This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/e256bbba-1826-4d86-b873-2f6dd6325771/0/07AD580AB5CD76B94856F9AC742EDD757E7880B0.mft File: 07AD580AB5CD76B94856F9AC742EDD757E7880B0.mft (raw, json) Hash identifier: e8QmPjqqzdUgO6QhTi3dvUZGT9kg75wSWNLPYoqSXPM= Subject key identifier: 59:7C:92:25:42:4E:41:75:51:EC:98:5F:9F:91:96:A2:41:48:27:B9 Authority key identifier: 07:AD:58:0A:B5:CD:76:B9:48:56:F9:AC:74:2E:DD:75:7E:78:80:B0 Certificate issuer: /CN=07AD580AB5CD76B94856F9AC742EDD757E7880B0 Certificate serial: 0E305D6783F8EEA736349937BE608A98FD1AD3C6 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/07AD580AB5CD76B94856F9AC742EDD757E7880B0.cer Subject info access: rsync://repo-rpki.idnic.net/repo/e256bbba-1826-4d86-b873-2f6dd6325771/0/07AD580AB5CD76B94856F9AC742EDD757E7880B0.mft Manifest number: EC Signing time: Sat 06 Dec 2025 16:01:27 +0000 Manifest this update: Sat 06 Dec 2025 15:56:27 +0000 Manifest next update: Wed 10 Dec 2025 02:42:27 +0000 Files and hashes: 1: 3136302e32322e32342e302f32342d3234203d3e20313532383030.roa (hash: uFyUwDp7HftGLg0g84ngD2vF4KM8TeTAH6ZOZ5/X7R0=) 2: 07AD580AB5CD76B94856F9AC742EDD757E7880B0.crl (hash: YeJmy/TfsPgGTKf09dtZ0jghLceNu1RXkFzGt97otuc=) 3: 3136302e32322e32352e302f32342d3234203d3e20313532383030.roa (hash: 2Vf9dnfwxWJU32Hy8iKNhEgZIr2NXcazWOlIdCFgYLI=) 4: 3136302e32322e32342e302f32332d3233203d3e20313532383030.roa (hash: NxfUk896HyTOfrSpP12vAOga4gJLt6+kmfvZ86uKz+o=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/e256bbba-1826-4d86-b873-2f6dd6325771/0/07AD580AB5CD76B94856F9AC742EDD757E7880B0.crl rsync://repo-rpki.idnic.net/repo/e256bbba-1826-4d86-b873-2f6dd6325771/0/07AD580AB5CD76B94856F9AC742EDD757E7880B0.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/07AD580AB5CD76B94856F9AC742EDD757E7880B0.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 09 Dec 2025 06:55:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0e:30:5d:67:83:f8:ee:a7:36:34:99:37:be:60:8a:98:fd:1a:d3:c6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=07AD580AB5CD76B94856F9AC742EDD757E7880B0 Validity Not Before: Dec 6 15:56:27 2025 GMT Not After : Dec 10 02:42:27 2025 GMT Subject: CN=597C9225424E417551EC985F9F9196A2414827B9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:f7:2d:1b:ba:72:ab:96:0b:42:53:93:a1:3e: af:2e:ac:6b:97:45:ad:96:08:f8:c6:d7:6c:27:22: 3d:76:a0:18:51:15:ee:2e:f0:3b:c5:76:88:15:20: 82:a5:51:82:c7:d0:2d:d6:ad:3a:78:33:d5:86:67: d4:30:5b:0c:5a:0f:8f:f9:38:4d:22:ab:9b:88:06: 9e:06:35:9d:55:26:e7:b5:9a:3a:5f:d9:c5:4b:b6: 75:4b:c9:96:3e:a5:a8:08:55:fc:1d:e0:eb:d7:bb: c8:aa:70:a5:fc:04:3f:60:8e:ce:50:e0:d9:a1:4a: 18:23:2a:d6:c2:f8:2e:a2:46:af:fd:48:98:d8:5a: b8:76:1a:82:95:dc:f0:10:6c:d4:e1:90:bd:ab:7a: 9b:fb:83:ec:f3:53:7a:fa:e7:42:ba:90:b6:51:94: 87:da:56:7f:d3:e4:e9:f0:1a:1e:dc:91:b9:90:a5: 64:50:1c:75:77:94:01:2e:6e:b3:5b:90:c5:c6:ac: e6:1b:a2:9c:4b:4c:04:2b:94:22:39:47:a4:b3:4a: 32:0b:53:b7:8e:43:a4:14:e1:84:7b:76:b8:50:2c: ab:6b:a0:50:97:0e:17:25:b2:da:a3:52:b3:34:98: 03:63:71:c4:eb:d7:4d:31:3e:90:c0:a7:af:a7:74: 30:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 59:7C:92:25:42:4E:41:75:51:EC:98:5F:9F:91:96:A2:41:48:27:B9 X509v3 Authority Key Identifier: keyid:07:AD:58:0A:B5:CD:76:B9:48:56:F9:AC:74:2E:DD:75:7E:78:80:B0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/e256bbba-1826-4d86-b873-2f6dd6325771/0/07AD580AB5CD76B94856F9AC742EDD757E7880B0.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/07AD580AB5CD76B94856F9AC742EDD757E7880B0.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e256bbba-1826-4d86-b873-2f6dd6325771/0/07AD580AB5CD76B94856F9AC742EDD757E7880B0.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 96:0d:9c:cc:a9:ff:96:4d:bf:28:81:25:9c:26:56:e3:ba:49: b8:11:36:48:f2:ea:30:92:6a:b7:68:ee:92:c2:86:6e:9e:db: f8:e6:4f:0b:fd:3e:aa:82:d6:22:d6:56:43:37:29:17:fb:be: 3e:36:5d:16:cc:63:56:4c:da:e1:bf:aa:01:42:f3:b5:5a:18: a2:d6:29:37:76:ac:91:f0:2c:1d:12:1c:2a:9c:2e:53:ac:2d: 66:12:34:d2:89:bc:f2:a8:06:35:df:0a:7e:ba:07:75:f6:e6: 75:9b:84:fa:a8:9e:cf:50:dc:8a:4b:e6:8d:68:d9:73:da:cf: 14:22:0a:2d:b8:95:c0:26:15:5c:de:0b:72:04:c8:5c:f1:5b: d4:2a:80:af:56:da:82:37:1b:ae:12:c0:72:97:01:05:28:5c: d7:5c:47:5c:93:69:68:5d:c3:ba:74:e4:a0:4f:f9:30:b7:87: 65:61:c5:06:7e:e7:09:c8:39:65:68:ed:5f:1b:61:19:e6:5a: 55:07:4e:2b:b8:cf:e9:4c:d3:3d:d7:bc:20:6e:b4:53:d9:25: 4b:e0:2c:b9:7b:db:68:b5:89:3c:58:ab:b2:cb:38:05:0a:27: f6:8b:48:a4:90:4d:86:a7:b5:f6:a3:42:12:a3:18:3c:1d:be: 74:9f:68:a3 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUDjBdZ4P47qc2NJk3vmCKmP0a08YwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDdBRDU4MEFCNUNENzZCOTQ4NTZGOUFDNzQyRURENzU3 RTc4ODBCMDAeFw0yNTEyMDYxNTU2MjdaFw0yNTEyMTAwMjQyMjdaMDMxMTAvBgNV BAMTKDU5N0M5MjI1NDI0RTQxNzU1MUVDOTg1RjlGOTE5NkEyNDE0ODI3QjkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCu9y0bunKrlgtCU5OhPq8urGuX Ra2WCPjG12wnIj12oBhRFe4u8DvFdogVIIKlUYLH0C3WrTp4M9WGZ9QwWwxaD4/5 OE0iq5uIBp4GNZ1VJue1mjpf2cVLtnVLyZY+pagIVfwd4OvXu8iqcKX8BD9gjs5Q 4NmhShgjKtbC+C6iRq/9SJjYWrh2GoKV3PAQbNThkL2repv7g+zzU3r650K6kLZR lIfaVn/T5OnwGh7ckbmQpWRQHHV3lAEubrNbkMXGrOYbopxLTAQrlCI5R6SzSjIL U7eOQ6QU4YR7drhQLKtroFCXDhclstqjUrM0mANjccTr100xPpDAp6+ndDATAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUWXySJUJOQXVR7Jhfn5GWokFIJ7kwHwYDVR0j BBgwFoAUB61YCrXNdrlIVvmsdC7ddX54gLAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l MjU2YmJiYS0xODI2LTRkODYtYjg3My0yZjZkZDYzMjU3NzEvMC8wN0FENTgwQUI1 Q0Q3NkI5NDg1NkY5QUM3NDJFREQ3NTdFNzg4MEIwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvMDdBRDU4MEFCNUNENzZCOTQ4NTZGOUFDNzQyRURENzU3RTc4 ODBCMC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZTI1NmJiYmEtMTgyNi00ZDg2LWI4 NzMtMmY2ZGQ2MzI1NzcxLzAvMDdBRDU4MEFCNUNENzZCOTQ4NTZGOUFDNzQyRURE NzU3RTc4ODBCMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJYNnMyp/5ZNvyiBJZwmVuO6SbgRNkjy6jCS ardo7pLChm6e2/jmTwv9PqqC1iLWVkM3KRf7vj42XRbMY1ZM2uG/qgFC87VaGKLW KTd2rJHwLB0SHCqcLlOsLWYSNNKJvPKoBjXfCn66B3X25nWbhPqons9Q3IpL5o1o 2XPazxQiCi24lcAmFVzeC3IEyFzxW9QqgK9W2oI3G64SwHKXAQUoXNdcR1yTaWhd w7p05KBP+TC3h2VhxQZ+5wnIOWVo7V8bYRnmWlUHTiu4z+lM0z3XvCButFPZJUvg LLl722i1iTxYq7LLOAUKJ/aLSKSQTYantfajQhKjGDwdvnSfaKM= -----END CERTIFICATE-----Generated at Sun Dec 7 14:42:55 2025 by rpki-client