This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/e6adae2a-47b6-4ae5-9c3f-3e8cb92a3987/0/7CA3F2C40FE453CEE230AF594985B275514F5ECF.mft File: 7CA3F2C40FE453CEE230AF594985B275514F5ECF.mft (raw, json) Hash identifier: +RrXOWnOrUGikMJ4CNLe+c0TfPuk5eTap9+YTsa3KPo= Subject key identifier: 35:9F:4B:82:9E:24:DC:6D:56:E9:8C:0C:E0:60:C6:78:FA:28:8E:47 Authority key identifier: 7C:A3:F2:C4:0F:E4:53:CE:E2:30:AF:59:49:85:B2:75:51:4F:5E:CF Certificate issuer: /CN=7CA3F2C40FE453CEE230AF594985B275514F5ECF Certificate serial: 38E6E0B3DD0E9341C6387B89911559430A6D607B Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7CA3F2C40FE453CEE230AF594985B275514F5ECF.cer Subject info access: rsync://repo-rpki.idnic.net/repo/e6adae2a-47b6-4ae5-9c3f-3e8cb92a3987/0/7CA3F2C40FE453CEE230AF594985B275514F5ECF.mft Manifest number: 01C9 Signing time: Thu 18 Dec 2025 05:02:24 +0000 Manifest this update: Thu 18 Dec 2025 04:57:24 +0000 Manifest next update: Sun 21 Dec 2025 05:42:24 +0000 Files and hashes: 1: 7CA3F2C40FE453CEE230AF594985B275514F5ECF.crl (hash: 7vQuf/+7JtceRXJ9uiOOObGfg76sn5WU9SeF/uTfTPE=) 2: 3130332e3139312e3131362e302f32332d3233203d3e20313439393137.roa (hash: yloFFDOEavyW9OOZ+KM+O5lOWtq7g/hDtLKYHcYmJYE=) 3: 3130332e3139312e3131372e302f32342d3234203d3e20313439393137.roa (hash: MMOGS7T9X8x7JT9s8oWcj5fdpc4Z+j40BumMkZopolM=) 4: 3130332e3139312e3131362e302f32342d3234203d3e20313439393137.roa (hash: fdBGaDwbA3O0q2/vBfcwU5qvE8WWWviCtFtejPXVA+I=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/e6adae2a-47b6-4ae5-9c3f-3e8cb92a3987/0/7CA3F2C40FE453CEE230AF594985B275514F5ECF.crl rsync://repo-rpki.idnic.net/repo/e6adae2a-47b6-4ae5-9c3f-3e8cb92a3987/0/7CA3F2C40FE453CEE230AF594985B275514F5ECF.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7CA3F2C40FE453CEE230AF594985B275514F5ECF.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 21 Dec 2025 05:42:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 38:e6:e0:b3:dd:0e:93:41:c6:38:7b:89:91:15:59:43:0a:6d:60:7b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7CA3F2C40FE453CEE230AF594985B275514F5ECF Validity Not Before: Dec 18 04:57:24 2025 GMT Not After : Dec 21 05:42:24 2025 GMT Subject: CN=359F4B829E24DC6D56E98C0CE060C678FA288E47 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:15:dd:6c:cd:33:af:d1:aa:02:a6:60:aa:65: 6b:6b:ca:5a:49:82:3d:0e:28:07:f0:63:b9:ac:12: 89:d3:ce:6b:06:c2:00:89:7e:b9:55:fd:81:c8:83: 4a:1a:53:45:34:24:8d:6b:a3:35:1e:dc:e5:b2:c7: f4:e3:df:f6:5d:2a:ca:24:23:e3:49:34:c7:3c:a0: 3e:5b:9d:37:d6:92:4c:66:c3:8b:fb:9c:55:5f:8a: 34:1a:53:02:d4:c8:d9:2f:ee:d4:d1:e0:85:3c:37: 64:30:6b:ee:fb:29:7d:b6:16:49:e9:13:f8:2c:ab: 39:d2:46:80:5b:94:e6:f2:15:ee:87:33:50:dc:71: e3:c9:19:cf:78:b3:a1:79:d7:da:bf:16:c1:37:74: c6:dc:cf:3f:83:71:2b:a5:d6:a8:69:98:cb:db:e0: 86:a1:99:3d:b9:e3:92:1f:b6:21:a7:d1:d0:a4:43: f8:30:64:f2:f1:85:01:45:11:0b:1b:eb:7e:c1:fb: 8c:84:54:05:4e:80:d9:dc:c6:1f:40:de:ae:ad:92: 6c:df:4f:f4:86:d3:93:0d:2a:93:16:bb:7b:7a:38: 82:4a:e0:20:09:dd:a9:e2:5b:73:5f:fa:a1:bb:df: 20:64:db:07:8a:8f:b9:21:5e:00:98:de:e1:0a:ce: 15:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:9F:4B:82:9E:24:DC:6D:56:E9:8C:0C:E0:60:C6:78:FA:28:8E:47 X509v3 Authority Key Identifier: keyid:7C:A3:F2:C4:0F:E4:53:CE:E2:30:AF:59:49:85:B2:75:51:4F:5E:CF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/e6adae2a-47b6-4ae5-9c3f-3e8cb92a3987/0/7CA3F2C40FE453CEE230AF594985B275514F5ECF.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7CA3F2C40FE453CEE230AF594985B275514F5ECF.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e6adae2a-47b6-4ae5-9c3f-3e8cb92a3987/0/7CA3F2C40FE453CEE230AF594985B275514F5ECF.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b2:6f:8a:0b:1f:d9:69:fd:59:7d:bc:f0:e6:99:34:79:4a:7e: 56:c4:6b:47:eb:a0:5f:56:10:e3:94:67:9c:0d:2b:68:14:51: 04:a5:44:86:db:ea:17:6e:59:4c:9b:50:43:65:61:9c:1a:d3: 2f:8e:7f:40:14:30:44:8a:cf:ab:71:47:42:db:21:90:ee:02: 7c:84:f1:c5:ad:66:d1:6a:01:0a:b7:84:27:52:23:ec:74:26: e1:61:13:e3:9d:18:90:e0:11:04:61:4b:fe:1d:46:a6:f9:b2: 53:07:2d:83:50:b5:85:fe:14:40:37:3c:5e:23:d9:7c:9e:ec: 93:77:d9:25:2e:ae:46:6b:62:06:91:59:fb:2b:79:43:25:66: 6c:3b:36:45:0c:59:51:17:32:91:5a:11:e1:40:01:9a:8e:f4: b6:58:07:1e:75:d1:04:1c:1a:df:b1:a9:30:ab:61:32:10:93: ba:af:87:51:64:7d:8a:40:52:70:da:19:57:93:6d:1f:41:26: 4b:85:03:9b:ae:b4:57:48:35:85:eb:e3:64:1f:5c:9e:df:db: ca:95:30:ae:1f:bb:fb:11:94:96:e1:c7:76:f3:2a:3f:79:10: ac:8e:25:1b:ff:0c:bf:8f:c3:bc:fe:bc:7c:68:7a:46:31:12: e2:ea:bf:dc -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUOObgs90Ok0HGOHuJkRVZQwptYHswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoN0NBM0YyQzQwRkU0NTNDRUUyMzBBRjU5NDk4NUIyNzU1 MTRGNUVDRjAeFw0yNTEyMTgwNDU3MjRaFw0yNTEyMjEwNTQyMjRaMDMxMTAvBgNV BAMTKDM1OUY0QjgyOUUyNERDNkQ1NkU5OEMwQ0UwNjBDNjc4RkEyODhFNDcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCaFd1szTOv0aoCpmCqZWtrylpJ gj0OKAfwY7msEonTzmsGwgCJfrlV/YHIg0oaU0U0JI1rozUe3OWyx/Tj3/ZdKsok I+NJNMc8oD5bnTfWkkxmw4v7nFVfijQaUwLUyNkv7tTR4IU8N2Qwa+77KX22Fknp E/gsqznSRoBblObyFe6HM1DccePJGc94s6F519q/FsE3dMbczz+DcSul1qhpmMvb 4IahmT2545IftiGn0dCkQ/gwZPLxhQFFEQsb637B+4yEVAVOgNncxh9A3q6tkmzf T/SG05MNKpMWu3t6OIJK4CAJ3aniW3Nf+qG73yBk2weKj7khXgCY3uEKzhWhAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUNZ9Lgp4k3G1W6YwM4GDGePoojkcwHwYDVR0j BBgwFoAUfKPyxA/kU87iMK9ZSYWydVFPXs8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l NmFkYWUyYS00N2I2LTRhZTUtOWMzZi0zZThjYjkyYTM5ODcvMC83Q0EzRjJDNDBG RTQ1M0NFRTIzMEFGNTk0OTg1QjI3NTUxNEY1RUNGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvN0NBM0YyQzQwRkU0NTNDRUUyMzBBRjU5NDk4NUIyNzU1MTRG NUVDRi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZTZhZGFlMmEtNDdiNi00YWU1LTlj M2YtM2U4Y2I5MmEzOTg3LzAvN0NBM0YyQzQwRkU0NTNDRUUyMzBBRjU5NDk4NUIy NzU1MTRGNUVDRi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALJvigsf2Wn9WX288OaZNHlKflbEa0froF9W EOOUZ5wNK2gUUQSlRIbb6hduWUybUENlYZwa0y+Of0AUMESKz6txR0LbIZDuAnyE 8cWtZtFqAQq3hCdSI+x0JuFhE+OdGJDgEQRhS/4dRqb5slMHLYNQtYX+FEA3PF4j 2Xye7JN32SUurkZrYgaRWfsreUMlZmw7NkUMWVEXMpFaEeFAAZqO9LZYBx510QQc Gt+xqTCrYTIQk7qvh1FkfYpAUnDaGVeTbR9BJkuFA5uutFdINYXr42QfXJ7f28qV MK4fu/sRlJbhx3bzKj95EKyOJRv/DL+Pw7z+vHxoekYxEuLqv9w= -----END CERTIFICATE-----Generated at Fri Dec 19 11:19:48 2025 by rpki-client