This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/bb9851b1-5a6d-4e75-9fff-c03a9c49cf69/0/D7F23D7B54890F0EECF550FFA42799B64D9BD4C9.mft File: D7F23D7B54890F0EECF550FFA42799B64D9BD4C9.mft (raw, json) Hash identifier: 12cgsqDHa3AIZLyixJmlG5LzLNBC8X5ErgTCt8g5hlo= Subject key identifier: 76:6E:E3:B2:47:84:E1:F2:7D:9A:08:0F:32:8D:2E:9F:90:FE:5E:E8 Authority key identifier: D7:F2:3D:7B:54:89:0F:0E:EC:F5:50:FF:A4:27:99:B6:4D:9B:D4:C9 Certificate issuer: /CN=D7F23D7B54890F0EECF550FFA42799B64D9BD4C9 Certificate serial: 5855633012E6980AA8EA325E873AACE7E5D25CFC Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D7F23D7B54890F0EECF550FFA42799B64D9BD4C9.cer Subject info access: rsync://repo-rpki.idnic.net/repo/bb9851b1-5a6d-4e75-9fff-c03a9c49cf69/0/D7F23D7B54890F0EECF550FFA42799B64D9BD4C9.mft Manifest number: 0126 Signing time: Tue 02 Dec 2025 19:41:25 +0000 Manifest this update: Tue 02 Dec 2025 19:36:25 +0000 Manifest next update: Sat 06 Dec 2025 07:19:25 +0000 Files and hashes: 1: D7F23D7B54890F0EECF550FFA42799B64D9BD4C9.crl (hash: /5QCM9zkaCxuC7TvyObu7LqBKZC4IZuwogvl5MdMrm0=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/bb9851b1-5a6d-4e75-9fff-c03a9c49cf69/0/D7F23D7B54890F0EECF550FFA42799B64D9BD4C9.crl rsync://repo-rpki.idnic.net/repo/bb9851b1-5a6d-4e75-9fff-c03a9c49cf69/0/D7F23D7B54890F0EECF550FFA42799B64D9BD4C9.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D7F23D7B54890F0EECF550FFA42799B64D9BD4C9.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 06 Dec 2025 07:19:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 58:55:63:30:12:e6:98:0a:a8:ea:32:5e:87:3a:ac:e7:e5:d2:5c:fc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D7F23D7B54890F0EECF550FFA42799B64D9BD4C9 Validity Not Before: Dec 2 19:36:25 2025 GMT Not After : Dec 6 07:19:25 2025 GMT Subject: CN=766EE3B24784E1F27D9A080F328D2E9F90FE5EE8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:5e:8d:ff:97:94:30:84:78:6c:3f:e0:7c:a7: a4:4f:bf:7a:64:ab:89:43:97:08:ee:bd:c5:82:09: 8c:5f:5d:1a:76:1a:6b:96:61:4b:a7:6d:24:70:ca: e7:4c:26:3b:11:2c:e9:36:34:b8:fb:0c:ac:9a:0f: 61:fa:3e:b5:27:5e:fb:0c:0a:9f:9d:39:fa:4d:50: ed:ff:0e:99:c3:a6:51:34:1f:01:d8:11:6f:a2:9e: 1e:d8:02:ad:b5:87:90:e3:3c:cc:e8:7e:a6:9f:50: 74:46:87:aa:60:1d:55:de:53:ed:32:88:42:fa:56: 90:8d:cd:4f:8c:5a:a7:6c:c3:fb:96:22:f5:10:db: c7:73:96:db:e5:1e:f3:5b:c6:8b:cd:42:cb:21:b6: e0:0f:f2:37:5f:49:f3:e3:5d:bf:72:98:3f:e9:0c: e8:fa:8d:eb:7a:11:09:3d:a4:18:2b:e6:3b:89:ce: 24:b7:6a:a0:c0:f4:9e:df:55:55:ad:0d:3d:75:6b: b9:64:31:45:6d:91:37:2b:ec:42:ad:e5:71:2a:f5: 53:5b:76:58:0d:57:72:78:14:f0:06:65:87:be:74: 67:51:9d:eb:c8:76:9d:c0:46:e0:91:a4:a2:df:25: 46:42:1d:3c:30:e4:7a:d2:a8:a0:0b:81:ab:ad:cc: 4c:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 76:6E:E3:B2:47:84:E1:F2:7D:9A:08:0F:32:8D:2E:9F:90:FE:5E:E8 X509v3 Authority Key Identifier: keyid:D7:F2:3D:7B:54:89:0F:0E:EC:F5:50:FF:A4:27:99:B6:4D:9B:D4:C9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/bb9851b1-5a6d-4e75-9fff-c03a9c49cf69/0/D7F23D7B54890F0EECF550FFA42799B64D9BD4C9.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D7F23D7B54890F0EECF550FFA42799B64D9BD4C9.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/bb9851b1-5a6d-4e75-9fff-c03a9c49cf69/0/D7F23D7B54890F0EECF550FFA42799B64D9BD4C9.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption dc:2a:f8:d5:f0:ee:a7:22:4b:cf:bc:f3:59:df:a9:10:9c:04: ef:ce:c6:0d:a2:ff:c5:1f:d8:df:ec:f5:9b:e2:6a:0c:dd:e1: 57:d3:05:83:d6:ed:ea:0e:86:b1:83:fb:e5:6d:81:70:77:f9: 0d:b3:c8:1c:c7:4a:8c:12:2d:f6:71:53:df:a0:81:f0:4e:df: b4:ec:8e:ad:ed:4e:a2:44:04:b9:69:8c:17:15:7b:77:57:d7: 87:7c:0a:07:f5:c2:d0:6a:b7:b5:eb:a1:e3:0f:bf:ac:cc:f7: df:c5:07:3f:9d:85:eb:28:99:c8:59:f5:a8:8b:95:44:b1:f2: ac:11:a2:95:ce:aa:24:db:2c:6f:0d:b1:34:f3:eb:8a:ba:d1: e0:7e:93:07:a3:25:6f:ea:e4:25:a1:ca:8b:1a:c7:e4:1b:e6: 22:ba:4e:16:72:b9:92:da:5e:4c:cb:fc:61:53:a8:19:fa:b3: c8:d3:fe:ab:e4:a8:83:df:7c:5e:07:3d:16:1a:3d:e9:a1:d5: 91:6b:e6:34:e5:0a:47:65:b3:08:1b:f6:23:6c:5b:d9:a2:56: 59:2f:a3:36:f2:07:47:92:99:d0:5a:8c:bf:69:78:e2:90:81: 40:01:9e:0b:cb:64:db:d7:e6:05:d7:7a:7e:e7:0a:dd:6a:4c: e6:fb:b1:79 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUWFVjMBLmmAqo6jJehzqs5+XSXPwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDdGMjNEN0I1NDg5MEYwRUVDRjU1MEZGQTQyNzk5QjY0 RDlCRDRDOTAeFw0yNTEyMDIxOTM2MjVaFw0yNTEyMDYwNzE5MjVaMDMxMTAvBgNV BAMTKDc2NkVFM0IyNDc4NEUxRjI3RDlBMDgwRjMyOEQyRTlGOTBGRTVFRTgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCeXo3/l5QwhHhsP+B8p6RPv3pk q4lDlwjuvcWCCYxfXRp2GmuWYUunbSRwyudMJjsRLOk2NLj7DKyaD2H6PrUnXvsM Cp+dOfpNUO3/DpnDplE0HwHYEW+inh7YAq21h5DjPMzofqafUHRGh6pgHVXeU+0y iEL6VpCNzU+MWqdsw/uWIvUQ28dzltvlHvNbxovNQsshtuAP8jdfSfPjXb9ymD/p DOj6jet6EQk9pBgr5juJziS3aqDA9J7fVVWtDT11a7lkMUVtkTcr7EKt5XEq9VNb dlgNV3J4FPAGZYe+dGdRnevIdp3ARuCRpKLfJUZCHTww5HrSqKALgautzEzPAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUdm7jskeE4fJ9mggPMo0un5D+XugwHwYDVR0j BBgwFoAU1/I9e1SJDw7s9VD/pCeZtk2b1MkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i Yjk4NTFiMS01YTZkLTRlNzUtOWZmZi1jMDNhOWM0OWNmNjkvMC9EN0YyM0Q3QjU0 ODkwRjBFRUNGNTUwRkZBNDI3OTlCNjREOUJENEM5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRDdGMjNEN0I1NDg5MEYwRUVDRjU1MEZGQTQyNzk5QjY0RDlC RDRDOS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYmI5ODUxYjEtNWE2ZC00ZTc1LTlm ZmYtYzAzYTljNDljZjY5LzAvRDdGMjNEN0I1NDg5MEYwRUVDRjU1MEZGQTQyNzk5 QjY0RDlCRDRDOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBANwq+NXw7qciS8+881nfqRCcBO/Oxg2i/8Uf 2N/s9Zviagzd4VfTBYPW7eoOhrGD++VtgXB3+Q2zyBzHSowSLfZxU9+ggfBO37Ts jq3tTqJEBLlpjBcVe3dX14d8Cgf1wtBqt7XroeMPv6zM99/FBz+dhesomchZ9aiL lUSx8qwRopXOqiTbLG8NsTTz64q60eB+kwejJW/q5CWhyosax+Qb5iK6ThZyuZLa XkzL/GFTqBn6s8jT/qvkqIPffF4HPRYaPemh1ZFr5jTlCkdlswgb9iNsW9miVlkv ozbyB0eSmdBajL9peOKQgUABngvLZNvX5gXXen7nCt1qTOb7sXk= -----END CERTIFICATE-----Generated at Wed Dec 3 15:30:38 2025 by rpki-client