This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/bb9851b1-5a6d-4e75-9fff-c03a9c49cf69/0/D7F23D7B54890F0EECF550FFA42799B64D9BD4C9.mft File: D7F23D7B54890F0EECF550FFA42799B64D9BD4C9.mft (raw, json) Hash identifier: g0sjZZEjN9CPC5RZzNOv3CuwC6EQCbg/mD0x2RuCUXw= Subject key identifier: 41:15:FC:B8:10:50:84:B4:5D:26:0B:E4:2B:96:16:E7:19:12:BB:5D Authority key identifier: D7:F2:3D:7B:54:89:0F:0E:EC:F5:50:FF:A4:27:99:B6:4D:9B:D4:C9 Certificate issuer: /CN=D7F23D7B54890F0EECF550FFA42799B64D9BD4C9 Certificate serial: 30A4277D67DA9C6EC9B04A88AF14D9ABBCECE4FC Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D7F23D7B54890F0EECF550FFA42799B64D9BD4C9.cer Subject info access: rsync://repo-rpki.idnic.net/repo/bb9851b1-5a6d-4e75-9fff-c03a9c49cf69/0/D7F23D7B54890F0EECF550FFA42799B64D9BD4C9.mft Manifest number: 012C Signing time: Tue 16 Dec 2025 18:11:23 +0000 Manifest this update: Tue 16 Dec 2025 18:06:23 +0000 Manifest next update: Sat 20 Dec 2025 02:51:23 +0000 Files and hashes: 1: D7F23D7B54890F0EECF550FFA42799B64D9BD4C9.crl (hash: u3Qfb8TOyZx06mU3/OCUwaHkZfF1BsJF1K0TJez1z2Y=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/bb9851b1-5a6d-4e75-9fff-c03a9c49cf69/0/D7F23D7B54890F0EECF550FFA42799B64D9BD4C9.crl rsync://repo-rpki.idnic.net/repo/bb9851b1-5a6d-4e75-9fff-c03a9c49cf69/0/D7F23D7B54890F0EECF550FFA42799B64D9BD4C9.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D7F23D7B54890F0EECF550FFA42799B64D9BD4C9.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 20 Dec 2025 02:51:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 30:a4:27:7d:67:da:9c:6e:c9:b0:4a:88:af:14:d9:ab:bc:ec:e4:fc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D7F23D7B54890F0EECF550FFA42799B64D9BD4C9 Validity Not Before: Dec 16 18:06:23 2025 GMT Not After : Dec 20 02:51:23 2025 GMT Subject: CN=4115FCB8105084B45D260BE42B9616E71912BB5D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:31:78:c8:a3:a2:67:ad:16:21:c7:fd:4c:61: 58:51:2e:56:68:d1:02:30:34:8c:62:ec:f8:fa:34: 52:bf:de:74:94:bd:a6:84:4a:30:6a:ae:e8:1e:b2: 1e:29:c8:76:e8:e1:e7:76:fd:f5:65:73:9f:1e:05: e8:fe:37:29:53:6f:14:73:de:68:7a:e7:fa:0e:54: a3:91:bc:1d:c6:47:59:a0:b7:85:66:52:08:a1:ee: 85:d6:fd:8f:2f:79:e9:fe:c1:f0:d2:98:68:a4:68: 20:e4:b6:44:25:34:8a:aa:3e:b3:04:c3:b8:16:4e: 3e:c0:d4:00:a2:e2:b1:11:87:c8:a9:d5:84:7f:27: 31:4d:23:6f:6d:29:e4:90:4d:69:e6:48:74:67:82: 0f:2e:f5:a2:85:93:19:49:c2:bd:c5:19:da:72:b1: 1e:72:5c:bf:b8:36:52:4f:b0:4a:af:1b:f7:20:83: 5d:91:47:aa:f2:09:2b:ef:9e:8a:e5:d6:84:a7:56: 3c:5c:01:0b:49:30:e1:9f:75:18:5e:47:4d:64:84: 6b:1a:4d:62:7a:e0:72:1e:6a:41:ce:ce:ab:b6:47: 56:09:4b:1b:3c:bc:b6:ac:63:68:0e:87:8c:57:5a: 81:50:30:f1:26:20:9c:96:69:4d:4f:66:e1:9b:88: 41:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:15:FC:B8:10:50:84:B4:5D:26:0B:E4:2B:96:16:E7:19:12:BB:5D X509v3 Authority Key Identifier: keyid:D7:F2:3D:7B:54:89:0F:0E:EC:F5:50:FF:A4:27:99:B6:4D:9B:D4:C9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/bb9851b1-5a6d-4e75-9fff-c03a9c49cf69/0/D7F23D7B54890F0EECF550FFA42799B64D9BD4C9.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D7F23D7B54890F0EECF550FFA42799B64D9BD4C9.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/bb9851b1-5a6d-4e75-9fff-c03a9c49cf69/0/D7F23D7B54890F0EECF550FFA42799B64D9BD4C9.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c7:c2:e3:77:78:89:61:a5:72:cd:4b:03:40:8d:ce:ac:53:97: b4:8e:15:81:21:cd:dc:f3:bb:bc:56:54:e7:a5:af:12:bb:27: e8:00:6e:75:b9:8f:4b:f8:68:dd:16:0c:93:fd:bd:bb:ab:a3: df:7c:1b:69:20:a3:76:0c:a7:fc:3d:04:79:94:5a:21:8b:e5: 01:77:d8:0a:fe:7c:0d:7a:a8:ad:4b:01:f3:57:63:96:fc:d0: 2f:3c:69:d3:a7:25:c8:4e:ac:3d:2d:13:ab:9c:fb:9c:8a:76: 41:81:56:fe:f8:67:94:ab:70:ed:02:c0:19:64:37:1c:1c:2e: a0:64:56:1a:98:5d:ae:7f:56:f4:2b:6b:f5:f3:f9:7b:73:08: 90:e4:0b:e6:56:c6:8b:24:5f:22:90:a1:77:f8:c9:f0:68:79: 7c:da:94:45:64:de:e4:d7:34:34:29:e6:81:09:c7:7e:d2:9b: 97:f8:c3:a9:ae:09:f4:fb:ac:2a:8d:9c:0f:c8:c2:cd:f8:78: 02:6a:84:55:5a:66:dc:b6:49:1b:2c:0b:5e:ac:1c:71:5f:f0: 5e:9e:0d:12:eb:a5:5f:48:ae:c9:a5:f6:74:21:c7:01:e1:51: 8c:1d:d6:a8:86:ae:32:a1:39:eb:18:4d:d5:c3:32:97:5f:c5: 7e:31:c5:d2 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUMKQnfWfanG7JsEqIrxTZq7zs5PwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDdGMjNEN0I1NDg5MEYwRUVDRjU1MEZGQTQyNzk5QjY0 RDlCRDRDOTAeFw0yNTEyMTYxODA2MjNaFw0yNTEyMjAwMjUxMjNaMDMxMTAvBgNV BAMTKDQxMTVGQ0I4MTA1MDg0QjQ1RDI2MEJFNDJCOTYxNkU3MTkxMkJCNUQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDnMXjIo6JnrRYhx/1MYVhRLlZo 0QIwNIxi7Pj6NFK/3nSUvaaESjBqrugesh4pyHbo4ed2/fVlc58eBej+NylTbxRz 3mh65/oOVKORvB3GR1mgt4VmUgih7oXW/Y8veen+wfDSmGikaCDktkQlNIqqPrME w7gWTj7A1ACi4rERh8ip1YR/JzFNI29tKeSQTWnmSHRngg8u9aKFkxlJwr3FGdpy sR5yXL+4NlJPsEqvG/cgg12RR6ryCSvvnorl1oSnVjxcAQtJMOGfdRheR01khGsa TWJ64HIeakHOzqu2R1YJSxs8vLasY2gOh4xXWoFQMPEmIJyWaU1PZuGbiEEpAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUQRX8uBBQhLRdJgvkK5YW5xkSu10wHwYDVR0j BBgwFoAU1/I9e1SJDw7s9VD/pCeZtk2b1MkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i Yjk4NTFiMS01YTZkLTRlNzUtOWZmZi1jMDNhOWM0OWNmNjkvMC9EN0YyM0Q3QjU0 ODkwRjBFRUNGNTUwRkZBNDI3OTlCNjREOUJENEM5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRDdGMjNEN0I1NDg5MEYwRUVDRjU1MEZGQTQyNzk5QjY0RDlC RDRDOS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYmI5ODUxYjEtNWE2ZC00ZTc1LTlm ZmYtYzAzYTljNDljZjY5LzAvRDdGMjNEN0I1NDg5MEYwRUVDRjU1MEZGQTQyNzk5 QjY0RDlCRDRDOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAMfC43d4iWGlcs1LA0CNzqxTl7SOFYEhzdzz u7xWVOelrxK7J+gAbnW5j0v4aN0WDJP9vburo998G2kgo3YMp/w9BHmUWiGL5QF3 2Ar+fA16qK1LAfNXY5b80C88adOnJchOrD0tE6uc+5yKdkGBVv74Z5SrcO0CwBlk NxwcLqBkVhqYXa5/VvQra/Xz+XtzCJDkC+ZWxoskXyKQoXf4yfBoeXzalEVk3uTX NDQp5oEJx37Sm5f4w6muCfT7rCqNnA/Iws34eAJqhFVaZty2SRssC16sHHFf8F6e DRLrpV9Irsml9nQhxwHhUYwd1qiGrjKhOesYTdXDMpdfxX4xxdI= -----END CERTIFICATE-----Generated at Fri Dec 19 18:12:20 2025 by rpki-client