This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/ae89f1b4-ef63-4539-8455-98c671995ccf/0/D7852AF05DFBB97ACD46A37399F20DEA19C2EF2C.mft File: D7852AF05DFBB97ACD46A37399F20DEA19C2EF2C.mft (raw, json) Hash identifier: mAOo9b1m69MxqujUcfFCoctdh9T/4BWxgEjuRYD0hFM= Subject key identifier: CB:19:EF:E7:55:75:23:7F:18:60:59:8C:E4:2E:CA:8E:29:3A:51:39 Authority key identifier: D7:85:2A:F0:5D:FB:B9:7A:CD:46:A3:73:99:F2:0D:EA:19:C2:EF:2C Certificate issuer: /CN=D7852AF05DFBB97ACD46A37399F20DEA19C2EF2C Certificate serial: 2D11F4BBFE4910972107D77BF8484E70FAF6ABC2 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D7852AF05DFBB97ACD46A37399F20DEA19C2EF2C.cer Subject info access: rsync://repo-rpki.idnic.net/repo/ae89f1b4-ef63-4539-8455-98c671995ccf/0/D7852AF05DFBB97ACD46A37399F20DEA19C2EF2C.mft Manifest number: 0340 Signing time: Sat 20 Dec 2025 19:13:13 +0000 Manifest this update: Sat 20 Dec 2025 19:08:13 +0000 Manifest next update: Wed 24 Dec 2025 07:08:13 +0000 Files and hashes: 1: D7852AF05DFBB97ACD46A37399F20DEA19C2EF2C.crl (hash: lspPJZWdXW3OGcnAtLMbe4zz534WfP2oWfxmBpn2lhk=) 2: 3130332e3136342e3137322e302f32342d3234203d3e20313338313331.roa (hash: oLV8DpLz1l+1Ajh0O28O/v5GcjJ/k+/Vq+9P5fe+FMU=) 3: 3130332e3136342e3137332e302f32342d3234203d3e20313338313331.roa (hash: KhAy9i7rNh+YO2rkl451EFCJ0ALmEvE00mvytErQzRA=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/ae89f1b4-ef63-4539-8455-98c671995ccf/0/D7852AF05DFBB97ACD46A37399F20DEA19C2EF2C.crl rsync://repo-rpki.idnic.net/repo/ae89f1b4-ef63-4539-8455-98c671995ccf/0/D7852AF05DFBB97ACD46A37399F20DEA19C2EF2C.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D7852AF05DFBB97ACD46A37399F20DEA19C2EF2C.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 24 Dec 2025 07:08:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2d:11:f4:bb:fe:49:10:97:21:07:d7:7b:f8:48:4e:70:fa:f6:ab:c2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D7852AF05DFBB97ACD46A37399F20DEA19C2EF2C Validity Not Before: Dec 20 19:08:13 2025 GMT Not After : Dec 24 07:08:13 2025 GMT Subject: CN=CB19EFE75575237F1860598CE42ECA8E293A5139 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:fe:13:fb:20:27:ab:7c:c0:94:9d:e3:ad:7f:d1: 67:0a:ae:10:2a:e7:32:40:9e:6f:02:df:81:e6:c2: eb:fa:a1:ab:51:69:df:58:88:33:ad:f0:b7:41:32: 2b:05:b4:29:f6:b9:40:9a:1b:1e:74:f7:39:8e:c5: bb:59:8a:6d:ce:37:ee:cf:cd:fa:af:6b:05:01:59: d1:f7:6c:6f:cc:ce:cc:64:f0:25:b1:9d:c6:a5:6c: bf:82:0e:8d:99:41:f7:72:d4:00:58:89:a4:7a:77: 87:04:17:d1:9d:e3:21:97:dd:ff:a7:14:9f:2d:3f: 39:d1:a0:b3:31:7c:20:05:af:15:cb:e2:71:14:2b: 9d:a1:e2:a2:b8:70:0e:a9:e9:3a:55:9c:84:68:43: db:ed:c0:0d:5d:4a:50:1f:95:70:c7:ae:cc:9e:3f: 62:ef:e8:29:6c:e1:a1:dd:dd:4c:6d:6a:d7:35:e6: 3c:64:80:e6:8c:03:ac:a4:fd:c8:e2:5c:47:32:2a: 6f:55:b3:fd:57:cd:26:17:df:d2:4a:0d:a1:bc:27: a3:8a:8b:cf:e6:78:e6:e6:75:0f:ce:b5:9b:8a:ee: 28:93:26:a0:d5:7a:55:61:7a:64:92:d9:61:de:a8: a4:91:4a:78:20:4e:e6:ce:1a:85:71:1a:48:38:de: 80:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CB:19:EF:E7:55:75:23:7F:18:60:59:8C:E4:2E:CA:8E:29:3A:51:39 X509v3 Authority Key Identifier: keyid:D7:85:2A:F0:5D:FB:B9:7A:CD:46:A3:73:99:F2:0D:EA:19:C2:EF:2C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/ae89f1b4-ef63-4539-8455-98c671995ccf/0/D7852AF05DFBB97ACD46A37399F20DEA19C2EF2C.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D7852AF05DFBB97ACD46A37399F20DEA19C2EF2C.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ae89f1b4-ef63-4539-8455-98c671995ccf/0/D7852AF05DFBB97ACD46A37399F20DEA19C2EF2C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 52:f5:b0:ae:45:c1:7f:4c:87:18:a7:84:a2:c8:b5:69:b9:5b: c5:e5:59:bb:97:8d:87:b6:8e:c1:19:a7:d9:c7:83:92:fb:02: a3:c6:3e:4f:c7:3f:71:04:bf:3e:09:85:67:20:e1:ae:3d:4b: 95:34:45:66:98:b8:9e:ba:bf:79:bd:3a:27:bd:cf:8c:24:6f: f0:f7:75:62:56:10:91:4c:6e:b3:48:a8:7a:3f:4d:c8:4a:e2: bf:69:25:0d:d1:f4:40:a8:c0:92:d9:2a:bd:83:59:97:96:55: e9:58:99:1f:cb:02:b0:a7:9b:a3:f8:85:15:07:77:32:fb:51: 1f:26:73:39:17:9d:ea:d3:c2:c6:90:ab:f0:f4:14:23:0d:81: 44:e0:ef:cd:01:40:0a:ed:15:b1:47:97:ed:6f:d2:d2:0f:d9: 5d:dc:cf:d0:63:85:5e:7c:d7:3d:1b:8d:68:3c:67:07:da:2b: 69:02:8c:0d:28:33:f1:97:a9:40:ad:a7:6f:07:51:b4:31:8c: 00:51:a6:0c:b1:8a:8c:42:31:1b:67:cf:70:30:24:ac:7b:b0: e7:ae:bd:dd:32:89:da:6e:c6:35:f6:78:2e:0a:fd:de:24:9b: 53:b3:b8:4c:ed:40:ad:fd:7e:1f:8b:92:72:71:00:0d:c9:d1: 8c:12:26:18 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIULRH0u/5JEJchB9d7+EhOcPr2q8IwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDc4NTJBRjA1REZCQjk3QUNENDZBMzczOTlGMjBERUEx OUMyRUYyQzAeFw0yNTEyMjAxOTA4MTNaFw0yNTEyMjQwNzA4MTNaMDMxMTAvBgNV BAMTKENCMTlFRkU3NTU3NTIzN0YxODYwNTk4Q0U0MkVDQThFMjkzQTUxMzkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD+E/sgJ6t8wJSd461/0WcKrhAq 5zJAnm8C34Hmwuv6oatRad9YiDOt8LdBMisFtCn2uUCaGx509zmOxbtZim3ON+7P zfqvawUBWdH3bG/Mzsxk8CWxncalbL+CDo2ZQfdy1ABYiaR6d4cEF9Gd4yGX3f+n FJ8tPznRoLMxfCAFrxXL4nEUK52h4qK4cA6p6TpVnIRoQ9vtwA1dSlAflXDHrsye P2Lv6Cls4aHd3Uxtatc15jxkgOaMA6yk/cjiXEcyKm9Vs/1XzSYX39JKDaG8J6OK i8/meObmdQ/OtZuK7iiTJqDVelVhemSS2WHeqKSRSnggTubOGoVxGkg43oAXAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUyxnv51V1I38YYFmM5C7Kjik6UTkwHwYDVR0j BBgwFoAU14Uq8F37uXrNRqNzmfIN6hnC7ywwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h ZTg5ZjFiNC1lZjYzLTQ1MzktODQ1NS05OGM2NzE5OTVjY2YvMC9ENzg1MkFGMDVE RkJCOTdBQ0Q0NkEzNzM5OUYyMERFQTE5QzJFRjJDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRDc4NTJBRjA1REZCQjk3QUNENDZBMzczOTlGMjBERUExOUMy RUYyQy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYWU4OWYxYjQtZWY2My00NTM5LTg0 NTUtOThjNjcxOTk1Y2NmLzAvRDc4NTJBRjA1REZCQjk3QUNENDZBMzczOTlGMjBE RUExOUMyRUYyQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFL1sK5FwX9MhxinhKLItWm5W8XlWbuXjYe2 jsEZp9nHg5L7AqPGPk/HP3EEvz4JhWcg4a49S5U0RWaYuJ66v3m9Oie9z4wkb/D3 dWJWEJFMbrNIqHo/TchK4r9pJQ3R9ECowJLZKr2DWZeWVelYmR/LArCnm6P4hRUH dzL7UR8mczkXnerTwsaQq/D0FCMNgUTg780BQArtFbFHl+1v0tIP2V3cz9BjhV58 1z0bjWg8ZwfaK2kCjA0oM/GXqUCtp28HUbQxjABRpgyxioxCMRtnz3AwJKx7sOeu vd0yidpuxjX2eC4K/d4km1OzuEztQK39fh+LknJxAA3J0YwSJhg= -----END CERTIFICATE-----Generated at Sun Dec 21 19:29:42 2025 by rpki-client