This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/bf66bfa6-dc4c-4108-932c-204b62e86272/0/7F9ECE743A3074E61F56CD11161AA58A6BB4092C.mft File: 7F9ECE743A3074E61F56CD11161AA58A6BB4092C.mft (raw, json) Hash identifier: 0fyS6WVLOsccRhTro4hngHhIwyj+JYI04MprifRts0Y= Subject key identifier: 38:10:D2:AC:E6:5C:FE:80:92:76:F6:C6:41:0D:E9:28:30:BB:F9:15 Authority key identifier: 7F:9E:CE:74:3A:30:74:E6:1F:56:CD:11:16:1A:A5:8A:6B:B4:09:2C Certificate issuer: /CN=7F9ECE743A3074E61F56CD11161AA58A6BB4092C Certificate serial: 486FE6DF4C775CB8DE2556E4C4C1EBE94383EF93 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7F9ECE743A3074E61F56CD11161AA58A6BB4092C.cer Subject info access: rsync://repo-rpki.idnic.net/repo/bf66bfa6-dc4c-4108-932c-204b62e86272/0/7F9ECE743A3074E61F56CD11161AA58A6BB4092C.mft Manifest number: 52 Signing time: Wed 03 Dec 2025 04:03:00 +0000 Manifest this update: Wed 03 Dec 2025 03:58:00 +0000 Manifest next update: Sat 06 Dec 2025 12:38:00 +0000 Files and hashes: 1: 7F9ECE743A3074E61F56CD11161AA58A6BB4092C.crl (hash: 1UBRoAUkCvG9kysvUmHgSaxfhoys4fu8OlcQoL27Edw=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/bf66bfa6-dc4c-4108-932c-204b62e86272/0/7F9ECE743A3074E61F56CD11161AA58A6BB4092C.crl rsync://repo-rpki.idnic.net/repo/bf66bfa6-dc4c-4108-932c-204b62e86272/0/7F9ECE743A3074E61F56CD11161AA58A6BB4092C.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7F9ECE743A3074E61F56CD11161AA58A6BB4092C.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 06 Dec 2025 12:07:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 48:6f:e6:df:4c:77:5c:b8:de:25:56:e4:c4:c1:eb:e9:43:83:ef:93 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7F9ECE743A3074E61F56CD11161AA58A6BB4092C Validity Not Before: Dec 3 03:58:00 2025 GMT Not After : Dec 6 12:38:00 2025 GMT Subject: CN=3810D2ACE65CFE809276F6C6410DE92830BBF915 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:40:1d:32:76:cd:d5:91:2e:3f:7d:1f:ba:d4: 8c:82:b2:19:aa:6e:14:3d:3c:dc:c5:28:60:86:2c: 79:6d:3e:d5:58:57:ec:f7:b5:06:8e:6e:8a:64:9b: ee:11:ad:83:cc:fa:87:ac:86:0b:47:b1:86:46:1f: 15:d6:34:46:1d:14:de:ca:d5:f2:2a:a0:a1:22:d3: 61:84:5f:ab:d7:b4:41:ac:e2:dc:00:71:7a:e0:13: 82:c1:a6:fe:c8:86:9f:31:df:e9:ca:37:04:4c:25: 1d:dd:51:35:cf:1c:38:19:57:21:d3:5b:9f:23:08: 60:e7:43:95:4f:21:75:57:9c:bc:8e:cd:8b:1e:80: 8a:84:0d:2f:e0:73:fe:c8:b6:5c:b1:35:13:e7:c1: a4:a6:f6:08:51:ea:dd:cf:41:dd:8e:94:08:c7:9d: 52:c1:af:ba:5e:f3:b9:a2:7f:ae:94:6e:a3:9e:5a: 6e:22:da:53:6f:a8:ba:a8:31:50:cc:6a:f0:32:63: aa:25:6d:6b:89:21:fd:57:11:35:e8:bb:26:2f:27: 88:f2:ba:5c:f7:bf:97:77:e5:6b:32:79:f2:1f:02: 32:3d:63:42:0a:39:97:3c:a2:ec:43:1e:07:02:47: 92:49:da:2e:ae:a7:ee:f1:44:e7:03:f7:24:53:51: 27:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:10:D2:AC:E6:5C:FE:80:92:76:F6:C6:41:0D:E9:28:30:BB:F9:15 X509v3 Authority Key Identifier: keyid:7F:9E:CE:74:3A:30:74:E6:1F:56:CD:11:16:1A:A5:8A:6B:B4:09:2C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/bf66bfa6-dc4c-4108-932c-204b62e86272/0/7F9ECE743A3074E61F56CD11161AA58A6BB4092C.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7F9ECE743A3074E61F56CD11161AA58A6BB4092C.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/bf66bfa6-dc4c-4108-932c-204b62e86272/0/7F9ECE743A3074E61F56CD11161AA58A6BB4092C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 47:d4:16:c7:a1:80:6b:46:5e:71:1f:36:b7:a3:fe:66:4e:79: fb:f5:dd:2a:d0:60:44:95:fa:c4:7e:e6:d2:6f:94:18:40:56: 25:4f:f7:5b:49:32:a5:34:f8:0c:36:a8:75:e6:40:fe:23:29: e1:44:f0:01:9b:9b:43:70:51:44:7b:f6:ad:2f:42:9d:20:f0: 59:21:83:05:22:43:02:80:9a:72:f0:14:da:24:19:c1:29:b8: 2d:11:2d:f3:e0:4c:b2:d9:29:3f:6e:d5:3a:7f:d0:9a:6c:8f: 7b:28:be:48:99:67:62:45:06:19:b6:6f:9c:2c:d9:96:0a:42: 97:53:66:66:91:46:32:ab:4c:ff:fc:09:0b:74:84:15:a0:60: dc:7b:b1:7b:bc:da:a7:0b:b6:a4:27:a4:33:b9:0b:68:54:6a: 83:6f:fa:37:cf:41:a6:05:ea:40:f6:0a:78:9f:b4:cb:0a:0c: a8:d5:1d:a3:87:f4:56:a8:d2:65:7f:8d:d3:4a:8d:1d:b9:65: d8:7d:68:61:ff:5d:7d:b2:a6:67:9f:4f:73:fe:88:1e:17:8e: e1:11:b1:a0:05:c0:79:8d:66:18:4a:5d:f5:91:fa:e0:bc:3a: c0:cd:c7:43:9a:af:f3:11:26:01:b2:68:9b:a8:c1:c9:ba:1e: aa:ee:0c:56 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUSG/m30x3XLjeJVbkxMHr6UOD75MwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoN0Y5RUNFNzQzQTMwNzRFNjFGNTZDRDExMTYxQUE1OEE2 QkI0MDkyQzAeFw0yNTEyMDMwMzU4MDBaFw0yNTEyMDYxMjM4MDBaMDMxMTAvBgNV BAMTKDM4MTBEMkFDRTY1Q0ZFODA5Mjc2RjZDNjQxMERFOTI4MzBCQkY5MTUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/QB0yds3VkS4/fR+61IyCshmq bhQ9PNzFKGCGLHltPtVYV+z3tQaObopkm+4RrYPM+oeshgtHsYZGHxXWNEYdFN7K 1fIqoKEi02GEX6vXtEGs4twAcXrgE4LBpv7Ihp8x3+nKNwRMJR3dUTXPHDgZVyHT W58jCGDnQ5VPIXVXnLyOzYsegIqEDS/gc/7ItlyxNRPnwaSm9ghR6t3PQd2OlAjH nVLBr7pe87mif66UbqOeWm4i2lNvqLqoMVDMavAyY6olbWuJIf1XETXouyYvJ4jy ulz3v5d35WsyefIfAjI9Y0IKOZc8ouxDHgcCR5JJ2i6up+7xROcD9yRTUSf/AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUOBDSrOZc/oCSdvbGQQ3pKDC7+RUwHwYDVR0j BBgwFoAUf57OdDowdOYfVs0RFhqlimu0CSwwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i ZjY2YmZhNi1kYzRjLTQxMDgtOTMyYy0yMDRiNjJlODYyNzIvMC83RjlFQ0U3NDNB MzA3NEU2MUY1NkNEMTExNjFBQTU4QTZCQjQwOTJDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvN0Y5RUNFNzQzQTMwNzRFNjFGNTZDRDExMTYxQUE1OEE2QkI0 MDkyQy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYmY2NmJmYTYtZGM0Yy00MTA4LTkz MmMtMjA0YjYyZTg2MjcyLzAvN0Y5RUNFNzQzQTMwNzRFNjFGNTZDRDExMTYxQUE1 OEE2QkI0MDkyQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEfUFsehgGtGXnEfNrej/mZOefv13SrQYESV +sR+5tJvlBhAViVP91tJMqU0+Aw2qHXmQP4jKeFE8AGbm0NwUUR79q0vQp0g8Fkh gwUiQwKAmnLwFNokGcEpuC0RLfPgTLLZKT9u1Tp/0Jpsj3sovkiZZ2JFBhm2b5ws 2ZYKQpdTZmaRRjKrTP/8CQt0hBWgYNx7sXu82qcLtqQnpDO5C2hUaoNv+jfPQaYF 6kD2CniftMsKDKjVHaOH9Fao0mV/jdNKjR25Zdh9aGH/XX2ypmefT3P+iB4XjuER saAFwHmNZhhKXfWR+uC8OsDNx0Oar/MRJgGyaJuowcm6HqruDFY= -----END CERTIFICATE-----Generated at Wed Dec 3 14:42:25 2025 by rpki-client