This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/ce3d8c03-17bb-4cab-8526-118f587dcc09/0/7B9F50722EE5D5DB8DF552ED32CB8764B64FA902.mft File: 7B9F50722EE5D5DB8DF552ED32CB8764B64FA902.mft (raw, json) Hash identifier: X3Q+lurFT0BfWEIrVQUoL/hgnlqtLn8JrdnFG3STjRw= Subject key identifier: 6F:79:D7:87:6D:7E:55:95:DD:E8:CB:2A:D5:B8:6E:CB:54:04:B0:87 Authority key identifier: 7B:9F:50:72:2E:E5:D5:DB:8D:F5:52:ED:32:CB:87:64:B6:4F:A9:02 Certificate issuer: /CN=7B9F50722EE5D5DB8DF552ED32CB8764B64FA902 Certificate serial: 46045E4EB3B6BD85FC5D4C88710BA7D7D810A12E Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7B9F50722EE5D5DB8DF552ED32CB8764B64FA902.cer Subject info access: rsync://repo-rpki.idnic.net/repo/ce3d8c03-17bb-4cab-8526-118f587dcc09/0/7B9F50722EE5D5DB8DF552ED32CB8764B64FA902.mft Manifest number: 0154 Signing time: Wed 24 Dec 2025 07:42:28 +0000 Manifest this update: Wed 24 Dec 2025 07:37:28 +0000 Manifest next update: Sat 27 Dec 2025 13:03:28 +0000 Files and hashes: 1: 3130332e3138332e3130302e302f32332d3234203d3e20313439363730.roa (hash: 5MhHdS5d9rGYEWQQUwZMj2uRPg7u67+gzfI6p1UW8Ho=) 2: 7B9F50722EE5D5DB8DF552ED32CB8764B64FA902.crl (hash: EaIMXJS96pOyVHWkw7tRI3nJ4kq7nA0sZHEhXPlN43w=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/ce3d8c03-17bb-4cab-8526-118f587dcc09/0/7B9F50722EE5D5DB8DF552ED32CB8764B64FA902.crl rsync://repo-rpki.idnic.net/repo/ce3d8c03-17bb-4cab-8526-118f587dcc09/0/7B9F50722EE5D5DB8DF552ED32CB8764B64FA902.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7B9F50722EE5D5DB8DF552ED32CB8764B64FA902.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 27 Dec 2025 13:03:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 46:04:5e:4e:b3:b6:bd:85:fc:5d:4c:88:71:0b:a7:d7:d8:10:a1:2e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7B9F50722EE5D5DB8DF552ED32CB8764B64FA902 Validity Not Before: Dec 24 07:37:28 2025 GMT Not After : Dec 27 13:03:28 2025 GMT Subject: CN=6F79D7876D7E5595DDE8CB2AD5B86ECB5404B087 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:85:ce:79:55:d8:50:48:89:94:a4:29:f4:d0: a9:a6:ba:a8:f2:80:6f:a2:61:fd:b8:f1:d3:81:e9: 71:98:43:42:a4:8d:fa:36:3c:2d:53:78:d6:ff:02: 74:c1:d4:a4:01:2e:8f:72:98:e1:b8:fb:7a:bf:a4: 91:5b:7e:3a:11:05:53:22:09:56:a4:89:02:58:b9: 6c:56:ea:5d:4e:63:dc:82:05:35:d4:7a:a9:14:e8: 1f:01:82:8a:76:e5:9e:2b:cf:0b:7e:1e:1a:ba:af: e2:d3:db:4d:6c:24:c4:b2:3b:9e:47:ac:91:c8:09: 4f:3d:28:04:12:c7:4f:c1:10:5a:80:84:65:c7:f2: 76:e9:c7:89:78:02:c1:67:56:9b:7c:a3:9f:97:98: a5:98:be:5a:ce:1c:b5:6b:ba:30:cd:5f:83:af:af: 02:90:2f:a1:2e:ce:32:23:a7:d0:3d:9c:05:ec:b5: 26:8f:03:d5:9b:45:c1:60:d3:19:33:c4:1a:97:2c: 9b:e4:69:fc:76:fb:27:a5:45:3a:8c:e1:48:a7:2c: 20:eb:df:bb:3a:f2:22:25:47:69:a6:9f:6e:c6:57: 96:b4:3f:2e:93:ab:58:57:96:d8:6c:b6:e4:b1:f5: 34:22:71:26:ce:5f:53:a5:65:da:91:9b:e3:4f:3e: d9:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6F:79:D7:87:6D:7E:55:95:DD:E8:CB:2A:D5:B8:6E:CB:54:04:B0:87 X509v3 Authority Key Identifier: keyid:7B:9F:50:72:2E:E5:D5:DB:8D:F5:52:ED:32:CB:87:64:B6:4F:A9:02 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/ce3d8c03-17bb-4cab-8526-118f587dcc09/0/7B9F50722EE5D5DB8DF552ED32CB8764B64FA902.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7B9F50722EE5D5DB8DF552ED32CB8764B64FA902.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ce3d8c03-17bb-4cab-8526-118f587dcc09/0/7B9F50722EE5D5DB8DF552ED32CB8764B64FA902.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 04:55:fc:d1:de:97:f6:07:58:5e:67:53:25:6a:8a:db:8d:5b: 74:3c:ae:ae:e1:4d:8e:3c:be:45:d3:e5:6e:b9:89:8e:4c:99: 22:34:3f:20:49:66:6b:49:3b:21:8e:04:9c:ea:50:44:c2:34: 21:5a:4d:aa:25:74:c9:98:0a:ff:24:e0:8f:ee:95:a8:41:04: 1d:46:69:ef:29:0a:f2:26:8d:42:86:fe:46:82:7b:77:88:bd: 1e:f8:cd:e9:40:fb:67:35:9e:a5:34:c4:29:b4:b4:5a:f0:98: 36:44:ea:41:a4:63:b0:fe:a4:6a:68:ed:3f:1b:0d:76:f1:ac: cf:d8:10:0d:be:50:35:04:cd:1b:46:dd:d8:09:31:33:cf:74: 55:97:a2:85:e7:79:75:29:5e:5c:0c:bd:e3:9c:ea:1f:ff:2a: de:31:51:19:cf:8f:e5:4b:41:70:6b:ee:95:5e:93:e6:fc:9f: 84:1c:09:7f:e5:48:19:1e:0c:99:0d:b2:64:64:10:7e:c9:96: 83:b0:22:1f:95:b1:13:e3:93:ff:5d:e5:23:41:bd:14:32:89: 04:dc:90:42:d3:40:40:93:cb:24:c3:d3:b4:8d:a0:06:fc:ef: 4c:c5:f0:0d:06:80:2a:10:8b:b0:93:6c:c1:3d:2d:5a:9a:09: f8:c2:6c:8a -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIURgReTrO2vYX8XUyIcQun19gQoS4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoN0I5RjUwNzIyRUU1RDVEQjhERjU1MkVEMzJDQjg3NjRC NjRGQTkwMjAeFw0yNTEyMjQwNzM3MjhaFw0yNTEyMjcxMzAzMjhaMDMxMTAvBgNV BAMTKDZGNzlENzg3NkQ3RTU1OTVEREU4Q0IyQUQ1Qjg2RUNCNTQwNEIwODcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDEhc55VdhQSImUpCn00Kmmuqjy gG+iYf248dOB6XGYQ0Kkjfo2PC1TeNb/AnTB1KQBLo9ymOG4+3q/pJFbfjoRBVMi CVakiQJYuWxW6l1OY9yCBTXUeqkU6B8Bgop25Z4rzwt+Hhq6r+LT201sJMSyO55H rJHICU89KAQSx0/BEFqAhGXH8nbpx4l4AsFnVpt8o5+XmKWYvlrOHLVrujDNX4Ov rwKQL6EuzjIjp9A9nAXstSaPA9WbRcFg0xkzxBqXLJvkafx2+yelRTqM4UinLCDr 37s68iIlR2mmn27GV5a0Py6Tq1hXlthstuSx9TQicSbOX1OlZdqRm+NPPtnBAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUb3nXh21+VZXd6Msq1bhuy1QEsIcwHwYDVR0j BBgwFoAUe59Qci7l1duN9VLtMsuHZLZPqQIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j ZTNkOGMwMy0xN2JiLTRjYWItODUyNi0xMThmNTg3ZGNjMDkvMC83QjlGNTA3MjJF RTVENURCOERGNTUyRUQzMkNCODc2NEI2NEZBOTAyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvN0I5RjUwNzIyRUU1RDVEQjhERjU1MkVEMzJDQjg3NjRCNjRG QTkwMi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vY2UzZDhjMDMtMTdiYi00Y2FiLTg1 MjYtMTE4ZjU4N2RjYzA5LzAvN0I5RjUwNzIyRUU1RDVEQjhERjU1MkVEMzJDQjg3 NjRCNjRGQTkwMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAARV/NHel/YHWF5nUyVqituNW3Q8rq7hTY48 vkXT5W65iY5MmSI0PyBJZmtJOyGOBJzqUETCNCFaTaoldMmYCv8k4I/ulahBBB1G ae8pCvImjUKG/kaCe3eIvR74zelA+2c1nqU0xCm0tFrwmDZE6kGkY7D+pGpo7T8b DXbxrM/YEA2+UDUEzRtG3dgJMTPPdFWXooXneXUpXlwMveOc6h//Kt4xURnPj+VL QXBr7pVek+b8n4QcCX/lSBkeDJkNsmRkEH7JloOwIh+VsRPjk/9d5SNBvRQyiQTc kELTQECTyyTD07SNoAb870zF8A0GgCoQi7CTbME9LVqaCfjCbIo= -----END CERTIFICATE-----Generated at Wed Dec 24 20:22:08 2025 by rpki-client