This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/0588dff7-6a92-4293-8800-b53e2a918aca/1/97776FFF02B90FFC17B658A0B1A598DBEA888F04.mft File: 97776FFF02B90FFC17B658A0B1A598DBEA888F04.mft (raw, json) Hash identifier: lHU3OQ3vh7PuuaBlPjECyJ3HkWm9Ux9s6frPlRJuaJE= Subject key identifier: A9:74:4B:DA:F6:C1:37:6C:9C:9C:B9:C4:7C:21:79:A3:6A:60:16:B6 Authority key identifier: 97:77:6F:FF:02:B9:0F:FC:17:B6:58:A0:B1:A5:98:DB:EA:88:8F:04 Certificate issuer: /CN=97776FFF02B90FFC17B658A0B1A598DBEA888F04 Certificate serial: 1A34DF47B608AA453AE3ABC553185E077A893B44 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/97776FFF02B90FFC17B658A0B1A598DBEA888F04.cer Subject info access: rsync://repo-rpki.idnic.net/repo/0588dff7-6a92-4293-8800-b53e2a918aca/1/97776FFF02B90FFC17B658A0B1A598DBEA888F04.mft Manifest number: 0100 Signing time: Tue 02 Dec 2025 11:22:55 +0000 Manifest this update: Tue 02 Dec 2025 11:17:55 +0000 Manifest next update: Fri 05 Dec 2025 16:48:55 +0000 Files and hashes: 1: 323030313a6466333a633334303a3a2f34382d3438203d3e20313532333932.roa (hash: DWvVDDRpAMOpRUqp8QzsrLlGUPEfbewyxxzSjcofq2U=) 2: 97776FFF02B90FFC17B658A0B1A598DBEA888F04.crl (hash: B7pxOZZsjHFtAuGvmQDbLahrSD+I90v8Fy8/W6r4zp8=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/0588dff7-6a92-4293-8800-b53e2a918aca/1/97776FFF02B90FFC17B658A0B1A598DBEA888F04.crl rsync://repo-rpki.idnic.net/repo/0588dff7-6a92-4293-8800-b53e2a918aca/1/97776FFF02B90FFC17B658A0B1A598DBEA888F04.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/97776FFF02B90FFC17B658A0B1A598DBEA888F04.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 05 Dec 2025 16:48:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1a:34:df:47:b6:08:aa:45:3a:e3:ab:c5:53:18:5e:07:7a:89:3b:44 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=97776FFF02B90FFC17B658A0B1A598DBEA888F04 Validity Not Before: Dec 2 11:17:55 2025 GMT Not After : Dec 5 16:48:55 2025 GMT Subject: CN=A9744BDAF6C1376C9C9CB9C47C2179A36A6016B6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f1:8c:7f:ff:61:d3:74:dc:75:ae:08:0f:93:e2: d9:5f:82:fe:db:8e:e4:7b:b3:4f:1d:58:63:a5:aa: ae:f0:b0:71:88:c4:b9:96:de:c5:7e:5e:c8:99:ba: e1:28:45:02:16:de:bc:df:a5:84:9e:f6:c8:4c:89: eb:a9:df:a8:56:bf:9f:52:d1:e0:b1:80:a7:ed:b2: e1:71:f8:be:7b:97:ad:c7:95:0a:3f:e2:89:11:65: d4:79:4d:34:16:f5:01:8d:69:9c:b6:b1:8c:a0:1a: cd:3a:9e:01:c2:77:25:55:08:44:81:b3:9d:9c:bf: 99:16:b3:3b:90:c8:7a:5f:21:1a:ea:de:3f:ea:49: c0:31:0f:a5:77:eb:9f:e4:67:87:40:47:20:b1:f2: 5b:e5:58:de:2d:66:45:05:c6:37:aa:c0:fa:8c:3a: a5:14:66:0d:53:24:ee:5f:ee:b9:7d:dc:ab:03:04: d6:2c:6f:4d:13:79:fb:f4:1f:db:b7:ac:c2:47:1d: 2f:ae:e1:7c:0a:77:05:f6:8e:b7:2d:2f:0c:82:7c: e4:a2:9c:2c:f4:e4:99:6e:89:f5:92:c5:a6:70:49: c5:df:93:d5:06:4d:90:65:c9:64:fb:56:77:c9:a1: 63:67:33:7e:f1:c0:3e:77:84:a2:b2:24:ab:e9:fe: 35:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:74:4B:DA:F6:C1:37:6C:9C:9C:B9:C4:7C:21:79:A3:6A:60:16:B6 X509v3 Authority Key Identifier: keyid:97:77:6F:FF:02:B9:0F:FC:17:B6:58:A0:B1:A5:98:DB:EA:88:8F:04 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/0588dff7-6a92-4293-8800-b53e2a918aca/1/97776FFF02B90FFC17B658A0B1A598DBEA888F04.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/97776FFF02B90FFC17B658A0B1A598DBEA888F04.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/0588dff7-6a92-4293-8800-b53e2a918aca/1/97776FFF02B90FFC17B658A0B1A598DBEA888F04.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 37:44:9f:2f:03:fb:e3:12:f7:ae:43:3b:ce:e1:5a:42:1e:79: 7f:75:e0:60:d2:f3:27:6d:00:c9:cb:f1:3f:a9:df:6b:80:2d: e3:58:9b:68:f7:de:f0:2d:07:ed:c2:c3:0d:c9:b9:51:e7:05: ab:9c:66:26:a3:88:67:23:53:29:c5:ca:04:e0:83:26:e8:cc: c5:c9:ef:a0:a4:eb:9e:9f:30:95:cc:48:e7:8e:88:d9:04:af: 23:c9:06:9b:ec:c5:e9:2b:6d:02:5a:b2:d5:5a:60:1c:b3:c7: e2:3d:b1:b7:87:55:41:5f:1d:cf:be:0a:69:ed:c1:35:e8:4d: 4e:71:8f:41:3b:79:91:0a:85:d6:3d:0a:da:17:39:d2:06:3b: 99:75:35:78:8b:f4:de:7c:ea:e4:15:3c:b8:7f:4b:88:79:07: 7c:c4:db:21:82:8d:92:c6:ef:b8:79:36:3c:2a:ed:59:51:74: 17:ad:8b:bf:89:32:21:ff:13:f4:eb:4f:7f:8c:11:a3:7e:7f: 3f:b5:96:d1:9c:08:22:f2:ad:04:74:5d:fc:0f:db:be:3f:2e: f8:b5:6f:a5:b0:0c:38:fe:cd:f7:d9:f6:38:17:cf:17:42:44: dd:95:f0:e9:8a:b2:5d:36:d9:59:dd:a5:8f:eb:9b:35:d1:78: 0d:4f:bb:51 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUGjTfR7YIqkU646vFUxheB3qJO0QwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTc3NzZGRkYwMkI5MEZGQzE3QjY1OEEwQjFBNTk4REJF QTg4OEYwNDAeFw0yNTEyMDIxMTE3NTVaFw0yNTEyMDUxNjQ4NTVaMDMxMTAvBgNV BAMTKEE5NzQ0QkRBRjZDMTM3NkM5QzlDQjlDNDdDMjE3OUEzNkE2MDE2QjYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDxjH//YdN03HWuCA+T4tlfgv7b juR7s08dWGOlqq7wsHGIxLmW3sV+XsiZuuEoRQIW3rzfpYSe9shMieup36hWv59S 0eCxgKftsuFx+L57l63HlQo/4okRZdR5TTQW9QGNaZy2sYygGs06ngHCdyVVCESB s52cv5kWszuQyHpfIRrq3j/qScAxD6V365/kZ4dARyCx8lvlWN4tZkUFxjeqwPqM OqUUZg1TJO5f7rl93KsDBNYsb00Tefv0H9u3rMJHHS+u4XwKdwX2jrctLwyCfOSi nCz05JluifWSxaZwScXfk9UGTZBlyWT7VnfJoWNnM37xwD53hKKyJKvp/jUDAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUqXRL2vbBN2ycnLnEfCF5o2pgFrYwHwYDVR0j BBgwFoAUl3dv/wK5D/wXtligsaWY2+qIjwQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w NTg4ZGZmNy02YTkyLTQyOTMtODgwMC1iNTNlMmE5MThhY2EvMS85Nzc3NkZGRjAy QjkwRkZDMTdCNjU4QTBCMUE1OThEQkVBODg4RjA0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOTc3NzZGRkYwMkI5MEZGQzE3QjY1OEEwQjFBNTk4REJFQTg4 OEYwNC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMDU4OGRmZjctNmE5Mi00MjkzLTg4 MDAtYjUzZTJhOTE4YWNhLzEvOTc3NzZGRkYwMkI5MEZGQzE3QjY1OEEwQjFBNTk4 REJFQTg4OEYwNC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADdEny8D++MS965DO87hWkIeeX914GDS8ydt AMnL8T+p32uALeNYm2j33vAtB+3Cww3JuVHnBaucZiajiGcjUynFygTggybozMXJ 76Ck656fMJXMSOeOiNkEryPJBpvsxekrbQJastVaYByzx+I9sbeHVUFfHc++Cmnt wTXoTU5xj0E7eZEKhdY9CtoXOdIGO5l1NXiL9N586uQVPLh/S4h5B3zE2yGCjZLG 77h5Njwq7VlRdBeti7+JMiH/E/TrT3+MEaN+fz+1ltGcCCLyrQR0XfwP274/Lvi1 b6WwDDj+zffZ9jgXzxdCRN2V8OmKsl022VndpY/rmzXReA1Pu1E= -----END CERTIFICATE-----Generated at Wed Dec 3 16:14:34 2025 by rpki-client