This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/70da5882-b804-4154-959b-6336b24e18b2/0/597734A26158D77A6ED02222DF93D1CE2BD6EA03.mft File: 597734A26158D77A6ED02222DF93D1CE2BD6EA03.mft (raw, json) Hash identifier: Gkiod61uoAU9rzxAm2DMWtNQ1HpgCdw6ehm+rDCob/Y= Subject key identifier: 7B:36:AA:4D:47:8A:53:D0:D2:67:4C:AA:44:D8:44:89:FF:5F:AC:1B Authority key identifier: 59:77:34:A2:61:58:D7:7A:6E:D0:22:22:DF:93:D1:CE:2B:D6:EA:03 Certificate issuer: /CN=597734A26158D77A6ED02222DF93D1CE2BD6EA03 Certificate serial: 5790512D1DCCEEE72E641E131A0376011BEE0879 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/597734A26158D77A6ED02222DF93D1CE2BD6EA03.cer Subject info access: rsync://repo-rpki.idnic.net/repo/70da5882-b804-4154-959b-6336b24e18b2/0/597734A26158D77A6ED02222DF93D1CE2BD6EA03.mft Manifest number: 010E Signing time: Wed 24 Dec 2025 19:31:04 +0000 Manifest this update: Wed 24 Dec 2025 19:26:04 +0000 Manifest next update: Sat 27 Dec 2025 22:43:04 +0000 Files and hashes: 1: 597734A26158D77A6ED02222DF93D1CE2BD6EA03.crl (hash: HIPx9PkS3GC5wgVmEGOTLICNphCSkkv9wt7UXmGpQY4=) 2: 3130332e3137302e3139382e302f32342d3234203d3e20313530343634.roa (hash: 0bZb0428Qs9WgXKe/lQqf94hdv+XNfzIhYjEupAnHpI=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/70da5882-b804-4154-959b-6336b24e18b2/0/597734A26158D77A6ED02222DF93D1CE2BD6EA03.crl rsync://repo-rpki.idnic.net/repo/70da5882-b804-4154-959b-6336b24e18b2/0/597734A26158D77A6ED02222DF93D1CE2BD6EA03.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/597734A26158D77A6ED02222DF93D1CE2BD6EA03.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 27 Dec 2025 22:43:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 57:90:51:2d:1d:cc:ee:e7:2e:64:1e:13:1a:03:76:01:1b:ee:08:79 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=597734A26158D77A6ED02222DF93D1CE2BD6EA03 Validity Not Before: Dec 24 19:26:04 2025 GMT Not After : Dec 27 22:43:04 2025 GMT Subject: CN=7B36AA4D478A53D0D2674CAA44D84489FF5FAC1B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:dd:6c:16:68:a3:eb:ac:60:7e:7a:68:86:83: b4:04:eb:da:34:83:ce:d5:2c:fa:9c:d6:f7:9c:af: d2:b8:66:17:34:8f:36:d0:36:f4:a4:f5:73:b7:61: 28:36:b5:39:07:78:de:41:62:ce:ee:25:ca:90:b4: 55:b4:d5:c2:86:70:bf:cd:0b:1f:31:41:ef:f3:96: 41:b8:a1:92:99:fb:da:e2:58:61:46:c5:76:f4:9b: ab:e1:97:69:a6:e6:17:8a:15:60:58:5d:56:7a:30: 1f:db:d1:2a:99:80:c4:bf:b6:0c:0d:aa:31:24:a0: 0d:d4:77:ba:68:06:7d:40:27:f7:c8:61:2a:1f:0b: e0:bb:75:e3:30:73:8f:b1:90:5c:39:e6:48:31:d8: 9b:30:7d:0c:66:4a:87:0a:c2:9a:1e:39:f9:16:21: 05:91:5c:13:e1:33:ae:be:15:40:13:df:ea:a7:6c: b4:45:7c:50:e5:8c:b4:4b:14:29:bd:5e:51:e9:89: e3:da:22:d9:e4:bb:16:a6:aa:08:85:6a:d9:92:b9: 3b:68:6a:f1:90:75:c7:dc:09:26:6e:98:ff:68:01: 7d:b7:9c:a4:25:cf:bf:7f:c4:53:62:8c:60:99:16: 0d:11:f2:2e:c4:a1:d4:83:db:79:d0:59:6a:59:a7: df:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7B:36:AA:4D:47:8A:53:D0:D2:67:4C:AA:44:D8:44:89:FF:5F:AC:1B X509v3 Authority Key Identifier: keyid:59:77:34:A2:61:58:D7:7A:6E:D0:22:22:DF:93:D1:CE:2B:D6:EA:03 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/70da5882-b804-4154-959b-6336b24e18b2/0/597734A26158D77A6ED02222DF93D1CE2BD6EA03.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/597734A26158D77A6ED02222DF93D1CE2BD6EA03.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/70da5882-b804-4154-959b-6336b24e18b2/0/597734A26158D77A6ED02222DF93D1CE2BD6EA03.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 02:6b:77:2f:4a:ec:31:53:c3:83:3f:bf:9d:ef:ce:92:47:bc: 20:8e:8c:f1:25:63:21:35:0e:db:ce:cb:c5:7c:61:4c:67:f9: 2e:21:34:11:37:80:c7:7d:d5:5e:d1:dc:f7:aa:1f:dd:25:bb: 6d:3c:41:d5:d5:83:cd:f2:67:c2:ae:ec:0c:c5:7c:c6:f9:93: 3e:17:aa:c4:ab:4b:60:48:d8:90:ca:24:43:62:e7:78:5c:de: af:e1:d9:33:ee:fd:ad:d0:d4:cc:ea:0f:11:56:db:23:58:3f: e5:72:a5:ac:2f:6d:d3:98:3f:02:ac:e3:53:96:98:94:34:32: b7:4c:12:74:65:1f:3d:7c:54:bc:6e:84:b6:87:5b:d7:a9:2f: e2:f1:55:f1:95:7b:2d:9b:2c:02:8b:f8:77:a5:77:f7:f7:2d: ee:27:c2:fc:b9:22:ef:52:11:b7:f8:cf:b9:c4:87:ea:75:4c: 0d:5c:96:57:c8:db:3a:02:83:1f:63:32:01:12:ba:3e:4d:13: 13:cb:4c:7c:5a:b9:29:2e:95:ff:e0:6a:7e:b0:1b:15:f8:03: 9c:96:b0:e8:99:1a:90:3a:5e:8b:0a:65:51:c0:94:b7:d8:7e: b1:cd:10:b0:f7:21:48:2f:99:ca:f8:7c:62:ee:b0:90:b5:99: db:f1:97:1c -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUV5BRLR3M7ucuZB4TGgN2ARvuCHkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTk3NzM0QTI2MTU4RDc3QTZFRDAyMjIyREY5M0QxQ0Uy QkQ2RUEwMzAeFw0yNTEyMjQxOTI2MDRaFw0yNTEyMjcyMjQzMDRaMDMxMTAvBgNV BAMTKDdCMzZBQTRENDc4QTUzRDBEMjY3NENBQTQ0RDg0NDg5RkY1RkFDMUIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC83WwWaKPrrGB+emiGg7QE69o0 g87VLPqc1vecr9K4Zhc0jzbQNvSk9XO3YSg2tTkHeN5BYs7uJcqQtFW01cKGcL/N Cx8xQe/zlkG4oZKZ+9riWGFGxXb0m6vhl2mm5heKFWBYXVZ6MB/b0SqZgMS/tgwN qjEkoA3Ud7poBn1AJ/fIYSofC+C7deMwc4+xkFw55kgx2JswfQxmSocKwpoeOfkW IQWRXBPhM66+FUAT3+qnbLRFfFDljLRLFCm9XlHpiePaItnkuxamqgiFatmSuTto avGQdcfcCSZumP9oAX23nKQlz79/xFNijGCZFg0R8i7EodSD23nQWWpZp99nAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUezaqTUeKU9DSZ0yqRNhEif9frBswHwYDVR0j BBgwFoAUWXc0omFY13pu0CIi35PRzivW6gMwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 MGRhNTg4Mi1iODA0LTQxNTQtOTU5Yi02MzM2YjI0ZTE4YjIvMC81OTc3MzRBMjYx NThENzdBNkVEMDIyMjJERjkzRDFDRTJCRDZFQTAzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNTk3NzM0QTI2MTU4RDc3QTZFRDAyMjIyREY5M0QxQ0UyQkQ2 RUEwMy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNzBkYTU4ODItYjgwNC00MTU0LTk1 OWItNjMzNmIyNGUxOGIyLzAvNTk3NzM0QTI2MTU4RDc3QTZFRDAyMjIyREY5M0Qx Q0UyQkQ2RUEwMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAJrdy9K7DFTw4M/v53vzpJHvCCOjPElYyE1 DtvOy8V8YUxn+S4hNBE3gMd91V7R3PeqH90lu208QdXVg83yZ8Ku7AzFfMb5kz4X qsSrS2BI2JDKJENi53hc3q/h2TPu/a3Q1MzqDxFW2yNYP+VypawvbdOYPwKs41OW mJQ0MrdMEnRlHz18VLxuhLaHW9epL+LxVfGVey2bLAKL+Held/f3Le4nwvy5Iu9S Ebf4z7nEh+p1TA1cllfI2zoCgx9jMgESuj5NExPLTHxauSkulf/gan6wGxX4A5yW sOiZGpA6XosKZVHAlLfYfrHNELD3IUgvmcr4fGLusJC1mdvxlxw= -----END CERTIFICATE-----Generated at Thu Dec 25 00:42:33 2025 by rpki-client