This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/acc6bd73-f9bd-4f5a-9c59-fbea1bd83473/0/7A216F23D8A228FBB8F563EC15DF76FD503231B3.mft File: 7A216F23D8A228FBB8F563EC15DF76FD503231B3.mft (raw, json) Hash identifier: BxhfxxCIxfMzZAvs6c+OrGr/b4co/uTbJwHFafdHk2E= Subject key identifier: EE:7A:39:4F:4E:EE:6B:7B:63:D3:9D:28:0C:CD:7A:A1:64:4D:77:0F Authority key identifier: 7A:21:6F:23:D8:A2:28:FB:B8:F5:63:EC:15:DF:76:FD:50:32:31:B3 Certificate issuer: /CN=7A216F23D8A228FBB8F563EC15DF76FD503231B3 Certificate serial: 16746E0DE1EAF58D01681683C871595B30DD9D0F Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7A216F23D8A228FBB8F563EC15DF76FD503231B3.cer Subject info access: rsync://repo-rpki.idnic.net/repo/acc6bd73-f9bd-4f5a-9c59-fbea1bd83473/0/7A216F23D8A228FBB8F563EC15DF76FD503231B3.mft Manifest number: 0226 Signing time: Wed 24 Dec 2025 16:52:18 +0000 Manifest this update: Wed 24 Dec 2025 16:47:18 +0000 Manifest next update: Sat 27 Dec 2025 18:19:18 +0000 Files and hashes: 1: 3130332e32302e3130382e302f32332d3233203d3e20313530323338.roa (hash: h3F9Llj9O7Xku7uQRgTprbQZ0BqnZP4nbNoiUb3SuDY=) 2: 3130332e32302e3130382e302f32342d3234203d3e20313534323137.roa (hash: YevEYsnpyXjpiEIMiyxhrulrrR0dSrjcBVrRlWG52Uk=) 3: 3130332e32302e3130392e302f32342d3234203d3e20313439373037.roa (hash: 3msI/ygFttmp4PXSnBx54sTyPLJ5YCmXmK79NjZs9sY=) 4: 7A216F23D8A228FBB8F563EC15DF76FD503231B3.crl (hash: JXuqwr5UM3LEHJUVTj6lXU4l3w41L3jjT5d40smWQGU=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/acc6bd73-f9bd-4f5a-9c59-fbea1bd83473/0/7A216F23D8A228FBB8F563EC15DF76FD503231B3.crl rsync://repo-rpki.idnic.net/repo/acc6bd73-f9bd-4f5a-9c59-fbea1bd83473/0/7A216F23D8A228FBB8F563EC15DF76FD503231B3.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7A216F23D8A228FBB8F563EC15DF76FD503231B3.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 27 Dec 2025 18:19:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 16:74:6e:0d:e1:ea:f5:8d:01:68:16:83:c8:71:59:5b:30:dd:9d:0f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7A216F23D8A228FBB8F563EC15DF76FD503231B3 Validity Not Before: Dec 24 16:47:18 2025 GMT Not After : Dec 27 18:19:18 2025 GMT Subject: CN=EE7A394F4EEE6B7B63D39D280CCD7AA1644D770F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:cf:04:fc:0e:b8:2f:6d:78:ec:9a:a3:12:91: 7a:e4:28:3a:c0:9d:12:5d:7f:e1:90:f6:6f:df:a3: e6:28:df:42:72:cf:77:a6:7d:9b:8c:65:c3:f3:61: 3a:b3:47:f0:3b:fd:f0:a5:5f:d2:f3:de:2e:fb:a5: 59:07:ba:81:53:1b:9b:b5:ab:cd:3c:b3:58:32:ce: e6:d4:45:18:e3:5f:0f:94:15:ff:8c:39:10:86:2b: 5b:7a:87:7a:58:66:f8:cb:a1:ba:79:c1:3b:13:d4: d8:b9:bc:a1:da:b5:9b:ce:77:20:d3:f9:5e:09:ee: 0c:91:fc:1d:fd:0f:d6:63:dd:9c:03:6d:5f:2d:2a: 8d:c8:f1:33:b8:0b:9a:e0:e9:84:8e:20:ed:34:a6: e0:96:31:72:27:eb:82:e6:31:97:66:52:19:33:b2: 20:26:be:02:8d:57:c4:1c:24:db:6c:74:0f:60:3a: bc:ff:bb:97:04:07:d3:03:f2:37:4a:58:eb:e6:d7: e8:ab:14:5d:8a:5f:15:9e:ed:94:0b:37:08:77:4b: da:05:c4:53:46:7b:58:b0:0f:ec:94:64:cd:85:99: d8:fc:45:ee:75:16:94:02:f0:72:e0:fa:eb:b9:52: 0f:bc:f3:a8:f1:73:c3:65:51:64:7a:85:6d:2f:60: 22:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EE:7A:39:4F:4E:EE:6B:7B:63:D3:9D:28:0C:CD:7A:A1:64:4D:77:0F X509v3 Authority Key Identifier: keyid:7A:21:6F:23:D8:A2:28:FB:B8:F5:63:EC:15:DF:76:FD:50:32:31:B3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/acc6bd73-f9bd-4f5a-9c59-fbea1bd83473/0/7A216F23D8A228FBB8F563EC15DF76FD503231B3.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7A216F23D8A228FBB8F563EC15DF76FD503231B3.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/acc6bd73-f9bd-4f5a-9c59-fbea1bd83473/0/7A216F23D8A228FBB8F563EC15DF76FD503231B3.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5f:da:40:dc:09:be:b1:63:3f:aa:b3:dc:1f:8b:4d:62:11:17: 11:7e:65:4e:2a:17:c9:7f:ed:8f:e3:c2:c6:d9:10:9e:47:64: 85:22:3d:49:72:ff:94:37:84:6d:da:73:33:cf:a7:4a:b2:e0: 11:60:9f:41:43:44:61:b2:42:b5:4c:9c:f8:a2:01:d1:0e:4f: 67:55:77:08:a6:d1:04:a1:0a:e6:78:29:0a:84:69:da:28:3e: 23:77:94:5f:69:b9:d7:64:6c:0c:97:c9:2a:b8:2a:8d:51:cc: 6b:8f:18:88:7e:0b:b8:12:06:85:10:ff:eb:be:18:98:95:ec: 65:48:8f:30:eb:ef:7d:41:ec:4f:82:fb:96:e3:0d:a9:67:5a: 9e:4c:32:9e:7e:0a:a5:35:f3:1c:60:40:8e:0c:d3:a8:5d:d4: 55:86:46:68:f4:e5:e7:b7:bf:2f:82:cb:2b:36:e9:55:af:f9: 66:56:fe:d9:90:38:54:d6:e1:0d:2a:26:ca:e0:0a:14:29:a7: 06:12:42:ac:1f:1c:1c:44:de:d0:20:55:12:95:61:93:c4:03: ba:77:29:31:c7:f8:0c:fc:eb:47:6e:f8:05:03:46:d6:61:3e: f1:0c:23:fd:af:55:80:d1:5b:89:52:cf:af:60:dd:0a:27:e9: 57:a1:bc:46 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUFnRuDeHq9Y0BaBaDyHFZWzDdnQ8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoN0EyMTZGMjNEOEEyMjhGQkI4RjU2M0VDMTVERjc2RkQ1 MDMyMzFCMzAeFw0yNTEyMjQxNjQ3MThaFw0yNTEyMjcxODE5MThaMDMxMTAvBgNV BAMTKEVFN0EzOTRGNEVFRTZCN0I2M0QzOUQyODBDQ0Q3QUExNjQ0RDc3MEYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDEzwT8DrgvbXjsmqMSkXrkKDrA nRJdf+GQ9m/fo+Yo30Jyz3emfZuMZcPzYTqzR/A7/fClX9Lz3i77pVkHuoFTG5u1 q808s1gyzubURRjjXw+UFf+MORCGK1t6h3pYZvjLobp5wTsT1Ni5vKHatZvOdyDT +V4J7gyR/B39D9Zj3ZwDbV8tKo3I8TO4C5rg6YSOIO00puCWMXIn64LmMZdmUhkz siAmvgKNV8QcJNtsdA9gOrz/u5cEB9MD8jdKWOvm1+irFF2KXxWe7ZQLNwh3S9oF xFNGe1iwD+yUZM2Fmdj8Re51FpQC8HLg+uu5Ug+886jxc8NlUWR6hW0vYCL9AgMB AAGjggI8MIICODAdBgNVHQ4EFgQU7no5T07ua3tj050oDM16oWRNdw8wHwYDVR0j BBgwFoAUeiFvI9iiKPu49WPsFd92/VAyMbMwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h Y2M2YmQ3My1mOWJkLTRmNWEtOWM1OS1mYmVhMWJkODM0NzMvMC83QTIxNkYyM0Q4 QTIyOEZCQjhGNTYzRUMxNURGNzZGRDUwMzIzMUIzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvN0EyMTZGMjNEOEEyMjhGQkI4RjU2M0VDMTVERjc2RkQ1MDMy MzFCMy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYWNjNmJkNzMtZjliZC00ZjVhLTlj NTktZmJlYTFiZDgzNDczLzAvN0EyMTZGMjNEOEEyMjhGQkI4RjU2M0VDMTVERjc2 RkQ1MDMyMzFCMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAF/aQNwJvrFjP6qz3B+LTWIRFxF+ZU4qF8l/ 7Y/jwsbZEJ5HZIUiPUly/5Q3hG3aczPPp0qy4BFgn0FDRGGyQrVMnPiiAdEOT2dV dwim0QShCuZ4KQqEadooPiN3lF9puddkbAyXySq4Ko1RzGuPGIh+C7gSBoUQ/+u+ GJiV7GVIjzDr731B7E+C+5bjDalnWp5MMp5+CqU18xxgQI4M06hd1FWGRmj05ee3 vy+Cyys26VWv+WZW/tmQOFTW4Q0qJsrgChQppwYSQqwfHBxE3tAgVRKVYZPEA7p3 KTHH+Az860du+AUDRtZhPvEMI/2vVYDRW4lSz69g3Qon6VehvEY= -----END CERTIFICATE-----Generated at Wed Dec 24 23:26:03 2025 by rpki-client