This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/e256bbba-1826-4d86-b873-2f6dd6325771/0/07AD580AB5CD76B94856F9AC742EDD757E7880B0.mft File: 07AD580AB5CD76B94856F9AC742EDD757E7880B0.mft (raw, json) Hash identifier: apU+TCZ4brKcml5RGzBWb9wx5KH9MhxaQAs+x52PJiw= Subject key identifier: 20:45:94:E8:81:65:96:45:E7:1F:8B:11:6B:EA:9F:CE:8B:72:CA:F7 Authority key identifier: 07:AD:58:0A:B5:CD:76:B9:48:56:F9:AC:74:2E:DD:75:7E:78:80:B0 Certificate issuer: /CN=07AD580AB5CD76B94856F9AC742EDD757E7880B0 Certificate serial: 3FD8DBBC6481E8E052E7C9195426CD8F189CB4C5 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/07AD580AB5CD76B94856F9AC742EDD757E7880B0.cer Subject info access: rsync://repo-rpki.idnic.net/repo/e256bbba-1826-4d86-b873-2f6dd6325771/0/07AD580AB5CD76B94856F9AC742EDD757E7880B0.mft Manifest number: EA Signing time: Mon 01 Dec 2025 21:31:35 +0000 Manifest this update: Mon 01 Dec 2025 21:26:35 +0000 Manifest next update: Fri 05 Dec 2025 05:17:35 +0000 Files and hashes: 1: 07AD580AB5CD76B94856F9AC742EDD757E7880B0.crl (hash: YsOWTFUrI71Xzj4dQa9nlDXn+owJVrQqzTbm/d+UY4k=) 2: 3136302e32322e32342e302f32332d3233203d3e20313532383030.roa (hash: NxfUk896HyTOfrSpP12vAOga4gJLt6+kmfvZ86uKz+o=) 3: 3136302e32322e32342e302f32342d3234203d3e20313532383030.roa (hash: uFyUwDp7HftGLg0g84ngD2vF4KM8TeTAH6ZOZ5/X7R0=) 4: 3136302e32322e32352e302f32342d3234203d3e20313532383030.roa (hash: 2Vf9dnfwxWJU32Hy8iKNhEgZIr2NXcazWOlIdCFgYLI=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/e256bbba-1826-4d86-b873-2f6dd6325771/0/07AD580AB5CD76B94856F9AC742EDD757E7880B0.crl rsync://repo-rpki.idnic.net/repo/e256bbba-1826-4d86-b873-2f6dd6325771/0/07AD580AB5CD76B94856F9AC742EDD757E7880B0.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/07AD580AB5CD76B94856F9AC742EDD757E7880B0.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 05 Dec 2025 05:17:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3f:d8:db:bc:64:81:e8:e0:52:e7:c9:19:54:26:cd:8f:18:9c:b4:c5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=07AD580AB5CD76B94856F9AC742EDD757E7880B0 Validity Not Before: Dec 1 21:26:35 2025 GMT Not After : Dec 5 05:17:35 2025 GMT Subject: CN=204594E881659645E71F8B116BEA9FCE8B72CAF7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:b8:cd:bc:c4:58:3b:21:9e:1a:a0:0c:5f:d4: 90:0e:14:95:34:d8:43:0a:fd:29:ee:5d:c7:33:d1: 48:06:1b:6b:a6:08:f3:e0:6e:62:a8:33:44:a7:50: 74:44:18:56:96:2d:b2:a4:65:9a:e4:66:6a:95:8e: 5b:43:56:f1:b2:1d:34:11:f5:ac:14:c1:01:77:dc: 22:05:e1:12:e4:cf:8d:6c:fc:38:e8:bb:a4:f4:c8: ef:2c:aa:ed:cc:76:a2:fe:1a:c7:e4:8f:e3:87:2f: 75:68:26:93:0b:28:9d:f7:2b:ec:8c:f4:74:b6:da: 9f:39:42:c9:72:18:9f:43:02:34:c3:f5:79:bf:88: e1:b0:7d:68:7d:a5:78:a2:40:f7:9c:df:7f:02:c4: 10:e8:b9:b1:42:ef:3c:ca:21:dc:37:1e:6e:c5:57: 84:5e:36:9d:7f:54:47:5c:68:d8:46:a1:54:84:33: 72:62:00:27:e5:af:74:4d:88:e0:16:95:a0:b0:83: f9:65:94:47:1a:5c:c0:41:2f:02:75:86:45:a5:6a: ff:6e:8e:2a:52:4b:ff:34:94:57:0a:ed:fd:e5:64: 5b:02:88:b2:b5:14:4f:cc:13:4a:98:92:10:45:2f: 2d:5f:ab:e4:91:76:94:ae:bb:48:c0:d1:35:89:57: 6a:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:45:94:E8:81:65:96:45:E7:1F:8B:11:6B:EA:9F:CE:8B:72:CA:F7 X509v3 Authority Key Identifier: keyid:07:AD:58:0A:B5:CD:76:B9:48:56:F9:AC:74:2E:DD:75:7E:78:80:B0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/e256bbba-1826-4d86-b873-2f6dd6325771/0/07AD580AB5CD76B94856F9AC742EDD757E7880B0.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/07AD580AB5CD76B94856F9AC742EDD757E7880B0.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e256bbba-1826-4d86-b873-2f6dd6325771/0/07AD580AB5CD76B94856F9AC742EDD757E7880B0.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption bc:8a:44:47:0b:00:72:1d:ee:6c:9d:15:bd:43:9b:20:72:92: 82:f2:78:51:1e:ca:3c:ad:b5:37:0c:fb:50:04:cb:68:4f:30: e1:43:43:4f:e5:a7:a0:7a:be:46:4d:5b:15:ea:a4:ae:70:b1: b3:22:7c:b1:02:ca:d9:51:c8:6f:5f:1a:2b:34:2b:47:6f:19: 29:e1:74:96:93:b1:2c:c6:69:f8:6a:69:61:50:a1:c4:a1:70: ce:c5:9f:4a:2f:aa:e3:e1:5e:88:f4:49:c9:ec:62:f2:e8:57: 0f:cc:50:6b:44:4c:84:c4:9c:58:01:de:43:ac:91:ac:57:85: 89:20:0d:a0:01:a6:49:30:9c:c7:1f:07:31:c1:f6:88:ce:f8: e8:6f:0a:92:23:10:0f:dc:57:d4:57:9c:82:6c:d4:40:d9:e3: aa:69:b0:7d:48:ad:7e:f2:56:56:3e:9e:9e:e0:31:bd:73:af: e2:81:6e:10:22:0f:0f:78:b3:0f:c7:e2:32:2e:9a:b8:fc:cb: e8:f5:b6:99:1f:24:cb:66:1a:a6:8e:9c:af:ee:04:f7:a5:1d: 4c:34:34:4e:e5:cb:cb:70:c0:79:a3:29:49:8b:1e:d0:18:f6: 2f:fd:f0:f3:1d:a4:ec:ef:ab:6d:c9:8e:1d:62:10:73:bd:ea: c6:3f:6c:c4 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUP9jbvGSB6OBS58kZVCbNjxictMUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDdBRDU4MEFCNUNENzZCOTQ4NTZGOUFDNzQyRURENzU3 RTc4ODBCMDAeFw0yNTEyMDEyMTI2MzVaFw0yNTEyMDUwNTE3MzVaMDMxMTAvBgNV BAMTKDIwNDU5NEU4ODE2NTk2NDVFNzFGOEIxMTZCRUE5RkNFOEI3MkNBRjcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCyuM28xFg7IZ4aoAxf1JAOFJU0 2EMK/SnuXccz0UgGG2umCPPgbmKoM0SnUHREGFaWLbKkZZrkZmqVjltDVvGyHTQR 9awUwQF33CIF4RLkz41s/Djou6T0yO8squ3MdqL+Gsfkj+OHL3VoJpMLKJ33K+yM 9HS22p85QslyGJ9DAjTD9Xm/iOGwfWh9pXiiQPec338CxBDoubFC7zzKIdw3Hm7F V4ReNp1/VEdcaNhGoVSEM3JiACflr3RNiOAWlaCwg/lllEcaXMBBLwJ1hkWlav9u jipSS/80lFcK7f3lZFsCiLK1FE/ME0qYkhBFLy1fq+SRdpSuu0jA0TWJV2rnAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUIEWU6IFllkXnH4sRa+qfzotyyvcwHwYDVR0j BBgwFoAUB61YCrXNdrlIVvmsdC7ddX54gLAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l MjU2YmJiYS0xODI2LTRkODYtYjg3My0yZjZkZDYzMjU3NzEvMC8wN0FENTgwQUI1 Q0Q3NkI5NDg1NkY5QUM3NDJFREQ3NTdFNzg4MEIwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvMDdBRDU4MEFCNUNENzZCOTQ4NTZGOUFDNzQyRURENzU3RTc4 ODBCMC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZTI1NmJiYmEtMTgyNi00ZDg2LWI4 NzMtMmY2ZGQ2MzI1NzcxLzAvMDdBRDU4MEFCNUNENzZCOTQ4NTZGOUFDNzQyRURE NzU3RTc4ODBCMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALyKREcLAHId7mydFb1DmyBykoLyeFEeyjyt tTcM+1AEy2hPMOFDQ0/lp6B6vkZNWxXqpK5wsbMifLECytlRyG9fGis0K0dvGSnh dJaTsSzGafhqaWFQocShcM7Fn0ovquPhXoj0ScnsYvLoVw/MUGtETITEnFgB3kOs kaxXhYkgDaABpkkwnMcfBzHB9ojO+OhvCpIjEA/cV9RXnIJs1EDZ46ppsH1IrX7y VlY+np7gMb1zr+KBbhAiDw94sw/H4jIumrj8y+j1tpkfJMtmGqaOnK/uBPelHUw0 NE7ly8twwHmjKUmLHtAY9i/98PMdpOzvq23Jjh1iEHO96sY/bMQ= -----END CERTIFICATE-----Generated at Wed Dec 3 17:16:09 2025 by rpki-client