This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/e3295de6-2058-46a7-936b-052cf2fa920d/0/7FDB761B09E7A9A80CD28C84A5FFDB12F5C9BBD0.mft File: 7FDB761B09E7A9A80CD28C84A5FFDB12F5C9BBD0.mft (raw, json) Hash identifier: RzYKU7wgK13Ir1pVDc68CZZZxXaIS/dU8KCF+rT5YhQ= Subject key identifier: 8C:04:65:87:B3:C3:6E:E2:2F:B7:7B:C9:9E:5C:3D:81:5D:03:49:FF Authority key identifier: 7F:DB:76:1B:09:E7:A9:A8:0C:D2:8C:84:A5:FF:DB:12:F5:C9:BB:D0 Certificate issuer: /CN=7FDB761B09E7A9A80CD28C84A5FFDB12F5C9BBD0 Certificate serial: 6C137D0B9BE199A0F268F3A310684616CA0BB8DF Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7FDB761B09E7A9A80CD28C84A5FFDB12F5C9BBD0.cer Subject info access: rsync://repo-rpki.idnic.net/repo/e3295de6-2058-46a7-936b-052cf2fa920d/0/7FDB761B09E7A9A80CD28C84A5FFDB12F5C9BBD0.mft Manifest number: 0230 Signing time: Thu 18 Dec 2025 19:21:51 +0000 Manifest this update: Thu 18 Dec 2025 19:16:51 +0000 Manifest next update: Mon 22 Dec 2025 00:49:51 +0000 Files and hashes: 1: 3130332e3138362e38382e302f32342d3234203d3e20313439373137.roa (hash: qKtIrqocYRtH9mFT0B1bJLwWXs7q8vOuLUP4J+rTPCk=) 2: 3130332e3138362e38392e302f32342d3234203d3e20313439373137.roa (hash: d85h85v2ptQz3vrVN5qkUm0+GStqZnlOAr5LKlkna3k=) 3: 7FDB761B09E7A9A80CD28C84A5FFDB12F5C9BBD0.crl (hash: mIa/DAQnilA2UQAy3YhBnEoe5+Gd3on0TNcsZNF+lcI=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/e3295de6-2058-46a7-936b-052cf2fa920d/0/7FDB761B09E7A9A80CD28C84A5FFDB12F5C9BBD0.crl rsync://repo-rpki.idnic.net/repo/e3295de6-2058-46a7-936b-052cf2fa920d/0/7FDB761B09E7A9A80CD28C84A5FFDB12F5C9BBD0.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7FDB761B09E7A9A80CD28C84A5FFDB12F5C9BBD0.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 22 Dec 2025 00:49:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6c:13:7d:0b:9b:e1:99:a0:f2:68:f3:a3:10:68:46:16:ca:0b:b8:df Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7FDB761B09E7A9A80CD28C84A5FFDB12F5C9BBD0 Validity Not Before: Dec 18 19:16:51 2025 GMT Not After : Dec 22 00:49:51 2025 GMT Subject: CN=8C046587B3C36EE22FB77BC99E5C3D815D0349FF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:50:d2:65:30:4e:6d:60:44:bb:da:da:6f:af: 90:2d:c2:02:22:c1:70:b2:34:5a:3c:67:c7:4d:08: 14:ed:62:cb:c3:7b:77:da:bc:3e:ac:fb:20:ff:95: 3b:fb:81:20:46:ec:be:20:7a:d2:4a:1d:f4:fd:66: 90:03:25:e6:92:f2:bd:74:3d:6f:d2:43:af:27:1c: f7:0b:16:41:77:9b:6f:f7:19:6e:5b:1c:08:87:7f: 40:49:b3:ca:61:ae:4b:11:41:06:24:3e:eb:b4:d4: e2:1c:de:cb:b7:be:ac:83:27:45:35:bf:df:71:30: 29:83:a9:a0:d6:e1:0e:a4:d0:bc:e6:9a:b7:53:93: 33:6d:a6:89:f7:59:99:31:a5:8d:1a:f1:2c:cb:5a: 56:c2:b6:7b:d6:5d:c2:58:0c:a1:48:91:fd:d2:12: 70:c1:36:28:10:6f:31:f0:f4:a6:8d:62:90:07:9b: 4e:2e:cb:ae:11:e3:08:23:55:e8:80:f3:ab:dc:7d: 98:57:fa:f3:5d:de:fd:7a:33:c1:5a:be:55:ff:d8: b3:d6:f5:2f:71:77:91:f0:fd:53:32:17:be:27:ce: 81:5a:0e:7a:5f:6a:45:d2:95:37:94:c4:88:19:d9: 0f:f0:51:38:da:f6:40:fb:73:29:0a:0f:f1:f8:f0: d9:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8C:04:65:87:B3:C3:6E:E2:2F:B7:7B:C9:9E:5C:3D:81:5D:03:49:FF X509v3 Authority Key Identifier: keyid:7F:DB:76:1B:09:E7:A9:A8:0C:D2:8C:84:A5:FF:DB:12:F5:C9:BB:D0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/e3295de6-2058-46a7-936b-052cf2fa920d/0/7FDB761B09E7A9A80CD28C84A5FFDB12F5C9BBD0.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7FDB761B09E7A9A80CD28C84A5FFDB12F5C9BBD0.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e3295de6-2058-46a7-936b-052cf2fa920d/0/7FDB761B09E7A9A80CD28C84A5FFDB12F5C9BBD0.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a8:55:74:56:2c:04:ef:53:5c:6f:e2:07:86:cf:2f:2c:ee:39: 99:08:a7:59:e8:d1:4f:71:46:bf:d8:fe:5c:88:5a:a6:9d:5b: 6b:a3:47:51:dc:ec:89:c2:02:d0:42:0e:41:bc:e0:bf:50:37: 9d:8d:bc:15:1f:25:d3:a4:fa:b2:e7:f4:8e:0a:6e:de:a7:1d: 61:67:8d:be:67:2e:ab:bf:b7:ad:0f:d7:7a:fd:3d:f3:f8:31: 17:35:74:4a:a3:ed:75:c8:73:83:2f:f7:46:0a:eb:79:0a:37: 5a:71:29:d7:10:d9:68:ff:f2:de:ff:bf:9b:d2:fa:b9:25:c1: ab:41:e5:49:35:97:43:d9:df:82:5f:56:fc:50:96:10:2a:62: 8c:06:0a:f1:db:ef:ce:62:aa:e0:26:f7:84:ba:7d:52:44:82: 39:ce:6b:eb:6b:dd:83:45:42:88:b9:14:90:b2:a0:41:fe:32: 86:37:b6:c6:85:cf:cf:ed:e5:5c:f3:cc:8a:c0:fd:26:c9:86: 22:35:fa:5c:79:14:ea:bc:70:31:39:a2:c6:36:c2:b0:32:b1: dd:4a:6c:1c:3f:57:b8:a2:59:64:bc:24:5e:65:6a:0f:d2:5e: 1f:be:2d:34:07:30:c1:03:38:3e:b1:de:f0:9f:9e:0e:df:0b: 1f:98:75:3a -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUbBN9C5vhmaDyaPOjEGhGFsoLuN8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoN0ZEQjc2MUIwOUU3QTlBODBDRDI4Qzg0QTVGRkRCMTJG NUM5QkJEMDAeFw0yNTEyMTgxOTE2NTFaFw0yNTEyMjIwMDQ5NTFaMDMxMTAvBgNV BAMTKDhDMDQ2NTg3QjNDMzZFRTIyRkI3N0JDOTlFNUMzRDgxNUQwMzQ5RkYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC0UNJlME5tYES72tpvr5AtwgIi wXCyNFo8Z8dNCBTtYsvDe3favD6s+yD/lTv7gSBG7L4getJKHfT9ZpADJeaS8r10 PW/SQ68nHPcLFkF3m2/3GW5bHAiHf0BJs8phrksRQQYkPuu01OIc3su3vqyDJ0U1 v99xMCmDqaDW4Q6k0LzmmrdTkzNtpon3WZkxpY0a8SzLWlbCtnvWXcJYDKFIkf3S EnDBNigQbzHw9KaNYpAHm04uy64R4wgjVeiA86vcfZhX+vNd3v16M8FavlX/2LPW 9S9xd5Hw/VMyF74nzoFaDnpfakXSlTeUxIgZ2Q/wUTja9kD7cykKD/H48NnBAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUjARlh7PDbuIvt3vJnlw9gV0DSf8wHwYDVR0j BBgwFoAUf9t2GwnnqagM0oyEpf/bEvXJu9AwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l MzI5NWRlNi0yMDU4LTQ2YTctOTM2Yi0wNTJjZjJmYTkyMGQvMC83RkRCNzYxQjA5 RTdBOUE4MENEMjhDODRBNUZGREIxMkY1QzlCQkQwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvN0ZEQjc2MUIwOUU3QTlBODBDRDI4Qzg0QTVGRkRCMTJGNUM5 QkJEMC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZTMyOTVkZTYtMjA1OC00NmE3LTkz NmItMDUyY2YyZmE5MjBkLzAvN0ZEQjc2MUIwOUU3QTlBODBDRDI4Qzg0QTVGRkRC MTJGNUM5QkJEMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKhVdFYsBO9TXG/iB4bPLyzuOZkIp1no0U9x Rr/Y/lyIWqadW2ujR1Hc7InCAtBCDkG84L9QN52NvBUfJdOk+rLn9I4Kbt6nHWFn jb5nLqu/t60P13r9PfP4MRc1dEqj7XXIc4Mv90YK63kKN1pxKdcQ2Wj/8t7/v5vS +rklwatB5Uk1l0PZ34JfVvxQlhAqYowGCvHb785iquAm94S6fVJEgjnOa+tr3YNF Qoi5FJCyoEH+MoY3tsaFz8/t5VzzzIrA/SbJhiI1+lx5FOq8cDE5osY2wrAysd1K bBw/V7iiWWS8JF5lag/SXh++LTQHMMEDOD6x3vCfng7fCx+YdTo= -----END CERTIFICATE-----Generated at Fri Dec 19 11:22:23 2025 by rpki-client