This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/afcaf27d-64e9-474b-a73b-35adbe9b2f01/0/507CD1ABEB911954F33A18A2DF9A31CE320DAF97.mft File: 507CD1ABEB911954F33A18A2DF9A31CE320DAF97.mft (raw, json) Hash identifier: PYKEYc+M+VTUaWYmICMi4ljGcVlwh5XaiBkTilOJOyE= Subject key identifier: 59:9B:07:FC:28:F4:36:79:28:FE:A6:45:85:CB:59:59:0F:38:F3:65 Authority key identifier: 50:7C:D1:AB:EB:91:19:54:F3:3A:18:A2:DF:9A:31:CE:32:0D:AF:97 Certificate issuer: /CN=507CD1ABEB911954F33A18A2DF9A31CE320DAF97 Certificate serial: 196A0AB57768795EE0D2744535475822DCB43D98 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/507CD1ABEB911954F33A18A2DF9A31CE320DAF97.cer Subject info access: rsync://repo-rpki.idnic.net/repo/afcaf27d-64e9-474b-a73b-35adbe9b2f01/0/507CD1ABEB911954F33A18A2DF9A31CE320DAF97.mft Manifest number: 0396 Signing time: Wed 03 Dec 2025 02:10:43 +0000 Manifest this update: Wed 03 Dec 2025 02:05:43 +0000 Manifest next update: Sat 06 Dec 2025 13:28:43 +0000 Files and hashes: 1: 507CD1ABEB911954F33A18A2DF9A31CE320DAF97.crl (hash: kDB1ft1xzHgw5q/3pciHYXaCa4jR0yI32E4Z9m5CeBk=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/afcaf27d-64e9-474b-a73b-35adbe9b2f01/0/507CD1ABEB911954F33A18A2DF9A31CE320DAF97.crl rsync://repo-rpki.idnic.net/repo/afcaf27d-64e9-474b-a73b-35adbe9b2f01/0/507CD1ABEB911954F33A18A2DF9A31CE320DAF97.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/507CD1ABEB911954F33A18A2DF9A31CE320DAF97.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 06 Dec 2025 12:07:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 19:6a:0a:b5:77:68:79:5e:e0:d2:74:45:35:47:58:22:dc:b4:3d:98 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=507CD1ABEB911954F33A18A2DF9A31CE320DAF97 Validity Not Before: Dec 3 02:05:43 2025 GMT Not After : Dec 6 13:28:43 2025 GMT Subject: CN=599B07FC28F4367928FEA64585CB59590F38F365 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:f5:9b:7b:8a:71:ec:23:12:30:6a:cb:9a:f2: 32:8f:39:0e:de:e3:30:2e:1f:70:5e:01:ab:5d:65: 71:bf:a1:2d:d6:f2:48:dd:7b:e0:31:73:6f:21:16: 03:1e:8f:13:d7:b8:2f:d0:04:77:c3:d2:5a:9d:fd: dd:8d:74:74:fc:b2:a6:51:ac:aa:5b:69:67:ad:5d: ca:dd:b9:7b:21:87:a9:4b:30:95:7d:a7:50:9f:4e: 8a:a5:1c:15:fc:3e:ad:bc:f9:ce:75:71:04:d8:c2: a2:c7:9b:31:d1:9c:1d:b3:f0:aa:bc:e2:29:c0:c2: 22:5e:77:5e:23:7c:63:20:1a:cb:53:ac:07:2c:28: 1e:41:07:4a:8d:da:48:d7:47:9e:53:6f:6e:fd:69: 38:f5:93:f0:c3:9f:bd:a0:53:0f:da:6e:36:6d:af: b8:5d:26:64:87:8c:f2:9e:66:1d:b4:6d:17:40:d1: 41:64:01:6a:15:10:2e:44:9f:28:2a:ca:a5:54:fa: 8c:c5:10:c8:39:ba:9a:87:59:9f:24:a3:21:0c:ca: f4:eb:1e:34:5c:43:fa:8b:e1:d1:d6:cb:dc:f0:ae: c7:b1:72:95:d5:9f:95:70:47:87:d2:b7:56:ed:2f: 03:b0:f1:71:f3:7a:bd:88:61:4e:9b:c2:25:18:eb: 3d:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 59:9B:07:FC:28:F4:36:79:28:FE:A6:45:85:CB:59:59:0F:38:F3:65 X509v3 Authority Key Identifier: keyid:50:7C:D1:AB:EB:91:19:54:F3:3A:18:A2:DF:9A:31:CE:32:0D:AF:97 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/afcaf27d-64e9-474b-a73b-35adbe9b2f01/0/507CD1ABEB911954F33A18A2DF9A31CE320DAF97.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/507CD1ABEB911954F33A18A2DF9A31CE320DAF97.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/afcaf27d-64e9-474b-a73b-35adbe9b2f01/0/507CD1ABEB911954F33A18A2DF9A31CE320DAF97.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a4:07:d6:ea:91:3a:08:c1:80:52:b6:56:fd:18:3c:8c:32:08: 8d:43:38:09:02:70:91:fd:d3:2a:1b:ee:f9:56:90:84:4e:cc: 89:ae:c1:62:37:89:a1:dd:ff:35:ac:83:aa:56:85:e4:bf:3e: 3a:fd:c8:39:b1:10:25:1b:b1:5b:28:c1:64:5f:82:06:c4:e4: 58:71:a3:ce:ad:c5:c6:48:9a:eb:ec:1a:26:9e:58:41:8a:4a: 71:37:dd:d3:45:3c:60:0a:f1:f9:6a:2c:24:3a:14:ab:84:50: 1b:22:e4:62:f2:d1:f5:f0:03:d4:04:de:09:e5:22:96:8a:33: 7d:f9:d1:47:36:96:4e:02:92:10:1f:0a:fa:2f:5a:03:e4:b4: 4d:8e:29:0e:5b:56:11:b0:21:62:85:03:16:bd:d9:45:e9:12: c2:3e:54:9f:04:a3:7a:a8:f3:30:bb:e5:79:66:0c:90:57:a6: 4f:8d:45:21:1e:28:3f:8a:2e:12:80:82:e3:18:c5:cd:2e:db: 44:89:37:8a:ac:4f:73:8a:57:e2:99:5b:34:42:81:e9:56:b6: ad:0e:78:4b:63:4b:2b:51:93:29:fe:de:af:68:73:b5:e6:7f: 44:d0:a3:d7:f1:b6:a7:bd:55:17:9d:a5:35:a4:4e:2a:39:84: 70:4e:d3:ae -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUGWoKtXdoeV7g0nRFNUdYIty0PZgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTA3Q0QxQUJFQjkxMTk1NEYzM0ExOEEyREY5QTMxQ0Uz MjBEQUY5NzAeFw0yNTEyMDMwMjA1NDNaFw0yNTEyMDYxMzI4NDNaMDMxMTAvBgNV BAMTKDU5OUIwN0ZDMjhGNDM2NzkyOEZFQTY0NTg1Q0I1OTU5MEYzOEYzNjUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCn9Zt7inHsIxIwasua8jKPOQ7e 4zAuH3BeAatdZXG/oS3W8kjde+Axc28hFgMejxPXuC/QBHfD0lqd/d2NdHT8sqZR rKpbaWetXcrduXshh6lLMJV9p1CfToqlHBX8Pq28+c51cQTYwqLHmzHRnB2z8Kq8 4inAwiJed14jfGMgGstTrAcsKB5BB0qN2kjXR55Tb279aTj1k/DDn72gUw/abjZt r7hdJmSHjPKeZh20bRdA0UFkAWoVEC5EnygqyqVU+ozFEMg5upqHWZ8koyEMyvTr HjRcQ/qL4dHWy9zwrsexcpXVn5VwR4fSt1btLwOw8XHzer2IYU6bwiUY6z1VAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUWZsH/Cj0Nnko/qZFhctZWQ8482UwHwYDVR0j BBgwFoAUUHzRq+uRGVTzOhii35oxzjINr5cwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h ZmNhZjI3ZC02NGU5LTQ3NGItYTczYi0zNWFkYmU5YjJmMDEvMC81MDdDRDFBQkVC OTExOTU0RjMzQTE4QTJERjlBMzFDRTMyMERBRjk3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNTA3Q0QxQUJFQjkxMTk1NEYzM0ExOEEyREY5QTMxQ0UzMjBE QUY5Ny5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYWZjYWYyN2QtNjRlOS00NzRiLWE3 M2ItMzVhZGJlOWIyZjAxLzAvNTA3Q0QxQUJFQjkxMTk1NEYzM0ExOEEyREY5QTMx Q0UzMjBEQUY5Ny5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKQH1uqROgjBgFK2Vv0YPIwyCI1DOAkCcJH9 0yob7vlWkIROzImuwWI3iaHd/zWsg6pWheS/Pjr9yDmxECUbsVsowWRfggbE5Fhx o86txcZImuvsGiaeWEGKSnE33dNFPGAK8flqLCQ6FKuEUBsi5GLy0fXwA9QE3gnl IpaKM3350Uc2lk4CkhAfCvovWgPktE2OKQ5bVhGwIWKFAxa92UXpEsI+VJ8Eo3qo 8zC75XlmDJBXpk+NRSEeKD+KLhKAguMYxc0u20SJN4qsT3OKV+KZWzRCgelWtq0O eEtjSytRkyn+3q9oc7Xmf0TQo9fxtqe9VRedpTWkTio5hHBO064= -----END CERTIFICATE-----Generated at Wed Dec 3 14:42:22 2025 by rpki-client