This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/af2b1786-1833-4d0a-a139-464433393d78/0/7AD0DDB5789DE529C8697A033978C381FFE40D83.mft File: 7AD0DDB5789DE529C8697A033978C381FFE40D83.mft (raw, json) Hash identifier: FqDLC9MRGvu90vLVpZEvC0qIRMaRl68Kk6f0ZxHwq1g= Subject key identifier: 6F:C2:E9:FC:8A:30:70:05:C6:E8:A8:49:29:14:EC:13:F0:81:B6:C4 Authority key identifier: 7A:D0:DD:B5:78:9D:E5:29:C8:69:7A:03:39:78:C3:81:FF:E4:0D:83 Certificate issuer: /CN=7AD0DDB5789DE529C8697A033978C381FFE40D83 Certificate serial: 345FF5B8EC96EFB73A50C7B647ADAF6DADEC445C Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7AD0DDB5789DE529C8697A033978C381FFE40D83.cer Subject info access: rsync://repo-rpki.idnic.net/repo/af2b1786-1833-4d0a-a139-464433393d78/0/7AD0DDB5789DE529C8697A033978C381FFE40D83.mft Manifest number: 0232 Signing time: Mon 22 Dec 2025 21:11:50 +0000 Manifest this update: Mon 22 Dec 2025 21:06:50 +0000 Manifest next update: Fri 26 Dec 2025 03:37:50 +0000 Files and hashes: 1: 7AD0DDB5789DE529C8697A033978C381FFE40D83.crl (hash: Gq2YomzGq+2kEGLAZj+Ciy1E5veO2R+LdwCQfZqXLic=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/af2b1786-1833-4d0a-a139-464433393d78/0/7AD0DDB5789DE529C8697A033978C381FFE40D83.crl rsync://repo-rpki.idnic.net/repo/af2b1786-1833-4d0a-a139-464433393d78/0/7AD0DDB5789DE529C8697A033978C381FFE40D83.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7AD0DDB5789DE529C8697A033978C381FFE40D83.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 26 Dec 2025 03:37:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 34:5f:f5:b8:ec:96:ef:b7:3a:50:c7:b6:47:ad:af:6d:ad:ec:44:5c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7AD0DDB5789DE529C8697A033978C381FFE40D83 Validity Not Before: Dec 22 21:06:50 2025 GMT Not After : Dec 26 03:37:50 2025 GMT Subject: CN=6FC2E9FC8A307005C6E8A8492914EC13F081B6C4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:7d:71:5f:1c:8f:6a:39:2b:84:bb:49:e0:75: 9b:b3:75:65:b5:dc:07:63:cc:21:dd:03:c5:99:f7: 18:be:ef:98:63:a8:8b:61:20:09:9a:4b:fa:7e:5c: 89:d7:0e:bd:e8:ca:e8:e4:ec:04:c9:08:42:cf:d4: 58:78:40:e4:47:b5:39:87:37:05:fb:86:b5:17:f4: 12:1a:93:5d:99:26:6f:ec:01:d5:02:d1:15:eb:37: 83:49:56:14:99:e3:98:e8:0c:c2:aa:c2:aa:ae:f5: 8e:67:48:47:59:05:38:5e:8e:82:d8:7e:77:5e:85: 6b:94:e8:51:c7:86:86:47:82:4e:3e:f7:b5:bc:73: 2c:49:16:c3:a7:76:6c:b8:76:f8:59:2e:49:5f:ca: fa:18:c2:67:be:22:31:69:f6:02:c7:3a:25:11:bc: c5:0c:73:89:28:32:0b:b5:02:60:91:16:ed:37:23: 31:0c:1f:e7:de:f3:38:11:47:b2:a2:62:0a:4d:0d: ec:1c:71:c1:e9:ee:6e:55:cf:50:1c:30:0f:c4:e9: ff:48:26:c7:5f:15:e8:7d:3c:fe:53:a7:f2:c8:61: 96:64:bb:14:60:24:2e:24:aa:b6:d0:ea:07:5c:1b: d2:27:d8:6f:20:60:8d:c7:c0:a3:59:0b:0e:ac:21: d7:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6F:C2:E9:FC:8A:30:70:05:C6:E8:A8:49:29:14:EC:13:F0:81:B6:C4 X509v3 Authority Key Identifier: keyid:7A:D0:DD:B5:78:9D:E5:29:C8:69:7A:03:39:78:C3:81:FF:E4:0D:83 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/af2b1786-1833-4d0a-a139-464433393d78/0/7AD0DDB5789DE529C8697A033978C381FFE40D83.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7AD0DDB5789DE529C8697A033978C381FFE40D83.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/af2b1786-1833-4d0a-a139-464433393d78/0/7AD0DDB5789DE529C8697A033978C381FFE40D83.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ad:94:4d:48:d9:2e:8b:79:4d:8a:95:75:08:95:b0:f8:66:9c: 67:67:2a:b8:40:b0:ec:31:a6:a9:0a:a1:33:41:ef:f8:d3:b8: c5:25:62:28:44:f1:1e:3a:f9:1e:03:2d:9e:e0:51:63:5f:aa: 74:85:1e:43:88:9a:d1:6e:47:ad:8c:6c:f3:e4:48:25:e0:7d: 2a:a7:a0:df:2a:91:bf:77:6d:6d:8c:1b:72:72:32:23:03:04: 03:0b:4a:61:a1:b1:43:d0:8a:cb:99:32:61:d1:56:f0:a4:36: 91:c7:ae:c7:14:fc:55:a6:80:1c:27:d9:90:da:eb:34:be:db: c8:0c:e1:8b:6b:1c:04:a1:0a:fa:b3:0f:b1:36:a6:fb:16:4d: a7:4c:53:14:f1:a0:70:47:a7:1b:72:a4:9d:d5:4c:d1:57:b7: 60:6e:75:41:0c:5a:a4:30:4e:ab:a7:fa:13:d8:f0:4b:c5:5c: 39:10:da:eb:f8:8c:06:f9:5f:5a:b1:a5:0e:cf:1f:79:6d:69: 92:0d:28:3a:09:27:54:e6:9e:6f:9f:8e:63:67:ec:f4:3e:e2: 15:15:7c:c0:d9:d8:93:77:88:28:2c:cd:3f:72:e3:3a:95:19: 79:c9:45:8a:90:fc:be:9b:38:ae:da:2f:a5:7d:52:f7:1a:03: 6e:cc:76:7b -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUNF/1uOyW77c6UMe2R62vba3sRFwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoN0FEMEREQjU3ODlERTUyOUM4Njk3QTAzMzk3OEMzODFG RkU0MEQ4MzAeFw0yNTEyMjIyMTA2NTBaFw0yNTEyMjYwMzM3NTBaMDMxMTAvBgNV BAMTKDZGQzJFOUZDOEEzMDcwMDVDNkU4QTg0OTI5MTRFQzEzRjA4MUI2QzQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCyfXFfHI9qOSuEu0ngdZuzdWW1 3AdjzCHdA8WZ9xi+75hjqIthIAmaS/p+XInXDr3oyujk7ATJCELP1Fh4QORHtTmH NwX7hrUX9BIak12ZJm/sAdUC0RXrN4NJVhSZ45joDMKqwqqu9Y5nSEdZBThejoLY fndehWuU6FHHhoZHgk4+97W8cyxJFsOndmy4dvhZLklfyvoYwme+IjFp9gLHOiUR vMUMc4koMgu1AmCRFu03IzEMH+fe8zgRR7KiYgpNDewcccHp7m5Vz1AcMA/E6f9I JsdfFeh9PP5Tp/LIYZZkuxRgJC4kqrbQ6gdcG9In2G8gYI3HwKNZCw6sIddhAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUb8Lp/IowcAXG6KhJKRTsE/CBtsQwHwYDVR0j BBgwFoAUetDdtXid5SnIaXoDOXjDgf/kDYMwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h ZjJiMTc4Ni0xODMzLTRkMGEtYTEzOS00NjQ0MzMzOTNkNzgvMC83QUQwRERCNTc4 OURFNTI5Qzg2OTdBMDMzOTc4QzM4MUZGRTQwRDgzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvN0FEMEREQjU3ODlERTUyOUM4Njk3QTAzMzk3OEMzODFGRkU0 MEQ4My5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYWYyYjE3ODYtMTgzMy00ZDBhLWEx MzktNDY0NDMzMzkzZDc4LzAvN0FEMEREQjU3ODlERTUyOUM4Njk3QTAzMzk3OEMz ODFGRkU0MEQ4My5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAK2UTUjZLot5TYqVdQiVsPhmnGdnKrhAsOwx pqkKoTNB7/jTuMUlYihE8R46+R4DLZ7gUWNfqnSFHkOImtFuR62MbPPkSCXgfSqn oN8qkb93bW2MG3JyMiMDBAMLSmGhsUPQisuZMmHRVvCkNpHHrscU/FWmgBwn2ZDa 6zS+28gM4YtrHAShCvqzD7E2pvsWTadMUxTxoHBHpxtypJ3VTNFXt2BudUEMWqQw Tqun+hPY8EvFXDkQ2uv4jAb5X1qxpQ7PH3ltaZINKDoJJ1Tmnm+fjmNn7PQ+4hUV fMDZ2JN3iCgszT9y4zqVGXnJRYqQ/L6bOK7aL6V9UvcaA27Mdns= -----END CERTIFICATE-----Generated at Wed Dec 24 20:25:16 2025 by rpki-client