This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/4bc8cda5-3483-42b0-b385-fc070716fbcc/0/7D6EDFDB21B8B7E6A75A990A7BECAD85E8BEB953.mft File: 7D6EDFDB21B8B7E6A75A990A7BECAD85E8BEB953.mft (raw, json) Hash identifier: yHA75YTTgTq4/H2hwmW9PE4QfkbXpbPihsFZyXYQ1zg= Subject key identifier: D1:6B:BF:85:D3:AF:FD:00:A9:7E:E5:AD:18:E8:5D:9A:73:16:D7:72 Authority key identifier: 7D:6E:DF:DB:21:B8:B7:E6:A7:5A:99:0A:7B:EC:AD:85:E8:BE:B9:53 Certificate issuer: /CN=7D6EDFDB21B8B7E6A75A990A7BECAD85E8BEB953 Certificate serial: 44605798BCBB7334BCFB86D7029036413D09884A Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7D6EDFDB21B8B7E6A75A990A7BECAD85E8BEB953.cer Subject info access: rsync://repo-rpki.idnic.net/repo/4bc8cda5-3483-42b0-b385-fc070716fbcc/0/7D6EDFDB21B8B7E6A75A990A7BECAD85E8BEB953.mft Manifest number: 01DE Signing time: Thu 18 Dec 2025 15:50:05 +0000 Manifest this update: Thu 18 Dec 2025 15:45:05 +0000 Manifest next update: Mon 22 Dec 2025 02:34:05 +0000 Files and hashes: 1: 3130332e34362e352e302f32342d3234203d3e20313530343630.roa (hash: nS2W+M5blNWeSHdC/e0iT+6uzyI/msV7CeC3QyUvyA8=) 2: 7D6EDFDB21B8B7E6A75A990A7BECAD85E8BEB953.crl (hash: sWVEtXs9NdBBVrDveV9llMLAP/v2BIUo5TsXedKPXKo=) 3: 3130332e34362e342e302f32332d3233203d3e20313530343630.roa (hash: NeZfhHFd7F8kh7DbLUw4HnOkopSvleBfZOjwOjuAcxQ=) 4: 3130332e34362e342e302f32342d3234203d3e20313530343630.roa (hash: v9nMdjUiAFgj/HQ4Hjr5TDNNNsBVPB9pxdCw6MN2TcM=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/4bc8cda5-3483-42b0-b385-fc070716fbcc/0/7D6EDFDB21B8B7E6A75A990A7BECAD85E8BEB953.crl rsync://repo-rpki.idnic.net/repo/4bc8cda5-3483-42b0-b385-fc070716fbcc/0/7D6EDFDB21B8B7E6A75A990A7BECAD85E8BEB953.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7D6EDFDB21B8B7E6A75A990A7BECAD85E8BEB953.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 22 Dec 2025 02:34:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 44:60:57:98:bc:bb:73:34:bc:fb:86:d7:02:90:36:41:3d:09:88:4a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7D6EDFDB21B8B7E6A75A990A7BECAD85E8BEB953 Validity Not Before: Dec 18 15:45:05 2025 GMT Not After : Dec 22 02:34:05 2025 GMT Subject: CN=D16BBF85D3AFFD00A97EE5AD18E85D9A7316D772 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ef:01:46:20:b7:07:c1:f0:9b:d1:97:0c:b8:05: e3:84:97:ed:59:4a:3e:42:0d:b7:0a:cc:24:9e:42: 55:4d:5b:40:af:33:da:7a:4c:99:3b:c4:60:63:5b: ee:14:28:a9:f5:b4:9d:f9:0f:4a:fd:5f:82:4d:0a: cc:0f:16:65:4b:f1:51:35:b7:02:50:5a:5b:14:50: a9:34:6a:7a:36:64:ba:83:fe:f9:54:eb:8b:bd:66: 64:cc:aa:dd:c1:82:bd:c3:94:9d:0a:7f:1e:25:92: 77:fa:9e:39:0e:19:96:a8:19:e4:72:1b:8f:38:e5: 92:98:a6:fb:0c:ea:8c:04:a4:30:b7:6f:62:2d:f5: 32:97:6c:da:42:75:84:1d:d1:6a:43:5b:46:34:3e: d2:7d:4d:ad:4b:a6:97:5b:7e:4a:58:c3:22:4f:85: 9f:d8:d9:45:c7:64:41:bc:00:55:ce:32:a8:b3:94: d2:53:18:7d:0d:c6:53:5f:1b:ea:f8:d7:59:e6:bf: 91:45:99:50:97:19:b9:b3:c2:2c:d6:35:d4:61:06: 9d:a7:95:fe:fd:90:df:e3:c7:fe:81:1b:59:90:5b: 6c:28:06:16:1b:48:88:78:9b:7f:b7:52:70:ae:3c: 35:20:7e:8d:62:27:a5:f5:1b:f1:34:c4:f8:ef:b5: 03:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:6B:BF:85:D3:AF:FD:00:A9:7E:E5:AD:18:E8:5D:9A:73:16:D7:72 X509v3 Authority Key Identifier: keyid:7D:6E:DF:DB:21:B8:B7:E6:A7:5A:99:0A:7B:EC:AD:85:E8:BE:B9:53 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/4bc8cda5-3483-42b0-b385-fc070716fbcc/0/7D6EDFDB21B8B7E6A75A990A7BECAD85E8BEB953.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7D6EDFDB21B8B7E6A75A990A7BECAD85E8BEB953.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/4bc8cda5-3483-42b0-b385-fc070716fbcc/0/7D6EDFDB21B8B7E6A75A990A7BECAD85E8BEB953.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 53:65:b9:25:61:be:72:e5:eb:91:44:1d:a8:70:96:bc:49:cb: 49:da:de:ca:b5:ff:89:2e:de:c2:12:a3:06:be:14:b0:22:1e: 92:9f:70:98:28:88:ba:63:ef:31:d8:6d:4c:d9:43:5a:d1:65: d1:be:1e:7d:a9:e8:c6:3f:bd:3e:5f:b7:b5:83:7a:fe:0c:de: 3a:83:4b:75:31:e7:80:8a:60:0e:88:4d:67:df:53:00:9e:65: 83:32:4c:d4:dd:00:3b:7f:7d:63:c1:58:7f:c7:a3:1c:ce:41: 3d:b1:b5:d6:b8:f6:ca:d4:31:4b:3c:67:7c:91:64:45:7e:f3: c9:f5:50:7f:f6:7f:6c:60:b6:de:a7:57:c5:2d:40:cc:b1:21: 50:9c:39:e0:82:22:45:61:d4:a3:93:4b:9e:2a:5f:5e:fe:11: a3:64:bb:8f:95:86:37:db:86:78:9a:c1:ea:f1:3f:c8:39:e3: 08:da:b2:b3:41:62:88:ee:bf:51:b4:ec:82:89:73:b4:79:9f: e6:d5:2d:04:a6:7d:8a:0c:26:cf:4e:1d:86:f9:a0:e1:0d:9a: 81:b9:ec:21:4b:83:99:92:b7:8b:06:94:21:27:af:66:1a:a5: f7:40:fa:5a:b8:4a:01:94:17:69:79:3c:a9:8e:fe:b0:db:57: cf:bf:19:c3 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIURGBXmLy7czS8+4bXApA2QT0JiEowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoN0Q2RURGREIyMUI4QjdFNkE3NUE5OTBBN0JFQ0FEODVF OEJFQjk1MzAeFw0yNTEyMTgxNTQ1MDVaFw0yNTEyMjIwMjM0MDVaMDMxMTAvBgNV BAMTKEQxNkJCRjg1RDNBRkZEMDBBOTdFRTVBRDE4RTg1RDlBNzMxNkQ3NzIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDvAUYgtwfB8JvRlwy4BeOEl+1Z Sj5CDbcKzCSeQlVNW0CvM9p6TJk7xGBjW+4UKKn1tJ35D0r9X4JNCswPFmVL8VE1 twJQWlsUUKk0ano2ZLqD/vlU64u9ZmTMqt3Bgr3DlJ0Kfx4lknf6njkOGZaoGeRy G4845ZKYpvsM6owEpDC3b2It9TKXbNpCdYQd0WpDW0Y0PtJ9Ta1LppdbfkpYwyJP hZ/Y2UXHZEG8AFXOMqizlNJTGH0NxlNfG+r411nmv5FFmVCXGbmzwizWNdRhBp2n lf79kN/jx/6BG1mQW2woBhYbSIh4m3+3UnCuPDUgfo1iJ6X1G/E0xPjvtQMvAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU0Wu/hdOv/QCpfuWtGOhdmnMW13IwHwYDVR0j BBgwFoAUfW7f2yG4t+anWpkKe+ythei+uVMwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 YmM4Y2RhNS0zNDgzLTQyYjAtYjM4NS1mYzA3MDcxNmZiY2MvMC83RDZFREZEQjIx QjhCN0U2QTc1QTk5MEE3QkVDQUQ4NUU4QkVCOTUzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvN0Q2RURGREIyMUI4QjdFNkE3NUE5OTBBN0JFQ0FEODVFOEJF Qjk1My5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNGJjOGNkYTUtMzQ4My00MmIwLWIz ODUtZmMwNzA3MTZmYmNjLzAvN0Q2RURGREIyMUI4QjdFNkE3NUE5OTBBN0JFQ0FE ODVFOEJFQjk1My5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFNluSVhvnLl65FEHahwlrxJy0na3sq1/4ku 3sISowa+FLAiHpKfcJgoiLpj7zHYbUzZQ1rRZdG+Hn2p6MY/vT5ft7WDev4M3jqD S3Ux54CKYA6ITWffUwCeZYMyTNTdADt/fWPBWH/HoxzOQT2xtda49srUMUs8Z3yR ZEV+88n1UH/2f2xgtt6nV8UtQMyxIVCcOeCCIkVh1KOTS54qX17+EaNku4+Vhjfb hniawerxP8g54wjasrNBYojuv1G07IKJc7R5n+bVLQSmfYoMJs9OHYb5oOENmoG5 7CFLg5mSt4sGlCEnr2YapfdA+lq4SgGUF2l5PKmO/rDbV8+/GcM= -----END CERTIFICATE-----Generated at Fri Dec 19 11:19:37 2025 by rpki-client