This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/e3295de6-2058-46a7-936b-052cf2fa920d/0/7FDB761B09E7A9A80CD28C84A5FFDB12F5C9BBD0.mft File: 7FDB761B09E7A9A80CD28C84A5FFDB12F5C9BBD0.mft (raw, json) Hash identifier: eBRPHFB5F6h3eKSSUMLPHwy3rx/5CEgAJDRmiZqKVjQ= Subject key identifier: 35:9E:BE:88:E4:95:45:BD:ED:D7:5C:57:15:B0:34:07:0C:72:D3:D1 Authority key identifier: 7F:DB:76:1B:09:E7:A9:A8:0C:D2:8C:84:A5:FF:DB:12:F5:C9:BB:D0 Certificate issuer: /CN=7FDB761B09E7A9A80CD28C84A5FFDB12F5C9BBD0 Certificate serial: 3F522CE901D5575C49A1F0A2B8921779895F7F9A Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7FDB761B09E7A9A80CD28C84A5FFDB12F5C9BBD0.cer Subject info access: rsync://repo-rpki.idnic.net/repo/e3295de6-2058-46a7-936b-052cf2fa920d/0/7FDB761B09E7A9A80CD28C84A5FFDB12F5C9BBD0.mft Manifest number: 0229 Signing time: Tue 02 Dec 2025 18:21:03 +0000 Manifest this update: Tue 02 Dec 2025 18:16:03 +0000 Manifest next update: Fri 05 Dec 2025 21:14:03 +0000 Files and hashes: 1: 3130332e3138362e38392e302f32342d3234203d3e20313439373137.roa (hash: d85h85v2ptQz3vrVN5qkUm0+GStqZnlOAr5LKlkna3k=) 2: 3130332e3138362e38382e302f32342d3234203d3e20313439373137.roa (hash: qKtIrqocYRtH9mFT0B1bJLwWXs7q8vOuLUP4J+rTPCk=) 3: 7FDB761B09E7A9A80CD28C84A5FFDB12F5C9BBD0.crl (hash: HbF3jRGqcVnR047ZvPZCgwDyUexggHuu/vZMRc3wKHE=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/e3295de6-2058-46a7-936b-052cf2fa920d/0/7FDB761B09E7A9A80CD28C84A5FFDB12F5C9BBD0.crl rsync://repo-rpki.idnic.net/repo/e3295de6-2058-46a7-936b-052cf2fa920d/0/7FDB761B09E7A9A80CD28C84A5FFDB12F5C9BBD0.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7FDB761B09E7A9A80CD28C84A5FFDB12F5C9BBD0.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 05 Dec 2025 21:14:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3f:52:2c:e9:01:d5:57:5c:49:a1:f0:a2:b8:92:17:79:89:5f:7f:9a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7FDB761B09E7A9A80CD28C84A5FFDB12F5C9BBD0 Validity Not Before: Dec 2 18:16:03 2025 GMT Not After : Dec 5 21:14:03 2025 GMT Subject: CN=359EBE88E49545BDEDD75C5715B034070C72D3D1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:fa:75:ed:65:62:e1:eb:0d:de:a6:27:ab:1b: 76:a9:f0:52:06:2f:cf:5d:cf:b7:75:50:60:38:6c: 95:97:3d:ac:de:91:32:55:c0:88:d7:44:ce:83:94: e3:af:cf:bc:00:cc:05:ff:dd:1e:a3:50:cf:96:81: d4:b1:52:aa:79:df:da:78:23:55:df:57:ea:15:0f: 22:24:50:4a:95:22:d9:98:aa:39:cb:0a:98:98:37: 0a:82:81:87:69:9b:65:0b:c2:60:13:ea:fc:a8:6d: 9f:dc:c5:84:75:3d:2f:31:e1:70:42:49:2c:cf:d3: 32:bc:f0:7d:a9:46:4f:c5:6f:9f:df:f6:32:9d:d2: e5:b7:9e:c5:87:33:3a:39:6e:21:a9:b8:8f:3d:e7: e3:bc:5e:db:e7:51:75:ab:26:bc:83:c2:0b:07:3b: e3:8e:c1:47:a8:ac:7d:c5:50:10:86:19:e9:cf:e8: af:e4:29:69:d1:3d:c1:db:01:36:4d:d0:9b:f4:f0: 50:46:6f:d3:e1:46:0a:bb:d5:ae:20:0b:a2:6d:7b: 9e:a0:98:28:62:eb:8f:b8:18:88:98:f5:fe:5d:63: e2:17:ef:0e:95:d2:19:5d:a6:e6:6b:43:c3:86:ee: da:5e:59:ae:14:0e:e4:5f:19:ea:1d:76:f6:23:05: 59:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:9E:BE:88:E4:95:45:BD:ED:D7:5C:57:15:B0:34:07:0C:72:D3:D1 X509v3 Authority Key Identifier: keyid:7F:DB:76:1B:09:E7:A9:A8:0C:D2:8C:84:A5:FF:DB:12:F5:C9:BB:D0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/e3295de6-2058-46a7-936b-052cf2fa920d/0/7FDB761B09E7A9A80CD28C84A5FFDB12F5C9BBD0.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7FDB761B09E7A9A80CD28C84A5FFDB12F5C9BBD0.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e3295de6-2058-46a7-936b-052cf2fa920d/0/7FDB761B09E7A9A80CD28C84A5FFDB12F5C9BBD0.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 07:9b:1a:3b:8e:c8:5f:cd:d0:70:d7:b2:8f:c2:40:d0:2e:4d: 6c:73:b0:d0:07:a0:be:6b:f1:35:65:7b:bf:d0:db:4c:09:5b: 62:35:19:ab:7a:47:01:8f:1c:45:e5:57:db:f0:5a:45:33:e0: 44:78:08:8d:19:7b:42:9b:9f:64:a4:1c:c2:ca:93:52:14:b1: c6:41:b1:1b:23:31:14:b1:a9:80:38:da:a8:e4:d3:9e:ad:1e: c4:8b:6e:18:33:35:f3:ed:51:f5:87:2c:de:0c:c8:e7:8c:58: 69:04:99:70:6a:25:c1:33:9d:bb:66:7a:2d:e5:a0:79:46:26: 33:81:9d:81:ca:7a:dd:28:31:59:85:ce:85:89:af:60:68:b5: f1:51:ac:92:69:15:08:ed:ae:4b:b7:d0:2f:c2:8f:93:bf:de: 5d:79:31:5a:a4:f6:39:c6:ff:fa:df:2d:5a:cf:75:74:e4:76: 90:53:5a:11:b5:1c:01:27:24:a9:9d:c1:a8:de:10:b1:34:7b: f1:21:c7:7c:cc:e6:c8:f9:ef:68:5c:98:5c:b9:77:b3:61:b1: a9:6c:4d:a2:30:86:c8:e3:23:ff:df:85:e6:36:fe:01:72:88: fd:f5:a2:ac:31:31:6a:7c:38:cc:bc:41:2e:7b:39:1b:dd:56: 71:65:73:b3 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUP1Is6QHVV1xJofCiuJIXeYlff5owDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoN0ZEQjc2MUIwOUU3QTlBODBDRDI4Qzg0QTVGRkRCMTJG NUM5QkJEMDAeFw0yNTEyMDIxODE2MDNaFw0yNTEyMDUyMTE0MDNaMDMxMTAvBgNV BAMTKDM1OUVCRTg4RTQ5NTQ1QkRFREQ3NUM1NzE1QjAzNDA3MEM3MkQzRDEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDO+nXtZWLh6w3epierG3ap8FIG L89dz7d1UGA4bJWXPazekTJVwIjXRM6DlOOvz7wAzAX/3R6jUM+WgdSxUqp539p4 I1XfV+oVDyIkUEqVItmYqjnLCpiYNwqCgYdpm2ULwmAT6vyobZ/cxYR1PS8x4XBC SSzP0zK88H2pRk/Fb5/f9jKd0uW3nsWHMzo5biGpuI895+O8XtvnUXWrJryDwgsH O+OOwUeorH3FUBCGGenP6K/kKWnRPcHbATZN0Jv08FBGb9PhRgq71a4gC6Jte56g mChi64+4GIiY9f5dY+IX7w6V0hldpuZrQ8OG7tpeWa4UDuRfGeoddvYjBVnPAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUNZ6+iOSVRb3t11xXFbA0Bwxy09EwHwYDVR0j BBgwFoAUf9t2GwnnqagM0oyEpf/bEvXJu9AwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l MzI5NWRlNi0yMDU4LTQ2YTctOTM2Yi0wNTJjZjJmYTkyMGQvMC83RkRCNzYxQjA5 RTdBOUE4MENEMjhDODRBNUZGREIxMkY1QzlCQkQwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvN0ZEQjc2MUIwOUU3QTlBODBDRDI4Qzg0QTVGRkRCMTJGNUM5 QkJEMC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZTMyOTVkZTYtMjA1OC00NmE3LTkz NmItMDUyY2YyZmE5MjBkLzAvN0ZEQjc2MUIwOUU3QTlBODBDRDI4Qzg0QTVGRkRC MTJGNUM5QkJEMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAebGjuOyF/N0HDXso/CQNAuTWxzsNAHoL5r 8TVle7/Q20wJW2I1Gat6RwGPHEXlV9vwWkUz4ER4CI0Ze0Kbn2SkHMLKk1IUscZB sRsjMRSxqYA42qjk056tHsSLbhgzNfPtUfWHLN4MyOeMWGkEmXBqJcEznbtmei3l oHlGJjOBnYHKet0oMVmFzoWJr2BotfFRrJJpFQjtrku30C/Cj5O/3l15MVqk9jnG //rfLVrPdXTkdpBTWhG1HAEnJKmdwajeELE0e/Ehx3zM5sj572hcmFy5d7Nhsals TaIwhsjjI//fheY2/gFyiP31oqwxMWp8OMy8QS57ORvdVnFlc7M= -----END CERTIFICATE-----Generated at Wed Dec 3 14:14:25 2025 by rpki-client