This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/0a7083ab-270a-4b0a-8e55-a45e1cf1afd5/0/E7D91E7B841DB274E77E823084312F8B78A5C951.mft File: E7D91E7B841DB274E77E823084312F8B78A5C951.mft (raw, json) Hash identifier: sOy+S3kjCAfLWDCPfmphJrgtyu4vA3yyBXkh8WvkaKs= Subject key identifier: 77:4E:87:56:87:2F:6E:E5:5A:24:11:C6:92:E7:5E:76:D1:C7:A0:BA Authority key identifier: E7:D9:1E:7B:84:1D:B2:74:E7:7E:82:30:84:31:2F:8B:78:A5:C9:51 Certificate issuer: /CN=E7D91E7B841DB274E77E823084312F8B78A5C951 Certificate serial: 1560959218EA625B77CF5529E0DCA6F0064E3527 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E7D91E7B841DB274E77E823084312F8B78A5C951.cer Subject info access: rsync://repo-rpki.idnic.net/repo/0a7083ab-270a-4b0a-8e55-a45e1cf1afd5/0/E7D91E7B841DB274E77E823084312F8B78A5C951.mft Manifest number: 04F9 Signing time: Sun 21 Dec 2025 03:12:14 +0000 Manifest this update: Sun 21 Dec 2025 03:07:14 +0000 Manifest next update: Wed 24 Dec 2025 07:52:14 +0000 Files and hashes: 1: E7D91E7B841DB274E77E823084312F8B78A5C951.crl (hash: 2gOcp6iW8x7YcvVuZn5xK7zG+HveUrt7CMlhX+vCvX4=) 2: 3130332e3134312e3233382e302f32332d3234203d3e20313339333637.roa (hash: Q8AiVS513YZaJstY9RUzjxicepMe2vYlP+usoxO41hE=) 3: 323030313a6466313a316338303a3a2f34382d3438203d3e20313339333637.roa (hash: FLALrXW88OdyfJgNAdKbgu+otxNBlGdrwAiQnaIoTaE=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/0a7083ab-270a-4b0a-8e55-a45e1cf1afd5/0/E7D91E7B841DB274E77E823084312F8B78A5C951.crl rsync://repo-rpki.idnic.net/repo/0a7083ab-270a-4b0a-8e55-a45e1cf1afd5/0/E7D91E7B841DB274E77E823084312F8B78A5C951.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E7D91E7B841DB274E77E823084312F8B78A5C951.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 24 Dec 2025 07:39:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 15:60:95:92:18:ea:62:5b:77:cf:55:29:e0:dc:a6:f0:06:4e:35:27 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E7D91E7B841DB274E77E823084312F8B78A5C951 Validity Not Before: Dec 21 03:07:14 2025 GMT Not After : Dec 24 07:52:14 2025 GMT Subject: CN=774E8756872F6EE55A2411C692E75E76D1C7A0BA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:4e:e0:72:cd:a1:c1:42:7b:4c:4b:af:a8:cd: 55:d2:ff:ac:36:97:e8:df:0b:b6:fa:c1:9b:e0:c3: 29:c0:bb:37:9c:06:da:24:df:9d:b4:84:09:d5:39: ad:74:2d:68:c3:98:5c:55:0b:02:d0:4a:55:b6:c2: 28:ef:c7:d7:4a:78:04:f2:5a:64:e6:16:3d:b9:4d: bd:0c:aa:b2:6a:8b:65:08:07:18:5d:74:9f:dc:df: 2b:a2:6d:ef:e5:d2:2f:98:d7:6e:e6:7b:ee:b9:dc: b1:b1:40:e5:d9:34:a0:f5:79:c2:e9:ca:3b:33:e8: 60:f8:02:5f:a3:ff:db:a1:b5:3d:a0:9a:21:c2:43: a9:a8:f4:d4:d7:23:68:54:91:12:a4:a7:a4:9b:ff: 36:29:ce:7f:fa:6a:bd:0e:8f:f7:09:0f:9e:05:d7: 9e:b7:4a:33:14:b7:de:0a:72:37:cf:75:91:2b:65: 55:9c:68:04:e3:18:8a:0d:22:ce:76:f5:e8:ad:56: 4b:e3:92:dd:fd:d6:83:cb:8b:40:10:c1:46:97:7c: 11:72:7b:09:b9:cb:b4:8f:c5:77:88:89:ef:c0:fa: f6:75:52:05:5b:2a:3d:95:94:de:db:5c:4d:41:54: 2a:b6:ac:5f:ae:d8:48:e0:c5:97:23:a4:97:06:39: f0:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 77:4E:87:56:87:2F:6E:E5:5A:24:11:C6:92:E7:5E:76:D1:C7:A0:BA X509v3 Authority Key Identifier: keyid:E7:D9:1E:7B:84:1D:B2:74:E7:7E:82:30:84:31:2F:8B:78:A5:C9:51 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/0a7083ab-270a-4b0a-8e55-a45e1cf1afd5/0/E7D91E7B841DB274E77E823084312F8B78A5C951.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E7D91E7B841DB274E77E823084312F8B78A5C951.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/0a7083ab-270a-4b0a-8e55-a45e1cf1afd5/0/E7D91E7B841DB274E77E823084312F8B78A5C951.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 51:6d:8e:ed:e6:a7:53:30:16:74:1f:53:9d:91:19:d9:11:40: bb:ac:50:1b:bc:d3:db:22:fe:7b:a3:a6:93:0b:6a:25:48:15: 99:4d:fb:ad:ea:7c:86:cb:f5:b6:eb:67:99:e6:d8:11:20:d4: 7b:f7:ea:f2:cb:6d:ec:eb:34:7b:6e:f7:6e:2d:df:7c:03:4e: 06:6b:3f:c1:2f:8c:9a:d5:5c:1e:41:ec:c3:8e:1f:f1:09:14: a6:4e:21:08:4d:c9:db:5e:16:13:5c:93:cf:76:fc:18:02:37: b5:e5:7a:77:a0:7e:73:18:d4:56:54:6d:b3:ce:cb:07:00:aa: b4:5b:f9:2e:f7:80:90:a2:c3:6f:b6:b7:8c:74:a9:4e:49:5c: 04:ae:ff:32:f6:e8:7d:e4:42:05:5a:ee:cc:69:55:4d:3e:5c: 41:b4:ea:d8:83:b1:23:88:f1:61:56:77:58:a1:f7:69:28:c8: 1f:75:5d:be:c8:8c:3d:84:a1:41:1a:b3:e8:85:88:15:53:01: b2:f6:83:b5:bb:1c:cf:93:5d:71:30:d6:94:b6:a2:3e:d0:98: a6:f1:96:4b:23:ef:66:dd:a3:d6:53:e0:7f:41:3a:7c:1b:51: 55:88:a7:76:5c:43:e1:f4:8f:23:fb:4d:1b:12:f4:db:7b:84: 31:23:4f:2f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUFWCVkhjqYlt3z1Up4Nym8AZONScwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRTdEOTFFN0I4NDFEQjI3NEU3N0U4MjMwODQzMTJGOEI3 OEE1Qzk1MTAeFw0yNTEyMjEwMzA3MTRaFw0yNTEyMjQwNzUyMTRaMDMxMTAvBgNV BAMTKDc3NEU4NzU2ODcyRjZFRTU1QTI0MTFDNjkyRTc1RTc2RDFDN0EwQkEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDATuByzaHBQntMS6+ozVXS/6w2 l+jfC7b6wZvgwynAuzecBtok3520hAnVOa10LWjDmFxVCwLQSlW2wijvx9dKeATy WmTmFj25Tb0MqrJqi2UIBxhddJ/c3yuibe/l0i+Y127me+653LGxQOXZNKD1ecLp yjsz6GD4Al+j/9uhtT2gmiHCQ6mo9NTXI2hUkRKkp6Sb/zYpzn/6ar0Oj/cJD54F 1563SjMUt94KcjfPdZErZVWcaATjGIoNIs529eitVkvjkt391oPLi0AQwUaXfBFy ewm5y7SPxXeIie/A+vZ1UgVbKj2VlN7bXE1BVCq2rF+u2EjgxZcjpJcGOfAlAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUd06HVocvbuVaJBHGkudedtHHoLowHwYDVR0j BBgwFoAU59kee4QdsnTnfoIwhDEvi3ilyVEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w YTcwODNhYi0yNzBhLTRiMGEtOGU1NS1hNDVlMWNmMWFmZDUvMC9FN0Q5MUU3Qjg0 MURCMjc0RTc3RTgyMzA4NDMxMkY4Qjc4QTVDOTUxLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRTdEOTFFN0I4NDFEQjI3NEU3N0U4MjMwODQzMTJGOEI3OEE1 Qzk1MS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMGE3MDgzYWItMjcwYS00YjBhLThl NTUtYTQ1ZTFjZjFhZmQ1LzAvRTdEOTFFN0I4NDFEQjI3NEU3N0U4MjMwODQzMTJG OEI3OEE1Qzk1MS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFFtju3mp1MwFnQfU52RGdkRQLusUBu809si /nujppMLaiVIFZlN+63qfIbL9bbrZ5nm2BEg1Hv36vLLbezrNHtu924t33wDTgZr P8EvjJrVXB5B7MOOH/EJFKZOIQhNydteFhNck892/BgCN7XlenegfnMY1FZUbbPO ywcAqrRb+S73gJCiw2+2t4x0qU5JXASu/zL26H3kQgVa7sxpVU0+XEG06tiDsSOI 8WFWd1ih92koyB91Xb7IjD2EoUEas+iFiBVTAbL2g7W7HM+TXXEw1pS2oj7QmKbx lksj72bdo9ZT4H9BOnwbUVWIp3ZcQ+H0jyP7TRsS9Nt7hDEjTy8= -----END CERTIFICATE-----Generated at Tue Dec 23 18:33:56 2025 by rpki-client