This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/6d4aa7ef-6d95-4eba-a354-fd41858c1ba7/0/7ED240749DF73AB541823D94017C578425D757A6.mft File: 7ED240749DF73AB541823D94017C578425D757A6.mft (raw, json) Hash identifier: BZjH1VSYGX6KW0nuVyxEkm4NF41ZiSZlN23MiCFb5j8= Subject key identifier: 4F:6C:C4:92:E1:68:11:16:0A:D1:15:91:EA:B1:8D:D2:92:8A:67:3C Authority key identifier: 7E:D2:40:74:9D:F7:3A:B5:41:82:3D:94:01:7C:57:84:25:D7:57:A6 Certificate issuer: /CN=7ED240749DF73AB541823D94017C578425D757A6 Certificate serial: 78F5F0F098FE8843E753A209BACD7DB06818130F Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7ED240749DF73AB541823D94017C578425D757A6.cer Subject info access: rsync://repo-rpki.idnic.net/repo/6d4aa7ef-6d95-4eba-a354-fd41858c1ba7/0/7ED240749DF73AB541823D94017C578425D757A6.mft Manifest number: 04DF Signing time: Thu 18 Dec 2025 11:41:11 +0000 Manifest this update: Thu 18 Dec 2025 11:36:11 +0000 Manifest next update: Sun 21 Dec 2025 20:51:11 +0000 Files and hashes: 1: 7ED240749DF73AB541823D94017C578425D757A6.crl (hash: cPMU2N9ngIxjbhlphRhCMAYoA59mTKf+NP4YjYSoy2M=) 2: 3130332e3133372e33322e302f32332d3234203d3e20313338383131.roa (hash: yGNy/2jPC7cv3chzLah5sv/C4LaKirTYr+d6U9mSoAc=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/6d4aa7ef-6d95-4eba-a354-fd41858c1ba7/0/7ED240749DF73AB541823D94017C578425D757A6.crl rsync://repo-rpki.idnic.net/repo/6d4aa7ef-6d95-4eba-a354-fd41858c1ba7/0/7ED240749DF73AB541823D94017C578425D757A6.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7ED240749DF73AB541823D94017C578425D757A6.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 21 Dec 2025 20:51:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 78:f5:f0:f0:98:fe:88:43:e7:53:a2:09:ba:cd:7d:b0:68:18:13:0f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7ED240749DF73AB541823D94017C578425D757A6 Validity Not Before: Dec 18 11:36:11 2025 GMT Not After : Dec 21 20:51:11 2025 GMT Subject: CN=4F6CC492E16811160AD11591EAB18DD2928A673C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:57:57:a4:1d:59:54:9e:bd:1b:83:6b:9c:01: e2:47:a7:0d:2e:ba:50:ea:12:43:e8:bf:83:50:fc: be:ca:d9:42:f8:31:41:77:46:20:14:5d:5b:72:cc: 7e:41:f1:e1:b0:f2:c3:59:35:42:b3:4b:64:f1:d6: 10:83:db:ef:b2:c6:22:61:06:26:06:84:6b:97:8a: cd:08:a3:5b:07:3f:c2:f6:e9:e6:65:37:d6:40:d1: f9:37:eb:d1:65:c8:07:90:b6:24:0c:01:28:93:8c: 0f:0c:cd:df:27:39:5b:9a:96:09:d4:3a:11:f0:31: 7d:ee:62:1f:cd:a5:da:f9:db:f6:07:ee:ad:a9:c6: ee:45:84:01:0e:ef:00:63:a7:af:57:52:5f:14:1f: c9:89:8f:0f:90:7e:41:b7:b7:59:54:42:63:50:29: 2b:74:ff:0e:9b:d0:c9:88:38:e7:26:db:46:1d:0a: b0:93:3b:b8:7b:72:29:c7:e9:d7:65:90:d3:cb:e8: 2d:d6:e9:21:34:ce:c6:10:4b:1c:3e:6e:38:35:53: 1a:8c:d8:c6:ee:55:b3:16:54:ad:43:00:9f:62:df: e7:aa:50:f7:2e:ba:5c:ce:85:78:02:76:34:a2:0f: ab:4d:5a:6d:f9:a7:ae:6d:7c:21:ae:2e:a7:df:c5: fb:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:6C:C4:92:E1:68:11:16:0A:D1:15:91:EA:B1:8D:D2:92:8A:67:3C X509v3 Authority Key Identifier: keyid:7E:D2:40:74:9D:F7:3A:B5:41:82:3D:94:01:7C:57:84:25:D7:57:A6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/6d4aa7ef-6d95-4eba-a354-fd41858c1ba7/0/7ED240749DF73AB541823D94017C578425D757A6.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7ED240749DF73AB541823D94017C578425D757A6.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/6d4aa7ef-6d95-4eba-a354-fd41858c1ba7/0/7ED240749DF73AB541823D94017C578425D757A6.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 69:48:b2:dd:9c:41:94:9a:92:a7:ec:85:52:3a:a1:a1:e8:59: 04:96:7f:46:65:8e:b8:56:65:0c:02:8b:7b:23:50:cf:92:eb: 94:d0:cf:00:ed:c5:59:32:bc:03:dc:ee:49:11:c2:8d:4d:af: 63:42:1c:f0:17:10:97:0b:10:c0:9c:f1:90:73:09:38:22:90: af:c2:0e:82:c0:9b:fc:05:1a:62:10:d4:e6:eb:0e:08:b9:78: 8c:b5:2b:93:cd:43:a2:2c:66:ed:3b:80:6d:be:d3:a8:7f:ed: 60:60:7e:90:25:59:be:5a:89:0d:ba:4c:d9:88:0c:88:36:0b: 97:44:aa:5e:17:05:0f:6a:df:04:f4:15:c3:07:03:78:e2:72: 55:eb:63:20:c5:65:33:9f:1f:d1:a0:13:1c:3f:da:b7:e6:2f: 21:86:56:73:a7:52:be:36:2f:de:61:24:54:e1:4d:6d:fb:e9: 75:53:8b:31:b2:71:30:50:91:5a:38:f7:01:d8:98:d1:8a:1a: c2:6b:4e:77:24:31:28:b2:1c:35:6b:94:49:06:e2:70:67:f8: a9:1c:e1:25:74:a9:c7:d3:9b:5b:4f:ad:a0:92:e2:bd:95:f9: a6:98:8c:49:ad:4b:76:bb:b4:3e:6a:62:4f:d7:91:8b:23:ad: a5:f3:b7:1c -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUePXw8Jj+iEPnU6IJus19sGgYEw8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoN0VEMjQwNzQ5REY3M0FCNTQxODIzRDk0MDE3QzU3ODQy NUQ3NTdBNjAeFw0yNTEyMTgxMTM2MTFaFw0yNTEyMjEyMDUxMTFaMDMxMTAvBgNV BAMTKDRGNkNDNDkyRTE2ODExMTYwQUQxMTU5MUVBQjE4REQyOTI4QTY3M0MwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCvV1ekHVlUnr0bg2ucAeJHpw0u ulDqEkPov4NQ/L7K2UL4MUF3RiAUXVtyzH5B8eGw8sNZNUKzS2Tx1hCD2++yxiJh BiYGhGuXis0Io1sHP8L26eZlN9ZA0fk369FlyAeQtiQMASiTjA8Mzd8nOVualgnU OhHwMX3uYh/Npdr52/YH7q2pxu5FhAEO7wBjp69XUl8UH8mJjw+QfkG3t1lUQmNQ KSt0/w6b0MmIOOcm20YdCrCTO7h7cinH6ddlkNPL6C3W6SE0zsYQSxw+bjg1UxqM 2MbuVbMWVK1DAJ9i3+eqUPcuulzOhXgCdjSiD6tNWm35p65tfCGuLqffxfsVAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUT2zEkuFoERYK0RWR6rGN0pKKZzwwHwYDVR0j BBgwFoAUftJAdJ33OrVBgj2UAXxXhCXXV6YwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 ZDRhYTdlZi02ZDk1LTRlYmEtYTM1NC1mZDQxODU4YzFiYTcvMC83RUQyNDA3NDlE RjczQUI1NDE4MjNEOTQwMTdDNTc4NDI1RDc1N0E2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvN0VEMjQwNzQ5REY3M0FCNTQxODIzRDk0MDE3QzU3ODQyNUQ3 NTdBNi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNmQ0YWE3ZWYtNmQ5NS00ZWJhLWEz NTQtZmQ0MTg1OGMxYmE3LzAvN0VEMjQwNzQ5REY3M0FCNTQxODIzRDk0MDE3QzU3 ODQyNUQ3NTdBNi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGlIst2cQZSakqfshVI6oaHoWQSWf0ZljrhW ZQwCi3sjUM+S65TQzwDtxVkyvAPc7kkRwo1Nr2NCHPAXEJcLEMCc8ZBzCTgikK/C DoLAm/wFGmIQ1ObrDgi5eIy1K5PNQ6IsZu07gG2+06h/7WBgfpAlWb5aiQ26TNmI DIg2C5dEql4XBQ9q3wT0FcMHA3jiclXrYyDFZTOfH9GgExw/2rfmLyGGVnOnUr42 L95hJFThTW376XVTizGycTBQkVo49wHYmNGKGsJrTnckMSiyHDVrlEkG4nBn+Kkc 4SV0qcfTm1tPraCS4r2V+aaYjEmtS3a7tD5qYk/XkYsjraXztxw= -----END CERTIFICATE-----Generated at Fri Dec 19 18:17:06 2025 by rpki-client