This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/e03e71fe-ad33-4d12-8720-43143ff01dbf/0/D807B5A7716CB56D036EDE4CE994632C0D3A2501.mft File: D807B5A7716CB56D036EDE4CE994632C0D3A2501.mft (raw, json) Hash identifier: 8pz8cGHaCcmzEDYHWAD40YkmUkSHxqhUuk2R1lJeKs8= Subject key identifier: D7:7E:5C:8B:C4:57:D8:CE:15:AA:95:8A:78:DC:CF:38:15:EE:31:D8 Authority key identifier: D8:07:B5:A7:71:6C:B5:6D:03:6E:DE:4C:E9:94:63:2C:0D:3A:25:01 Certificate issuer: /CN=D807B5A7716CB56D036EDE4CE994632C0D3A2501 Certificate serial: 3CAB4D68D5D243D20537E289C1A9E52834A65A2F Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D807B5A7716CB56D036EDE4CE994632C0D3A2501.cer Subject info access: rsync://repo-rpki.idnic.net/repo/e03e71fe-ad33-4d12-8720-43143ff01dbf/0/D807B5A7716CB56D036EDE4CE994632C0D3A2501.mft Manifest number: 01D8 Signing time: Tue 02 Dec 2025 11:32:30 +0000 Manifest this update: Tue 02 Dec 2025 11:27:30 +0000 Manifest next update: Fri 05 Dec 2025 21:40:30 +0000 Files and hashes: 1: D807B5A7716CB56D036EDE4CE994632C0D3A2501.crl (hash: EAKleTcUzMmwfW/57Nq0oA584T8I/sOtHJcyQl5fjyk=) 2: 3130332e3139312e3230302e302f32342d3234203d3e20313432333636.roa (hash: PoHfbIWBTAgg6GV0EgVNoxxVcZmuQWnVjc1te2yrEhM=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/e03e71fe-ad33-4d12-8720-43143ff01dbf/0/D807B5A7716CB56D036EDE4CE994632C0D3A2501.crl rsync://repo-rpki.idnic.net/repo/e03e71fe-ad33-4d12-8720-43143ff01dbf/0/D807B5A7716CB56D036EDE4CE994632C0D3A2501.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D807B5A7716CB56D036EDE4CE994632C0D3A2501.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 05 Dec 2025 21:40:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3c:ab:4d:68:d5:d2:43:d2:05:37:e2:89:c1:a9:e5:28:34:a6:5a:2f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D807B5A7716CB56D036EDE4CE994632C0D3A2501 Validity Not Before: Dec 2 11:27:30 2025 GMT Not After : Dec 5 21:40:30 2025 GMT Subject: CN=D77E5C8BC457D8CE15AA958A78DCCF3815EE31D8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:17:f7:bc:ed:97:82:a3:cb:d6:ed:a9:7f:3a: 25:86:26:be:62:52:a6:44:cc:36:e6:4d:12:05:05: 54:5e:30:76:f5:e7:20:d1:2c:35:64:b9:58:39:c0: 21:23:49:68:71:a2:30:78:94:65:92:c5:f9:63:bb: 31:c3:0d:ac:d1:51:ee:96:67:ab:38:62:21:e1:1c: 6a:ad:44:38:a3:45:d6:b6:2a:a7:95:e8:f4:1d:5a: c2:ad:2f:90:79:08:9f:7f:1f:c8:c7:bf:b4:cf:93: 51:3d:7f:2e:da:87:c0:5e:6f:6f:c9:21:76:10:f5: ab:b1:d6:a1:b0:a6:71:80:1c:27:89:78:35:2f:0d: 06:34:87:69:52:d4:bf:e6:26:08:30:5e:1c:c9:77: 6e:3f:89:51:c9:2c:a5:67:88:a9:2c:78:ad:eb:f7: 04:dc:43:d7:8b:18:f4:d4:36:43:68:07:60:96:7b: 4d:9a:ba:5a:1b:a9:b7:32:36:5a:1d:3c:cf:27:8e: 7d:f5:42:0a:70:8c:58:53:94:ed:86:ee:4d:e3:f3: 2d:75:3c:05:a9:0f:0b:25:ed:93:ac:9b:f9:bf:bd: 3c:59:c1:d0:4f:05:80:f1:a2:fb:85:fb:6a:8b:5a: 86:29:92:ee:6b:b3:1c:f8:48:05:d9:c8:95:64:60: 59:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:7E:5C:8B:C4:57:D8:CE:15:AA:95:8A:78:DC:CF:38:15:EE:31:D8 X509v3 Authority Key Identifier: keyid:D8:07:B5:A7:71:6C:B5:6D:03:6E:DE:4C:E9:94:63:2C:0D:3A:25:01 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/e03e71fe-ad33-4d12-8720-43143ff01dbf/0/D807B5A7716CB56D036EDE4CE994632C0D3A2501.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D807B5A7716CB56D036EDE4CE994632C0D3A2501.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e03e71fe-ad33-4d12-8720-43143ff01dbf/0/D807B5A7716CB56D036EDE4CE994632C0D3A2501.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4a:8f:33:54:07:fa:2a:f1:fa:06:c4:f9:4e:4b:63:3b:08:26: ef:83:0a:27:25:cc:67:4a:f8:8b:5b:8f:d3:f9:d9:e4:65:9d: 79:5d:c9:72:49:a8:24:55:6f:16:0c:78:e0:67:c5:c4:52:75: d4:a0:9b:7b:a7:ba:d7:b2:a6:ef:11:ce:44:b9:ac:e8:23:97: 8d:3c:f9:76:47:51:7a:3a:c6:ab:90:6f:02:bd:ba:bc:ef:1b: 12:bc:69:e1:1f:f7:b3:48:78:1c:7c:f2:92:21:ff:5a:5a:1a: 41:50:d4:c5:3c:b2:5e:62:08:08:0b:b9:c2:c9:71:74:a5:0e: 4a:f8:80:d7:59:19:f9:f0:35:c6:f7:ad:fd:86:69:c9:c8:64: 90:be:f9:d3:3b:bc:78:07:e4:4a:13:0d:c5:3f:0b:7e:5d:8d: f1:c8:81:84:30:13:ad:a2:7d:25:a3:9c:ac:60:88:e5:9d:91: e5:a4:39:85:82:95:e5:b1:78:d3:7d:2d:e3:df:26:89:3a:b2: a5:17:3d:21:87:23:6d:52:82:16:18:26:d7:41:85:c9:35:cf: 58:35:46:bb:f1:43:67:75:4d:68:be:b4:0e:03:ab:6b:c1:2c: 4b:e2:59:7b:02:a4:2e:d0:64:62:4c:f7:b5:08:fb:f8:8a:4d: 2b:49:98:58 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUPKtNaNXSQ9IFN+KJwanlKDSmWi8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDgwN0I1QTc3MTZDQjU2RDAzNkVERTRDRTk5NDYzMkMw RDNBMjUwMTAeFw0yNTEyMDIxMTI3MzBaFw0yNTEyMDUyMTQwMzBaMDMxMTAvBgNV BAMTKEQ3N0U1QzhCQzQ1N0Q4Q0UxNUFBOTU4QTc4RENDRjM4MTVFRTMxRDgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDZF/e87ZeCo8vW7al/OiWGJr5i UqZEzDbmTRIFBVReMHb15yDRLDVkuVg5wCEjSWhxojB4lGWSxfljuzHDDazRUe6W Z6s4YiHhHGqtRDijRda2KqeV6PQdWsKtL5B5CJ9/H8jHv7TPk1E9fy7ah8Beb2/J IXYQ9aux1qGwpnGAHCeJeDUvDQY0h2lS1L/mJggwXhzJd24/iVHJLKVniKkseK3r 9wTcQ9eLGPTUNkNoB2CWe02aulobqbcyNlodPM8njn31QgpwjFhTlO2G7k3j8y11 PAWpDwsl7ZOsm/m/vTxZwdBPBYDxovuF+2qLWoYpku5rsxz4SAXZyJVkYFldAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU135ci8RX2M4VqpWKeNzPOBXuMdgwHwYDVR0j BBgwFoAU2Ae1p3FstW0Dbt5M6ZRjLA06JQEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l MDNlNzFmZS1hZDMzLTRkMTItODcyMC00MzE0M2ZmMDFkYmYvMC9EODA3QjVBNzcx NkNCNTZEMDM2RURFNENFOTk0NjMyQzBEM0EyNTAxLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRDgwN0I1QTc3MTZDQjU2RDAzNkVERTRDRTk5NDYzMkMwRDNB MjUwMS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZTAzZTcxZmUtYWQzMy00ZDEyLTg3 MjAtNDMxNDNmZjAxZGJmLzAvRDgwN0I1QTc3MTZDQjU2RDAzNkVERTRDRTk5NDYz MkMwRDNBMjUwMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEqPM1QH+irx+gbE+U5LYzsIJu+DCiclzGdK +Itbj9P52eRlnXldyXJJqCRVbxYMeOBnxcRSddSgm3unuteypu8RzkS5rOgjl408 +XZHUXo6xquQbwK9urzvGxK8aeEf97NIeBx88pIh/1paGkFQ1MU8sl5iCAgLucLJ cXSlDkr4gNdZGfnwNcb3rf2GacnIZJC++dM7vHgH5EoTDcU/C35djfHIgYQwE62i fSWjnKxgiOWdkeWkOYWCleWxeNN9LePfJok6sqUXPSGHI21SghYYJtdBhck1z1g1 RrvxQ2d1TWi+tA4Dq2vBLEviWXsCpC7QZGJM97UI+/iKTStJmFg= -----END CERTIFICATE-----Generated at Wed Dec 3 14:43:49 2025 by rpki-client