This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/e6adae2a-47b6-4ae5-9c3f-3e8cb92a3987/0/7CA3F2C40FE453CEE230AF594985B275514F5ECF.mft File: 7CA3F2C40FE453CEE230AF594985B275514F5ECF.mft (raw, json) Hash identifier: jRr04khzS5YQbj0567hpIZBwWtJLjpXFVkSWPV4UR0I= Subject key identifier: 5D:69:2E:33:11:AB:64:BC:DC:94:FC:64:6D:E6:29:F1:71:BC:41:96 Authority key identifier: 7C:A3:F2:C4:0F:E4:53:CE:E2:30:AF:59:49:85:B2:75:51:4F:5E:CF Certificate issuer: /CN=7CA3F2C40FE453CEE230AF594985B275514F5ECF Certificate serial: 431F2F08B60C728CEC065DBE4AE479967E64E651 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7CA3F2C40FE453CEE230AF594985B275514F5ECF.cer Subject info access: rsync://repo-rpki.idnic.net/repo/e6adae2a-47b6-4ae5-9c3f-3e8cb92a3987/0/7CA3F2C40FE453CEE230AF594985B275514F5ECF.mft Manifest number: 01C1 Signing time: Tue 02 Dec 2025 06:52:22 +0000 Manifest this update: Tue 02 Dec 2025 06:47:22 +0000 Manifest next update: Fri 05 Dec 2025 10:23:22 +0000 Files and hashes: 1: 7CA3F2C40FE453CEE230AF594985B275514F5ECF.crl (hash: eLLEDHv8spcQTzh4TehMK7vMvFqarTLBwQO7E4bQI7I=) 2: 3130332e3139312e3131362e302f32332d3233203d3e20313439393137.roa (hash: wE41NZyo6Pm4ztOuQo15CxbV7OwbZAt3ABv1Or5h/i4=) 3: 3130332e3139312e3131362e302f32342d3234203d3e20313439393137.roa (hash: LYrLDsZTAbC2Myr0Hc+KOOGkdqztaoQ+U5C2aGpkGQc=) 4: 3130332e3139312e3131372e302f32342d3234203d3e20313439393137.roa (hash: T5ujnMBfrRFq+9a4Ins8EQ3CJj6sZJk55UE2urIjcWM=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/e6adae2a-47b6-4ae5-9c3f-3e8cb92a3987/0/7CA3F2C40FE453CEE230AF594985B275514F5ECF.crl rsync://repo-rpki.idnic.net/repo/e6adae2a-47b6-4ae5-9c3f-3e8cb92a3987/0/7CA3F2C40FE453CEE230AF594985B275514F5ECF.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7CA3F2C40FE453CEE230AF594985B275514F5ECF.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 05 Dec 2025 10:23:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 43:1f:2f:08:b6:0c:72:8c:ec:06:5d:be:4a:e4:79:96:7e:64:e6:51 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7CA3F2C40FE453CEE230AF594985B275514F5ECF Validity Not Before: Dec 2 06:47:22 2025 GMT Not After : Dec 5 10:23:22 2025 GMT Subject: CN=5D692E3311AB64BCDC94FC646DE629F171BC4196 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:a5:ac:16:7d:6c:82:af:c3:67:ce:c6:c9:4f: 48:d1:8f:5e:5b:4c:ec:27:dd:94:85:0a:7f:07:05: bc:46:50:21:f2:a9:77:cf:e0:25:bd:a9:74:22:a1: 76:cb:84:79:d4:6b:ce:31:fd:41:88:ca:20:03:38: 8f:7e:10:7e:65:f2:14:c2:da:df:52:d7:e4:22:63: b4:87:36:ba:c4:15:d5:49:23:6b:b9:18:c4:8a:65: ee:6d:c0:9d:ef:d4:ad:aa:d3:3a:20:0a:78:de:e6: db:6e:bb:56:fe:0a:cf:5a:98:37:d8:14:94:15:04: 3b:15:14:31:59:34:21:6d:e3:ed:bf:4d:14:0c:94: 4c:f2:a0:e4:5a:93:d7:7e:9a:68:34:25:d5:93:0c: 76:2a:15:ad:cf:4e:55:f7:2b:5e:a9:57:06:ef:de: ca:1e:d5:26:d4:de:a5:b2:7e:fb:96:89:a6:79:d6: 64:fc:4a:0c:ff:63:1f:c4:81:bf:81:24:0a:83:94: 01:44:83:1d:f4:76:55:de:2e:56:34:61:47:48:b4: b3:af:e9:0c:5f:cf:0a:f8:c1:6a:ed:1e:ef:5d:be: 0e:12:e3:da:dd:b4:6e:1b:6a:00:73:27:3c:61:d2: 91:a6:26:d9:22:8d:96:6c:c2:c2:a8:33:c3:b6:7c: 44:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5D:69:2E:33:11:AB:64:BC:DC:94:FC:64:6D:E6:29:F1:71:BC:41:96 X509v3 Authority Key Identifier: keyid:7C:A3:F2:C4:0F:E4:53:CE:E2:30:AF:59:49:85:B2:75:51:4F:5E:CF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/e6adae2a-47b6-4ae5-9c3f-3e8cb92a3987/0/7CA3F2C40FE453CEE230AF594985B275514F5ECF.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7CA3F2C40FE453CEE230AF594985B275514F5ECF.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e6adae2a-47b6-4ae5-9c3f-3e8cb92a3987/0/7CA3F2C40FE453CEE230AF594985B275514F5ECF.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a6:4b:a3:59:0c:56:15:a9:88:b3:03:e4:dc:0c:d2:4e:02:63: 7e:75:92:58:2e:de:84:2d:5b:01:42:db:a4:e5:e5:c7:d4:9f: 02:8d:1a:27:e7:0d:d0:a1:30:d1:fa:f6:0b:d1:98:51:e3:72: 69:d3:bc:55:dd:e4:c1:14:47:4b:ea:81:68:c7:a0:e6:db:b5: bb:52:d2:72:09:32:92:4b:2c:b1:de:8f:cc:71:01:4f:18:18: 4f:69:3d:f2:3f:61:1e:7d:d6:66:47:25:e9:e0:53:2f:48:3e: f1:eb:45:f9:dd:9d:4c:f6:49:12:49:50:15:40:b9:71:c3:ca: 6a:a2:81:db:49:c0:5c:73:6c:ec:d4:5e:3a:6a:94:ac:11:5d: 19:b4:8e:b4:b0:11:8f:10:29:78:0e:18:1e:d7:8d:cd:89:d8: c1:0d:ef:66:26:49:98:96:87:7d:a7:b0:b5:38:75:65:dd:cf: ab:23:80:08:be:ff:b3:60:7e:a2:6c:68:35:b0:4d:c7:db:bd: 26:ae:93:04:44:01:14:16:3e:b8:96:bd:49:7c:ca:29:83:c2: c9:12:80:95:c6:53:26:b3:1d:49:b8:23:c5:4a:62:3b:98:b5: 28:9c:5e:6d:e3:a1:2d:d6:cd:07:a8:18:d9:75:8c:79:b4:e2: a7:2e:8b:4e -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUQx8vCLYMcozsBl2+SuR5ln5k5lEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoN0NBM0YyQzQwRkU0NTNDRUUyMzBBRjU5NDk4NUIyNzU1 MTRGNUVDRjAeFw0yNTEyMDIwNjQ3MjJaFw0yNTEyMDUxMDIzMjJaMDMxMTAvBgNV BAMTKDVENjkyRTMzMTFBQjY0QkNEQzk0RkM2NDZERTYyOUYxNzFCQzQxOTYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC6pawWfWyCr8NnzsbJT0jRj15b TOwn3ZSFCn8HBbxGUCHyqXfP4CW9qXQioXbLhHnUa84x/UGIyiADOI9+EH5l8hTC 2t9S1+QiY7SHNrrEFdVJI2u5GMSKZe5twJ3v1K2q0zogCnje5ttuu1b+Cs9amDfY FJQVBDsVFDFZNCFt4+2/TRQMlEzyoORak9d+mmg0JdWTDHYqFa3PTlX3K16pVwbv 3soe1SbU3qWyfvuWiaZ51mT8Sgz/Yx/Egb+BJAqDlAFEgx30dlXeLlY0YUdItLOv 6Qxfzwr4wWrtHu9dvg4S49rdtG4bagBzJzxh0pGmJtkijZZswsKoM8O2fEQxAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUXWkuMxGrZLzclPxkbeYp8XG8QZYwHwYDVR0j BBgwFoAUfKPyxA/kU87iMK9ZSYWydVFPXs8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l NmFkYWUyYS00N2I2LTRhZTUtOWMzZi0zZThjYjkyYTM5ODcvMC83Q0EzRjJDNDBG RTQ1M0NFRTIzMEFGNTk0OTg1QjI3NTUxNEY1RUNGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvN0NBM0YyQzQwRkU0NTNDRUUyMzBBRjU5NDk4NUIyNzU1MTRG NUVDRi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZTZhZGFlMmEtNDdiNi00YWU1LTlj M2YtM2U4Y2I5MmEzOTg3LzAvN0NBM0YyQzQwRkU0NTNDRUUyMzBBRjU5NDk4NUIy NzU1MTRGNUVDRi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKZLo1kMVhWpiLMD5NwM0k4CY351klgu3oQt WwFC26Tl5cfUnwKNGifnDdChMNH69gvRmFHjcmnTvFXd5MEUR0vqgWjHoObbtbtS 0nIJMpJLLLHej8xxAU8YGE9pPfI/YR591mZHJengUy9IPvHrRfndnUz2SRJJUBVA uXHDymqigdtJwFxzbOzUXjpqlKwRXRm0jrSwEY8QKXgOGB7Xjc2J2MEN72YmSZiW h32nsLU4dWXdz6sjgAi+/7NgfqJsaDWwTcfbvSaukwREARQWPriWvUl8yimDwskS gJXGUyazHUm4I8VKYjuYtSicXm3joS3WzQeoGNl1jHm04qcui04= -----END CERTIFICATE-----Generated at Wed Dec 3 14:57:30 2025 by rpki-client