This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/f700292f-2868-47b3-ac21-600a467a7237/0/7F8FE9F94ED4A8F169D2C8A37966D06216684756.mft File: 7F8FE9F94ED4A8F169D2C8A37966D06216684756.mft (raw, json) Hash identifier: QfJhDZKZdLOyIzXhCj6ELpNjgMRoVGXqgN9NMiyiT2M= Subject key identifier: 26:5F:91:D7:90:C6:B9:56:8F:27:F7:8B:42:10:E9:59:16:86:C1:1A Authority key identifier: 7F:8F:E9:F9:4E:D4:A8:F1:69:D2:C8:A3:79:66:D0:62:16:68:47:56 Certificate issuer: /CN=7F8FE9F94ED4A8F169D2C8A37966D06216684756 Certificate serial: 79133E402F349AA55434F4F88681E6FFDB946640 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7F8FE9F94ED4A8F169D2C8A37966D06216684756.cer Subject info access: rsync://repo-rpki.idnic.net/repo/f700292f-2868-47b3-ac21-600a467a7237/0/7F8FE9F94ED4A8F169D2C8A37966D06216684756.mft Manifest number: D5 Signing time: Wed 03 Dec 2025 06:40:01 +0000 Manifest this update: Wed 03 Dec 2025 06:35:01 +0000 Manifest next update: Sat 06 Dec 2025 11:29:01 +0000 Files and hashes: 1: 33362e35302e3135342e302f32332d3234203d3e20313532303738.roa (hash: Op7L0f6zgAVUDBqJ1dF3rBL4LfH2t/QTkoViKXEVCPk=) 2: 7F8FE9F94ED4A8F169D2C8A37966D06216684756.crl (hash: Mr/osppCRMA7Smjee2VQrSFRCW62bBIgLJRTEgv8eWE=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/f700292f-2868-47b3-ac21-600a467a7237/0/7F8FE9F94ED4A8F169D2C8A37966D06216684756.crl rsync://repo-rpki.idnic.net/repo/f700292f-2868-47b3-ac21-600a467a7237/0/7F8FE9F94ED4A8F169D2C8A37966D06216684756.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7F8FE9F94ED4A8F169D2C8A37966D06216684756.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 06 Dec 2025 11:29:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 79:13:3e:40:2f:34:9a:a5:54:34:f4:f8:86:81:e6:ff:db:94:66:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7F8FE9F94ED4A8F169D2C8A37966D06216684756 Validity Not Before: Dec 3 06:35:01 2025 GMT Not After : Dec 6 11:29:01 2025 GMT Subject: CN=265F91D790C6B9568F27F78B4210E9591686C11A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:fc:01:e9:94:8c:28:22:0e:1c:38:f3:0e:d9: 60:57:df:90:ab:a4:1b:d6:2c:33:05:1b:21:87:ce: e3:7d:65:bf:32:da:6b:d1:49:7f:09:c1:d9:28:eb: 3f:d4:e1:ea:ee:04:b5:3d:25:4f:51:d6:26:c5:4e: 18:c2:6b:39:c9:a6:b8:c0:4b:4d:03:bd:4b:a2:93: 2b:93:e6:41:a6:1a:35:f8:fe:57:dc:fc:f4:a8:87: b0:c3:b1:e7:9a:67:0c:d9:86:46:34:7c:d4:3c:38: 03:be:27:2f:d2:13:c0:7b:6b:dc:df:72:78:89:a3: 0a:d9:90:a0:a8:cc:22:44:0d:1d:84:09:5e:9c:d8: b8:c5:f7:a0:35:bd:29:b0:11:0c:40:97:75:01:94: a3:75:de:ff:4d:29:7d:74:5c:45:3b:15:22:52:30: 54:77:47:98:6f:92:b6:17:b1:c9:64:93:12:d9:ad: 59:5e:96:1a:d3:d2:b5:60:1b:08:21:41:2e:01:9b: f1:2f:15:17:ed:02:1e:55:d2:a4:b5:64:69:c6:4e: 48:c1:74:dc:c5:f6:4e:ed:d4:e3:e9:01:86:23:47: 90:91:88:c9:87:ee:63:8b:62:a6:43:a4:18:7e:e3: 16:cd:e7:2e:1d:da:db:18:49:b6:62:0e:c1:a5:20: fb:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 26:5F:91:D7:90:C6:B9:56:8F:27:F7:8B:42:10:E9:59:16:86:C1:1A X509v3 Authority Key Identifier: keyid:7F:8F:E9:F9:4E:D4:A8:F1:69:D2:C8:A3:79:66:D0:62:16:68:47:56 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/f700292f-2868-47b3-ac21-600a467a7237/0/7F8FE9F94ED4A8F169D2C8A37966D06216684756.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7F8FE9F94ED4A8F169D2C8A37966D06216684756.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f700292f-2868-47b3-ac21-600a467a7237/0/7F8FE9F94ED4A8F169D2C8A37966D06216684756.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6d:98:59:22:18:5d:94:23:fc:68:f6:64:01:b0:36:a9:4f:06: 66:44:b2:f8:40:26:cd:fc:a2:b2:08:3c:6b:5c:d9:7e:42:ff: 5b:e4:c3:29:b0:e1:57:37:b7:b1:a4:24:4e:12:34:e9:49:e4: 68:74:99:12:46:11:86:0f:01:75:51:69:e0:b3:e1:6f:3e:ea: 97:1a:b9:fa:62:4b:d1:52:03:a2:10:8f:63:24:63:a1:f1:8c: 8d:cd:8b:7e:58:db:fa:55:c2:ee:f0:c2:07:0b:45:88:d1:a7: 01:dc:48:32:77:3c:31:a6:23:a5:4c:16:88:12:9a:f1:99:ee: 60:40:4a:98:25:ce:d8:82:40:dd:6c:ef:99:a8:33:95:e5:47: 8a:b8:23:bc:13:18:ec:4e:da:82:7d:3c:e2:93:82:7e:d7:2a: 0e:79:83:07:a1:29:c9:0e:5e:24:04:27:30:89:80:19:a8:ca: d7:11:18:9b:e3:10:80:61:13:01:51:fb:c2:80:e7:04:eb:51: 27:89:69:81:66:79:96:d7:8b:5b:49:ab:26:b3:4a:13:29:77: 27:e5:23:83:c4:f6:22:f8:73:f0:7c:4e:d2:ab:f2:df:42:ca: d6:bc:f8:b2:a7:3a:26:67:61:a2:7a:9b:39:bb:58:8d:59:fd: db:6a:e2:f7 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUeRM+QC80mqVUNPT4hoHm/9uUZkAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoN0Y4RkU5Rjk0RUQ0QThGMTY5RDJDOEEzNzk2NkQwNjIx NjY4NDc1NjAeFw0yNTEyMDMwNjM1MDFaFw0yNTEyMDYxMTI5MDFaMDMxMTAvBgNV BAMTKDI2NUY5MUQ3OTBDNkI5NTY4RjI3Rjc4QjQyMTBFOTU5MTY4NkMxMUEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDd/AHplIwoIg4cOPMO2WBX35Cr pBvWLDMFGyGHzuN9Zb8y2mvRSX8Jwdko6z/U4eruBLU9JU9R1ibFThjCaznJprjA S00DvUuikyuT5kGmGjX4/lfc/PSoh7DDseeaZwzZhkY0fNQ8OAO+Jy/SE8B7a9zf cniJowrZkKCozCJEDR2ECV6c2LjF96A1vSmwEQxAl3UBlKN13v9NKX10XEU7FSJS MFR3R5hvkrYXsclkkxLZrVlelhrT0rVgGwghQS4Bm/EvFRftAh5V0qS1ZGnGTkjB dNzF9k7t1OPpAYYjR5CRiMmH7mOLYqZDpBh+4xbN5y4d2tsYSbZiDsGlIPulAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUJl+R15DGuVaPJ/eLQhDpWRaGwRowHwYDVR0j BBgwFoAUf4/p+U7UqPFp0sijeWbQYhZoR1YwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m NzAwMjkyZi0yODY4LTQ3YjMtYWMyMS02MDBhNDY3YTcyMzcvMC83RjhGRTlGOTRF RDRBOEYxNjlEMkM4QTM3OTY2RDA2MjE2Njg0NzU2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvN0Y4RkU5Rjk0RUQ0QThGMTY5RDJDOEEzNzk2NkQwNjIxNjY4 NDc1Ni5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZjcwMDI5MmYtMjg2OC00N2IzLWFj MjEtNjAwYTQ2N2E3MjM3LzAvN0Y4RkU5Rjk0RUQ0QThGMTY5RDJDOEEzNzk2NkQw NjIxNjY4NDc1Ni5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAG2YWSIYXZQj/Gj2ZAGwNqlPBmZEsvhAJs38 orIIPGtc2X5C/1vkwymw4Vc3t7GkJE4SNOlJ5Gh0mRJGEYYPAXVRaeCz4W8+6pca ufpiS9FSA6IQj2MkY6HxjI3Ni35Y2/pVwu7wwgcLRYjRpwHcSDJ3PDGmI6VMFogS mvGZ7mBASpglztiCQN1s75moM5XlR4q4I7wTGOxO2oJ9POKTgn7XKg55gwehKckO XiQEJzCJgBmoytcRGJvjEIBhEwFR+8KA5wTrUSeJaYFmeZbXi1tJqyazShMpdyfl I4PE9iL4c/B8TtKr8t9Cyta8+LKnOiZnYaJ6mzm7WI1Z/dtq4vc= -----END CERTIFICATE-----Generated at Wed Dec 3 15:31:35 2025 by rpki-client