This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/56e63cd2-fb3c-41b2-b96b-ab234420a211/0/7D5AE085968DC7CB311023F7EBE0BF8E126706E4.mft File: 7D5AE085968DC7CB311023F7EBE0BF8E126706E4.mft (raw, json) Hash identifier: 9mX7o2koeVj1nQNG0XMeK2rgqfA30Mtw7+tXk0nXMcw= Subject key identifier: AD:80:E9:15:48:E6:F1:9E:52:69:F3:AF:6B:45:7F:1C:47:EA:A1:86 Authority key identifier: 7D:5A:E0:85:96:8D:C7:CB:31:10:23:F7:EB:E0:BF:8E:12:67:06:E4 Certificate issuer: /CN=7D5AE085968DC7CB311023F7EBE0BF8E126706E4 Certificate serial: 307553EFF5B0AEBFDEAFDB73FF5D9384C6062C8F Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7D5AE085968DC7CB311023F7EBE0BF8E126706E4.cer Subject info access: rsync://repo-rpki.idnic.net/repo/56e63cd2-fb3c-41b2-b96b-ab234420a211/0/7D5AE085968DC7CB311023F7EBE0BF8E126706E4.mft Manifest number: B7 Signing time: Wed 24 Dec 2025 01:33:42 +0000 Manifest this update: Wed 24 Dec 2025 01:28:42 +0000 Manifest next update: Sat 27 Dec 2025 04:03:42 +0000 Files and hashes: 1: 3130332e38372e3139372e302f32342d3234203d3e20313336303837.roa (hash: 0rqaY28k1qKmtYy4sqNJeu6TR3NmCct3st2uKHz4Kkw=) 2: 3130332e38372e3139382e302f32342d3234203d3e20313336303837.roa (hash: oiY8bQ+d3an3MLZGl2PnLxS3g6sHhrZaRpjEwIP9wlY=) 3: 3130332e38372e3139362e302f32342d3234203d3e20313336303837.roa (hash: qDPmCUCvpl2ggw/iTR1lXmer3/EVY6LQXV8BhrJSCJQ=) 4: 3130332e38372e3139392e302f32342d3234203d3e20313336303837.roa (hash: da7FZv0wwu0NgAl+k4INGAA7MG+JDxJrpPp3i49uNg8=) 5: 7D5AE085968DC7CB311023F7EBE0BF8E126706E4.crl (hash: 4z+NH4F4xCVCPSGHssyitAHqabWrbntZQz12/qsbgag=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/56e63cd2-fb3c-41b2-b96b-ab234420a211/0/7D5AE085968DC7CB311023F7EBE0BF8E126706E4.crl rsync://repo-rpki.idnic.net/repo/56e63cd2-fb3c-41b2-b96b-ab234420a211/0/7D5AE085968DC7CB311023F7EBE0BF8E126706E4.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7D5AE085968DC7CB311023F7EBE0BF8E126706E4.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 27 Dec 2025 04:03:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 30:75:53:ef:f5:b0:ae:bf:de:af:db:73:ff:5d:93:84:c6:06:2c:8f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7D5AE085968DC7CB311023F7EBE0BF8E126706E4 Validity Not Before: Dec 24 01:28:42 2025 GMT Not After : Dec 27 04:03:42 2025 GMT Subject: CN=AD80E91548E6F19E5269F3AF6B457F1C47EAA186 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:ee:3c:c3:d9:71:f5:54:77:1b:0e:4b:3c:7a: e6:74:99:51:d3:50:ac:02:b6:6e:ad:f9:ce:04:97: b5:2d:7e:9d:85:34:c4:af:94:ca:fa:4e:7e:2f:c3: 7b:91:35:f6:67:0d:75:c5:32:e9:f6:a7:15:7c:29: 36:c1:c9:68:52:83:e0:d5:6d:97:42:f9:23:f2:c7: 16:35:32:93:e8:fc:a5:5e:51:73:c6:1d:04:20:55: 5e:9b:91:65:28:1c:e9:22:d2:84:21:5e:90:ed:d2: f9:3d:64:87:7e:06:0e:10:ed:df:45:05:a9:07:14: cd:2f:f1:87:7f:36:ac:15:e6:f9:38:84:44:da:ca: 4b:74:62:c6:ed:02:3d:c0:90:59:4a:7b:dc:56:f0: 5a:9b:b1:85:93:52:24:89:98:0f:3d:64:32:b4:b2: 20:5b:ba:a6:16:dd:a8:92:3a:db:f4:91:20:34:69: e5:5d:78:4a:10:e7:1c:72:05:a2:77:1e:c3:db:3b: 36:f4:ec:d1:d5:c2:55:ce:a7:5e:85:ab:e9:4a:bc: 75:38:b6:d3:ff:2f:fc:b8:36:f0:23:27:b5:02:0b: 52:3b:c8:00:5e:21:4c:24:d5:cc:a1:b8:0c:83:17: 6a:b8:f3:d9:dd:18:63:93:30:f9:1e:b5:cc:ff:f4: 3c:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AD:80:E9:15:48:E6:F1:9E:52:69:F3:AF:6B:45:7F:1C:47:EA:A1:86 X509v3 Authority Key Identifier: keyid:7D:5A:E0:85:96:8D:C7:CB:31:10:23:F7:EB:E0:BF:8E:12:67:06:E4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/56e63cd2-fb3c-41b2-b96b-ab234420a211/0/7D5AE085968DC7CB311023F7EBE0BF8E126706E4.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7D5AE085968DC7CB311023F7EBE0BF8E126706E4.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/56e63cd2-fb3c-41b2-b96b-ab234420a211/0/7D5AE085968DC7CB311023F7EBE0BF8E126706E4.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 84:8c:36:66:67:3a:28:9a:6c:4c:21:73:15:f9:c2:22:64:2c: 35:eb:a7:9a:1c:e7:1a:ac:47:ac:eb:c6:cc:62:b9:f5:b8:d3: 9b:59:8e:bf:82:02:a9:41:52:e5:4d:5c:57:3d:65:99:9d:bd: 32:65:c8:e4:7e:9a:3f:44:e3:36:66:20:06:8f:23:43:09:62: 15:fd:fa:cb:26:b0:ad:6a:cf:86:9b:6a:63:0d:81:2e:be:2a: 90:14:e3:d0:6e:be:d6:a5:9c:4c:ec:6f:ac:58:90:ea:1a:16: 0b:25:02:a6:0a:7f:ff:92:bc:ac:2b:7f:48:63:15:05:34:b3: ff:e6:a4:5e:ef:91:a4:79:94:d8:cb:fa:d8:a9:43:77:74:4c: 50:0e:a8:d4:3d:d2:26:9b:67:4c:43:eb:7f:2f:73:96:cf:fa: fb:b2:b1:d1:e3:08:7b:14:4b:c3:14:55:65:58:f9:0b:3d:1d: f4:60:7d:4a:25:2e:a5:05:5e:1b:2e:77:e7:fc:73:46:2f:af: 24:f7:4f:c9:80:c2:02:51:84:a7:bf:3d:5a:1d:aa:91:38:01: 73:5d:57:f9:0e:2f:34:50:8d:25:25:f6:af:1c:a6:fb:3c:51: fd:54:5b:9f:8c:73:db:eb:69:e1:53:28:05:e8:d7:40:50:06: ee:d7:5f:a9 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUMHVT7/Wwrr/er9tz/12ThMYGLI8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoN0Q1QUUwODU5NjhEQzdDQjMxMTAyM0Y3RUJFMEJGOEUx MjY3MDZFNDAeFw0yNTEyMjQwMTI4NDJaFw0yNTEyMjcwNDAzNDJaMDMxMTAvBgNV BAMTKEFEODBFOTE1NDhFNkYxOUU1MjY5RjNBRjZCNDU3RjFDNDdFQUExODYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+7jzD2XH1VHcbDks8euZ0mVHT UKwCtm6t+c4El7Utfp2FNMSvlMr6Tn4vw3uRNfZnDXXFMun2pxV8KTbByWhSg+DV bZdC+SPyxxY1MpPo/KVeUXPGHQQgVV6bkWUoHOki0oQhXpDt0vk9ZId+Bg4Q7d9F BakHFM0v8Yd/NqwV5vk4hETaykt0YsbtAj3AkFlKe9xW8FqbsYWTUiSJmA89ZDK0 siBbuqYW3aiSOtv0kSA0aeVdeEoQ5xxyBaJ3HsPbOzb07NHVwlXOp16Fq+lKvHU4 ttP/L/y4NvAjJ7UCC1I7yABeIUwk1cyhuAyDF2q489ndGGOTMPketcz/9DyvAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUrYDpFUjm8Z5SafOva0V/HEfqoYYwHwYDVR0j BBgwFoAUfVrghZaNx8sxECP36+C/jhJnBuQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 NmU2M2NkMi1mYjNjLTQxYjItYjk2Yi1hYjIzNDQyMGEyMTEvMC83RDVBRTA4NTk2 OERDN0NCMzExMDIzRjdFQkUwQkY4RTEyNjcwNkU0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvN0Q1QUUwODU5NjhEQzdDQjMxMTAyM0Y3RUJFMEJGOEUxMjY3 MDZFNC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNTZlNjNjZDItZmIzYy00MWIyLWI5 NmItYWIyMzQ0MjBhMjExLzAvN0Q1QUUwODU5NjhEQzdDQjMxMTAyM0Y3RUJFMEJG OEUxMjY3MDZFNC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAISMNmZnOiiabEwhcxX5wiJkLDXrp5oc5xqs R6zrxsxiufW405tZjr+CAqlBUuVNXFc9ZZmdvTJlyOR+mj9E4zZmIAaPI0MJYhX9 +ssmsK1qz4abamMNgS6+KpAU49BuvtalnEzsb6xYkOoaFgslAqYKf/+SvKwrf0hj FQU0s//mpF7vkaR5lNjL+tipQ3d0TFAOqNQ90iabZ0xD638vc5bP+vuysdHjCHsU S8MUVWVY+Qs9HfRgfUolLqUFXhsud+f8c0YvryT3T8mAwgJRhKe/PVodqpE4AXNd V/kOLzRQjSUl9q8cpvs8Uf1UW5+Mc9vraeFTKAXo10BQBu7XX6k= -----END CERTIFICATE-----Generated at Wed Dec 24 14:51:54 2025 by rpki-client