This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/1b90ada6-b721-4b5f-90ca-e8f4b977d561/0/7CDEC0195C0619A2844735B38B762AB1C145318A.mft File: 7CDEC0195C0619A2844735B38B762AB1C145318A.mft (raw, json) Hash identifier: EWXeyrsY5kl1irKisEKqPmE/GAdb0e0sQNhdkcHEQns= Subject key identifier: 44:3C:03:F9:C4:C1:98:91:9E:0D:D9:10:BF:BD:D7:38:DF:11:00:F0 Authority key identifier: 7C:DE:C0:19:5C:06:19:A2:84:47:35:B3:8B:76:2A:B1:C1:45:31:8A Certificate issuer: /CN=7CDEC0195C0619A2844735B38B762AB1C145318A Certificate serial: 3023F844D3B0637AF27D598292591CD3D158152D Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7CDEC0195C0619A2844735B38B762AB1C145318A.cer Subject info access: rsync://repo-rpki.idnic.net/repo/1b90ada6-b721-4b5f-90ca-e8f4b977d561/0/7CDEC0195C0619A2844735B38B762AB1C145318A.mft Manifest number: 01FF Signing time: Sun 21 Dec 2025 15:20:53 +0000 Manifest this update: Sun 21 Dec 2025 15:15:53 +0000 Manifest next update: Wed 24 Dec 2025 19:24:53 +0000 Files and hashes: 1: 3130332e3136332e33362e302f32332d3234203d3e20313338383836.roa (hash: CtGkBvOXr+z5xeQBMHV9NThlZEDqDbWOP9wsaKhn80Y=) 2: 7CDEC0195C0619A2844735B38B762AB1C145318A.crl (hash: WaNn2is3bd7OWTE6ilGtYN7WFQFrxiHJT24B7FX3Y8U=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/1b90ada6-b721-4b5f-90ca-e8f4b977d561/0/7CDEC0195C0619A2844735B38B762AB1C145318A.crl rsync://repo-rpki.idnic.net/repo/1b90ada6-b721-4b5f-90ca-e8f4b977d561/0/7CDEC0195C0619A2844735B38B762AB1C145318A.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7CDEC0195C0619A2844735B38B762AB1C145318A.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 24 Dec 2025 07:39:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 30:23:f8:44:d3:b0:63:7a:f2:7d:59:82:92:59:1c:d3:d1:58:15:2d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7CDEC0195C0619A2844735B38B762AB1C145318A Validity Not Before: Dec 21 15:15:53 2025 GMT Not After : Dec 24 19:24:53 2025 GMT Subject: CN=443C03F9C4C198919E0DD910BFBDD738DF1100F0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:5b:bc:ec:6a:11:94:2f:33:67:64:ca:94:40: fc:0c:04:ea:f1:05:65:46:7a:c6:f0:c5:67:c6:b1: ca:97:2f:91:b4:05:e6:b6:24:75:7d:be:05:e5:ee: e3:d6:d0:cc:1b:0c:43:f9:fe:6f:dd:d5:e8:75:5c: 51:e9:99:51:5a:89:22:f8:92:5b:f6:57:e1:14:b2: c9:f8:64:d5:cd:47:d5:6b:6b:87:65:fe:ae:b7:25: 5a:65:ac:8e:04:be:25:8a:04:e9:4e:29:74:cf:02: f6:10:5f:35:ad:0f:bf:4a:0e:36:42:8c:8b:0c:39: c7:14:84:bd:16:73:eb:b4:ce:cb:6c:2c:66:f6:86: 2d:f4:9e:01:7c:ba:9a:b5:0c:84:f9:03:94:9f:2b: 6f:11:f2:cf:d2:1f:76:42:6d:40:64:64:2d:c7:24: 70:03:47:22:b4:18:ca:95:07:99:b3:36:7f:7e:f3: 21:66:f1:db:33:cc:07:7b:96:e1:11:68:f0:0e:1c: 60:57:ca:e7:a6:c4:bb:1b:5e:7f:ab:df:2b:c2:db: 69:36:dc:8d:14:0b:04:8c:ad:bf:6a:d7:17:33:df: 1b:92:6d:7a:cc:77:61:b9:a8:f8:fe:1f:48:94:42: 2d:72:bd:2b:1e:03:20:3c:70:a0:e8:84:70:83:82: 93:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:3C:03:F9:C4:C1:98:91:9E:0D:D9:10:BF:BD:D7:38:DF:11:00:F0 X509v3 Authority Key Identifier: keyid:7C:DE:C0:19:5C:06:19:A2:84:47:35:B3:8B:76:2A:B1:C1:45:31:8A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/1b90ada6-b721-4b5f-90ca-e8f4b977d561/0/7CDEC0195C0619A2844735B38B762AB1C145318A.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7CDEC0195C0619A2844735B38B762AB1C145318A.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/1b90ada6-b721-4b5f-90ca-e8f4b977d561/0/7CDEC0195C0619A2844735B38B762AB1C145318A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 05:88:2b:59:08:a5:e3:5d:f8:ec:81:14:61:3c:ff:0d:ce:50: 21:0e:d9:5c:3b:68:02:44:e0:4c:a6:d1:92:77:d6:5d:36:c6: 4c:8a:9b:13:9b:59:50:75:41:25:09:41:b4:24:89:23:bb:86: 27:d8:71:7c:ce:13:0d:fe:a4:34:0d:12:96:65:b5:5c:ae:ac: e5:08:7b:8c:ae:0b:ef:c6:a9:0b:aa:90:7e:b9:a4:18:89:21: 94:24:dd:97:32:f7:7f:d7:3b:9c:ad:77:24:d0:4f:38:42:cb: 57:be:92:68:05:31:e9:60:40:49:12:03:e1:be:ee:07:fb:49: b6:e4:aa:f4:3b:5a:c5:43:73:c2:77:fe:00:f1:ef:d6:96:cd: fc:4a:0e:86:3e:40:25:38:4c:74:8e:8f:c9:52:d8:0c:d5:c1: 2f:4d:c3:31:63:85:b0:05:aa:98:2b:1e:58:c2:e9:5d:03:c2: e3:b2:cc:e3:b0:48:b9:7a:c9:06:32:73:be:af:1c:7a:64:6f: 4d:0b:d8:7a:b3:e7:92:97:3e:16:d4:34:60:24:1c:d6:ad:df: 5b:87:45:43:b7:97:6c:6e:1f:e8:f8:54:90:84:53:b1:41:80: 1f:bf:71:2e:d8:f7:ae:12:00:ed:70:c6:96:14:15:33:9f:c0: 33:27:0a:c9 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUMCP4RNOwY3ryfVmCklkc09FYFS0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoN0NERUMwMTk1QzA2MTlBMjg0NDczNUIzOEI3NjJBQjFD MTQ1MzE4QTAeFw0yNTEyMjExNTE1NTNaFw0yNTEyMjQxOTI0NTNaMDMxMTAvBgNV BAMTKDQ0M0MwM0Y5QzRDMTk4OTE5RTBERDkxMEJGQkRENzM4REYxMTAwRjAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCZW7zsahGULzNnZMqUQPwMBOrx BWVGesbwxWfGscqXL5G0Bea2JHV9vgXl7uPW0MwbDEP5/m/d1eh1XFHpmVFaiSL4 klv2V+EUssn4ZNXNR9Vra4dl/q63JVplrI4EviWKBOlOKXTPAvYQXzWtD79KDjZC jIsMOccUhL0Wc+u0zstsLGb2hi30ngF8upq1DIT5A5SfK28R8s/SH3ZCbUBkZC3H JHADRyK0GMqVB5mzNn9+8yFm8dszzAd7luERaPAOHGBXyuemxLsbXn+r3yvC22k2 3I0UCwSMrb9q1xcz3xuSbXrMd2G5qPj+H0iUQi1yvSseAyA8cKDohHCDgpPPAgMB AAGjggI8MIICODAdBgNVHQ4EFgQURDwD+cTBmJGeDdkQv73XON8RAPAwHwYDVR0j BBgwFoAUfN7AGVwGGaKERzWzi3YqscFFMYowDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x YjkwYWRhNi1iNzIxLTRiNWYtOTBjYS1lOGY0Yjk3N2Q1NjEvMC83Q0RFQzAxOTVD MDYxOUEyODQ0NzM1QjM4Qjc2MkFCMUMxNDUzMThBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvN0NERUMwMTk1QzA2MTlBMjg0NDczNUIzOEI3NjJBQjFDMTQ1 MzE4QS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMWI5MGFkYTYtYjcyMS00YjVmLTkw Y2EtZThmNGI5NzdkNTYxLzAvN0NERUMwMTk1QzA2MTlBMjg0NDczNUIzOEI3NjJB QjFDMTQ1MzE4QS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAWIK1kIpeNd+OyBFGE8/w3OUCEO2Vw7aAJE 4Eym0ZJ31l02xkyKmxObWVB1QSUJQbQkiSO7hifYcXzOEw3+pDQNEpZltVyurOUI e4yuC+/GqQuqkH65pBiJIZQk3Zcy93/XO5ytdyTQTzhCy1e+kmgFMelgQEkSA+G+ 7gf7SbbkqvQ7WsVDc8J3/gDx79aWzfxKDoY+QCU4THSOj8lS2AzVwS9NwzFjhbAF qpgrHljC6V0DwuOyzOOwSLl6yQYyc76vHHpkb00L2Hqz55KXPhbUNGAkHNat31uH RUO3l2xuH+j4VJCEU7FBgB+/cS7Y964SAO1wxpYUFTOfwDMnCsk= -----END CERTIFICATE-----Generated at Mon Dec 22 15:43:37 2025 by rpki-client