This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/835048c6-8ccd-463d-ad34-ae7428647a9c/0/7008868799E77C42E437F0D7ACCF683CF5B2AA4E.mft File: 7008868799E77C42E437F0D7ACCF683CF5B2AA4E.mft (raw, json) Hash identifier: QUaEG+RXhAbmczkb8A34EiE1stPWvzRLcDEPaRfCH04= Subject key identifier: FD:1D:0A:C2:25:4E:FE:EE:13:4D:05:42:68:A4:91:5A:2F:57:12:99 Authority key identifier: 70:08:86:87:99:E7:7C:42:E4:37:F0:D7:AC:CF:68:3C:F5:B2:AA:4E Certificate issuer: /CN=7008868799E77C42E437F0D7ACCF683CF5B2AA4E Certificate serial: 76EEE2F08D5FA4743D2D4FEA2DDCF425393CCCA6 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7008868799E77C42E437F0D7ACCF683CF5B2AA4E.cer Subject info access: rsync://repo-rpki.idnic.net/repo/835048c6-8ccd-463d-ad34-ae7428647a9c/0/7008868799E77C42E437F0D7ACCF683CF5B2AA4E.mft Manifest number: 04D1 Signing time: Wed 24 Dec 2025 09:33:33 +0000 Manifest this update: Wed 24 Dec 2025 09:28:33 +0000 Manifest next update: Sat 27 Dec 2025 21:21:33 +0000 Files and hashes: 1: 7008868799E77C42E437F0D7ACCF683CF5B2AA4E.crl (hash: faQ6T3Whsqb34CEkkYMcQEGxloyeYgjGFprsBMd1nkk=) 2: 3130332e3134362e3139372e302f32342d3234203d3e20313339393431.roa (hash: p7Jtuo2fT9SMHQpNlniVY5E8TDvsdgf0sorpgXPSACM=) 3: 3130332e3134362e3139362e302f32332d3233203d3e20313339393431.roa (hash: KEUVODDrcsujN0g1v6DrUa6Mji4U9jJWIyDXhx1aJNY=) 4: 3130332e3134362e3139362e302f32342d3234203d3e20313339393431.roa (hash: WkFNZS79+nq1P3vYzsoqHasGlqkPwC3TJbG5gTcIHd8=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/835048c6-8ccd-463d-ad34-ae7428647a9c/0/7008868799E77C42E437F0D7ACCF683CF5B2AA4E.crl rsync://repo-rpki.idnic.net/repo/835048c6-8ccd-463d-ad34-ae7428647a9c/0/7008868799E77C42E437F0D7ACCF683CF5B2AA4E.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7008868799E77C42E437F0D7ACCF683CF5B2AA4E.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 27 Dec 2025 17:20:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 76:ee:e2:f0:8d:5f:a4:74:3d:2d:4f:ea:2d:dc:f4:25:39:3c:cc:a6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7008868799E77C42E437F0D7ACCF683CF5B2AA4E Validity Not Before: Dec 24 09:28:33 2025 GMT Not After : Dec 27 21:21:33 2025 GMT Subject: CN=FD1D0AC2254EFEEE134D054268A4915A2F571299 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:52:11:b3:b0:5d:96:2e:ce:05:a4:f1:77:1f: 1f:a8:98:69:4f:42:02:9d:a1:c1:d8:38:41:e5:e2: bd:98:96:36:d1:43:a5:48:28:3d:f9:1f:16:0c:25: a5:e2:28:c6:14:85:aa:6b:b2:b1:e7:cb:5b:ab:9a: 14:56:1f:52:34:3e:fb:39:08:c1:1f:b5:13:d8:88: 05:2b:15:24:64:6d:b0:33:ff:4c:8a:08:41:b4:dc: 2a:05:ae:03:e8:50:70:13:f7:9a:85:64:1f:08:0f: 3a:f4:7c:17:bb:ef:b7:2c:1c:8b:b2:00:a9:66:06: aa:57:af:13:b3:42:43:f5:3b:54:2f:62:58:d2:79: 98:6e:48:60:36:c3:ae:37:7a:39:c9:3f:45:ce:e9: dc:24:c7:0e:ea:ce:8b:c9:de:ee:8b:84:49:0e:95: b9:28:eb:6a:9f:80:5f:b6:a4:51:11:12:cf:a7:21: 84:5e:b8:5c:f0:ac:b6:9f:99:cf:1d:2b:f1:61:dd: e9:ac:8b:c4:97:4a:ca:31:24:91:23:70:b5:b8:97: c4:6f:9e:74:cc:83:53:af:fa:dc:06:14:15:84:41: 57:ac:cd:28:b7:40:99:b8:77:4f:a8:46:9c:9f:6e: 0b:03:20:69:ed:eb:45:5f:ff:23:00:86:26:5a:14: aa:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FD:1D:0A:C2:25:4E:FE:EE:13:4D:05:42:68:A4:91:5A:2F:57:12:99 X509v3 Authority Key Identifier: keyid:70:08:86:87:99:E7:7C:42:E4:37:F0:D7:AC:CF:68:3C:F5:B2:AA:4E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/835048c6-8ccd-463d-ad34-ae7428647a9c/0/7008868799E77C42E437F0D7ACCF683CF5B2AA4E.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7008868799E77C42E437F0D7ACCF683CF5B2AA4E.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/835048c6-8ccd-463d-ad34-ae7428647a9c/0/7008868799E77C42E437F0D7ACCF683CF5B2AA4E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b7:0e:46:af:7f:02:c1:01:c6:e5:cd:39:eb:da:b3:a8:70:1e: 64:3d:c0:48:41:ec:79:44:61:be:a9:e2:fe:59:52:a3:82:c5: 5e:bd:67:90:38:70:49:bc:15:f7:7c:02:39:eb:37:d1:ea:d1: bb:4d:fd:72:c6:ad:0a:44:21:28:77:e6:ba:e3:4d:d8:ea:66: f9:98:42:f2:7f:77:5e:0b:93:1b:85:67:4b:b4:6c:fc:4b:24: d7:84:9f:3d:87:4d:9e:e2:b9:69:22:5f:6b:65:05:c8:87:05: c9:ef:8f:97:c6:e8:ae:1d:f1:35:d6:98:69:b6:b4:90:29:f1: a6:16:23:97:a0:fc:f5:19:67:3e:81:0e:85:8b:eb:bb:ef:87: bc:9c:13:1f:a6:e0:08:fd:a5:ba:2e:31:07:6f:48:e2:86:de: a1:7d:f8:ed:2d:96:6e:9b:a9:0b:bd:5a:0d:fc:ad:54:6f:ab: 0c:8c:80:79:14:52:7e:5d:9e:31:7a:1f:3d:83:df:04:36:3d: 79:dc:1a:b1:cd:12:fc:26:79:4f:1f:71:a9:50:16:1b:cf:43: 7f:69:ce:39:f6:da:63:8f:f3:e6:e2:10:08:e5:60:65:49:c2: db:ed:a3:25:de:87:96:a9:97:97:2b:12:ae:5f:dd:62:d4:36: 34:4a:a9:06 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUdu7i8I1fpHQ9LU/qLdz0JTk8zKYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzAwODg2ODc5OUU3N0M0MkU0MzdGMEQ3QUNDRjY4M0NG NUIyQUE0RTAeFw0yNTEyMjQwOTI4MzNaFw0yNTEyMjcyMTIxMzNaMDMxMTAvBgNV BAMTKEZEMUQwQUMyMjU0RUZFRUUxMzREMDU0MjY4QTQ5MTVBMkY1NzEyOTkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCrUhGzsF2WLs4FpPF3Hx+omGlP QgKdocHYOEHl4r2YljbRQ6VIKD35HxYMJaXiKMYUhaprsrHny1urmhRWH1I0Pvs5 CMEftRPYiAUrFSRkbbAz/0yKCEG03CoFrgPoUHAT95qFZB8IDzr0fBe777csHIuy AKlmBqpXrxOzQkP1O1QvYljSeZhuSGA2w643ejnJP0XO6dwkxw7qzovJ3u6LhEkO lbko62qfgF+2pFEREs+nIYReuFzwrLafmc8dK/Fh3emsi8SXSsoxJJEjcLW4l8Rv nnTMg1Ov+twGFBWEQVeszSi3QJm4d0+oRpyfbgsDIGnt60Vf/yMAhiZaFKpHAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU/R0KwiVO/u4TTQVCaKSRWi9XEpkwHwYDVR0j BBgwFoAUcAiGh5nnfELkN/DXrM9oPPWyqk4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 MzUwNDhjNi04Y2NkLTQ2M2QtYWQzNC1hZTc0Mjg2NDdhOWMvMC83MDA4ODY4Nzk5 RTc3QzQyRTQzN0YwRDdBQ0NGNjgzQ0Y1QjJBQTRFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNzAwODg2ODc5OUU3N0M0MkU0MzdGMEQ3QUNDRjY4M0NGNUIy QUE0RS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vODM1MDQ4YzYtOGNjZC00NjNkLWFk MzQtYWU3NDI4NjQ3YTljLzAvNzAwODg2ODc5OUU3N0M0MkU0MzdGMEQ3QUNDRjY4 M0NGNUIyQUE0RS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALcORq9/AsEBxuXNOevas6hwHmQ9wEhB7HlE Yb6p4v5ZUqOCxV69Z5A4cEm8Ffd8AjnrN9Hq0btN/XLGrQpEISh35rrjTdjqZvmY QvJ/d14LkxuFZ0u0bPxLJNeEnz2HTZ7iuWkiX2tlBciHBcnvj5fG6K4d8TXWmGm2 tJAp8aYWI5eg/PUZZz6BDoWL67vvh7ycEx+m4Aj9pbouMQdvSOKG3qF9+O0tlm6b qQu9Wg38rVRvqwyMgHkUUn5dnjF6Hz2D3wQ2PXncGrHNEvwmeU8fcalQFhvPQ39p zjn22mOP8+biEAjlYGVJwtvtoyXeh5apl5crEq5f3WLUNjRKqQY= -----END CERTIFICATE-----Generated at Wed Dec 24 22:11:36 2025 by rpki-client