This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/16c0cd5d-d085-4e2f-b230-7b7e66d1393f/0/677D4AA669244DA65D976651DB5D051EEBDD0644.mft File: 677D4AA669244DA65D976651DB5D051EEBDD0644.mft (raw, json) Hash identifier: qClgnUa7FbkQLM3RRHbiltLkrhzxSCPOXd31CNQpwmM= Subject key identifier: E1:AB:E2:5E:4E:F7:77:48:07:7F:96:05:61:3A:13:89:B6:35:55:5C Authority key identifier: 67:7D:4A:A6:69:24:4D:A6:5D:97:66:51:DB:5D:05:1E:EB:DD:06:44 Certificate issuer: /CN=677D4AA669244DA65D976651DB5D051EEBDD0644 Certificate serial: 284A4C8AEF5DB1828D8F50089507CE03E7594167 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/677D4AA669244DA65D976651DB5D051EEBDD0644.cer Subject info access: rsync://repo-rpki.idnic.net/repo/16c0cd5d-d085-4e2f-b230-7b7e66d1393f/0/677D4AA669244DA65D976651DB5D051EEBDD0644.mft Manifest number: 01FA Signing time: Tue 02 Dec 2025 05:41:50 +0000 Manifest this update: Tue 02 Dec 2025 05:36:50 +0000 Manifest next update: Fri 05 Dec 2025 17:02:50 +0000 Files and hashes: 1: 3130332e31382e3138342e302f32332d3234203d3e20313530323330.roa (hash: F7Gs7c34XXwy69oloBM+A2EWyB4TbouNV2bsholc9KU=) 2: 677D4AA669244DA65D976651DB5D051EEBDD0644.crl (hash: +2VfO2EE4SahCgcaiPXzCS/LDs5wZLnGy/z+HNVylRA=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/16c0cd5d-d085-4e2f-b230-7b7e66d1393f/0/677D4AA669244DA65D976651DB5D051EEBDD0644.crl rsync://repo-rpki.idnic.net/repo/16c0cd5d-d085-4e2f-b230-7b7e66d1393f/0/677D4AA669244DA65D976651DB5D051EEBDD0644.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/677D4AA669244DA65D976651DB5D051EEBDD0644.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 05 Dec 2025 17:02:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 28:4a:4c:8a:ef:5d:b1:82:8d:8f:50:08:95:07:ce:03:e7:59:41:67 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=677D4AA669244DA65D976651DB5D051EEBDD0644 Validity Not Before: Dec 2 05:36:50 2025 GMT Not After : Dec 5 17:02:50 2025 GMT Subject: CN=E1ABE25E4EF77748077F9605613A1389B635555C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:ba:a1:1a:99:2c:2f:e7:30:64:24:35:d6:70: 74:fc:db:dd:ea:91:42:c9:04:5f:8e:43:e2:1a:bf: c6:dc:76:45:fd:ff:66:b6:4f:0e:59:2d:2a:f1:b8: 82:6d:02:4b:2c:a6:06:4d:02:63:8d:06:e5:14:db: 43:a4:88:4d:10:2c:f1:15:5b:86:c7:01:66:c7:c0: 95:47:f2:0f:85:90:0b:5a:ce:5a:5d:f5:e8:62:13: d8:d9:2a:ed:d4:63:8d:c2:bf:e6:da:f5:46:de:d3: 1c:01:93:4c:77:6f:39:02:3f:f2:35:32:1e:fe:7f: 8d:f0:c5:15:47:da:75:c9:2d:89:36:cc:79:19:98: 0b:37:21:5c:4f:15:19:4f:d0:e4:b3:f3:72:ab:65: a5:be:98:fd:b9:c1:32:47:eb:d5:57:c6:c6:09:0c: fb:de:73:9d:33:48:79:8f:38:f4:98:70:67:8f:38: 1d:9a:ad:ee:21:5e:01:79:28:48:2a:6d:ac:3b:c6: 51:6e:de:36:6f:76:4e:23:64:15:ac:4c:3e:b6:b4: 7c:2c:d6:53:e4:b5:65:4b:d4:e0:79:a9:50:f3:2b: 67:78:1b:a3:4d:7a:03:86:7b:46:04:8f:33:4b:7c: 18:d9:5b:23:01:88:82:97:5f:83:cf:af:55:53:cf: 07:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E1:AB:E2:5E:4E:F7:77:48:07:7F:96:05:61:3A:13:89:B6:35:55:5C X509v3 Authority Key Identifier: keyid:67:7D:4A:A6:69:24:4D:A6:5D:97:66:51:DB:5D:05:1E:EB:DD:06:44 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/16c0cd5d-d085-4e2f-b230-7b7e66d1393f/0/677D4AA669244DA65D976651DB5D051EEBDD0644.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/677D4AA669244DA65D976651DB5D051EEBDD0644.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/16c0cd5d-d085-4e2f-b230-7b7e66d1393f/0/677D4AA669244DA65D976651DB5D051EEBDD0644.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1b:e3:63:fa:71:82:12:35:cc:e5:85:e1:97:a5:50:7f:b5:44: 5d:e2:51:01:39:3b:8e:d7:a5:3a:e2:d0:01:63:52:6a:08:88: 92:42:ef:c9:bf:6c:4d:ae:79:28:28:13:68:46:83:d9:eb:04: 4d:4c:dd:f8:c6:1d:97:61:12:36:c4:2b:71:f3:73:3a:20:53: 8c:0d:55:bf:26:fe:e9:df:81:58:55:19:2e:ae:69:cd:86:e6: cd:4c:e4:b0:c7:09:98:b7:45:08:f4:e8:f9:22:18:9d:3a:be: 77:35:d9:c7:88:f3:0c:5f:71:b4:1e:43:7c:a0:ae:04:94:b2: 3a:bd:46:9e:93:ac:40:00:19:ee:a4:28:73:c6:ad:3a:2a:4e: 92:ed:78:2d:fc:03:7c:79:8a:a6:e2:b2:75:ff:8e:58:ab:25: e6:80:25:ca:b1:46:57:cc:e5:2f:50:b5:81:55:c9:00:40:49: 5b:02:34:14:a3:ec:b4:fd:1c:e1:70:46:ca:b8:d0:1e:25:f8: 48:e8:99:3f:cb:15:11:e1:44:32:68:b3:7e:5e:b7:40:d5:4d: 2f:81:d0:61:da:e0:5a:5e:79:a2:32:84:21:f7:16:ba:cd:27: cd:21:36:c9:07:f8:17:d2:1c:95:3b:8e:bc:9c:ce:fb:df:6f: 88:d7:22:5e -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUKEpMiu9dsYKNj1AIlQfOA+dZQWcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjc3RDRBQTY2OTI0NERBNjVEOTc2NjUxREI1RDA1MUVF QkREMDY0NDAeFw0yNTEyMDIwNTM2NTBaFw0yNTEyMDUxNzAyNTBaMDMxMTAvBgNV BAMTKEUxQUJFMjVFNEVGNzc3NDgwNzdGOTYwNTYxM0ExMzg5QjYzNTU1NUMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCYuqEamSwv5zBkJDXWcHT8293q kULJBF+OQ+Iav8bcdkX9/2a2Tw5ZLSrxuIJtAksspgZNAmONBuUU20OkiE0QLPEV W4bHAWbHwJVH8g+FkAtazlpd9ehiE9jZKu3UY43Cv+ba9Ube0xwBk0x3bzkCP/I1 Mh7+f43wxRVH2nXJLYk2zHkZmAs3IVxPFRlP0OSz83KrZaW+mP25wTJH69VXxsYJ DPvec50zSHmPOPSYcGePOB2are4hXgF5KEgqbaw7xlFu3jZvdk4jZBWsTD62tHws 1lPktWVL1OB5qVDzK2d4G6NNegOGe0YEjzNLfBjZWyMBiIKXX4PPr1VTzwclAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU4aviXk73d0gHf5YFYToTibY1VVwwHwYDVR0j BBgwFoAUZ31KpmkkTaZdl2ZR210FHuvdBkQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x NmMwY2Q1ZC1kMDg1LTRlMmYtYjIzMC03YjdlNjZkMTM5M2YvMC82NzdENEFBNjY5 MjQ0REE2NUQ5NzY2NTFEQjVEMDUxRUVCREQwNjQ0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNjc3RDRBQTY2OTI0NERBNjVEOTc2NjUxREI1RDA1MUVFQkRE MDY0NC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMTZjMGNkNWQtZDA4NS00ZTJmLWIy MzAtN2I3ZTY2ZDEzOTNmLzAvNjc3RDRBQTY2OTI0NERBNjVEOTc2NjUxREI1RDA1 MUVFQkREMDY0NC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABvjY/pxghI1zOWF4ZelUH+1RF3iUQE5O47X pTri0AFjUmoIiJJC78m/bE2ueSgoE2hGg9nrBE1M3fjGHZdhEjbEK3HzczogU4wN Vb8m/unfgVhVGS6uac2G5s1M5LDHCZi3RQj06PkiGJ06vnc12ceI8wxfcbQeQ3yg rgSUsjq9Rp6TrEAAGe6kKHPGrToqTpLteC38A3x5iqbisnX/jlirJeaAJcqxRlfM 5S9QtYFVyQBASVsCNBSj7LT9HOFwRsq40B4l+EjomT/LFRHhRDJos35et0DVTS+B 0GHa4FpeeaIyhCH3FrrNJ80hNskH+BfSHJU7jryczvvfb4jXIl4= -----END CERTIFICATE-----Generated at Wed Dec 3 14:44:04 2025 by rpki-client