This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/ce7d738e-2cc7-4bd2-bb28-9142e1baa0ba/1/C07F5AE2D9DC99D0AF28B6B154210C911EFB1D8A.mft File: C07F5AE2D9DC99D0AF28B6B154210C911EFB1D8A.mft (raw, json) Hash identifier: KPFGf2pIvVG7zaXod2CKWc5u0yVCHHJc501pBdB5APk= Subject key identifier: 17:AA:D9:AE:3F:66:08:22:D9:71:0F:C5:45:A3:2B:C2:F6:FE:D0:AD Authority key identifier: C0:7F:5A:E2:D9:DC:99:D0:AF:28:B6:B1:54:21:0C:91:1E:FB:1D:8A Certificate issuer: /CN=C07F5AE2D9DC99D0AF28B6B154210C911EFB1D8A Certificate serial: 6C6358C521B8D643FF3E590F12B741518AEAB5C8 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C07F5AE2D9DC99D0AF28B6B154210C911EFB1D8A.cer Subject info access: rsync://repo-rpki.idnic.net/repo/ce7d738e-2cc7-4bd2-bb28-9142e1baa0ba/1/C07F5AE2D9DC99D0AF28B6B154210C911EFB1D8A.mft Manifest number: E9 Signing time: Tue 23 Dec 2025 05:22:41 +0000 Manifest this update: Tue 23 Dec 2025 05:17:41 +0000 Manifest next update: Fri 26 Dec 2025 10:59:41 +0000 Files and hashes: 1: C07F5AE2D9DC99D0AF28B6B154210C911EFB1D8A.crl (hash: /jK5CL854yF/hTFOzugxKouBxJBhmKG/42ZFNg3GdtA=) 2: 323030313a6466343a6363303a3a2f34382d3438203d3e20313532383431.roa (hash: 67keM1hQfIucwuWQhvzKk8YthRoib+6jHGmIeaRFOqs=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/ce7d738e-2cc7-4bd2-bb28-9142e1baa0ba/1/C07F5AE2D9DC99D0AF28B6B154210C911EFB1D8A.crl rsync://repo-rpki.idnic.net/repo/ce7d738e-2cc7-4bd2-bb28-9142e1baa0ba/1/C07F5AE2D9DC99D0AF28B6B154210C911EFB1D8A.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C07F5AE2D9DC99D0AF28B6B154210C911EFB1D8A.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 26 Dec 2025 10:59:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6c:63:58:c5:21:b8:d6:43:ff:3e:59:0f:12:b7:41:51:8a:ea:b5:c8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C07F5AE2D9DC99D0AF28B6B154210C911EFB1D8A Validity Not Before: Dec 23 05:17:41 2025 GMT Not After : Dec 26 10:59:41 2025 GMT Subject: CN=17AAD9AE3F660822D9710FC545A32BC2F6FED0AD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:ca:75:e2:8d:2d:00:27:72:15:87:c3:ac:6d: b4:9c:39:1d:80:ed:ee:47:3e:75:9e:39:23:7b:3e: f6:93:46:3f:f4:d5:25:f9:9b:1b:50:f9:f0:27:35: 49:23:69:b3:a5:0f:00:71:32:5c:68:84:92:40:63: ec:bd:1a:a3:cb:92:39:6d:ac:44:dd:64:90:2b:34: 07:0d:d1:16:0c:36:4c:0c:4b:78:5b:a3:43:7f:86: cd:41:83:63:01:70:65:43:9a:9b:9b:a3:e7:82:dc: 54:9c:ec:db:30:a2:8e:b1:bb:36:9b:47:a0:56:1f: ed:aa:44:27:81:71:96:59:e7:ec:d5:7a:be:a0:e0: 36:fe:76:61:bc:b6:e6:19:1f:9a:c0:d4:71:e0:cc: e8:b7:6a:a2:3d:c7:e9:f8:a6:5d:a5:c6:2b:b3:8f: db:1b:ec:aa:04:b9:a1:15:30:4e:2c:82:55:8b:d4: 6b:80:26:98:c8:41:f3:ec:52:ba:ca:44:34:f9:ab: 4d:59:b3:0e:bd:4a:c5:5b:a5:8a:56:92:cc:3a:96: 66:7f:51:9f:ef:65:f9:9f:58:6e:59:2d:c6:4e:3a: d3:04:02:b5:40:9b:14:b0:68:81:2f:d2:2e:94:f4: 21:8b:aa:30:8f:05:f2:2a:27:ba:70:29:35:7f:4e: 06:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:AA:D9:AE:3F:66:08:22:D9:71:0F:C5:45:A3:2B:C2:F6:FE:D0:AD X509v3 Authority Key Identifier: keyid:C0:7F:5A:E2:D9:DC:99:D0:AF:28:B6:B1:54:21:0C:91:1E:FB:1D:8A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/ce7d738e-2cc7-4bd2-bb28-9142e1baa0ba/1/C07F5AE2D9DC99D0AF28B6B154210C911EFB1D8A.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C07F5AE2D9DC99D0AF28B6B154210C911EFB1D8A.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ce7d738e-2cc7-4bd2-bb28-9142e1baa0ba/1/C07F5AE2D9DC99D0AF28B6B154210C911EFB1D8A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4e:fc:ee:5f:0e:e8:d5:10:e6:51:a1:1e:84:d4:13:50:1f:e2: 43:dc:88:47:77:46:4a:0b:3f:6e:e1:0b:b2:71:2a:49:38:84: 14:0e:b4:74:7e:2a:d0:b5:91:6b:05:69:9d:15:ea:ea:8f:00: 83:32:9f:ec:11:94:9c:de:65:0c:48:f1:9d:e9:68:9f:95:f1: c0:90:28:76:dd:72:c5:b0:d3:6e:fc:57:8a:0b:ff:58:55:eb: e2:6c:35:67:0b:eb:bd:93:67:49:40:53:bb:79:8a:1e:0d:34: 9e:78:f1:63:f2:74:3f:80:87:b4:0e:10:11:fb:ad:ca:00:50: 8d:cd:ef:ff:70:f1:d7:ff:11:b6:63:ab:d8:23:4c:89:ca:d0: fb:40:de:00:11:36:f5:ae:3a:fd:60:34:cd:06:72:af:f0:f1: 79:ea:d6:7d:62:28:ae:86:95:fd:ce:9f:ac:50:de:88:f9:0f: ef:f9:82:d6:39:08:91:90:55:d4:65:d5:3e:b4:41:4f:fc:b9: 08:8f:22:a5:9e:45:4f:10:eb:44:e0:fd:b1:04:a3:cb:f2:eb: 33:6a:e2:38:50:a5:fa:09:51:d5:27:be:2a:ca:0c:d7:17:e8: 5f:37:40:b0:a9:09:9c:30:51:cf:28:0d:3b:64:44:05:e9:58: 80:8f:71:83 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUbGNYxSG41kP/PlkPErdBUYrqtcgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzA3RjVBRTJEOURDOTlEMEFGMjhCNkIxNTQyMTBDOTEx RUZCMUQ4QTAeFw0yNTEyMjMwNTE3NDFaFw0yNTEyMjYxMDU5NDFaMDMxMTAvBgNV BAMTKDE3QUFEOUFFM0Y2NjA4MjJEOTcxMEZDNTQ1QTMyQkMyRjZGRUQwQUQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDOynXijS0AJ3IVh8OsbbScOR2A 7e5HPnWeOSN7PvaTRj/01SX5mxtQ+fAnNUkjabOlDwBxMlxohJJAY+y9GqPLkjlt rETdZJArNAcN0RYMNkwMS3hbo0N/hs1Bg2MBcGVDmpubo+eC3FSc7Nswoo6xuzab R6BWH+2qRCeBcZZZ5+zVer6g4Db+dmG8tuYZH5rA1HHgzOi3aqI9x+n4pl2lxiuz j9sb7KoEuaEVME4sglWL1GuAJpjIQfPsUrrKRDT5q01Zsw69SsVbpYpWksw6lmZ/ UZ/vZfmfWG5ZLcZOOtMEArVAmxSwaIEv0i6U9CGLqjCPBfIqJ7pwKTV/TgYPAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUF6rZrj9mCCLZcQ/FRaMrwvb+0K0wHwYDVR0j BBgwFoAUwH9a4tncmdCvKLaxVCEMkR77HYowDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j ZTdkNzM4ZS0yY2M3LTRiZDItYmIyOC05MTQyZTFiYWEwYmEvMS9DMDdGNUFFMkQ5 REM5OUQwQUYyOEI2QjE1NDIxMEM5MTFFRkIxRDhBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQzA3RjVBRTJEOURDOTlEMEFGMjhCNkIxNTQyMTBDOTExRUZC MUQ4QS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vY2U3ZDczOGUtMmNjNy00YmQyLWJi MjgtOTE0MmUxYmFhMGJhLzEvQzA3RjVBRTJEOURDOTlEMEFGMjhCNkIxNTQyMTBD OTExRUZCMUQ4QS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAE787l8O6NUQ5lGhHoTUE1Af4kPciEd3RkoL P27hC7JxKkk4hBQOtHR+KtC1kWsFaZ0V6uqPAIMyn+wRlJzeZQxI8Z3paJ+V8cCQ KHbdcsWw0278V4oL/1hV6+JsNWcL672TZ0lAU7t5ih4NNJ548WPydD+Ah7QOEBH7 rcoAUI3N7/9w8df/EbZjq9gjTInK0PtA3gARNvWuOv1gNM0Gcq/w8Xnq1n1iKK6G lf3On6xQ3oj5D+/5gtY5CJGQVdRl1T60QU/8uQiPIqWeRU8Q60Tg/bEEo8vy6zNq 4jhQpfoJUdUnvirKDNcX6F83QLCpCZwwUc8oDTtkRAXpWICPcYM= -----END CERTIFICATE-----Generated at Wed Dec 24 19:32:57 2025 by rpki-client