This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/999688a9-e78d-4aba-83bc-5178679120ad/0/7E9242F2F0756C1DB232479261838C3701005D48.mft File: 7E9242F2F0756C1DB232479261838C3701005D48.mft (raw, json) Hash identifier: s1VPlg71DRZligzsS+bJO6cEm7XZVWOY7yVMPjD3BhU= Subject key identifier: 1A:BF:8B:D1:52:F5:07:01:93:B0:E9:DB:08:19:B3:6F:F0:3C:81:37 Authority key identifier: 7E:92:42:F2:F0:75:6C:1D:B2:32:47:92:61:83:8C:37:01:00:5D:48 Certificate issuer: /CN=7E9242F2F0756C1DB232479261838C3701005D48 Certificate serial: 27CBE2DCB693259967AB0C9D01EEBB2B09B84342 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7E9242F2F0756C1DB232479261838C3701005D48.cer Subject info access: rsync://repo-rpki.idnic.net/repo/999688a9-e78d-4aba-83bc-5178679120ad/0/7E9242F2F0756C1DB232479261838C3701005D48.mft Manifest number: 025E Signing time: Tue 23 Dec 2025 08:12:17 +0000 Manifest this update: Tue 23 Dec 2025 08:07:17 +0000 Manifest next update: Fri 26 Dec 2025 12:49:17 +0000 Files and hashes: 1: 3130332e3138352e34382e302f32332d3234203d3e203538383230.roa (hash: 4jQNco8yphk6G6ao8AcbPz+Ne3AU3S09XO4RxcSoB0A=) 2: 7E9242F2F0756C1DB232479261838C3701005D48.crl (hash: rwvgeItDMkm6yKbKZ431UCvncPURDm1VdwDsQJkh1R4=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/999688a9-e78d-4aba-83bc-5178679120ad/0/7E9242F2F0756C1DB232479261838C3701005D48.crl rsync://repo-rpki.idnic.net/repo/999688a9-e78d-4aba-83bc-5178679120ad/0/7E9242F2F0756C1DB232479261838C3701005D48.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7E9242F2F0756C1DB232479261838C3701005D48.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 26 Dec 2025 12:49:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 27:cb:e2:dc:b6:93:25:99:67:ab:0c:9d:01:ee:bb:2b:09:b8:43:42 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7E9242F2F0756C1DB232479261838C3701005D48 Validity Not Before: Dec 23 08:07:17 2025 GMT Not After : Dec 26 12:49:17 2025 GMT Subject: CN=1ABF8BD152F5070193B0E9DB0819B36FF03C8137 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:a1:70:27:e8:2c:44:40:2c:86:9f:84:2e:e3: 33:4a:7e:f0:b2:0f:99:7a:2a:b0:08:6d:12:01:1c: 7a:85:7e:5d:14:00:eb:e1:2e:14:f2:83:fa:15:27: b0:1c:6e:43:9e:71:bb:ed:3a:9d:aa:33:cf:82:ce: 28:cf:be:e8:8a:7b:dc:03:44:1f:92:90:50:20:cb: d5:80:31:6c:ec:70:3b:d1:a0:5b:bb:00:1a:ae:72: bf:91:13:5f:9c:8d:98:52:ef:d1:7c:e1:33:a6:a5: 07:e0:a6:bd:32:44:19:64:1c:48:f3:b8:65:c6:d2: 2b:c5:be:1d:6e:79:4f:54:64:27:78:89:48:50:a7: 9a:9c:f0:c9:60:90:a0:42:68:09:55:d3:cd:bb:36: c9:9e:03:ab:07:19:13:2c:17:61:a2:60:8a:e7:57: 3f:c4:d0:16:e4:e3:f2:d7:ce:9a:7c:52:9b:8b:2e: a8:60:6e:a2:0c:e0:54:0a:d8:01:c1:5f:52:9b:d8: db:fa:2f:61:3a:af:a2:da:b8:e8:a8:4f:5e:8c:d8: c7:a6:29:12:ce:76:65:34:1c:73:5f:c0:37:79:82: d6:30:74:b3:d5:16:94:b9:dc:1a:33:10:93:20:f5: 41:33:20:0e:43:e3:0a:e9:79:f9:80:8d:7e:b7:18: 22:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:BF:8B:D1:52:F5:07:01:93:B0:E9:DB:08:19:B3:6F:F0:3C:81:37 X509v3 Authority Key Identifier: keyid:7E:92:42:F2:F0:75:6C:1D:B2:32:47:92:61:83:8C:37:01:00:5D:48 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/999688a9-e78d-4aba-83bc-5178679120ad/0/7E9242F2F0756C1DB232479261838C3701005D48.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7E9242F2F0756C1DB232479261838C3701005D48.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/999688a9-e78d-4aba-83bc-5178679120ad/0/7E9242F2F0756C1DB232479261838C3701005D48.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 10:22:8f:9b:7c:bf:fa:d9:bf:76:62:17:2c:62:fe:10:5c:a7: ab:10:30:75:ce:04:74:5b:b8:9e:cc:b9:c1:ee:fa:95:ba:6e: a0:47:6d:56:a1:ee:b4:f9:36:5a:b0:4c:40:e8:b5:69:50:ce: f5:b1:2b:6c:88:da:5f:d5:97:61:1a:20:26:2f:4c:63:da:3a: 98:4b:c7:07:da:f8:8f:26:80:02:16:91:a1:41:b6:e3:b9:a2: be:62:9f:bf:9a:77:2b:3e:8e:ea:41:99:15:ff:2c:d3:00:cb: c6:4e:52:ea:68:be:f2:15:c2:eb:02:32:cd:ac:74:27:1d:d8: 42:b3:30:16:41:9a:9c:5f:75:5f:24:44:01:96:d2:5c:ef:15: be:07:af:56:20:ab:0e:17:0d:e5:2a:96:4f:6d:b2:62:ba:6b: 31:81:7c:28:b7:6c:6c:a5:7e:cd:3c:21:e7:62:2f:b2:f8:4d: 62:64:54:ab:17:c3:c4:89:f4:46:8e:c1:bc:ed:54:51:7b:cf: a0:26:ea:1f:5c:c3:bc:67:9a:d6:52:b7:60:e2:51:0a:5f:bc: 44:99:34:ef:0f:77:8e:d7:59:6a:e3:2c:48:bf:0d:ff:7a:21: 14:a4:5a:28:a3:48:92:d8:64:3b:8d:dd:2e:b7:f9:45:2f:35: a6:76:7b:ef -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUJ8vi3LaTJZlnqwydAe67Kwm4Q0IwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoN0U5MjQyRjJGMDc1NkMxREIyMzI0NzkyNjE4MzhDMzcw MTAwNUQ0ODAeFw0yNTEyMjMwODA3MTdaFw0yNTEyMjYxMjQ5MTdaMDMxMTAvBgNV BAMTKDFBQkY4QkQxNTJGNTA3MDE5M0IwRTlEQjA4MTlCMzZGRjAzQzgxMzcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDCoXAn6CxEQCyGn4Qu4zNKfvCy D5l6KrAIbRIBHHqFfl0UAOvhLhTyg/oVJ7AcbkOecbvtOp2qM8+CzijPvuiKe9wD RB+SkFAgy9WAMWzscDvRoFu7ABqucr+RE1+cjZhS79F84TOmpQfgpr0yRBlkHEjz uGXG0ivFvh1ueU9UZCd4iUhQp5qc8MlgkKBCaAlV0827NsmeA6sHGRMsF2GiYIrn Vz/E0Bbk4/LXzpp8UpuLLqhgbqIM4FQK2AHBX1Kb2Nv6L2E6r6LauOioT16M2Mem KRLOdmU0HHNfwDd5gtYwdLPVFpS53BozEJMg9UEzIA5D4wrpefmAjX63GCJXAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUGr+L0VL1BwGTsOnbCBmzb/A8gTcwHwYDVR0j BBgwFoAUfpJC8vB1bB2yMkeSYYOMNwEAXUgwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 OTk2ODhhOS1lNzhkLTRhYmEtODNiYy01MTc4Njc5MTIwYWQvMC83RTkyNDJGMkYw NzU2QzFEQjIzMjQ3OTI2MTgzOEMzNzAxMDA1RDQ4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvN0U5MjQyRjJGMDc1NkMxREIyMzI0NzkyNjE4MzhDMzcwMTAw NUQ0OC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOTk5Njg4YTktZTc4ZC00YWJhLTgz YmMtNTE3ODY3OTEyMGFkLzAvN0U5MjQyRjJGMDc1NkMxREIyMzI0NzkyNjE4MzhD MzcwMTAwNUQ0OC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABAij5t8v/rZv3ZiFyxi/hBcp6sQMHXOBHRb uJ7MucHu+pW6bqBHbVah7rT5NlqwTEDotWlQzvWxK2yI2l/Vl2EaICYvTGPaOphL xwfa+I8mgAIWkaFBtuO5or5in7+adys+jupBmRX/LNMAy8ZOUupovvIVwusCMs2s dCcd2EKzMBZBmpxfdV8kRAGW0lzvFb4Hr1Ygqw4XDeUqlk9tsmK6azGBfCi3bGyl fs08IediL7L4TWJkVKsXw8SJ9EaOwbztVFF7z6Am6h9cw7xnmtZSt2DiUQpfvESZ NO8Pd47XWWrjLEi/Df96IRSkWiijSJLYZDuN3S63+UUvNaZ2e+8= -----END CERTIFICATE-----Generated at Wed Dec 24 22:06:59 2025 by rpki-client