi7Etyr swTQmRIwgZktR777BajMsjb0M1sbBXuRUTsA1ljGWcRK2plQfHXSGXtUwp3HRe/g PkwrDDuCBzlPHoqTQxHPs86pEUx/lYTs2qXfDzcczty4t8379fHai/yNA0qFAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUqiB5Pc+k++uoUMIX2GXLCGx+vowwHwYDVR0j BBgwFoAUfWS49M+2hxQRN9EPnnP/0Lq5P2cwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 NTdiMGQ3ZS1lYWRlLTQzMTgtYWIyMC04YzdmMmQ1YmU2OWYvMC83RDY0QjhGNENG QjY4NzE0MTEzN0QxMEY5RTczRkZEMEJBQjkzRjY3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvN0Q2NEI4RjRDRkI2ODcxNDExMzdEMTBGOUU3M0ZGRDBCQUI5 M0Y2Ny5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOTU3YjBkN2UtZWFkZS00MzE4LWFi MjAtOGM3ZjJkNWJlNjlmLzAvN0Q2NEI4RjRDRkI2ODcxNDExMzdEMTBGOUU3M0ZG RDBCQUI5M0Y2Ny5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIRWMmeTwGO9UqbvvToqey47m/iQs94IPO8j fUoe+T1HT2uPeSsVdRO21xmQJgKEymReun72K7Ci8HpbR+MvbR0JWdEM0lqjmlzP fmVlVzLKDCFZFk4W/GUd8uFVm+4kKxnQY+m1ghPrKWyjhPRXtTYmqN1ksF0ApPDi 820KTmXbl0yXJUc+fip3PwiMCrLIrZzpiQ0x65iXhTc18N0nkWF/R0WzcCbRSCvi SllvaOoHOFQHQGJQxQ+27QaRTEz0JUbZZQ4SWXc7KqzgKDY05QsDhxDadgTCQyVb NeRVAMf3ruXCV/B9fuGWE24DFNaLUieAup+NcbWjDWdh0/3uom8= -----END CERTIFICATE-----Generated at Wed Dec 3 16:11:30 2025 by rpki-client