This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/e256bbba-1826-4d86-b873-2f6dd6325771/0/07AD580AB5CD76B94856F9AC742EDD757E7880B0.mft File: 07AD580AB5CD76B94856F9AC742EDD757E7880B0.mft (raw, json) Hash identifier: XK2TF1fioXAaFsnwj62rWxfAWpwATVDkBUxohrZNNY8= Subject key identifier: B1:B2:BA:DF:C9:3D:15:8C:F1:14:18:7D:BD:2B:98:FC:6E:2D:F2:AF Authority key identifier: 07:AD:58:0A:B5:CD:76:B9:48:56:F9:AC:74:2E:DD:75:7E:78:80:B0 Certificate issuer: /CN=07AD580AB5CD76B94856F9AC742EDD757E7880B0 Certificate serial: 08607B5D070409483DCA01E96D7AB381FD07D377 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/07AD580AB5CD76B94856F9AC742EDD757E7880B0.cer Subject info access: rsync://repo-rpki.idnic.net/repo/e256bbba-1826-4d86-b873-2f6dd6325771/0/07AD580AB5CD76B94856F9AC742EDD757E7880B0.mft Manifest number: F5 Signing time: Sat 27 Dec 2025 01:11:26 +0000 Manifest this update: Sat 27 Dec 2025 01:06:26 +0000 Manifest next update: Tue 30 Dec 2025 03:33:26 +0000 Files and hashes: 1: 3136302e32322e32342e302f32332d3233203d3e20313532383030.roa (hash: NxfUk896HyTOfrSpP12vAOga4gJLt6+kmfvZ86uKz+o=) 2: 3136302e32322e32342e302f32342d3234203d3e20313532383030.roa (hash: uFyUwDp7HftGLg0g84ngD2vF4KM8TeTAH6ZOZ5/X7R0=) 3: 07AD580AB5CD76B94856F9AC742EDD757E7880B0.crl (hash: kqF8rzQxigOjJwD+UIMKhZpNJHhaXSLKmnAt/m19KFU=) 4: 3136302e32322e32352e302f32342d3234203d3e20313532383030.roa (hash: 2Vf9dnfwxWJU32Hy8iKNhEgZIr2NXcazWOlIdCFgYLI=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/e256bbba-1826-4d86-b873-2f6dd6325771/0/07AD580AB5CD76B94856F9AC742EDD757E7880B0.crl rsync://repo-rpki.idnic.net/repo/e256bbba-1826-4d86-b873-2f6dd6325771/0/07AD580AB5CD76B94856F9AC742EDD757E7880B0.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/07AD580AB5CD76B94856F9AC742EDD757E7880B0.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 30 Dec 2025 03:33:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 08:60:7b:5d:07:04:09:48:3d:ca:01:e9:6d:7a:b3:81:fd:07:d3:77 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=07AD580AB5CD76B94856F9AC742EDD757E7880B0 Validity Not Before: Dec 27 01:06:26 2025 GMT Not After : Dec 30 03:33:26 2025 GMT Subject: CN=B1B2BADFC93D158CF114187DBD2B98FC6E2DF2AF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:0d:3f:a7:dc:c5:fb:4f:7f:e6:72:2f:2b:62: 37:d8:45:23:38:86:94:49:3e:f7:eb:e5:8c:ae:e9: f5:79:3d:16:a1:32:c9:dd:de:66:38:73:dc:8f:52: 98:e5:54:95:5e:bc:7a:03:7f:af:85:0e:30:70:5c: f7:53:7e:41:be:46:4c:60:b5:1c:06:5b:1f:30:39: 43:10:fe:50:f7:2a:6c:cd:56:81:60:0f:a9:3c:50: eb:50:4e:c7:e0:85:b9:2e:c9:14:68:76:fa:88:d5: a7:8c:5e:5c:c5:d5:5e:55:93:93:03:5b:18:6a:f1: b3:1e:9f:24:75:7c:4f:83:fd:b2:97:dd:05:bf:9a: a5:e3:ef:e8:5a:3f:bf:47:18:5f:2f:30:4d:d0:8e: 95:6e:36:24:8c:54:bf:b6:cd:4c:59:16:67:91:12: f5:e7:c4:7b:f6:39:51:24:44:45:71:4b:f6:d1:46: 8a:ff:57:2e:27:fd:cc:de:dc:0b:0a:00:11:df:de: 5a:17:34:13:2f:7b:9c:e7:8b:58:c9:e8:6e:e2:f1: c4:3c:c8:b0:ae:92:89:63:95:88:8f:8b:52:6e:ea: 8c:a0:65:18:a8:14:44:0f:e4:d6:ab:19:53:7b:e1: 44:d0:04:5a:4e:87:85:4f:40:80:9f:61:71:82:e6: 2d:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:B2:BA:DF:C9:3D:15:8C:F1:14:18:7D:BD:2B:98:FC:6E:2D:F2:AF X509v3 Authority Key Identifier: keyid:07:AD:58:0A:B5:CD:76:B9:48:56:F9:AC:74:2E:DD:75:7E:78:80:B0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/e256bbba-1826-4d86-b873-2f6dd6325771/0/07AD580AB5CD76B94856F9AC742EDD757E7880B0.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/07AD580AB5CD76B94856F9AC742EDD757E7880B0.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e256bbba-1826-4d86-b873-2f6dd6325771/0/07AD580AB5CD76B94856F9AC742EDD757E7880B0.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9c:72:a6:65:b1:cb:ee:6f:a8:59:36:2f:0d:6a:81:7f:6d:a9: 5b:d5:36:cd:70:8c:2a:b4:37:cb:8a:1f:4f:a9:65:1b:fc:d8: 90:a9:b5:8e:05:2c:47:52:35:29:6a:0e:d9:d7:01:46:fc:b2: 80:de:71:d7:6a:f6:8a:1b:dd:97:e9:a9:d8:79:c6:ea:a7:55: f8:5a:e6:76:bb:97:e9:f8:21:bc:2c:a5:40:24:99:0c:4e:11: e3:b0:49:6c:86:77:af:1f:b3:85:96:ed:13:27:f7:53:7a:74: ca:d4:20:bf:50:6d:4c:11:0a:4b:ce:59:77:76:2c:c6:91:08: 95:63:65:21:94:40:7a:5f:a8:b5:c7:6f:81:99:5e:4d:b9:3f: ac:ec:d2:08:7f:08:78:a7:2a:78:18:06:0b:7a:9b:73:3f:2e: 8c:e9:fb:6e:43:f7:a6:bb:8f:eb:38:d0:c7:6d:2a:f0:4a:15: 9b:a7:06:7b:28:f2:d8:cd:0b:d9:79:46:68:d4:d5:a8:3c:af: 89:82:8c:23:89:59:93:e6:45:87:b3:82:5d:4b:a4:18:42:be: 17:8e:28:7b:e9:40:cd:20:4e:19:5b:0e:c9:62:9d:d2:3d:32: 40:d1:bf:3b:97:d3:10:d9:0c:23:16:94:be:58:cc:b8:af:72: 8a:bd:5e:7a -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUCGB7XQcECUg9ygHpbXqzgf0H03cwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDdBRDU4MEFCNUNENzZCOTQ4NTZGOUFDNzQyRURENzU3 RTc4ODBCMDAeFw0yNTEyMjcwMTA2MjZaFw0yNTEyMzAwMzMzMjZaMDMxMTAvBgNV BAMTKEIxQjJCQURGQzkzRDE1OENGMTE0MTg3REJEMkI5OEZDNkUyREYyQUYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC6DT+n3MX7T3/mci8rYjfYRSM4 hpRJPvfr5Yyu6fV5PRahMsnd3mY4c9yPUpjlVJVevHoDf6+FDjBwXPdTfkG+Rkxg tRwGWx8wOUMQ/lD3KmzNVoFgD6k8UOtQTsfghbkuyRRodvqI1aeMXlzF1V5Vk5MD Wxhq8bMenyR1fE+D/bKX3QW/mqXj7+haP79HGF8vME3QjpVuNiSMVL+2zUxZFmeR EvXnxHv2OVEkREVxS/bRRor/Vy4n/cze3AsKABHf3loXNBMve5zni1jJ6G7i8cQ8 yLCukoljlYiPi1Ju6oygZRioFEQP5NarGVN74UTQBFpOh4VPQICfYXGC5i1JAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUsbK638k9FYzxFBh9vSuY/G4t8q8wHwYDVR0j BBgwFoAUB61YCrXNdrlIVvmsdC7ddX54gLAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l MjU2YmJiYS0xODI2LTRkODYtYjg3My0yZjZkZDYzMjU3NzEvMC8wN0FENTgwQUI1 Q0Q3NkI5NDg1NkY5QUM3NDJFREQ3NTdFNzg4MEIwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvMDdBRDU4MEFCNUNENzZCOTQ4NTZGOUFDNzQyRURENzU3RTc4 ODBCMC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZTI1NmJiYmEtMTgyNi00ZDg2LWI4 NzMtMmY2ZGQ2MzI1NzcxLzAvMDdBRDU4MEFCNUNENzZCOTQ4NTZGOUFDNzQyRURE NzU3RTc4ODBCMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJxypmWxy+5vqFk2Lw1qgX9tqVvVNs1wjCq0 N8uKH0+pZRv82JCptY4FLEdSNSlqDtnXAUb8soDecddq9oob3Zfpqdh5xuqnVfha 5na7l+n4IbwspUAkmQxOEeOwSWyGd68fs4WW7RMn91N6dMrUIL9QbUwRCkvOWXd2 LMaRCJVjZSGUQHpfqLXHb4GZXk25P6zs0gh/CHinKngYBgt6m3M/Lozp+25D96a7 j+s40MdtKvBKFZunBnso8tjNC9l5RmjU1ag8r4mCjCOJWZPmRYezgl1LpBhCvheO KHvpQM0gThlbDslindI9MkDRvzuX0xDZDCMWlL5YzLivcoq9Xno= -----END CERTIFICATE-----Generated at Sat Dec 27 02:34:55 2025 by rpki-client