This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/d04d6427-3f03-4d21-b8cc-bbfd2a3f8c33/0/7FD3F92F13241B80062CC31B0EC8A3D129871D90.mft File: 7FD3F92F13241B80062CC31B0EC8A3D129871D90.mft (raw, json) Hash identifier: WcvRi9WubdLk4yTQbLov32bTqBD/4Ijzk3xNM29dUqs= Subject key identifier: B2:A2:25:4C:D9:97:9D:B8:14:9F:0E:F0:4E:42:EE:12:E0:F5:41:5E Authority key identifier: 7F:D3:F9:2F:13:24:1B:80:06:2C:C3:1B:0E:C8:A3:D1:29:87:1D:90 Certificate issuer: /CN=7FD3F92F13241B80062CC31B0EC8A3D129871D90 Certificate serial: 46D7F5ECBF5A8EDF6B90AE0FE5D9719BB4F664EF Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7FD3F92F13241B80062CC31B0EC8A3D129871D90.cer Subject info access: rsync://repo-rpki.idnic.net/repo/d04d6427-3f03-4d21-b8cc-bbfd2a3f8c33/0/7FD3F92F13241B80062CC31B0EC8A3D129871D90.mft Manifest number: 03AB Signing time: Mon 01 Dec 2025 20:21:27 +0000 Manifest this update: Mon 01 Dec 2025 20:16:27 +0000 Manifest next update: Fri 05 Dec 2025 00:25:27 +0000 Files and hashes: 1: 3130332e3136342e3133362e302f32332d3234203d3e203137393935.roa (hash: pfyWIoLnfhreu/uz7HLcqt4VfjgUWRecSpJkmtZIEHI=) 2: 7FD3F92F13241B80062CC31B0EC8A3D129871D90.crl (hash: IZ+TxBNV05WGyEveHiqh5Jjau5plHfyD7J33E569c3Y=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/d04d6427-3f03-4d21-b8cc-bbfd2a3f8c33/0/7FD3F92F13241B80062CC31B0EC8A3D129871D90.crl rsync://repo-rpki.idnic.net/repo/d04d6427-3f03-4d21-b8cc-bbfd2a3f8c33/0/7FD3F92F13241B80062CC31B0EC8A3D129871D90.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7FD3F92F13241B80062CC31B0EC8A3D129871D90.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 05 Dec 2025 00:25:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 46:d7:f5:ec:bf:5a:8e:df:6b:90:ae:0f:e5:d9:71:9b:b4:f6:64:ef Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7FD3F92F13241B80062CC31B0EC8A3D129871D90 Validity Not Before: Dec 1 20:16:27 2025 GMT Not After : Dec 5 00:25:27 2025 GMT Subject: CN=B2A2254CD9979DB8149F0EF04E42EE12E0F5415E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:b9:37:15:70:8d:dc:de:04:13:99:75:ee:72: ac:bd:8a:d2:5b:28:0a:04:c9:8f:99:86:e4:37:bc: 02:2f:42:70:7d:13:17:85:f7:35:b3:2d:21:ff:10: 6d:27:4b:bf:f1:82:46:19:0f:5f:74:c2:cf:91:8e: 3b:43:7b:2c:c7:8a:4c:52:f7:37:d4:76:c1:a1:81: 76:f8:e8:3b:72:5d:44:0d:12:02:51:c1:c5:ce:52: e5:6b:1e:d5:7a:5e:14:25:4b:36:bc:86:d9:57:2d: e9:9b:4a:8b:75:b7:ba:80:57:f0:df:c1:f5:8b:fd: 68:b5:60:10:21:ee:03:4c:b5:a3:c4:dd:8f:59:3d: d6:18:7d:f7:4e:f9:e0:fb:0f:dc:5f:5b:05:3d:fb: 87:48:fd:5a:ad:fb:80:72:8a:60:1d:70:b1:be:46: a0:fb:e1:28:61:65:f7:1a:37:36:19:ae:36:77:b9: ec:31:cd:c4:6e:1d:95:e2:4a:cf:d6:ce:af:22:c6: 18:39:ba:7c:43:f6:94:14:ff:86:57:f4:14:2f:c9: b8:5f:7a:8a:2b:c2:49:1f:26:8a:9b:24:88:34:b1: 5f:be:65:fa:0c:80:d4:7c:20:40:cc:8f:c0:09:33: f5:f8:75:6c:dc:92:a6:de:75:7f:b9:9a:f1:ad:56: 51:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:A2:25:4C:D9:97:9D:B8:14:9F:0E:F0:4E:42:EE:12:E0:F5:41:5E X509v3 Authority Key Identifier: keyid:7F:D3:F9:2F:13:24:1B:80:06:2C:C3:1B:0E:C8:A3:D1:29:87:1D:90 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/d04d6427-3f03-4d21-b8cc-bbfd2a3f8c33/0/7FD3F92F13241B80062CC31B0EC8A3D129871D90.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7FD3F92F13241B80062CC31B0EC8A3D129871D90.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d04d6427-3f03-4d21-b8cc-bbfd2a3f8c33/0/7FD3F92F13241B80062CC31B0EC8A3D129871D90.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 65:27:9f:db:5e:a5:ce:80:49:18:1c:eb:25:45:d6:63:c9:0a: a9:ff:25:eb:76:60:5c:11:4c:cb:99:48:c3:21:bf:18:e9:4d: c3:35:60:39:34:b0:a8:eb:64:22:b2:84:4c:87:e6:64:38:52: 80:75:50:1c:d7:ee:c2:24:c8:fc:a0:32:ff:15:a4:af:f9:23: b9:8c:08:10:97:bb:dc:cf:10:91:86:63:92:5b:b6:c6:cf:8b: 31:73:b7:ea:d0:45:60:cf:0b:f6:78:87:3d:20:6f:67:b6:b8: 4e:6c:b3:40:33:b8:20:09:e5:4b:90:e8:a5:8f:e5:c0:3e:be: 49:c4:b7:ca:3b:8c:b1:1b:e2:84:e2:18:7b:2c:d2:6d:c6:ff: 80:d8:19:7f:25:a6:f5:90:55:d7:86:fe:77:da:c6:21:19:67: 25:ad:f5:5e:70:53:24:55:87:8e:9a:2d:cc:f0:cc:aa:d8:4c: 11:16:7d:fc:d1:e2:9b:df:81:91:d7:b3:e6:5f:03:3d:50:5e: b8:ec:87:24:3f:d1:57:fe:22:bf:5d:c3:9b:4c:ef:33:b6:b9: 1e:9e:73:48:f3:f5:55:14:df:a1:ad:17:27:14:21:67:22:69: 70:0e:07:ee:88:11:ea:ec:b8:e2:0a:7a:c8:35:e4:c9:e3:a8: 74:18:2f:25 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIURtf17L9ajt9rkK4P5dlxm7T2ZO8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoN0ZEM0Y5MkYxMzI0MUI4MDA2MkNDMzFCMEVDOEEzRDEy OTg3MUQ5MDAeFw0yNTEyMDEyMDE2MjdaFw0yNTEyMDUwMDI1MjdaMDMxMTAvBgNV BAMTKEIyQTIyNTRDRDk5NzlEQjgxNDlGMEVGMDRFNDJFRTEyRTBGNTQxNUUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC5uTcVcI3c3gQTmXXucqy9itJb KAoEyY+ZhuQ3vAIvQnB9ExeF9zWzLSH/EG0nS7/xgkYZD190ws+RjjtDeyzHikxS 9zfUdsGhgXb46DtyXUQNEgJRwcXOUuVrHtV6XhQlSza8htlXLembSot1t7qAV/Df wfWL/Wi1YBAh7gNMtaPE3Y9ZPdYYffdO+eD7D9xfWwU9+4dI/Vqt+4ByimAdcLG+ RqD74ShhZfcaNzYZrjZ3uewxzcRuHZXiSs/Wzq8ixhg5unxD9pQU/4ZX9BQvybhf eoorwkkfJoqbJIg0sV++ZfoMgNR8IEDMj8AJM/X4dWzckqbedX+5mvGtVlE7AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUsqIlTNmXnbgUnw7wTkLuEuD1QV4wHwYDVR0j BBgwFoAUf9P5LxMkG4AGLMMbDsij0SmHHZAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k MDRkNjQyNy0zZjAzLTRkMjEtYjhjYy1iYmZkMmEzZjhjMzMvMC83RkQzRjkyRjEz MjQxQjgwMDYyQ0MzMUIwRUM4QTNEMTI5ODcxRDkwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvN0ZEM0Y5MkYxMzI0MUI4MDA2MkNDMzFCMEVDOEEzRDEyOTg3 MUQ5MC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZDA0ZDY0MjctM2YwMy00ZDIxLWI4 Y2MtYmJmZDJhM2Y4YzMzLzAvN0ZEM0Y5MkYxMzI0MUI4MDA2MkNDMzFCMEVDOEEz RDEyOTg3MUQ5MC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGUnn9tepc6ASRgc6yVF1mPJCqn/Jet2YFwR TMuZSMMhvxjpTcM1YDk0sKjrZCKyhEyH5mQ4UoB1UBzX7sIkyPygMv8VpK/5I7mM CBCXu9zPEJGGY5JbtsbPizFzt+rQRWDPC/Z4hz0gb2e2uE5ss0AzuCAJ5UuQ6KWP 5cA+vknEt8o7jLEb4oTiGHss0m3G/4DYGX8lpvWQVdeG/nfaxiEZZyWt9V5wUyRV h46aLczwzKrYTBEWffzR4pvfgZHXs+ZfAz1QXrjshyQ/0Vf+Ir9dw5tM7zO2uR6e c0jz9VUU36GtFycUIWciaXAOB+6IEersuOIKesg15MnjqHQYLyU= -----END CERTIFICATE-----Generated at Wed Dec 3 13:58:52 2025 by rpki-client