This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/52292ba8-ad1a-4139-8c20-5b526da970bd/0/7E6A786ACEF684F37758FC4A6D8517CAD165FA77.mft File: 7E6A786ACEF684F37758FC4A6D8517CAD165FA77.mft (raw, json) Hash identifier: ktI8vHQ4V5S+A1mBF1MqPGrVt+H5vHBtRiqOZoqSEiM= Subject key identifier: 65:BA:11:7E:A1:4B:FD:D9:52:B3:DF:94:04:F1:47:3D:A5:1E:DD:6A Authority key identifier: 7E:6A:78:6A:CE:F6:84:F3:77:58:FC:4A:6D:85:17:CA:D1:65:FA:77 Certificate issuer: /CN=7E6A786ACEF684F37758FC4A6D8517CAD165FA77 Certificate serial: 199BA3BE57C666717B15AD8BDFE2ECD376E529E7 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7E6A786ACEF684F37758FC4A6D8517CAD165FA77.cer Subject info access: rsync://repo-rpki.idnic.net/repo/52292ba8-ad1a-4139-8c20-5b526da970bd/0/7E6A786ACEF684F37758FC4A6D8517CAD165FA77.mft Manifest number: 01E9 Signing time: Sat 20 Dec 2025 21:12:40 +0000 Manifest this update: Sat 20 Dec 2025 21:07:40 +0000 Manifest next update: Wed 24 Dec 2025 07:44:40 +0000 Files and hashes: 1: 3130332e3231332e3233312e302f32342d3234203d3e20313431313236.roa (hash: LgrwV1f0ZUMT2nBDfwKWYCZTwrW8QfuLgJJFAHp0cWA=) 2: 7E6A786ACEF684F37758FC4A6D8517CAD165FA77.crl (hash: xD6L3DBjdpKij7zu66G/spd1ig8S9oC5tmUDoeYUKzQ=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/52292ba8-ad1a-4139-8c20-5b526da970bd/0/7E6A786ACEF684F37758FC4A6D8517CAD165FA77.crl rsync://repo-rpki.idnic.net/repo/52292ba8-ad1a-4139-8c20-5b526da970bd/0/7E6A786ACEF684F37758FC4A6D8517CAD165FA77.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7E6A786ACEF684F37758FC4A6D8517CAD165FA77.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 24 Dec 2025 07:39:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 19:9b:a3:be:57:c6:66:71:7b:15:ad:8b:df:e2:ec:d3:76:e5:29:e7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7E6A786ACEF684F37758FC4A6D8517CAD165FA77 Validity Not Before: Dec 20 21:07:40 2025 GMT Not After : Dec 24 07:44:40 2025 GMT Subject: CN=65BA117EA14BFDD952B3DF9404F1473DA51EDD6A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:c3:45:d4:19:d7:34:1d:be:82:13:56:ee:a9: 79:7f:91:12:38:7e:6d:bf:fd:2a:ae:aa:41:67:5a: 16:2a:4f:06:26:1b:67:27:14:90:f1:be:13:b3:19: 47:73:78:4e:31:bf:8c:e1:cd:58:71:40:28:e3:18: 57:47:34:59:fc:93:47:79:c5:a0:26:d0:5d:d8:5c: f1:ed:48:89:58:69:9b:d0:1b:bf:cf:80:df:86:40: 89:a9:80:01:98:d5:20:f8:78:16:b9:75:3d:cc:44: 8c:cb:ba:99:ec:01:1a:02:8e:05:97:41:0d:ab:3d: 73:e0:65:95:82:f4:89:ae:66:b4:6b:78:72:fc:ed: d1:d8:b8:a6:6c:95:c5:76:96:85:2f:de:cf:81:e7: 9f:95:05:fd:2f:f2:73:e3:bb:3f:74:26:e8:32:f5: 30:aa:f6:4c:2f:1c:bd:b2:8f:2c:ea:b2:bb:cb:34: 41:6c:b9:70:6b:45:f0:5c:10:46:12:5d:3b:8c:35: 05:50:82:9d:37:a1:19:df:48:3c:24:1e:a2:e8:9d: 53:f6:39:4e:5d:d9:bf:f2:2e:50:df:38:51:48:5d: 0c:6a:e9:9d:57:ff:cc:24:e0:f7:9d:df:3b:4d:4b: e9:80:5a:4d:8f:00:3e:85:2c:51:26:e3:3f:35:46: 37:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:BA:11:7E:A1:4B:FD:D9:52:B3:DF:94:04:F1:47:3D:A5:1E:DD:6A X509v3 Authority Key Identifier: keyid:7E:6A:78:6A:CE:F6:84:F3:77:58:FC:4A:6D:85:17:CA:D1:65:FA:77 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/52292ba8-ad1a-4139-8c20-5b526da970bd/0/7E6A786ACEF684F37758FC4A6D8517CAD165FA77.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7E6A786ACEF684F37758FC4A6D8517CAD165FA77.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/52292ba8-ad1a-4139-8c20-5b526da970bd/0/7E6A786ACEF684F37758FC4A6D8517CAD165FA77.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 97:42:c3:21:1c:1a:66:af:8c:68:58:89:52:de:8b:9d:f9:48: 39:b9:49:4c:90:91:43:03:6e:90:7a:8b:57:3e:c0:71:14:ba: 77:00:91:0f:5a:75:81:42:4c:8a:36:50:5f:fd:d4:bb:ca:fe: 95:c1:d2:69:a7:ff:9a:87:0e:6c:4f:5a:e0:c4:89:29:9e:9c: e7:6f:9b:ac:b3:0b:56:f7:9c:1a:74:5f:a0:50:2a:5a:54:f4: 06:ed:ec:c5:61:1e:b5:0d:4d:06:31:5d:d0:3c:cf:f2:cc:6f: db:ca:86:5d:d4:bd:31:c4:9c:f1:be:66:a9:1f:58:06:a5:62: 84:6f:81:73:d7:5c:bb:8e:22:f3:36:9c:77:ce:9f:1b:3d:90: cc:56:2d:e8:4f:8b:e7:cb:3d:ec:0a:f4:29:f1:63:09:17:5d: 8a:73:0b:b7:e4:00:17:d1:f4:78:35:d0:7a:e9:96:ae:b3:4d: 67:f9:02:e7:98:55:b5:dd:b1:81:8f:4f:84:65:d9:c3:d5:06: d9:7e:e8:68:68:aa:94:d6:a2:75:3c:71:2c:3c:7f:e2:c9:0b: ed:94:13:b2:69:10:0a:32:72:ff:98:d3:c0:98:11:65:e9:35: f7:59:2e:78:a0:b0:44:15:dd:e6:7e:e6:f6:02:c0:74:17:07: 94:db:9d:08 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUGZujvlfGZnF7Fa2L3+Ls03blKecwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoN0U2QTc4NkFDRUY2ODRGMzc3NThGQzRBNkQ4NTE3Q0FE MTY1RkE3NzAeFw0yNTEyMjAyMTA3NDBaFw0yNTEyMjQwNzQ0NDBaMDMxMTAvBgNV BAMTKDY1QkExMTdFQTE0QkZERDk1MkIzREY5NDA0RjE0NzNEQTUxRURENkEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC5w0XUGdc0Hb6CE1buqXl/kRI4 fm2//SquqkFnWhYqTwYmG2cnFJDxvhOzGUdzeE4xv4zhzVhxQCjjGFdHNFn8k0d5 xaAm0F3YXPHtSIlYaZvQG7/PgN+GQImpgAGY1SD4eBa5dT3MRIzLupnsARoCjgWX QQ2rPXPgZZWC9ImuZrRreHL87dHYuKZslcV2loUv3s+B55+VBf0v8nPjuz90Jugy 9TCq9kwvHL2yjyzqsrvLNEFsuXBrRfBcEEYSXTuMNQVQgp03oRnfSDwkHqLonVP2 OU5d2b/yLlDfOFFIXQxq6Z1X/8wk4Ped3ztNS+mAWk2PAD6FLFEm4z81Rjd7AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUZboRfqFL/dlSs9+UBPFHPaUe3WowHwYDVR0j BBgwFoAUfmp4as72hPN3WPxKbYUXytFl+ncwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 MjI5MmJhOC1hZDFhLTQxMzktOGMyMC01YjUyNmRhOTcwYmQvMC83RTZBNzg2QUNF RjY4NEYzNzc1OEZDNEE2RDg1MTdDQUQxNjVGQTc3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvN0U2QTc4NkFDRUY2ODRGMzc3NThGQzRBNkQ4NTE3Q0FEMTY1 RkE3Ny5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNTIyOTJiYTgtYWQxYS00MTM5LThj MjAtNWI1MjZkYTk3MGJkLzAvN0U2QTc4NkFDRUY2ODRGMzc3NThGQzRBNkQ4NTE3 Q0FEMTY1RkE3Ny5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJdCwyEcGmavjGhYiVLei535SDm5SUyQkUMD bpB6i1c+wHEUuncAkQ9adYFCTIo2UF/91LvK/pXB0mmn/5qHDmxPWuDEiSmenOdv m6yzC1b3nBp0X6BQKlpU9Abt7MVhHrUNTQYxXdA8z/LMb9vKhl3UvTHEnPG+Zqkf WAalYoRvgXPXXLuOIvM2nHfOnxs9kMxWLehPi+fLPewK9CnxYwkXXYpzC7fkABfR 9Hg10Hrplq6zTWf5AueYVbXdsYGPT4Rl2cPVBtl+6GhoqpTWonU8cSw8f+LJC+2U E7JpEAoycv+Y08CYEWXpNfdZLnigsEQV3eZ+5vYCwHQXB5TbnQg= -----END CERTIFICATE-----Generated at Tue Dec 23 22:06:24 2025 by rpki-client