This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/769f8aa8-8971-4e51-8b51-803b49b32a4f/1/7F6E3BF22135CE510C383A9D95C74D2175B70558.mft File: 7F6E3BF22135CE510C383A9D95C74D2175B70558.mft (raw, json) Hash identifier: zrMHZRSFNIByeA6uqk7q5Iq5T/FlriE/RgA5TsDvJM0= Subject key identifier: AE:C9:D6:82:5D:DC:A7:1C:2A:D4:3A:C5:F5:D1:9C:39:D2:0F:12:F4 Authority key identifier: 7F:6E:3B:F2:21:35:CE:51:0C:38:3A:9D:95:C7:4D:21:75:B7:05:58 Certificate issuer: /CN=7F6E3BF22135CE510C383A9D95C74D2175B70558 Certificate serial: 063A469DF1904528CC5D99B410358C3D31E4A51E Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7F6E3BF22135CE510C383A9D95C74D2175B70558.cer Subject info access: rsync://repo-rpki.idnic.net/repo/769f8aa8-8971-4e51-8b51-803b49b32a4f/1/7F6E3BF22135CE510C383A9D95C74D2175B70558.mft Manifest number: A8 Signing time: Wed 24 Dec 2025 01:21:54 +0000 Manifest this update: Wed 24 Dec 2025 01:16:54 +0000 Manifest next update: Sat 27 Dec 2025 07:35:54 +0000 Files and hashes: 1: 7F6E3BF22135CE510C383A9D95C74D2175B70558.crl (hash: bAYdBvi75C7MY/SU+9g3NnDK+q22fZLRx9+3QZwjArg=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/769f8aa8-8971-4e51-8b51-803b49b32a4f/1/7F6E3BF22135CE510C383A9D95C74D2175B70558.crl rsync://repo-rpki.idnic.net/repo/769f8aa8-8971-4e51-8b51-803b49b32a4f/1/7F6E3BF22135CE510C383A9D95C74D2175B70558.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7F6E3BF22135CE510C383A9D95C74D2175B70558.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 27 Dec 2025 07:35:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 06:3a:46:9d:f1:90:45:28:cc:5d:99:b4:10:35:8c:3d:31:e4:a5:1e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7F6E3BF22135CE510C383A9D95C74D2175B70558 Validity Not Before: Dec 24 01:16:54 2025 GMT Not After : Dec 27 07:35:54 2025 GMT Subject: CN=AEC9D6825DDCA71C2AD43AC5F5D19C39D20F12F4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:cf:b9:df:49:c6:13:02:e4:91:cb:0a:04:f9: b2:5c:82:25:f3:1e:59:89:68:93:a7:1d:7d:a7:9a: 23:ba:e1:95:f4:73:eb:12:5f:20:73:30:e4:46:9a: e1:10:1d:cc:be:c7:cb:38:11:de:0d:47:a7:c9:03: 4a:26:01:15:a1:c8:1c:0d:87:98:67:6d:93:7d:4e: 28:a2:09:c0:46:94:2d:1b:7f:d1:39:81:67:59:1c: 5b:1d:6a:6d:48:40:32:e5:4a:46:c1:2c:50:2a:c8: 8d:b7:25:78:cd:7e:31:7f:69:aa:04:73:9a:27:08: 12:6f:94:3c:fc:fa:c2:ea:0d:7f:0c:e8:3f:7f:a9: fe:83:89:48:c6:bc:66:d8:22:5b:73:d6:7a:5b:02: 0a:8f:6f:c1:6a:2c:e8:6b:2d:cd:7e:7d:73:76:56: 75:e9:77:2a:71:8b:f7:f3:e0:4f:a1:fe:7c:95:b7: 8b:eb:b7:1c:57:f0:f1:43:ef:a2:40:f7:1e:0c:85: 87:f7:63:e8:57:d6:18:56:25:2f:1d:e2:88:d4:f9: cc:d0:fc:ce:0a:f2:2f:cc:d8:4c:fd:22:46:54:97: 3b:28:63:42:fb:22:41:64:ff:dd:9b:db:2d:47:6b: da:b8:6b:75:0b:b7:f5:a5:49:e6:04:02:fe:bf:55: 80:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AE:C9:D6:82:5D:DC:A7:1C:2A:D4:3A:C5:F5:D1:9C:39:D2:0F:12:F4 X509v3 Authority Key Identifier: keyid:7F:6E:3B:F2:21:35:CE:51:0C:38:3A:9D:95:C7:4D:21:75:B7:05:58 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/769f8aa8-8971-4e51-8b51-803b49b32a4f/1/7F6E3BF22135CE510C383A9D95C74D2175B70558.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7F6E3BF22135CE510C383A9D95C74D2175B70558.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/769f8aa8-8971-4e51-8b51-803b49b32a4f/1/7F6E3BF22135CE510C383A9D95C74D2175B70558.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 50:ce:6e:e6:74:d0:5a:03:e2:d4:3b:d0:3c:fe:03:49:e0:87: 94:87:49:df:af:74:c2:13:b7:11:6b:a8:a9:94:98:9e:43:5a: 0e:7b:9c:35:f6:f4:c4:ce:dd:db:37:23:38:d8:cf:3e:97:97: 81:35:85:85:19:54:42:c5:44:05:a6:3f:20:3b:6e:d1:f8:4b: b7:86:f9:0b:90:59:5c:e3:73:ec:60:aa:2d:ff:97:cf:34:bd: 59:dd:b5:e4:67:48:0e:a7:c2:37:4e:dc:86:dc:02:ab:84:33: cf:f9:6f:35:4e:fd:57:56:e4:c6:7b:57:a7:47:5c:e4:76:f8: 47:86:10:d5:1c:ac:d1:e2:11:cd:fd:76:d1:28:c5:0a:93:df: 8e:8a:c4:7c:d2:3a:15:49:69:ed:68:fc:ca:d6:42:7c:94:36: bc:51:f3:27:65:53:b5:bc:ec:4c:6d:39:b6:30:41:58:77:2f: 3f:bf:15:e8:a2:a3:61:c1:f8:82:f8:7b:98:8c:db:e6:fa:f3: 50:d5:ec:3f:a6:86:c1:89:0a:93:4d:bd:2e:13:ac:26:01:78: 5b:f9:6d:f8:c0:95:88:d6:5a:f3:79:e5:47:c0:01:d5:83:11: 85:3e:2d:c7:d8:22:70:b4:1a:65:b6:df:58:ea:42:25:d1:01: b3:1e:7b:8d -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUBjpGnfGQRSjMXZm0EDWMPTHkpR4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoN0Y2RTNCRjIyMTM1Q0U1MTBDMzgzQTlEOTVDNzREMjE3 NUI3MDU1ODAeFw0yNTEyMjQwMTE2NTRaFw0yNTEyMjcwNzM1NTRaMDMxMTAvBgNV BAMTKEFFQzlENjgyNUREQ0E3MUMyQUQ0M0FDNUY1RDE5QzM5RDIwRjEyRjQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDRz7nfScYTAuSRywoE+bJcgiXz HlmJaJOnHX2nmiO64ZX0c+sSXyBzMORGmuEQHcy+x8s4Ed4NR6fJA0omARWhyBwN h5hnbZN9TiiiCcBGlC0bf9E5gWdZHFsdam1IQDLlSkbBLFAqyI23JXjNfjF/aaoE c5onCBJvlDz8+sLqDX8M6D9/qf6DiUjGvGbYIltz1npbAgqPb8FqLOhrLc1+fXN2 VnXpdypxi/fz4E+h/nyVt4vrtxxX8PFD76JA9x4MhYf3Y+hX1hhWJS8d4ojU+czQ /M4K8i/M2Ez9IkZUlzsoY0L7IkFk/92b2y1Ha9q4a3ULt/WlSeYEAv6/VYArAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUrsnWgl3cpxwq1DrF9dGcOdIPEvQwHwYDVR0j BBgwFoAUf2478iE1zlEMODqdlcdNIXW3BVgwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 NjlmOGFhOC04OTcxLTRlNTEtOGI1MS04MDNiNDliMzJhNGYvMS83RjZFM0JGMjIx MzVDRTUxMEMzODNBOUQ5NUM3NEQyMTc1QjcwNTU4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvN0Y2RTNCRjIyMTM1Q0U1MTBDMzgzQTlEOTVDNzREMjE3NUI3 MDU1OC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNzY5ZjhhYTgtODk3MS00ZTUxLThi NTEtODAzYjQ5YjMyYTRmLzEvN0Y2RTNCRjIyMTM1Q0U1MTBDMzgzQTlEOTVDNzRE MjE3NUI3MDU1OC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFDObuZ00FoD4tQ70Dz+A0ngh5SHSd+vdMIT txFrqKmUmJ5DWg57nDX29MTO3ds3IzjYzz6Xl4E1hYUZVELFRAWmPyA7btH4S7eG +QuQWVzjc+xgqi3/l880vVndteRnSA6nwjdO3IbcAquEM8/5bzVO/VdW5MZ7V6dH XOR2+EeGENUcrNHiEc39dtEoxQqT346KxHzSOhVJae1o/MrWQnyUNrxR8ydlU7W8 7ExtObYwQVh3Lz+/Feiio2HB+IL4e5iM2+b681DV7D+mhsGJCpNNvS4TrCYBeFv5 bfjAlYjWWvN55UfAAdWDEYU+LcfYInC0GmW231jqQiXRAbMee40= -----END CERTIFICATE-----Generated at Wed Dec 24 20:23:40 2025 by rpki-client