This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/7e76db1e-bf9a-49a8-bf76-9f314e7d1d8e/0/AD9BCADB235B6DEE6CAD4EB4C53AA8B3BA73FEF2.mft File: AD9BCADB235B6DEE6CAD4EB4C53AA8B3BA73FEF2.mft (raw, json) Hash identifier: dXRtY681ymctphmZogTnzhFctBULl4pXzzXN/JDdnwE= Subject key identifier: 54:89:A4:68:26:A7:96:7E:38:38:B8:62:06:FC:08:0B:17:48:23:70 Authority key identifier: AD:9B:CA:DB:23:5B:6D:EE:6C:AD:4E:B4:C5:3A:A8:B3:BA:73:FE:F2 Certificate issuer: /CN=AD9BCADB235B6DEE6CAD4EB4C53AA8B3BA73FEF2 Certificate serial: 3D551E938B5DB4DD0AFD7C0E7B51AF3F33E28D94 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AD9BCADB235B6DEE6CAD4EB4C53AA8B3BA73FEF2.cer Subject info access: rsync://repo-rpki.idnic.net/repo/7e76db1e-bf9a-49a8-bf76-9f314e7d1d8e/0/AD9BCADB235B6DEE6CAD4EB4C53AA8B3BA73FEF2.mft Manifest number: 01C7 Signing time: Tue 16 Dec 2025 08:41:12 +0000 Manifest this update: Tue 16 Dec 2025 08:36:12 +0000 Manifest next update: Fri 19 Dec 2025 20:19:12 +0000 Files and hashes: 1: 3130332e3135332e38332e302f32342d3234203d3e20313339393637.roa (hash: 4TMx0gxwZTeBi9c9HRJxLUqbWNAKbbKq2wsE6X2jB3w=) 2: 3130332e3135332e38322e302f32342d3234203d3e20313430343539.roa (hash: 5/bb2m/l4G8bQopKZ9eyezGHRGaLv9nfRV9c/BB9Gks=) 3: AD9BCADB235B6DEE6CAD4EB4C53AA8B3BA73FEF2.crl (hash: nJrispzwMVSd6a8PEliJVHsRfE5zgtTxkts8WDpblog=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/7e76db1e-bf9a-49a8-bf76-9f314e7d1d8e/0/AD9BCADB235B6DEE6CAD4EB4C53AA8B3BA73FEF2.crl rsync://repo-rpki.idnic.net/repo/7e76db1e-bf9a-49a8-bf76-9f314e7d1d8e/0/AD9BCADB235B6DEE6CAD4EB4C53AA8B3BA73FEF2.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AD9BCADB235B6DEE6CAD4EB4C53AA8B3BA73FEF2.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 19 Dec 2025 20:19:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3d:55:1e:93:8b:5d:b4:dd:0a:fd:7c:0e:7b:51:af:3f:33:e2:8d:94 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AD9BCADB235B6DEE6CAD4EB4C53AA8B3BA73FEF2 Validity Not Before: Dec 16 08:36:12 2025 GMT Not After : Dec 19 20:19:12 2025 GMT Subject: CN=5489A46826A7967E3838B86206FC080B17482370 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:3a:4f:5f:ec:a9:b9:de:f9:72:c6:1e:92:69: df:74:44:00:e9:09:68:5d:d6:11:5c:1b:d7:bc:b4: 98:51:6e:70:65:d2:f8:ef:63:3e:70:36:d6:72:b9: 64:3a:97:d8:cb:75:53:aa:d2:46:80:79:5c:3c:af: b1:d6:c0:12:38:39:d3:13:8b:f8:42:b4:0c:95:53: b8:95:15:0a:23:ca:c1:66:5f:26:42:d7:cc:ea:de: da:7a:91:db:49:44:1e:b1:8b:8a:de:74:ee:35:99: e2:7f:2b:d9:a5:1c:c9:58:0f:07:bc:47:3d:9c:3b: 49:1f:9f:d5:2d:af:15:8a:a6:65:b5:bf:81:cf:5e: 14:0d:cd:38:1b:16:7c:ef:68:42:7e:96:c4:6c:f4: 1d:e9:71:0d:a5:3b:0a:ad:b3:67:a3:de:c6:77:23: da:ed:4d:6f:a4:ed:69:0d:85:f0:b1:9a:04:2e:70: 74:be:b4:4e:15:f8:eb:46:6f:94:76:47:e0:9f:f1: e2:56:df:f0:64:d9:6a:26:79:6a:ea:f8:0d:72:61: fc:2d:72:d2:19:06:3d:f3:b2:e3:29:ad:0d:1e:5f: 1a:91:c3:0b:3d:97:f0:0b:49:30:9e:8d:bd:b8:da: 23:77:08:70:4b:bf:ec:96:c5:fa:45:c8:45:36:85: eb:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 54:89:A4:68:26:A7:96:7E:38:38:B8:62:06:FC:08:0B:17:48:23:70 X509v3 Authority Key Identifier: keyid:AD:9B:CA:DB:23:5B:6D:EE:6C:AD:4E:B4:C5:3A:A8:B3:BA:73:FE:F2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/7e76db1e-bf9a-49a8-bf76-9f314e7d1d8e/0/AD9BCADB235B6DEE6CAD4EB4C53AA8B3BA73FEF2.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AD9BCADB235B6DEE6CAD4EB4C53AA8B3BA73FEF2.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7e76db1e-bf9a-49a8-bf76-9f314e7d1d8e/0/AD9BCADB235B6DEE6CAD4EB4C53AA8B3BA73FEF2.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 26:09:d9:e9:60:ba:bd:30:a7:fa:c5:11:7e:57:c8:74:98:55: c1:82:55:34:bb:25:26:a6:f9:1c:1e:f0:f2:4f:e6:6e:65:88: 44:3f:bc:58:24:ed:2e:b8:4f:4c:35:53:68:24:89:7b:81:12: b4:97:31:e6:9c:0d:1b:c1:28:2c:bb:b8:4c:2e:6c:72:6e:05: 27:15:4b:b0:57:02:0b:6c:c7:87:2a:98:94:ba:2d:6f:cb:b6: c4:80:12:89:83:26:ea:4d:db:6f:55:fe:49:16:80:31:38:d6: cb:91:05:e6:6e:64:1f:83:c2:c5:01:1c:06:b7:25:db:4c:fc: 1d:3a:3e:f3:07:73:7b:85:72:38:63:0a:39:25:bb:9c:84:e9: f2:65:60:0a:aa:5e:9f:eb:06:a2:a3:7a:b8:8e:c3:d3:98:1b: a3:8c:31:d0:c2:33:89:26:b5:39:96:b8:7f:9b:1b:de:19:2a: dd:1e:39:b9:57:21:1e:9d:41:f6:ef:a9:fe:79:6d:7d:69:95: 39:ab:5e:c0:74:df:cd:df:4d:9e:3c:1b:17:24:ea:9e:bd:13: c9:20:da:a9:ca:89:33:66:ff:b1:1a:f1:2e:3a:1e:3a:53:89: 78:d4:95:cc:8c:ce:d4:83:c2:bd:18:68:e5:a2:44:c5:ea:d4: 10:7c:0d:fe -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUPVUek4tdtN0K/XwOe1GvPzPijZQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUQ5QkNBREIyMzVCNkRFRTZDQUQ0RUI0QzUzQUE4QjNC QTczRkVGMjAeFw0yNTEyMTYwODM2MTJaFw0yNTEyMTkyMDE5MTJaMDMxMTAvBgNV BAMTKDU0ODlBNDY4MjZBNzk2N0UzODM4Qjg2MjA2RkMwODBCMTc0ODIzNzAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCpOk9f7Km53vlyxh6Sad90RADp CWhd1hFcG9e8tJhRbnBl0vjvYz5wNtZyuWQ6l9jLdVOq0kaAeVw8r7HWwBI4OdMT i/hCtAyVU7iVFQojysFmXyZC18zq3tp6kdtJRB6xi4redO41meJ/K9mlHMlYDwe8 Rz2cO0kfn9UtrxWKpmW1v4HPXhQNzTgbFnzvaEJ+lsRs9B3pcQ2lOwqts2ej3sZ3 I9rtTW+k7WkNhfCxmgQucHS+tE4V+OtGb5R2R+Cf8eJW3/Bk2WomeWrq+A1yYfwt ctIZBj3zsuMprQ0eXxqRwws9l/ALSTCejb242iN3CHBLv+yWxfpFyEU2hesnAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUVImkaCanln44OLhiBvwICxdII3AwHwYDVR0j BBgwFoAUrZvK2yNbbe5srU60xTqos7pz/vIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 ZTc2ZGIxZS1iZjlhLTQ5YTgtYmY3Ni05ZjMxNGU3ZDFkOGUvMC9BRDlCQ0FEQjIz NUI2REVFNkNBRDRFQjRDNTNBQThCM0JBNzNGRUYyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQUQ5QkNBREIyMzVCNkRFRTZDQUQ0RUI0QzUzQUE4QjNCQTcz RkVGMi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vN2U3NmRiMWUtYmY5YS00OWE4LWJm NzYtOWYzMTRlN2QxZDhlLzAvQUQ5QkNBREIyMzVCNkRFRTZDQUQ0RUI0QzUzQUE4 QjNCQTczRkVGMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACYJ2elgur0wp/rFEX5XyHSYVcGCVTS7JSam +Rwe8PJP5m5liEQ/vFgk7S64T0w1U2gkiXuBErSXMeacDRvBKCy7uEwubHJuBScV S7BXAgtsx4cqmJS6LW/LtsSAEomDJupN229V/kkWgDE41suRBeZuZB+DwsUBHAa3 JdtM/B06PvMHc3uFcjhjCjklu5yE6fJlYAqqXp/rBqKjeriOw9OYG6OMMdDCM4km tTmWuH+bG94ZKt0eOblXIR6dQfbvqf55bX1plTmrXsB0383fTZ48Gxck6p69E8kg 2qnKiTNm/7Ea8S46HjpTiXjUlcyMztSDwr0YaOWiRMXq1BB8Df4= -----END CERTIFICATE-----Generated at Wed Dec 17 09:44:36 2025 by rpki-client