This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/c08cc0b3-2508-477f-9f25-6684d6572dda/0/07560F77A1685B4C155E037BCDB207359FA510B4.mft File: 07560F77A1685B4C155E037BCDB207359FA510B4.mft (raw, json) Hash identifier: J9H3Nh7eTFgtwJcfvVdl5t5ArjTnd/ex1kKsjeopJY4= Subject key identifier: B8:48:9F:D5:59:6E:CE:A2:C8:D2:D8:A6:0C:1F:B1:5B:FA:E6:3B:A9 Authority key identifier: 07:56:0F:77:A1:68:5B:4C:15:5E:03:7B:CD:B2:07:35:9F:A5:10:B4 Certificate issuer: /CN=07560F77A1685B4C155E037BCDB207359FA510B4 Certificate serial: 3EA07ABBF57E23586B191853EC44E264CC2361F2 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/07560F77A1685B4C155E037BCDB207359FA510B4.cer Subject info access: rsync://repo-rpki.idnic.net/repo/c08cc0b3-2508-477f-9f25-6684d6572dda/0/07560F77A1685B4C155E037BCDB207359FA510B4.mft Manifest number: 038B Signing time: Sat 27 Dec 2025 09:32:09 +0000 Manifest this update: Sat 27 Dec 2025 09:27:09 +0000 Manifest next update: Tue 30 Dec 2025 17:03:09 +0000 Files and hashes: 1: 3130332e3137322e31392e302f32342d3234203d3e20313432333832.roa (hash: m+R5stnH6Lsh9qXKonDHyLXJDyC1D/I30DO2sDWbC8U=) 2: 3130332e3137322e31382e302f32342d3234203d3e20313432333832.roa (hash: plRrfoS9u18r6cJ21dIs2GkBNTJ8mFpNHfj06xwp/io=) 3: 07560F77A1685B4C155E037BCDB207359FA510B4.crl (hash: zPNuHFxq/VtxpCGLkYAK0zFc5dslc4rjMCU9nkHIL4o=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/c08cc0b3-2508-477f-9f25-6684d6572dda/0/07560F77A1685B4C155E037BCDB207359FA510B4.crl rsync://repo-rpki.idnic.net/repo/c08cc0b3-2508-477f-9f25-6684d6572dda/0/07560F77A1685B4C155E037BCDB207359FA510B4.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/07560F77A1685B4C155E037BCDB207359FA510B4.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 30 Dec 2025 17:03:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3e:a0:7a:bb:f5:7e:23:58:6b:19:18:53:ec:44:e2:64:cc:23:61:f2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=07560F77A1685B4C155E037BCDB207359FA510B4 Validity Not Before: Dec 27 09:27:09 2025 GMT Not After : Dec 30 17:03:09 2025 GMT Subject: CN=B8489FD5596ECEA2C8D2D8A60C1FB15BFAE63BA9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:70:f7:85:bc:95:55:bc:46:ec:7c:5f:86:7a: 91:10:ea:77:f6:15:5c:39:66:7c:19:41:18:c0:95: 35:7d:24:fa:99:bb:62:49:98:c3:e2:0e:69:1f:df: 8e:16:44:9c:df:05:09:84:62:ae:e9:8c:f9:a1:18: 58:99:16:02:c6:80:95:f3:86:cb:ac:d0:ac:24:4b: f1:90:2f:a9:00:88:b5:b4:4b:bc:8c:4c:21:d6:48: 41:2c:db:df:59:03:f1:c5:e8:5f:93:a2:61:fd:75: 0d:d6:44:7b:e2:9d:cb:e3:54:f8:29:08:1b:74:a0: 56:5f:83:e9:18:44:37:a9:43:82:3f:f2:01:a0:b8: 45:a2:67:59:b3:e1:57:08:87:09:78:cb:3d:57:75: 79:ae:c9:7d:53:e9:33:c3:2c:7f:d8:f0:73:31:90: d6:ee:3c:42:5b:6d:b1:1f:48:4d:d7:e1:fb:12:7d: fc:f2:95:d7:5f:43:26:3e:52:48:c5:d2:93:ce:62: 21:2e:7c:f4:96:da:f6:c7:42:50:5e:32:c2:1c:04: 62:42:8b:a5:a1:5c:85:5e:43:ab:28:0a:e8:6b:32: 0c:e3:b9:09:b7:d9:85:5f:bf:d9:6d:d3:79:89:e5: 99:53:f7:a8:72:83:8e:2d:3e:f2:01:9f:92:e6:99: b8:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:48:9F:D5:59:6E:CE:A2:C8:D2:D8:A6:0C:1F:B1:5B:FA:E6:3B:A9 X509v3 Authority Key Identifier: keyid:07:56:0F:77:A1:68:5B:4C:15:5E:03:7B:CD:B2:07:35:9F:A5:10:B4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/c08cc0b3-2508-477f-9f25-6684d6572dda/0/07560F77A1685B4C155E037BCDB207359FA510B4.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/07560F77A1685B4C155E037BCDB207359FA510B4.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c08cc0b3-2508-477f-9f25-6684d6572dda/0/07560F77A1685B4C155E037BCDB207359FA510B4.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 43:b3:1e:7c:40:f6:67:95:b0:f5:0e:f0:ad:06:cb:96:46:e3: 66:49:3b:75:64:78:39:b2:7d:34:70:7c:30:63:97:15:2f:e5: ac:cb:8e:89:15:5d:70:75:ea:42:12:0d:0a:10:59:68:81:eb: ec:49:30:a9:8b:28:42:91:d2:dd:f4:a4:e5:89:6b:6a:32:7b: 71:94:cc:5d:f1:64:1b:80:83:0d:b7:65:a9:3e:44:e1:77:be: 2e:ea:ec:e3:55:d6:cf:d6:3c:13:74:a5:5b:d8:90:b8:1c:3f: 50:d0:7a:e9:12:41:ed:6d:be:2f:83:1d:1f:63:e1:8c:44:eb: 8d:ee:2a:19:06:16:fc:1b:38:68:f2:02:a6:2d:88:fd:88:81: 39:55:54:af:c1:ee:d5:2e:79:81:77:5e:3d:f4:44:2e:8f:9f: dc:8a:82:07:2c:6b:98:9b:f2:1e:dc:4f:9e:f7:8c:8e:4e:56: ad:8a:0b:0b:e2:85:48:1f:2c:7b:d8:b1:d7:23:43:2f:c8:1a: d1:95:ec:78:f7:d5:77:0f:66:d9:d9:e3:c0:b8:4a:1d:11:0b: 2f:c7:ae:85:ed:8e:df:97:06:c6:d8:9f:8e:ac:2d:62:6c:72: f6:fa:2f:d1:13:32:3a:b8:00:54:c3:fb:b0:71:dc:7a:09:89: 73:ad:06:8f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUPqB6u/V+I1hrGRhT7ETiZMwjYfIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDc1NjBGNzdBMTY4NUI0QzE1NUUwMzdCQ0RCMjA3MzU5 RkE1MTBCNDAeFw0yNTEyMjcwOTI3MDlaFw0yNTEyMzAxNzAzMDlaMDMxMTAvBgNV BAMTKEI4NDg5RkQ1NTk2RUNFQTJDOEQyRDhBNjBDMUZCMTVCRkFFNjNCQTkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC6cPeFvJVVvEbsfF+GepEQ6nf2 FVw5ZnwZQRjAlTV9JPqZu2JJmMPiDmkf344WRJzfBQmEYq7pjPmhGFiZFgLGgJXz hsus0KwkS/GQL6kAiLW0S7yMTCHWSEEs299ZA/HF6F+TomH9dQ3WRHvincvjVPgp CBt0oFZfg+kYRDepQ4I/8gGguEWiZ1mz4VcIhwl4yz1XdXmuyX1T6TPDLH/Y8HMx kNbuPEJbbbEfSE3X4fsSffzylddfQyY+UkjF0pPOYiEufPSW2vbHQlBeMsIcBGJC i6WhXIVeQ6soCuhrMgzjuQm32YVfv9lt03mJ5ZlT96hyg44tPvIBn5LmmbgpAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUuEif1VluzqLI0timDB+xW/rmO6kwHwYDVR0j BBgwFoAUB1YPd6FoW0wVXgN7zbIHNZ+lELQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j MDhjYzBiMy0yNTA4LTQ3N2YtOWYyNS02Njg0ZDY1NzJkZGEvMC8wNzU2MEY3N0Ex Njg1QjRDMTU1RTAzN0JDREIyMDczNTlGQTUxMEI0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMDc1NjBGNzdBMTY4NUI0QzE1NUUwMzdCQ0RCMjA3MzU5RkE1 MTBCNC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYzA4Y2MwYjMtMjUwOC00NzdmLTlm MjUtNjY4NGQ2NTcyZGRhLzAvMDc1NjBGNzdBMTY4NUI0QzE1NUUwMzdCQ0RCMjA3 MzU5RkE1MTBCNC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEOzHnxA9meVsPUO8K0Gy5ZG42ZJO3VkeDmy fTRwfDBjlxUv5azLjokVXXB16kISDQoQWWiB6+xJMKmLKEKR0t30pOWJa2oye3GU zF3xZBuAgw23Zak+ROF3vi7q7ONV1s/WPBN0pVvYkLgcP1DQeukSQe1tvi+DHR9j 4YxE643uKhkGFvwbOGjyAqYtiP2IgTlVVK/B7tUueYF3Xj30RC6Pn9yKggcsa5ib 8h7cT573jI5OVq2KCwvihUgfLHvYsdcjQy/IGtGV7Hj31XcPZtnZ48C4Sh0RCy/H roXtjt+XBsbYn46sLWJscvb6L9ETMjq4AFTD+7Bx3HoJiXOtBo8= -----END CERTIFICATE-----Generated at Mon Dec 29 06:52:26 2025 by rpki-client