This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/f5f5ef18-6ffa-4d69-8c0c-3518cfa8758e/0/7ABD31DD828DD58C9D91180021903EA04D8EB58E.mft File: 7ABD31DD828DD58C9D91180021903EA04D8EB58E.mft (raw, json) Hash identifier: whFgSHy5zXxW20/EF3+L96/L3miTbS16YSmidKWTZ+g= Subject key identifier: BE:8F:A5:8E:51:3B:A7:86:8F:5C:23:0D:94:85:18:E9:47:15:E7:42 Authority key identifier: 7A:BD:31:DD:82:8D:D5:8C:9D:91:18:00:21:90:3E:A0:4D:8E:B5:8E Certificate issuer: /CN=7ABD31DD828DD58C9D91180021903EA04D8EB58E Certificate serial: 5307433606CF18C7BE359E49CC928046B691E52B Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/7ABD31DD828DD58C9D91180021903EA04D8EB58E.cer Subject info access: rsync://repo-rpki.idnic.net/repo/f5f5ef18-6ffa-4d69-8c0c-3518cfa8758e/0/7ABD31DD828DD58C9D91180021903EA04D8EB58E.mft Manifest number: EB Signing time: Tue 02 Dec 2025 18:51:37 +0000 Manifest this update: Tue 02 Dec 2025 18:46:37 +0000 Manifest next update: Fri 05 Dec 2025 19:19:37 +0000 Files and hashes: 1: 3135372e36362e32302e302f32342d3234203d3e20313337333439.roa (hash: VWW2OjO2Nb0Oyhr5Vqe+VmM1lOl8RPUO1FTuyvBrHBg=) 2: 7ABD31DD828DD58C9D91180021903EA04D8EB58E.crl (hash: 1ifjLY94tr9L9ICy1qjVF0t2vLsojwrSxuzFTkLi+iM=) 3: 3135372e36362e32312e302f32342d3234203d3e20313431353932.roa (hash: 3IUGvQHYckh9j4psQSuGBFM7lfhV4EtYEKWC7HzE4TE=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/f5f5ef18-6ffa-4d69-8c0c-3518cfa8758e/0/7ABD31DD828DD58C9D91180021903EA04D8EB58E.crl rsync://repo-rpki.idnic.net/repo/f5f5ef18-6ffa-4d69-8c0c-3518cfa8758e/0/7ABD31DD828DD58C9D91180021903EA04D8EB58E.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/7ABD31DD828DD58C9D91180021903EA04D8EB58E.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 05 Dec 2025 19:19:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 53:07:43:36:06:cf:18:c7:be:35:9e:49:cc:92:80:46:b6:91:e5:2b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7ABD31DD828DD58C9D91180021903EA04D8EB58E Validity Not Before: Dec 2 18:46:37 2025 GMT Not After : Dec 5 19:19:37 2025 GMT Subject: CN=BE8FA58E513BA7868F5C230D948518E94715E742 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:38:f2:b5:e9:23:51:9f:26:6d:9b:f6:f7:01: 20:1c:c1:ac:68:59:7e:95:19:f5:5f:54:c1:80:f0: 40:65:b1:00:3a:7a:3c:ee:4a:4d:9f:06:25:21:50: 07:6d:05:ad:43:03:40:30:d7:82:1b:97:0d:1a:89: bd:a6:41:a6:22:da:6c:dd:44:41:7e:b6:8c:6e:78: 7d:89:e4:da:52:76:6f:eb:ed:92:a1:79:e4:54:a2: b7:35:65:f9:44:84:ce:2e:f0:7a:3c:23:cb:6d:9b: 7f:e1:e8:b9:46:39:0f:b8:e9:63:3c:2d:b1:15:3f: cc:d6:3b:6b:a3:4e:85:13:f0:e4:98:ed:ca:b2:44: 2f:26:6d:7d:3d:ca:e1:0a:fb:53:7d:59:e4:b4:a4: 00:cf:5a:1c:b9:54:3f:a8:1b:81:e5:05:96:f6:9f: c6:45:12:da:a7:9b:15:8f:3a:4c:b0:d6:af:e3:f6: a4:7b:a6:74:39:e9:1c:53:44:82:c0:1a:0c:52:e5: 16:55:6f:9f:4b:5f:9f:b5:1b:92:68:ee:40:2c:be: 76:7b:e0:f7:09:c7:fe:8e:6c:84:0d:5b:65:22:0a: 03:34:99:e6:4f:af:59:79:4b:78:ea:29:4b:c6:77: 4c:34:c2:4c:9f:42:a2:bd:fa:aa:be:e7:16:c6:18: 47:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BE:8F:A5:8E:51:3B:A7:86:8F:5C:23:0D:94:85:18:E9:47:15:E7:42 X509v3 Authority Key Identifier: keyid:7A:BD:31:DD:82:8D:D5:8C:9D:91:18:00:21:90:3E:A0:4D:8E:B5:8E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/f5f5ef18-6ffa-4d69-8c0c-3518cfa8758e/0/7ABD31DD828DD58C9D91180021903EA04D8EB58E.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/7ABD31DD828DD58C9D91180021903EA04D8EB58E.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f5f5ef18-6ffa-4d69-8c0c-3518cfa8758e/0/7ABD31DD828DD58C9D91180021903EA04D8EB58E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a6:85:aa:15:75:a8:76:9a:cf:d8:9d:f2:6d:57:9d:5f:24:41: b9:a4:ca:84:28:e5:1b:d8:fc:29:55:e7:93:7f:8e:cc:2b:8a: 3f:06:24:03:9d:81:39:e5:04:fe:e7:e1:c7:38:59:3b:d9:1f: a3:40:ee:6e:fd:ff:77:29:64:b8:b0:e6:e6:8f:8a:59:34:ab: c8:7c:a2:cb:4a:96:30:7f:19:66:a1:1f:d3:f1:da:67:4b:bf: 5f:7f:8b:f0:12:66:9c:78:e5:b5:6d:9c:e3:06:d9:ec:0e:fa: db:dd:3c:38:e1:ae:03:4f:d3:da:b5:d4:72:86:58:60:8f:70: 1c:8d:1b:64:12:c5:22:92:23:59:3e:c4:eb:e4:a7:2b:07:a7: f6:7a:66:51:63:01:62:4f:94:ce:14:72:ce:55:31:ae:63:76: d2:5c:2b:55:21:ad:ca:be:ea:76:03:ad:76:69:1b:4d:49:2a: f9:f7:f5:e1:5f:79:a2:e5:71:ef:5e:e8:7b:a9:0b:db:70:5a: 41:1f:97:18:99:df:63:02:71:ce:9f:04:f0:b8:2a:a0:9a:5c: 19:58:e4:09:1e:09:0c:57:25:8c:fb:57:37:7a:d7:f3:03:3a: 5f:85:33:45:76:da:1c:50:24:f6:1a:5b:19:41:c6:29:96:aa: ba:f4:9e:09 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUUwdDNgbPGMe+NZ5JzJKARraR5SswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoN0FCRDMxREQ4MjhERDU4QzlEOTExODAwMjE5MDNFQTA0 RDhFQjU4RTAeFw0yNTEyMDIxODQ2MzdaFw0yNTEyMDUxOTE5MzdaMDMxMTAvBgNV BAMTKEJFOEZBNThFNTEzQkE3ODY4RjVDMjMwRDk0ODUxOEU5NDcxNUU3NDIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC9OPK16SNRnyZtm/b3ASAcwaxo WX6VGfVfVMGA8EBlsQA6ejzuSk2fBiUhUAdtBa1DA0Aw14Iblw0aib2mQaYi2mzd REF+toxueH2J5NpSdm/r7ZKheeRUorc1ZflEhM4u8Ho8I8ttm3/h6LlGOQ+46WM8 LbEVP8zWO2ujToUT8OSY7cqyRC8mbX09yuEK+1N9WeS0pADPWhy5VD+oG4HlBZb2 n8ZFEtqnmxWPOkyw1q/j9qR7pnQ56RxTRILAGgxS5RZVb59LX5+1G5Jo7kAsvnZ7 4PcJx/6ObIQNW2UiCgM0meZPr1l5S3jqKUvGd0w0wkyfQqK9+qq+5xbGGEddAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUvo+ljlE7p4aPXCMNlIUY6UcV50IwHwYDVR0j BBgwFoAUer0x3YKN1YydkRgAIZA+oE2OtY4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m NWY1ZWYxOC02ZmZhLTRkNjktOGMwYy0zNTE4Y2ZhODc1OGUvMC83QUJEMzFERDgy OERENThDOUQ5MTE4MDAyMTkwM0VBMDREOEVCNThFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvN0FCRDMxREQ4MjhERDU4QzlEOTExODAwMjE5MDNFQTA0RDhF QjU4RS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZjVmNWVmMTgtNmZmYS00ZDY5LThj MGMtMzUxOGNmYTg3NThlLzAvN0FCRDMxREQ4MjhERDU4QzlEOTExODAwMjE5MDNF QTA0RDhFQjU4RS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKaFqhV1qHaaz9id8m1XnV8kQbmkyoQo5RvY /ClV55N/jswrij8GJAOdgTnlBP7n4cc4WTvZH6NA7m79/3cpZLiw5uaPilk0q8h8 ostKljB/GWahH9Px2mdLv19/i/ASZpx45bVtnOMG2ewO+tvdPDjhrgNP09q11HKG WGCPcByNG2QSxSKSI1k+xOvkpysHp/Z6ZlFjAWJPlM4Ucs5VMa5jdtJcK1Uhrcq+ 6nYDrXZpG01JKvn39eFfeaLlce9e6HupC9twWkEflxiZ32MCcc6fBPC4KqCaXBlY 5AkeCQxXJYz7Vzd61/MDOl+FM0V22hxQJPYaWxlBximWqrr0ngk= -----END CERTIFICATE-----Generated at Wed Dec 3 16:07:39 2025 by rpki-client