This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/9b3b230a-fff1-47f0-bf91-7ceb8d36096e/0/7D508B225350B0D204F1943F4F53D4D86AC4FC31.mft File: 7D508B225350B0D204F1943F4F53D4D86AC4FC31.mft (raw, json) Hash identifier: e4SrrzTwqqMdZHIDV/RyWXwSeIr+UqCBEZr/6NJ10js= Subject key identifier: 72:AC:51:E2:22:EF:C9:CA:D2:57:45:27:38:97:CD:A8:18:33:33:E9 Authority key identifier: 7D:50:8B:22:53:50:B0:D2:04:F1:94:3F:4F:53:D4:D8:6A:C4:FC:31 Certificate issuer: /CN=7D508B225350B0D204F1943F4F53D4D86AC4FC31 Certificate serial: 4E97C3603BD972DAE92514D1928FEF379A1B0359 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7D508B225350B0D204F1943F4F53D4D86AC4FC31.cer Subject info access: rsync://repo-rpki.idnic.net/repo/9b3b230a-fff1-47f0-bf91-7ceb8d36096e/0/7D508B225350B0D204F1943F4F53D4D86AC4FC31.mft Manifest number: DE Signing time: Thu 18 Dec 2025 04:22:10 +0000 Manifest this update: Thu 18 Dec 2025 04:17:10 +0000 Manifest next update: Sun 21 Dec 2025 12:51:10 +0000 Files and hashes: 1: 7D508B225350B0D204F1943F4F53D4D86AC4FC31.crl (hash: 4kR2E1JslzEBuJI0FFYIeARA8MlS0juKtmEYJ7Cqs3I=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/9b3b230a-fff1-47f0-bf91-7ceb8d36096e/0/7D508B225350B0D204F1943F4F53D4D86AC4FC31.crl rsync://repo-rpki.idnic.net/repo/9b3b230a-fff1-47f0-bf91-7ceb8d36096e/0/7D508B225350B0D204F1943F4F53D4D86AC4FC31.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7D508B225350B0D204F1943F4F53D4D86AC4FC31.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 21 Dec 2025 12:51:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4e:97:c3:60:3b:d9:72:da:e9:25:14:d1:92:8f:ef:37:9a:1b:03:59 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7D508B225350B0D204F1943F4F53D4D86AC4FC31 Validity Not Before: Dec 18 04:17:10 2025 GMT Not After : Dec 21 12:51:10 2025 GMT Subject: CN=72AC51E222EFC9CAD25745273897CDA8183333E9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:00:c4:6c:b3:11:10:bf:2d:d6:a4:d2:6c:20: ae:93:a6:4e:2e:ee:13:a1:60:93:95:77:e4:9e:4f: 21:f3:d9:56:84:75:14:12:8a:1c:3a:99:21:33:1f: 31:23:cb:15:5f:e1:a3:1b:6c:d9:ff:51:80:7e:39: f5:74:d0:15:81:c7:60:dd:71:cf:12:17:e7:17:db: e5:b1:73:f2:ad:11:2d:2c:30:38:bd:b6:6c:9a:70: 9a:d6:3f:fa:5c:ca:6e:50:90:f3:33:73:eb:b8:13: e4:8b:c3:3e:a0:c9:8f:03:82:aa:6b:8b:a3:3e:c5: e9:d8:27:57:3b:54:2b:40:71:91:a3:f0:34:e9:11: f7:e0:49:4f:a7:0c:4c:ba:b5:fa:10:12:99:45:19: cc:33:dd:7c:34:38:1a:bb:01:2b:0d:e4:2c:19:e1: 40:10:c3:f3:8f:b2:d3:45:92:aa:82:fc:d1:b2:7a: 79:a2:99:97:4c:4c:68:5f:25:58:28:0d:d5:62:99: 76:b7:e0:66:4d:2e:51:10:da:c1:24:ad:09:d0:8c: 8a:07:ce:1b:ca:8e:56:1b:ad:75:70:0b:d6:44:2d: 6b:1c:9d:fc:b5:ab:ba:df:91:cb:78:09:44:59:b9: bb:40:0c:d1:7e:0b:b2:97:57:89:a3:c5:2d:28:77: 28:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:AC:51:E2:22:EF:C9:CA:D2:57:45:27:38:97:CD:A8:18:33:33:E9 X509v3 Authority Key Identifier: keyid:7D:50:8B:22:53:50:B0:D2:04:F1:94:3F:4F:53:D4:D8:6A:C4:FC:31 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/9b3b230a-fff1-47f0-bf91-7ceb8d36096e/0/7D508B225350B0D204F1943F4F53D4D86AC4FC31.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7D508B225350B0D204F1943F4F53D4D86AC4FC31.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/9b3b230a-fff1-47f0-bf91-7ceb8d36096e/0/7D508B225350B0D204F1943F4F53D4D86AC4FC31.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 42:0d:39:e7:22:75:a8:72:9d:36:9c:75:78:f7:88:d3:f7:5f: 29:a5:4e:1d:6e:99:e0:1d:e8:d7:52:8d:85:87:6f:c2:1e:2b: 53:d7:b5:90:59:bf:68:7a:00:c0:29:34:4a:4e:e3:b0:29:b4: ee:6b:2b:39:c6:d9:1a:f2:43:f0:49:71:43:7b:4b:34:88:25: d0:d8:15:45:12:8e:96:95:c6:1b:94:e0:fc:ca:95:e8:66:e5: 0f:7c:0f:5f:2a:2c:f4:42:a9:10:fb:45:b9:3e:d1:0c:ad:ab: da:70:22:21:06:2b:2b:e3:e0:2f:f8:c6:e7:ed:4b:49:d8:8d: e1:25:da:69:d5:9b:58:e3:d9:fd:0f:07:79:98:1f:b3:9c:23: cf:d7:6a:2a:2a:98:ff:7f:a3:f4:8a:f5:58:41:0c:1d:e9:26: d9:73:fd:e9:0f:6b:ce:df:b4:ed:31:f4:95:9d:42:54:61:82: ba:d8:c2:f4:56:82:da:46:5d:90:e9:4c:13:e1:88:28:84:b1: e6:39:ff:91:97:91:f8:7c:b1:88:e3:f5:ea:70:87:b5:47:91: c6:78:29:5d:3b:18:c9:c4:7d:81:41:4e:47:b1:1e:27:b3:60: 34:61:3a:67:40:d8:4b:fe:a5:4d:8d:9c:91:89:8d:18:8b:8d: af:ab:56:8e -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUTpfDYDvZctrpJRTRko/vN5obA1kwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoN0Q1MDhCMjI1MzUwQjBEMjA0RjE5NDNGNEY1M0Q0RDg2 QUM0RkMzMTAeFw0yNTEyMTgwNDE3MTBaFw0yNTEyMjExMjUxMTBaMDMxMTAvBgNV BAMTKDcyQUM1MUUyMjJFRkM5Q0FEMjU3NDUyNzM4OTdDREE4MTgzMzMzRTkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCqAMRssxEQvy3WpNJsIK6Tpk4u 7hOhYJOVd+SeTyHz2VaEdRQSihw6mSEzHzEjyxVf4aMbbNn/UYB+OfV00BWBx2Dd cc8SF+cX2+Wxc/KtES0sMDi9tmyacJrWP/pcym5QkPMzc+u4E+SLwz6gyY8Dgqpr i6M+xenYJ1c7VCtAcZGj8DTpEffgSU+nDEy6tfoQEplFGcwz3Xw0OBq7ASsN5CwZ 4UAQw/OPstNFkqqC/NGyenmimZdMTGhfJVgoDdVimXa34GZNLlEQ2sEkrQnQjIoH zhvKjlYbrXVwC9ZELWscnfy1q7rfkct4CURZubtADNF+C7KXV4mjxS0odyh9AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUcqxR4iLvycrSV0UnOJfNqBgzM+kwHwYDVR0j BBgwFoAUfVCLIlNQsNIE8ZQ/T1PU2GrE/DEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 YjNiMjMwYS1mZmYxLTQ3ZjAtYmY5MS03Y2ViOGQzNjA5NmUvMC83RDUwOEIyMjUz NTBCMEQyMDRGMTk0M0Y0RjUzRDREODZBQzRGQzMxLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvN0Q1MDhCMjI1MzUwQjBEMjA0RjE5NDNGNEY1M0Q0RDg2QUM0 RkMzMS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOWIzYjIzMGEtZmZmMS00N2YwLWJm OTEtN2NlYjhkMzYwOTZlLzAvN0Q1MDhCMjI1MzUwQjBEMjA0RjE5NDNGNEY1M0Q0 RDg2QUM0RkMzMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEINOecidahynTacdXj3iNP3XymlTh1umeAd 6NdSjYWHb8IeK1PXtZBZv2h6AMApNEpO47AptO5rKznG2RryQ/BJcUN7SzSIJdDY FUUSjpaVxhuU4PzKlehm5Q98D18qLPRCqRD7Rbk+0Qytq9pwIiEGKyvj4C/4xuft S0nYjeEl2mnVm1jj2f0PB3mYH7OcI8/XaioqmP9/o/SK9VhBDB3pJtlz/ekPa87f tO0x9JWdQlRhgrrYwvRWgtpGXZDpTBPhiCiEseY5/5GXkfh8sYjj9epwh7VHkcZ4 KV07GMnEfYFBTkexHiezYDRhOmdA2Ev+pU2NnJGJjRiLja+rVo4= -----END CERTIFICATE-----Generated at Fri Dec 19 11:19:52 2025 by rpki-client