This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/e9f575db-c738-4b8e-b36a-6b020c66849d/0/C7F3F7AC648C6073C7FE736271A1A8E7277962B7.mft File: C7F3F7AC648C6073C7FE736271A1A8E7277962B7.mft (raw, json) Hash identifier: BNbGzeqCR27u9Ka8l/WOnBB18NkbGP0tBr+LTvm8/Qc= Subject key identifier: 65:1F:F6:45:4C:9D:4E:20:4C:D9:D0:25:0F:C1:A7:68:0B:5B:14:C7 Authority key identifier: C7:F3:F7:AC:64:8C:60:73:C7:FE:73:62:71:A1:A8:E7:27:79:62:B7 Certificate issuer: /CN=C7F3F7AC648C6073C7FE736271A1A8E7277962B7 Certificate serial: 1AB32A6F00BBAA420C43E1BA869FE41CA0AF38EF Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C7F3F7AC648C6073C7FE736271A1A8E7277962B7.cer Subject info access: rsync://repo-rpki.idnic.net/repo/e9f575db-c738-4b8e-b36a-6b020c66849d/0/C7F3F7AC648C6073C7FE736271A1A8E7277962B7.mft Manifest number: 0152 Signing time: Tue 02 Dec 2025 05:31:34 +0000 Manifest this update: Tue 02 Dec 2025 05:26:34 +0000 Manifest next update: Fri 05 Dec 2025 15:55:34 +0000 Files and hashes: 1: 3130332e3134342e3132382e302f32332d3233203d3e20313339343333.roa (hash: NWx313Eak6ryGXrEQpkxOKGoXHPpAIUkV1kgoiWIcbI=) 2: 3130332e3134342e3132382e302f32342d3234203d3e20313339343333.roa (hash: qJyum2At3OQ0/Mui5d66zUzvrRUlMyLgYJNLgluGsro=) 3: 3130332e3134342e3132392e302f32342d3234203d3e20313339343333.roa (hash: 8BRGIjefty8sLc1ZfWkrubhQIyt7J7+He/FXFv8R2Vs=) 4: C7F3F7AC648C6073C7FE736271A1A8E7277962B7.crl (hash: QWbxKqCRauV8ANqvkdfIIcet71jC5Eo+dRELZX6ybNc=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/e9f575db-c738-4b8e-b36a-6b020c66849d/0/C7F3F7AC648C6073C7FE736271A1A8E7277962B7.crl rsync://repo-rpki.idnic.net/repo/e9f575db-c738-4b8e-b36a-6b020c66849d/0/C7F3F7AC648C6073C7FE736271A1A8E7277962B7.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C7F3F7AC648C6073C7FE736271A1A8E7277962B7.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 05 Dec 2025 15:55:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1a:b3:2a:6f:00:bb:aa:42:0c:43:e1:ba:86:9f:e4:1c:a0:af:38:ef Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C7F3F7AC648C6073C7FE736271A1A8E7277962B7 Validity Not Before: Dec 2 05:26:34 2025 GMT Not After : Dec 5 15:55:34 2025 GMT Subject: CN=651FF6454C9D4E204CD9D0250FC1A7680B5B14C7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:95:c0:49:66:ac:22:40:6a:6a:59:bb:f5:61: ea:31:0b:95:c8:94:93:51:1f:5c:07:58:fe:9b:71: b3:94:25:49:c6:cb:3c:b9:53:ee:1c:36:64:ad:b7: c9:78:e7:2c:e6:d8:db:d1:e2:ac:21:6b:1b:f7:65: 7f:02:15:17:a1:df:44:71:a2:5a:8e:4c:51:4b:43: e4:6c:b4:5a:30:24:23:15:bb:20:26:93:5d:e7:f0: 11:15:56:03:39:c7:61:ee:ec:88:98:24:55:fd:d3: 6f:5a:68:e9:99:9b:46:2a:c0:3d:8a:b0:45:1d:c7: 79:48:5c:63:0b:f5:7a:f5:43:44:c7:b6:46:6a:dd: 95:33:fc:90:cd:6d:df:8a:e9:aa:64:f8:c1:bc:19: 26:8e:6b:8d:24:ae:4e:b9:ea:9e:0b:70:11:03:6d: ed:f5:8b:e4:1c:20:d5:82:e1:a3:bc:0b:25:f1:cf: 5a:f7:95:fe:11:5d:bc:61:95:82:4b:fd:c1:86:e2: 3d:f2:d8:c3:56:c7:79:ec:29:f2:3e:c7:2f:83:ef: bd:12:70:b1:9d:38:4d:8d:ed:e0:d5:62:c5:5f:ba: 53:4b:90:00:e0:f0:06:82:d7:b1:1d:8b:3d:65:2d: 34:a7:a2:4a:83:97:86:35:69:44:01:1c:b3:1b:73: a8:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:1F:F6:45:4C:9D:4E:20:4C:D9:D0:25:0F:C1:A7:68:0B:5B:14:C7 X509v3 Authority Key Identifier: keyid:C7:F3:F7:AC:64:8C:60:73:C7:FE:73:62:71:A1:A8:E7:27:79:62:B7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/e9f575db-c738-4b8e-b36a-6b020c66849d/0/C7F3F7AC648C6073C7FE736271A1A8E7277962B7.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C7F3F7AC648C6073C7FE736271A1A8E7277962B7.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e9f575db-c738-4b8e-b36a-6b020c66849d/0/C7F3F7AC648C6073C7FE736271A1A8E7277962B7.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 57:48:84:80:23:df:f4:a6:30:b6:c4:3e:f1:2b:0d:ef:f5:8f: 18:c8:c2:48:33:26:ca:23:07:d0:c1:f0:a3:e6:75:4e:47:ec: fe:d3:0b:5f:00:56:b9:ca:7f:1c:d2:be:a0:bc:27:fa:d9:69: 70:7d:b9:41:ef:a2:ae:f1:ca:fc:a2:70:7e:2c:e9:e0:55:7f: 52:bc:b8:92:0c:e5:32:6c:7b:06:f2:40:5d:74:ba:5d:b1:90: a3:88:e1:c9:31:3e:41:a8:ee:73:0e:fc:c2:86:a7:41:db:b8: 59:d2:4a:73:33:05:09:f3:a5:2c:0a:83:dc:fc:2d:8c:a3:3d: 2d:d6:55:ee:80:3d:89:5b:b7:6a:7e:e6:68:86:8e:6a:a3:13: d4:70:b8:94:ef:88:dc:0b:0b:57:61:63:f7:bf:31:6e:fa:3b: d7:4b:5a:f8:f5:37:93:e8:f6:7f:6c:1a:1c:07:f7:ca:89:bd: 02:73:bb:1c:bf:83:c8:8a:e9:e6:f6:c6:03:1e:a8:db:2f:58: cc:86:07:69:78:90:36:e2:46:ec:fe:6c:c8:d7:33:b2:27:15: ee:e6:c9:d1:5b:57:f8:4e:b4:51:ad:5a:78:26:60:4d:a4:c7: c2:62:e8:64:ef:8d:62:f0:ee:77:dc:cd:95:d1:f2:8c:a8:ec: 0a:f8:82:6e -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUGrMqbwC7qkIMQ+G6hp/kHKCvOO8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzdGM0Y3QUM2NDhDNjA3M0M3RkU3MzYyNzFBMUE4RTcy Nzc5NjJCNzAeFw0yNTEyMDIwNTI2MzRaFw0yNTEyMDUxNTU1MzRaMDMxMTAvBgNV BAMTKDY1MUZGNjQ1NEM5RDRFMjA0Q0Q5RDAyNTBGQzFBNzY4MEI1QjE0QzcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCelcBJZqwiQGpqWbv1YeoxC5XI lJNRH1wHWP6bcbOUJUnGyzy5U+4cNmStt8l45yzm2NvR4qwhaxv3ZX8CFReh30Rx olqOTFFLQ+RstFowJCMVuyAmk13n8BEVVgM5x2Hu7IiYJFX9029aaOmZm0YqwD2K sEUdx3lIXGML9Xr1Q0THtkZq3ZUz/JDNbd+K6apk+MG8GSaOa40krk656p4LcBED be31i+QcINWC4aO8CyXxz1r3lf4RXbxhlYJL/cGG4j3y2MNWx3nsKfI+xy+D770S cLGdOE2N7eDVYsVfulNLkADg8AaC17Ediz1lLTSnokqDl4Y1aUQBHLMbc6gvAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUZR/2RUydTiBM2dAlD8GnaAtbFMcwHwYDVR0j BBgwFoAUx/P3rGSMYHPH/nNicaGo5yd5YrcwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l OWY1NzVkYi1jNzM4LTRiOGUtYjM2YS02YjAyMGM2Njg0OWQvMC9DN0YzRjdBQzY0 OEM2MDczQzdGRTczNjI3MUExQThFNzI3Nzk2MkI3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQzdGM0Y3QUM2NDhDNjA3M0M3RkU3MzYyNzFBMUE4RTcyNzc5 NjJCNy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZTlmNTc1ZGItYzczOC00YjhlLWIz NmEtNmIwMjBjNjY4NDlkLzAvQzdGM0Y3QUM2NDhDNjA3M0M3RkU3MzYyNzFBMUE4 RTcyNzc5NjJCNy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFdIhIAj3/SmMLbEPvErDe/1jxjIwkgzJsoj B9DB8KPmdU5H7P7TC18AVrnKfxzSvqC8J/rZaXB9uUHvoq7xyvyicH4s6eBVf1K8 uJIM5TJsewbyQF10ul2xkKOI4ckxPkGo7nMO/MKGp0HbuFnSSnMzBQnzpSwKg9z8 LYyjPS3WVe6APYlbt2p+5miGjmqjE9RwuJTviNwLC1dhY/e/MW76O9dLWvj1N5Po 9n9sGhwH98qJvQJzuxy/g8iK6eb2xgMeqNsvWMyGB2l4kDbiRuz+bMjXM7InFe7m ydFbV/hOtFGtWngmYE2kx8Ji6GTvjWLw7nfczZXR8oyo7Ar4gm4= -----END CERTIFICATE-----Generated at Wed Dec 3 14:50:34 2025 by rpki-client