This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/c3a5ffdc-151a-4aad-a2b7-432649de6dbe/0/B7260D30835B9D812F7044ECE96F4FB8F698379C.mft File: B7260D30835B9D812F7044ECE96F4FB8F698379C.mft (raw, json) Hash identifier: pxzgmku9DmE+99IADs5GHXGLlxS4c5OHrHTXvQhJ06I= Subject key identifier: 61:A4:DA:52:8D:63:7E:63:2B:2A:76:40:4E:E1:78:B1:03:63:1C:13 Authority key identifier: B7:26:0D:30:83:5B:9D:81:2F:70:44:EC:E9:6F:4F:B8:F6:98:37:9C Certificate issuer: /CN=B7260D30835B9D812F7044ECE96F4FB8F698379C Certificate serial: 74C5B1735862F117AA1F9774F3A47E50C3F08ED2 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B7260D30835B9D812F7044ECE96F4FB8F698379C.cer Subject info access: rsync://repo-rpki.idnic.net/repo/c3a5ffdc-151a-4aad-a2b7-432649de6dbe/0/B7260D30835B9D812F7044ECE96F4FB8F698379C.mft Manifest number: 036C Signing time: Sat 20 Dec 2025 15:51:54 +0000 Manifest this update: Sat 20 Dec 2025 15:46:54 +0000 Manifest next update: Wed 24 Dec 2025 00:55:54 +0000 Files and hashes: 1: 3130332e3231372e3230382e302f32322d3234203d3e203338373630.roa (hash: C1fWM39iM3F6U+59gsqeYJ83me8iwLln6AeCDUtsAG4=) 2: B7260D30835B9D812F7044ECE96F4FB8F698379C.crl (hash: KuNajehF74dzm03XIYIpmWnm6ttxsfIN79di3wMdoLc=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/c3a5ffdc-151a-4aad-a2b7-432649de6dbe/0/B7260D30835B9D812F7044ECE96F4FB8F698379C.crl rsync://repo-rpki.idnic.net/repo/c3a5ffdc-151a-4aad-a2b7-432649de6dbe/0/B7260D30835B9D812F7044ECE96F4FB8F698379C.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B7260D30835B9D812F7044ECE96F4FB8F698379C.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 24 Dec 2025 00:55:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 74:c5:b1:73:58:62:f1:17:aa:1f:97:74:f3:a4:7e:50:c3:f0:8e:d2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B7260D30835B9D812F7044ECE96F4FB8F698379C Validity Not Before: Dec 20 15:46:54 2025 GMT Not After : Dec 24 00:55:54 2025 GMT Subject: CN=61A4DA528D637E632B2A76404EE178B103631C13 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:7f:85:70:ef:19:07:9a:8b:c8:a7:68:67:2b: 17:73:4f:c6:a3:d4:b1:8e:8f:84:41:d9:73:e4:7b: aa:74:fc:30:9a:82:9b:7e:e5:cb:73:a4:b9:99:5f: 6e:18:ff:8c:82:ce:e7:23:93:d9:28:19:e6:77:4e: d5:c6:16:1e:9b:c6:bf:e9:5d:9f:44:e4:be:9b:29: b7:15:fa:07:e9:95:29:aa:22:8c:91:fa:bb:8d:95: 80:d6:56:8c:d3:f7:ad:47:5d:5c:4a:ca:b3:e3:66: 2a:9b:3b:3b:3d:2a:bf:ca:1c:16:7b:2f:53:b5:66: 92:23:5c:68:1f:3c:a5:2c:f4:fe:46:78:4c:6c:ad: 0c:67:0f:8b:94:58:d8:b2:ea:3f:1c:88:e5:14:9f: 71:06:37:d3:45:ec:b5:9a:85:93:1f:a0:59:24:0d: 1e:8c:8c:53:bf:a4:c4:a0:ca:00:ef:e8:36:ba:16: 2c:c5:c7:bd:72:85:03:fb:ff:7e:31:74:12:1a:10: 03:d9:88:9c:1c:8d:b6:ba:d0:f5:ef:bd:1c:a8:b5: d0:9b:99:24:c4:d8:7f:ff:7c:3f:b6:ba:06:c8:5c: 48:0b:8e:69:7a:a0:5d:31:20:b0:97:7f:cf:8b:77: a1:04:ad:c9:6e:18:06:9e:1c:3b:b2:23:bd:b0:bd: 1f:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 61:A4:DA:52:8D:63:7E:63:2B:2A:76:40:4E:E1:78:B1:03:63:1C:13 X509v3 Authority Key Identifier: keyid:B7:26:0D:30:83:5B:9D:81:2F:70:44:EC:E9:6F:4F:B8:F6:98:37:9C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/c3a5ffdc-151a-4aad-a2b7-432649de6dbe/0/B7260D30835B9D812F7044ECE96F4FB8F698379C.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B7260D30835B9D812F7044ECE96F4FB8F698379C.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c3a5ffdc-151a-4aad-a2b7-432649de6dbe/0/B7260D30835B9D812F7044ECE96F4FB8F698379C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 95:a6:25:46:94:a6:3e:73:e1:31:d9:10:39:91:22:32:8b:ab: b4:1a:d7:f9:e7:51:f3:3a:82:d2:be:ac:6d:89:cd:44:c6:d0: 24:65:b2:15:67:10:f1:aa:25:8f:cf:5f:9b:ba:15:be:b9:4f: c6:4c:1c:63:b8:8d:5b:dc:e7:26:d6:de:6d:c7:4f:58:15:35: 3c:14:5b:66:f6:45:59:cb:ec:97:8d:ca:8f:9f:e8:77:9d:f5: 16:c1:28:2d:6d:49:b1:da:55:a5:32:34:55:f4:c4:be:d2:a1: 57:a9:24:59:22:ca:8e:1d:75:ea:e3:11:e8:28:1e:7b:36:49: 8d:5c:36:a3:32:91:0d:26:9f:aa:a3:41:e0:ef:d2:22:7e:d3: 82:c9:f8:76:3c:89:0f:d7:57:ab:ce:a3:89:6d:53:8f:5b:cf: 5c:65:6b:33:7b:f8:5e:a4:65:42:78:d2:e9:03:15:77:52:8e: 80:df:33:01:09:96:a7:6c:02:64:6c:0b:b3:db:e2:d3:6a:93: 8f:92:1e:4c:d0:21:b6:3d:5e:16:1a:e8:67:af:df:6e:8b:d5: 5c:59:5e:d5:3f:68:27:62:8e:9d:c6:dd:6d:b5:dd:cc:9e:37: fb:3c:f4:5c:65:9c:53:71:ce:47:0b:c2:66:a1:51:3e:e5:2c: fe:9f:c5:b2 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUdMWxc1hi8ReqH5d086R+UMPwjtIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjcyNjBEMzA4MzVCOUQ4MTJGNzA0NEVDRTk2RjRGQjhG Njk4Mzc5QzAeFw0yNTEyMjAxNTQ2NTRaFw0yNTEyMjQwMDU1NTRaMDMxMTAvBgNV BAMTKDYxQTREQTUyOEQ2MzdFNjMyQjJBNzY0MDRFRTE3OEIxMDM2MzFDMTMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDJf4Vw7xkHmovIp2hnKxdzT8aj 1LGOj4RB2XPke6p0/DCagpt+5ctzpLmZX24Y/4yCzucjk9koGeZ3TtXGFh6bxr/p XZ9E5L6bKbcV+gfplSmqIoyR+ruNlYDWVozT961HXVxKyrPjZiqbOzs9Kr/KHBZ7 L1O1ZpIjXGgfPKUs9P5GeExsrQxnD4uUWNiy6j8ciOUUn3EGN9NF7LWahZMfoFkk DR6MjFO/pMSgygDv6Da6FizFx71yhQP7/34xdBIaEAPZiJwcjba60PXvvRyotdCb mSTE2H//fD+2ugbIXEgLjml6oF0xILCXf8+Ld6EErcluGAaeHDuyI72wvR9nAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUYaTaUo1jfmMrKnZATuF4sQNjHBMwHwYDVR0j BBgwFoAUtyYNMINbnYEvcETs6W9PuPaYN5wwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j M2E1ZmZkYy0xNTFhLTRhYWQtYTJiNy00MzI2NDlkZTZkYmUvMC9CNzI2MEQzMDgz NUI5RDgxMkY3MDQ0RUNFOTZGNEZCOEY2OTgzNzlDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQjcyNjBEMzA4MzVCOUQ4MTJGNzA0NEVDRTk2RjRGQjhGNjk4 Mzc5Qy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYzNhNWZmZGMtMTUxYS00YWFkLWEy YjctNDMyNjQ5ZGU2ZGJlLzAvQjcyNjBEMzA4MzVCOUQ4MTJGNzA0NEVDRTk2RjRG QjhGNjk4Mzc5Qy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJWmJUaUpj5z4THZEDmRIjKLq7Qa1/nnUfM6 gtK+rG2JzUTG0CRlshVnEPGqJY/PX5u6Fb65T8ZMHGO4jVvc5ybW3m3HT1gVNTwU W2b2RVnL7JeNyo+f6Hed9RbBKC1tSbHaVaUyNFX0xL7SoVepJFkiyo4dderjEego Hns2SY1cNqMykQ0mn6qjQeDv0iJ+04LJ+HY8iQ/XV6vOo4ltU49bz1xlazN7+F6k ZUJ40ukDFXdSjoDfMwEJlqdsAmRsC7Pb4tNqk4+SHkzQIbY9XhYa6Gev326L1VxZ XtU/aCdijp3G3W213cyeN/s89FxlnFNxzkcLwmahUT7lLP6fxbI= -----END CERTIFICATE-----Generated at Sun Dec 21 05:37:37 2025 by rpki-client