This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/0fb5ff37-394a-4eba-a470-10af37cf75dc/0/7DA308A66EF705BEE42CA04631A0E3901DAF88D8.mft File: 7DA308A66EF705BEE42CA04631A0E3901DAF88D8.mft (raw, json) Hash identifier: ZrsDiOJ/4oEtMLRH97LD8inyWxekhGyweotkDf8siUM= Subject key identifier: 0F:77:DD:2F:8C:E4:C1:76:A5:1C:24:69:E8:F7:27:19:0E:02:F0:C3 Authority key identifier: 7D:A3:08:A6:6E:F7:05:BE:E4:2C:A0:46:31:A0:E3:90:1D:AF:88:D8 Certificate issuer: /CN=7DA308A66EF705BEE42CA04631A0E3901DAF88D8 Certificate serial: 7BF0A0411F8876E6DD87C65BD1376807F5205592 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7DA308A66EF705BEE42CA04631A0E3901DAF88D8.cer Subject info access: rsync://repo-rpki.idnic.net/repo/0fb5ff37-394a-4eba-a470-10af37cf75dc/0/7DA308A66EF705BEE42CA04631A0E3901DAF88D8.mft Manifest number: 018A Signing time: Tue 16 Dec 2025 19:22:26 +0000 Manifest this update: Tue 16 Dec 2025 19:17:26 +0000 Manifest next update: Sat 20 Dec 2025 06:32:26 +0000 Files and hashes: 1: 7DA308A66EF705BEE42CA04631A0E3901DAF88D8.crl (hash: 9ogd16O+rW5Fs5bYecEY9Yz8da2eWMyXa9QxQlk3hR0=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/0fb5ff37-394a-4eba-a470-10af37cf75dc/0/7DA308A66EF705BEE42CA04631A0E3901DAF88D8.crl rsync://repo-rpki.idnic.net/repo/0fb5ff37-394a-4eba-a470-10af37cf75dc/0/7DA308A66EF705BEE42CA04631A0E3901DAF88D8.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7DA308A66EF705BEE42CA04631A0E3901DAF88D8.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 20 Dec 2025 06:32:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7b:f0:a0:41:1f:88:76:e6:dd:87:c6:5b:d1:37:68:07:f5:20:55:92 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7DA308A66EF705BEE42CA04631A0E3901DAF88D8 Validity Not Before: Dec 16 19:17:26 2025 GMT Not After : Dec 20 06:32:26 2025 GMT Subject: CN=0F77DD2F8CE4C176A51C2469E8F727190E02F0C3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:ef:2d:cd:ff:6a:c3:85:96:fb:ab:c1:f0:ac: e4:66:a4:68:91:e1:bc:5a:0c:35:87:2b:4b:1d:e6: 31:35:46:53:5c:c9:ce:e1:e2:01:cf:d1:ed:af:91: 16:29:8f:f8:41:af:44:74:dc:09:17:6c:5c:fb:c7: c6:5e:4e:5c:a9:4b:da:8b:47:01:8f:ee:fb:c6:f7: 1e:07:5d:71:94:51:5e:0c:49:09:91:44:89:19:4a: 4b:fd:12:61:66:65:aa:bc:47:ff:e9:ac:24:a2:4b: 72:0b:af:89:ee:7d:0b:9f:06:00:b1:39:97:f7:c6: 89:e6:3e:0e:b2:69:d5:18:53:9e:32:ed:b2:8a:6e: d4:06:73:a1:79:c9:ed:45:ee:e7:5a:77:7c:04:8d: 48:c4:85:e0:8a:95:c6:09:a7:d9:ca:c6:2e:65:6d: 63:85:e4:bd:87:a5:ba:03:39:36:97:12:7c:d8:be: f5:66:fa:4f:fd:de:aa:95:91:24:23:74:02:7d:46: 42:57:7d:37:9a:4a:0a:84:80:65:9e:24:50:5f:49: 93:51:03:70:8a:62:49:f8:6c:0d:c4:34:20:9d:93: 95:dd:73:8c:fd:c5:f5:d9:b6:2b:17:30:11:da:e3: af:67:29:89:2c:27:73:3d:67:7b:43:4c:64:fe:78: 11:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0F:77:DD:2F:8C:E4:C1:76:A5:1C:24:69:E8:F7:27:19:0E:02:F0:C3 X509v3 Authority Key Identifier: keyid:7D:A3:08:A6:6E:F7:05:BE:E4:2C:A0:46:31:A0:E3:90:1D:AF:88:D8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/0fb5ff37-394a-4eba-a470-10af37cf75dc/0/7DA308A66EF705BEE42CA04631A0E3901DAF88D8.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7DA308A66EF705BEE42CA04631A0E3901DAF88D8.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/0fb5ff37-394a-4eba-a470-10af37cf75dc/0/7DA308A66EF705BEE42CA04631A0E3901DAF88D8.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 71:08:a9:69:a1:79:c3:f1:43:b3:9d:83:a5:a3:c1:15:d7:76: 54:cf:7b:32:e8:84:58:eb:73:3e:c4:c2:76:ab:9a:c0:67:c6: 8d:91:2d:b9:be:4b:15:89:4b:73:ba:cf:73:30:66:b8:97:af: a6:0b:0a:c4:17:6f:3b:fe:6d:88:e9:86:f1:29:57:15:ad:14: 43:b5:19:f2:11:78:b4:85:4f:17:aa:67:1e:8c:c9:4e:77:b3: 8a:68:28:d6:3c:1e:69:1a:c4:48:ba:c7:74:45:83:0f:8c:0c: 4f:8c:5d:03:08:fb:2f:df:90:d9:d3:fb:92:bb:a1:20:76:f3: 76:e5:35:e4:42:80:6b:80:1d:51:85:d1:af:da:32:ba:f5:76: 49:a6:5c:11:7d:f0:ec:1d:21:c4:f3:8a:1a:e7:06:5d:01:eb: 12:25:c1:fe:57:6d:4f:1a:de:78:e5:92:a4:4a:0e:64:0d:fa: 83:8a:54:07:de:e2:30:7d:62:5d:7a:c7:1e:08:ab:f1:75:73: 61:0b:65:30:bc:37:60:34:9a:02:24:43:44:5f:99:ab:d8:ff: 6f:44:4f:31:33:22:e3:97:c9:62:e2:e0:f0:3b:39:2c:6f:36: fc:c0:a1:fb:1d:55:66:eb:0c:44:c4:ea:cd:88:a6:55:44:9b: 8d:b5:43:fc -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUe/CgQR+Idubdh8Zb0TdoB/UgVZIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoN0RBMzA4QTY2RUY3MDVCRUU0MkNBMDQ2MzFBMEUzOTAx REFGODhEODAeFw0yNTEyMTYxOTE3MjZaFw0yNTEyMjAwNjMyMjZaMDMxMTAvBgNV BAMTKDBGNzdERDJGOENFNEMxNzZBNTFDMjQ2OUU4RjcyNzE5MEUwMkYwQzMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCj7y3N/2rDhZb7q8HwrORmpGiR 4bxaDDWHK0sd5jE1RlNcyc7h4gHP0e2vkRYpj/hBr0R03AkXbFz7x8ZeTlypS9qL RwGP7vvG9x4HXXGUUV4MSQmRRIkZSkv9EmFmZaq8R//prCSiS3ILr4nufQufBgCx OZf3xonmPg6yadUYU54y7bKKbtQGc6F5ye1F7udad3wEjUjEheCKlcYJp9nKxi5l bWOF5L2HpboDOTaXEnzYvvVm+k/93qqVkSQjdAJ9RkJXfTeaSgqEgGWeJFBfSZNR A3CKYkn4bA3ENCCdk5Xdc4z9xfXZtisXMBHa469nKYksJ3M9Z3tDTGT+eBHTAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUD3fdL4zkwXalHCRp6PcnGQ4C8MMwHwYDVR0j BBgwFoAUfaMIpm73Bb7kLKBGMaDjkB2viNgwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w ZmI1ZmYzNy0zOTRhLTRlYmEtYTQ3MC0xMGFmMzdjZjc1ZGMvMC83REEzMDhBNjZF RjcwNUJFRTQyQ0EwNDYzMUEwRTM5MDFEQUY4OEQ4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvN0RBMzA4QTY2RUY3MDVCRUU0MkNBMDQ2MzFBMEUzOTAxREFG ODhEOC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMGZiNWZmMzctMzk0YS00ZWJhLWE0 NzAtMTBhZjM3Y2Y3NWRjLzAvN0RBMzA4QTY2RUY3MDVCRUU0MkNBMDQ2MzFBMEUz OTAxREFGODhEOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHEIqWmhecPxQ7Odg6WjwRXXdlTPezLohFjr cz7EwnarmsBnxo2RLbm+SxWJS3O6z3MwZriXr6YLCsQXbzv+bYjphvEpVxWtFEO1 GfIReLSFTxeqZx6MyU53s4poKNY8HmkaxEi6x3RFgw+MDE+MXQMI+y/fkNnT+5K7 oSB283blNeRCgGuAHVGF0a/aMrr1dkmmXBF98OwdIcTzihrnBl0B6xIlwf5XbU8a 3njlkqRKDmQN+oOKVAfe4jB9Yl16xx4Iq/F1c2ELZTC8N2A0mgIkQ0RfmavY/29E TzEzIuOXyWLi4PA7OSxvNvzAofsdVWbrDETE6s2IplVEm421Q/w= -----END CERTIFICATE-----Generated at Fri Dec 19 11:20:37 2025 by rpki-client