This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/3a923397-8cf8-4cef-8856-0d268d73edb1/0/7C4DFD78914DC1F66130F256AE69D9FA843948DC.mft File: 7C4DFD78914DC1F66130F256AE69D9FA843948DC.mft (raw, json) Hash identifier: 5nV2sPjKcoNxrLoEN/hWxWRtXvrIqLIDKwhIHqrQjdk= Subject key identifier: 3C:5E:1A:99:4C:11:88:E7:9E:F0:25:AD:6A:F0:0F:93:BB:83:51:4F Authority key identifier: 7C:4D:FD:78:91:4D:C1:F6:61:30:F2:56:AE:69:D9:FA:84:39:48:DC Certificate issuer: /CN=7C4DFD78914DC1F66130F256AE69D9FA843948DC Certificate serial: 21DD21AF9B979EAD5AABAA07BEED388C70E8956D Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/7C4DFD78914DC1F66130F256AE69D9FA843948DC.cer Subject info access: rsync://repo-rpki.idnic.net/repo/3a923397-8cf8-4cef-8856-0d268d73edb1/0/7C4DFD78914DC1F66130F256AE69D9FA843948DC.mft Manifest number: BB Signing time: Fri 19 Dec 2025 16:21:17 +0000 Manifest this update: Fri 19 Dec 2025 16:16:17 +0000 Manifest next update: Mon 22 Dec 2025 23:26:17 +0000 Files and hashes: 1: 7C4DFD78914DC1F66130F256AE69D9FA843948DC.crl (hash: 4bGjWNevGBjV/9IUQKTYNipv8e/mZEsf+IszmCK6LqY=) 2: 3136302e3138372e3133362e302f32342d3234203d3e20313533313233.roa (hash: HJdK4DRAmRrZWLjILXhoJkILfMyC0BwC4uGRxH8TEAM=) 3: 3136302e3138372e3133372e302f32342d3234203d3e20313533313233.roa (hash: lAtUfGS13GDkvr/Pm9PSGFkJR4Rstob6+L+fcyUN72Q=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/3a923397-8cf8-4cef-8856-0d268d73edb1/0/7C4DFD78914DC1F66130F256AE69D9FA843948DC.crl rsync://repo-rpki.idnic.net/repo/3a923397-8cf8-4cef-8856-0d268d73edb1/0/7C4DFD78914DC1F66130F256AE69D9FA843948DC.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/7C4DFD78914DC1F66130F256AE69D9FA843948DC.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 22 Dec 2025 23:26:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 21:dd:21:af:9b:97:9e:ad:5a:ab:aa:07:be:ed:38:8c:70:e8:95:6d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7C4DFD78914DC1F66130F256AE69D9FA843948DC Validity Not Before: Dec 19 16:16:17 2025 GMT Not After : Dec 22 23:26:17 2025 GMT Subject: CN=3C5E1A994C1188E79EF025AD6AF00F93BB83514F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:eb:e6:61:5d:69:0a:f6:f1:f1:15:98:bd:ab:83: 30:d5:f7:ee:20:72:e6:18:4e:1d:5e:4d:f5:6f:34: fa:d2:90:59:6e:ea:2f:46:0b:99:55:bf:aa:e1:93: eb:19:69:f9:a1:1d:c3:9e:87:b9:6d:4e:70:a1:63: 19:e3:ed:bb:06:6f:d0:b6:0b:39:bf:e5:a9:f7:4a: 6b:1f:da:13:81:89:08:02:c5:4c:e5:72:bb:36:9f: 08:31:d6:2b:ac:70:67:c9:2b:f6:fb:da:b1:4e:31: f5:f8:e8:ea:d9:5d:13:c8:e1:63:85:8f:45:a3:6b: ed:cb:48:6a:09:07:b8:25:fc:f8:7b:a5:06:77:29: dc:98:83:8a:e2:70:51:75:4a:1d:f4:9d:8b:26:ae: a5:76:0a:a4:c5:18:a4:3e:45:9d:c5:98:dc:ad:02: 60:4d:9c:0e:45:89:ec:98:6e:fd:b5:e6:a2:3e:d8: 4d:bf:79:01:c7:ea:f5:f0:f4:0e:53:58:72:90:dd: f0:f5:fe:43:36:a9:a0:89:6c:e7:91:8b:d4:78:f8: b0:68:ae:a7:1d:1c:10:4d:69:45:1a:eb:13:b4:36: e9:23:36:ad:3e:be:92:1d:5a:da:0b:29:28:a6:45: cc:f4:48:f0:a8:27:49:35:50:db:18:1d:28:fe:37: 88:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:5E:1A:99:4C:11:88:E7:9E:F0:25:AD:6A:F0:0F:93:BB:83:51:4F X509v3 Authority Key Identifier: keyid:7C:4D:FD:78:91:4D:C1:F6:61:30:F2:56:AE:69:D9:FA:84:39:48:DC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/3a923397-8cf8-4cef-8856-0d268d73edb1/0/7C4DFD78914DC1F66130F256AE69D9FA843948DC.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/7C4DFD78914DC1F66130F256AE69D9FA843948DC.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3a923397-8cf8-4cef-8856-0d268d73edb1/0/7C4DFD78914DC1F66130F256AE69D9FA843948DC.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b9:52:81:d9:37:65:c5:dc:77:0a:b3:ee:eb:32:46:7b:66:d2: 10:d4:68:61:61:15:75:56:fb:d6:50:03:6b:9e:9a:93:8a:50: 62:e8:d8:df:10:a7:94:36:6e:15:d4:4a:97:c8:14:4d:92:70: 68:10:88:44:eb:ba:de:e3:44:2d:98:6a:12:40:b3:e5:49:08: 2d:16:3d:bc:97:14:70:b0:a5:bd:ef:fe:fd:d4:8c:a8:c7:04: 72:22:df:85:65:06:e7:e2:2a:82:6c:30:33:c4:d9:75:79:4e: 24:da:3a:7d:6d:e0:e6:07:5d:64:32:7d:ae:ff:e8:ac:75:d2: fb:15:0c:9a:ad:28:bb:cb:65:1a:67:8f:a6:6f:05:18:a8:bf: 9d:34:89:ea:77:73:98:76:7f:de:82:35:01:07:1d:b0:53:cc: f7:be:61:40:68:0e:da:ad:ec:b9:c7:c2:a8:c0:97:b3:07:bd: 37:32:43:1f:a9:f7:dc:20:d3:2b:78:a0:0b:a2:46:3e:e9:4c: 7f:b8:91:43:06:98:36:5d:c4:9f:6a:a7:b3:bb:1a:5e:59:3e: eb:70:ad:ce:70:c7:e8:ff:9c:20:f7:9c:63:23:81:2b:2f:12: 00:69:67:0d:65:76:fd:be:04:20:dc:9f:40:c3:a7:87:e7:e4: 3c:73:d0:86 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUId0hr5uXnq1aq6oHvu04jHDolW0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoN0M0REZENzg5MTREQzFGNjYxMzBGMjU2QUU2OUQ5RkE4 NDM5NDhEQzAeFw0yNTEyMTkxNjE2MTdaFw0yNTEyMjIyMzI2MTdaMDMxMTAvBgNV BAMTKDNDNUUxQTk5NEMxMTg4RTc5RUYwMjVBRDZBRjAwRjkzQkI4MzUxNEYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDr5mFdaQr28fEVmL2rgzDV9+4g cuYYTh1eTfVvNPrSkFlu6i9GC5lVv6rhk+sZafmhHcOeh7ltTnChYxnj7bsGb9C2 Czm/5an3Smsf2hOBiQgCxUzlcrs2nwgx1iuscGfJK/b72rFOMfX46OrZXRPI4WOF j0Wja+3LSGoJB7gl/Ph7pQZ3KdyYg4ricFF1Sh30nYsmrqV2CqTFGKQ+RZ3FmNyt AmBNnA5FieyYbv215qI+2E2/eQHH6vXw9A5TWHKQ3fD1/kM2qaCJbOeRi9R4+LBo rqcdHBBNaUUa6xO0NukjNq0+vpIdWtoLKSimRcz0SPCoJ0k1UNsYHSj+N4idAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUPF4amUwRiOee8CWtavAPk7uDUU8wHwYDVR0j BBgwFoAUfE39eJFNwfZhMPJWrmnZ+oQ5SNwwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z YTkyMzM5Ny04Y2Y4LTRjZWYtODg1Ni0wZDI2OGQ3M2VkYjEvMC83QzRERkQ3ODkx NERDMUY2NjEzMEYyNTZBRTY5RDlGQTg0Mzk0OERDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvN0M0REZENzg5MTREQzFGNjYxMzBGMjU2QUU2OUQ5RkE4NDM5 NDhEQy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vM2E5MjMzOTctOGNmOC00Y2VmLTg4 NTYtMGQyNjhkNzNlZGIxLzAvN0M0REZENzg5MTREQzFGNjYxMzBGMjU2QUU2OUQ5 RkE4NDM5NDhEQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALlSgdk3ZcXcdwqz7usyRntm0hDUaGFhFXVW +9ZQA2uempOKUGLo2N8Qp5Q2bhXUSpfIFE2ScGgQiETrut7jRC2YahJAs+VJCC0W PbyXFHCwpb3v/v3UjKjHBHIi34VlBufiKoJsMDPE2XV5TiTaOn1t4OYHXWQyfa7/ 6Kx10vsVDJqtKLvLZRpnj6ZvBRiov500iep3c5h2f96CNQEHHbBTzPe+YUBoDtqt 7LnHwqjAl7MHvTcyQx+p99wg0yt4oAuiRj7pTH+4kUMGmDZdxJ9qp7O7Gl5ZPutw rc5wx+j/nCD3nGMjgSsvEgBpZw1ldv2+BCDcn0DDp4fn5Dxz0IY= -----END CERTIFICATE-----Generated at Sun Dec 21 17:25:19 2025 by rpki-client