This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/ac32eee1-10f7-457d-a8c5-5f7f741a63da/0/7195906BF48238F96B0510D75000910A519133F7.mft File: 7195906BF48238F96B0510D75000910A519133F7.mft (raw, json) Hash identifier: D+RgBQlnyOYNTAJAkSawN1Itcw06BMoLXUxgNY6ASoQ= Subject key identifier: B1:50:2E:68:48:D6:0C:65:1C:0E:83:CF:D3:24:A3:AB:25:B1:1F:00 Authority key identifier: 71:95:90:6B:F4:82:38:F9:6B:05:10:D7:50:00:91:0A:51:91:33:F7 Certificate issuer: /CN=7195906BF48238F96B0510D75000910A519133F7 Certificate serial: 72F0C6B2EB1BFF5DDA7AFFC7725F2BB333B9D2C7 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7195906BF48238F96B0510D75000910A519133F7.cer Subject info access: rsync://repo-rpki.idnic.net/repo/ac32eee1-10f7-457d-a8c5-5f7f741a63da/0/7195906BF48238F96B0510D75000910A519133F7.mft Manifest number: 01C3 Signing time: Tue 02 Dec 2025 08:00:46 +0000 Manifest this update: Tue 02 Dec 2025 07:55:46 +0000 Manifest next update: Fri 05 Dec 2025 09:08:46 +0000 Files and hashes: 1: 3130332e3136382e3135302e302f32342d3234203d3e20313432333131.roa (hash: FbNYGlqllOlMcgZqW/AYQTW3Ig+jNpTHmcZ/SLk/YWc=) 2: 7195906BF48238F96B0510D75000910A519133F7.crl (hash: UR7/ogHqBEnzcDaK/iQiF70UhalbsNeQuOyotftuaw4=) 3: 3130332e3136382e3135302e302f32332d3233203d3e20313432333131.roa (hash: vej87BChpsakmxUSnkAXWyF/hseNZHZfP/+A76YToPE=) 4: 3130332e3136382e3135312e302f32342d3234203d3e20313432333131.roa (hash: s6WBhLaUVIxSMrwUa1GyQKxiSJ5Lxm0zhF+JRIxoxjM=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/ac32eee1-10f7-457d-a8c5-5f7f741a63da/0/7195906BF48238F96B0510D75000910A519133F7.crl rsync://repo-rpki.idnic.net/repo/ac32eee1-10f7-457d-a8c5-5f7f741a63da/0/7195906BF48238F96B0510D75000910A519133F7.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7195906BF48238F96B0510D75000910A519133F7.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 05 Dec 2025 09:08:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 72:f0:c6:b2:eb:1b:ff:5d:da:7a:ff:c7:72:5f:2b:b3:33:b9:d2:c7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7195906BF48238F96B0510D75000910A519133F7 Validity Not Before: Dec 2 07:55:46 2025 GMT Not After : Dec 5 09:08:46 2025 GMT Subject: CN=B1502E6848D60C651C0E83CFD324A3AB25B11F00 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:16:e6:a7:ae:f9:d3:49:bc:6b:b6:b3:11:29: 69:dc:80:d3:1e:ff:91:5b:62:f3:bc:48:96:e7:ba: 2a:60:c6:7f:7c:7e:e1:97:f7:25:f6:c9:76:cc:e1: 4f:18:74:16:3a:93:7d:1c:3d:ec:c0:23:ee:fd:7c: be:9f:9d:da:fa:57:44:e4:73:29:16:f9:89:51:b4: a4:97:29:b7:06:39:8d:9a:a2:63:06:cb:9c:fc:d2: a8:73:17:5a:a3:71:c5:92:ca:88:64:30:b6:35:a8: db:fa:bf:6e:c2:ab:2b:b8:56:f9:97:e4:5a:14:7e: 97:e9:a0:ef:44:31:ef:07:ae:23:eb:51:21:10:a9: 61:1c:88:74:75:4e:d6:29:14:67:8f:1f:e2:52:4f: ca:a1:03:33:ca:de:8c:34:22:2d:10:b7:11:f0:55: f1:0b:37:18:cf:3f:b2:1c:2d:bc:6f:0b:b0:5f:cd: ac:76:2e:2f:08:45:6f:a6:df:cc:81:88:c8:99:04: 89:59:be:63:3e:76:8c:74:ee:e2:18:93:1a:b5:3b: 15:d7:88:a9:a3:1a:95:56:e5:ea:6c:50:58:f7:97: b2:19:2d:6f:b2:dd:2f:46:97:15:2f:5c:02:73:3c: a5:59:d7:18:c1:26:97:3b:17:30:1a:72:09:58:ce: 76:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:50:2E:68:48:D6:0C:65:1C:0E:83:CF:D3:24:A3:AB:25:B1:1F:00 X509v3 Authority Key Identifier: keyid:71:95:90:6B:F4:82:38:F9:6B:05:10:D7:50:00:91:0A:51:91:33:F7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/ac32eee1-10f7-457d-a8c5-5f7f741a63da/0/7195906BF48238F96B0510D75000910A519133F7.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7195906BF48238F96B0510D75000910A519133F7.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ac32eee1-10f7-457d-a8c5-5f7f741a63da/0/7195906BF48238F96B0510D75000910A519133F7.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 55:5c:66:45:bf:e1:d8:e5:ce:1f:cc:48:25:a2:65:78:32:d0: 86:a4:c0:b6:47:40:dc:f3:78:91:65:ed:e2:74:7d:8c:76:e1: 5c:5e:71:b4:22:89:55:5d:d0:5b:e8:0c:51:0b:39:b3:f4:a3: 89:b8:c5:53:b9:1e:f3:33:8f:9b:94:71:ea:c8:e4:89:5c:83: e6:d1:d6:f4:b0:9d:1d:fd:4a:57:e3:61:f1:6b:c6:2d:ec:2f: e5:da:e7:6f:0c:f2:18:84:e2:62:22:2d:a1:0f:03:05:66:a6: c7:c3:79:c0:00:de:cd:a4:a7:4c:be:f5:72:41:4d:d3:d0:76: a5:29:f0:88:b1:2f:18:77:64:a4:bd:b7:55:c1:3a:dd:66:98: 3f:32:45:90:a8:8f:3a:8e:f6:8d:a1:6b:af:b2:4b:c4:22:97: f3:36:7a:a1:f0:df:c6:07:51:11:88:7d:2e:36:46:a1:a6:e8: db:45:3d:33:9e:a0:09:fe:53:b6:f5:2a:93:7f:3e:c7:d5:7c: c3:16:6e:c9:bb:46:ea:d5:0e:d6:18:44:ce:17:43:8c:7e:da: d8:e2:90:92:ec:45:d7:53:6a:c6:4d:58:aa:61:1c:c8:5e:6c: 0a:d9:a7:9b:89:e7:0d:c1:a1:3a:2f:a8:df:08:18:e7:c9:a4: 67:1d:e2:30 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUcvDGsusb/13aev/Hcl8rszO50scwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzE5NTkwNkJGNDgyMzhGOTZCMDUxMEQ3NTAwMDkxMEE1 MTkxMzNGNzAeFw0yNTEyMDIwNzU1NDZaFw0yNTEyMDUwOTA4NDZaMDMxMTAvBgNV BAMTKEIxNTAyRTY4NDhENjBDNjUxQzBFODNDRkQzMjRBM0FCMjVCMTFGMDAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCgFuanrvnTSbxrtrMRKWncgNMe /5FbYvO8SJbnuipgxn98fuGX9yX2yXbM4U8YdBY6k30cPezAI+79fL6fndr6V0Tk cykW+YlRtKSXKbcGOY2aomMGy5z80qhzF1qjccWSyohkMLY1qNv6v27Cqyu4VvmX 5FoUfpfpoO9EMe8HriPrUSEQqWEciHR1TtYpFGePH+JST8qhAzPK3ow0Ii0QtxHw VfELNxjPP7IcLbxvC7Bfzax2Li8IRW+m38yBiMiZBIlZvmM+dox07uIYkxq1OxXX iKmjGpVW5epsUFj3l7IZLW+y3S9GlxUvXAJzPKVZ1xjBJpc7FzAacglYznahAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUsVAuaEjWDGUcDoPP0ySjqyWxHwAwHwYDVR0j BBgwFoAUcZWQa/SCOPlrBRDXUACRClGRM/cwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h YzMyZWVlMS0xMGY3LTQ1N2QtYThjNS01ZjdmNzQxYTYzZGEvMC83MTk1OTA2QkY0 ODIzOEY5NkIwNTEwRDc1MDAwOTEwQTUxOTEzM0Y3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNzE5NTkwNkJGNDgyMzhGOTZCMDUxMEQ3NTAwMDkxMEE1MTkx MzNGNy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYWMzMmVlZTEtMTBmNy00NTdkLWE4 YzUtNWY3Zjc0MWE2M2RhLzAvNzE5NTkwNkJGNDgyMzhGOTZCMDUxMEQ3NTAwMDkx MEE1MTkxMzNGNy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFVcZkW/4djlzh/MSCWiZXgy0IakwLZHQNzz eJFl7eJ0fYx24VxecbQiiVVd0FvoDFELObP0o4m4xVO5HvMzj5uUcerI5Ilcg+bR 1vSwnR39SlfjYfFrxi3sL+Xa528M8hiE4mIiLaEPAwVmpsfDecAA3s2kp0y+9XJB TdPQdqUp8IixLxh3ZKS9t1XBOt1mmD8yRZCojzqO9o2ha6+yS8Qil/M2eqHw38YH URGIfS42RqGm6NtFPTOeoAn+U7b1KpN/PsfVfMMWbsm7RurVDtYYRM4XQ4x+2tji kJLsRddTasZNWKphHMhebArZp5uJ5w3BoTovqN8IGOfJpGcd4jA= -----END CERTIFICATE-----Generated at Wed Dec 3 15:28:29 2025 by rpki-client