This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/95ec6cf8-9655-4379-bf36-37271438d03a/0/7CA2524C6D82550B5D21C13182BD9CC0214433F4.mft File: 7CA2524C6D82550B5D21C13182BD9CC0214433F4.mft (raw, json) Hash identifier: Y3yWv+oVnVZ7XBRl0qrBpsd1JnfXOXjVRJycHgChPaM= Subject key identifier: F8:B3:99:1D:E8:A0:A9:31:F4:F2:7F:9F:36:CC:24:41:75:D2:A6:BA Authority key identifier: 7C:A2:52:4C:6D:82:55:0B:5D:21:C1:31:82:BD:9C:C0:21:44:33:F4 Certificate issuer: /CN=7CA2524C6D82550B5D21C13182BD9CC0214433F4 Certificate serial: 587E32AED3483F63FD799991E905885550834D0A Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7CA2524C6D82550B5D21C13182BD9CC0214433F4.cer Subject info access: rsync://repo-rpki.idnic.net/repo/95ec6cf8-9655-4379-bf36-37271438d03a/0/7CA2524C6D82550B5D21C13182BD9CC0214433F4.mft Manifest number: 01D8 Signing time: Wed 17 Dec 2025 12:41:16 +0000 Manifest this update: Wed 17 Dec 2025 12:36:16 +0000 Manifest next update: Sat 20 Dec 2025 14:47:16 +0000 Files and hashes: 1: 3130332e36312e31372e302f32342d3234203d3e20313530353039.roa (hash: bUHS7zCDhqnhQezsrNXcG47gU9JfG5NQcO4U+4/bwQc=) 2: 7CA2524C6D82550B5D21C13182BD9CC0214433F4.crl (hash: T65AVcFMlqlzE3p2YWQADCUHU/fko8uKJbUG8lmnqmI=) 3: 3130332e36312e31362e302f32342d3234203d3e20313530353039.roa (hash: 0YLohf/ggkakqxRaRFVJUp8vfmU0YPLjnkvCoTzlI1g=) 4: 3130332e36312e31362e302f32332d3233203d3e20313530353039.roa (hash: PphyhzafZc8USb+ULqaNnnRbeA397pdQzPJ0fXA6bSA=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/95ec6cf8-9655-4379-bf36-37271438d03a/0/7CA2524C6D82550B5D21C13182BD9CC0214433F4.crl rsync://repo-rpki.idnic.net/repo/95ec6cf8-9655-4379-bf36-37271438d03a/0/7CA2524C6D82550B5D21C13182BD9CC0214433F4.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7CA2524C6D82550B5D21C13182BD9CC0214433F4.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 20 Dec 2025 14:47:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 58:7e:32:ae:d3:48:3f:63:fd:79:99:91:e9:05:88:55:50:83:4d:0a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7CA2524C6D82550B5D21C13182BD9CC0214433F4 Validity Not Before: Dec 17 12:36:16 2025 GMT Not After : Dec 20 14:47:16 2025 GMT Subject: CN=F8B3991DE8A0A931F4F27F9F36CC244175D2A6BA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:16:cd:ec:40:ca:48:24:5e:dc:f8:e0:f6:40: d6:0d:6e:74:23:15:c9:63:0a:92:b2:42:4b:b1:e6: 70:46:11:81:d1:af:57:28:6c:f6:bb:26:bc:c8:53: 3f:31:05:2d:3f:12:99:81:30:41:97:87:74:33:f3: 07:bd:0f:18:00:8a:9e:de:96:7f:ba:65:e9:64:b6: dc:17:2c:fd:7f:bb:f2:5c:35:1d:48:d3:7a:a4:42: 88:fd:65:17:5d:8a:f2:ad:1c:2e:cd:60:ac:a7:b3: 09:da:8c:f9:75:35:15:9c:54:af:7e:80:ed:90:df: a0:fb:0c:da:8f:c6:cf:47:38:3a:51:05:88:6a:ef: c2:89:ca:98:e7:66:79:69:f3:11:67:c4:a5:e4:f5: 17:d9:35:02:63:71:b6:de:d6:72:17:09:31:c7:73: e4:38:c3:5f:c5:9b:fc:1b:f2:7a:a9:03:09:29:3a: 99:7a:96:48:a0:aa:36:c6:48:e1:2c:0a:ee:04:80: 88:aa:b7:3c:dc:7c:d4:3f:29:14:a0:c5:50:18:18: c2:7a:32:41:ce:cf:0f:d0:9f:ee:e7:b7:9b:a7:11: f1:50:cb:01:16:aa:48:41:1a:a4:86:e5:16:e6:d9: b0:7b:75:44:21:ed:3c:75:a3:16:bb:ea:00:e6:fe: 34:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:B3:99:1D:E8:A0:A9:31:F4:F2:7F:9F:36:CC:24:41:75:D2:A6:BA X509v3 Authority Key Identifier: keyid:7C:A2:52:4C:6D:82:55:0B:5D:21:C1:31:82:BD:9C:C0:21:44:33:F4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/95ec6cf8-9655-4379-bf36-37271438d03a/0/7CA2524C6D82550B5D21C13182BD9CC0214433F4.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7CA2524C6D82550B5D21C13182BD9CC0214433F4.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/95ec6cf8-9655-4379-bf36-37271438d03a/0/7CA2524C6D82550B5D21C13182BD9CC0214433F4.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 59:14:44:76:84:b9:3d:de:2a:e8:5d:22:ce:af:4d:0a:a1:74: 88:98:da:72:21:d0:bd:6c:5c:fa:c2:5a:29:ec:d0:92:01:e2: 15:4a:be:7a:cf:b6:d7:c8:99:61:24:a1:c9:fa:e0:1c:45:6f: 36:29:43:87:2c:fa:2a:ea:a4:a5:f0:9a:70:fe:3a:4e:97:b6: 04:f0:8f:67:b3:79:dc:36:05:bf:1f:59:3a:7a:ec:0a:da:9a: eb:71:0f:37:b5:bc:e0:37:0d:07:6a:40:27:c5:6e:d3:4e:75: f7:24:e7:94:cc:d8:a1:c9:50:68:3f:10:40:91:77:90:1a:e8: cf:46:c9:3e:c3:e5:6a:5e:3f:f6:9f:7b:62:67:0e:77:0b:4b: d0:71:76:a5:3b:4c:12:66:aa:c9:67:d5:db:d3:6b:3f:0a:f0: 05:40:e7:98:b0:d7:e0:42:bc:64:78:7c:bf:c0:63:00:7d:df: af:91:1a:80:da:74:ef:81:af:61:de:8c:c7:86:06:a6:07:35: fd:78:59:af:cd:e1:50:ac:e7:9e:30:e1:f8:fd:8a:db:73:f2: 04:70:3d:c2:54:dc:02:26:61:e6:f1:2a:71:9c:b8:d4:1e:ff: ed:51:0e:85:b2:4a:57:57:b3:5d:8b:0e:62:3b:21:d4:bb:41: a4:cd:6d:f2 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUWH4yrtNIP2P9eZmR6QWIVVCDTQowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoN0NBMjUyNEM2RDgyNTUwQjVEMjFDMTMxODJCRDlDQzAy MTQ0MzNGNDAeFw0yNTEyMTcxMjM2MTZaFw0yNTEyMjAxNDQ3MTZaMDMxMTAvBgNV BAMTKEY4QjM5OTFERThBMEE5MzFGNEYyN0Y5RjM2Q0MyNDQxNzVEMkE2QkEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDPFs3sQMpIJF7c+OD2QNYNbnQj FcljCpKyQkux5nBGEYHRr1cobPa7JrzIUz8xBS0/EpmBMEGXh3Qz8we9DxgAip7e ln+6ZelkttwXLP1/u/JcNR1I03qkQoj9ZRddivKtHC7NYKynswnajPl1NRWcVK9+ gO2Q36D7DNqPxs9HODpRBYhq78KJypjnZnlp8xFnxKXk9RfZNQJjcbbe1nIXCTHH c+Q4w1/Fm/wb8nqpAwkpOpl6lkigqjbGSOEsCu4EgIiqtzzcfNQ/KRSgxVAYGMJ6 MkHOzw/Qn+7nt5unEfFQywEWqkhBGqSG5Rbm2bB7dUQh7Tx1oxa76gDm/jRZAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU+LOZHeigqTH08n+fNswkQXXSprowHwYDVR0j BBgwFoAUfKJSTG2CVQtdIcExgr2cwCFEM/QwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 NWVjNmNmOC05NjU1LTQzNzktYmYzNi0zNzI3MTQzOGQwM2EvMC83Q0EyNTI0QzZE ODI1NTBCNUQyMUMxMzE4MkJEOUNDMDIxNDQzM0Y0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvN0NBMjUyNEM2RDgyNTUwQjVEMjFDMTMxODJCRDlDQzAyMTQ0 MzNGNC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOTVlYzZjZjgtOTY1NS00Mzc5LWJm MzYtMzcyNzE0MzhkMDNhLzAvN0NBMjUyNEM2RDgyNTUwQjVEMjFDMTMxODJCRDlD QzAyMTQ0MzNGNC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFkURHaEuT3eKuhdIs6vTQqhdIiY2nIh0L1s XPrCWins0JIB4hVKvnrPttfImWEkocn64BxFbzYpQ4cs+irqpKXwmnD+Ok6XtgTw j2ezedw2Bb8fWTp67AramutxDze1vOA3DQdqQCfFbtNOdfck55TM2KHJUGg/EECR d5Aa6M9GyT7D5WpeP/afe2JnDncLS9BxdqU7TBJmqsln1dvTaz8K8AVA55iw1+BC vGR4fL/AYwB936+RGoDadO+Br2HejMeGBqYHNf14Wa/N4VCs554w4fj9ittz8gRw PcJU3AImYebxKnGcuNQe/+1RDoWySldXs12LDmI7IdS7QaTNbfI= -----END CERTIFICATE-----Generated at Fri Dec 19 11:22:49 2025 by rpki-client