This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/4b0e7f8e-c29f-4e6b-ad0a-9957fbd56953/0/C7F5AA72DB870E161B62ACA9250AD98AA110A014.mft File: C7F5AA72DB870E161B62ACA9250AD98AA110A014.mft (raw, json) Hash identifier: NPG6IEjnVC1BtNTz0Xy/TwJ+yAa3Sy2spxEvXi0wAmE= Subject key identifier: 50:AA:9C:13:3C:69:20:F6:98:DB:4D:22:BD:20:9E:88:6C:32:89:05 Authority key identifier: C7:F5:AA:72:DB:87:0E:16:1B:62:AC:A9:25:0A:D9:8A:A1:10:A0:14 Certificate issuer: /CN=C7F5AA72DB870E161B62ACA9250AD98AA110A014 Certificate serial: 0DED5F55402FBBC279BF3059E3DBFE697A806463 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C7F5AA72DB870E161B62ACA9250AD98AA110A014.cer Subject info access: rsync://repo-rpki.idnic.net/repo/4b0e7f8e-c29f-4e6b-ad0a-9957fbd56953/0/C7F5AA72DB870E161B62ACA9250AD98AA110A014.mft Manifest number: 02CC Signing time: Fri 19 Dec 2025 11:53:09 +0000 Manifest this update: Fri 19 Dec 2025 11:48:09 +0000 Manifest next update: Mon 22 Dec 2025 23:23:09 +0000 Files and hashes: 1: C7F5AA72DB870E161B62ACA9250AD98AA110A014.crl (hash: IYcylcZNiV8zDjMReKtyCf1gIU0s6m1zM5qZepDmT8Y=) 2: 3130332e3230372e3233362e302f32332d3234203d3e20313334363434.roa (hash: bAg6MsDstetOvzdA+3u3BpUGBWifQkKCKKizemY7LEk=) 3: 3130332e3230372e3233392e302f32342d3234203d3e20313338303936.roa (hash: oeYDG2ojbn2UU8RO5PDyI86B1bVuGfaVXnCJZIST5M8=) 4: 3130332e3230372e3233382e302f32342d3234203d3e20313338303936.roa (hash: kqyShD8grMzsW8WAD+q93A9hYlzfgDARjSsqGTZiG54=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/4b0e7f8e-c29f-4e6b-ad0a-9957fbd56953/0/C7F5AA72DB870E161B62ACA9250AD98AA110A014.crl rsync://repo-rpki.idnic.net/repo/4b0e7f8e-c29f-4e6b-ad0a-9957fbd56953/0/C7F5AA72DB870E161B62ACA9250AD98AA110A014.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C7F5AA72DB870E161B62ACA9250AD98AA110A014.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 22 Dec 2025 23:23:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0d:ed:5f:55:40:2f:bb:c2:79:bf:30:59:e3:db:fe:69:7a:80:64:63 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C7F5AA72DB870E161B62ACA9250AD98AA110A014 Validity Not Before: Dec 19 11:48:09 2025 GMT Not After : Dec 22 23:23:09 2025 GMT Subject: CN=50AA9C133C6920F698DB4D22BD209E886C328905 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:d3:e9:e3:78:71:da:67:a5:bb:38:55:af:e7: 8b:72:5b:e0:02:be:91:02:48:23:52:18:af:53:5f: d6:23:ae:f6:d4:fd:45:f6:35:d1:e9:f8:6a:2c:31: be:75:6b:52:0a:c3:a2:ab:c3:71:dc:c9:46:98:3b: 0e:ae:2f:03:44:ff:96:8f:b4:bf:e1:c7:3f:ee:d7: 8d:82:aa:86:68:2f:7e:d7:c6:c0:7b:76:78:83:3c: 4a:aa:23:3f:01:b2:2e:c1:c7:1a:f2:2d:ff:9f:fc: 47:1d:3e:f7:27:c7:39:a2:cd:f5:24:e2:41:8f:73: d3:6e:01:9d:10:90:e6:8a:4c:7c:2b:6e:87:26:bc: 77:84:3e:bb:e2:ed:b9:7d:20:30:4e:19:4b:40:0e: 9b:a1:fc:1e:73:c9:ec:49:02:f2:0e:ca:1c:83:09: 3c:ab:4e:0e:88:b4:bf:f8:e3:3f:e0:67:89:90:33: 8d:8d:cc:ab:bc:ea:f8:a4:68:06:3b:b2:69:21:e2: f7:3c:76:39:bb:fc:ef:8c:32:76:16:cb:5f:de:68: a6:e6:68:c5:99:8e:5d:9e:d8:93:41:0f:43:3a:35: da:97:6c:73:39:08:fa:d4:73:10:c1:ec:71:92:a2: df:10:88:a9:74:d9:03:df:0a:bc:25:b0:b3:09:95: e3:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 50:AA:9C:13:3C:69:20:F6:98:DB:4D:22:BD:20:9E:88:6C:32:89:05 X509v3 Authority Key Identifier: keyid:C7:F5:AA:72:DB:87:0E:16:1B:62:AC:A9:25:0A:D9:8A:A1:10:A0:14 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/4b0e7f8e-c29f-4e6b-ad0a-9957fbd56953/0/C7F5AA72DB870E161B62ACA9250AD98AA110A014.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C7F5AA72DB870E161B62ACA9250AD98AA110A014.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/4b0e7f8e-c29f-4e6b-ad0a-9957fbd56953/0/C7F5AA72DB870E161B62ACA9250AD98AA110A014.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 81:55:06:2d:a2:8f:f8:1e:d3:7d:ae:5f:12:95:ed:05:ef:d5: 51:f6:a1:1c:58:94:9d:1d:3f:75:bb:fe:67:2e:cd:3a:29:da: eb:26:c5:9a:5c:cd:42:79:16:6c:85:82:5c:d8:c8:8f:76:ee: 79:8d:69:aa:b2:40:b5:28:80:1f:ea:42:bd:1f:b7:11:4e:d2: 5b:4a:59:a8:58:9b:77:ee:9d:40:90:ec:f1:9f:d7:12:30:bd: 95:a8:02:f2:f7:fd:c6:b0:e9:ef:3b:80:6d:9a:a6:bc:ea:87: ac:d1:9a:c7:4d:9c:b2:c9:64:54:92:f9:71:1a:64:bf:f4:2d: f0:8e:18:8d:87:60:1e:77:27:fe:33:db:55:cd:35:a9:61:32: 18:33:49:78:7b:54:74:3c:91:4d:82:f8:84:a8:70:8d:0c:71: 14:d6:30:e1:b3:34:b3:da:1a:f1:d8:8e:40:d7:a4:4c:35:52: 8d:0e:f1:a9:ec:c4:ed:47:f5:8b:83:99:d4:9e:be:01:52:2e: 77:a4:91:12:c5:69:9f:2a:c3:12:cb:96:0a:33:f7:3f:18:3b: 1d:a3:23:a4:31:b9:d1:79:7c:e0:70:36:ac:02:02:77:e2:4f: 0c:f7:64:0f:ed:49:87:32:a6:c4:ab:c9:46:47:e1:64:6c:21: 4a:fb:b0:5c -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUDe1fVUAvu8J5vzBZ49v+aXqAZGMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzdGNUFBNzJEQjg3MEUxNjFCNjJBQ0E5MjUwQUQ5OEFB MTEwQTAxNDAeFw0yNTEyMTkxMTQ4MDlaFw0yNTEyMjIyMzIzMDlaMDMxMTAvBgNV BAMTKDUwQUE5QzEzM0M2OTIwRjY5OERCNEQyMkJEMjA5RTg4NkMzMjg5MDUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCg0+njeHHaZ6W7OFWv54tyW+AC vpECSCNSGK9TX9YjrvbU/UX2NdHp+GosMb51a1IKw6Krw3HcyUaYOw6uLwNE/5aP tL/hxz/u142CqoZoL37XxsB7dniDPEqqIz8Bsi7BxxryLf+f/EcdPvcnxzmizfUk 4kGPc9NuAZ0QkOaKTHwrbocmvHeEPrvi7bl9IDBOGUtADpuh/B5zyexJAvIOyhyD CTyrTg6ItL/44z/gZ4mQM42NzKu86vikaAY7smkh4vc8djm7/O+MMnYWy1/eaKbm aMWZjl2e2JNBD0M6NdqXbHM5CPrUcxDB7HGSot8QiKl02QPfCrwlsLMJleNDAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUUKqcEzxpIPaY200ivSCeiGwyiQUwHwYDVR0j BBgwFoAUx/WqctuHDhYbYqypJQrZiqEQoBQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 YjBlN2Y4ZS1jMjlmLTRlNmItYWQwYS05OTU3ZmJkNTY5NTMvMC9DN0Y1QUE3MkRC ODcwRTE2MUI2MkFDQTkyNTBBRDk4QUExMTBBMDE0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQzdGNUFBNzJEQjg3MEUxNjFCNjJBQ0E5MjUwQUQ5OEFBMTEw QTAxNC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNGIwZTdmOGUtYzI5Zi00ZTZiLWFk MGEtOTk1N2ZiZDU2OTUzLzAvQzdGNUFBNzJEQjg3MEUxNjFCNjJBQ0E5MjUwQUQ5 OEFBMTEwQTAxNC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIFVBi2ij/ge032uXxKV7QXv1VH2oRxYlJ0d P3W7/mcuzTop2usmxZpczUJ5FmyFglzYyI927nmNaaqyQLUogB/qQr0ftxFO0ltK WahYm3funUCQ7PGf1xIwvZWoAvL3/caw6e87gG2aprzqh6zRmsdNnLLJZFSS+XEa ZL/0LfCOGI2HYB53J/4z21XNNalhMhgzSXh7VHQ8kU2C+ISocI0McRTWMOGzNLPa GvHYjkDXpEw1Uo0O8ansxO1H9YuDmdSevgFSLnekkRLFaZ8qwxLLlgoz9z8YOx2j I6QxudF5fOBwNqwCAnfiTwz3ZA/tSYcypsSryUZH4WRsIUr7sFw= -----END CERTIFICATE-----Generated at Sun Dec 21 07:09:03 2025 by rpki-client