This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/f700292f-2868-47b3-ac21-600a467a7237/0/7F8FE9F94ED4A8F169D2C8A37966D06216684756.mft File: 7F8FE9F94ED4A8F169D2C8A37966D06216684756.mft (raw, json) Hash identifier: My+6ooX5BUVu87iH2KnpgWK3YwOuxQMSPvKQGU08Aak= Subject key identifier: 97:85:24:27:0D:9C:5B:CF:63:AF:7A:6B:B3:59:42:2C:6E:9D:8E:5B Authority key identifier: 7F:8F:E9:F9:4E:D4:A8:F1:69:D2:C8:A3:79:66:D0:62:16:68:47:56 Certificate issuer: /CN=7F8FE9F94ED4A8F169D2C8A37966D06216684756 Certificate serial: 505E23DF181163EC6F2C233D60C238FD488A0100 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7F8FE9F94ED4A8F169D2C8A37966D06216684756.cer Subject info access: rsync://repo-rpki.idnic.net/repo/f700292f-2868-47b3-ac21-600a467a7237/0/7F8FE9F94ED4A8F169D2C8A37966D06216684756.mft Manifest number: DF Signing time: Thu 25 Dec 2025 19:10:01 +0000 Manifest this update: Thu 25 Dec 2025 19:05:01 +0000 Manifest next update: Mon 29 Dec 2025 06:32:01 +0000 Files and hashes: 1: 33362e35302e3135342e302f32332d3234203d3e20313532303738.roa (hash: Op7L0f6zgAVUDBqJ1dF3rBL4LfH2t/QTkoViKXEVCPk=) 2: 7F8FE9F94ED4A8F169D2C8A37966D06216684756.crl (hash: FcqUuFe24UdadhHPyEQgsyJMqtLwRHfqaEXGt1hOcKQ=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/f700292f-2868-47b3-ac21-600a467a7237/0/7F8FE9F94ED4A8F169D2C8A37966D06216684756.crl rsync://repo-rpki.idnic.net/repo/f700292f-2868-47b3-ac21-600a467a7237/0/7F8FE9F94ED4A8F169D2C8A37966D06216684756.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7F8FE9F94ED4A8F169D2C8A37966D06216684756.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 29 Dec 2025 06:32:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 50:5e:23:df:18:11:63:ec:6f:2c:23:3d:60:c2:38:fd:48:8a:01:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7F8FE9F94ED4A8F169D2C8A37966D06216684756 Validity Not Before: Dec 25 19:05:01 2025 GMT Not After : Dec 29 06:32:01 2025 GMT Subject: CN=978524270D9C5BCF63AF7A6BB359422C6E9D8E5B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:88:28:8f:c2:d4:39:07:c9:ee:4f:4a:36:ce: 74:0a:6c:c3:bb:16:91:2c:ed:85:b4:05:34:1e:f7: bc:c2:52:06:f7:79:0c:43:ec:21:55:5c:9c:75:94: 99:01:92:27:31:4e:0a:87:06:5d:6b:ff:72:64:2e: ef:85:ec:a8:50:a8:1f:f4:6c:9e:fe:f1:fe:b9:58: ce:22:a9:a6:7f:2e:63:12:f7:d7:c9:f4:b8:99:e1: a9:1e:02:a0:ad:47:6b:40:aa:9a:62:93:f6:ce:f4: ef:a4:7e:44:83:5f:c2:5a:e6:0d:a2:8a:10:2b:6e: 96:5e:60:0a:81:14:f5:c4:64:dd:cf:89:af:87:aa: 68:80:fa:4d:f9:4f:c8:72:92:b6:2a:81:4b:fb:9c: 42:83:63:8a:87:c5:be:89:cb:69:e8:d0:6d:e1:44: a1:29:cb:f9:04:58:10:05:52:2a:fd:f0:ac:e8:17: 85:8b:36:9d:9a:4b:2a:f3:bd:97:94:04:dc:be:f7: ac:a6:86:99:8f:7e:ef:dc:35:c4:01:66:a5:2e:aa: d9:66:cd:6b:07:3f:72:15:e1:18:5a:e0:d3:45:81: 91:16:54:04:a8:10:1d:ac:36:2a:a5:a8:0a:0e:8b: a3:dd:44:cf:69:e6:32:fb:77:d5:1a:95:c3:a0:06: 2c:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 97:85:24:27:0D:9C:5B:CF:63:AF:7A:6B:B3:59:42:2C:6E:9D:8E:5B X509v3 Authority Key Identifier: keyid:7F:8F:E9:F9:4E:D4:A8:F1:69:D2:C8:A3:79:66:D0:62:16:68:47:56 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/f700292f-2868-47b3-ac21-600a467a7237/0/7F8FE9F94ED4A8F169D2C8A37966D06216684756.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7F8FE9F94ED4A8F169D2C8A37966D06216684756.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f700292f-2868-47b3-ac21-600a467a7237/0/7F8FE9F94ED4A8F169D2C8A37966D06216684756.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0b:7a:3c:d8:ed:a0:d4:17:e6:af:f3:32:e2:42:0d:c5:60:c8: c6:9a:3e:9b:a2:47:63:55:8e:bc:c1:33:01:98:ee:fa:2e:f9: 32:92:16:8a:33:df:04:53:9e:b2:c1:ec:43:81:0e:20:79:b8: 7c:30:9d:a8:73:22:a5:7b:b5:1c:cd:b3:85:f9:e7:4f:0a:b3: 7f:d5:09:e3:3e:9c:90:72:ae:17:bf:93:47:ad:6a:de:c6:a2: b7:13:46:5c:79:96:a2:20:1f:f7:fc:e0:f2:d6:f2:60:36:9b: e0:de:0b:97:57:75:52:f2:14:85:d3:4c:4a:6b:00:05:63:5f: b3:db:9d:9a:96:ec:d2:0a:bb:0f:28:6e:cf:f9:c4:eb:36:c0: 9b:bf:12:0d:ef:3e:96:0c:b0:d1:59:67:35:79:ab:bf:49:01: de:44:42:fa:ed:88:d1:93:d1:b3:87:c0:59:63:03:86:83:e7: 41:09:65:90:0e:c2:7e:3e:88:37:54:08:6f:b6:c9:6b:39:e0: 08:d6:46:75:34:b0:a0:15:e0:86:ca:26:ea:67:06:b3:79:45: 1d:8e:97:b6:5a:84:32:3d:02:60:6c:1d:65:8a:26:92:2e:a8: 3d:9c:de:60:47:dc:96:e6:ba:98:40:61:cd:54:01:19:ed:e6: 13:42:fc:89 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUUF4j3xgRY+xvLCM9YMI4/UiKAQAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoN0Y4RkU5Rjk0RUQ0QThGMTY5RDJDOEEzNzk2NkQwNjIx NjY4NDc1NjAeFw0yNTEyMjUxOTA1MDFaFw0yNTEyMjkwNjMyMDFaMDMxMTAvBgNV BAMTKDk3ODUyNDI3MEQ5QzVCQ0Y2M0FGN0E2QkIzNTk0MjJDNkU5RDhFNUIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+iCiPwtQ5B8nuT0o2znQKbMO7 FpEs7YW0BTQe97zCUgb3eQxD7CFVXJx1lJkBkicxTgqHBl1r/3JkLu+F7KhQqB/0 bJ7+8f65WM4iqaZ/LmMS99fJ9LiZ4akeAqCtR2tAqppik/bO9O+kfkSDX8Ja5g2i ihArbpZeYAqBFPXEZN3Pia+HqmiA+k35T8hykrYqgUv7nEKDY4qHxb6Jy2no0G3h RKEpy/kEWBAFUir98KzoF4WLNp2aSyrzvZeUBNy+96ymhpmPfu/cNcQBZqUuqtlm zWsHP3IV4Rha4NNFgZEWVASoEB2sNiqlqAoOi6PdRM9p5jL7d9UalcOgBiyzAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUl4UkJw2cW89jr3prs1lCLG6djlswHwYDVR0j BBgwFoAUf4/p+U7UqPFp0sijeWbQYhZoR1YwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m NzAwMjkyZi0yODY4LTQ3YjMtYWMyMS02MDBhNDY3YTcyMzcvMC83RjhGRTlGOTRF RDRBOEYxNjlEMkM4QTM3OTY2RDA2MjE2Njg0NzU2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvN0Y4RkU5Rjk0RUQ0QThGMTY5RDJDOEEzNzk2NkQwNjIxNjY4 NDc1Ni5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZjcwMDI5MmYtMjg2OC00N2IzLWFj MjEtNjAwYTQ2N2E3MjM3LzAvN0Y4RkU5Rjk0RUQ0QThGMTY5RDJDOEEzNzk2NkQw NjIxNjY4NDc1Ni5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAt6PNjtoNQX5q/zMuJCDcVgyMaaPpuiR2NV jrzBMwGY7vou+TKSFooz3wRTnrLB7EOBDiB5uHwwnahzIqV7tRzNs4X5508Ks3/V CeM+nJByrhe/k0etat7GorcTRlx5lqIgH/f84PLW8mA2m+DeC5dXdVLyFIXTTEpr AAVjX7PbnZqW7NIKuw8obs/5xOs2wJu/Eg3vPpYMsNFZZzV5q79JAd5EQvrtiNGT 0bOHwFljA4aD50EJZZAOwn4+iDdUCG+2yWs54AjWRnU0sKAV4IbKJupnBrN5RR2O l7ZahDI9AmBsHWWKJpIuqD2c3mBH3JbmuphAYc1UARnt5hNC/Ik= -----END CERTIFICATE-----Generated at Sun Dec 28 06:40:51 2025 by rpki-client