This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/c3a5ffdc-151a-4aad-a2b7-432649de6dbe/0/B7260D30835B9D812F7044ECE96F4FB8F698379C.mft File: B7260D30835B9D812F7044ECE96F4FB8F698379C.mft (raw, json) Hash identifier: DKmUibnlSFlKX+o8wWu0NhM0pOK0KJr88mX8/YvqYmQ= Subject key identifier: 2D:D1:E3:AF:0C:60:F8:DD:7A:17:EB:91:D7:43:F6:9A:77:CC:B0:26 Authority key identifier: B7:26:0D:30:83:5B:9D:81:2F:70:44:EC:E9:6F:4F:B8:F6:98:37:9C Certificate issuer: /CN=B7260D30835B9D812F7044ECE96F4FB8F698379C Certificate serial: 17CC5FBB93308FDBC94E28F87E919CEAC8B7CB7E Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B7260D30835B9D812F7044ECE96F4FB8F698379C.cer Subject info access: rsync://repo-rpki.idnic.net/repo/c3a5ffdc-151a-4aad-a2b7-432649de6dbe/0/B7260D30835B9D812F7044ECE96F4FB8F698379C.mft Manifest number: 0364 Signing time: Wed 03 Dec 2025 08:51:52 +0000 Manifest this update: Wed 03 Dec 2025 08:46:52 +0000 Manifest next update: Sat 06 Dec 2025 09:36:52 +0000 Files and hashes: 1: 3130332e3231372e3230382e302f32322d3234203d3e203338373630.roa (hash: C1fWM39iM3F6U+59gsqeYJ83me8iwLln6AeCDUtsAG4=) 2: B7260D30835B9D812F7044ECE96F4FB8F698379C.crl (hash: YOAYSzjC5/gWScjQiWFiGqrDzWD1z5dmXnBDSQ0TtLc=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/c3a5ffdc-151a-4aad-a2b7-432649de6dbe/0/B7260D30835B9D812F7044ECE96F4FB8F698379C.crl rsync://repo-rpki.idnic.net/repo/c3a5ffdc-151a-4aad-a2b7-432649de6dbe/0/B7260D30835B9D812F7044ECE96F4FB8F698379C.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B7260D30835B9D812F7044ECE96F4FB8F698379C.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 06 Dec 2025 09:36:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 17:cc:5f:bb:93:30:8f:db:c9:4e:28:f8:7e:91:9c:ea:c8:b7:cb:7e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B7260D30835B9D812F7044ECE96F4FB8F698379C Validity Not Before: Dec 3 08:46:52 2025 GMT Not After : Dec 6 09:36:52 2025 GMT Subject: CN=2DD1E3AF0C60F8DD7A17EB91D743F69A77CCB026 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:fd:6c:39:8a:21:a2:09:44:28:11:69:93:51: ba:5b:92:d9:55:ab:1f:d8:a8:7b:79:40:aa:0d:46: bc:cf:f0:3e:3f:c4:68:a1:f4:aa:c7:02:35:4f:31: 36:9e:57:82:ac:30:bc:e9:9a:71:0f:08:42:14:4d: 57:48:69:3b:87:dd:e9:0d:88:e4:f6:9a:d0:41:2d: 2e:44:4c:6a:c1:c7:b0:d6:b4:84:c4:38:45:7e:f8: e3:d4:6a:e8:d6:67:61:0e:82:ae:6b:b6:c2:76:9f: 60:9d:10:6b:71:b2:bc:1f:09:0b:5e:59:80:18:95: 61:76:06:83:42:50:33:42:1c:8d:c0:4b:6e:c4:2a: a4:96:3d:aa:7f:8f:5a:75:bd:6e:28:39:3d:d4:cd: d8:15:cc:9f:da:60:0e:8f:6b:88:2a:8e:00:8a:ab: 9f:34:ad:ef:c8:d5:4f:91:db:8c:af:3f:70:29:ee: 4a:a9:13:fb:2c:84:2f:5f:0a:48:69:c7:58:78:69: 07:79:86:93:6c:d3:ea:b1:6d:ce:da:99:d8:e9:f9: a9:c5:e1:d5:94:17:ce:46:a1:58:b0:de:59:19:15: 7d:28:b6:94:fa:84:76:4c:e9:18:ed:8f:68:cf:77: e9:0a:90:4d:0c:83:22:b5:a8:e1:88:f6:e8:92:fd: f2:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:D1:E3:AF:0C:60:F8:DD:7A:17:EB:91:D7:43:F6:9A:77:CC:B0:26 X509v3 Authority Key Identifier: keyid:B7:26:0D:30:83:5B:9D:81:2F:70:44:EC:E9:6F:4F:B8:F6:98:37:9C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/c3a5ffdc-151a-4aad-a2b7-432649de6dbe/0/B7260D30835B9D812F7044ECE96F4FB8F698379C.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B7260D30835B9D812F7044ECE96F4FB8F698379C.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c3a5ffdc-151a-4aad-a2b7-432649de6dbe/0/B7260D30835B9D812F7044ECE96F4FB8F698379C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ac:0a:19:ee:c8:22:f8:5f:19:e3:2e:d9:53:f8:86:6d:45:09: ac:ed:dd:74:79:a8:fb:8a:10:62:52:ee:3d:eb:84:b9:8f:76: 78:a4:31:5e:71:68:33:15:73:f2:db:ad:3b:21:ff:08:cd:83: cc:68:b5:6d:7d:9b:d1:34:a5:66:41:ee:f7:a4:d4:cd:1f:60: 13:94:16:56:68:11:22:c9:7c:b1:0a:b1:dc:9e:f6:a8:c5:28: a6:16:bd:f1:ab:01:0e:40:93:73:c7:53:b6:95:0d:79:c8:53: 80:b0:dd:c7:80:b4:43:20:71:66:89:cb:de:8c:3d:db:80:e5: ad:c7:14:ef:41:25:bd:3b:8b:3e:5e:6e:d8:47:09:d4:2b:18: eb:62:31:2e:fd:f0:93:ed:03:18:a3:49:07:b8:ca:de:a6:7e: b5:2b:b8:cc:b5:41:40:99:f2:57:7f:a9:dd:66:a4:40:c6:36: 79:64:64:54:ba:99:01:61:1e:02:92:ee:4f:7c:33:ac:1e:75: 7c:38:ac:ba:ec:6c:09:fa:ac:95:ff:5d:da:21:21:ea:d5:79: 9f:f3:b9:e0:12:d3:49:45:2b:c8:99:89:51:ab:82:09:89:18: f7:7d:e9:54:b8:55:c7:d6:17:84:5f:11:82:34:91:4b:98:4e: 08:d9:90:41 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUF8xfu5Mwj9vJTij4fpGc6si3y34wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjcyNjBEMzA4MzVCOUQ4MTJGNzA0NEVDRTk2RjRGQjhG Njk4Mzc5QzAeFw0yNTEyMDMwODQ2NTJaFw0yNTEyMDYwOTM2NTJaMDMxMTAvBgNV BAMTKDJERDFFM0FGMEM2MEY4REQ3QTE3RUI5MUQ3NDNGNjlBNzdDQ0IwMjYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC7/Ww5iiGiCUQoEWmTUbpbktlV qx/YqHt5QKoNRrzP8D4/xGih9KrHAjVPMTaeV4KsMLzpmnEPCEIUTVdIaTuH3ekN iOT2mtBBLS5ETGrBx7DWtITEOEV++OPUaujWZ2EOgq5rtsJ2n2CdEGtxsrwfCQte WYAYlWF2BoNCUDNCHI3AS27EKqSWPap/j1p1vW4oOT3UzdgVzJ/aYA6Pa4gqjgCK q580re/I1U+R24yvP3Ap7kqpE/sshC9fCkhpx1h4aQd5hpNs0+qxbc7amdjp+anF 4dWUF85GoViw3lkZFX0otpT6hHZM6Rjtj2jPd+kKkE0MgyK1qOGI9uiS/fKnAgMB AAGjggI8MIICODAdBgNVHQ4EFgQULdHjrwxg+N16F+uR10P2mnfMsCYwHwYDVR0j BBgwFoAUtyYNMINbnYEvcETs6W9PuPaYN5wwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j M2E1ZmZkYy0xNTFhLTRhYWQtYTJiNy00MzI2NDlkZTZkYmUvMC9CNzI2MEQzMDgz NUI5RDgxMkY3MDQ0RUNFOTZGNEZCOEY2OTgzNzlDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQjcyNjBEMzA4MzVCOUQ4MTJGNzA0NEVDRTk2RjRGQjhGNjk4 Mzc5Qy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYzNhNWZmZGMtMTUxYS00YWFkLWEy YjctNDMyNjQ5ZGU2ZGJlLzAvQjcyNjBEMzA4MzVCOUQ4MTJGNzA0NEVDRTk2RjRG QjhGNjk4Mzc5Qy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKwKGe7IIvhfGeMu2VP4hm1FCazt3XR5qPuK EGJS7j3rhLmPdnikMV5xaDMVc/LbrTsh/wjNg8xotW19m9E0pWZB7vek1M0fYBOU FlZoESLJfLEKsdye9qjFKKYWvfGrAQ5Ak3PHU7aVDXnIU4Cw3ceAtEMgcWaJy96M PduA5a3HFO9BJb07iz5ebthHCdQrGOtiMS798JPtAxijSQe4yt6mfrUruMy1QUCZ 8ld/qd1mpEDGNnlkZFS6mQFhHgKS7k98M6wedXw4rLrsbAn6rJX/XdohIerVeZ/z ueAS00lFK8iZiVGrggmJGPd96VS4VcfWF4RfEYI0kUuYTgjZkEE= -----END CERTIFICATE-----Generated at Wed Dec 3 13:55:22 2025 by rpki-client