This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/afcaf27d-64e9-474b-a73b-35adbe9b2f01/0/507CD1ABEB911954F33A18A2DF9A31CE320DAF97.mft File: 507CD1ABEB911954F33A18A2DF9A31CE320DAF97.mft (raw, json) Hash identifier: G12RUpxY8CLMZ22Kn03x3vs5/p2DszV0kALVYPPftNI= Subject key identifier: 78:8D:96:B9:24:8F:E6:93:E4:0C:85:82:E3:9E:D6:F0:55:BF:64:79 Authority key identifier: 50:7C:D1:AB:EB:91:19:54:F3:3A:18:A2:DF:9A:31:CE:32:0D:AF:97 Certificate issuer: /CN=507CD1ABEB911954F33A18A2DF9A31CE320DAF97 Certificate serial: 553488E2682CA1DF06367694B82BD568E4C407A1 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/507CD1ABEB911954F33A18A2DF9A31CE320DAF97.cer Subject info access: rsync://repo-rpki.idnic.net/repo/afcaf27d-64e9-474b-a73b-35adbe9b2f01/0/507CD1ABEB911954F33A18A2DF9A31CE320DAF97.mft Manifest number: 039C Signing time: Wed 17 Dec 2025 06:20:42 +0000 Manifest this update: Wed 17 Dec 2025 06:15:42 +0000 Manifest next update: Sat 20 Dec 2025 08:22:42 +0000 Files and hashes: 1: 507CD1ABEB911954F33A18A2DF9A31CE320DAF97.crl (hash: a+5VwK6+Oq/qBU6XYc+kvNrK7/ZbBzUv8FqNEfZOWSI=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/afcaf27d-64e9-474b-a73b-35adbe9b2f01/0/507CD1ABEB911954F33A18A2DF9A31CE320DAF97.crl rsync://repo-rpki.idnic.net/repo/afcaf27d-64e9-474b-a73b-35adbe9b2f01/0/507CD1ABEB911954F33A18A2DF9A31CE320DAF97.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/507CD1ABEB911954F33A18A2DF9A31CE320DAF97.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 20 Dec 2025 08:22:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 55:34:88:e2:68:2c:a1:df:06:36:76:94:b8:2b:d5:68:e4:c4:07:a1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=507CD1ABEB911954F33A18A2DF9A31CE320DAF97 Validity Not Before: Dec 17 06:15:42 2025 GMT Not After : Dec 20 08:22:42 2025 GMT Subject: CN=788D96B9248FE693E40C8582E39ED6F055BF6479 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:75:50:89:ab:a8:57:85:d1:3f:ba:07:1c:be: bf:80:b4:69:84:1b:cd:d7:21:da:04:e1:84:dd:ab: db:48:e0:d8:1d:ad:2d:21:45:68:e5:13:f8:a7:c1: ea:7e:26:8c:49:6f:5c:af:81:be:42:2b:b3:5d:97: dc:64:0d:a1:ea:9c:a4:fd:d1:08:ee:96:af:ad:01: ad:95:0f:8d:35:85:79:10:ce:c0:e3:9f:3a:ab:ce: 14:1a:56:03:9f:f7:93:e6:c8:3f:52:d9:b9:65:ed: ec:a0:05:e1:71:9a:c6:15:2e:23:3d:89:e5:dc:ff: 5e:4c:32:54:57:61:d6:07:99:82:60:5c:47:bb:51: 71:27:58:08:fe:53:bf:75:d1:c3:09:ee:08:fc:6f: 1c:0f:5c:3f:96:ef:47:b0:06:e9:da:a7:1b:71:ad: 89:ff:52:8b:9d:dc:b4:e3:c6:66:5b:58:46:27:c9: 88:6f:78:11:21:dd:ca:ea:90:88:b3:6b:18:22:6a: 1d:cf:3e:2c:f0:2a:fe:ed:12:b6:a8:43:16:8a:e3: f6:95:09:ed:b1:40:a5:b1:29:9c:8f:be:0c:9a:ea: 01:1a:87:53:b9:86:46:9f:1d:7c:ce:fc:bc:80:ec: c6:86:1a:4d:91:de:04:df:a2:85:f1:6e:f9:f2:09: ac:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 78:8D:96:B9:24:8F:E6:93:E4:0C:85:82:E3:9E:D6:F0:55:BF:64:79 X509v3 Authority Key Identifier: keyid:50:7C:D1:AB:EB:91:19:54:F3:3A:18:A2:DF:9A:31:CE:32:0D:AF:97 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/afcaf27d-64e9-474b-a73b-35adbe9b2f01/0/507CD1ABEB911954F33A18A2DF9A31CE320DAF97.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/507CD1ABEB911954F33A18A2DF9A31CE320DAF97.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/afcaf27d-64e9-474b-a73b-35adbe9b2f01/0/507CD1ABEB911954F33A18A2DF9A31CE320DAF97.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 23:d1:e6:38:ce:5c:9f:13:2f:16:d3:50:92:40:40:5c:b7:58: de:a2:b4:96:da:d7:8d:5b:e0:30:68:f6:bd:5a:dc:f6:b8:fa: 03:6d:13:f0:1a:d6:15:bf:e0:72:a4:51:a9:30:7a:6d:96:0c: 4b:df:e7:ac:53:52:88:c1:18:fd:73:fc:b9:78:c1:fa:07:b1: 60:ce:19:2d:b3:d3:f1:83:d9:dd:53:d8:2b:2b:f9:71:83:0b: eb:3a:9d:5b:85:c6:e6:f9:f9:a6:9a:c1:db:2f:61:1a:f7:b1: a5:e6:ee:cb:d4:83:59:9a:4e:cf:2c:45:a4:b5:82:12:58:b9: 0e:3d:20:cb:36:14:b8:66:22:fe:74:41:10:8d:72:25:3d:d3: 8c:64:a0:85:1d:a5:a9:95:ca:49:7e:4f:7d:ae:e3:14:1f:62: 54:79:e1:a0:07:82:4f:6f:07:c7:e3:f8:12:a5:4e:38:f9:3c: b0:d2:09:22:6d:5f:6f:64:56:4e:70:0a:1a:32:06:d0:c2:73: 93:4e:a7:59:1d:40:56:5f:45:5f:85:8d:03:16:fc:1e:da:cc: 4f:e6:29:03:fa:21:c3:49:63:32:c5:b7:b4:53:d1:89:b7:08: 33:51:87:9c:48:94:5f:cc:a9:be:73:ba:ce:02:cb:68:08:c2: 9b:30:00:69 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUVTSI4mgsod8GNnaUuCvVaOTEB6EwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTA3Q0QxQUJFQjkxMTk1NEYzM0ExOEEyREY5QTMxQ0Uz MjBEQUY5NzAeFw0yNTEyMTcwNjE1NDJaFw0yNTEyMjAwODIyNDJaMDMxMTAvBgNV BAMTKDc4OEQ5NkI5MjQ4RkU2OTNFNDBDODU4MkUzOUVENkYwNTVCRjY0NzkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDVdVCJq6hXhdE/ugccvr+AtGmE G83XIdoE4YTdq9tI4NgdrS0hRWjlE/inwep+JoxJb1yvgb5CK7Ndl9xkDaHqnKT9 0Qjulq+tAa2VD401hXkQzsDjnzqrzhQaVgOf95PmyD9S2bll7eygBeFxmsYVLiM9 ieXc/15MMlRXYdYHmYJgXEe7UXEnWAj+U7910cMJ7gj8bxwPXD+W70ewBunapxtx rYn/Uoud3LTjxmZbWEYnyYhveBEh3crqkIizaxgiah3PPizwKv7tEraoQxaK4/aV Ce2xQKWxKZyPvgya6gEah1O5hkafHXzO/LyA7MaGGk2R3gTfooXxbvnyCawXAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUeI2WuSSP5pPkDIWC457W8FW/ZHkwHwYDVR0j BBgwFoAUUHzRq+uRGVTzOhii35oxzjINr5cwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h ZmNhZjI3ZC02NGU5LTQ3NGItYTczYi0zNWFkYmU5YjJmMDEvMC81MDdDRDFBQkVC OTExOTU0RjMzQTE4QTJERjlBMzFDRTMyMERBRjk3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNTA3Q0QxQUJFQjkxMTk1NEYzM0ExOEEyREY5QTMxQ0UzMjBE QUY5Ny5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYWZjYWYyN2QtNjRlOS00NzRiLWE3 M2ItMzVhZGJlOWIyZjAxLzAvNTA3Q0QxQUJFQjkxMTk1NEYzM0ExOEEyREY5QTMx Q0UzMjBEQUY5Ny5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACPR5jjOXJ8TLxbTUJJAQFy3WN6itJba141b 4DBo9r1a3Pa4+gNtE/Aa1hW/4HKkUakwem2WDEvf56xTUojBGP1z/Ll4wfoHsWDO GS2z0/GD2d1T2Csr+XGDC+s6nVuFxub5+aaawdsvYRr3saXm7svUg1maTs8sRaS1 ghJYuQ49IMs2FLhmIv50QRCNciU904xkoIUdpamVykl+T32u4xQfYlR54aAHgk9v B8fj+BKlTjj5PLDSCSJtX29kVk5wChoyBtDCc5NOp1kdQFZfRV+FjQMW/B7azE/m KQP6IcNJYzLFt7RT0Ym3CDNRh5xIlF/Mqb5zus4Cy2gIwpswAGk= -----END CERTIFICATE-----Generated at Wed Dec 17 16:48:40 2025 by rpki-client