This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/ca75b741-846a-4330-9659-05ffe82698ee/0/7FAD2077691F807236683910594F23BA68280CD9.mft File: 7FAD2077691F807236683910594F23BA68280CD9.mft (raw, json) Hash identifier: 3rwajA3YkK4Yg4Ds0bFn8EB2XBemjuURDTAZI7FvMxI= Subject key identifier: 64:33:ED:BA:0D:6D:2F:14:BF:AE:00:20:0E:7D:23:4C:86:99:ED:C5 Authority key identifier: 7F:AD:20:77:69:1F:80:72:36:68:39:10:59:4F:23:BA:68:28:0C:D9 Certificate issuer: /CN=7FAD2077691F807236683910594F23BA68280CD9 Certificate serial: 5D902A7C1A93D06BC591D9BD1AFB5E0B3DDC526B Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7FAD2077691F807236683910594F23BA68280CD9.cer Subject info access: rsync://repo-rpki.idnic.net/repo/ca75b741-846a-4330-9659-05ffe82698ee/0/7FAD2077691F807236683910594F23BA68280CD9.mft Manifest number: 052A Signing time: Mon 01 Dec 2025 04:22:02 +0000 Manifest this update: Mon 01 Dec 2025 04:17:02 +0000 Manifest next update: Thu 04 Dec 2025 13:03:02 +0000 Files and hashes: 1: 3130332e34342e3134392e302f32342d3234203d3e20313333383033.roa (hash: +izo906qJR0//zszVUjaR0jf7ZrrEtZEmo5pUlJJNLQ=) 2: 323030313a6466323a376638303a3a2f34382d3438203d3e20313333383033.roa (hash: tl64BNKIeWPiWplSwphcJa2kjFiO8+8RBPcNGp3Fo5U=) 3: 7FAD2077691F807236683910594F23BA68280CD9.crl (hash: UI0LUgALUGe9G5CwhSOCvf/YEuDx1EOuCIp3pzINAb4=) 4: 3130332e3134372e33302e302f32342d3234203d3e20313333383033.roa (hash: inn5/pTXe326JcI/eQLFFh0GJuSiHNACA3LyQlZzv0k=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/ca75b741-846a-4330-9659-05ffe82698ee/0/7FAD2077691F807236683910594F23BA68280CD9.crl rsync://repo-rpki.idnic.net/repo/ca75b741-846a-4330-9659-05ffe82698ee/0/7FAD2077691F807236683910594F23BA68280CD9.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7FAD2077691F807236683910594F23BA68280CD9.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 04 Dec 2025 13:03:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5d:90:2a:7c:1a:93:d0:6b:c5:91:d9:bd:1a:fb:5e:0b:3d:dc:52:6b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7FAD2077691F807236683910594F23BA68280CD9 Validity Not Before: Dec 1 04:17:02 2025 GMT Not After : Dec 4 13:03:02 2025 GMT Subject: CN=6433EDBA0D6D2F14BFAE00200E7D234C8699EDC5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:ed:70:77:04:fb:8e:09:ea:7a:03:81:2b:c1: 23:88:0e:d4:c3:ab:ea:5b:df:d3:a5:c0:ea:4f:ed: b7:3a:e5:c4:a8:79:47:18:02:4d:e0:49:7f:f0:ae: 56:10:fa:ab:99:61:4e:52:6b:ca:22:16:10:a4:37: 5a:b1:1f:a5:e9:ca:33:e0:b7:e5:08:91:eb:12:dd: 0e:18:58:15:7f:2c:8a:86:4c:97:ef:d9:01:2c:61: 4d:9b:2a:b0:bf:39:7e:04:cf:93:9b:ed:13:b4:26: 36:b8:bc:71:ba:42:72:36:c4:6c:83:15:9f:39:ac: af:e1:98:9d:63:2e:5d:4a:4f:2e:86:23:1f:3d:82: b8:e0:41:9c:6f:43:31:42:de:fc:fc:47:b4:f8:29: e2:12:0c:c5:37:3d:6c:cc:ea:44:59:db:04:1f:ca: 23:2f:ed:99:6c:65:96:03:94:b7:d0:c1:4d:46:20: eb:79:7b:d9:f3:88:21:07:22:0d:3a:fc:7f:25:8e: 8e:32:9b:16:db:53:4a:51:11:1f:92:45:8d:fe:a8: 52:1d:05:60:7f:93:3f:a6:a1:4e:c2:3b:f1:9a:87: 9b:0e:23:5a:9b:dc:99:d0:69:bb:b9:54:74:b9:ee: 8f:cc:1b:8a:1b:c7:6a:f6:c1:2d:19:f0:1f:33:04: 28:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:33:ED:BA:0D:6D:2F:14:BF:AE:00:20:0E:7D:23:4C:86:99:ED:C5 X509v3 Authority Key Identifier: keyid:7F:AD:20:77:69:1F:80:72:36:68:39:10:59:4F:23:BA:68:28:0C:D9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/ca75b741-846a-4330-9659-05ffe82698ee/0/7FAD2077691F807236683910594F23BA68280CD9.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7FAD2077691F807236683910594F23BA68280CD9.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ca75b741-846a-4330-9659-05ffe82698ee/0/7FAD2077691F807236683910594F23BA68280CD9.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 42:13:2b:aa:2f:cc:f5:9e:86:ac:36:6e:17:2d:ad:09:1b:d3: eb:c3:4d:42:ee:8b:fa:54:d0:89:76:4f:77:e0:25:d4:53:e0: 4c:86:70:be:0c:2a:43:75:80:9e:98:9c:fc:a2:07:ea:6a:c4: f4:31:07:e8:75:06:ee:a6:71:e7:79:6b:9a:40:7f:a0:c0:ca: cc:cf:13:ba:34:eb:a5:a7:77:bc:98:7c:fa:97:07:34:d9:f0: 5d:88:3a:e2:8c:1e:ec:5e:84:67:f7:43:37:c6:9f:a9:0d:4d: a1:8b:84:cb:0e:e6:c3:1c:e4:04:26:22:98:48:fc:37:f6:63: 82:4e:7b:9b:b9:3e:55:25:3b:8a:a1:10:d3:54:31:55:dd:e7: 16:b4:71:cf:cc:1c:c8:96:bd:c7:e1:e3:13:ff:0c:6b:8f:34: a0:67:80:d3:12:b0:c5:23:0f:51:fc:b8:8c:59:cd:3f:ef:34: f6:97:22:91:ce:38:01:5a:70:05:3f:0b:9d:27:f0:f5:c8:a4: 78:9b:c0:f2:9c:6b:e3:ed:83:ad:dc:b2:a0:dc:98:94:db:18: 25:66:8e:6a:cb:73:ab:e0:ee:98:3e:a9:ab:a3:61:9b:40:d7: 16:28:f0:eb:e0:65:53:62:78:f2:44:14:40:0f:4c:04:84:11: f6:55:e5:2f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUXZAqfBqT0GvFkdm9GvteCz3cUmswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoN0ZBRDIwNzc2OTFGODA3MjM2NjgzOTEwNTk0RjIzQkE2 ODI4MENEOTAeFw0yNTEyMDEwNDE3MDJaFw0yNTEyMDQxMzAzMDJaMDMxMTAvBgNV BAMTKDY0MzNFREJBMEQ2RDJGMTRCRkFFMDAyMDBFN0QyMzRDODY5OUVEQzUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCs7XB3BPuOCep6A4ErwSOIDtTD q+pb39OlwOpP7bc65cSoeUcYAk3gSX/wrlYQ+quZYU5Sa8oiFhCkN1qxH6XpyjPg t+UIkesS3Q4YWBV/LIqGTJfv2QEsYU2bKrC/OX4Ez5Ob7RO0Jja4vHG6QnI2xGyD FZ85rK/hmJ1jLl1KTy6GIx89grjgQZxvQzFC3vz8R7T4KeISDMU3PWzM6kRZ2wQf yiMv7ZlsZZYDlLfQwU1GIOt5e9nziCEHIg06/H8ljo4ymxbbU0pRER+SRY3+qFId BWB/kz+moU7CO/Gah5sOI1qb3JnQabu5VHS57o/MG4obx2r2wS0Z8B8zBCjFAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUZDPtug1tLxS/rgAgDn0jTIaZ7cUwHwYDVR0j BBgwFoAUf60gd2kfgHI2aDkQWU8jumgoDNkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j YTc1Yjc0MS04NDZhLTQzMzAtOTY1OS0wNWZmZTgyNjk4ZWUvMC83RkFEMjA3NzY5 MUY4MDcyMzY2ODM5MTA1OTRGMjNCQTY4MjgwQ0Q5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvN0ZBRDIwNzc2OTFGODA3MjM2NjgzOTEwNTk0RjIzQkE2ODI4 MENEOS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vY2E3NWI3NDEtODQ2YS00MzMwLTk2 NTktMDVmZmU4MjY5OGVlLzAvN0ZBRDIwNzc2OTFGODA3MjM2NjgzOTEwNTk0RjIz QkE2ODI4MENEOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEITK6ovzPWehqw2bhctrQkb0+vDTULui/pU 0Il2T3fgJdRT4EyGcL4MKkN1gJ6YnPyiB+pqxPQxB+h1Bu6mced5a5pAf6DAyszP E7o066Wnd7yYfPqXBzTZ8F2IOuKMHuxehGf3QzfGn6kNTaGLhMsO5sMc5AQmIphI /Df2Y4JOe5u5PlUlO4qhENNUMVXd5xa0cc/MHMiWvcfh4xP/DGuPNKBngNMSsMUj D1H8uIxZzT/vNPaXIpHOOAFacAU/C50n8PXIpHibwPKca+Ptg63csqDcmJTbGCVm jmrLc6vg7pg+qaujYZtA1xYo8OvgZVNiePJEFEAPTASEEfZV5S8= -----END CERTIFICATE-----Generated at Wed Dec 3 13:59:49 2025 by rpki-client