This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/0616c04d-d9e0-4c1f-8a14-e23bf2744592/0/B7A3DE017FB3D740B29322D818D5C6A8FE6D4C30.mft File: B7A3DE017FB3D740B29322D818D5C6A8FE6D4C30.mft (raw, json) Hash identifier: Pgqteq+6VYD4y5SJGNk/0Frlq7AUkLwkqAixNHNPG0E= Subject key identifier: 71:D8:9B:78:6A:28:26:65:6B:11:87:F5:BE:9C:9D:4D:1B:12:7E:97 Authority key identifier: B7:A3:DE:01:7F:B3:D7:40:B2:93:22:D8:18:D5:C6:A8:FE:6D:4C:30 Certificate issuer: /CN=B7A3DE017FB3D740B29322D818D5C6A8FE6D4C30 Certificate serial: 31F075E3FE3E552F52D91AC133149B1722E163AD Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B7A3DE017FB3D740B29322D818D5C6A8FE6D4C30.cer Subject info access: rsync://repo-rpki.idnic.net/repo/0616c04d-d9e0-4c1f-8a14-e23bf2744592/0/B7A3DE017FB3D740B29322D818D5C6A8FE6D4C30.mft Manifest number: 0146 Signing time: Sun 21 Dec 2025 18:21:23 +0000 Manifest this update: Sun 21 Dec 2025 18:16:23 +0000 Manifest next update: Thu 25 Dec 2025 02:58:23 +0000 Files and hashes: 1: 3130332e3231352e36302e302f32342d3234203d3e20313531353033.roa (hash: c5Ptunx0DxSg1RC8HNdaw2kkwRNC2sVu1ggTOO3Xchs=) 2: 3130332e3231352e36312e302f32342d3234203d3e20313531353033.roa (hash: D+929vyik9rLnra49U9ffY9oB4C7JSkmWEo+cZ0qzyk=) 3: B7A3DE017FB3D740B29322D818D5C6A8FE6D4C30.crl (hash: 7AsCiNz3hVkwjBOLuTw/tYRZ74D6DKl+MYb7zijfmkM=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/0616c04d-d9e0-4c1f-8a14-e23bf2744592/0/B7A3DE017FB3D740B29322D818D5C6A8FE6D4C30.crl rsync://repo-rpki.idnic.net/repo/0616c04d-d9e0-4c1f-8a14-e23bf2744592/0/B7A3DE017FB3D740B29322D818D5C6A8FE6D4C30.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B7A3DE017FB3D740B29322D818D5C6A8FE6D4C30.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 24 Dec 2025 07:39:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 31:f0:75:e3:fe:3e:55:2f:52:d9:1a:c1:33:14:9b:17:22:e1:63:ad Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B7A3DE017FB3D740B29322D818D5C6A8FE6D4C30 Validity Not Before: Dec 21 18:16:23 2025 GMT Not After : Dec 25 02:58:23 2025 GMT Subject: CN=71D89B786A2826656B1187F5BE9C9D4D1B127E97 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:c4:07:96:f8:8a:bd:83:d1:e6:ef:00:51:0c: 34:6a:c4:4b:04:95:76:c3:e5:02:28:56:ce:34:2c: f4:17:a0:e1:3e:0e:60:99:11:92:78:9a:dd:ef:44: c3:d5:0d:f5:83:a3:f7:d2:1c:22:20:e3:44:e7:97: 72:33:79:b3:33:d7:f0:a6:57:01:72:eb:9c:4c:bb: 06:e7:58:a0:8d:8d:0c:01:9b:01:46:53:c8:5c:c6: ae:4a:a8:ff:a1:eb:7c:69:92:f0:5b:cd:1b:5c:a3: 97:b4:f9:98:26:a3:91:c0:e6:ff:71:e3:46:a3:6e: d0:88:2c:d2:40:a2:a8:ba:72:1b:ab:48:54:bb:c0: 95:6f:77:d9:be:6d:8d:81:97:27:8b:5f:12:f1:a7: ab:f7:4e:d7:40:8d:5c:f1:8a:cf:d1:e2:2b:7f:b1: b5:d3:e2:fb:a0:4c:d7:1e:84:83:b5:e6:9f:35:a2: 1f:2e:11:ed:48:49:a3:5a:29:90:2e:88:5c:31:d4: 30:2e:f1:ef:bb:3b:05:8e:7e:4e:e9:8a:3f:69:69: 42:f9:53:0f:71:16:20:cd:3a:cd:0d:6c:36:0a:82: 40:64:24:49:75:00:55:42:f3:1f:4c:8b:45:4e:43: 9b:bb:95:e7:54:50:e4:e3:76:df:d9:63:26:72:21: e7:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:D8:9B:78:6A:28:26:65:6B:11:87:F5:BE:9C:9D:4D:1B:12:7E:97 X509v3 Authority Key Identifier: keyid:B7:A3:DE:01:7F:B3:D7:40:B2:93:22:D8:18:D5:C6:A8:FE:6D:4C:30 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/0616c04d-d9e0-4c1f-8a14-e23bf2744592/0/B7A3DE017FB3D740B29322D818D5C6A8FE6D4C30.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B7A3DE017FB3D740B29322D818D5C6A8FE6D4C30.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/0616c04d-d9e0-4c1f-8a14-e23bf2744592/0/B7A3DE017FB3D740B29322D818D5C6A8FE6D4C30.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 34:34:e3:46:d9:40:da:f9:22:0e:92:28:7b:4e:46:df:22:f7: 2a:08:3f:23:37:0c:d5:d2:05:93:75:0b:91:b0:d5:67:7d:bb: 82:29:22:68:32:3d:bf:17:eb:7b:da:b4:0b:c4:28:f6:fb:97: 03:17:6b:63:50:f7:30:61:f9:24:12:a5:f7:02:1c:6a:41:d6: 24:61:a6:5f:9f:b2:02:f8:23:51:73:90:bb:5e:27:e0:7b:a2: 10:ac:19:93:94:a9:b5:a0:fb:69:d0:a2:23:67:df:3c:66:3c: 23:9d:69:ff:0e:ff:a7:18:22:c1:14:7b:c2:9d:93:53:68:c4: 7e:93:3b:3d:7c:95:44:40:cc:bb:3f:5c:d2:f4:e7:4d:f1:a2: 6b:42:c8:d0:4f:25:ea:fc:a1:21:73:fb:aa:81:a9:92:94:f9: 16:3d:19:64:7b:51:19:8c:f1:27:d7:eb:39:9d:d4:c9:7a:c3: 82:11:1d:a1:88:86:90:b2:2e:92:ad:7e:17:e4:dd:7b:a4:31: 3e:16:6f:fe:6b:80:ef:9b:9b:81:f6:49:51:82:f5:fd:aa:c1: 7f:e8:94:1d:29:30:e5:75:4e:ba:cb:af:73:e8:11:8f:6d:99: a6:6a:be:e0:c7:25:19:e5:49:8c:1a:3d:e4:51:20:c8:12:52: 8b:10:f7:e3 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUMfB14/4+VS9S2RrBMxSbFyLhY60wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjdBM0RFMDE3RkIzRDc0MEIyOTMyMkQ4MThENUM2QThG RTZENEMzMDAeFw0yNTEyMjExODE2MjNaFw0yNTEyMjUwMjU4MjNaMDMxMTAvBgNV BAMTKDcxRDg5Qjc4NkEyODI2NjU2QjExODdGNUJFOUM5RDREMUIxMjdFOTcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDLxAeW+Iq9g9Hm7wBRDDRqxEsE lXbD5QIoVs40LPQXoOE+DmCZEZJ4mt3vRMPVDfWDo/fSHCIg40Tnl3IzebMz1/Cm VwFy65xMuwbnWKCNjQwBmwFGU8hcxq5KqP+h63xpkvBbzRtco5e0+Zgmo5HA5v9x 40ajbtCILNJAoqi6churSFS7wJVvd9m+bY2BlyeLXxLxp6v3TtdAjVzxis/R4it/ sbXT4vugTNcehIO15p81oh8uEe1ISaNaKZAuiFwx1DAu8e+7OwWOfk7pij9paUL5 Uw9xFiDNOs0NbDYKgkBkJEl1AFVC8x9Mi0VOQ5u7ledUUOTjdt/ZYyZyIefFAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUcdibeGooJmVrEYf1vpydTRsSfpcwHwYDVR0j BBgwFoAUt6PeAX+z10CykyLYGNXGqP5tTDAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w NjE2YzA0ZC1kOWUwLTRjMWYtOGExNC1lMjNiZjI3NDQ1OTIvMC9CN0EzREUwMTdG QjNENzQwQjI5MzIyRDgxOEQ1QzZBOEZFNkQ0QzMwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQjdBM0RFMDE3RkIzRDc0MEIyOTMyMkQ4MThENUM2QThGRTZE NEMzMC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMDYxNmMwNGQtZDllMC00YzFmLThh MTQtZTIzYmYyNzQ0NTkyLzAvQjdBM0RFMDE3RkIzRDc0MEIyOTMyMkQ4MThENUM2 QThGRTZENEMzMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADQ040bZQNr5Ig6SKHtORt8i9yoIPyM3DNXS BZN1C5Gw1Wd9u4IpImgyPb8X63vatAvEKPb7lwMXa2NQ9zBh+SQSpfcCHGpB1iRh pl+fsgL4I1FzkLteJ+B7ohCsGZOUqbWg+2nQoiNn3zxmPCOdaf8O/6cYIsEUe8Kd k1NoxH6TOz18lURAzLs/XNL0503xomtCyNBPJer8oSFz+6qBqZKU+RY9GWR7URmM 8SfX6zmd1Ml6w4IRHaGIhpCyLpKtfhfk3XukMT4Wb/5rgO+bm4H2SVGC9f2qwX/o lB0pMOV1TrrLr3PoEY9tmaZqvuDHJRnlSYwaPeRRIMgSUosQ9+M= -----END CERTIFICATE-----Generated at Wed Dec 24 02:59:41 2025 by rpki-client