This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/7a70d44e-0f70-45a3-af04-81f429db3a5d/0/7767CF49D7661AFAB45870341D88D2F3D9A86CE4.mft File: 7767CF49D7661AFAB45870341D88D2F3D9A86CE4.mft (raw, json) Hash identifier: HKHZgCEKTU09yqxk+DysGYIYPZjiOcoRzTBrRr18ErA= Subject key identifier: 12:C2:5A:3A:FD:31:01:DC:1A:2A:12:2A:11:E6:8E:81:89:80:F9:EF Authority key identifier: 77:67:CF:49:D7:66:1A:FA:B4:58:70:34:1D:88:D2:F3:D9:A8:6C:E4 Certificate issuer: /CN=7767CF49D7661AFAB45870341D88D2F3D9A86CE4 Certificate serial: 0730DC67A02F2FBB32CC988ED5CAEE73008B7DD4 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7767CF49D7661AFAB45870341D88D2F3D9A86CE4.cer Subject info access: rsync://repo-rpki.idnic.net/repo/7a70d44e-0f70-45a3-af04-81f429db3a5d/0/7767CF49D7661AFAB45870341D88D2F3D9A86CE4.mft Manifest number: 025A Signing time: Mon 15 Dec 2025 17:31:47 +0000 Manifest this update: Mon 15 Dec 2025 17:26:47 +0000 Manifest next update: Fri 19 Dec 2025 05:02:47 +0000 Files and hashes: 1: 3130332e3137342e3137352e302f32342d3234203d3e20313437313031.roa (hash: hiVWfFJS+ICMc15b4VDK2HR8eWbWj/hyT+N05K9QMHE=) 2: 3130332e3137342e3137342e302f32342d3234203d3e20313437313031.roa (hash: mg4/qvSGbk0zDsf0Rx7OQC6CJE6sN8kDzPsI7vMCT4w=) 3: 7767CF49D7661AFAB45870341D88D2F3D9A86CE4.crl (hash: U3AE/D7dDKZX0H5Z+7atnXQ6mZMLeXEh8yHPCi2GLKw=) 4: 3130332e3137342e3137342e302f32332d3233203d3e20313437313031.roa (hash: qjco1QI2sNnouAlC+BzAGiX63kc+i+LJElEHwxqlyT4=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/7a70d44e-0f70-45a3-af04-81f429db3a5d/0/7767CF49D7661AFAB45870341D88D2F3D9A86CE4.crl rsync://repo-rpki.idnic.net/repo/7a70d44e-0f70-45a3-af04-81f429db3a5d/0/7767CF49D7661AFAB45870341D88D2F3D9A86CE4.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7767CF49D7661AFAB45870341D88D2F3D9A86CE4.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 19 Dec 2025 05:02:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 07:30:dc:67:a0:2f:2f:bb:32:cc:98:8e:d5:ca:ee:73:00:8b:7d:d4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7767CF49D7661AFAB45870341D88D2F3D9A86CE4 Validity Not Before: Dec 15 17:26:47 2025 GMT Not After : Dec 19 05:02:47 2025 GMT Subject: CN=12C25A3AFD3101DC1A2A122A11E68E818980F9EF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:cb:15:35:75:50:5e:5d:52:47:72:49:ac:84: 75:17:9f:e4:89:9b:11:7b:74:2d:96:79:2c:c6:c5: 45:4f:b4:03:a1:b6:17:7f:73:bd:9c:ea:15:46:37: 36:64:0c:c5:bc:54:f8:59:b4:2e:74:85:0c:76:77: 33:db:7e:c3:4b:4b:17:fa:e6:e7:83:be:c2:40:af: 23:7d:4b:4e:90:1b:56:d7:16:44:e8:69:96:c6:1a: 6a:f8:b5:b0:7d:2b:fb:b9:41:a2:03:6a:1a:6b:c4: 31:0a:8f:91:8b:59:74:f9:f7:36:8b:44:88:87:2e: 61:eb:7e:74:59:90:c5:69:c1:fc:a7:df:61:00:b0: 98:47:db:08:c9:e9:2b:a0:77:dd:b9:15:c9:bd:46: 06:94:2d:75:73:22:fe:dc:88:6b:1f:48:d8:bf:d8: b6:03:07:4c:18:09:42:d0:81:6e:07:6e:2e:6a:ae: 6f:a9:a1:3d:cf:bb:95:c2:1c:dc:af:0a:df:57:b1: 62:0a:1e:d9:53:53:9a:98:97:d2:c9:68:f6:b2:42: 67:cc:a8:b0:fa:99:de:f3:29:b9:e1:69:ed:0b:ca: 54:ef:a4:43:b3:34:e4:6d:59:9a:31:a8:ec:d7:f9: 19:f1:1c:e2:44:b9:5e:8c:9e:e4:75:dc:4e:ca:4c: ff:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:C2:5A:3A:FD:31:01:DC:1A:2A:12:2A:11:E6:8E:81:89:80:F9:EF X509v3 Authority Key Identifier: keyid:77:67:CF:49:D7:66:1A:FA:B4:58:70:34:1D:88:D2:F3:D9:A8:6C:E4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/7a70d44e-0f70-45a3-af04-81f429db3a5d/0/7767CF49D7661AFAB45870341D88D2F3D9A86CE4.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7767CF49D7661AFAB45870341D88D2F3D9A86CE4.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7a70d44e-0f70-45a3-af04-81f429db3a5d/0/7767CF49D7661AFAB45870341D88D2F3D9A86CE4.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 08:40:97:ff:0b:85:8f:4d:47:a1:40:5c:2a:79:7d:64:e6:21: 06:56:de:0a:91:46:26:fb:d2:20:a3:fb:b2:db:f7:c5:0a:bf: 52:6a:5a:23:0e:a8:16:ea:bf:b0:23:39:1c:86:ba:c5:fc:b3: 3b:9e:8c:fc:4c:e0:30:4c:c9:9e:fc:00:e7:f6:34:1a:61:3b: c2:f5:8b:2a:f8:97:95:5d:41:43:ad:6c:5a:0f:1b:8e:e8:e1: ec:25:cc:31:03:6a:87:d2:ad:dd:be:4f:91:cd:ba:08:39:67: ff:45:9f:ce:77:7a:f6:c6:db:9d:ef:a7:16:e0:ec:21:a5:bb: 8e:62:8f:4f:0f:1b:df:23:b2:5d:f9:21:19:90:0c:ba:6a:5d: fb:5a:7d:e6:2d:93:2c:b2:5e:81:e4:a9:2d:f4:99:85:66:94: 83:45:d3:60:b8:28:44:57:26:3f:c4:00:6f:f4:e7:2c:7f:23: 1b:05:18:a4:90:b6:f6:2d:7d:4e:3c:78:5c:3e:e8:2d:71:f7: ed:05:69:0c:62:3e:be:71:20:c9:06:9b:3f:bb:07:b0:de:30: 1d:8a:bf:10:5e:49:92:2c:25:fb:36:60:99:3b:db:80:47:c9: d3:7f:85:f4:07:7b:8a:7f:6b:72:48:09:e5:27:de:3a:f2:8d: ac:63:0d:d6 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUBzDcZ6AvL7syzJiO1crucwCLfdQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzc2N0NGNDlENzY2MUFGQUI0NTg3MDM0MUQ4OEQyRjNE OUE4NkNFNDAeFw0yNTEyMTUxNzI2NDdaFw0yNTEyMTkwNTAyNDdaMDMxMTAvBgNV BAMTKDEyQzI1QTNBRkQzMTAxREMxQTJBMTIyQTExRTY4RTgxODk4MEY5RUYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDjyxU1dVBeXVJHckmshHUXn+SJ mxF7dC2WeSzGxUVPtAOhthd/c72c6hVGNzZkDMW8VPhZtC50hQx2dzPbfsNLSxf6 5ueDvsJAryN9S06QG1bXFkToaZbGGmr4tbB9K/u5QaIDahprxDEKj5GLWXT59zaL RIiHLmHrfnRZkMVpwfyn32EAsJhH2wjJ6Sugd925Fcm9RgaULXVzIv7ciGsfSNi/ 2LYDB0wYCULQgW4Hbi5qrm+poT3Pu5XCHNyvCt9XsWIKHtlTU5qYl9LJaPayQmfM qLD6md7zKbnhae0LylTvpEOzNORtWZoxqOzX+RnxHOJEuV6MnuR13E7KTP93AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUEsJaOv0xAdwaKhIqEeaOgYmA+e8wHwYDVR0j BBgwFoAUd2fPSddmGvq0WHA0HYjS89mobOQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 YTcwZDQ0ZS0wZjcwLTQ1YTMtYWYwNC04MWY0MjlkYjNhNWQvMC83NzY3Q0Y0OUQ3 NjYxQUZBQjQ1ODcwMzQxRDg4RDJGM0Q5QTg2Q0U0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNzc2N0NGNDlENzY2MUFGQUI0NTg3MDM0MUQ4OEQyRjNEOUE4 NkNFNC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vN2E3MGQ0NGUtMGY3MC00NWEzLWFm MDQtODFmNDI5ZGIzYTVkLzAvNzc2N0NGNDlENzY2MUFGQUI0NTg3MDM0MUQ4OEQy RjNEOUE4NkNFNC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAhAl/8LhY9NR6FAXCp5fWTmIQZW3gqRRib7 0iCj+7Lb98UKv1JqWiMOqBbqv7AjORyGusX8szuejPxM4DBMyZ78AOf2NBphO8L1 iyr4l5VdQUOtbFoPG47o4ewlzDEDaofSrd2+T5HNugg5Z/9Fn853evbG253vpxbg 7CGlu45ij08PG98jsl35IRmQDLpqXftafeYtkyyyXoHkqS30mYVmlINF02C4KERX Jj/EAG/05yx/IxsFGKSQtvYtfU48eFw+6C1x9+0FaQxiPr5xIMkGmz+7B7DeMB2K vxBeSZIsJfs2YJk724BHydN/hfQHe4p/a3JICeUn3jryjaxjDdY= -----END CERTIFICATE-----Generated at Wed Dec 17 00:25:20 2025 by rpki-client