This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/ea7d7b38-d66b-43b3-91fb-4bb9e6637e2a/0/7188210EAEFBA7947009E19B6219830752F542A9.mft File: 7188210EAEFBA7947009E19B6219830752F542A9.mft (raw, json) Hash identifier: DDz8cZDyWKBUIRKTBi4Feg4vEjSSREk6jtGI4/pj/fs= Subject key identifier: 17:57:6A:D3:00:1C:3D:E4:D0:8D:D1:88:6B:AC:73:5D:6E:EB:F8:D7 Authority key identifier: 71:88:21:0E:AE:FB:A7:94:70:09:E1:9B:62:19:83:07:52:F5:42:A9 Certificate issuer: /CN=7188210EAEFBA7947009E19B6219830752F542A9 Certificate serial: 1D03CDCAFA62C82C636FA450BFC020D6C6B94AAE Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7188210EAEFBA7947009E19B6219830752F542A9.cer Subject info access: rsync://repo-rpki.idnic.net/repo/ea7d7b38-d66b-43b3-91fb-4bb9e6637e2a/0/7188210EAEFBA7947009E19B6219830752F542A9.mft Manifest number: 01D1 Signing time: Tue 23 Dec 2025 10:01:12 +0000 Manifest this update: Tue 23 Dec 2025 09:56:12 +0000 Manifest next update: Fri 26 Dec 2025 10:08:12 +0000 Files and hashes: 1: 7188210EAEFBA7947009E19B6219830752F542A9.crl (hash: GuizoDg5RK4eCeCkAvJW8zQemjRs2nv7rqeqOTtG5pQ=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/ea7d7b38-d66b-43b3-91fb-4bb9e6637e2a/0/7188210EAEFBA7947009E19B6219830752F542A9.crl rsync://repo-rpki.idnic.net/repo/ea7d7b38-d66b-43b3-91fb-4bb9e6637e2a/0/7188210EAEFBA7947009E19B6219830752F542A9.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7188210EAEFBA7947009E19B6219830752F542A9.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 26 Dec 2025 10:08:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1d:03:cd:ca:fa:62:c8:2c:63:6f:a4:50:bf:c0:20:d6:c6:b9:4a:ae Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7188210EAEFBA7947009E19B6219830752F542A9 Validity Not Before: Dec 23 09:56:12 2025 GMT Not After : Dec 26 10:08:12 2025 GMT Subject: CN=17576AD3001C3DE4D08DD1886BAC735D6EEBF8D7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:c3:8a:25:bb:f5:dd:51:b6:8c:8d:5b:ba:73: c2:35:93:cb:66:55:48:50:a9:0a:f0:b2:54:44:95: b3:e7:5b:ca:ae:5c:7e:fb:f4:b9:67:35:e3:ee:b0: be:4b:2e:95:fd:aa:47:8f:ec:a6:cc:e3:23:20:fa: 53:59:a4:ed:55:47:99:35:33:35:2e:6d:8e:c5:5d: c3:d3:b5:6a:b2:43:7e:5b:b9:75:8f:f5:97:e2:8e: d5:dd:81:c9:88:78:ed:39:0a:0a:d0:16:15:5a:a6: b3:52:b6:23:e6:25:e4:b3:58:a3:19:bd:70:75:99: 68:85:8b:b5:5d:fb:82:31:d4:e4:bd:53:43:6a:c5: 29:aa:4a:5a:54:60:b8:d9:f9:25:9c:db:a5:69:69: eb:91:63:b4:cb:f8:38:66:0b:cb:55:19:e3:c5:79: 3a:7e:8f:52:25:8f:0a:36:7a:1e:ac:1a:80:db:52: 10:c6:b9:6f:c9:d9:87:52:d0:6b:36:e9:a3:e1:80: 32:1d:29:dc:ac:e1:b6:1e:bb:18:42:03:17:f1:56: 91:e9:b6:76:f9:41:27:16:6e:a7:eb:77:64:d2:b0: e1:e9:97:ff:7f:6d:e0:69:67:ac:79:34:87:e6:f2: 88:14:e9:c4:27:3c:17:cb:db:da:57:0d:58:46:8d: 67:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:57:6A:D3:00:1C:3D:E4:D0:8D:D1:88:6B:AC:73:5D:6E:EB:F8:D7 X509v3 Authority Key Identifier: keyid:71:88:21:0E:AE:FB:A7:94:70:09:E1:9B:62:19:83:07:52:F5:42:A9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/ea7d7b38-d66b-43b3-91fb-4bb9e6637e2a/0/7188210EAEFBA7947009E19B6219830752F542A9.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7188210EAEFBA7947009E19B6219830752F542A9.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ea7d7b38-d66b-43b3-91fb-4bb9e6637e2a/0/7188210EAEFBA7947009E19B6219830752F542A9.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3c:15:e5:4c:80:ff:73:d4:8c:f3:93:5e:e9:d1:aa:9c:c4:5f: 34:2a:fd:11:fd:98:76:4c:b3:0d:4b:14:f7:96:c3:ea:75:45: 95:2c:71:3b:5b:8e:43:51:2e:06:ac:36:fa:76:81:f0:c7:65: ab:92:0c:4d:b6:5c:55:56:8f:99:f7:f8:3f:04:30:1f:9f:da: 50:06:95:5a:70:da:f3:19:39:a9:ca:13:e8:7e:b1:ca:bd:20: a6:5d:05:96:3a:e3:04:7f:07:eb:d7:59:1c:e4:2b:ad:12:6d: 00:6d:9d:b8:c3:60:f4:99:ec:bc:6d:d4:2d:60:1b:a1:64:ad: d6:52:a0:40:6a:66:ab:d4:e8:66:27:6f:b5:8b:bd:82:fc:38: 34:35:04:bd:5e:e6:1d:d7:47:29:36:c7:a9:16:8e:05:b9:ad: 0d:d5:7c:cb:68:f3:15:f3:79:35:6b:d7:b8:bc:0c:12:c5:83: af:a6:6b:1e:39:4f:5a:ad:f3:1a:2e:d7:88:d6:ec:28:af:4e: a0:1d:1c:95:be:30:ed:ca:85:8b:34:b8:b0:22:58:0a:06:73: 2b:73:2f:b5:f5:85:2a:82:15:15:3b:7c:b0:aa:c2:71:13:ed: 1c:33:b5:73:3c:05:91:45:96:18:73:a6:89:d2:c1:31:3d:98: 6c:0c:b6:7d -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUHQPNyvpiyCxjb6RQv8Ag1sa5Sq4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzE4ODIxMEVBRUZCQTc5NDcwMDlFMTlCNjIxOTgzMDc1 MkY1NDJBOTAeFw0yNTEyMjMwOTU2MTJaFw0yNTEyMjYxMDA4MTJaMDMxMTAvBgNV BAMTKDE3NTc2QUQzMDAxQzNERTREMDhERDE4ODZCQUM3MzVENkVFQkY4RDcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDow4olu/XdUbaMjVu6c8I1k8tm VUhQqQrwslRElbPnW8quXH779LlnNePusL5LLpX9qkeP7KbM4yMg+lNZpO1VR5k1 MzUubY7FXcPTtWqyQ35buXWP9ZfijtXdgcmIeO05CgrQFhVaprNStiPmJeSzWKMZ vXB1mWiFi7Vd+4Ix1OS9U0NqxSmqSlpUYLjZ+SWc26VpaeuRY7TL+DhmC8tVGePF eTp+j1Iljwo2eh6sGoDbUhDGuW/J2YdS0Gs26aPhgDIdKdys4bYeuxhCAxfxVpHp tnb5QScWbqfrd2TSsOHpl/9/beBpZ6x5NIfm8ogU6cQnPBfL29pXDVhGjWeVAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUF1dq0wAcPeTQjdGIa6xzXW7r+NcwHwYDVR0j BBgwFoAUcYghDq77p5RwCeGbYhmDB1L1QqkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l YTdkN2IzOC1kNjZiLTQzYjMtOTFmYi00YmI5ZTY2MzdlMmEvMC83MTg4MjEwRUFF RkJBNzk0NzAwOUUxOUI2MjE5ODMwNzUyRjU0MkE5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNzE4ODIxMEVBRUZCQTc5NDcwMDlFMTlCNjIxOTgzMDc1MkY1 NDJBOS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZWE3ZDdiMzgtZDY2Yi00M2IzLTkx ZmItNGJiOWU2NjM3ZTJhLzAvNzE4ODIxMEVBRUZCQTc5NDcwMDlFMTlCNjIxOTgz MDc1MkY1NDJBOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADwV5UyA/3PUjPOTXunRqpzEXzQq/RH9mHZM sw1LFPeWw+p1RZUscTtbjkNRLgasNvp2gfDHZauSDE22XFVWj5n3+D8EMB+f2lAG lVpw2vMZOanKE+h+scq9IKZdBZY64wR/B+vXWRzkK60SbQBtnbjDYPSZ7Lxt1C1g G6FkrdZSoEBqZqvU6GYnb7WLvYL8ODQ1BL1e5h3XRyk2x6kWjgW5rQ3VfMto8xXz eTVr17i8DBLFg6+max45T1qt8xou14jW7CivTqAdHJW+MO3KhYs0uLAiWAoGcytz L7X1hSqCFRU7fLCqwnET7RwztXM8BZFFlhhzponSwTE9mGwMtn0= -----END CERTIFICATE-----Generated at Wed Dec 24 20:23:52 2025 by rpki-client