This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/a6de1a8e-c2b8-4996-9492-6f92c2dfec7a/0/7D9E0EE5BE7273608101D93C5F7FB61CBC0404C7.mft File: 7D9E0EE5BE7273608101D93C5F7FB61CBC0404C7.mft (raw, json) Hash identifier: VX3oFB+OGF6s/IsO7Ek5PqTdEcpY8XXfctH9/HnT13w= Subject key identifier: B9:37:C9:91:73:50:6E:47:01:03:69:42:20:C7:2D:F4:3B:ED:EA:9A Authority key identifier: 7D:9E:0E:E5:BE:72:73:60:81:01:D9:3C:5F:7F:B6:1C:BC:04:04:C7 Certificate issuer: /CN=7D9E0EE5BE7273608101D93C5F7FB61CBC0404C7 Certificate serial: 062E52EE1AC250AAD0F68CED1D958A423DD4836F Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7D9E0EE5BE7273608101D93C5F7FB61CBC0404C7.cer Subject info access: rsync://repo-rpki.idnic.net/repo/a6de1a8e-c2b8-4996-9492-6f92c2dfec7a/0/7D9E0EE5BE7273608101D93C5F7FB61CBC0404C7.mft Manifest number: DE Signing time: Wed 17 Dec 2025 16:50:00 +0000 Manifest this update: Wed 17 Dec 2025 16:45:00 +0000 Manifest next update: Sun 21 Dec 2025 00:33:00 +0000 Files and hashes: 1: 3130332e3136392e3134332e302f32342d3234203d3e20323135373237.roa (hash: Gxx1N7C+QbTulu8Y3abVKzpV17eZ/FeVMjAWzNKkBjk=) 2: 7D9E0EE5BE7273608101D93C5F7FB61CBC0404C7.crl (hash: 4+G6R3Y0TZgnSovFIGozDC++M2nT5jWGTTY3MhTJ0qE=) 3: 3130332e3136392e3134332e302f32342d3234203d3e20313531353831.roa (hash: 4oT7xZVHG5/E0DX/QQMWoNUATmrhrxxUsrgCZ3ThGY4=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/a6de1a8e-c2b8-4996-9492-6f92c2dfec7a/0/7D9E0EE5BE7273608101D93C5F7FB61CBC0404C7.crl rsync://repo-rpki.idnic.net/repo/a6de1a8e-c2b8-4996-9492-6f92c2dfec7a/0/7D9E0EE5BE7273608101D93C5F7FB61CBC0404C7.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7D9E0EE5BE7273608101D93C5F7FB61CBC0404C7.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 21 Dec 2025 00:33:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 06:2e:52:ee:1a:c2:50:aa:d0:f6:8c:ed:1d:95:8a:42:3d:d4:83:6f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7D9E0EE5BE7273608101D93C5F7FB61CBC0404C7 Validity Not Before: Dec 17 16:45:00 2025 GMT Not After : Dec 21 00:33:00 2025 GMT Subject: CN=B937C99173506E470103694220C72DF43BEDEA9A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:15:1c:0b:d2:0e:e5:aa:bb:a2:ec:32:0f:14: 1b:39:a8:1a:97:e2:ff:14:ff:08:5d:e2:38:62:e3: 10:d4:43:40:7e:7b:37:52:9d:2f:11:b8:00:1c:b8: d9:2a:b1:d4:d0:c9:99:06:a7:80:01:14:49:78:d2: 23:ac:09:d9:d3:0d:d2:f0:fe:4c:4a:fc:62:64:92: 60:b4:18:fd:da:1d:eb:62:63:d5:3a:fe:37:c4:21: 89:c1:69:cf:83:94:ae:1d:29:e4:c5:ef:d6:af:ea: bd:5c:ea:47:f2:30:d5:ff:28:b7:c3:a0:d1:01:c9: 42:9d:8d:dc:af:99:67:bb:5b:6a:92:52:1b:48:6c: 5f:42:0a:71:72:bd:37:49:10:25:f2:c3:05:18:25: 4a:be:9a:15:55:83:32:ea:a4:81:cd:20:a0:8d:54: 58:7c:9a:25:13:2f:90:d8:a9:0a:57:63:78:54:94: 93:65:97:4e:1e:8a:35:e0:fb:fd:63:e0:97:3b:05: 5c:59:8b:d8:bd:90:bd:40:69:a6:24:a5:5c:78:4b: 4d:4e:b9:9e:c8:cf:a7:fc:0e:6f:32:25:f6:be:90: 22:2e:23:08:77:8d:8d:d0:cf:e2:ce:dd:6f:8e:f5: b0:8c:e0:f0:96:cf:6f:60:80:03:94:4d:a7:3d:e0: b6:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:37:C9:91:73:50:6E:47:01:03:69:42:20:C7:2D:F4:3B:ED:EA:9A X509v3 Authority Key Identifier: keyid:7D:9E:0E:E5:BE:72:73:60:81:01:D9:3C:5F:7F:B6:1C:BC:04:04:C7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/a6de1a8e-c2b8-4996-9492-6f92c2dfec7a/0/7D9E0EE5BE7273608101D93C5F7FB61CBC0404C7.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7D9E0EE5BE7273608101D93C5F7FB61CBC0404C7.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a6de1a8e-c2b8-4996-9492-6f92c2dfec7a/0/7D9E0EE5BE7273608101D93C5F7FB61CBC0404C7.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 57:df:f9:e8:29:7c:29:40:28:a0:f4:15:32:5f:77:08:f5:3e: 5c:24:fd:90:e6:e4:aa:3a:54:01:ba:d2:c8:f7:27:02:87:22: b7:2d:bf:6b:1e:e8:1c:a6:9e:79:52:40:db:9f:7b:c7:8b:ce: 50:92:66:6d:e3:0e:7f:eb:6d:6e:79:24:90:02:eb:c5:7b:c9: b8:f3:d8:73:fe:35:af:47:93:c9:bd:49:77:4e:bb:da:7f:6c: 22:bd:60:e7:46:8f:58:e3:b3:8c:96:5e:76:c0:4c:5e:68:24: 7a:e1:8b:06:1e:d9:43:ea:c7:5b:58:06:48:79:8a:4d:a0:e7: d3:43:c1:0f:c6:6e:fe:72:35:31:3e:a0:a2:fc:a6:da:5c:13: 16:9b:f9:61:1a:1c:a7:d1:a8:63:2b:fd:dd:1a:5d:0b:7f:8c: cf:59:94:f6:86:c4:98:15:a2:76:a7:86:ae:22:e6:33:8b:94: 95:cb:e2:ea:bf:2a:ff:ff:78:ef:76:91:2d:ab:24:70:ce:fa: dd:59:1d:d2:e6:ea:99:59:0f:ca:d0:7b:d0:58:7f:c4:4b:86: 3a:cb:93:dd:d0:86:41:33:d9:7b:e3:e8:e6:f1:16:a9:71:5b: de:d2:e7:77:52:2a:84:3a:62:33:03:7c:31:d0:dd:3e:64:c5: 8e:fd:9e:24 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUBi5S7hrCUKrQ9oztHZWKQj3Ug28wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoN0Q5RTBFRTVCRTcyNzM2MDgxMDFEOTNDNUY3RkI2MUNC QzA0MDRDNzAeFw0yNTEyMTcxNjQ1MDBaFw0yNTEyMjEwMDMzMDBaMDMxMTAvBgNV BAMTKEI5MzdDOTkxNzM1MDZFNDcwMTAzNjk0MjIwQzcyREY0M0JFREVBOUEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDaFRwL0g7lqrui7DIPFBs5qBqX 4v8U/whd4jhi4xDUQ0B+ezdSnS8RuAAcuNkqsdTQyZkGp4ABFEl40iOsCdnTDdLw /kxK/GJkkmC0GP3aHetiY9U6/jfEIYnBac+DlK4dKeTF79av6r1c6kfyMNX/KLfD oNEByUKdjdyvmWe7W2qSUhtIbF9CCnFyvTdJECXywwUYJUq+mhVVgzLqpIHNIKCN VFh8miUTL5DYqQpXY3hUlJNll04eijXg+/1j4Jc7BVxZi9i9kL1AaaYkpVx4S01O uZ7Iz6f8Dm8yJfa+kCIuIwh3jY3Qz+LO3W+O9bCM4PCWz29ggAOUTac94LYDAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUuTfJkXNQbkcBA2lCIMct9Dvt6powHwYDVR0j BBgwFoAUfZ4O5b5yc2CBAdk8X3+2HLwEBMcwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h NmRlMWE4ZS1jMmI4LTQ5OTYtOTQ5Mi02ZjkyYzJkZmVjN2EvMC83RDlFMEVFNUJF NzI3MzYwODEwMUQ5M0M1RjdGQjYxQ0JDMDQwNEM3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvN0Q5RTBFRTVCRTcyNzM2MDgxMDFEOTNDNUY3RkI2MUNCQzA0 MDRDNy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYTZkZTFhOGUtYzJiOC00OTk2LTk0 OTItNmY5MmMyZGZlYzdhLzAvN0Q5RTBFRTVCRTcyNzM2MDgxMDFEOTNDNUY3RkI2 MUNCQzA0MDRDNy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFff+egpfClAKKD0FTJfdwj1Plwk/ZDm5Ko6 VAG60sj3JwKHIrctv2se6BymnnlSQNufe8eLzlCSZm3jDn/rbW55JJAC68V7ybjz 2HP+Na9Hk8m9SXdOu9p/bCK9YOdGj1jjs4yWXnbATF5oJHrhiwYe2UPqx1tYBkh5 ik2g59NDwQ/Gbv5yNTE+oKL8ptpcExab+WEaHKfRqGMr/d0aXQt/jM9ZlPaGxJgV onanhq4i5jOLlJXL4uq/Kv//eO92kS2rJHDO+t1ZHdLm6plZD8rQe9BYf8RLhjrL k93QhkEz2Xvj6ObxFqlxW97S53dSKoQ6YjMDfDHQ3T5kxY79niQ= -----END CERTIFICATE-----Generated at Fri Dec 19 11:17:31 2025 by rpki-client