This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/e9f575db-c738-4b8e-b36a-6b020c66849d/0/C7F3F7AC648C6073C7FE736271A1A8E7277962B7.mft File: C7F3F7AC648C6073C7FE736271A1A8E7277962B7.mft (raw, json) Hash identifier: Tx8EQg3z4t7i54W5ft5CmP4ahOeauyje7qz+Czkb+lI= Subject key identifier: 41:D1:86:5A:37:48:AA:0C:A8:7E:BB:17:E7:21:57:1F:79:75:5E:4D Authority key identifier: C7:F3:F7:AC:64:8C:60:73:C7:FE:73:62:71:A1:A8:E7:27:79:62:B7 Certificate issuer: /CN=C7F3F7AC648C6073C7FE736271A1A8E7277962B7 Certificate serial: 4513A40C8A81AC86395200BC60FE72F31733F962 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C7F3F7AC648C6073C7FE736271A1A8E7277962B7.cer Subject info access: rsync://repo-rpki.idnic.net/repo/e9f575db-c738-4b8e-b36a-6b020c66849d/0/C7F3F7AC648C6073C7FE736271A1A8E7277962B7.mft Manifest number: 0158 Signing time: Tue 16 Dec 2025 08:11:32 +0000 Manifest this update: Tue 16 Dec 2025 08:06:32 +0000 Manifest next update: Fri 19 Dec 2025 16:07:32 +0000 Files and hashes: 1: 3130332e3134342e3132382e302f32342d3234203d3e20313339343333.roa (hash: qJyum2At3OQ0/Mui5d66zUzvrRUlMyLgYJNLgluGsro=) 2: C7F3F7AC648C6073C7FE736271A1A8E7277962B7.crl (hash: 9t7PfTCLZzBcWMD5sDOktr3a/a7VV0YKDwdNsPQrHvw=) 3: 3130332e3134342e3132392e302f32342d3234203d3e20313339343333.roa (hash: 8BRGIjefty8sLc1ZfWkrubhQIyt7J7+He/FXFv8R2Vs=) 4: 3130332e3134342e3132382e302f32332d3233203d3e20313339343333.roa (hash: NWx313Eak6ryGXrEQpkxOKGoXHPpAIUkV1kgoiWIcbI=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/e9f575db-c738-4b8e-b36a-6b020c66849d/0/C7F3F7AC648C6073C7FE736271A1A8E7277962B7.crl rsync://repo-rpki.idnic.net/repo/e9f575db-c738-4b8e-b36a-6b020c66849d/0/C7F3F7AC648C6073C7FE736271A1A8E7277962B7.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C7F3F7AC648C6073C7FE736271A1A8E7277962B7.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 19 Dec 2025 10:51:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 45:13:a4:0c:8a:81:ac:86:39:52:00:bc:60:fe:72:f3:17:33:f9:62 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C7F3F7AC648C6073C7FE736271A1A8E7277962B7 Validity Not Before: Dec 16 08:06:32 2025 GMT Not After : Dec 19 16:07:32 2025 GMT Subject: CN=41D1865A3748AA0CA87EBB17E721571F79755E4D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ef:b3:db:50:14:ef:1c:8b:6e:95:fd:55:22:ea: be:d2:7b:bf:f3:79:6e:66:67:dd:bf:27:9e:04:b3: f4:e8:51:fb:c3:44:d9:6f:4e:70:e8:2b:b0:0c:51: 81:56:11:9f:d5:87:e0:3a:8b:34:ba:49:6b:7a:74: 4a:b1:cb:72:14:76:5b:6c:d2:8c:f5:c9:87:15:ff: 7b:af:bb:17:de:83:a0:ad:ad:8d:53:d2:29:34:22: bc:c1:d5:ba:68:4f:56:a6:52:bc:76:e4:8c:a2:3d: ea:4c:b3:93:35:e5:12:26:c2:8c:08:7a:46:25:b8: 62:91:d3:14:a9:a3:3b:d3:79:fb:00:ea:74:86:ce: d6:69:dc:79:44:78:2c:a1:8a:db:9c:f6:0f:b0:d5: 7f:54:a6:0e:aa:89:d2:df:c4:d9:ea:74:48:2e:f1: 5b:46:90:91:b6:78:0f:06:fc:af:3b:f3:c9:34:06: 2a:95:9e:b7:4c:e2:af:c0:52:ce:fb:dc:d6:e0:46: fc:12:3e:42:87:e3:40:2f:99:fd:2f:41:89:93:8d: 95:44:8b:ee:59:16:e1:8c:e2:8e:bf:5c:e5:9e:34: a0:0e:1f:31:ba:43:b2:c1:3c:de:60:2a:fd:26:1c: 51:3d:ca:0c:10:64:2b:32:8a:31:cd:52:c0:d0:c0: 8c:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:D1:86:5A:37:48:AA:0C:A8:7E:BB:17:E7:21:57:1F:79:75:5E:4D X509v3 Authority Key Identifier: keyid:C7:F3:F7:AC:64:8C:60:73:C7:FE:73:62:71:A1:A8:E7:27:79:62:B7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/e9f575db-c738-4b8e-b36a-6b020c66849d/0/C7F3F7AC648C6073C7FE736271A1A8E7277962B7.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C7F3F7AC648C6073C7FE736271A1A8E7277962B7.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e9f575db-c738-4b8e-b36a-6b020c66849d/0/C7F3F7AC648C6073C7FE736271A1A8E7277962B7.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5e:74:46:89:7d:e2:3d:0d:4e:3a:aa:73:a3:68:de:c4:10:01: da:6d:47:38:ba:2f:53:bd:4b:fb:8e:02:a0:22:fc:31:d5:06: fe:ec:e6:57:a7:74:6a:8c:0a:05:19:a4:a9:d0:cd:c0:b2:34: 86:a8:ff:29:29:65:b3:2c:b1:64:c1:f2:51:7e:1a:31:49:e7: b5:9d:b7:a7:95:20:10:a8:87:09:2d:54:21:34:96:ea:f8:f3: a3:ae:ea:6e:21:59:55:10:27:6c:05:df:ac:a2:b0:3e:30:09: 3d:29:fe:51:e1:96:f8:2b:99:30:f6:1e:99:8b:39:0b:b0:52: bd:34:9b:72:5a:62:85:b2:46:11:86:d7:60:fa:eb:25:3a:16: c6:17:92:24:44:11:18:6b:c2:03:1b:b4:81:d6:42:82:08:ae: 68:0a:80:a4:9f:86:c1:67:68:d8:a0:ca:7f:98:13:80:61:5e: 8b:0d:18:73:43:26:c9:6c:06:19:19:89:2f:26:75:1c:bd:e9: 61:95:c8:d2:83:b9:57:1f:25:08:ce:d5:00:8a:19:dc:c8:39: 32:aa:d3:63:86:e5:d8:a1:07:c4:f1:ca:d7:7a:8d:6f:2c:58: 2a:98:e0:65:b3:55:42:86:77:d8:33:d8:95:23:ed:77:59:65: b1:85:f4:9c -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIURROkDIqBrIY5UgC8YP5y8xcz+WIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzdGM0Y3QUM2NDhDNjA3M0M3RkU3MzYyNzFBMUE4RTcy Nzc5NjJCNzAeFw0yNTEyMTYwODA2MzJaFw0yNTEyMTkxNjA3MzJaMDMxMTAvBgNV BAMTKDQxRDE4NjVBMzc0OEFBMENBODdFQkIxN0U3MjE1NzFGNzk3NTVFNEQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDvs9tQFO8ci26V/VUi6r7Se7/z eW5mZ92/J54Es/ToUfvDRNlvTnDoK7AMUYFWEZ/Vh+A6izS6SWt6dEqxy3IUdlts 0oz1yYcV/3uvuxfeg6CtrY1T0ik0IrzB1bpoT1amUrx25IyiPepMs5M15RImwowI ekYluGKR0xSpozvTefsA6nSGztZp3HlEeCyhituc9g+w1X9Upg6qidLfxNnqdEgu 8VtGkJG2eA8G/K8788k0BiqVnrdM4q/AUs773NbgRvwSPkKH40Avmf0vQYmTjZVE i+5ZFuGM4o6/XOWeNKAOHzG6Q7LBPN5gKv0mHFE9ygwQZCsyijHNUsDQwIz5AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUQdGGWjdIqgyofrsX5yFXH3l1Xk0wHwYDVR0j BBgwFoAUx/P3rGSMYHPH/nNicaGo5yd5YrcwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l OWY1NzVkYi1jNzM4LTRiOGUtYjM2YS02YjAyMGM2Njg0OWQvMC9DN0YzRjdBQzY0 OEM2MDczQzdGRTczNjI3MUExQThFNzI3Nzk2MkI3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQzdGM0Y3QUM2NDhDNjA3M0M3RkU3MzYyNzFBMUE4RTcyNzc5 NjJCNy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZTlmNTc1ZGItYzczOC00YjhlLWIz NmEtNmIwMjBjNjY4NDlkLzAvQzdGM0Y3QUM2NDhDNjA3M0M3RkU3MzYyNzFBMUE4 RTcyNzc5NjJCNy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAF50Rol94j0NTjqqc6No3sQQAdptRzi6L1O9 S/uOAqAi/DHVBv7s5lendGqMCgUZpKnQzcCyNIao/ykpZbMssWTB8lF+GjFJ57Wd t6eVIBCohwktVCE0lur486Ou6m4hWVUQJ2wF36yisD4wCT0p/lHhlvgrmTD2HpmL OQuwUr00m3JaYoWyRhGG12D66yU6FsYXkiREERhrwgMbtIHWQoIIrmgKgKSfhsFn aNigyn+YE4BhXosNGHNDJslsBhkZiS8mdRy96WGVyNKDuVcfJQjO1QCKGdzIOTKq 02OG5dihB8Txytd6jW8sWCqY4GWzVUKGd9gz2JUj7XdZZbGF9Jw= -----END CERTIFICATE-----Generated at Tue Dec 16 09:41:59 2025 by rpki-client