This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/9b3b230a-fff1-47f0-bf91-7ceb8d36096e/0/7D508B225350B0D204F1943F4F53D4D86AC4FC31.mft File: 7D508B225350B0D204F1943F4F53D4D86AC4FC31.mft (raw, json) Hash identifier: nK94TrVbDuNClcKvc9XrGCBal1rkRod1j1A6asJWN5A= Subject key identifier: 6D:95:DD:79:A7:17:BF:40:10:92:5C:A7:99:36:BD:B3:E7:EA:97:96 Authority key identifier: 7D:50:8B:22:53:50:B0:D2:04:F1:94:3F:4F:53:D4:D8:6A:C4:FC:31 Certificate issuer: /CN=7D508B225350B0D204F1943F4F53D4D86AC4FC31 Certificate serial: 4B710E3AF1CFEBFF5F30BC33CE7BCE2E9AF6CCFC Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7D508B225350B0D204F1943F4F53D4D86AC4FC31.cer Subject info access: rsync://repo-rpki.idnic.net/repo/9b3b230a-fff1-47f0-bf91-7ceb8d36096e/0/7D508B225350B0D204F1943F4F53D4D86AC4FC31.mft Manifest number: D7 Signing time: Tue 02 Dec 2025 03:12:10 +0000 Manifest this update: Tue 02 Dec 2025 03:07:10 +0000 Manifest next update: Fri 05 Dec 2025 07:40:10 +0000 Files and hashes: 1: 7D508B225350B0D204F1943F4F53D4D86AC4FC31.crl (hash: QVND7Ufw3vj+aLsxr0NpyvHw7kCWYF7jnjnE7GtMeqQ=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/9b3b230a-fff1-47f0-bf91-7ceb8d36096e/0/7D508B225350B0D204F1943F4F53D4D86AC4FC31.crl rsync://repo-rpki.idnic.net/repo/9b3b230a-fff1-47f0-bf91-7ceb8d36096e/0/7D508B225350B0D204F1943F4F53D4D86AC4FC31.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7D508B225350B0D204F1943F4F53D4D86AC4FC31.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 05 Dec 2025 07:40:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4b:71:0e:3a:f1:cf:eb:ff:5f:30:bc:33:ce:7b:ce:2e:9a:f6:cc:fc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7D508B225350B0D204F1943F4F53D4D86AC4FC31 Validity Not Before: Dec 2 03:07:10 2025 GMT Not After : Dec 5 07:40:10 2025 GMT Subject: CN=6D95DD79A717BF4010925CA79936BDB3E7EA9796 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:72:30:b2:0b:6c:a0:b9:16:99:f4:fe:dd:d9: c2:ad:c1:fe:dc:4e:49:7b:1f:c6:90:ba:56:c2:6e: 28:02:53:cb:d1:dd:b5:3e:1c:34:42:7b:af:e4:7e: 6d:99:69:d2:36:4d:41:7c:dd:67:e2:79:36:41:70: b2:51:3c:e7:a4:c2:5b:d1:7b:c4:60:bf:4f:2d:d3: 12:5c:98:7b:3e:ed:f6:f4:fb:40:88:5f:46:95:d8: cb:f1:25:93:12:df:14:4f:bd:b5:f7:b3:b9:d1:79: a8:0f:32:dd:62:c0:d3:ea:bd:da:54:5d:81:c2:75: 07:7a:c6:61:d9:39:4a:7d:eb:bb:ce:f8:d8:2f:d3: 5d:96:a2:da:aa:31:0f:a3:ec:e2:2d:a4:f8:f0:47: c5:03:b0:43:1f:93:52:23:3e:e4:c9:bd:ce:bb:0b: f9:0d:85:d1:b4:df:dd:a5:6f:59:38:f2:e1:da:78: 59:84:8d:e2:68:d7:5c:7c:4d:66:1d:56:a2:8b:72: 51:88:ae:7a:54:fe:65:df:43:2c:d0:8c:f0:05:dc: 1e:c9:1d:80:01:0f:12:d7:4f:80:21:d7:78:8a:83: c4:8c:06:cf:8c:65:20:84:5f:8c:5e:6c:41:ff:93: ff:62:77:8b:c2:12:8f:72:bb:5a:36:6d:2e:57:45: 24:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6D:95:DD:79:A7:17:BF:40:10:92:5C:A7:99:36:BD:B3:E7:EA:97:96 X509v3 Authority Key Identifier: keyid:7D:50:8B:22:53:50:B0:D2:04:F1:94:3F:4F:53:D4:D8:6A:C4:FC:31 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/9b3b230a-fff1-47f0-bf91-7ceb8d36096e/0/7D508B225350B0D204F1943F4F53D4D86AC4FC31.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7D508B225350B0D204F1943F4F53D4D86AC4FC31.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/9b3b230a-fff1-47f0-bf91-7ceb8d36096e/0/7D508B225350B0D204F1943F4F53D4D86AC4FC31.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 10:b3:56:04:5b:64:6f:11:c0:e1:b9:d7:8a:c1:ec:15:51:4e: 96:58:bb:06:7f:a8:a9:20:be:a4:20:a5:a0:2f:62:2d:e9:e7: 71:a2:f8:15:1f:3f:f2:b9:47:a9:db:e6:a1:c7:53:90:d3:88: ae:66:7f:51:79:f7:e3:73:c0:8b:b6:04:49:24:ca:28:08:f8: 54:e3:d2:3a:5c:15:30:26:2f:ac:fb:82:02:e3:b3:c8:ce:15: 74:4c:23:f0:a5:3e:cb:f7:e8:70:44:06:f8:46:7e:aa:52:63: b4:0b:65:fb:71:44:46:9f:dc:9a:37:2a:f8:98:ca:59:6b:de: 63:07:aa:d4:cb:08:29:27:c7:d6:59:93:24:35:eb:69:39:3f: 36:a3:8b:55:4b:bc:75:d1:7d:4d:a7:c2:c6:3d:8a:48:19:ca: d0:98:f9:a6:5a:1c:52:4e:85:76:35:f8:52:3f:ec:b1:f2:67: 29:93:06:3e:27:ab:00:0a:b0:04:d4:d5:bc:11:13:e2:7a:47: 4a:94:12:c0:8a:fe:4f:85:9a:10:06:de:66:75:cb:77:57:c6: af:3d:d5:04:d0:ac:29:62:61:f9:6f:9d:35:c4:db:11:8c:c6: 1f:1f:75:aa:9b:2e:5e:63:d2:08:3b:22:d4:bc:e5:c0:72:34: ad:3a:10:6d -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUS3EOOvHP6/9fMLwzznvOLpr2zPwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoN0Q1MDhCMjI1MzUwQjBEMjA0RjE5NDNGNEY1M0Q0RDg2 QUM0RkMzMTAeFw0yNTEyMDIwMzA3MTBaFw0yNTEyMDUwNzQwMTBaMDMxMTAvBgNV BAMTKDZEOTVERDc5QTcxN0JGNDAxMDkyNUNBNzk5MzZCREIzRTdFQTk3OTYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+cjCyC2yguRaZ9P7d2cKtwf7c Tkl7H8aQulbCbigCU8vR3bU+HDRCe6/kfm2ZadI2TUF83WfieTZBcLJRPOekwlvR e8Rgv08t0xJcmHs+7fb0+0CIX0aV2MvxJZMS3xRPvbX3s7nReagPMt1iwNPqvdpU XYHCdQd6xmHZOUp967vO+Ngv012WotqqMQ+j7OItpPjwR8UDsEMfk1IjPuTJvc67 C/kNhdG0392lb1k48uHaeFmEjeJo11x8TWYdVqKLclGIrnpU/mXfQyzQjPAF3B7J HYABDxLXT4Ah13iKg8SMBs+MZSCEX4xebEH/k/9id4vCEo9yu1o2bS5XRSS1AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUbZXdeacXv0AQklynmTa9s+fql5YwHwYDVR0j BBgwFoAUfVCLIlNQsNIE8ZQ/T1PU2GrE/DEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 YjNiMjMwYS1mZmYxLTQ3ZjAtYmY5MS03Y2ViOGQzNjA5NmUvMC83RDUwOEIyMjUz NTBCMEQyMDRGMTk0M0Y0RjUzRDREODZBQzRGQzMxLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvN0Q1MDhCMjI1MzUwQjBEMjA0RjE5NDNGNEY1M0Q0RDg2QUM0 RkMzMS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOWIzYjIzMGEtZmZmMS00N2YwLWJm OTEtN2NlYjhkMzYwOTZlLzAvN0Q1MDhCMjI1MzUwQjBEMjA0RjE5NDNGNEY1M0Q0 RDg2QUM0RkMzMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABCzVgRbZG8RwOG514rB7BVRTpZYuwZ/qKkg vqQgpaAvYi3p53Gi+BUfP/K5R6nb5qHHU5DTiK5mf1F59+NzwIu2BEkkyigI+FTj 0jpcFTAmL6z7ggLjs8jOFXRMI/ClPsv36HBEBvhGfqpSY7QLZftxREaf3Jo3KviY yllr3mMHqtTLCCknx9ZZkyQ162k5Pzaji1VLvHXRfU2nwsY9ikgZytCY+aZaHFJO hXY1+FI/7LHyZymTBj4nqwAKsATU1bwRE+J6R0qUEsCK/k+FmhAG3mZ1y3dXxq89 1QTQrCliYflvnTXE2xGMxh8fdaqbLl5j0gg7ItS85cByNK06EG0= -----END CERTIFICATE-----Generated at Wed Dec 3 16:08:20 2025 by rpki-client