This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/41405545-c35d-4de1-9618-44b5f417a303/0/07087494011A8BD71E0AB56E4A29820B0C265D45.mft File: 07087494011A8BD71E0AB56E4A29820B0C265D45.mft (raw, json) Hash identifier: KFNM1Kn4jAYNI34yJ5LnYgLKmXOuGLceXumz9/kzgqg= Subject key identifier: 44:AC:7F:E4:24:39:FC:01:2E:45:F0:57:27:8B:99:65:25:6F:88:67 Authority key identifier: 07:08:74:94:01:1A:8B:D7:1E:0A:B5:6E:4A:29:82:0B:0C:26:5D:45 Certificate issuer: /CN=07087494011A8BD71E0AB56E4A29820B0C265D45 Certificate serial: 7C839D94CEEBF7BACAFE80AD47D4E24B833FEC1A Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/07087494011A8BD71E0AB56E4A29820B0C265D45.cer Subject info access: rsync://repo-rpki.idnic.net/repo/41405545-c35d-4de1-9618-44b5f417a303/0/07087494011A8BD71E0AB56E4A29820B0C265D45.mft Manifest number: 89 Signing time: Fri 26 Dec 2025 15:01:23 +0000 Manifest this update: Fri 26 Dec 2025 14:56:23 +0000 Manifest next update: Mon 29 Dec 2025 17:21:23 +0000 Files and hashes: 1: 323030313a6466303a633330303a3a2f34382d3438203d3e20313336303939.roa (hash: 7vK5kAAznF/vtGtOCVNcNBhvktxpMswh2ctIXuNsU5A=) 2: 3130332e38392e3234382e302f32342d3234203d3e20313336303939.roa (hash: nJDk2moXVJKOcLf/s2ENaD41Lvuu7Wv1fbgDq/e+7rk=) 3: 07087494011A8BD71E0AB56E4A29820B0C265D45.crl (hash: CYiyKr0HSBNpGzB3FqqZmEU5xPi299jJJDZufthEgxo=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/41405545-c35d-4de1-9618-44b5f417a303/0/07087494011A8BD71E0AB56E4A29820B0C265D45.crl rsync://repo-rpki.idnic.net/repo/41405545-c35d-4de1-9618-44b5f417a303/0/07087494011A8BD71E0AB56E4A29820B0C265D45.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/07087494011A8BD71E0AB56E4A29820B0C265D45.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 29 Dec 2025 11:33:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7c:83:9d:94:ce:eb:f7:ba:ca:fe:80:ad:47:d4:e2:4b:83:3f:ec:1a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=07087494011A8BD71E0AB56E4A29820B0C265D45 Validity Not Before: Dec 26 14:56:23 2025 GMT Not After : Dec 29 17:21:23 2025 GMT Subject: CN=44AC7FE42439FC012E45F057278B9965256F8867 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:4a:76:0f:4a:7b:d1:2f:62:c5:9e:6b:48:c0: 7c:0e:42:48:6a:90:7a:fc:5d:30:11:ca:32:45:39: 9d:75:59:83:25:0e:bf:03:f0:36:5e:b1:03:ae:a0: 93:0f:b5:c7:ea:bc:71:da:78:64:a0:a7:a3:86:f0: 63:5a:b4:07:14:2f:b2:6f:83:43:42:67:c3:e5:98: a8:54:e3:ad:d6:2a:47:5b:a2:f0:29:d5:6b:f1:94: 5f:33:9b:e4:0d:5b:27:c5:63:8d:e5:87:c9:31:e4: 15:2c:79:5a:85:52:5c:c8:5c:6f:28:24:32:a1:82: d8:2d:66:e8:d9:9e:c9:02:76:94:a4:51:d3:ae:c2: 0a:7f:ef:85:a0:8b:60:70:39:1b:bd:7c:c1:a2:36: 2d:fa:54:ec:41:d4:2f:76:39:72:ce:f3:de:eb:44: f0:e7:df:35:ef:ac:f8:4a:51:1a:7a:27:4c:dd:87: 82:8e:2d:59:bf:bd:19:64:9d:eb:2c:e5:35:d8:41: ad:78:97:e7:84:c4:29:ae:09:dc:b4:ad:2f:98:3b: e5:25:58:54:7d:7b:5b:b6:fb:d1:f4:b4:82:64:63: 59:13:16:bf:4b:c5:0c:5e:ad:46:1a:8e:68:50:e1: 66:a4:b5:b2:1e:21:de:59:9c:e0:b8:de:f8:16:08: 06:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:AC:7F:E4:24:39:FC:01:2E:45:F0:57:27:8B:99:65:25:6F:88:67 X509v3 Authority Key Identifier: keyid:07:08:74:94:01:1A:8B:D7:1E:0A:B5:6E:4A:29:82:0B:0C:26:5D:45 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/41405545-c35d-4de1-9618-44b5f417a303/0/07087494011A8BD71E0AB56E4A29820B0C265D45.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/07087494011A8BD71E0AB56E4A29820B0C265D45.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/41405545-c35d-4de1-9618-44b5f417a303/0/07087494011A8BD71E0AB56E4A29820B0C265D45.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 67:52:66:2c:0e:5f:c3:af:36:cd:f2:d8:40:43:8c:20:dc:e5: 24:38:4e:a9:bf:3e:90:46:b5:4b:f7:74:f8:e9:d7:d9:74:cb: 39:e0:d7:2e:08:0e:80:ff:a9:2a:80:7d:fb:3c:b6:14:dc:29: 95:4a:79:df:42:c4:39:e3:b2:14:7b:88:35:aa:9b:6d:43:72: 29:e5:18:3c:da:eb:36:c2:ad:74:84:e7:ef:bc:3f:23:2a:b4: 31:b8:c9:28:b1:ec:f7:de:af:cf:87:60:a9:9c:c0:55:6f:7d: 4e:79:13:93:56:be:15:04:6d:98:43:bc:45:4f:48:7f:fc:f1: 8e:c4:3e:05:8d:10:f6:65:11:b4:90:87:fb:54:93:1e:54:7b: ed:fd:cc:0b:50:57:08:ad:e3:20:34:6d:58:92:1f:7a:e1:fe: 32:06:72:16:50:e5:a4:d1:83:67:4a:a0:dd:e7:2d:a4:f4:f9: be:fd:13:0b:09:59:44:2a:bc:84:14:4f:0c:66:d5:07:a8:98: bf:bf:10:28:8a:38:d1:4e:eb:2b:19:ee:7c:fc:e6:45:6c:54: 9d:6f:9b:35:b0:6b:a8:41:11:94:16:7d:e6:86:ee:4f:04:07: 1c:6a:16:c3:fa:c0:49:7b:84:19:29:54:9e:91:22:c6:1d:59: eb:81:a9:15 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUfIOdlM7r97rK/oCtR9TiS4M/7BowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDcwODc0OTQwMTFBOEJENzFFMEFCNTZFNEEyOTgyMEIw QzI2NUQ0NTAeFw0yNTEyMjYxNDU2MjNaFw0yNTEyMjkxNzIxMjNaMDMxMTAvBgNV BAMTKDQ0QUM3RkU0MjQzOUZDMDEyRTQ1RjA1NzI3OEI5OTY1MjU2Rjg4NjcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDkSnYPSnvRL2LFnmtIwHwOQkhq kHr8XTARyjJFOZ11WYMlDr8D8DZesQOuoJMPtcfqvHHaeGSgp6OG8GNatAcUL7Jv g0NCZ8PlmKhU463WKkdbovAp1WvxlF8zm+QNWyfFY43lh8kx5BUseVqFUlzIXG8o JDKhgtgtZujZnskCdpSkUdOuwgp/74Wgi2BwORu9fMGiNi36VOxB1C92OXLO897r RPDn3zXvrPhKURp6J0zdh4KOLVm/vRlkness5TXYQa14l+eExCmuCdy0rS+YO+Ul WFR9e1u2+9H0tIJkY1kTFr9LxQxerUYajmhQ4WaktbIeId5ZnOC43vgWCAY5AgMB AAGjggI8MIICODAdBgNVHQ4EFgQURKx/5CQ5/AEuRfBXJ4uZZSVviGcwHwYDVR0j BBgwFoAUBwh0lAEai9ceCrVuSimCCwwmXUUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 MTQwNTU0NS1jMzVkLTRkZTEtOTYxOC00NGI1ZjQxN2EzMDMvMC8wNzA4NzQ5NDAx MUE4QkQ3MUUwQUI1NkU0QTI5ODIwQjBDMjY1RDQ1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMDcwODc0OTQwMTFBOEJENzFFMEFCNTZFNEEyOTgyMEIwQzI2 NUQ0NS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNDE0MDU1NDUtYzM1ZC00ZGUxLTk2 MTgtNDRiNWY0MTdhMzAzLzAvMDcwODc0OTQwMTFBOEJENzFFMEFCNTZFNEEyOTgy MEIwQzI2NUQ0NS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGdSZiwOX8OvNs3y2EBDjCDc5SQ4Tqm/PpBG tUv3dPjp19l0yzng1y4IDoD/qSqAffs8thTcKZVKed9CxDnjshR7iDWqm21Dcinl GDza6zbCrXSE5++8PyMqtDG4ySix7Pfer8+HYKmcwFVvfU55E5NWvhUEbZhDvEVP SH/88Y7EPgWNEPZlEbSQh/tUkx5Ue+39zAtQVwit4yA0bViSH3rh/jIGchZQ5aTR g2dKoN3nLaT0+b79EwsJWUQqvIQUTwxm1QeomL+/ECiKONFO6ysZ7nz85kVsVJ1v mzWwa6hBEZQWfeaG7k8EBxxqFsP6wEl7hBkpVJ6RIsYdWeuBqRU= -----END CERTIFICATE-----Generated at Sat Dec 27 07:27:34 2025 by rpki-client