This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/aaa16ec5-587e-47a4-8afe-d1becf56b614/0/1007D15CBBEAABDE199AEFBC2A3FE317B757BD23.mft File: 1007D15CBBEAABDE199AEFBC2A3FE317B757BD23.mft (raw, json) Hash identifier: X1O2DKym2fCXkNFtBuXdFA7F5Paqli0czx2Y4/f/+kc= Subject key identifier: 3C:B2:AC:F8:8B:8E:3F:F3:C4:DF:FB:15:32:C5:8E:8A:45:6E:3F:9B Authority key identifier: 10:07:D1:5C:BB:EA:AB:DE:19:9A:EF:BC:2A:3F:E3:17:B7:57:BD:23 Certificate issuer: /CN=1007D15CBBEAABDE199AEFBC2A3FE317B757BD23 Certificate serial: 5A94CA1142F87A837C970AFD382795D66BE46DB8 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1007D15CBBEAABDE199AEFBC2A3FE317B757BD23.cer Subject info access: rsync://repo-rpki.idnic.net/repo/aaa16ec5-587e-47a4-8afe-d1becf56b614/0/1007D15CBBEAABDE199AEFBC2A3FE317B757BD23.mft Manifest number: 022B Signing time: Fri 19 Dec 2025 00:42:39 +0000 Manifest this update: Fri 19 Dec 2025 00:37:39 +0000 Manifest next update: Mon 22 Dec 2025 02:02:39 +0000 Files and hashes: 1: 1007D15CBBEAABDE199AEFBC2A3FE317B757BD23.crl (hash: 7/GG1BtaDBYlLXkVg3HL+jAMPogPQYgWPrjOnZPBPvo=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/aaa16ec5-587e-47a4-8afe-d1becf56b614/0/1007D15CBBEAABDE199AEFBC2A3FE317B757BD23.crl rsync://repo-rpki.idnic.net/repo/aaa16ec5-587e-47a4-8afe-d1becf56b614/0/1007D15CBBEAABDE199AEFBC2A3FE317B757BD23.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1007D15CBBEAABDE199AEFBC2A3FE317B757BD23.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 22 Dec 2025 02:02:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5a:94:ca:11:42:f8:7a:83:7c:97:0a:fd:38:27:95:d6:6b:e4:6d:b8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1007D15CBBEAABDE199AEFBC2A3FE317B757BD23 Validity Not Before: Dec 19 00:37:39 2025 GMT Not After : Dec 22 02:02:39 2025 GMT Subject: CN=3CB2ACF88B8E3FF3C4DFFB1532C58E8A456E3F9B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:eb:48:84:70:4b:3e:8c:c2:0e:ca:23:a3:71: d3:72:8b:bd:ef:91:57:3a:b5:ca:75:20:74:8f:9a: 52:3a:16:d9:77:db:a2:c6:9c:48:9e:59:6c:83:df: 39:9e:85:97:e0:51:2a:38:6f:8c:9b:2a:5f:ed:89: 20:3c:a6:8f:44:e8:c5:73:cf:e8:24:8e:8f:c9:0b: dd:36:3f:e2:1c:4b:42:0c:c9:c7:41:0c:da:21:cf: 3e:43:7c:59:a3:94:9f:15:3d:c3:22:55:1b:7f:d8: 99:40:5d:14:63:ae:03:81:92:e6:95:5a:b8:3a:41: 9f:e0:42:eb:62:c4:e9:fa:ba:6a:eb:1f:75:f0:1f: 3c:a9:42:b0:d2:d7:f7:07:ab:65:76:90:f9:fc:96: 23:44:d9:c0:72:7b:29:a3:27:6c:b6:c6:a0:c6:ae: db:3e:ac:39:a9:6e:16:60:af:23:9c:c0:89:72:54: ed:f0:11:36:57:db:8a:3d:ca:fd:c4:32:c0:b5:a3: a7:e3:f3:9f:73:c5:ee:fe:8d:61:70:25:5e:b4:a1: fb:7e:a6:cb:e4:b5:b4:b8:86:19:09:32:01:eb:b3: 0f:97:7c:e7:b4:e3:ff:5d:49:ed:21:33:fe:56:3c: 86:7c:f0:d9:47:21:bb:01:c7:15:fa:b6:ec:36:d9: 0d:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:B2:AC:F8:8B:8E:3F:F3:C4:DF:FB:15:32:C5:8E:8A:45:6E:3F:9B X509v3 Authority Key Identifier: keyid:10:07:D1:5C:BB:EA:AB:DE:19:9A:EF:BC:2A:3F:E3:17:B7:57:BD:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/aaa16ec5-587e-47a4-8afe-d1becf56b614/0/1007D15CBBEAABDE199AEFBC2A3FE317B757BD23.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1007D15CBBEAABDE199AEFBC2A3FE317B757BD23.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/aaa16ec5-587e-47a4-8afe-d1becf56b614/0/1007D15CBBEAABDE199AEFBC2A3FE317B757BD23.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b7:60:e9:f3:f5:a9:f0:0e:14:bf:96:96:76:e7:2b:5c:41:a1: 15:1d:4f:7a:4f:d5:88:60:6a:f1:e7:6b:82:1a:83:88:5f:a0: cc:65:a1:28:df:f4:6e:c6:f9:dd:a3:fd:13:47:26:56:69:60: 87:e0:b7:d0:14:f9:25:86:33:3b:6c:20:af:41:36:05:7b:fc: c7:4e:ef:16:a6:13:98:c3:67:28:31:64:26:ac:92:bd:bd:f8: f3:07:42:d7:6c:b1:c8:04:d3:ea:06:7f:4d:06:85:6a:f1:a1: c5:84:85:52:d4:7c:2c:c5:a9:67:a9:8a:06:14:a2:e9:78:eb: b9:b2:88:1c:bb:78:5f:66:62:4c:e8:c0:9a:60:04:49:9e:f5: 58:dc:0e:35:b5:07:ae:a4:ac:1e:0f:7c:d0:c0:fb:20:8c:be: d1:67:0c:7d:7b:1e:0e:c1:da:6f:d1:62:42:58:2f:cd:5f:5f: a4:09:3a:f7:ca:47:9c:e3:50:9c:6f:90:01:a0:37:e6:79:ec: 3c:f5:b0:2e:57:f4:f0:a1:f5:d3:8b:4f:84:3b:fc:87:0a:19: 4d:98:f1:87:bf:f3:1f:55:73:9d:11:63:7d:32:db:66:11:d2: a7:b7:a2:67:7f:02:2c:66:29:a0:23:e1:b5:f6:e0:b4:bf:f3: 44:5b:74:a4 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUWpTKEUL4eoN8lwr9OCeV1mvkbbgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTAwN0QxNUNCQkVBQUJERTE5OUFFRkJDMkEzRkUzMTdC NzU3QkQyMzAeFw0yNTEyMTkwMDM3MzlaFw0yNTEyMjIwMjAyMzlaMDMxMTAvBgNV BAMTKDNDQjJBQ0Y4OEI4RTNGRjNDNERGRkIxNTMyQzU4RThBNDU2RTNGOUIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDH60iEcEs+jMIOyiOjcdNyi73v kVc6tcp1IHSPmlI6Ftl326LGnEieWWyD3zmehZfgUSo4b4ybKl/tiSA8po9E6MVz z+gkjo/JC902P+IcS0IMycdBDNohzz5DfFmjlJ8VPcMiVRt/2JlAXRRjrgOBkuaV Wrg6QZ/gQutixOn6umrrH3XwHzypQrDS1/cHq2V2kPn8liNE2cByeymjJ2y2xqDG rts+rDmpbhZgryOcwIlyVO3wETZX24o9yv3EMsC1o6fj859zxe7+jWFwJV60oft+ psvktbS4hhkJMgHrsw+XfOe04/9dSe0hM/5WPIZ88NlHIbsBxxX6tuw22Q1DAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUPLKs+IuOP/PE3/sVMsWOikVuP5swHwYDVR0j BBgwFoAUEAfRXLvqq94Zmu+8Kj/jF7dXvSMwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h YWExNmVjNS01ODdlLTQ3YTQtOGFmZS1kMWJlY2Y1NmI2MTQvMC8xMDA3RDE1Q0JC RUFBQkRFMTk5QUVGQkMyQTNGRTMxN0I3NTdCRDIzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMTAwN0QxNUNCQkVBQUJERTE5OUFFRkJDMkEzRkUzMTdCNzU3 QkQyMy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYWFhMTZlYzUtNTg3ZS00N2E0LThh ZmUtZDFiZWNmNTZiNjE0LzAvMTAwN0QxNUNCQkVBQUJERTE5OUFFRkJDMkEzRkUz MTdCNzU3QkQyMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALdg6fP1qfAOFL+WlnbnK1xBoRUdT3pP1Yhg avHna4Iag4hfoMxloSjf9G7G+d2j/RNHJlZpYIfgt9AU+SWGMztsIK9BNgV7/MdO 7xamE5jDZygxZCaskr29+PMHQtdsscgE0+oGf00GhWrxocWEhVLUfCzFqWepigYU oul467myiBy7eF9mYkzowJpgBEme9VjcDjW1B66krB4PfNDA+yCMvtFnDH17Hg7B 2m/RYkJYL81fX6QJOvfKR5zjUJxvkAGgN+Z57Dz1sC5X9PCh9dOLT4Q7/IcKGU2Y 8Ye/8x9Vc50RY30y22YR0qe3omd/AixmKaAj4bX24LS/80RbdKQ= -----END CERTIFICATE-----Generated at Fri Dec 19 18:48:03 2025 by rpki-client