This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/d8463ad5-1745-443e-b165-d194eed89e6b/0/7B04CE58A1370241E93EF01F597DD18A039D613D.mft File: 7B04CE58A1370241E93EF01F597DD18A039D613D.mft (raw, json) Hash identifier: XwRAM78ukM8tBPjwIKVCPqCM3lAh57LL7mNMMkRS8po= Subject key identifier: 54:50:43:35:69:DE:F0:0C:B3:BE:DC:4D:6D:C5:0B:E3:D3:B1:B0:00 Authority key identifier: 7B:04:CE:58:A1:37:02:41:E9:3E:F0:1F:59:7D:D1:8A:03:9D:61:3D Certificate issuer: /CN=7B04CE58A1370241E93EF01F597DD18A039D613D Certificate serial: 20580999A23DF6F10C3C9B0D164A4453BD637A12 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7B04CE58A1370241E93EF01F597DD18A039D613D.cer Subject info access: rsync://repo-rpki.idnic.net/repo/d8463ad5-1745-443e-b165-d194eed89e6b/0/7B04CE58A1370241E93EF01F597DD18A039D613D.mft Manifest number: 01BA Signing time: Tue 02 Dec 2025 08:30:38 +0000 Manifest this update: Tue 02 Dec 2025 08:25:38 +0000 Manifest next update: Fri 05 Dec 2025 15:54:38 +0000 Files and hashes: 1: 7B04CE58A1370241E93EF01F597DD18A039D613D.crl (hash: 2MX/NXwa0hdQdIIX5gWzvrt6eMvLcJ+LShiZlAa3anY=) 2: 3130332e39372e3139392e302f32342d3234203d3e20313530393135.roa (hash: KpZGTHHITDkYOGDokkGhFBTqUppZ/cNFbsmbPmwF8Cg=) 3: 3130332e39372e3139382e302f32342d3234203d3e20313530393135.roa (hash: BVsk6AHIvUUfWZ+4++VqM/4m6oLrmg+QHEXYFO+Hiks=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/d8463ad5-1745-443e-b165-d194eed89e6b/0/7B04CE58A1370241E93EF01F597DD18A039D613D.crl rsync://repo-rpki.idnic.net/repo/d8463ad5-1745-443e-b165-d194eed89e6b/0/7B04CE58A1370241E93EF01F597DD18A039D613D.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7B04CE58A1370241E93EF01F597DD18A039D613D.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 05 Dec 2025 15:54:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 20:58:09:99:a2:3d:f6:f1:0c:3c:9b:0d:16:4a:44:53:bd:63:7a:12 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7B04CE58A1370241E93EF01F597DD18A039D613D Validity Not Before: Dec 2 08:25:38 2025 GMT Not After : Dec 5 15:54:38 2025 GMT Subject: CN=5450433569DEF00CB3BEDC4D6DC50BE3D3B1B000 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:e5:08:f1:0b:b7:f0:46:dd:00:e0:a3:c4:0e: d9:1c:35:09:37:75:ec:ec:55:88:fa:73:82:26:61: b6:a3:c9:c0:21:c2:90:36:68:c9:95:8e:22:c3:54: bc:9f:62:27:96:28:79:25:0e:21:a0:54:79:2a:4e: 8b:ea:0b:ae:4d:a7:06:74:16:49:7b:cd:ac:30:bb: 62:5d:a7:85:70:bf:f9:61:f7:51:43:01:e0:bb:75: 79:ea:f5:71:18:df:34:fe:41:55:a2:cf:93:64:1d: f2:86:7b:04:43:17:bd:62:7e:58:6d:ca:53:4b:29: f2:68:62:cd:5e:e4:37:32:95:e4:cc:14:ad:39:11: cb:a9:6e:fc:dc:6a:f9:f3:fe:1e:bc:19:42:84:48: 5d:78:d0:0a:24:9f:94:56:da:c2:dd:68:15:ee:15: b0:fb:ad:a2:51:ea:b9:6b:25:93:e1:aa:f0:fc:be: 62:2a:e9:52:fe:ff:b3:94:8c:d4:0d:3c:28:83:0f: 3f:e0:90:87:cd:f0:f6:31:64:75:c0:dd:ba:a1:71: 91:60:cd:d8:e3:c4:4c:25:55:fd:13:10:e9:5f:00: 99:b8:06:0a:95:77:4f:32:39:f8:a1:7a:a2:72:b0: 41:b0:0d:b8:ed:f2:c5:b9:97:e5:16:49:53:5f:60: 84:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 54:50:43:35:69:DE:F0:0C:B3:BE:DC:4D:6D:C5:0B:E3:D3:B1:B0:00 X509v3 Authority Key Identifier: keyid:7B:04:CE:58:A1:37:02:41:E9:3E:F0:1F:59:7D:D1:8A:03:9D:61:3D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/d8463ad5-1745-443e-b165-d194eed89e6b/0/7B04CE58A1370241E93EF01F597DD18A039D613D.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7B04CE58A1370241E93EF01F597DD18A039D613D.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d8463ad5-1745-443e-b165-d194eed89e6b/0/7B04CE58A1370241E93EF01F597DD18A039D613D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 74:86:be:f7:00:0d:03:d6:24:2d:7c:c7:93:71:13:20:cb:8b: 78:dc:ba:68:dd:cc:31:64:53:62:c8:ce:39:2e:8b:50:26:18: 66:ca:a3:b3:1d:a1:19:1c:07:a9:f3:a3:b3:2c:2c:5f:2b:1e: 2b:d5:9b:27:ca:53:c5:0e:2c:3e:75:94:f5:d9:d3:53:a9:32: 6d:af:61:fe:4d:84:6d:26:a7:f6:32:d5:74:cd:07:52:0e:c5: 7e:71:8f:db:5e:6f:fe:c2:27:97:be:ad:74:40:9a:76:85:ca: 23:61:28:04:9a:43:9c:2f:aa:cd:a8:9b:86:1e:f8:2e:88:e3: 07:04:d3:07:85:6f:bf:d5:59:21:f5:95:c2:57:ef:ee:7a:7a: ea:8f:52:e8:db:0d:8f:0d:ee:c3:7d:a6:d5:68:b3:a0:82:26: 2d:39:8d:c8:93:76:e8:45:97:7b:f6:15:c6:c5:41:3e:07:d4: c5:5d:a7:e0:5c:30:42:0d:35:18:47:66:7a:57:ac:fb:bd:9b: e6:ef:65:b0:61:50:b4:72:57:a3:df:93:46:e4:09:c9:87:2f: 08:f0:c3:20:3d:4e:f2:0c:46:96:25:90:5c:f6:00:95:07:70: f4:8c:82:7e:6d:69:f9:2e:ba:bb:9f:db:fd:62:08:c6:ab:34: f1:e1:6c:23 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUIFgJmaI99vEMPJsNFkpEU71jehIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoN0IwNENFNThBMTM3MDI0MUU5M0VGMDFGNTk3REQxOEEw MzlENjEzRDAeFw0yNTEyMDIwODI1MzhaFw0yNTEyMDUxNTU0MzhaMDMxMTAvBgNV BAMTKDU0NTA0MzM1NjlERUYwMENCM0JFREM0RDZEQzUwQkUzRDNCMUIwMDAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCq5QjxC7fwRt0A4KPEDtkcNQk3 dezsVYj6c4ImYbajycAhwpA2aMmVjiLDVLyfYieWKHklDiGgVHkqTovqC65NpwZ0 Fkl7zawwu2Jdp4Vwv/lh91FDAeC7dXnq9XEY3zT+QVWiz5NkHfKGewRDF71iflht ylNLKfJoYs1e5DcyleTMFK05Ecupbvzcavnz/h68GUKESF140Aokn5RW2sLdaBXu FbD7raJR6rlrJZPhqvD8vmIq6VL+/7OUjNQNPCiDDz/gkIfN8PYxZHXA3bqhcZFg zdjjxEwlVf0TEOlfAJm4BgqVd08yOfiheqJysEGwDbjt8sW5l+UWSVNfYIRlAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUVFBDNWne8AyzvtxNbcUL49OxsAAwHwYDVR0j BBgwFoAUewTOWKE3AkHpPvAfWX3RigOdYT0wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k ODQ2M2FkNS0xNzQ1LTQ0M2UtYjE2NS1kMTk0ZWVkODllNmIvMC83QjA0Q0U1OEEx MzcwMjQxRTkzRUYwMUY1OTdERDE4QTAzOUQ2MTNELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvN0IwNENFNThBMTM3MDI0MUU5M0VGMDFGNTk3REQxOEEwMzlE NjEzRC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZDg0NjNhZDUtMTc0NS00NDNlLWIx NjUtZDE5NGVlZDg5ZTZiLzAvN0IwNENFNThBMTM3MDI0MUU5M0VGMDFGNTk3REQx OEEwMzlENjEzRC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHSGvvcADQPWJC18x5NxEyDLi3jcumjdzDFk U2LIzjkui1AmGGbKo7MdoRkcB6nzo7MsLF8rHivVmyfKU8UOLD51lPXZ01OpMm2v Yf5NhG0mp/Yy1XTNB1IOxX5xj9teb/7CJ5e+rXRAmnaFyiNhKASaQ5wvqs2om4Ye +C6I4wcE0weFb7/VWSH1lcJX7+56euqPUujbDY8N7sN9ptVos6CCJi05jciTduhF l3v2FcbFQT4H1MVdp+BcMEINNRhHZnpXrPu9m+bvZbBhULRyV6Pfk0bkCcmHLwjw wyA9TvIMRpYlkFz2AJUHcPSMgn5tafkuuruf2/1iCMarNPHhbCM= -----END CERTIFICATE-----Generated at Wed Dec 3 13:57:19 2025 by rpki-client