This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/2d0927e6-8a0a-4fa7-8969-9fb9d694397c/0/7EFA64C11573C292E192C2CDEAC4D5F8B8C21DBD.mft File: 7EFA64C11573C292E192C2CDEAC4D5F8B8C21DBD.mft (raw, json) Hash identifier: UucgTDFySBZbcrPQCDN00J8LyOBWcDOiq3uIE34Li08= Subject key identifier: C1:65:FB:F2:75:E7:1C:ED:E0:57:81:6E:21:17:27:9A:59:45:B5:45 Authority key identifier: 7E:FA:64:C1:15:73:C2:92:E1:92:C2:CD:EA:C4:D5:F8:B8:C2:1D:BD Certificate issuer: /CN=7EFA64C11573C292E192C2CDEAC4D5F8B8C21DBD Certificate serial: 578325AC4E1A9DD9C67E0D7B965B4FFF33F55DBF Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7EFA64C11573C292E192C2CDEAC4D5F8B8C21DBD.cer Subject info access: rsync://repo-rpki.idnic.net/repo/2d0927e6-8a0a-4fa7-8969-9fb9d694397c/0/7EFA64C11573C292E192C2CDEAC4D5F8B8C21DBD.mft Manifest number: 0530 Signing time: Mon 15 Dec 2025 23:42:28 +0000 Manifest this update: Mon 15 Dec 2025 23:37:28 +0000 Manifest next update: Fri 19 Dec 2025 06:57:28 +0000 Files and hashes: 1: 3130332e31392e35372e302f32342d3234203d3e20313332363337.roa (hash: 3QyxS0wngZcXbj5VM1EbTD1iHrmW5SRruXkHQg8JcfQ=) 2: 3130332e31392e35382e302f32342d3234203d3e20313332363337.roa (hash: Pfzw8Y0xsuh7UKTJV02Yk1orDZhcKdBrnY+4Hy9M/Ss=) 3: 3130332e31392e35362e302f32342d3234203d3e20313332363337.roa (hash: 1GyJK6Rqd4FApqF94uFU3YdEq/5dWlAXo/swD/OMmMQ=) 4: 323430323a333263303a3a2f33322d3332203d3e20313332363337.roa (hash: alekTqBBNWqAI5oX1dPM5eFA94/uemvvhURj4TPNUr4=) 5: 7EFA64C11573C292E192C2CDEAC4D5F8B8C21DBD.crl (hash: Ov4NJCsvi9hLDmzEQMpaMK1VrC6JiafhV0g2hUDJIVM=) 6: 3130332e31392e35392e302f32342d3234203d3e20313332363337.roa (hash: 9iu7ypE0DOgzIq5HMAnIVo4kGKAs2AlVlOiv5hSXbmQ=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/2d0927e6-8a0a-4fa7-8969-9fb9d694397c/0/7EFA64C11573C292E192C2CDEAC4D5F8B8C21DBD.crl rsync://repo-rpki.idnic.net/repo/2d0927e6-8a0a-4fa7-8969-9fb9d694397c/0/7EFA64C11573C292E192C2CDEAC4D5F8B8C21DBD.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7EFA64C11573C292E192C2CDEAC4D5F8B8C21DBD.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 19 Dec 2025 06:57:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 57:83:25:ac:4e:1a:9d:d9:c6:7e:0d:7b:96:5b:4f:ff:33:f5:5d:bf Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7EFA64C11573C292E192C2CDEAC4D5F8B8C21DBD Validity Not Before: Dec 15 23:37:28 2025 GMT Not After : Dec 19 06:57:28 2025 GMT Subject: CN=C165FBF275E71CEDE057816E2117279A5945B545 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:d9:d0:f2:a5:dc:10:85:ba:13:24:99:f8:4e: c3:c4:24:28:ff:6d:49:e5:e1:c1:e6:65:51:c0:f3: 38:5f:8d:2b:e4:8d:dc:9b:59:d0:cb:e7:62:b4:1a: 44:2f:b7:39:fe:cd:f4:b5:76:16:c4:10:a3:b9:ff: bd:61:83:61:bb:32:c1:c0:40:5d:ac:0a:c7:18:f1: 5b:08:91:31:3a:b1:fd:e0:db:4c:a8:0f:31:c8:8c: aa:4a:a6:c3:07:ae:07:7b:d2:3c:aa:19:85:22:72: 7c:8d:bd:f5:c9:77:99:a3:cf:0f:66:3a:6d:09:23: d8:2b:ac:92:10:2e:c9:a4:ca:cb:b6:d8:f8:eb:97: 99:e5:7b:3a:3b:4c:d2:c2:7f:cc:25:f2:83:1f:1e: 6c:a5:9d:ce:ce:eb:5c:8d:9d:66:58:14:2d:e3:c3: 15:3b:b1:50:b2:e3:6f:0b:e3:d7:a2:fd:14:55:31: 6c:ea:25:e5:f9:98:39:e7:6b:2e:c4:f6:b2:25:80: 30:30:57:ef:17:9d:0d:3f:d8:03:f6:f6:3f:ec:8f: 37:c7:a4:d3:24:95:45:54:94:53:7b:9b:ff:68:d6: 1e:4a:7c:f2:56:c4:98:98:5c:c8:b2:55:10:8a:6c: 93:da:ac:a5:9e:7a:56:58:b4:bb:2d:79:4f:c9:f8: 79:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:65:FB:F2:75:E7:1C:ED:E0:57:81:6E:21:17:27:9A:59:45:B5:45 X509v3 Authority Key Identifier: keyid:7E:FA:64:C1:15:73:C2:92:E1:92:C2:CD:EA:C4:D5:F8:B8:C2:1D:BD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/2d0927e6-8a0a-4fa7-8969-9fb9d694397c/0/7EFA64C11573C292E192C2CDEAC4D5F8B8C21DBD.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7EFA64C11573C292E192C2CDEAC4D5F8B8C21DBD.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/2d0927e6-8a0a-4fa7-8969-9fb9d694397c/0/7EFA64C11573C292E192C2CDEAC4D5F8B8C21DBD.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a7:e8:29:3a:f7:d4:2a:50:47:01:f9:30:c6:c3:b6:c4:ee:7b: d2:57:34:17:3e:6e:88:10:6d:d8:0c:30:7c:f2:4a:87:0c:08: 76:af:74:75:8b:15:d0:88:27:e4:dd:ea:68:12:a5:e8:7e:6d: eb:15:4c:da:ad:1f:6d:66:39:1e:a1:57:4e:79:05:47:a0:c1: 98:30:df:a6:ac:28:fe:7a:79:1b:d0:98:d4:b3:14:fa:dd:49: 22:67:10:16:74:09:e1:86:fb:db:5e:59:ad:b4:cc:f4:80:d4: 90:e9:96:d9:06:7d:c2:64:a5:60:26:4a:85:ee:7e:f0:77:e7: 4d:27:a5:5c:c8:20:2a:ce:e7:d2:40:42:7c:c5:68:15:d3:d7: fa:18:0b:6a:bc:27:a0:84:d5:1c:aa:9e:a9:ee:99:9a:80:90: 20:95:de:45:c4:4a:2f:74:c6:17:b2:f1:5b:52:07:b2:e4:6e: e7:22:0b:9a:8a:68:3c:93:c4:de:7c:1f:cd:d8:a9:d6:ec:f0: e9:13:ae:d0:00:7f:ce:a8:3e:b8:7b:7f:52:b3:01:30:36:42: 30:8d:3d:c2:39:f6:53:40:6b:8d:00:08:51:8c:c9:dd:f4:b7: aa:b2:56:a2:db:99:d6:ec:e8:58:87:c4:b0:88:1e:3f:0c:4a: c3:e9:bf:5c -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUV4MlrE4andnGfg17lltP/zP1Xb8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoN0VGQTY0QzExNTczQzI5MkUxOTJDMkNERUFDNEQ1RjhC OEMyMURCRDAeFw0yNTEyMTUyMzM3MjhaFw0yNTEyMTkwNjU3MjhaMDMxMTAvBgNV BAMTKEMxNjVGQkYyNzVFNzFDRURFMDU3ODE2RTIxMTcyNzlBNTk0NUI1NDUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDq2dDypdwQhboTJJn4TsPEJCj/ bUnl4cHmZVHA8zhfjSvkjdybWdDL52K0GkQvtzn+zfS1dhbEEKO5/71hg2G7MsHA QF2sCscY8VsIkTE6sf3g20yoDzHIjKpKpsMHrgd70jyqGYUicnyNvfXJd5mjzw9m Om0JI9grrJIQLsmkysu22Pjrl5nlezo7TNLCf8wl8oMfHmylnc7O61yNnWZYFC3j wxU7sVCy428L49ei/RRVMWzqJeX5mDnnay7E9rIlgDAwV+8XnQ0/2AP29j/sjzfH pNMklUVUlFN7m/9o1h5KfPJWxJiYXMiyVRCKbJParKWeelZYtLsteU/J+HknAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUwWX78nXnHO3gV4FuIRcnmllFtUUwHwYDVR0j BBgwFoAUfvpkwRVzwpLhksLN6sTV+LjCHb0wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y ZDA5MjdlNi04YTBhLTRmYTctODk2OS05ZmI5ZDY5NDM5N2MvMC83RUZBNjRDMTE1 NzNDMjkyRTE5MkMyQ0RFQUM0RDVGOEI4QzIxREJELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvN0VGQTY0QzExNTczQzI5MkUxOTJDMkNERUFDNEQ1RjhCOEMy MURCRC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMmQwOTI3ZTYtOGEwYS00ZmE3LTg5 NjktOWZiOWQ2OTQzOTdjLzAvN0VGQTY0QzExNTczQzI5MkUxOTJDMkNERUFDNEQ1 RjhCOEMyMURCRC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKfoKTr31CpQRwH5MMbDtsTue9JXNBc+bogQ bdgMMHzySocMCHavdHWLFdCIJ+Td6mgSpeh+besVTNqtH21mOR6hV055BUegwZgw 36asKP56eRvQmNSzFPrdSSJnEBZ0CeGG+9teWa20zPSA1JDpltkGfcJkpWAmSoXu fvB3500npVzIICrO59JAQnzFaBXT1/oYC2q8J6CE1RyqnqnumZqAkCCV3kXESi90 xhey8VtSB7LkbuciC5qKaDyTxN58H83Yqdbs8OkTrtAAf86oPrh7f1KzATA2QjCN PcI59lNAa40ACFGMyd30t6qyVqLbmdbs6FiHxLCIHj8MSsPpv1w= -----END CERTIFICATE-----Generated at Wed Dec 17 20:51:19 2025 by rpki-client