This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/9a1794aa-3291-483b-ac0b-7bc7b1a67cc6/0/E7231D1A3E051BD903DB86D7DE0077C2333EBB58.mft File: E7231D1A3E051BD903DB86D7DE0077C2333EBB58.mft (raw, json) Hash identifier: dJxNinTHiZTBM56wXEynhnvTbeVqXvQyZFqJTuC3DIg= Subject key identifier: 73:76:1D:9E:0D:FC:5D:43:2D:3D:5C:00:4A:26:26:30:F8:42:68:B7 Authority key identifier: E7:23:1D:1A:3E:05:1B:D9:03:DB:86:D7:DE:00:77:C2:33:3E:BB:58 Certificate issuer: /CN=E7231D1A3E051BD903DB86D7DE0077C2333EBB58 Certificate serial: 56D1BA4F30CD8DA2F0A603F39AE6ED0A3D6E99C8 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E7231D1A3E051BD903DB86D7DE0077C2333EBB58.cer Subject info access: rsync://repo-rpki.idnic.net/repo/9a1794aa-3291-483b-ac0b-7bc7b1a67cc6/0/E7231D1A3E051BD903DB86D7DE0077C2333EBB58.mft Manifest number: 0385 Signing time: Sun 21 Dec 2025 23:32:01 +0000 Manifest this update: Sun 21 Dec 2025 23:27:01 +0000 Manifest next update: Thu 25 Dec 2025 08:43:01 +0000 Files and hashes: 1: 3130332e3136342e3233302e302f32332d3233203d3e20313431393133.roa (hash: Wwvtox4pnVKWLsRl/E/cxu7UuLzmLQJxzxgchSEOlMg=) 2: E7231D1A3E051BD903DB86D7DE0077C2333EBB58.crl (hash: KjiXLHLxYg8S+kQiWr1eCziBzOqjUE+lNdpnxIF5OdQ=) 3: 3130332e3136342e3233312e302f32342d3234203d3e20313431393133.roa (hash: NK0HZEK3BAxoXUs/T9BsQ+3NHYIYmmtIH82zUm/fzDk=) 4: 3130332e3136342e3233302e302f32342d3234203d3e20313431393133.roa (hash: zTY/Xpdv3MSQoDsOl/9obTqa4WAjpeiNnIpy7In5lOI=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/9a1794aa-3291-483b-ac0b-7bc7b1a67cc6/0/E7231D1A3E051BD903DB86D7DE0077C2333EBB58.crl rsync://repo-rpki.idnic.net/repo/9a1794aa-3291-483b-ac0b-7bc7b1a67cc6/0/E7231D1A3E051BD903DB86D7DE0077C2333EBB58.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E7231D1A3E051BD903DB86D7DE0077C2333EBB58.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 25 Dec 2025 08:43:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 56:d1:ba:4f:30:cd:8d:a2:f0:a6:03:f3:9a:e6:ed:0a:3d:6e:99:c8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E7231D1A3E051BD903DB86D7DE0077C2333EBB58 Validity Not Before: Dec 21 23:27:01 2025 GMT Not After : Dec 25 08:43:01 2025 GMT Subject: CN=73761D9E0DFC5D432D3D5C004A262630F84268B7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:8e:b5:0a:4e:9c:05:85:49:cb:75:66:4c:9c: d6:78:c8:3f:62:c4:56:4d:60:4a:2c:7f:87:da:d5: 10:a4:78:e8:c5:ab:e8:0e:18:80:e9:39:4a:92:76: 75:75:cc:6a:92:21:a9:d3:97:23:89:a1:0c:45:a1: a2:cd:88:fd:0d:2c:51:2a:9e:ec:c3:ed:cd:80:1d: d8:74:4f:68:88:d1:52:e6:40:93:85:1a:4c:a1:f7: d0:19:89:5c:a0:6f:14:b0:4b:f1:21:f5:d7:20:d7: 33:26:97:80:ec:e5:62:8a:4a:86:62:04:52:5f:8f: d6:54:8d:3a:2b:14:be:89:7b:73:a3:41:0b:69:31: e3:29:a5:76:12:19:fe:e0:61:19:b5:ec:35:a5:a2: ba:a6:e6:cd:5e:6b:57:bc:35:7c:5b:93:7a:56:61: 78:af:e1:49:bf:8a:1a:8a:12:8e:9a:55:12:47:fc: e5:46:cc:9d:88:36:9b:8d:43:40:a4:46:84:c6:0f: d5:7a:d6:e3:78:a1:69:97:e3:d9:e9:6a:a7:f7:15: aa:1d:4c:ca:18:cd:6a:23:bc:d1:d5:ee:8e:d1:56: e4:df:fd:23:b3:7b:3e:d2:1b:b9:c8:41:14:2b:f0: 8e:7d:e7:53:12:80:c9:ee:da:7c:64:9c:b6:a5:22: b2:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 73:76:1D:9E:0D:FC:5D:43:2D:3D:5C:00:4A:26:26:30:F8:42:68:B7 X509v3 Authority Key Identifier: keyid:E7:23:1D:1A:3E:05:1B:D9:03:DB:86:D7:DE:00:77:C2:33:3E:BB:58 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/9a1794aa-3291-483b-ac0b-7bc7b1a67cc6/0/E7231D1A3E051BD903DB86D7DE0077C2333EBB58.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E7231D1A3E051BD903DB86D7DE0077C2333EBB58.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/9a1794aa-3291-483b-ac0b-7bc7b1a67cc6/0/E7231D1A3E051BD903DB86D7DE0077C2333EBB58.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 15:ea:b8:54:bc:c6:8c:ae:c1:7c:8b:76:0f:6d:1b:1c:f8:87: 62:bc:27:2c:d5:6a:ca:20:80:0c:68:5d:ee:56:7f:63:81:90: 18:2d:f8:6c:10:18:92:38:60:e4:74:b2:52:77:85:4b:b2:89: d1:db:ea:61:40:e7:c3:ec:84:59:f4:38:04:1f:83:6d:3f:bc: 30:71:a1:ca:6f:f6:36:fe:88:ad:b0:aa:e6:7d:35:5a:af:4c: c7:06:b8:08:83:c7:97:18:5b:3b:b8:7a:db:bf:80:eb:fe:b1: 8c:23:30:98:db:78:40:43:d0:7b:c7:03:89:84:4f:ba:7d:cc: cf:9b:32:9f:ca:c6:99:e1:2f:d6:96:ab:2e:bf:d1:69:3e:c9: c3:77:5e:4e:2f:c7:16:19:b8:c6:69:1f:34:92:af:28:8b:88: c9:98:e7:b1:c1:9a:44:8f:3a:da:3a:42:a5:3d:58:7b:02:5f: 46:5c:96:d9:dd:8c:96:a9:4f:18:80:be:e4:0b:3d:8e:b5:df: b6:df:4f:30:c0:7d:48:42:e5:98:79:d8:c6:e8:a3:b9:88:73: eb:b8:ce:a7:bb:fa:01:cf:81:3e:aa:6a:73:1b:45:db:fb:68: 3d:dc:3d:be:e1:93:7a:34:82:b6:13:7b:8e:40:5e:18:74:69: 1c:67:6f:af -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUVtG6TzDNjaLwpgPzmubtCj1umcgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRTcyMzFEMUEzRTA1MUJEOTAzREI4NkQ3REUwMDc3QzIz MzNFQkI1ODAeFw0yNTEyMjEyMzI3MDFaFw0yNTEyMjUwODQzMDFaMDMxMTAvBgNV BAMTKDczNzYxRDlFMERGQzVENDMyRDNENUMwMDRBMjYyNjMwRjg0MjY4QjcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCkjrUKTpwFhUnLdWZMnNZ4yD9i xFZNYEosf4fa1RCkeOjFq+gOGIDpOUqSdnV1zGqSIanTlyOJoQxFoaLNiP0NLFEq nuzD7c2AHdh0T2iI0VLmQJOFGkyh99AZiVygbxSwS/Eh9dcg1zMml4Ds5WKKSoZi BFJfj9ZUjTorFL6Je3OjQQtpMeMppXYSGf7gYRm17DWlorqm5s1ea1e8NXxbk3pW YXiv4Um/ihqKEo6aVRJH/OVGzJ2INpuNQ0CkRoTGD9V61uN4oWmX49npaqf3Faod TMoYzWojvNHV7o7RVuTf/SOzez7SG7nIQRQr8I5951MSgMnu2nxknLalIrJPAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUc3Ydng38XUMtPVwASiYmMPhCaLcwHwYDVR0j BBgwFoAU5yMdGj4FG9kD24bX3gB3wjM+u1gwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 YTE3OTRhYS0zMjkxLTQ4M2ItYWMwYi03YmM3YjFhNjdjYzYvMC9FNzIzMUQxQTNF MDUxQkQ5MDNEQjg2RDdERTAwNzdDMjMzM0VCQjU4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRTcyMzFEMUEzRTA1MUJEOTAzREI4NkQ3REUwMDc3QzIzMzNF QkI1OC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOWExNzk0YWEtMzI5MS00ODNiLWFj MGItN2JjN2IxYTY3Y2M2LzAvRTcyMzFEMUEzRTA1MUJEOTAzREI4NkQ3REUwMDc3 QzIzMzNFQkI1OC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABXquFS8xoyuwXyLdg9tGxz4h2K8JyzVasog gAxoXe5Wf2OBkBgt+GwQGJI4YOR0slJ3hUuyidHb6mFA58PshFn0OAQfg20/vDBx ocpv9jb+iK2wquZ9NVqvTMcGuAiDx5cYWzu4etu/gOv+sYwjMJjbeEBD0HvHA4mE T7p9zM+bMp/KxpnhL9aWqy6/0Wk+ycN3Xk4vxxYZuMZpHzSSryiLiMmY57HBmkSP Oto6QqU9WHsCX0ZcltndjJapTxiAvuQLPY6137bfTzDAfUhC5Zh52Mboo7mIc+u4 zqe7+gHPgT6qanMbRdv7aD3cPb7hk3o0grYTe45AXhh0aRxnb68= -----END CERTIFICATE-----Generated at Wed Dec 24 10:37:54 2025 by rpki-client