This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/9f30e4ae-3e47-4540-823c-53caf2267b36/0/A7E6C62C47C02EEA32422E135908EBF230C5B5FA.mft File: A7E6C62C47C02EEA32422E135908EBF230C5B5FA.mft (raw, json) Hash identifier: LT35YjawqgGIq5MVsthmTa7zJuuHBKfWG8r277tr1KU= Subject key identifier: 11:29:67:EC:73:F3:1E:33:FF:84:68:08:41:12:C2:FF:E6:C9:44:01 Authority key identifier: A7:E6:C6:2C:47:C0:2E:EA:32:42:2E:13:59:08:EB:F2:30:C5:B5:FA Certificate issuer: /CN=A7E6C62C47C02EEA32422E135908EBF230C5B5FA Certificate serial: 62136E2288B03554E8A6237E76467EC7AEDADAA2 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/A7E6C62C47C02EEA32422E135908EBF230C5B5FA.cer Subject info access: rsync://repo-rpki.idnic.net/repo/9f30e4ae-3e47-4540-823c-53caf2267b36/0/A7E6C62C47C02EEA32422E135908EBF230C5B5FA.mft Manifest number: D1 Signing time: Fri 05 Dec 2025 16:12:29 +0000 Manifest this update: Fri 05 Dec 2025 16:07:29 +0000 Manifest next update: Mon 08 Dec 2025 23:46:29 +0000 Files and hashes: 1: 3136302e32322e3139382e302f32332d3233203d3e20313532383336.roa (hash: VUNIcQLLtJsrGFAzVMiImA2RepGLVIMfYYvCS/t2Ge0=) 2: A7E6C62C47C02EEA32422E135908EBF230C5B5FA.crl (hash: wjYHQkwC3533+GNVR2ypkf0PMaulYca5WGdHNdQVQc4=) 3: 3136302e32322e3139382e302f32342d3234203d3e20313532383336.roa (hash: T0SEzE9YSldItn38GmkKf92LoaZ2oQZ49jDDO4h9Pog=) 4: 3136302e32322e3139392e302f32342d3234203d3e20313532383336.roa (hash: Lhr2al1XwYOqujTNMwbvxurUmcC7+yc2oxsnrcYpuBo=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/9f30e4ae-3e47-4540-823c-53caf2267b36/0/A7E6C62C47C02EEA32422E135908EBF230C5B5FA.crl rsync://repo-rpki.idnic.net/repo/9f30e4ae-3e47-4540-823c-53caf2267b36/0/A7E6C62C47C02EEA32422E135908EBF230C5B5FA.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/A7E6C62C47C02EEA32422E135908EBF230C5B5FA.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 08 Dec 2025 23:46:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 62:13:6e:22:88:b0:35:54:e8:a6:23:7e:76:46:7e:c7:ae:da:da:a2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A7E6C62C47C02EEA32422E135908EBF230C5B5FA Validity Not Before: Dec 5 16:07:29 2025 GMT Not After : Dec 8 23:46:29 2025 GMT Subject: CN=112967EC73F31E33FF8468084112C2FFE6C94401 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:80:af:f7:8b:f9:da:d5:18:7f:26:75:6d:d8: 63:38:78:46:4d:2a:b7:c6:4d:8a:41:24:6f:2f:17: 63:fd:b3:0d:e5:3f:26:fd:8e:ed:0d:ba:61:ad:a0: e2:18:60:cb:78:f8:34:30:ed:b6:63:29:21:a6:00: 0a:42:00:5e:6c:46:c7:6b:da:55:f7:59:bc:92:ce: e7:d4:a2:14:96:88:ce:f8:a1:4b:c8:4d:c8:50:53: 91:bc:6b:17:e7:d8:31:7b:b2:c4:9d:0d:a6:7d:34: 86:3f:55:96:87:8c:4a:75:db:79:57:21:78:7d:50: 53:92:43:3a:bd:34:97:86:1b:fa:4f:b1:37:bb:c7: 37:25:49:d8:d2:2f:bf:89:79:2c:b5:90:0d:13:92: bb:ae:55:95:9f:38:7e:93:b0:12:47:12:d6:52:97: 97:ba:a8:34:c7:cf:99:37:43:5c:52:a3:a5:29:9a: 22:a2:8d:0e:94:ad:ec:77:c4:bf:dc:c2:03:6e:ac: d6:1f:01:4b:95:f2:f1:1a:04:df:47:ea:7f:d9:f7: 7c:2d:1c:97:c1:8d:0e:d7:13:c7:96:c6:69:4e:15: 78:f8:03:ea:4c:77:c2:66:9c:4a:34:6c:8b:e7:3e: 7a:01:77:20:34:1e:0f:5b:ab:e6:64:7f:7e:82:87: 5d:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:29:67:EC:73:F3:1E:33:FF:84:68:08:41:12:C2:FF:E6:C9:44:01 X509v3 Authority Key Identifier: keyid:A7:E6:C6:2C:47:C0:2E:EA:32:42:2E:13:59:08:EB:F2:30:C5:B5:FA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/9f30e4ae-3e47-4540-823c-53caf2267b36/0/A7E6C62C47C02EEA32422E135908EBF230C5B5FA.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/A7E6C62C47C02EEA32422E135908EBF230C5B5FA.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/9f30e4ae-3e47-4540-823c-53caf2267b36/0/A7E6C62C47C02EEA32422E135908EBF230C5B5FA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 29:70:9d:fe:e0:90:dc:97:27:66:34:f4:a8:3e:5f:5e:7b:1b: 3f:1d:44:2b:54:7f:b3:1e:f7:36:eb:bb:38:44:d0:23:c6:9a: 07:3a:2e:b2:bd:92:09:42:ec:86:90:35:19:52:bc:8f:64:9e: f8:e3:ca:61:f3:ad:7e:e7:42:db:76:0b:d0:44:3e:05:83:72: 72:da:76:0f:af:ca:99:b6:d7:89:65:eb:d0:a1:ed:59:0a:2b: 83:95:93:df:18:99:52:5b:4d:5f:f3:24:9d:af:49:81:42:76: 90:11:87:14:92:24:9b:33:8d:d5:bd:e3:9f:ba:36:e2:c9:5e: c6:57:a0:4b:3f:5a:cd:37:ef:f1:5b:b5:d0:aa:d4:d5:70:fd: 24:37:fa:ba:e0:b4:8a:f7:0f:88:32:41:80:d8:02:94:50:f0: c5:9b:e3:40:99:29:8f:02:0f:47:33:93:65:65:3b:e9:9c:99: a7:47:42:70:ca:ac:08:cb:1a:2d:71:c9:33:cc:6a:c5:45:c5: 2a:82:9d:c9:96:62:f5:99:af:9d:9f:9b:fa:2b:49:f9:d0:cc: da:7f:7c:45:52:75:07:5b:8a:5e:a4:e0:38:73:4b:a4:db:2a: 7f:1a:d1:6c:1d:ac:04:a2:5d:84:83:ae:ee:3e:b0:f6:59:a1: a3:5b:3b:63 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUYhNuIoiwNVTopiN+dkZ+x67a2qIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTdFNkM2MkM0N0MwMkVFQTMyNDIyRTEzNTkwOEVCRjIz MEM1QjVGQTAeFw0yNTEyMDUxNjA3MjlaFw0yNTEyMDgyMzQ2MjlaMDMxMTAvBgNV BAMTKDExMjk2N0VDNzNGMzFFMzNGRjg0NjgwODQxMTJDMkZGRTZDOTQ0MDEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDggK/3i/na1Rh/JnVt2GM4eEZN KrfGTYpBJG8vF2P9sw3lPyb9ju0NumGtoOIYYMt4+DQw7bZjKSGmAApCAF5sRsdr 2lX3WbySzufUohSWiM74oUvITchQU5G8axfn2DF7ssSdDaZ9NIY/VZaHjEp123lX IXh9UFOSQzq9NJeGG/pPsTe7xzclSdjSL7+JeSy1kA0TkruuVZWfOH6TsBJHEtZS l5e6qDTHz5k3Q1xSo6UpmiKijQ6Urex3xL/cwgNurNYfAUuV8vEaBN9H6n/Z93wt HJfBjQ7XE8eWxmlOFXj4A+pMd8JmnEo0bIvnPnoBdyA0Hg9bq+Zkf36Ch11xAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUESln7HPzHjP/hGgIQRLC/+bJRAEwHwYDVR0j BBgwFoAUp+bGLEfALuoyQi4TWQjr8jDFtfowDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 ZjMwZTRhZS0zZTQ3LTQ1NDAtODIzYy01M2NhZjIyNjdiMzYvMC9BN0U2QzYyQzQ3 QzAyRUVBMzI0MjJFMTM1OTA4RUJGMjMwQzVCNUZBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvQTdFNkM2MkM0N0MwMkVFQTMyNDIyRTEzNTkwOEVCRjIzMEM1 QjVGQS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOWYzMGU0YWUtM2U0Ny00NTQwLTgy M2MtNTNjYWYyMjY3YjM2LzAvQTdFNkM2MkM0N0MwMkVFQTMyNDIyRTEzNTkwOEVC RjIzMEM1QjVGQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAClwnf7gkNyXJ2Y09Kg+X157Gz8dRCtUf7Me 9zbruzhE0CPGmgc6LrK9kglC7IaQNRlSvI9knvjjymHzrX7nQtt2C9BEPgWDcnLa dg+vypm214ll69Ch7VkKK4OVk98YmVJbTV/zJJ2vSYFCdpARhxSSJJszjdW945+6 NuLJXsZXoEs/Ws037/FbtdCq1NVw/SQ3+rrgtIr3D4gyQYDYApRQ8MWb40CZKY8C D0czk2VlO+mcmadHQnDKrAjLGi1xyTPMasVFxSqCncmWYvWZr52fm/orSfnQzNp/ fEVSdQdbil6k4DhzS6TbKn8a0WwdrASiXYSDru4+sPZZoaNbO2M= -----END CERTIFICATE-----Generated at Sun Dec 7 18:49:17 2025 by rpki-client