This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/2050dcc3-84dd-4595-ba2c-bc69989692f1/0/D7C76122426491B81F84E5A824E4ABEB8582BAC4.mft File: D7C76122426491B81F84E5A824E4ABEB8582BAC4.mft (raw, json) Hash identifier: 2PQo0uzHUGhrTf1fuOSf4jS/LV7Ye5fYhr3shKc8He8= Subject key identifier: 64:B1:86:F1:38:A9:6D:C4:FD:31:C7:01:E6:00:93:30:AD:E4:5F:ED Authority key identifier: D7:C7:61:22:42:64:91:B8:1F:84:E5:A8:24:E4:AB:EB:85:82:BA:C4 Certificate issuer: /CN=D7C76122426491B81F84E5A824E4ABEB8582BAC4 Certificate serial: 3AC6B57165C9015E1961EB7BACDBA4D13CBEAC9B Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D7C76122426491B81F84E5A824E4ABEB8582BAC4.cer Subject info access: rsync://repo-rpki.idnic.net/repo/2050dcc3-84dd-4595-ba2c-bc69989692f1/0/D7C76122426491B81F84E5A824E4ABEB8582BAC4.mft Manifest number: 0245 Signing time: Thu 18 Dec 2025 06:20:48 +0000 Manifest this update: Thu 18 Dec 2025 06:15:48 +0000 Manifest next update: Sun 21 Dec 2025 10:50:48 +0000 Files and hashes: 1: D7C76122426491B81F84E5A824E4ABEB8582BAC4.crl (hash: bhek7TknvPT4gkBu87E+1KfDU1eWqeghwxxHWqUs8FA=) 2: 3130332e3138352e34322e302f32342d3234203d3e20313439363733.roa (hash: dkX3mi6UtP2EclKtk4Ns5Our6XJ4lNIlC+WY5pkrMVA=) 3: 3130332e3138352e34332e302f32342d3234203d3e20313333333630.roa (hash: pZz62m1gD3j25rkNtr+ZrpUFopI0lVMRASTdO0j7bx0=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/2050dcc3-84dd-4595-ba2c-bc69989692f1/0/D7C76122426491B81F84E5A824E4ABEB8582BAC4.crl rsync://repo-rpki.idnic.net/repo/2050dcc3-84dd-4595-ba2c-bc69989692f1/0/D7C76122426491B81F84E5A824E4ABEB8582BAC4.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D7C76122426491B81F84E5A824E4ABEB8582BAC4.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 21 Dec 2025 10:50:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3a:c6:b5:71:65:c9:01:5e:19:61:eb:7b:ac:db:a4:d1:3c:be:ac:9b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D7C76122426491B81F84E5A824E4ABEB8582BAC4 Validity Not Before: Dec 18 06:15:48 2025 GMT Not After : Dec 21 10:50:48 2025 GMT Subject: CN=64B186F138A96DC4FD31C701E6009330ADE45FED Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:84:0f:a4:fb:28:b6:cc:82:6f:7c:8b:a5:6b: 7a:44:13:8f:0f:8b:e4:30:d3:55:9f:55:79:51:f0: ed:ed:43:68:e5:2d:22:f3:e0:c8:cd:4a:a2:8f:93: e3:48:29:a4:28:4c:8c:5f:73:df:84:bf:18:8c:d7: 99:c8:4f:6c:5c:6e:f8:da:73:b5:16:9e:eb:12:2f: 45:4d:f1:9b:8a:ab:8d:14:2f:4b:64:f3:a0:1b:25: 7f:7d:1a:5d:9e:9d:20:dd:ad:e8:e6:95:96:25:68: dd:59:d4:e8:9d:25:eb:66:5c:d7:a5:12:96:16:b9: e6:aa:ab:9a:d9:84:c4:91:ba:cb:0a:51:03:8b:93: 06:33:94:d5:ee:4f:52:10:96:76:eb:33:ab:6b:79: eb:6c:38:c9:5e:af:bc:61:f1:57:35:7a:43:fe:53: 30:32:f5:a6:77:91:0b:ae:55:13:b8:6a:17:ad:1a: e7:07:3a:e5:02:e3:a0:3b:74:ca:9f:ef:8c:04:e4: ef:a9:aa:5b:89:a4:8c:06:49:72:08:38:d0:ab:f1: 9a:d3:3e:d5:5a:c2:92:30:a8:df:96:19:ca:78:8f: 11:33:da:19:0c:a9:ea:66:b3:4c:84:a3:b2:c3:0d: 10:68:83:0a:5f:23:c0:87:7a:52:fe:fe:cd:97:96: 4f:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:B1:86:F1:38:A9:6D:C4:FD:31:C7:01:E6:00:93:30:AD:E4:5F:ED X509v3 Authority Key Identifier: keyid:D7:C7:61:22:42:64:91:B8:1F:84:E5:A8:24:E4:AB:EB:85:82:BA:C4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/2050dcc3-84dd-4595-ba2c-bc69989692f1/0/D7C76122426491B81F84E5A824E4ABEB8582BAC4.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D7C76122426491B81F84E5A824E4ABEB8582BAC4.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/2050dcc3-84dd-4595-ba2c-bc69989692f1/0/D7C76122426491B81F84E5A824E4ABEB8582BAC4.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a1:da:51:43:a6:75:f0:80:03:05:98:b0:8a:b1:8a:70:69:86: 49:8a:74:cb:1c:0a:93:63:ab:a5:c7:06:7d:4b:6a:b7:4f:f3: 80:86:70:0b:c7:c2:47:2a:38:e1:c4:44:2f:d1:bf:b9:85:e8: e4:7a:46:32:f1:cc:7c:82:10:2c:0b:68:e5:4c:20:18:19:d8: a7:2f:a4:79:d6:03:bd:f8:9d:a9:c7:18:f9:65:40:b8:ee:21: 89:ab:bc:fa:08:bf:72:2e:aa:39:73:1c:96:cf:be:c9:ae:43: 17:9f:f0:b0:82:b7:b1:dc:76:bd:c4:07:70:0b:81:d9:ce:be: d2:79:cb:2b:a1:bf:5d:41:71:be:94:ca:6b:eb:f7:1a:8f:ff: 07:49:f2:27:9f:98:df:3a:25:72:1c:6b:20:18:8d:ce:64:e4: fc:78:02:63:a2:bd:a2:52:4a:ab:cb:62:e0:73:7a:7b:91:0f: 39:13:78:cf:d3:83:10:52:8a:c1:da:92:0a:d3:c3:03:7f:49: 92:08:c3:67:68:e2:b9:0c:d6:f5:2b:74:6b:b2:cc:83:6d:08: d5:f6:1e:7e:fc:03:00:bf:92:62:60:c1:01:74:c3:40:89:0b: 2b:24:d3:46:94:3c:82:3a:58:8f:0b:5c:be:b7:f0:1a:20:ed: e9:ec:40:9a -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUOsa1cWXJAV4ZYet7rNuk0Ty+rJswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDdDNzYxMjI0MjY0OTFCODFGODRFNUE4MjRFNEFCRUI4 NTgyQkFDNDAeFw0yNTEyMTgwNjE1NDhaFw0yNTEyMjExMDUwNDhaMDMxMTAvBgNV BAMTKDY0QjE4NkYxMzhBOTZEQzRGRDMxQzcwMUU2MDA5MzMwQURFNDVGRUQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCihA+k+yi2zIJvfIula3pEE48P i+Qw01WfVXlR8O3tQ2jlLSLz4MjNSqKPk+NIKaQoTIxfc9+EvxiM15nIT2xcbvja c7UWnusSL0VN8ZuKq40UL0tk86AbJX99Gl2enSDdrejmlZYlaN1Z1OidJetmXNel EpYWueaqq5rZhMSRussKUQOLkwYzlNXuT1IQlnbrM6treetsOMler7xh8Vc1ekP+ UzAy9aZ3kQuuVRO4ahetGucHOuUC46A7dMqf74wE5O+pqluJpIwGSXIIONCr8ZrT PtVawpIwqN+WGcp4jxEz2hkMqepms0yEo7LDDRBogwpfI8CHelL+/s2Xlk+jAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUZLGG8TipbcT9MccB5gCTMK3kX+0wHwYDVR0j BBgwFoAU18dhIkJkkbgfhOWoJOSr64WCusQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y MDUwZGNjMy04NGRkLTQ1OTUtYmEyYy1iYzY5OTg5NjkyZjEvMC9EN0M3NjEyMjQy NjQ5MUI4MUY4NEU1QTgyNEU0QUJFQjg1ODJCQUM0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRDdDNzYxMjI0MjY0OTFCODFGODRFNUE4MjRFNEFCRUI4NTgy QkFDNC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMjA1MGRjYzMtODRkZC00NTk1LWJh MmMtYmM2OTk4OTY5MmYxLzAvRDdDNzYxMjI0MjY0OTFCODFGODRFNUE4MjRFNEFC RUI4NTgyQkFDNC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKHaUUOmdfCAAwWYsIqxinBphkmKdMscCpNj q6XHBn1LardP84CGcAvHwkcqOOHERC/Rv7mF6OR6RjLxzHyCECwLaOVMIBgZ2Kcv pHnWA734nanHGPllQLjuIYmrvPoIv3IuqjlzHJbPvsmuQxef8LCCt7Hcdr3EB3AL gdnOvtJ5yyuhv11Bcb6Uymvr9xqP/wdJ8iefmN86JXIcayAYjc5k5Px4AmOivaJS SqvLYuBzenuRDzkTeM/TgxBSisHakgrTwwN/SZIIw2do4rkM1vUrdGuyzINtCNX2 Hn78AwC/kmJgwQF0w0CJCysk00aUPII6WI8LXL638Bog7ensQJo= -----END CERTIFICATE-----Generated at Fri Dec 19 08:55:38 2025 by rpki-client