This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/918ad7a6-c907-4359-aba5-d5748ba16176/0/C7D4D30314160FDACB9582CF972E90EC10AE206F.mft File: C7D4D30314160FDACB9582CF972E90EC10AE206F.mft (raw, json) Hash identifier: YVRsRt+eIjKGf99VFGQvjezwoZdVFbj4WcehoVPdLSo= Subject key identifier: 43:D1:48:D6:DA:2F:C1:E6:CB:06:BA:40:00:33:0D:82:62:DE:12:F9 Authority key identifier: C7:D4:D3:03:14:16:0F:DA:CB:95:82:CF:97:2E:90:EC:10:AE:20:6F Certificate issuer: /CN=C7D4D30314160FDACB9582CF972E90EC10AE206F Certificate serial: 11B63F89A07DBC3D3FF12ABE8569340442FCBCA8 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C7D4D30314160FDACB9582CF972E90EC10AE206F.cer Subject info access: rsync://repo-rpki.idnic.net/repo/918ad7a6-c907-4359-aba5-d5748ba16176/0/C7D4D30314160FDACB9582CF972E90EC10AE206F.mft Manifest number: 0535 Signing time: Wed 24 Dec 2025 01:12:42 +0000 Manifest this update: Wed 24 Dec 2025 01:07:42 +0000 Manifest next update: Sat 27 Dec 2025 12:10:42 +0000 Files and hashes: 1: C7D4D30314160FDACB9582CF972E90EC10AE206F.crl (hash: iexm1rHlkGkzXiP/pKPX9U1EhFp+V6ofkp2j8vNOQq0=) 2: 323030313a6466303a333330303a3a2f34382d3438203d3e20313333383339.roa (hash: 4N6LRCptGvt5p5Z3fi0q5sQmHj3OTG0hHztRBZdu+t8=) 3: 3130332e3134342e32322e302f32342d3234203d3e20313333383339.roa (hash: llGSDUYqSL3OD7TtVsp6ArCR8mqRzLPhfJs1tW9L5wg=) 4: 3130332e35302e3231382e302f32342d3234203d3e20313333383339.roa (hash: xsM8R50wRfdlN5JweHjZIfTpmduLeILF/fWliK+i37M=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/918ad7a6-c907-4359-aba5-d5748ba16176/0/C7D4D30314160FDACB9582CF972E90EC10AE206F.crl rsync://repo-rpki.idnic.net/repo/918ad7a6-c907-4359-aba5-d5748ba16176/0/C7D4D30314160FDACB9582CF972E90EC10AE206F.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C7D4D30314160FDACB9582CF972E90EC10AE206F.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 27 Dec 2025 12:10:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 11:b6:3f:89:a0:7d:bc:3d:3f:f1:2a:be:85:69:34:04:42:fc:bc:a8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C7D4D30314160FDACB9582CF972E90EC10AE206F Validity Not Before: Dec 24 01:07:42 2025 GMT Not After : Dec 27 12:10:42 2025 GMT Subject: CN=43D148D6DA2FC1E6CB06BA4000330D8262DE12F9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:54:aa:b6:8c:71:9a:04:92:6a:bc:b6:94:4c: 17:94:65:d7:9c:fe:2b:ce:26:41:5a:c8:52:9d:04: 21:d5:92:bd:f2:7c:b8:be:0e:bc:2e:90:f8:48:eb: 28:12:fb:a3:ec:7e:36:0e:91:56:54:73:4a:9b:c4: 75:e2:06:bc:e9:58:20:dd:4e:2d:20:be:66:15:e5: f1:48:e2:d7:89:8f:61:64:be:b1:86:d9:e6:be:a0: e8:3d:ae:b5:ad:30:f2:8d:cf:4a:f7:52:de:26:a9: ac:83:f5:f4:76:18:29:c0:40:ac:62:8e:88:b4:bc: 81:9c:23:62:a5:06:83:ee:35:88:79:65:e3:a5:fc: e7:25:a7:1f:08:46:0a:5b:9d:fb:11:cf:46:24:1f: da:61:67:78:91:b6:7e:99:40:ed:8d:79:76:06:58: 7c:1c:f4:9c:f1:f2:2f:b6:25:6b:24:81:f0:d7:f9: 49:f9:7f:3d:7e:02:61:23:dd:72:1b:75:7f:d5:60: be:14:4f:a9:0a:bf:51:c8:14:da:ab:83:97:a5:2f: 68:4e:bb:3b:1c:44:be:99:5e:98:b4:5a:e7:4b:3b: ec:75:c5:ca:6d:79:71:97:ac:08:72:07:99:06:22: b1:0a:ac:fd:81:93:f7:52:6e:48:2a:5a:7a:d6:06: a3:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:D1:48:D6:DA:2F:C1:E6:CB:06:BA:40:00:33:0D:82:62:DE:12:F9 X509v3 Authority Key Identifier: keyid:C7:D4:D3:03:14:16:0F:DA:CB:95:82:CF:97:2E:90:EC:10:AE:20:6F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/918ad7a6-c907-4359-aba5-d5748ba16176/0/C7D4D30314160FDACB9582CF972E90EC10AE206F.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C7D4D30314160FDACB9582CF972E90EC10AE206F.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/918ad7a6-c907-4359-aba5-d5748ba16176/0/C7D4D30314160FDACB9582CF972E90EC10AE206F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1c:fe:58:5a:65:3f:24:5b:f1:d9:2c:34:86:a1:88:34:fb:e9: 1a:db:02:e2:d4:8c:b7:88:59:23:9c:f5:ab:a1:00:bb:25:94: 37:3f:ad:60:3f:64:55:cf:e1:f3:db:89:06:fc:14:38:37:d7: bb:3f:5c:1f:32:26:fc:6b:69:61:db:26:8b:e0:31:08:15:d4: 95:7d:36:47:1e:96:66:a5:bd:5c:12:19:8e:b5:93:2e:4a:dd: 51:f5:5c:5b:32:17:91:44:12:62:0d:37:78:e4:70:69:ca:7e: 71:aa:f7:48:05:a7:98:d1:f3:61:bd:f8:a3:de:e0:c6:c9:51: 65:9a:cf:db:70:27:fa:77:af:23:62:8b:40:84:0b:d4:a8:08: b6:04:71:4a:4f:c1:aa:71:57:19:61:f4:37:b1:84:d7:48:e8: 8f:4b:98:81:4a:f9:c1:ca:82:8f:bd:29:06:0c:32:86:1b:02: a6:84:e7:db:ed:5b:56:d2:f2:34:b8:bb:b8:80:84:5a:12:64: a4:f5:7f:f6:e3:3c:20:21:36:46:1e:0b:17:fc:98:1c:85:20: 03:ec:11:f4:ff:d1:1e:3b:71:75:c0:fe:c4:f8:07:d6:1b:ad: 0b:e9:79:8f:df:79:8c:07:22:66:ff:aa:c9:3f:a5:9d:a2:64: b2:4c:31:2c -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUEbY/iaB9vD0/8Sq+hWk0BEL8vKgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzdENEQzMDMxNDE2MEZEQUNCOTU4MkNGOTcyRTkwRUMx MEFFMjA2RjAeFw0yNTEyMjQwMTA3NDJaFw0yNTEyMjcxMjEwNDJaMDMxMTAvBgNV BAMTKDQzRDE0OEQ2REEyRkMxRTZDQjA2QkE0MDAwMzMwRDgyNjJERTEyRjkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC9VKq2jHGaBJJqvLaUTBeUZdec /ivOJkFayFKdBCHVkr3yfLi+DrwukPhI6ygS+6PsfjYOkVZUc0qbxHXiBrzpWCDd Ti0gvmYV5fFI4teJj2FkvrGG2ea+oOg9rrWtMPKNz0r3Ut4mqayD9fR2GCnAQKxi joi0vIGcI2KlBoPuNYh5ZeOl/Oclpx8IRgpbnfsRz0YkH9phZ3iRtn6ZQO2NeXYG WHwc9Jzx8i+2JWskgfDX+Un5fz1+AmEj3XIbdX/VYL4UT6kKv1HIFNqrg5elL2hO uzscRL6ZXpi0WudLO+x1xcpteXGXrAhyB5kGIrEKrP2Bk/dSbkgqWnrWBqMnAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUQ9FI1tovwebLBrpAADMNgmLeEvkwHwYDVR0j BBgwFoAUx9TTAxQWD9rLlYLPly6Q7BCuIG8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 MThhZDdhNi1jOTA3LTQzNTktYWJhNS1kNTc0OGJhMTYxNzYvMC9DN0Q0RDMwMzE0 MTYwRkRBQ0I5NTgyQ0Y5NzJFOTBFQzEwQUUyMDZGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQzdENEQzMDMxNDE2MEZEQUNCOTU4MkNGOTcyRTkwRUMxMEFF MjA2Ri5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOTE4YWQ3YTYtYzkwNy00MzU5LWFi YTUtZDU3NDhiYTE2MTc2LzAvQzdENEQzMDMxNDE2MEZEQUNCOTU4MkNGOTcyRTkw RUMxMEFFMjA2Ri5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABz+WFplPyRb8dksNIahiDT76RrbAuLUjLeI WSOc9auhALsllDc/rWA/ZFXP4fPbiQb8FDg317s/XB8yJvxraWHbJovgMQgV1JV9 NkcelmalvVwSGY61ky5K3VH1XFsyF5FEEmINN3jkcGnKfnGq90gFp5jR82G9+KPe 4MbJUWWaz9twJ/p3ryNii0CEC9SoCLYEcUpPwapxVxlh9DexhNdI6I9LmIFK+cHK go+9KQYMMoYbAqaE59vtW1bS8jS4u7iAhFoSZKT1f/bjPCAhNkYeCxf8mByFIAPs EfT/0R47cXXA/sT4B9YbrQvpeY/feYwHImb/qsk/pZ2iZLJMMSw= -----END CERTIFICATE-----Generated at Wed Dec 24 22:08:39 2025 by rpki-client