This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/bb9851b1-5a6d-4e75-9fff-c03a9c49cf69/0/D7F23D7B54890F0EECF550FFA42799B64D9BD4C9.mft File: D7F23D7B54890F0EECF550FFA42799B64D9BD4C9.mft (raw, json) Hash identifier: HppX8XfeTLL5NBHHO0WQIXaI30PoVpjYMaptiVeWOoA= Subject key identifier: 7E:07:DC:77:87:7D:DD:00:69:93:6D:37:9E:B7:C0:F9:BD:9B:00:BE Authority key identifier: D7:F2:3D:7B:54:89:0F:0E:EC:F5:50:FF:A4:27:99:B6:4D:9B:D4:C9 Certificate issuer: /CN=D7F23D7B54890F0EECF550FFA42799B64D9BD4C9 Certificate serial: 4B6258A3CA41481790F0ECD41EB5C44E31A791B0 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D7F23D7B54890F0EECF550FFA42799B64D9BD4C9.cer Subject info access: rsync://repo-rpki.idnic.net/repo/bb9851b1-5a6d-4e75-9fff-c03a9c49cf69/0/D7F23D7B54890F0EECF550FFA42799B64D9BD4C9.mft Manifest number: 012F Signing time: Tue 23 Dec 2025 10:01:24 +0000 Manifest this update: Tue 23 Dec 2025 09:56:24 +0000 Manifest next update: Fri 26 Dec 2025 17:20:24 +0000 Files and hashes: 1: D7F23D7B54890F0EECF550FFA42799B64D9BD4C9.crl (hash: 8Y44EjV5hHV9m9VIUTdN0Tep1EygklhV7hBVgiRzhlY=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/bb9851b1-5a6d-4e75-9fff-c03a9c49cf69/0/D7F23D7B54890F0EECF550FFA42799B64D9BD4C9.crl rsync://repo-rpki.idnic.net/repo/bb9851b1-5a6d-4e75-9fff-c03a9c49cf69/0/D7F23D7B54890F0EECF550FFA42799B64D9BD4C9.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D7F23D7B54890F0EECF550FFA42799B64D9BD4C9.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 26 Dec 2025 17:20:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4b:62:58:a3:ca:41:48:17:90:f0:ec:d4:1e:b5:c4:4e:31:a7:91:b0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D7F23D7B54890F0EECF550FFA42799B64D9BD4C9 Validity Not Before: Dec 23 09:56:24 2025 GMT Not After : Dec 26 17:20:24 2025 GMT Subject: CN=7E07DC77877DDD0069936D379EB7C0F9BD9B00BE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:7e:a6:3e:21:43:cf:37:1c:83:58:07:a8:00: 3b:25:83:70:0b:86:7f:fa:89:24:f2:82:d0:c8:2b: 6a:38:ac:4b:c8:9e:97:7f:13:44:76:34:b8:f5:a3: 29:e9:dc:95:c2:91:d6:2a:11:51:31:5f:74:48:5e: c0:85:c9:0c:22:ce:16:02:5e:81:93:42:05:69:5c: 5b:6b:24:cc:07:57:27:81:36:77:6d:c0:4b:a4:ec: 64:de:c9:56:5e:8e:fe:ac:20:f9:20:50:92:d9:5c: 41:81:40:90:9b:70:71:88:11:85:8b:78:f7:d6:50: 2f:f0:1a:f7:20:32:c6:3e:63:de:4a:ee:26:a6:f7: 89:bb:56:7e:06:89:92:76:33:ec:22:9c:16:88:53: 08:2e:ff:35:b1:7c:e9:71:82:a8:34:56:46:70:70: 8c:43:cd:69:3f:85:88:3a:19:8b:ae:2f:2b:61:dd: 06:ea:65:ed:7b:d7:54:4d:b7:de:25:c2:08:9e:af: 2a:62:48:c1:bf:9b:f1:8c:6a:94:7f:72:df:f3:c9: ad:93:e4:77:b9:3d:5e:02:55:40:ae:74:60:e0:ed: 9e:37:df:f2:a9:74:12:05:bc:03:2c:9f:a9:99:8a: b1:24:6c:92:29:f9:5f:b3:95:2d:75:5a:81:e8:09: 8e:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7E:07:DC:77:87:7D:DD:00:69:93:6D:37:9E:B7:C0:F9:BD:9B:00:BE X509v3 Authority Key Identifier: keyid:D7:F2:3D:7B:54:89:0F:0E:EC:F5:50:FF:A4:27:99:B6:4D:9B:D4:C9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/bb9851b1-5a6d-4e75-9fff-c03a9c49cf69/0/D7F23D7B54890F0EECF550FFA42799B64D9BD4C9.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D7F23D7B54890F0EECF550FFA42799B64D9BD4C9.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/bb9851b1-5a6d-4e75-9fff-c03a9c49cf69/0/D7F23D7B54890F0EECF550FFA42799B64D9BD4C9.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 28:ab:c6:7a:66:7b:2d:47:c7:33:89:ab:95:98:ee:32:0b:6a: bf:77:65:3c:8d:b3:24:d4:b1:a7:64:17:4a:97:02:68:83:09: 66:91:d9:f5:b9:a6:c7:6c:55:3b:29:de:6a:e1:e0:84:b9:1a: 15:99:07:10:03:5d:b9:5e:ba:c6:05:27:34:8b:eb:23:b1:e7: a8:3c:49:5f:0a:0b:d2:8d:8d:bb:01:12:dd:7e:2b:b0:e8:eb: 4b:d7:e4:c7:36:b9:79:33:e8:6c:bf:83:42:c8:63:ed:04:46: 2b:7a:86:d4:58:e2:3c:b4:86:a8:02:fe:a4:55:49:c5:b7:ef: 7c:ec:cb:76:ea:30:94:fe:e5:4d:ca:d7:c5:de:61:58:80:06: 4f:68:4c:b9:22:5f:65:1a:2e:88:5d:9d:7b:d8:b2:c5:b9:d4: d8:82:e6:93:59:cd:a2:fc:0d:e9:e3:bd:04:cb:19:30:89:b5: a2:a9:7b:57:b9:8f:82:c3:94:d3:28:b1:17:9a:18:ac:72:04: b0:6c:1b:2f:f3:83:04:c1:7b:40:34:c6:e4:a5:13:2c:d6:c8: 9c:f7:e4:fe:e0:c3:68:9b:c8:93:e2:ca:08:6e:f0:60:be:8c: c6:93:5c:e2:9f:e4:7a:fb:8e:99:d3:af:ed:da:05:1e:98:54: ed:4f:e2:25 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUS2JYo8pBSBeQ8OzUHrXETjGnkbAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDdGMjNEN0I1NDg5MEYwRUVDRjU1MEZGQTQyNzk5QjY0 RDlCRDRDOTAeFw0yNTEyMjMwOTU2MjRaFw0yNTEyMjYxNzIwMjRaMDMxMTAvBgNV BAMTKDdFMDdEQzc3ODc3REREMDA2OTkzNkQzNzlFQjdDMEY5QkQ5QjAwQkUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDVfqY+IUPPNxyDWAeoADslg3AL hn/6iSTygtDIK2o4rEvInpd/E0R2NLj1oynp3JXCkdYqEVExX3RIXsCFyQwizhYC XoGTQgVpXFtrJMwHVyeBNndtwEuk7GTeyVZejv6sIPkgUJLZXEGBQJCbcHGIEYWL ePfWUC/wGvcgMsY+Y95K7iam94m7Vn4GiZJ2M+winBaIUwgu/zWxfOlxgqg0VkZw cIxDzWk/hYg6GYuuLyth3QbqZe1711RNt94lwgierypiSMG/m/GMapR/ct/zya2T 5He5PV4CVUCudGDg7Z433/KpdBIFvAMsn6mZirEkbJIp+V+zlS11WoHoCY7fAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUfgfcd4d93QBpk203nrfA+b2bAL4wHwYDVR0j BBgwFoAU1/I9e1SJDw7s9VD/pCeZtk2b1MkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i Yjk4NTFiMS01YTZkLTRlNzUtOWZmZi1jMDNhOWM0OWNmNjkvMC9EN0YyM0Q3QjU0 ODkwRjBFRUNGNTUwRkZBNDI3OTlCNjREOUJENEM5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRDdGMjNEN0I1NDg5MEYwRUVDRjU1MEZGQTQyNzk5QjY0RDlC RDRDOS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYmI5ODUxYjEtNWE2ZC00ZTc1LTlm ZmYtYzAzYTljNDljZjY5LzAvRDdGMjNEN0I1NDg5MEYwRUVDRjU1MEZGQTQyNzk5 QjY0RDlCRDRDOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACirxnpmey1HxzOJq5WY7jILar93ZTyNsyTU sadkF0qXAmiDCWaR2fW5psdsVTsp3mrh4IS5GhWZBxADXbleusYFJzSL6yOx56g8 SV8KC9KNjbsBEt1+K7Do60vX5Mc2uXkz6Gy/g0LIY+0ERit6htRY4jy0hqgC/qRV ScW373zsy3bqMJT+5U3K18XeYViABk9oTLkiX2UaLohdnXvYssW51NiC5pNZzaL8 DenjvQTLGTCJtaKpe1e5j4LDlNMosReaGKxyBLBsGy/zgwTBe0A0xuSlEyzWyJz3 5P7gw2ibyJPiyghu8GC+jMaTXOKf5Hr7jpnTr+3aBR6YVO1P4iU= -----END CERTIFICATE-----Generated at Thu Dec 25 02:27:28 2025 by rpki-client