This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/519a8538-da43-4158-abc2-8e63a8e40899/0/D7C7C6E533C41C36D923CDC59FFC1B0436C39FAF.mft File: D7C7C6E533C41C36D923CDC59FFC1B0436C39FAF.mft (raw, json) Hash identifier: Bp4k165lgcxUkH+Hpx0IdYSW5WvPmrAXMbX60OJb1g8= Subject key identifier: 0C:C5:80:EA:6B:5F:0C:02:78:1B:C3:CC:7A:A6:16:A3:3A:3D:37:23 Authority key identifier: D7:C7:C6:E5:33:C4:1C:36:D9:23:CD:C5:9F:FC:1B:04:36:C3:9F:AF Certificate issuer: /CN=D7C7C6E533C41C36D923CDC59FFC1B0436C39FAF Certificate serial: 3CDC02C4A4CBEB754D898CBE5A9771A2C77CE5C9 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D7C7C6E533C41C36D923CDC59FFC1B0436C39FAF.cer Subject info access: rsync://repo-rpki.idnic.net/repo/519a8538-da43-4158-abc2-8e63a8e40899/0/D7C7C6E533C41C36D923CDC59FFC1B0436C39FAF.mft Manifest number: 028F Signing time: Thu 18 Dec 2025 04:01:44 +0000 Manifest this update: Thu 18 Dec 2025 03:56:44 +0000 Manifest next update: Sun 21 Dec 2025 15:08:44 +0000 Files and hashes: 1: D7C7C6E533C41C36D923CDC59FFC1B0436C39FAF.crl (hash: LC/rngri+0G0NpNqA91Q4ahzrjmRTrVjqOLaEmMZYgQ=) 2: 3130332e3130322e3137372e302f32342d3234203d3e20313335343634.roa (hash: 5B/tN2XTSVc7IkCa3bkZUZXee71PBWdrKh/L7WGgSKQ=) 3: 3130332e3130322e3136372e302f32342d3234203d3e20313335343634.roa (hash: ceY23gZq7fyvuACT0VzLXjn2OzCRdbTZW+mufK3gDDU=) 4: 3130332e37302e36382e302f32342d3234203d3e20313335343634.roa (hash: l9uygWTtqWMPyZojlz6MhHbKKXqBISgxnKW2QuyQglM=) 5: 3130332e3130322e3137362e302f32342d3234203d3e20313335343634.roa (hash: zAqV6QY/TappIht3b1tctxgtErOisyD+TbFdtRBFjYk=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/519a8538-da43-4158-abc2-8e63a8e40899/0/D7C7C6E533C41C36D923CDC59FFC1B0436C39FAF.crl rsync://repo-rpki.idnic.net/repo/519a8538-da43-4158-abc2-8e63a8e40899/0/D7C7C6E533C41C36D923CDC59FFC1B0436C39FAF.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D7C7C6E533C41C36D923CDC59FFC1B0436C39FAF.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 21 Dec 2025 15:08:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3c:dc:02:c4:a4:cb:eb:75:4d:89:8c:be:5a:97:71:a2:c7:7c:e5:c9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D7C7C6E533C41C36D923CDC59FFC1B0436C39FAF Validity Not Before: Dec 18 03:56:44 2025 GMT Not After : Dec 21 15:08:44 2025 GMT Subject: CN=0CC580EA6B5F0C02781BC3CC7AA616A33A3D3723 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:84:3e:a6:63:ad:bd:36:59:b4:85:5a:a3:2b: 80:b4:58:21:1b:d6:51:dc:06:f3:81:9b:f4:6f:bd: df:ed:00:61:e1:5b:04:26:11:83:30:f0:c8:65:17: f0:eb:61:a9:bd:0e:b6:9c:74:c7:c6:a5:31:e0:ac: cb:ca:0e:82:f8:d7:5d:64:6e:7d:64:41:13:fd:73: 41:da:20:70:68:58:ae:98:e0:2b:3b:71:bc:8d:03: a1:96:31:fa:75:b2:3a:0e:b8:47:16:c2:82:3d:56: 91:ea:6c:73:40:ae:52:1d:ee:4f:39:f4:0b:35:c4: d0:e0:9f:52:94:9b:80:8f:d2:93:b4:53:1f:34:2b: 5e:59:b1:d6:2a:a1:26:c9:76:6b:3f:fb:46:d3:af: f0:9f:bd:13:88:63:34:91:de:a4:8c:51:82:a5:3a: 8a:c9:b2:98:67:df:54:36:2c:61:af:f7:fd:69:0d: b5:33:da:8d:e2:07:a9:23:fa:a9:42:c7:8d:8d:b8: 6d:9f:6f:31:eb:9a:7a:92:b5:aa:f1:77:06:09:58: 92:30:3e:01:97:2b:76:58:9b:5d:2e:fd:38:4f:30: d6:9b:7e:73:a7:c1:ae:d9:6a:be:be:74:d2:24:d7: f0:b5:d1:fa:c1:db:4b:9a:b4:e6:84:3a:96:12:2b: c9:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0C:C5:80:EA:6B:5F:0C:02:78:1B:C3:CC:7A:A6:16:A3:3A:3D:37:23 X509v3 Authority Key Identifier: keyid:D7:C7:C6:E5:33:C4:1C:36:D9:23:CD:C5:9F:FC:1B:04:36:C3:9F:AF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/519a8538-da43-4158-abc2-8e63a8e40899/0/D7C7C6E533C41C36D923CDC59FFC1B0436C39FAF.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D7C7C6E533C41C36D923CDC59FFC1B0436C39FAF.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/519a8538-da43-4158-abc2-8e63a8e40899/0/D7C7C6E533C41C36D923CDC59FFC1B0436C39FAF.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6d:c7:d2:b9:ab:2b:db:fe:bd:d3:ab:ce:65:95:64:ce:fb:17: e7:d0:f0:a6:6c:b7:b8:16:ec:86:d1:11:a4:e5:ae:57:6a:2f: 68:dc:f4:7e:92:6b:57:7d:d3:78:84:6c:f8:ef:c6:e0:c5:5c: b3:11:f7:e8:1d:92:7f:0c:23:72:b6:10:c4:9b:53:2c:e4:0b: 65:3b:3b:53:6b:a8:ca:4b:bf:3c:37:8e:e7:b7:65:5a:1d:4a: ea:2b:fe:eb:18:6a:af:97:d5:e6:64:39:80:32:7c:bf:ad:3b: 68:9d:b7:67:a1:4d:b6:06:ae:2f:17:e3:54:bd:f2:02:01:2a: a9:84:94:48:57:ee:51:b1:9d:b9:3d:e1:17:8f:b4:4f:72:83: 4f:fc:30:bb:8f:a3:a7:06:e2:37:7a:24:6b:7b:3a:57:2e:12: 39:fa:d2:b5:1a:d1:e3:33:70:a9:42:3a:3e:9e:f3:c2:58:1b: e4:82:cd:00:3d:4b:1d:fd:b0:a3:82:6f:b6:d2:26:f4:0f:d4: 9d:e2:87:75:24:e0:ad:18:0f:f9:f5:81:61:45:a0:c5:d0:8b: 86:79:84:4c:f1:a6:0e:02:03:a3:26:bb:e1:e9:79:0b:3f:9e: f8:7f:9a:75:06:d6:4c:fe:5f:bc:55:90:29:f0:bd:d6:30:9f: d8:68:e5:16 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUPNwCxKTL63VNiYy+Wpdxosd85ckwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDdDN0M2RTUzM0M0MUMzNkQ5MjNDREM1OUZGQzFCMDQz NkMzOUZBRjAeFw0yNTEyMTgwMzU2NDRaFw0yNTEyMjExNTA4NDRaMDMxMTAvBgNV BAMTKDBDQzU4MEVBNkI1RjBDMDI3ODFCQzNDQzdBQTYxNkEzM0EzRDM3MjMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCyhD6mY629Nlm0hVqjK4C0WCEb 1lHcBvOBm/Rvvd/tAGHhWwQmEYMw8MhlF/DrYam9DracdMfGpTHgrMvKDoL4111k bn1kQRP9c0HaIHBoWK6Y4Cs7cbyNA6GWMfp1sjoOuEcWwoI9VpHqbHNArlId7k85 9As1xNDgn1KUm4CP0pO0Ux80K15ZsdYqoSbJdms/+0bTr/CfvROIYzSR3qSMUYKl OorJsphn31Q2LGGv9/1pDbUz2o3iB6kj+qlCx42NuG2fbzHrmnqStarxdwYJWJIw PgGXK3ZYm10u/ThPMNabfnOnwa7Zar6+dNIk1/C10frB20uatOaEOpYSK8nRAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUDMWA6mtfDAJ4G8PMeqYWozo9NyMwHwYDVR0j BBgwFoAU18fG5TPEHDbZI83Fn/wbBDbDn68wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 MTlhODUzOC1kYTQzLTQxNTgtYWJjMi04ZTYzYThlNDA4OTkvMC9EN0M3QzZFNTMz QzQxQzM2RDkyM0NEQzU5RkZDMUIwNDM2QzM5RkFGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRDdDN0M2RTUzM0M0MUMzNkQ5MjNDREM1OUZGQzFCMDQzNkMz OUZBRi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNTE5YTg1MzgtZGE0My00MTU4LWFi YzItOGU2M2E4ZTQwODk5LzAvRDdDN0M2RTUzM0M0MUMzNkQ5MjNDREM1OUZGQzFC MDQzNkMzOUZBRi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAG3H0rmrK9v+vdOrzmWVZM77F+fQ8KZst7gW 7IbREaTlrldqL2jc9H6Sa1d903iEbPjvxuDFXLMR9+gdkn8MI3K2EMSbUyzkC2U7 O1NrqMpLvzw3jue3ZVodSuor/usYaq+X1eZkOYAyfL+tO2idt2ehTbYGri8X41S9 8gIBKqmElEhX7lGxnbk94RePtE9yg0/8MLuPo6cG4jd6JGt7OlcuEjn60rUa0eMz cKlCOj6e88JYG+SCzQA9Sx39sKOCb7bSJvQP1J3ih3Uk4K0YD/n1gWFFoMXQi4Z5 hEzxpg4CA6Mmu+HpeQs/nvh/mnUG1kz+X7xVkCnwvdYwn9ho5RY= -----END CERTIFICATE-----Generated at Fri Dec 19 12:58:27 2025 by rpki-client