This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/a6de1a8e-c2b8-4996-9492-6f92c2dfec7a/0/7D9E0EE5BE7273608101D93C5F7FB61CBC0404C7.mft File: 7D9E0EE5BE7273608101D93C5F7FB61CBC0404C7.mft (raw, json) Hash identifier: o7hb4iizv0xxIAWc4BfYLDdeK0zxQETF+cljaVNcC+E= Subject key identifier: 8F:FF:D4:9A:6D:57:EA:BB:B2:63:41:A0:14:61:BF:4C:9F:E1:9D:48 Authority key identifier: 7D:9E:0E:E5:BE:72:73:60:81:01:D9:3C:5F:7F:B6:1C:BC:04:04:C7 Certificate issuer: /CN=7D9E0EE5BE7273608101D93C5F7FB61CBC0404C7 Certificate serial: 1F11DEDD90B64F327F95D6E7EBFE89799286CAA6 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7D9E0EE5BE7273608101D93C5F7FB61CBC0404C7.cer Subject info access: rsync://repo-rpki.idnic.net/repo/a6de1a8e-c2b8-4996-9492-6f92c2dfec7a/0/7D9E0EE5BE7273608101D93C5F7FB61CBC0404C7.mft Manifest number: D7 Signing time: Tue 02 Dec 2025 01:20:00 +0000 Manifest this update: Tue 02 Dec 2025 01:15:00 +0000 Manifest next update: Fri 05 Dec 2025 05:50:00 +0000 Files and hashes: 1: 7D9E0EE5BE7273608101D93C5F7FB61CBC0404C7.crl (hash: E6k1vAR54F0ytMf8sfISfl1CGZU9xc2pdml30EzlJn0=) 2: 3130332e3136392e3134332e302f32342d3234203d3e20313531353831.roa (hash: 4oT7xZVHG5/E0DX/QQMWoNUATmrhrxxUsrgCZ3ThGY4=) 3: 3130332e3136392e3134332e302f32342d3234203d3e20323135373237.roa (hash: Gxx1N7C+QbTulu8Y3abVKzpV17eZ/FeVMjAWzNKkBjk=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/a6de1a8e-c2b8-4996-9492-6f92c2dfec7a/0/7D9E0EE5BE7273608101D93C5F7FB61CBC0404C7.crl rsync://repo-rpki.idnic.net/repo/a6de1a8e-c2b8-4996-9492-6f92c2dfec7a/0/7D9E0EE5BE7273608101D93C5F7FB61CBC0404C7.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7D9E0EE5BE7273608101D93C5F7FB61CBC0404C7.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 05 Dec 2025 05:50:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1f:11:de:dd:90:b6:4f:32:7f:95:d6:e7:eb:fe:89:79:92:86:ca:a6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7D9E0EE5BE7273608101D93C5F7FB61CBC0404C7 Validity Not Before: Dec 2 01:15:00 2025 GMT Not After : Dec 5 05:50:00 2025 GMT Subject: CN=8FFFD49A6D57EABBB26341A01461BF4C9FE19D48 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:b4:95:5e:7d:25:ff:5f:ea:6f:da:75:e0:01: c7:56:7d:3f:8a:7a:05:3d:8c:1e:06:d5:c3:71:ca: 2f:6f:4f:c9:77:7b:03:b2:b2:11:bb:e7:e1:77:36: 8b:e9:84:b8:d6:07:46:ed:62:c1:ea:6c:d8:fa:9f: 18:c1:d6:5b:28:f4:b6:4b:59:66:13:77:75:56:f3: 8c:fa:35:d9:cd:61:cd:10:74:dc:99:48:05:94:6e: a2:b1:24:a3:88:f8:76:ea:13:de:6a:8e:f9:15:5e: d3:3a:bb:63:eb:0a:2f:6e:c6:e9:a7:81:f5:ad:96: 78:01:85:bb:c7:d6:f9:dc:07:38:ff:b5:75:c4:81: 2e:e4:43:67:a6:7f:0c:e2:7a:41:dd:e8:0c:c4:03: a3:8b:6f:20:e5:b7:a4:d1:b3:d0:64:31:9e:54:e2: 9f:f9:51:ac:d8:95:85:75:d9:ec:06:32:d7:32:7a: 3e:d0:48:75:7e:86:51:4d:4d:56:db:89:5c:4a:92: b7:33:7a:35:76:e3:b5:50:da:2e:bf:dd:e5:82:65: 08:ad:6c:72:d3:c7:33:4c:9b:01:21:12:7c:e3:7a: 4e:5c:8d:62:33:b4:94:9c:36:74:80:5c:c0:ee:66: c7:3f:e8:04:4a:23:94:ac:c1:84:b2:67:11:2a:dd: 9b:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:FF:D4:9A:6D:57:EA:BB:B2:63:41:A0:14:61:BF:4C:9F:E1:9D:48 X509v3 Authority Key Identifier: keyid:7D:9E:0E:E5:BE:72:73:60:81:01:D9:3C:5F:7F:B6:1C:BC:04:04:C7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/a6de1a8e-c2b8-4996-9492-6f92c2dfec7a/0/7D9E0EE5BE7273608101D93C5F7FB61CBC0404C7.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7D9E0EE5BE7273608101D93C5F7FB61CBC0404C7.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a6de1a8e-c2b8-4996-9492-6f92c2dfec7a/0/7D9E0EE5BE7273608101D93C5F7FB61CBC0404C7.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 36:3e:81:45:87:55:ff:56:1d:5c:24:a1:12:c4:e4:66:e9:b2: 45:4f:ff:7f:fb:c9:a7:0c:b7:69:87:1e:bb:3a:51:37:91:11: e6:8f:9b:c0:b2:f0:47:59:26:a5:af:a2:bf:5d:c6:ee:74:a7: ca:fb:cd:98:c0:cb:34:46:c1:3e:96:a4:1e:63:b7:d1:97:1f: 27:4f:7d:d3:ee:ea:3d:7e:20:a8:c1:13:5b:21:1e:c0:bc:40: 99:87:da:25:61:b0:97:f5:8b:41:87:e0:fb:46:b2:c3:3d:bd: 6e:b8:0b:88:7e:d2:fb:2b:bb:c1:bd:1a:29:7a:87:2f:85:1b: d9:58:46:93:dd:f4:08:93:34:0b:7e:40:ce:a0:7a:f7:15:f4: 03:85:41:ad:c6:dd:01:6d:27:29:b7:bf:5e:d4:7d:50:b3:a9: f1:ab:cf:14:f1:4d:9a:ed:2e:33:25:4b:14:69:d9:c1:ab:8d: 0b:68:2b:c3:ec:69:7c:e6:98:f6:26:6c:53:de:12:ca:2a:bd: 73:6d:9a:c0:aa:a5:2b:87:39:0e:2b:b3:c3:5f:e2:b9:6e:ba: 7a:4f:ef:b8:d1:e0:40:a6:2f:6b:ba:e5:d7:b5:5c:f6:9d:09: ef:12:8a:26:9e:0c:df:4c:5e:f0:f2:09:55:4e:be:0a:6c:f9: 6a:a4:94:80 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUHxHe3ZC2TzJ/ldbn6/6JeZKGyqYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoN0Q5RTBFRTVCRTcyNzM2MDgxMDFEOTNDNUY3RkI2MUNC QzA0MDRDNzAeFw0yNTEyMDIwMTE1MDBaFw0yNTEyMDUwNTUwMDBaMDMxMTAvBgNV BAMTKDhGRkZENDlBNkQ1N0VBQkJCMjYzNDFBMDE0NjFCRjRDOUZFMTlENDgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDhtJVefSX/X+pv2nXgAcdWfT+K egU9jB4G1cNxyi9vT8l3ewOyshG75+F3NovphLjWB0btYsHqbNj6nxjB1lso9LZL WWYTd3VW84z6NdnNYc0QdNyZSAWUbqKxJKOI+HbqE95qjvkVXtM6u2PrCi9uxumn gfWtlngBhbvH1vncBzj/tXXEgS7kQ2emfwziekHd6AzEA6OLbyDlt6TRs9BkMZ5U 4p/5UazYlYV12ewGMtcyej7QSHV+hlFNTVbbiVxKkrczejV247VQ2i6/3eWCZQit bHLTxzNMmwEhEnzjek5cjWIztJScNnSAXMDuZsc/6ARKI5SswYSyZxEq3Zu5AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUj//Umm1X6ruyY0GgFGG/TJ/hnUgwHwYDVR0j BBgwFoAUfZ4O5b5yc2CBAdk8X3+2HLwEBMcwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h NmRlMWE4ZS1jMmI4LTQ5OTYtOTQ5Mi02ZjkyYzJkZmVjN2EvMC83RDlFMEVFNUJF NzI3MzYwODEwMUQ5M0M1RjdGQjYxQ0JDMDQwNEM3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvN0Q5RTBFRTVCRTcyNzM2MDgxMDFEOTNDNUY3RkI2MUNCQzA0 MDRDNy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYTZkZTFhOGUtYzJiOC00OTk2LTk0 OTItNmY5MmMyZGZlYzdhLzAvN0Q5RTBFRTVCRTcyNzM2MDgxMDFEOTNDNUY3RkI2 MUNCQzA0MDRDNy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADY+gUWHVf9WHVwkoRLE5GbpskVP/3/7yacM t2mHHrs6UTeREeaPm8Cy8EdZJqWvor9dxu50p8r7zZjAyzRGwT6WpB5jt9GXHydP fdPu6j1+IKjBE1shHsC8QJmH2iVhsJf1i0GH4PtGssM9vW64C4h+0vsru8G9Gil6 hy+FG9lYRpPd9AiTNAt+QM6gevcV9AOFQa3G3QFtJym3v17UfVCzqfGrzxTxTZrt LjMlSxRp2cGrjQtoK8PsaXzmmPYmbFPeEsoqvXNtmsCqpSuHOQ4rs8Nf4rluunpP 77jR4ECmL2u65de1XPadCe8SiiaeDN9MXvDyCVVOvgps+WqklIA= -----END CERTIFICATE-----Generated at Wed Dec 3 14:55:17 2025 by rpki-client