This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/d3f30e27-b95e-4d75-968d-538fb7918829/0/A7DCE7647FA775A7E9DF44EAEFAC52118F3669F8.mft File: A7DCE7647FA775A7E9DF44EAEFAC52118F3669F8.mft (raw, json) Hash identifier: q3VG/uYkWmzx27+vXn1FGcEvi1LUJTiCM7eGmscb0oQ= Subject key identifier: E5:E3:C6:44:61:92:E8:70:02:A3:89:21:99:47:9A:8B:54:5C:5F:12 Authority key identifier: A7:DC:E7:64:7F:A7:75:A7:E9:DF:44:EA:EF:AC:52:11:8F:36:69:F8 Certificate issuer: /CN=A7DCE7647FA775A7E9DF44EAEFAC52118F3669F8 Certificate serial: 0EEBC774FCAC04FF136FE50F07E2050067054B39 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A7DCE7647FA775A7E9DF44EAEFAC52118F3669F8.cer Subject info access: rsync://repo-rpki.idnic.net/repo/d3f30e27-b95e-4d75-968d-538fb7918829/0/A7DCE7647FA775A7E9DF44EAEFAC52118F3669F8.mft Manifest number: 01F3 Signing time: Mon 01 Dec 2025 17:21:31 +0000 Manifest this update: Mon 01 Dec 2025 17:16:31 +0000 Manifest next update: Fri 05 Dec 2025 04:23:31 +0000 Files and hashes: 1: A7DCE7647FA775A7E9DF44EAEFAC52118F3669F8.crl (hash: JEak/nRzv+bWAu3vgcLXnQ6pOF9Lr7Ukh2VSwmJS9Q8=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/d3f30e27-b95e-4d75-968d-538fb7918829/0/A7DCE7647FA775A7E9DF44EAEFAC52118F3669F8.crl rsync://repo-rpki.idnic.net/repo/d3f30e27-b95e-4d75-968d-538fb7918829/0/A7DCE7647FA775A7E9DF44EAEFAC52118F3669F8.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A7DCE7647FA775A7E9DF44EAEFAC52118F3669F8.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 05 Dec 2025 04:23:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0e:eb:c7:74:fc:ac:04:ff:13:6f:e5:0f:07:e2:05:00:67:05:4b:39 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A7DCE7647FA775A7E9DF44EAEFAC52118F3669F8 Validity Not Before: Dec 1 17:16:31 2025 GMT Not After : Dec 5 04:23:31 2025 GMT Subject: CN=E5E3C6446192E87002A3892199479A8B545C5F12 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:08:00:6b:19:4a:e9:6c:5a:b5:aa:0b:21:05: 26:45:cb:c4:d4:6b:ea:05:60:de:60:97:74:c4:95: a9:4c:c1:07:9a:6c:71:59:44:af:b1:3c:3c:26:54: 99:33:5b:f9:0d:2f:15:05:05:aa:4d:c5:d0:9d:1c: 3d:5f:13:c5:2d:cd:64:76:4c:87:07:f9:1e:bb:7c: 92:d6:7a:52:86:c6:e8:9b:82:84:c3:33:fb:de:26: e1:4d:a6:64:eb:21:07:0c:10:c8:63:e5:a8:0d:c4: 46:32:eb:6e:1f:f3:50:ea:b9:46:f0:5d:f9:71:18: 05:b9:12:63:d1:68:34:96:d2:fd:44:12:bd:39:9c: b3:5d:84:3a:03:2c:68:6f:0f:5a:30:23:19:b1:7d: 07:db:dd:aa:0a:fb:be:b3:f3:96:a8:91:64:2c:e0: 1d:23:b8:5b:aa:8a:c7:40:f9:c2:3d:9c:5a:14:ce: 38:f9:95:40:5a:2d:93:17:6b:19:d5:23:ed:12:c6: 9a:da:3f:cc:79:af:80:72:c3:27:bc:d7:b1:9b:32: f0:62:de:e5:af:bf:dd:6a:a1:05:cb:08:ef:37:c6: 44:1a:05:d3:00:be:92:be:4f:b2:a0:17:b2:e9:94: bb:d6:a7:2d:92:fe:49:5e:e0:87:d2:39:dc:93:44: e0:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:E3:C6:44:61:92:E8:70:02:A3:89:21:99:47:9A:8B:54:5C:5F:12 X509v3 Authority Key Identifier: keyid:A7:DC:E7:64:7F:A7:75:A7:E9:DF:44:EA:EF:AC:52:11:8F:36:69:F8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/d3f30e27-b95e-4d75-968d-538fb7918829/0/A7DCE7647FA775A7E9DF44EAEFAC52118F3669F8.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A7DCE7647FA775A7E9DF44EAEFAC52118F3669F8.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d3f30e27-b95e-4d75-968d-538fb7918829/0/A7DCE7647FA775A7E9DF44EAEFAC52118F3669F8.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption bd:ae:63:33:f5:30:89:08:e8:ed:78:ca:9c:cd:5a:b5:52:36: 15:1c:da:ef:73:ef:5b:90:2f:c5:01:5d:1b:ed:eb:f0:bb:25: d6:d9:80:24:36:9f:31:d4:82:71:22:4b:00:91:3b:b9:f8:27: 9a:e9:73:29:f3:1e:57:c2:dd:8b:c4:c5:ac:74:3f:f0:ad:fa: 7b:72:44:16:29:ed:36:33:f9:80:65:6a:1e:42:f4:8a:4f:1c: c2:9c:87:04:b2:87:2b:ab:37:44:af:6e:e2:ea:51:34:d4:4d: 19:6a:6f:59:fd:b9:f4:d3:56:05:b3:ed:4f:de:55:a3:4a:1d: 35:ff:04:8d:fa:ca:ae:a9:ec:8d:46:eb:54:3c:f0:4a:35:48: 99:44:55:c7:1d:ee:b2:9e:8e:4b:12:28:70:89:07:46:4d:06: 27:ed:05:c2:8c:35:c1:96:6f:aa:3b:f8:f9:f5:7a:8a:54:58: 88:c1:6b:0f:89:4f:88:29:ac:93:5e:85:3d:af:20:14:da:09: 3e:b4:3f:88:d6:15:0d:27:1a:20:bf:36:5b:8f:c3:9d:b5:03: 11:9c:b9:45:98:b2:f1:fc:67:5a:2b:78:7a:80:6a:e7:38:22: 10:47:06:e5:45:e3:92:c1:14:27:0c:e0:79:5d:10:0a:a1:8c: 23:fa:68:f0 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUDuvHdPysBP8Tb+UPB+IFAGcFSzkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTdEQ0U3NjQ3RkE3NzVBN0U5REY0NEVBRUZBQzUyMTE4 RjM2NjlGODAeFw0yNTEyMDExNzE2MzFaFw0yNTEyMDUwNDIzMzFaMDMxMTAvBgNV BAMTKEU1RTNDNjQ0NjE5MkU4NzAwMkEzODkyMTk5NDc5QThCNTQ1QzVGMTIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC0CABrGUrpbFq1qgshBSZFy8TU a+oFYN5gl3TElalMwQeabHFZRK+xPDwmVJkzW/kNLxUFBapNxdCdHD1fE8UtzWR2 TIcH+R67fJLWelKGxuibgoTDM/veJuFNpmTrIQcMEMhj5agNxEYy624f81DquUbw XflxGAW5EmPRaDSW0v1EEr05nLNdhDoDLGhvD1owIxmxfQfb3aoK+76z85aokWQs 4B0juFuqisdA+cI9nFoUzjj5lUBaLZMXaxnVI+0SxpraP8x5r4Bywye817GbMvBi 3uWvv91qoQXLCO83xkQaBdMAvpK+T7KgF7LplLvWpy2S/kle4IfSOdyTROAfAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU5ePGRGGS6HACo4khmUeai1RcXxIwHwYDVR0j BBgwFoAUp9znZH+ndafp30Tq76xSEY82afgwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k M2YzMGUyNy1iOTVlLTRkNzUtOTY4ZC01MzhmYjc5MTg4MjkvMC9BN0RDRTc2NDdG QTc3NUE3RTlERjQ0RUFFRkFDNTIxMThGMzY2OUY4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQTdEQ0U3NjQ3RkE3NzVBN0U5REY0NEVBRUZBQzUyMTE4RjM2 NjlGOC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZDNmMzBlMjctYjk1ZS00ZDc1LTk2 OGQtNTM4ZmI3OTE4ODI5LzAvQTdEQ0U3NjQ3RkE3NzVBN0U5REY0NEVBRUZBQzUy MTE4RjM2NjlGOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAL2uYzP1MIkI6O14ypzNWrVSNhUc2u9z71uQ L8UBXRvt6/C7JdbZgCQ2nzHUgnEiSwCRO7n4J5rpcynzHlfC3YvExax0P/Ct+nty RBYp7TYz+YBlah5C9IpPHMKchwSyhyurN0SvbuLqUTTUTRlqb1n9ufTTVgWz7U/e VaNKHTX/BI36yq6p7I1G61Q88Eo1SJlEVccd7rKejksSKHCJB0ZNBiftBcKMNcGW b6o7+Pn1eopUWIjBaw+JT4gprJNehT2vIBTaCT60P4jWFQ0nGiC/NluPw521AxGc uUWYsvH8Z1oreHqAauc4IhBHBuVF45LBFCcM4HldEAqhjCP6aPA= -----END CERTIFICATE-----Generated at Wed Dec 3 14:42:35 2025 by rpki-client