This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/134d8277-2910-4075-b937-66f943518e29/0/D7D98B5F7BCA3741F01911488372E855D91DBF9C.mft File: D7D98B5F7BCA3741F01911488372E855D91DBF9C.mft (raw, json) Hash identifier: Og+a8MggksIyCZUaTOww1w4yFX6zQp3yQdUjiQAq3co= Subject key identifier: DB:5A:B2:57:71:A2:33:73:22:B2:34:46:43:05:DC:67:8C:D0:54:19 Authority key identifier: D7:D9:8B:5F:7B:CA:37:41:F0:19:11:48:83:72:E8:55:D9:1D:BF:9C Certificate issuer: /CN=D7D98B5F7BCA3741F01911488372E855D91DBF9C Certificate serial: 2707807A843D28352FC5613DE9A1BD61D6538065 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D7D98B5F7BCA3741F01911488372E855D91DBF9C.cer Subject info access: rsync://repo-rpki.idnic.net/repo/134d8277-2910-4075-b937-66f943518e29/0/D7D98B5F7BCA3741F01911488372E855D91DBF9C.mft Manifest number: 0203 Signing time: Thu 18 Dec 2025 12:01:45 +0000 Manifest this update: Thu 18 Dec 2025 11:56:45 +0000 Manifest next update: Sun 21 Dec 2025 18:58:45 +0000 Files and hashes: 1: 3130332e3138312e38302e302f32342d3234203d3e20313439373032.roa (hash: 4tLHfUAaxrKkU1/ID8Cs3rzd8UlebdYrCEqhL3fN6eQ=) 2: D7D98B5F7BCA3741F01911488372E855D91DBF9C.crl (hash: 8o14db0KZu8ywxP6+W/Lnl1Ytwb4Zt8OgUV5DYlOmUw=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/134d8277-2910-4075-b937-66f943518e29/0/D7D98B5F7BCA3741F01911488372E855D91DBF9C.crl rsync://repo-rpki.idnic.net/repo/134d8277-2910-4075-b937-66f943518e29/0/D7D98B5F7BCA3741F01911488372E855D91DBF9C.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D7D98B5F7BCA3741F01911488372E855D91DBF9C.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 21 Dec 2025 18:58:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 27:07:80:7a:84:3d:28:35:2f:c5:61:3d:e9:a1:bd:61:d6:53:80:65 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D7D98B5F7BCA3741F01911488372E855D91DBF9C Validity Not Before: Dec 18 11:56:45 2025 GMT Not After : Dec 21 18:58:45 2025 GMT Subject: CN=DB5AB25771A2337322B234464305DC678CD05419 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:ee:e0:28:25:be:ad:53:71:03:99:64:a8:11: 15:40:2c:27:eb:01:b5:c9:52:57:02:f9:ba:b6:bf: ec:e7:af:67:ca:e7:88:04:99:bf:40:0d:b2:80:04: 3d:8d:21:e5:eb:5b:4e:de:84:eb:2c:fd:6b:d7:22: a9:dc:ce:d0:41:a4:b5:15:1a:ab:40:0c:fd:be:a9: 0e:cd:c7:19:67:a0:25:6e:38:9a:44:ab:83:b0:a2: 07:b8:e9:9b:79:e3:7c:75:a9:2d:ad:23:54:14:03: 22:91:ee:e7:02:ca:2d:82:ea:a5:ef:48:3a:88:ab: 79:30:76:e3:ea:98:69:48:8b:56:b5:da:b9:56:db: 64:6a:d9:4a:4d:ea:77:96:51:f2:ad:ea:d9:6b:62: 11:a7:3b:a6:bf:2d:01:9e:66:e3:36:26:b6:cb:0a: 18:7d:19:c9:bc:5f:b6:1d:46:b5:5b:30:ff:06:e3: f8:f6:ca:98:a4:46:5f:ca:1e:e3:01:04:d7:a6:05: 6f:35:97:4b:cf:ad:64:09:6d:02:68:91:02:f4:3b: 3e:6b:1a:2e:71:e7:47:9b:85:d5:47:9e:e2:11:31: b0:72:20:60:f3:c8:b2:d2:0b:e9:0d:88:4c:93:e0: 83:a0:b1:b9:b5:54:4a:3d:ef:93:10:da:e9:0d:44: d3:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DB:5A:B2:57:71:A2:33:73:22:B2:34:46:43:05:DC:67:8C:D0:54:19 X509v3 Authority Key Identifier: keyid:D7:D9:8B:5F:7B:CA:37:41:F0:19:11:48:83:72:E8:55:D9:1D:BF:9C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/134d8277-2910-4075-b937-66f943518e29/0/D7D98B5F7BCA3741F01911488372E855D91DBF9C.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D7D98B5F7BCA3741F01911488372E855D91DBF9C.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/134d8277-2910-4075-b937-66f943518e29/0/D7D98B5F7BCA3741F01911488372E855D91DBF9C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption bd:49:0c:11:0d:bf:e5:db:0c:41:93:98:4a:ee:c0:8a:a7:22: ac:d5:65:53:e6:39:46:c8:9c:44:d1:37:b4:54:db:40:02:ff: e5:3a:75:b1:83:9e:74:4e:f4:96:14:99:fc:20:28:05:5d:77: 1d:bc:a3:1b:64:fb:d3:49:60:7d:a1:84:93:23:da:8c:6e:5b: 6a:3f:76:ae:c5:54:dc:5b:ff:6e:dd:a9:2f:b8:07:7f:7f:25: 64:00:8f:7b:59:37:88:55:f4:fc:1a:5d:74:cc:11:74:55:cc: c4:4a:05:58:06:da:73:57:1a:e7:86:a4:e0:b8:85:a1:c6:ab: c8:23:f9:1a:fd:dd:a0:a4:2e:10:6c:94:a5:2e:29:7b:d4:14: d4:d4:c0:af:7b:bf:81:0a:eb:25:31:45:71:e3:a5:24:7e:3a: 0a:e0:f8:ce:e5:5f:ac:02:1b:c9:07:77:c3:5a:fd:b5:3c:ee: 23:da:bd:20:42:70:6b:73:f0:05:c2:44:1a:c8:7f:7c:0e:47: 31:e8:65:c1:f7:45:20:c3:e3:1b:f6:44:4d:08:d1:72:3d:f8: fb:af:49:44:1f:3d:f4:a7:fe:a3:0a:01:f3:64:d1:f1:81:a7: 3a:93:54:0e:1c:11:d4:28:48:41:a0:75:b2:fc:1a:b2:c5:03: bd:d3:7c:c8 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUJweAeoQ9KDUvxWE96aG9YdZTgGUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDdEOThCNUY3QkNBMzc0MUYwMTkxMTQ4ODM3MkU4NTVE OTFEQkY5QzAeFw0yNTEyMTgxMTU2NDVaFw0yNTEyMjExODU4NDVaMDMxMTAvBgNV BAMTKERCNUFCMjU3NzFBMjMzNzMyMkIyMzQ0NjQzMDVEQzY3OENEMDU0MTkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC07uAoJb6tU3EDmWSoERVALCfr AbXJUlcC+bq2v+znr2fK54gEmb9ADbKABD2NIeXrW07ehOss/WvXIqncztBBpLUV GqtADP2+qQ7NxxlnoCVuOJpEq4Owoge46Zt543x1qS2tI1QUAyKR7ucCyi2C6qXv SDqIq3kwduPqmGlIi1a12rlW22Rq2UpN6neWUfKt6tlrYhGnO6a/LQGeZuM2JrbL Chh9Gcm8X7YdRrVbMP8G4/j2ypikRl/KHuMBBNemBW81l0vPrWQJbQJokQL0Oz5r Gi5x50ebhdVHnuIRMbByIGDzyLLSC+kNiEyT4IOgsbm1VEo975MQ2ukNRNNhAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU21qyV3GiM3MisjRGQwXcZ4zQVBkwHwYDVR0j BBgwFoAU19mLX3vKN0HwGRFIg3LoVdkdv5wwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x MzRkODI3Ny0yOTEwLTQwNzUtYjkzNy02NmY5NDM1MThlMjkvMC9EN0Q5OEI1RjdC Q0EzNzQxRjAxOTExNDg4MzcyRTg1NUQ5MURCRjlDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRDdEOThCNUY3QkNBMzc0MUYwMTkxMTQ4ODM3MkU4NTVEOTFE QkY5Qy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMTM0ZDgyNzctMjkxMC00MDc1LWI5 MzctNjZmOTQzNTE4ZTI5LzAvRDdEOThCNUY3QkNBMzc0MUYwMTkxMTQ4ODM3MkU4 NTVEOTFEQkY5Qy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAL1JDBENv+XbDEGTmEruwIqnIqzVZVPmOUbI nETRN7RU20AC/+U6dbGDnnRO9JYUmfwgKAVddx28oxtk+9NJYH2hhJMj2oxuW2o/ dq7FVNxb/27dqS+4B39/JWQAj3tZN4hV9PwaXXTMEXRVzMRKBVgG2nNXGueGpOC4 haHGq8gj+Rr93aCkLhBslKUuKXvUFNTUwK97v4EK6yUxRXHjpSR+Ogrg+M7lX6wC G8kHd8Na/bU87iPavSBCcGtz8AXCRBrIf3wORzHoZcH3RSDD4xv2RE0I0XI9+Puv SUQfPfSn/qMKAfNk0fGBpzqTVA4cEdQoSEGgdbL8GrLFA73TfMg= -----END CERTIFICATE-----Generated at Fri Dec 19 03:08:49 2025 by rpki-client