This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/171a847d-2531-4d7f-9241-9777850605d6/0/7EF89B45692D93E9CA15DA4CF9D439300632EFD4.mft File: 7EF89B45692D93E9CA15DA4CF9D439300632EFD4.mft (raw, json) Hash identifier: 3zQIVX0is9/97UGGWBDQJl8AFDlUvDVb3zgshf+LX8w= Subject key identifier: 21:27:A6:83:D2:F7:8D:18:2C:BC:12:01:C6:06:C9:00:27:2F:01:5F Authority key identifier: 7E:F8:9B:45:69:2D:93:E9:CA:15:DA:4C:F9:D4:39:30:06:32:EF:D4 Certificate issuer: /CN=7EF89B45692D93E9CA15DA4CF9D439300632EFD4 Certificate serial: 4EEDE59B97A07B0CD6005CBDC8ED5AB4702B3FE2 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7EF89B45692D93E9CA15DA4CF9D439300632EFD4.cer Subject info access: rsync://repo-rpki.idnic.net/repo/171a847d-2531-4d7f-9241-9777850605d6/0/7EF89B45692D93E9CA15DA4CF9D439300632EFD4.mft Manifest number: 0257 Signing time: Sun 21 Dec 2025 02:20:03 +0000 Manifest this update: Sun 21 Dec 2025 02:15:03 +0000 Manifest next update: Wed 24 Dec 2025 05:37:03 +0000 Files and hashes: 1: 7EF89B45692D93E9CA15DA4CF9D439300632EFD4.crl (hash: 3PzxKexU4P/vjCsyV9DUfUK9ME6zEKEFPDjFP9iag7Y=) 2: 3130332e3138302e35392e302f32342d3234203d3e2039333431.roa (hash: i2rSOVglupsSuL0ZoSXVd/tHmiF7pW8+dps3wslED5c=) 3: 3130332e3138302e35382e302f32332d3233203d3e2039333431.roa (hash: lr7nUWH/7raRlFDZhAD65ANTChYQYYLQIg/z8dK94J4=) 4: 3130332e3138302e35382e302f32342d3234203d3e2039333431.roa (hash: FdloWvzwT5E7bV0h2MrBbwdyadkn1oI1JIyg7UwS1zQ=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/171a847d-2531-4d7f-9241-9777850605d6/0/7EF89B45692D93E9CA15DA4CF9D439300632EFD4.crl rsync://repo-rpki.idnic.net/repo/171a847d-2531-4d7f-9241-9777850605d6/0/7EF89B45692D93E9CA15DA4CF9D439300632EFD4.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7EF89B45692D93E9CA15DA4CF9D439300632EFD4.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 24 Dec 2025 05:37:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4e:ed:e5:9b:97:a0:7b:0c:d6:00:5c:bd:c8:ed:5a:b4:70:2b:3f:e2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7EF89B45692D93E9CA15DA4CF9D439300632EFD4 Validity Not Before: Dec 21 02:15:03 2025 GMT Not After : Dec 24 05:37:03 2025 GMT Subject: CN=2127A683D2F78D182CBC1201C606C900272F015F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:c5:44:21:c7:e8:97:a8:92:9e:37:d7:98:00: 34:43:84:55:e4:6c:8b:71:99:9f:23:02:33:95:ad: 27:83:a0:37:bd:ac:ff:d3:4d:6a:66:f6:ad:cd:cd: 45:25:83:8d:e8:17:64:10:58:e4:4c:94:ab:b2:74: 11:ba:ea:3d:b7:2d:2c:ba:85:86:8a:25:8a:86:f2: 25:40:44:89:85:9a:9b:fc:9c:c4:f0:11:55:f9:04: 66:3a:15:31:fe:09:e3:25:58:4a:f2:47:8f:03:06: b0:50:dd:08:a5:81:d9:16:84:54:84:62:2e:25:e8: ba:9c:7d:d0:90:cd:86:c4:19:7b:73:05:96:08:b4: 24:4f:44:3b:09:e6:ca:ba:29:01:96:aa:9e:e9:33: 39:58:a0:53:dc:6a:a8:cc:cc:26:94:df:c5:04:55: 3f:01:73:cc:43:c0:4d:9f:ba:0a:68:d2:64:38:32: e9:b3:3e:a7:33:c8:9a:af:6e:cb:9b:36:df:10:ea: 9b:35:68:bc:9f:cf:3d:76:72:d9:60:68:1f:7e:be: 88:c0:7d:b0:99:3f:c1:7a:7c:a5:84:3c:ec:fc:93: d1:67:f0:dd:66:50:55:1b:c7:78:ab:4a:d0:cc:c5: c2:f2:22:fc:fe:4a:c5:92:f0:bb:01:59:b5:5b:38: 80:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:27:A6:83:D2:F7:8D:18:2C:BC:12:01:C6:06:C9:00:27:2F:01:5F X509v3 Authority Key Identifier: keyid:7E:F8:9B:45:69:2D:93:E9:CA:15:DA:4C:F9:D4:39:30:06:32:EF:D4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/171a847d-2531-4d7f-9241-9777850605d6/0/7EF89B45692D93E9CA15DA4CF9D439300632EFD4.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7EF89B45692D93E9CA15DA4CF9D439300632EFD4.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/171a847d-2531-4d7f-9241-9777850605d6/0/7EF89B45692D93E9CA15DA4CF9D439300632EFD4.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 69:38:b3:b7:e1:92:15:97:96:d9:61:09:7f:20:b0:b7:a3:7b: 6f:b8:fe:3f:f0:e9:e4:38:d7:a4:e2:8f:b0:59:fd:47:65:14: 75:11:9d:86:ca:1b:39:99:d9:04:21:b5:8c:75:d5:65:44:87: 67:22:6b:f3:69:6e:ab:b5:7f:db:42:a3:e0:d6:b7:41:43:66: 50:3a:62:0a:e1:a8:b6:2f:23:e7:76:02:3a:bd:4c:0e:9f:b9: ce:53:de:ce:20:bb:e9:aa:37:23:71:63:a2:ed:fd:dd:ab:49: 5a:0e:b6:fc:87:38:08:30:9b:42:b2:bf:7b:2f:b8:3f:e0:a8: ea:a4:af:05:9e:0e:10:1c:35:af:bf:f8:84:af:e4:c0:8f:f1: 39:f5:c6:bf:e0:21:03:65:ef:59:c8:b0:14:fb:1e:5f:d5:42: 2a:bf:01:d2:d8:65:89:2c:9a:7f:75:e6:4f:8c:19:76:b9:05: 8d:cf:f5:f7:b7:af:04:7c:ae:8c:ce:fc:e9:9f:80:8e:07:54: 09:a6:29:7a:f1:5d:c5:67:90:83:ac:9d:16:73:9d:4a:a1:e7: 8a:dd:3d:f8:f4:12:3b:9c:dd:5b:31:d2:15:ad:65:41:02:7d: 37:cb:33:66:ec:29:9e:bc:6a:1e:dd:3e:9b:17:1e:b3:72:02: 93:4f:d2:70 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUTu3lm5egewzWAFy9yO1atHArP+IwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoN0VGODlCNDU2OTJEOTNFOUNBMTVEQTRDRjlENDM5MzAw NjMyRUZENDAeFw0yNTEyMjEwMjE1MDNaFw0yNTEyMjQwNTM3MDNaMDMxMTAvBgNV BAMTKDIxMjdBNjgzRDJGNzhEMTgyQ0JDMTIwMUM2MDZDOTAwMjcyRjAxNUYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDjxUQhx+iXqJKeN9eYADRDhFXk bItxmZ8jAjOVrSeDoDe9rP/TTWpm9q3NzUUlg43oF2QQWORMlKuydBG66j23LSy6 hYaKJYqG8iVARImFmpv8nMTwEVX5BGY6FTH+CeMlWEryR48DBrBQ3QilgdkWhFSE Yi4l6LqcfdCQzYbEGXtzBZYItCRPRDsJ5sq6KQGWqp7pMzlYoFPcaqjMzCaU38UE VT8Bc8xDwE2fugpo0mQ4MumzPqczyJqvbsubNt8Q6ps1aLyfzz12ctlgaB9+vojA fbCZP8F6fKWEPOz8k9Fn8N1mUFUbx3irStDMxcLyIvz+SsWS8LsBWbVbOIBbAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUISemg9L3jRgsvBIBxgbJACcvAV8wHwYDVR0j BBgwFoAUfvibRWktk+nKFdpM+dQ5MAYy79QwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x NzFhODQ3ZC0yNTMxLTRkN2YtOTI0MS05Nzc3ODUwNjA1ZDYvMC83RUY4OUI0NTY5 MkQ5M0U5Q0ExNURBNENGOUQ0MzkzMDA2MzJFRkQ0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvN0VGODlCNDU2OTJEOTNFOUNBMTVEQTRDRjlENDM5MzAwNjMy RUZENC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMTcxYTg0N2QtMjUzMS00ZDdmLTky NDEtOTc3Nzg1MDYwNWQ2LzAvN0VGODlCNDU2OTJEOTNFOUNBMTVEQTRDRjlENDM5 MzAwNjMyRUZENC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGk4s7fhkhWXltlhCX8gsLeje2+4/j/w6eQ4 16Tij7BZ/UdlFHURnYbKGzmZ2QQhtYx11WVEh2cia/Npbqu1f9tCo+DWt0FDZlA6 YgrhqLYvI+d2Ajq9TA6fuc5T3s4gu+mqNyNxY6Lt/d2rSVoOtvyHOAgwm0Kyv3sv uD/gqOqkrwWeDhAcNa+/+ISv5MCP8Tn1xr/gIQNl71nIsBT7Hl/VQiq/AdLYZYks mn915k+MGXa5BY3P9fe3rwR8rozO/OmfgI4HVAmmKXrxXcVnkIOsnRZznUqh54rd Pfj0Ejuc3Vsx0hWtZUECfTfLM2bsKZ68ah7dPpsXHrNyApNP0nA= -----END CERTIFICATE-----Generated at Sun Dec 21 12:12:49 2025 by rpki-client