This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/46c06455-15c0-4f3d-813b-c07bef78f025/0/7CE8AFBA81B9A4E0B167449B4A9CA69B8873C32C.mft File: 7CE8AFBA81B9A4E0B167449B4A9CA69B8873C32C.mft (raw, json) Hash identifier: Om6Wm8tT3ICfu4fVEIufWtWACQh/jqK6GOKUETqep9g= Subject key identifier: 91:82:F7:08:71:B7:D7:87:37:74:5E:6F:D4:3E:4B:88:6C:B4:CD:E3 Authority key identifier: 7C:E8:AF:BA:81:B9:A4:E0:B1:67:44:9B:4A:9C:A6:9B:88:73:C3:2C Certificate issuer: /CN=7CE8AFBA81B9A4E0B167449B4A9CA69B8873C32C Certificate serial: 7237BC8E42BFA02CD932CA43EE313CB88C608F60 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7CE8AFBA81B9A4E0B167449B4A9CA69B8873C32C.cer Subject info access: rsync://repo-rpki.idnic.net/repo/46c06455-15c0-4f3d-813b-c07bef78f025/0/7CE8AFBA81B9A4E0B167449B4A9CA69B8873C32C.mft Manifest number: 65 Signing time: Wed 24 Dec 2025 11:45:07 +0000 Manifest this update: Wed 24 Dec 2025 11:40:07 +0000 Manifest next update: Sat 27 Dec 2025 12:19:07 +0000 Files and hashes: 1: 3130332e38332e3130302e302f32332d3234203d3e20313336303633.roa (hash: tP6gwHOQztpWiI7KNt68kDqlO1nwIWP+n+KVb4rQ1p0=) 2: 7CE8AFBA81B9A4E0B167449B4A9CA69B8873C32C.crl (hash: ndF4FkzbbZww1Iil4euHvUutCkJysIm+dKN+iA8Qq3k=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/46c06455-15c0-4f3d-813b-c07bef78f025/0/7CE8AFBA81B9A4E0B167449B4A9CA69B8873C32C.crl rsync://repo-rpki.idnic.net/repo/46c06455-15c0-4f3d-813b-c07bef78f025/0/7CE8AFBA81B9A4E0B167449B4A9CA69B8873C32C.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7CE8AFBA81B9A4E0B167449B4A9CA69B8873C32C.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 27 Dec 2025 12:19:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 72:37:bc:8e:42:bf:a0:2c:d9:32:ca:43:ee:31:3c:b8:8c:60:8f:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7CE8AFBA81B9A4E0B167449B4A9CA69B8873C32C Validity Not Before: Dec 24 11:40:07 2025 GMT Not After : Dec 27 12:19:07 2025 GMT Subject: CN=9182F70871B7D78737745E6FD43E4B886CB4CDE3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:f3:df:72:9a:c2:89:ae:52:2b:61:68:7e:ec: fc:ce:69:74:87:d5:43:84:a4:fb:04:21:e9:df:bf: 6f:38:9a:90:96:5a:5e:3f:77:9a:c8:bc:14:4a:c6: b1:b2:f3:0b:3f:eb:19:0d:e3:5b:6e:1f:f7:53:74: 3e:5f:a8:0b:4b:c8:5c:f6:d3:d7:c0:c6:1d:12:40: 09:2d:12:86:83:45:2f:11:18:22:0b:ae:11:e7:33: 09:0f:6d:e3:48:29:47:bc:6c:b8:1a:1d:22:a0:81: f8:99:4b:f4:e5:21:6c:32:77:9c:c0:26:c2:8f:a2: fa:42:93:49:3e:8a:3e:d5:a4:bc:60:89:d6:ae:71: 47:11:d6:79:1f:a4:8d:e0:50:3a:ff:c8:1f:2b:53: d5:6c:2a:2c:95:72:14:dc:56:d5:9c:5f:a4:ee:be: 38:83:f7:3d:87:e2:d7:c2:94:54:c8:26:c1:9f:5b: bf:20:2e:40:8b:7b:7c:e8:83:b5:53:33:32:0a:ab: 15:0d:77:75:e9:9e:98:14:0e:99:d6:f8:13:11:be: 5a:37:79:dd:59:94:dc:f7:fc:4f:ce:c9:93:60:d3: 6f:d1:3d:b3:80:1f:e1:83:e3:bb:06:3b:80:be:7f: b3:30:2f:1f:24:b0:c8:42:46:a6:52:48:4d:27:b4: 51:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:82:F7:08:71:B7:D7:87:37:74:5E:6F:D4:3E:4B:88:6C:B4:CD:E3 X509v3 Authority Key Identifier: keyid:7C:E8:AF:BA:81:B9:A4:E0:B1:67:44:9B:4A:9C:A6:9B:88:73:C3:2C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/46c06455-15c0-4f3d-813b-c07bef78f025/0/7CE8AFBA81B9A4E0B167449B4A9CA69B8873C32C.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7CE8AFBA81B9A4E0B167449B4A9CA69B8873C32C.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/46c06455-15c0-4f3d-813b-c07bef78f025/0/7CE8AFBA81B9A4E0B167449B4A9CA69B8873C32C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 10:97:75:1a:bc:61:6d:ac:74:28:0e:6b:51:99:24:df:af:9e: de:ec:01:56:a0:95:af:85:08:b8:eb:09:a3:30:db:ce:f9:62: 43:d4:b6:bc:35:91:1b:34:e0:e8:7c:11:e4:93:b5:bd:ba:81: b8:40:3a:f6:83:c4:e6:60:22:00:6a:17:d8:4a:ec:52:17:38: 2c:30:5a:c9:a9:93:28:a7:66:ac:c6:d4:2c:e9:cc:48:ba:53: 64:12:89:3d:fa:9f:ca:64:bc:50:7a:30:45:e0:89:81:d6:c1: 42:95:aa:be:66:cf:8e:16:8e:0e:b7:0d:16:a6:b9:7b:f9:6f: d7:78:c6:7e:9a:11:bf:9b:ee:62:d7:3f:a9:c2:a7:6a:6f:4b: d0:bb:fd:48:8f:97:08:5c:85:72:16:c7:95:3e:01:ea:a2:9a: 38:06:3d:cb:eb:55:65:b3:b8:67:35:8e:51:34:2c:6a:a7:a5: 0b:87:34:67:87:fc:f4:c7:fd:5d:fa:f3:61:ce:c5:1d:8c:7a: 9e:38:25:00:7b:ae:b9:13:fd:24:29:99:87:62:d8:b5:9e:c7: 3b:e3:3f:bf:24:70:a4:80:51:5b:a0:80:14:b1:65:4e:29:19: 39:90:45:3e:cc:30:61:8a:a6:98:dd:d9:ea:d3:f9:af:a0:17: d8:31:b0:81 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUcje8jkK/oCzZMspD7jE8uIxgj2AwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoN0NFOEFGQkE4MUI5QTRFMEIxNjc0NDlCNEE5Q0E2OUI4 ODczQzMyQzAeFw0yNTEyMjQxMTQwMDdaFw0yNTEyMjcxMjE5MDdaMDMxMTAvBgNV BAMTKDkxODJGNzA4NzFCN0Q3ODczNzc0NUU2RkQ0M0U0Qjg4NkNCNENERTMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDD899ymsKJrlIrYWh+7PzOaXSH 1UOEpPsEIenfv284mpCWWl4/d5rIvBRKxrGy8ws/6xkN41tuH/dTdD5fqAtLyFz2 09fAxh0SQAktEoaDRS8RGCILrhHnMwkPbeNIKUe8bLgaHSKggfiZS/TlIWwyd5zA JsKPovpCk0k+ij7VpLxgidaucUcR1nkfpI3gUDr/yB8rU9VsKiyVchTcVtWcX6Tu vjiD9z2H4tfClFTIJsGfW78gLkCLe3zog7VTMzIKqxUNd3XpnpgUDpnW+BMRvlo3 ed1ZlNz3/E/OyZNg02/RPbOAH+GD47sGO4C+f7MwLx8ksMhCRqZSSE0ntFG7AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUkYL3CHG314c3dF5v1D5LiGy0zeMwHwYDVR0j BBgwFoAUfOivuoG5pOCxZ0SbSpymm4hzwywwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 NmMwNjQ1NS0xNWMwLTRmM2QtODEzYi1jMDdiZWY3OGYwMjUvMC83Q0U4QUZCQTgx QjlBNEUwQjE2NzQ0OUI0QTlDQTY5Qjg4NzNDMzJDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvN0NFOEFGQkE4MUI5QTRFMEIxNjc0NDlCNEE5Q0E2OUI4ODcz QzMyQy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNDZjMDY0NTUtMTVjMC00ZjNkLTgx M2ItYzA3YmVmNzhmMDI1LzAvN0NFOEFGQkE4MUI5QTRFMEIxNjc0NDlCNEE5Q0E2 OUI4ODczQzMyQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABCXdRq8YW2sdCgOa1GZJN+vnt7sAVagla+F CLjrCaMw2875YkPUtrw1kRs04Oh8EeSTtb26gbhAOvaDxOZgIgBqF9hK7FIXOCww WsmpkyinZqzG1CzpzEi6U2QSiT36n8pkvFB6MEXgiYHWwUKVqr5mz44Wjg63DRam uXv5b9d4xn6aEb+b7mLXP6nCp2pvS9C7/UiPlwhchXIWx5U+AeqimjgGPcvrVWWz uGc1jlE0LGqnpQuHNGeH/PTH/V3682HOxR2Mep44JQB7rrkT/SQpmYdi2LWexzvj P78kcKSAUVuggBSxZU4pGTmQRT7MMGGKppjd2erT+a+gF9gxsIE= -----END CERTIFICATE-----Generated at Wed Dec 24 22:08:33 2025 by rpki-client