This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/0616c04d-d9e0-4c1f-8a14-e23bf2744592/0/B7A3DE017FB3D740B29322D818D5C6A8FE6D4C30.mft File: B7A3DE017FB3D740B29322D818D5C6A8FE6D4C30.mft (raw, json) Hash identifier: wAhYVISJXzHt+SVz4lk6+tppsJVTf6fqsUFt7ma9U3Q= Subject key identifier: 93:91:B6:3D:53:42:5C:9A:ED:DA:5B:34:9F:0D:E0:99:BD:54:42:78 Authority key identifier: B7:A3:DE:01:7F:B3:D7:40:B2:93:22:D8:18:D5:C6:A8:FE:6D:4C:30 Certificate issuer: /CN=B7A3DE017FB3D740B29322D818D5C6A8FE6D4C30 Certificate serial: 235D802A0D5B2D75027366F58E819C482C3EBAEF Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B7A3DE017FB3D740B29322D818D5C6A8FE6D4C30.cer Subject info access: rsync://repo-rpki.idnic.net/repo/0616c04d-d9e0-4c1f-8a14-e23bf2744592/0/B7A3DE017FB3D740B29322D818D5C6A8FE6D4C30.mft Manifest number: 0144 Signing time: Wed 17 Dec 2025 11:21:22 +0000 Manifest this update: Wed 17 Dec 2025 11:16:22 +0000 Manifest next update: Sat 20 Dec 2025 15:05:22 +0000 Files and hashes: 1: 3130332e3231352e36302e302f32342d3234203d3e20313531353033.roa (hash: c5Ptunx0DxSg1RC8HNdaw2kkwRNC2sVu1ggTOO3Xchs=) 2: B7A3DE017FB3D740B29322D818D5C6A8FE6D4C30.crl (hash: F5aMMrIC3i8pg8HBQb8Pe644UhUFjo5FFcSrimtw4T4=) 3: 3130332e3231352e36312e302f32342d3234203d3e20313531353033.roa (hash: D+929vyik9rLnra49U9ffY9oB4C7JSkmWEo+cZ0qzyk=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/0616c04d-d9e0-4c1f-8a14-e23bf2744592/0/B7A3DE017FB3D740B29322D818D5C6A8FE6D4C30.crl rsync://repo-rpki.idnic.net/repo/0616c04d-d9e0-4c1f-8a14-e23bf2744592/0/B7A3DE017FB3D740B29322D818D5C6A8FE6D4C30.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B7A3DE017FB3D740B29322D818D5C6A8FE6D4C30.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 20 Dec 2025 15:05:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 23:5d:80:2a:0d:5b:2d:75:02:73:66:f5:8e:81:9c:48:2c:3e:ba:ef Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B7A3DE017FB3D740B29322D818D5C6A8FE6D4C30 Validity Not Before: Dec 17 11:16:22 2025 GMT Not After : Dec 20 15:05:22 2025 GMT Subject: CN=9391B63D53425C9AEDDA5B349F0DE099BD544278 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ec:b6:24:ca:3e:d4:bf:5b:ba:99:a7:42:0a:95: 95:f0:30:37:ba:bb:e0:f9:37:04:39:cb:da:cf:bd: 2b:69:a5:e3:48:b8:e8:db:53:0c:3e:17:91:5c:f0: d7:81:59:0d:3f:29:46:43:d2:34:71:86:63:ec:c5: 37:2d:7b:47:cd:83:85:be:c6:54:d8:f9:7f:a3:8a: d7:a5:c2:56:96:f0:f6:95:50:e0:5a:ff:57:fc:10: fb:ab:23:89:c9:cd:51:c5:2f:7b:a0:99:1c:fb:86: 13:e5:43:23:74:3b:a4:33:53:c9:fa:84:77:02:e5: 50:a8:8a:44:5f:df:fc:86:c0:c5:66:30:46:20:bb: 1f:39:c5:79:b3:e4:ab:50:05:f3:fa:ba:7a:5f:55: 5e:76:6f:79:b3:48:4e:05:70:91:87:57:61:7a:b0: 29:37:32:1e:c6:fe:58:6b:c1:a0:87:8c:57:5b:f5: fc:aa:77:d6:8b:5d:96:21:4d:4c:41:b2:11:0b:f4: 6a:b1:2e:11:4e:21:a6:20:4c:33:b7:57:b8:be:83: 20:19:67:37:4f:3f:0c:ec:8a:ef:0c:84:79:d5:c0: 36:97:61:21:de:eb:81:4e:0a:a9:18:66:45:ec:54: d4:a4:f5:92:a3:92:bf:1c:c9:4d:6f:35:fa:6a:a4: d0:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 93:91:B6:3D:53:42:5C:9A:ED:DA:5B:34:9F:0D:E0:99:BD:54:42:78 X509v3 Authority Key Identifier: keyid:B7:A3:DE:01:7F:B3:D7:40:B2:93:22:D8:18:D5:C6:A8:FE:6D:4C:30 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/0616c04d-d9e0-4c1f-8a14-e23bf2744592/0/B7A3DE017FB3D740B29322D818D5C6A8FE6D4C30.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B7A3DE017FB3D740B29322D818D5C6A8FE6D4C30.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/0616c04d-d9e0-4c1f-8a14-e23bf2744592/0/B7A3DE017FB3D740B29322D818D5C6A8FE6D4C30.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 82:88:ff:bc:93:07:10:72:1f:39:6e:3f:8b:0c:8c:86:ec:cc: 84:4f:14:55:59:9c:32:42:a1:6f:e8:3f:42:8d:4b:a4:b6:85: 05:8a:90:39:cd:c1:f2:be:dd:5c:d0:47:06:f6:8f:28:6a:c8: fc:ec:63:48:b4:93:a6:90:1f:fa:dd:23:58:29:9c:1e:1d:51: 5c:1a:c0:b2:a0:40:07:32:b5:2a:66:b5:ec:63:58:e1:db:ee: 3e:8c:2f:0c:a3:af:df:02:91:d1:bf:07:28:e7:9f:9a:30:4c: 96:62:5c:cd:0c:d2:25:37:7b:61:3c:7b:f1:b6:d6:f3:b0:e0: d7:24:f1:6c:e0:26:ea:78:3e:07:65:df:76:18:f6:48:a4:79: 44:80:59:8a:72:0d:04:d9:ac:02:bd:b4:6d:32:30:1c:59:48: e9:d5:9e:c7:12:8c:b2:c8:fe:aa:4e:59:6f:15:72:ee:5c:f5: 1a:79:e1:45:cf:d2:66:84:22:bd:0b:66:09:07:7d:75:05:bf: 57:d8:92:6e:fe:e2:72:1e:2d:7e:78:4b:28:83:8e:42:e1:63: 13:e2:7c:6d:5f:4f:6e:1f:32:26:8c:3b:70:85:d9:e6:1e:b8: 5f:0d:99:a8:77:86:be:46:67:d9:d1:d9:0c:b0:42:06:70:ee: f4:25:b5:2e -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUI12AKg1bLXUCc2b1joGcSCw+uu8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjdBM0RFMDE3RkIzRDc0MEIyOTMyMkQ4MThENUM2QThG RTZENEMzMDAeFw0yNTEyMTcxMTE2MjJaFw0yNTEyMjAxNTA1MjJaMDMxMTAvBgNV BAMTKDkzOTFCNjNENTM0MjVDOUFFRERBNUIzNDlGMERFMDk5QkQ1NDQyNzgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDstiTKPtS/W7qZp0IKlZXwMDe6 u+D5NwQ5y9rPvStppeNIuOjbUww+F5Fc8NeBWQ0/KUZD0jRxhmPsxTcte0fNg4W+ xlTY+X+jitelwlaW8PaVUOBa/1f8EPurI4nJzVHFL3ugmRz7hhPlQyN0O6QzU8n6 hHcC5VCoikRf3/yGwMVmMEYgux85xXmz5KtQBfP6unpfVV52b3mzSE4FcJGHV2F6 sCk3Mh7G/lhrwaCHjFdb9fyqd9aLXZYhTUxBshEL9GqxLhFOIaYgTDO3V7i+gyAZ ZzdPPwzsiu8MhHnVwDaXYSHe64FOCqkYZkXsVNSk9ZKjkr8cyU1vNfpqpNCdAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUk5G2PVNCXJrt2ls0nw3gmb1UQngwHwYDVR0j BBgwFoAUt6PeAX+z10CykyLYGNXGqP5tTDAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w NjE2YzA0ZC1kOWUwLTRjMWYtOGExNC1lMjNiZjI3NDQ1OTIvMC9CN0EzREUwMTdG QjNENzQwQjI5MzIyRDgxOEQ1QzZBOEZFNkQ0QzMwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQjdBM0RFMDE3RkIzRDc0MEIyOTMyMkQ4MThENUM2QThGRTZE NEMzMC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMDYxNmMwNGQtZDllMC00YzFmLThh MTQtZTIzYmYyNzQ0NTkyLzAvQjdBM0RFMDE3RkIzRDc0MEIyOTMyMkQ4MThENUM2 QThGRTZENEMzMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIKI/7yTBxByHzluP4sMjIbszIRPFFVZnDJC oW/oP0KNS6S2hQWKkDnNwfK+3VzQRwb2jyhqyPzsY0i0k6aQH/rdI1gpnB4dUVwa wLKgQAcytSpmtexjWOHb7j6MLwyjr98CkdG/Byjnn5owTJZiXM0M0iU3e2E8e/G2 1vOw4Nck8WzgJup4Pgdl33YY9kikeUSAWYpyDQTZrAK9tG0yMBxZSOnVnscSjLLI /qpOWW8Vcu5c9Rp54UXP0maEIr0LZgkHfXUFv1fYkm7+4nIeLX54SyiDjkLhYxPi fG1fT24fMiaMO3CF2eYeuF8Nmah3hr5GZ9nR2QywQgZw7vQltS4= -----END CERTIFICATE-----Generated at Wed Dec 17 21:58:51 2025 by rpki-client