This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/33dc034f-3823-48af-953d-aaa873b0fb6a/1/7E8DE1549E89D4B480B556695CABE9CE7FDF5F24.mft File: 7E8DE1549E89D4B480B556695CABE9CE7FDF5F24.mft (raw, json) Hash identifier: SnTt+UCsrKTeleqW9ZV+nZciUjMpfwkRCxC6TKvp3aQ= Subject key identifier: 49:90:5C:18:0F:2E:F3:F7:B8:F0:8D:C5:65:0D:CE:70:2D:01:EF:C7 Authority key identifier: 7E:8D:E1:54:9E:89:D4:B4:80:B5:56:69:5C:AB:E9:CE:7F:DF:5F:24 Certificate issuer: /CN=7E8DE1549E89D4B480B556695CABE9CE7FDF5F24 Certificate serial: 035C736A8EEB6C12B4E764F5CB2C90AA51913839 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7E8DE1549E89D4B480B556695CABE9CE7FDF5F24.cer Subject info access: rsync://repo-rpki.idnic.net/repo/33dc034f-3823-48af-953d-aaa873b0fb6a/1/7E8DE1549E89D4B480B556695CABE9CE7FDF5F24.mft Manifest number: AD Signing time: Wed 24 Dec 2025 04:51:38 +0000 Manifest this update: Wed 24 Dec 2025 04:46:38 +0000 Manifest next update: Sat 27 Dec 2025 08:02:38 +0000 Files and hashes: 1: 323030313a6466343a396134303a3a2f34382d3438203d3e20313533313439.roa (hash: ScM8Q2LMGZOkrNtPg/8PjLIyPY1b7rJ+ByzrKdDmKiU=) 2: 7E8DE1549E89D4B480B556695CABE9CE7FDF5F24.crl (hash: wkgPb5HevMnWXTXT14s5fqis3XR3FXjZcG5llxUdyjk=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/33dc034f-3823-48af-953d-aaa873b0fb6a/1/7E8DE1549E89D4B480B556695CABE9CE7FDF5F24.crl rsync://repo-rpki.idnic.net/repo/33dc034f-3823-48af-953d-aaa873b0fb6a/1/7E8DE1549E89D4B480B556695CABE9CE7FDF5F24.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7E8DE1549E89D4B480B556695CABE9CE7FDF5F24.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 27 Dec 2025 08:02:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 03:5c:73:6a:8e:eb:6c:12:b4:e7:64:f5:cb:2c:90:aa:51:91:38:39 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7E8DE1549E89D4B480B556695CABE9CE7FDF5F24 Validity Not Before: Dec 24 04:46:38 2025 GMT Not After : Dec 27 08:02:38 2025 GMT Subject: CN=49905C180F2EF3F7B8F08DC5650DCE702D01EFC7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:7c:dc:7f:88:0b:b0:2c:a6:12:59:c1:25:fb: e2:1c:7a:e7:f9:33:6f:67:80:5d:05:a4:cf:68:2a: dc:2a:2b:ca:86:1f:3e:d7:4a:2a:ef:12:98:14:94: 77:f9:79:a2:99:59:c3:01:d5:26:80:9c:0e:0d:cc: b5:04:9e:fe:77:5d:33:65:2e:01:e1:8e:de:29:75: 09:85:c5:53:57:44:85:41:24:19:ce:23:01:67:27: 83:a3:a2:0b:38:32:7f:f8:89:ab:a9:1e:f7:5a:b4: 0d:76:21:2f:58:ea:cc:06:be:30:a3:03:7d:83:29: a3:ed:ad:02:02:e0:1f:91:ed:ec:39:c2:26:ec:2c: 57:80:9b:c8:59:55:76:9a:3f:08:a6:f6:49:08:6c: d5:6d:b7:da:3d:ef:42:63:41:28:d9:ee:fe:c2:84: 6e:b3:00:3d:ad:dd:5b:bd:cc:80:fd:25:71:45:3e: dd:1b:4f:f2:70:dc:c7:de:8c:ca:57:9c:73:3b:bd: 24:da:79:52:4c:5d:83:76:31:cc:e0:0a:e3:c4:ef: 9f:35:ff:a5:12:51:c2:5a:7b:52:8c:ce:75:97:85: 8e:bf:7e:38:01:ec:02:1a:7e:fc:03:e5:47:2e:be: d8:b9:86:d6:c5:1f:cc:58:76:09:b4:55:4d:47:48: 06:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:90:5C:18:0F:2E:F3:F7:B8:F0:8D:C5:65:0D:CE:70:2D:01:EF:C7 X509v3 Authority Key Identifier: keyid:7E:8D:E1:54:9E:89:D4:B4:80:B5:56:69:5C:AB:E9:CE:7F:DF:5F:24 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/33dc034f-3823-48af-953d-aaa873b0fb6a/1/7E8DE1549E89D4B480B556695CABE9CE7FDF5F24.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7E8DE1549E89D4B480B556695CABE9CE7FDF5F24.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/33dc034f-3823-48af-953d-aaa873b0fb6a/1/7E8DE1549E89D4B480B556695CABE9CE7FDF5F24.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ca:67:1b:c9:b0:c5:b2:31:73:5e:2b:94:68:e1:21:01:4e:65: 68:ea:6a:64:a3:94:42:ff:59:72:ce:e0:95:30:2d:15:b8:9d: 69:43:fd:53:4d:e1:e0:8e:9d:4c:95:3f:43:b0:af:02:e8:77: 51:40:e9:f7:71:74:68:3d:45:3d:28:47:a9:89:be:f5:56:a2: 16:b4:f8:1b:e5:88:0a:ba:bf:a3:de:60:8f:9b:a6:5e:49:5c: c9:00:2b:e4:8e:9e:1c:23:de:90:42:6d:2d:4c:61:80:38:c2: 49:e7:7c:1d:5a:88:69:80:53:56:ef:65:bc:9c:fe:dd:c5:da: 3f:be:dc:58:1a:12:c9:5f:e6:24:ac:be:69:c8:8a:ce:9c:aa: 82:b6:0e:fb:43:be:81:1b:14:5d:1a:63:52:b4:dd:32:81:9e: 9a:65:08:8e:2d:69:c0:4b:94:db:88:67:24:35:40:5b:11:a6: 7a:15:c2:bc:dd:b4:73:62:66:6c:46:5e:4d:cd:64:f4:a4:c6: a4:03:8a:4a:cc:10:2c:2d:a2:39:7d:d6:b8:78:05:c6:c3:30: f3:dc:62:82:59:9c:dd:e0:1b:11:08:cf:59:d8:c9:08:83:6c: 82:b7:5c:d1:4c:45:db:e6:ae:0b:70:70:ae:4f:0a:1b:1c:e3: 58:cc:e9:51 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUA1xzao7rbBK052T1yyyQqlGRODkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoN0U4REUxNTQ5RTg5RDRCNDgwQjU1NjY5NUNBQkU5Q0U3 RkRGNUYyNDAeFw0yNTEyMjQwNDQ2MzhaFw0yNTEyMjcwODAyMzhaMDMxMTAvBgNV BAMTKDQ5OTA1QzE4MEYyRUYzRjdCOEYwOERDNTY1MERDRTcwMkQwMUVGQzcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC8fNx/iAuwLKYSWcEl++Iceuf5 M29ngF0FpM9oKtwqK8qGHz7XSirvEpgUlHf5eaKZWcMB1SaAnA4NzLUEnv53XTNl LgHhjt4pdQmFxVNXRIVBJBnOIwFnJ4Ojogs4Mn/4iaupHvdatA12IS9Y6swGvjCj A32DKaPtrQIC4B+R7ew5wibsLFeAm8hZVXaaPwim9kkIbNVtt9o970JjQSjZ7v7C hG6zAD2t3Vu9zID9JXFFPt0bT/Jw3MfejMpXnHM7vSTaeVJMXYN2MczgCuPE7581 /6USUcJae1KMznWXhY6/fjgB7AIafvwD5Ucuvti5htbFH8xYdgm0VU1HSAbNAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUSZBcGA8u8/e48I3FZQ3OcC0B78cwHwYDVR0j BBgwFoAUfo3hVJ6J1LSAtVZpXKvpzn/fXyQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z M2RjMDM0Zi0zODIzLTQ4YWYtOTUzZC1hYWE4NzNiMGZiNmEvMS83RThERTE1NDlF ODlENEI0ODBCNTU2Njk1Q0FCRTlDRTdGREY1RjI0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvN0U4REUxNTQ5RTg5RDRCNDgwQjU1NjY5NUNBQkU5Q0U3RkRG NUYyNC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMzNkYzAzNGYtMzgyMy00OGFmLTk1 M2QtYWFhODczYjBmYjZhLzEvN0U4REUxNTQ5RTg5RDRCNDgwQjU1NjY5NUNBQkU5 Q0U3RkRGNUYyNC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAMpnG8mwxbIxc14rlGjhIQFOZWjqamSjlEL/ WXLO4JUwLRW4nWlD/VNN4eCOnUyVP0OwrwLod1FA6fdxdGg9RT0oR6mJvvVWoha0 +BvliAq6v6PeYI+bpl5JXMkAK+SOnhwj3pBCbS1MYYA4wknnfB1aiGmAU1bvZbyc /t3F2j++3FgaEslf5iSsvmnIis6cqoK2DvtDvoEbFF0aY1K03TKBnpplCI4tacBL lNuIZyQ1QFsRpnoVwrzdtHNiZmxGXk3NZPSkxqQDikrMECwtojl91rh4BcbDMPPc YoJZnN3gGxEIz1nYyQiDbIK3XNFMRdvmrgtwcK5PChsc41jM6VE= -----END CERTIFICATE-----Generated at Thu Dec 25 03:35:16 2025 by rpki-client