This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/957b0d7e-eade-4318-ab20-8c7f2d5be69f/0/7D64B8F4CFB687141137D10F9E73FFD0BAB93F67.mft File: 7D64B8F4CFB687141137D10F9E73FFD0BAB93F67.mft (raw, json) Hash identifier: vF8QS1uJ6cPAugswNULjN89YkWufn5+gwCANtGHOJNM= Subject key identifier: 8D:AD:A3:87:81:8B:10:96:35:10:7E:1D:A7:73:CF:94:A3:C0:5A:11 Authority key identifier: 7D:64:B8:F4:CF:B6:87:14:11:37:D1:0F:9E:73:FF:D0:BA:B9:3F:67 Certificate issuer: /CN=7D64B8F4CFB687141137D10F9E73FFD0BAB93F67 Certificate serial: 2316010A0B19377D7780E10015EECE0C3AB91C92 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7D64B8F4CFB687141137D10F9E73FFD0BAB93F67.cer Subject info access: rsync://repo-rpki.idnic.net/repo/957b0d7e-eade-4318-ab20-8c7f2d5be69f/0/7D64B8F4CFB687141137D10F9E73FFD0BAB93F67.mft Manifest number: 02F1 Signing time: Tue 16 Dec 2025 23:02:19 +0000 Manifest this update: Tue 16 Dec 2025 22:57:19 +0000 Manifest next update: Sat 20 Dec 2025 04:56:19 +0000 Files and hashes: 1: 7D64B8F4CFB687141137D10F9E73FFD0BAB93F67.crl (hash: DYyfu/O4cnTJlqzPCRO+fZ9j0ZLK7CHOR5T4jxpD6LU=) 2: 323430313a383434303a3133313a3a2f34382d3438203d3e20313336313331.roa (hash: 7XF+7tNQBQV2Wy0AsX8lBCySJ+ATYXgli7NY4z4VmfM=) 3: 3130332e39372e37392e302f32342d3234203d3e20313336313331.roa (hash: eRLttmDRe4S/HXjiFUVifbleZv0UdgB6j9QBQFrEFVw=) 4: 323430313a383434303a3331313a3a2f34382d3438203d3e20313336313331.roa (hash: uNKV4J4iyB42iT7YiJbc/obq8TacFQRWwVPHqjYHdt4=) 5: 3130332e39372e37372e302f32342d3234203d3e20313336313331.roa (hash: audNLou8WkSNI41O6Bj42zTe5yNLL3IkDF/evFV7jOs=) 6: 323430313a383434303a3a2f33322d3332203d3e20313336313331.roa (hash: J/TKA4DxZMeIQk5lGShBOGO9FvcMo90L9nK349bvEzs=) 7: 323430313a383434303a3233313a3a2f34382d3438203d3e20313336313331.roa (hash: 9q0QjNfZ8ZidXQKSI35eyNIOpPTa4MZHY+H9XcdTGqQ=) 8: 323430313a383434303a33313a3a2f34382d3438203d3e20313336313331.roa (hash: imoDv7fNxiS0ABFe1mnjo4w6QxU9zgowGM6VjXLrifM=) 9: 3130332e39372e37362e302f32342d3234203d3e20313336313331.roa (hash: b5FyLXJvwHGEGWwekDTqeQDenx7rZLagZD5M467u+1w=) 10: 3130332e39372e37382e302f32342d3234203d3e20313336313331.roa (hash: gTWqsHLXGzmwOn5oUbLdKwsFxUOTG6JntDETCN1uoJg=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/957b0d7e-eade-4318-ab20-8c7f2d5be69f/0/7D64B8F4CFB687141137D10F9E73FFD0BAB93F67.crl rsync://repo-rpki.idnic.net/repo/957b0d7e-eade-4318-ab20-8c7f2d5be69f/0/7D64B8F4CFB687141137D10F9E73FFD0BAB93F67.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7D64B8F4CFB687141137D10F9E73FFD0BAB93F67.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 20 Dec 2025 04:56:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 23:16:01:0a:0b:19:37:7d:77:80:e1:00:15:ee:ce:0c:3a:b9:1c:92 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7D64B8F4CFB687141137D10F9E73FFD0BAB93F67 Validity Not Before: Dec 16 22:57:19 2025 GMT Not After : Dec 20 04:56:19 2025 GMT Subject: CN=8DADA387818B109635107E1DA773CF94A3C05A11 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:97:4f:08:8a:a4:0a:f4:4c:2d:e8:56:e9:5e: c5:0b:b2:b6:b1:04:dc:01:03:9d:eb:6a:5a:29:33: 4b:25:b0:1b:65:d8:6f:7e:53:7c:e6:08:bd:ec:2d: 74:f2:29:f8:62:62:9d:c3:68:32:48:d8:56:4f:0f: 43:12:b0:68:6f:22:e5:28:bc:47:ff:cb:a9:97:d1: 6b:cb:49:cf:52:05:17:9b:7c:e8:e6:aa:ef:37:79: 22:ce:88:0c:3d:8c:71:e7:e8:36:32:a0:a1:53:ba: fc:3d:eb:fb:c6:59:8b:e5:c2:d4:03:32:b2:af:3a: 2a:4c:47:8b:c1:6c:49:52:39:73:47:84:f5:12:01: d4:e7:15:60:0f:0c:0d:8b:d2:e8:b4:c3:97:4a:f1: b4:9e:4b:3e:16:b9:29:a9:e4:96:29:c0:85:7b:74: 44:e9:13:05:56:e6:67:17:92:2d:a1:48:9e:76:2d: 05:39:d4:52:ea:b4:34:69:65:42:85:be:7c:af:39: 05:0c:4f:58:9a:a1:53:4c:b5:26:19:67:70:ba:82: 62:d4:ec:33:82:b1:13:5a:29:66:ef:ee:d5:15:43: 56:87:bb:b7:c9:e3:6d:f8:fe:1a:28:7d:ce:9b:fa: e5:95:77:57:4d:1f:39:be:a4:3b:e3:36:90:fd:65: 65:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8D:AD:A3:87:81:8B:10:96:35:10:7E:1D:A7:73:CF:94:A3:C0:5A:11 X509v3 Authority Key Identifier: keyid:7D:64:B8:F4:CF:B6:87:14:11:37:D1:0F:9E:73:FF:D0:BA:B9:3F:67 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/957b0d7e-eade-4318-ab20-8c7f2d5be69f/0/7D64B8F4CFB687141137D10F9E73FFD0BAB93F67.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7D64B8F4CFB687141137D10F9E73FFD0BAB93F67.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/957b0d7e-eade-4318-ab20-8c7f2d5be69f/0/7D64B8F4CFB687141137D10F9E73FFD0BAB93F67.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 00:5d:16:70:b6:d6:49:fc:89:cb:e8:2b:a2:a3:56:00:65:9e: 79:b2:38:3a:01:07:c7:72:d4:82:2e:90:b7:55:79:cd:0b:87: 91:dc:1b:32:07:0d:d5:e9:4b:f1:a7:cf:4c:ed:a7:79:6b:0c: e4:72:61:14:75:e3:a2:da:ef:ca:98:5f:a0:21:c9:b4:32:5f: d5:83:7d:0a:9e:33:85:e3:49:f3:39:04:5b:05:c2:59:6b:89: 86:0b:b0:33:b8:ee:4c:ad:6a:fb:6b:02:c6:73:9f:21:53:33: 2d:fd:3a:1b:00:39:de:34:e5:6a:79:85:e5:5c:12:7d:ac:c0: 54:1c:58:43:19:87:05:a6:1a:e5:50:7c:d6:5d:7d:b2:e6:7d: 76:92:70:58:bb:41:2e:20:1b:e0:91:8e:ff:52:4b:2d:05:6e: 6f:74:44:ad:2e:06:81:1b:4a:1f:86:27:ec:8f:64:49:8b:20: f9:72:34:9f:e5:a5:63:44:19:ad:3b:7f:17:24:26:1c:40:d4: e8:52:7c:7d:ed:34:e3:4f:bb:2c:16:4d:60:eb:30:fb:2b:fc: b8:9b:28:10:9d:9e:83:b6:1b:01:86:47:bd:90:1e:a5:ca:9a: fd:8c:b0:61:e0:bc:a1:39:bc:77:0a:eb:c1:38:d7:53:d1:52: 69:aa:72:32 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUIxYBCgsZN313gOEAFe7ODDq5HJIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoN0Q2NEI4RjRDRkI2ODcxNDExMzdEMTBGOUU3M0ZGRDBC QUI5M0Y2NzAeFw0yNTEyMTYyMjU3MTlaFw0yNTEyMjAwNDU2MTlaMDMxMTAvBgNV BAMTKDhEQURBMzg3ODE4QjEwOTYzNTEwN0UxREE3NzNDRjk0QTNDMDVBMTEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDKl08IiqQK9Ewt6FbpXsULsrax BNwBA53ralopM0slsBtl2G9+U3zmCL3sLXTyKfhiYp3DaDJI2FZPD0MSsGhvIuUo vEf/y6mX0WvLSc9SBRebfOjmqu83eSLOiAw9jHHn6DYyoKFTuvw96/vGWYvlwtQD MrKvOipMR4vBbElSOXNHhPUSAdTnFWAPDA2L0ui0w5dK8bSeSz4WuSmp5JYpwIV7 dETpEwVW5mcXki2hSJ52LQU51FLqtDRpZUKFvnyvOQUMT1iaoVNMtSYZZ3C6gmLU 7DOCsRNaKWbv7tUVQ1aHu7fJ4234/hoofc6b+uWVd1dNHzm+pDvjNpD9ZWXJAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUja2jh4GLEJY1EH4dp3PPlKPAWhEwHwYDVR0j BBgwFoAUfWS49M+2hxQRN9EPnnP/0Lq5P2cwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 NTdiMGQ3ZS1lYWRlLTQzMTgtYWIyMC04YzdmMmQ1YmU2OWYvMC83RDY0QjhGNENG QjY4NzE0MTEzN0QxMEY5RTczRkZEMEJBQjkzRjY3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvN0Q2NEI4RjRDRkI2ODcxNDExMzdEMTBGOUU3M0ZGRDBCQUI5 M0Y2Ny5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOTU3YjBkN2UtZWFkZS00MzE4LWFi MjAtOGM3ZjJkNWJlNjlmLzAvN0Q2NEI4RjRDRkI2ODcxNDExMzdEMTBGOUU3M0ZG RDBCQUI5M0Y2Ny5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAABdFnC21kn8icvoK6KjVgBlnnmyODoBB8dy 1IIukLdVec0Lh5HcGzIHDdXpS/Gnz0ztp3lrDORyYRR146La78qYX6AhybQyX9WD fQqeM4XjSfM5BFsFwllriYYLsDO47kytavtrAsZznyFTMy39OhsAOd405Wp5heVc En2swFQcWEMZhwWmGuVQfNZdfbLmfXaScFi7QS4gG+CRjv9SSy0Fbm90RK0uBoEb Sh+GJ+yPZEmLIPlyNJ/lpWNEGa07fxckJhxA1OhSfH3tNONPuywWTWDrMPsr/Lib KBCdnoO2GwGGR72QHqXKmv2MsGHgvKE5vHcK68E411PRUmmqcjI= -----END CERTIFICATE-----Generated at Fri Dec 19 11:18:48 2025 by rpki-client