This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/60b590e8-4f89-4785-ae79-2bfffa2c52c9/0/7C7A73B67FFC6664BCCD30B2013C54FCCE0B6254.mft File: 7C7A73B67FFC6664BCCD30B2013C54FCCE0B6254.mft (raw, json) Hash identifier: jQMDVv8aJ1c5Ont2wozQdS1JKWlhnDAAch0jE9cGym8= Subject key identifier: C3:CC:80:14:FA:51:31:C3:C7:8A:08:0A:1A:50:20:4A:63:23:B0:14 Authority key identifier: 7C:7A:73:B6:7F:FC:66:64:BC:CD:30:B2:01:3C:54:FC:CE:0B:62:54 Certificate issuer: /CN=7C7A73B67FFC6664BCCD30B2013C54FCCE0B6254 Certificate serial: 45E2889A8ABEAA73D6A81A00162B4C4F1BA9FFC1 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7C7A73B67FFC6664BCCD30B2013C54FCCE0B6254.cer Subject info access: rsync://repo-rpki.idnic.net/repo/60b590e8-4f89-4785-ae79-2bfffa2c52c9/0/7C7A73B67FFC6664BCCD30B2013C54FCCE0B6254.mft Manifest number: 02ED Signing time: Tue 23 Dec 2025 01:41:16 +0000 Manifest this update: Tue 23 Dec 2025 01:36:16 +0000 Manifest next update: Fri 26 Dec 2025 05:55:16 +0000 Files and hashes: 1: 323030313a6466323a653538303a3a2f34382d3438203d3e20313339393935.roa (hash: co+KBnnYJEQwi8iEhHouifTA/OpTo3Sr/IbcmkaoPho=) 2: 7C7A73B67FFC6664BCCD30B2013C54FCCE0B6254.crl (hash: Y+6TjDKmJr8bEa9S8niLp01Zak2tgVOUOgtdVNHQMfQ=) 3: 3130332e3134382e3139322e302f32332d3233203d3e20313339393935.roa (hash: 6G5VVeMd9f0T1RPqM5MK5BUBT+YheiE43z/FzXMuOVc=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/60b590e8-4f89-4785-ae79-2bfffa2c52c9/0/7C7A73B67FFC6664BCCD30B2013C54FCCE0B6254.crl rsync://repo-rpki.idnic.net/repo/60b590e8-4f89-4785-ae79-2bfffa2c52c9/0/7C7A73B67FFC6664BCCD30B2013C54FCCE0B6254.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7C7A73B67FFC6664BCCD30B2013C54FCCE0B6254.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 26 Dec 2025 05:55:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 45:e2:88:9a:8a:be:aa:73:d6:a8:1a:00:16:2b:4c:4f:1b:a9:ff:c1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7C7A73B67FFC6664BCCD30B2013C54FCCE0B6254 Validity Not Before: Dec 23 01:36:16 2025 GMT Not After : Dec 26 05:55:16 2025 GMT Subject: CN=C3CC8014FA5131C3C78A080A1A50204A6323B014 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:47:c0:a5:4f:c5:ec:dd:01:87:25:4e:d7:a7: 49:5f:6a:14:5c:da:42:66:57:71:15:12:c7:15:30: e8:f3:1f:ba:73:64:6e:2f:71:e5:f6:a2:9e:23:29: 10:f9:34:52:c7:ac:a4:d0:3a:fe:23:2a:74:33:0b: d5:73:ee:fd:f5:81:04:cf:96:79:51:2f:85:aa:75: 28:c1:7a:95:73:90:26:04:f9:8a:6a:cd:5a:20:90: 5e:d9:2e:53:e9:44:9c:63:c1:0a:c6:29:71:05:21: 5e:d2:31:f6:6b:88:3d:04:03:42:ea:0b:f6:b1:cd: 0c:e9:a2:d1:a2:fc:d1:3a:ea:a5:ac:65:1c:02:b2: 07:f2:c6:aa:ff:4e:d6:ed:74:67:a0:86:53:48:6a: e9:91:fe:68:b6:c4:50:5d:bc:38:5e:33:d1:ae:ab: c1:ea:ac:a6:f0:cc:91:99:17:75:96:7f:74:72:24: 0b:45:8b:38:7a:f3:a9:a9:7b:bc:f5:0c:e8:98:86: 35:c8:98:42:0c:4c:61:87:47:31:05:13:b5:7d:7d: fb:fc:ab:1b:58:8c:45:c9:0e:e8:67:7c:dc:29:de: c5:5b:b2:19:62:fe:3a:48:c8:0b:26:5f:e6:07:0e: 0a:8e:e7:3f:6f:0b:2e:39:0e:b7:3e:9b:6e:09:e7: 5a:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:CC:80:14:FA:51:31:C3:C7:8A:08:0A:1A:50:20:4A:63:23:B0:14 X509v3 Authority Key Identifier: keyid:7C:7A:73:B6:7F:FC:66:64:BC:CD:30:B2:01:3C:54:FC:CE:0B:62:54 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/60b590e8-4f89-4785-ae79-2bfffa2c52c9/0/7C7A73B67FFC6664BCCD30B2013C54FCCE0B6254.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7C7A73B67FFC6664BCCD30B2013C54FCCE0B6254.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/60b590e8-4f89-4785-ae79-2bfffa2c52c9/0/7C7A73B67FFC6664BCCD30B2013C54FCCE0B6254.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 05:b6:b7:d5:80:94:59:11:f0:cb:27:af:af:53:20:13:84:b9: 54:27:c1:35:48:77:b8:9a:f4:f5:05:b3:87:61:c1:c6:b8:d1: 4c:1b:8d:0b:e6:59:3e:85:91:87:01:b1:3d:6a:02:33:8a:1f: 81:b4:25:75:da:59:92:33:a9:9f:9f:20:3f:cb:19:bd:1e:60: f7:56:16:c1:7c:50:83:e8:27:fe:ab:42:ac:57:bc:32:2b:31: c8:33:31:71:9f:e3:61:2f:6d:a6:47:08:51:43:c1:78:24:5e: 2c:4b:48:55:e3:fc:08:9c:6c:b2:34:e4:8f:97:1e:2b:e1:10: 5a:18:5c:c5:ec:2a:be:43:48:b2:66:e8:9c:0d:44:38:57:b8: 30:54:d8:4e:0b:67:6f:21:9f:75:a0:6a:91:12:6d:33:a9:82: 6d:c0:60:9b:f2:b5:45:37:19:fc:8f:3c:3b:a0:86:c3:39:f1: 40:30:53:8f:6b:64:4f:90:3d:80:36:5c:1c:79:ec:9e:fc:a0: c8:9b:23:48:2f:f7:d3:dc:99:6c:c5:46:48:f2:bc:a9:52:3b: 3f:b3:06:c7:df:19:75:63:20:5a:7b:73:65:63:e3:02:4f:68: 46:fc:d3:e4:b1:0a:59:72:3e:89:cc:63:8c:cd:08:2c:80:f9: 10:86:b3:25 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUReKImoq+qnPWqBoAFitMTxup/8EwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoN0M3QTczQjY3RkZDNjY2NEJDQ0QzMEIyMDEzQzU0RkND RTBCNjI1NDAeFw0yNTEyMjMwMTM2MTZaFw0yNTEyMjYwNTU1MTZaMDMxMTAvBgNV BAMTKEMzQ0M4MDE0RkE1MTMxQzNDNzhBMDgwQTFBNTAyMDRBNjMyM0IwMTQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDZR8ClT8Xs3QGHJU7Xp0lfahRc 2kJmV3EVEscVMOjzH7pzZG4vceX2op4jKRD5NFLHrKTQOv4jKnQzC9Vz7v31gQTP lnlRL4WqdSjBepVzkCYE+YpqzVogkF7ZLlPpRJxjwQrGKXEFIV7SMfZriD0EA0Lq C/axzQzpotGi/NE66qWsZRwCsgfyxqr/TtbtdGeghlNIaumR/mi2xFBdvDheM9Gu q8HqrKbwzJGZF3WWf3RyJAtFizh686mpe7z1DOiYhjXImEIMTGGHRzEFE7V9ffv8 qxtYjEXJDuhnfNwp3sVbshli/jpIyAsmX+YHDgqO5z9vCy45Drc+m24J51qBAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUw8yAFPpRMcPHiggKGlAgSmMjsBQwHwYDVR0j BBgwFoAUfHpztn/8ZmS8zTCyATxU/M4LYlQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 MGI1OTBlOC00Zjg5LTQ3ODUtYWU3OS0yYmZmZmEyYzUyYzkvMC83QzdBNzNCNjdG RkM2NjY0QkNDRDMwQjIwMTNDNTRGQ0NFMEI2MjU0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvN0M3QTczQjY3RkZDNjY2NEJDQ0QzMEIyMDEzQzU0RkNDRTBC NjI1NC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNjBiNTkwZTgtNGY4OS00Nzg1LWFl NzktMmJmZmZhMmM1MmM5LzAvN0M3QTczQjY3RkZDNjY2NEJDQ0QzMEIyMDEzQzU0 RkNDRTBCNjI1NC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAW2t9WAlFkR8Msnr69TIBOEuVQnwTVId7ia 9PUFs4dhwca40UwbjQvmWT6FkYcBsT1qAjOKH4G0JXXaWZIzqZ+fID/LGb0eYPdW FsF8UIPoJ/6rQqxXvDIrMcgzMXGf42EvbaZHCFFDwXgkXixLSFXj/AicbLI05I+X HivhEFoYXMXsKr5DSLJm6JwNRDhXuDBU2E4LZ28hn3WgapESbTOpgm3AYJvytUU3 GfyPPDughsM58UAwU49rZE+QPYA2XBx57J78oMibI0gv99PcmWzFRkjyvKlSOz+z BsffGXVjIFp7c2Vj4wJPaEb80+SxCllyPonMY4zNCCyA+RCGsyU= -----END CERTIFICATE-----Generated at Wed Dec 24 22:05:55 2025 by rpki-client