This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/0260cf16-74ff-4f2f-b56c-e581eaea251c/0/7C8592B080A17A9CE2F782DEA4C1297A97B60CDC.mft File: 7C8592B080A17A9CE2F782DEA4C1297A97B60CDC.mft (raw, json) Hash identifier: qlEriwaycW+Q/sPTe8Dn9BDuPURD1H/NDiNFRz+BdI4= Subject key identifier: 99:EF:96:8B:E4:99:16:C4:0C:44:73:D7:7D:41:5D:F5:0F:62:2C:9F Authority key identifier: 7C:85:92:B0:80:A1:7A:9C:E2:F7:82:DE:A4:C1:29:7A:97:B6:0C:DC Certificate issuer: /CN=7C8592B080A17A9CE2F782DEA4C1297A97B60CDC Certificate serial: 626C58190B6515B23BC347A56CA7737417656CBE Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7C8592B080A17A9CE2F782DEA4C1297A97B60CDC.cer Subject info access: rsync://repo-rpki.idnic.net/repo/0260cf16-74ff-4f2f-b56c-e581eaea251c/0/7C8592B080A17A9CE2F782DEA4C1297A97B60CDC.mft Manifest number: 01D7 Signing time: Thu 18 Dec 2025 22:31:39 +0000 Manifest this update: Thu 18 Dec 2025 22:26:39 +0000 Manifest next update: Mon 22 Dec 2025 07:02:39 +0000 Files and hashes: 1: 3130332e36382e3231322e302f32332d3234203d3e20313530353330.roa (hash: Nk9phGucQoo8PmtyMYR++nZZTYHkNvUwA44i3ekXmE8=) 2: 3130332e36382e3231332e302f32342d3234203d3e20313530353330.roa (hash: 2/Qb3c0bt3pvu3MOhYdRbpd22v0hv9oGMy4MRimk3NI=) 3: 3130332e36382e3231322e302f32342d3234203d3e20313530353330.roa (hash: TpxCUfp4Af1tupXiHm2v8CcxDZArBtsyxFgzO8Ydoi8=) 4: 7C8592B080A17A9CE2F782DEA4C1297A97B60CDC.crl (hash: fAAkDvl7JLVSKksHhDQCtZ1KGxRk60IgqII5+5vVM/o=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/0260cf16-74ff-4f2f-b56c-e581eaea251c/0/7C8592B080A17A9CE2F782DEA4C1297A97B60CDC.crl rsync://repo-rpki.idnic.net/repo/0260cf16-74ff-4f2f-b56c-e581eaea251c/0/7C8592B080A17A9CE2F782DEA4C1297A97B60CDC.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7C8592B080A17A9CE2F782DEA4C1297A97B60CDC.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 22 Dec 2025 07:02:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 62:6c:58:19:0b:65:15:b2:3b:c3:47:a5:6c:a7:73:74:17:65:6c:be Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7C8592B080A17A9CE2F782DEA4C1297A97B60CDC Validity Not Before: Dec 18 22:26:39 2025 GMT Not After : Dec 22 07:02:39 2025 GMT Subject: CN=99EF968BE49916C40C4473D77D415DF50F622C9F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:fd:ca:d5:4b:6d:70:f5:3f:c4:aa:0b:7c:2b: be:d2:80:20:e1:9a:b8:a1:27:34:8d:f1:4b:36:8d: 0c:40:cd:0e:8a:b3:a0:31:cd:eb:38:ef:12:48:7d: dc:7a:e3:34:bf:8d:09:de:62:c3:2c:10:ed:1c:b1: fb:bb:54:24:e3:70:a3:a3:e1:ba:89:a2:7e:d8:b8: eb:91:fc:6e:7f:3f:90:14:3a:d2:cb:e5:e0:91:ca: 38:67:ef:51:2e:f9:7b:21:01:99:8e:69:f0:fa:c7: ed:da:16:b6:4f:11:85:91:0d:67:43:4a:0d:5b:1e: 60:ad:58:c7:29:86:f4:e5:09:47:1f:d8:f8:0c:b3: 3c:c0:33:98:0c:e4:0f:9d:43:3e:66:a3:11:c1:f7: a8:7a:e0:eb:bc:94:57:92:e7:8d:f5:1c:c3:18:72: 9a:06:7e:e5:d2:ad:d0:30:5e:ee:73:f2:33:01:04: a7:79:c1:71:45:55:5b:fc:e4:69:07:ff:57:3c:1f: 40:18:11:85:3b:45:d6:a0:87:49:5c:80:a3:3a:ba: 06:22:06:24:c1:8b:c2:b2:dc:df:82:f0:30:87:04: 93:a5:63:c8:aa:e3:61:79:63:e4:eb:d3:13:a0:64: eb:2f:64:2d:98:27:da:ad:28:20:86:e4:82:8e:e7: 36:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:EF:96:8B:E4:99:16:C4:0C:44:73:D7:7D:41:5D:F5:0F:62:2C:9F X509v3 Authority Key Identifier: keyid:7C:85:92:B0:80:A1:7A:9C:E2:F7:82:DE:A4:C1:29:7A:97:B6:0C:DC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/0260cf16-74ff-4f2f-b56c-e581eaea251c/0/7C8592B080A17A9CE2F782DEA4C1297A97B60CDC.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7C8592B080A17A9CE2F782DEA4C1297A97B60CDC.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/0260cf16-74ff-4f2f-b56c-e581eaea251c/0/7C8592B080A17A9CE2F782DEA4C1297A97B60CDC.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5f:4f:9c:f5:ce:a6:cd:d8:e6:ec:37:e6:cb:a8:15:41:cf:af: 69:06:99:e1:ad:ff:04:73:48:6c:5b:62:ed:7e:94:57:4d:34: 2a:b0:05:d0:d0:0b:c9:03:17:c2:77:42:17:fb:c0:c0:af:54: 95:52:e8:47:c3:6c:0d:ce:dd:f0:c3:a1:f7:5f:68:5e:e2:e1: 45:a5:31:3e:3d:65:b3:b5:7c:67:c7:f0:17:a2:32:f3:9d:11: 94:39:0a:7c:26:d6:5d:bc:c5:53:ec:18:d3:c3:42:e3:f7:89: 76:01:70:57:af:bf:70:fd:3a:ec:91:cf:8a:c4:48:61:b5:86: 7a:ba:3b:3b:e4:0c:05:64:eb:2d:cf:f0:0a:79:7f:aa:f5:d6: 4d:70:62:11:2e:2a:21:f6:71:f6:dc:7f:78:c7:1e:3b:9c:4c: 92:d2:53:52:46:86:3b:c6:4d:af:f8:0f:53:20:92:7a:f7:fe: 94:0d:2f:79:35:08:be:c4:7a:cc:c3:63:a0:e9:cb:a2:3e:06: 84:c2:dd:c5:a7:fc:cb:96:37:06:b8:86:55:ac:50:d1:b7:2c: bc:5b:c7:bd:49:c1:e1:4d:c5:01:20:fd:e5:31:0e:58:d0:dc: a2:b2:5c:c2:ab:7f:51:95:6b:03:66:2f:1c:a6:e1:20:93:f3: 37:b4:c1:fc -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUYmxYGQtlFbI7w0elbKdzdBdlbL4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoN0M4NTkyQjA4MEExN0E5Q0UyRjc4MkRFQTRDMTI5N0E5 N0I2MENEQzAeFw0yNTEyMTgyMjI2MzlaFw0yNTEyMjIwNzAyMzlaMDMxMTAvBgNV BAMTKDk5RUY5NjhCRTQ5OTE2QzQwQzQ0NzNENzdENDE1REY1MEY2MjJDOUYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDU/crVS21w9T/Eqgt8K77SgCDh mrihJzSN8Us2jQxAzQ6Ks6Axzes47xJIfdx64zS/jQneYsMsEO0csfu7VCTjcKOj 4bqJon7YuOuR/G5/P5AUOtLL5eCRyjhn71Eu+XshAZmOafD6x+3aFrZPEYWRDWdD Sg1bHmCtWMcphvTlCUcf2PgMszzAM5gM5A+dQz5moxHB96h64Ou8lFeS5431HMMY cpoGfuXSrdAwXu5z8jMBBKd5wXFFVVv85GkH/1c8H0AYEYU7Rdagh0lcgKM6ugYi BiTBi8Ky3N+C8DCHBJOlY8iq42F5Y+Tr0xOgZOsvZC2YJ9qtKCCG5IKO5zbdAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUme+Wi+SZFsQMRHPXfUFd9Q9iLJ8wHwYDVR0j BBgwFoAUfIWSsIChepzi94LepMEpepe2DNwwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w MjYwY2YxNi03NGZmLTRmMmYtYjU2Yy1lNTgxZWFlYTI1MWMvMC83Qzg1OTJCMDgw QTE3QTlDRTJGNzgyREVBNEMxMjk3QTk3QjYwQ0RDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvN0M4NTkyQjA4MEExN0E5Q0UyRjc4MkRFQTRDMTI5N0E5N0I2 MENEQy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMDI2MGNmMTYtNzRmZi00ZjJmLWI1 NmMtZTU4MWVhZWEyNTFjLzAvN0M4NTkyQjA4MEExN0E5Q0UyRjc4MkRFQTRDMTI5 N0E5N0I2MENEQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAF9PnPXOps3Y5uw35suoFUHPr2kGmeGt/wRz SGxbYu1+lFdNNCqwBdDQC8kDF8J3Qhf7wMCvVJVS6EfDbA3O3fDDofdfaF7i4UWl MT49ZbO1fGfH8BeiMvOdEZQ5Cnwm1l28xVPsGNPDQuP3iXYBcFevv3D9OuyRz4rE SGG1hnq6OzvkDAVk6y3P8Ap5f6r11k1wYhEuKiH2cfbcf3jHHjucTJLSU1JGhjvG Ta/4D1Mgknr3/pQNL3k1CL7EeszDY6Dpy6I+BoTC3cWn/MuWNwa4hlWsUNG3LLxb x71JweFNxQEg/eUxDljQ3KKyXMKrf1GVawNmLxym4SCT8ze0wfw= -----END CERTIFICATE-----Generated at Sat Dec 20 08:41:20 2025 by rpki-client