This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/f700292f-2868-47b3-ac21-600a467a7237/0/7F8FE9F94ED4A8F169D2C8A37966D06216684756.mft File: 7F8FE9F94ED4A8F169D2C8A37966D06216684756.mft (raw, json) Hash identifier: eEKvHcm97tIzNrg9lM9mdoqRa7cVsVGQeeQeOB9ZALc= Subject key identifier: 20:1F:D3:44:8F:30:6E:D5:DF:97:DC:48:C3:E5:67:22:29:F6:36:D9 Authority key identifier: 7F:8F:E9:F9:4E:D4:A8:F1:69:D2:C8:A3:79:66:D0:62:16:68:47:56 Certificate issuer: /CN=7F8FE9F94ED4A8F169D2C8A37966D06216684756 Certificate serial: 2575DC6430CAE72E157C34F5F23B2A81B4CA8839 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7F8FE9F94ED4A8F169D2C8A37966D06216684756.cer Subject info access: rsync://repo-rpki.idnic.net/repo/f700292f-2868-47b3-ac21-600a467a7237/0/7F8FE9F94ED4A8F169D2C8A37966D06216684756.mft Manifest number: DB Signing time: Wed 17 Dec 2025 01:50:01 +0000 Manifest this update: Wed 17 Dec 2025 01:45:01 +0000 Manifest next update: Sat 20 Dec 2025 06:55:01 +0000 Files and hashes: 1: 7F8FE9F94ED4A8F169D2C8A37966D06216684756.crl (hash: gsx3gNhte34WMZRZ/h9BgNU+bzvaNUuGf7s+//lWJd8=) 2: 33362e35302e3135342e302f32332d3234203d3e20313532303738.roa (hash: Op7L0f6zgAVUDBqJ1dF3rBL4LfH2t/QTkoViKXEVCPk=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/f700292f-2868-47b3-ac21-600a467a7237/0/7F8FE9F94ED4A8F169D2C8A37966D06216684756.crl rsync://repo-rpki.idnic.net/repo/f700292f-2868-47b3-ac21-600a467a7237/0/7F8FE9F94ED4A8F169D2C8A37966D06216684756.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7F8FE9F94ED4A8F169D2C8A37966D06216684756.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 20 Dec 2025 06:55:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 25:75:dc:64:30:ca:e7:2e:15:7c:34:f5:f2:3b:2a:81:b4:ca:88:39 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7F8FE9F94ED4A8F169D2C8A37966D06216684756 Validity Not Before: Dec 17 01:45:01 2025 GMT Not After : Dec 20 06:55:01 2025 GMT Subject: CN=201FD3448F306ED5DF97DC48C3E5672229F636D9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:89:a4:56:74:43:89:14:9b:83:39:3f:cf:c8: 71:16:d0:f5:47:4b:6c:38:82:4d:e8:38:4c:60:3f: 2e:65:80:5d:a0:f9:d6:47:b3:15:f4:90:c9:85:f4: b2:ca:ae:67:ed:9f:fb:eb:6e:7a:85:0f:4c:29:1f: 3a:02:e3:00:72:8e:e3:7a:aa:e2:a5:53:fd:70:00: 57:11:66:46:0c:7d:79:d0:26:e4:5e:ec:11:1b:04: e1:bd:9d:4f:a1:1f:aa:a3:16:4b:f9:35:53:62:fa: 3a:66:0b:ed:b5:d1:03:1a:07:76:cf:26:0a:25:47: 50:24:61:9d:c3:31:6d:fd:ce:59:97:c7:f2:13:e2: cc:5c:b0:fc:96:37:b8:4e:39:15:83:28:6d:dd:a9: f3:47:69:ea:0d:34:a7:30:38:b3:df:6e:0a:b2:0c: b7:54:d3:46:98:ec:14:4e:08:8b:dc:46:e3:ef:81: 6f:5b:81:7b:3b:50:e8:1f:43:7a:91:4b:cb:cf:1a: 4b:37:f0:8f:73:33:7e:5c:7a:04:24:61:1c:39:15: 44:68:29:a3:50:b6:26:f9:93:2b:bf:e0:5a:eb:0c: dc:c0:d7:89:4d:ca:44:72:d7:e5:57:74:de:10:61: 67:5d:d1:24:a8:b5:81:29:1b:d1:57:6c:a5:58:dd: a5:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:1F:D3:44:8F:30:6E:D5:DF:97:DC:48:C3:E5:67:22:29:F6:36:D9 X509v3 Authority Key Identifier: keyid:7F:8F:E9:F9:4E:D4:A8:F1:69:D2:C8:A3:79:66:D0:62:16:68:47:56 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/f700292f-2868-47b3-ac21-600a467a7237/0/7F8FE9F94ED4A8F169D2C8A37966D06216684756.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7F8FE9F94ED4A8F169D2C8A37966D06216684756.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f700292f-2868-47b3-ac21-600a467a7237/0/7F8FE9F94ED4A8F169D2C8A37966D06216684756.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 77:39:14:c4:8e:af:71:ee:ec:6e:96:01:de:4c:94:3d:c2:a5: 05:aa:9b:ec:82:67:59:b5:2d:54:ac:68:26:d0:94:d7:44:62: dc:ee:56:ad:5c:a0:0f:0f:fd:ec:e2:8c:3d:ef:ec:ea:65:81: b0:2a:88:d6:bf:cb:3c:6d:12:98:92:3a:95:42:e2:fb:48:cf: 7c:e1:86:80:cd:66:ad:77:ba:bb:f3:fd:f9:b7:f9:a7:23:44: cb:23:30:13:ee:86:75:5b:db:95:f7:14:8a:67:10:32:49:ff: 7a:4f:61:bf:20:6d:e4:39:ca:ef:91:27:48:e6:a6:b8:18:c6: 67:c4:b6:9f:2a:80:35:3d:67:a4:1c:90:c2:a7:7e:e8:66:fb: 41:04:a2:d8:79:fc:9b:3a:f2:49:dd:4c:76:b4:0f:c4:d1:b8: 4b:a3:a8:ca:d4:13:f2:8d:5f:60:73:22:e6:b9:c6:c6:64:50: 83:ce:3a:fc:ad:c6:2a:bc:5b:c5:de:ea:3e:e0:27:89:93:9e: 70:92:e0:9e:c1:23:50:8c:02:bc:e3:79:3f:42:ff:cf:ec:dc: 72:9f:b2:a9:71:81:c6:0d:e4:f8:36:5d:12:3a:b7:e9:a2:bf: dd:6d:84:40:2f:02:fd:38:a8:74:e9:17:c5:c4:1c:5c:61:f6: d3:a9:42:5f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUJXXcZDDK5y4VfDT18jsqgbTKiDkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoN0Y4RkU5Rjk0RUQ0QThGMTY5RDJDOEEzNzk2NkQwNjIx NjY4NDc1NjAeFw0yNTEyMTcwMTQ1MDFaFw0yNTEyMjAwNjU1MDFaMDMxMTAvBgNV BAMTKDIwMUZEMzQ0OEYzMDZFRDVERjk3REM0OEMzRTU2NzIyMjlGNjM2RDkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDRiaRWdEOJFJuDOT/PyHEW0PVH S2w4gk3oOExgPy5lgF2g+dZHsxX0kMmF9LLKrmftn/vrbnqFD0wpHzoC4wByjuN6 quKlU/1wAFcRZkYMfXnQJuRe7BEbBOG9nU+hH6qjFkv5NVNi+jpmC+210QMaB3bP JgolR1AkYZ3DMW39zlmXx/IT4sxcsPyWN7hOORWDKG3dqfNHaeoNNKcwOLPfbgqy DLdU00aY7BROCIvcRuPvgW9bgXs7UOgfQ3qRS8vPGks38I9zM35cegQkYRw5FURo KaNQtib5kyu/4FrrDNzA14lNykRy1+VXdN4QYWdd0SSotYEpG9FXbKVY3aUvAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUIB/TRI8wbtXfl9xIw+VnIin2NtkwHwYDVR0j BBgwFoAUf4/p+U7UqPFp0sijeWbQYhZoR1YwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m NzAwMjkyZi0yODY4LTQ3YjMtYWMyMS02MDBhNDY3YTcyMzcvMC83RjhGRTlGOTRF RDRBOEYxNjlEMkM4QTM3OTY2RDA2MjE2Njg0NzU2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvN0Y4RkU5Rjk0RUQ0QThGMTY5RDJDOEEzNzk2NkQwNjIxNjY4 NDc1Ni5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZjcwMDI5MmYtMjg2OC00N2IzLWFj MjEtNjAwYTQ2N2E3MjM3LzAvN0Y4RkU5Rjk0RUQ0QThGMTY5RDJDOEEzNzk2NkQw NjIxNjY4NDc1Ni5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHc5FMSOr3Hu7G6WAd5MlD3CpQWqm+yCZ1m1 LVSsaCbQlNdEYtzuVq1coA8P/ezijD3v7OplgbAqiNa/yzxtEpiSOpVC4vtIz3zh hoDNZq13urvz/fm3+acjRMsjMBPuhnVb25X3FIpnEDJJ/3pPYb8gbeQ5yu+RJ0jm prgYxmfEtp8qgDU9Z6QckMKnfuhm+0EEoth5/Js68kndTHa0D8TRuEujqMrUE/KN X2BzIua5xsZkUIPOOvytxiq8W8Xe6j7gJ4mTnnCS4J7BI1CMArzjeT9C/8/s3HKf sqlxgcYN5Pg2XRI6t+miv91thEAvAv04qHTpF8XEHFxh9tOpQl8= -----END CERTIFICATE-----Generated at Fri Dec 19 16:02:49 2025 by rpki-client