This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/d3f30e27-b95e-4d75-968d-538fb7918829/0/A7DCE7647FA775A7E9DF44EAEFAC52118F3669F8.mft File: A7DCE7647FA775A7E9DF44EAEFAC52118F3669F8.mft (raw, json) Hash identifier: 5LnvL6pttTr4ux1Sfq8dBnvB2IIXe/ntUChKjTp3/hw= Subject key identifier: A0:51:EB:3D:B6:AC:44:9F:9D:E7:74:CE:5A:16:FC:71:38:7E:62:41 Authority key identifier: A7:DC:E7:64:7F:A7:75:A7:E9:DF:44:EA:EF:AC:52:11:8F:36:69:F8 Certificate issuer: /CN=A7DCE7647FA775A7E9DF44EAEFAC52118F3669F8 Certificate serial: 037C26D73468D13144B61993A5C444FA41E9105C Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A7DCE7647FA775A7E9DF44EAEFAC52118F3669F8.cer Subject info access: rsync://repo-rpki.idnic.net/repo/d3f30e27-b95e-4d75-968d-538fb7918829/0/A7DCE7647FA775A7E9DF44EAEFAC52118F3669F8.mft Manifest number: 01FA Signing time: Wed 17 Dec 2025 21:31:30 +0000 Manifest this update: Wed 17 Dec 2025 21:26:30 +0000 Manifest next update: Sun 21 Dec 2025 08:02:30 +0000 Files and hashes: 1: A7DCE7647FA775A7E9DF44EAEFAC52118F3669F8.crl (hash: SI7ynF0a7/lSCcjNPq2fP1H1Hf0O11W+bOAkWrMP2KI=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/d3f30e27-b95e-4d75-968d-538fb7918829/0/A7DCE7647FA775A7E9DF44EAEFAC52118F3669F8.crl rsync://repo-rpki.idnic.net/repo/d3f30e27-b95e-4d75-968d-538fb7918829/0/A7DCE7647FA775A7E9DF44EAEFAC52118F3669F8.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A7DCE7647FA775A7E9DF44EAEFAC52118F3669F8.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 21 Dec 2025 08:02:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 03:7c:26:d7:34:68:d1:31:44:b6:19:93:a5:c4:44:fa:41:e9:10:5c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A7DCE7647FA775A7E9DF44EAEFAC52118F3669F8 Validity Not Before: Dec 17 21:26:30 2025 GMT Not After : Dec 21 08:02:30 2025 GMT Subject: CN=A051EB3DB6AC449F9DE774CE5A16FC71387E6241 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:14:3f:d9:bb:e2:e0:23:5d:e1:2b:bd:3a:16: 0c:38:e0:31:59:90:b3:4f:ca:75:82:cc:51:a7:89: 93:97:0a:91:2d:b9:17:d2:82:c9:20:51:56:ee:54: 82:04:27:f7:e7:da:21:cf:01:ee:1a:cc:f0:dc:77: ae:86:c1:d5:79:7a:27:e0:1a:f8:55:c5:0a:7c:5a: a8:52:8f:fb:35:ec:f9:22:83:3a:a5:3d:20:ac:d6: 53:c7:56:57:20:d1:bc:8f:41:82:5b:52:e4:0a:e2: 44:f6:e9:9b:b2:ec:e8:96:ff:c4:90:09:c0:bd:ec: 36:a8:02:c5:a6:01:63:b9:ef:e7:19:b6:76:94:66: 49:b0:df:62:41:09:72:e8:36:2d:e0:8e:88:90:1b: 3c:e7:e1:3e:c5:3c:f1:b5:06:08:2f:eb:4f:4c:a2: 7b:70:ca:c6:9e:86:52:34:2d:ab:51:ec:7b:8b:64: eb:98:d3:d9:64:be:48:e6:35:eb:02:9d:43:a5:ad: a2:b0:4b:30:ff:1e:cc:7e:5c:f5:cb:cc:4b:49:b6: 26:7a:e4:22:50:d8:e8:2e:42:10:e0:8d:39:12:de: e1:bf:8b:26:e1:f6:0c:99:a0:3f:f2:cb:1c:36:1a: 6e:ad:aa:a3:95:66:cb:25:a0:23:49:e8:c5:5c:7d: 19:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:51:EB:3D:B6:AC:44:9F:9D:E7:74:CE:5A:16:FC:71:38:7E:62:41 X509v3 Authority Key Identifier: keyid:A7:DC:E7:64:7F:A7:75:A7:E9:DF:44:EA:EF:AC:52:11:8F:36:69:F8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/d3f30e27-b95e-4d75-968d-538fb7918829/0/A7DCE7647FA775A7E9DF44EAEFAC52118F3669F8.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A7DCE7647FA775A7E9DF44EAEFAC52118F3669F8.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d3f30e27-b95e-4d75-968d-538fb7918829/0/A7DCE7647FA775A7E9DF44EAEFAC52118F3669F8.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3c:ae:ec:a6:5b:0e:ed:91:84:38:dc:91:f6:62:fa:aa:ef:71: 03:f9:40:d8:7d:0a:17:9a:21:6f:cf:71:65:27:24:7e:cd:9f: 25:f7:b5:66:60:85:5a:8f:1b:69:f6:b8:13:12:cf:26:9c:d4: 96:fa:b6:17:c0:4c:38:02:c3:9c:ba:23:e3:c4:18:56:49:37: 57:d7:d7:4d:3a:4d:9f:b3:66:f9:99:70:3b:21:93:93:e0:32: 50:3d:6f:5f:cd:7e:25:79:43:a4:e0:12:be:cb:ad:d2:8e:50: 64:43:cb:06:fd:a0:f8:db:61:64:0e:5e:06:7e:fe:61:f6:1c: af:c1:40:de:1c:3b:3e:aa:3f:dd:12:87:ee:27:77:9f:56:d3: 05:d2:41:db:a0:76:62:be:fa:ae:8b:a6:4d:e1:99:9d:58:0b: 46:b5:3d:0a:db:29:ea:a4:71:b7:22:23:82:e5:ed:25:25:e1: 9f:b2:17:e7:27:7b:b3:50:78:6c:d6:6b:4e:9a:3f:d5:bd:79: 3f:39:75:a3:c1:ce:2b:bb:0c:b1:79:22:fb:7f:8e:96:77:17: 1f:50:03:05:5b:0a:9c:8c:29:a3:fc:51:6e:c8:51:e1:95:99: b7:78:ba:03:a7:08:18:4a:26:a9:70:2a:6f:8f:75:e1:ba:68: 3b:9e:e3:8c -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUA3wm1zRo0TFEthmTpcRE+kHpEFwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTdEQ0U3NjQ3RkE3NzVBN0U5REY0NEVBRUZBQzUyMTE4 RjM2NjlGODAeFw0yNTEyMTcyMTI2MzBaFw0yNTEyMjEwODAyMzBaMDMxMTAvBgNV BAMTKEEwNTFFQjNEQjZBQzQ0OUY5REU3NzRDRTVBMTZGQzcxMzg3RTYyNDEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCfFD/Zu+LgI13hK706Fgw44DFZ kLNPynWCzFGniZOXCpEtuRfSgskgUVbuVIIEJ/fn2iHPAe4azPDcd66GwdV5eifg GvhVxQp8WqhSj/s17PkigzqlPSCs1lPHVlcg0byPQYJbUuQK4kT26Zuy7OiW/8SQ CcC97DaoAsWmAWO57+cZtnaUZkmw32JBCXLoNi3gjoiQGzzn4T7FPPG1Bggv609M ontwysaehlI0LatR7HuLZOuY09lkvkjmNesCnUOlraKwSzD/Hsx+XPXLzEtJtiZ6 5CJQ2OguQhDgjTkS3uG/iybh9gyZoD/yyxw2Gm6tqqOVZssloCNJ6MVcfRn9AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUoFHrPbasRJ+d53TOWhb8cTh+YkEwHwYDVR0j BBgwFoAUp9znZH+ndafp30Tq76xSEY82afgwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k M2YzMGUyNy1iOTVlLTRkNzUtOTY4ZC01MzhmYjc5MTg4MjkvMC9BN0RDRTc2NDdG QTc3NUE3RTlERjQ0RUFFRkFDNTIxMThGMzY2OUY4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQTdEQ0U3NjQ3RkE3NzVBN0U5REY0NEVBRUZBQzUyMTE4RjM2 NjlGOC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZDNmMzBlMjctYjk1ZS00ZDc1LTk2 OGQtNTM4ZmI3OTE4ODI5LzAvQTdEQ0U3NjQ3RkE3NzVBN0U5REY0NEVBRUZBQzUy MTE4RjM2NjlGOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADyu7KZbDu2RhDjckfZi+qrvcQP5QNh9Chea IW/PcWUnJH7NnyX3tWZghVqPG2n2uBMSzyac1Jb6thfATDgCw5y6I+PEGFZJN1fX 1006TZ+zZvmZcDshk5PgMlA9b1/NfiV5Q6TgEr7LrdKOUGRDywb9oPjbYWQOXgZ+ /mH2HK/BQN4cOz6qP90Sh+4nd59W0wXSQdugdmK++q6Lpk3hmZ1YC0a1PQrbKeqk cbciI4Ll7SUl4Z+yF+cne7NQeGzWa06aP9W9eT85daPBziu7DLF5Ivt/jpZ3Fx9Q AwVbCpyMKaP8UW7IUeGVmbd4ugOnCBhKJqlwKm+PdeG6aDue44w= -----END CERTIFICATE-----Generated at Fri Dec 19 03:05:40 2025 by rpki-client