This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/2e6bbe4d-3a2b-4e1b-a1aa-593610b3dec9/0/477C72D3EF66E3FE6923E38128D2757CBB2ABE05.mft File: 477C72D3EF66E3FE6923E38128D2757CBB2ABE05.mft (raw, json) Hash identifier: pojbVW9K0jS/5Diyf+Bo6pcfA95pMxbgP57P7JNAT90= Subject key identifier: 88:4A:62:72:C0:90:4A:68:EB:44:36:CD:6D:92:88:34:51:A7:ED:08 Authority key identifier: 47:7C:72:D3:EF:66:E3:FE:69:23:E3:81:28:D2:75:7C:BB:2A:BE:05 Certificate issuer: /CN=477C72D3EF66E3FE6923E38128D2757CBB2ABE05 Certificate serial: 22E09369ADDE569737644AB340BDA2B3146756ED Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/477C72D3EF66E3FE6923E38128D2757CBB2ABE05.cer Subject info access: rsync://repo-rpki.idnic.net/repo/2e6bbe4d-3a2b-4e1b-a1aa-593610b3dec9/0/477C72D3EF66E3FE6923E38128D2757CBB2ABE05.mft Manifest number: 03B2 Signing time: Wed 03 Dec 2025 02:01:26 +0000 Manifest this update: Wed 03 Dec 2025 01:56:26 +0000 Manifest next update: Sat 06 Dec 2025 10:28:26 +0000 Files and hashes: 1: 477C72D3EF66E3FE6923E38128D2757CBB2ABE05.crl (hash: KQ8CBh2ISl/zIooH3gkbzpujqXcY4bfRQAHL65u3lJE=) 2: 3130332e3132392e36302e302f32342d3234203d3e20313338303538.roa (hash: h8z8T7cMvO94VMJFPw+4vnKbTM1KYMCD+Y7LpeHOwow=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/2e6bbe4d-3a2b-4e1b-a1aa-593610b3dec9/0/477C72D3EF66E3FE6923E38128D2757CBB2ABE05.crl rsync://repo-rpki.idnic.net/repo/2e6bbe4d-3a2b-4e1b-a1aa-593610b3dec9/0/477C72D3EF66E3FE6923E38128D2757CBB2ABE05.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/477C72D3EF66E3FE6923E38128D2757CBB2ABE05.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 06 Dec 2025 10:28:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 22:e0:93:69:ad:de:56:97:37:64:4a:b3:40:bd:a2:b3:14:67:56:ed Signature Algorithm: sha256WithRSAEncryption Issuer: CN=477C72D3EF66E3FE6923E38128D2757CBB2ABE05 Validity Not Before: Dec 3 01:56:26 2025 GMT Not After : Dec 6 10:28:26 2025 GMT Subject: CN=884A6272C0904A68EB4436CD6D92883451A7ED08 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:ce:dc:00:16:e5:6a:15:e7:b3:0a:86:89:a0: 83:fc:6a:a4:97:fb:66:a0:d8:ba:be:f0:cd:20:f9: 4a:a6:c5:e4:dc:c0:61:f1:26:1c:92:e6:fe:fa:d7: 14:5a:cf:fc:84:ce:ac:d9:6c:16:69:15:41:b8:68: bb:00:2f:ba:c2:f3:6c:ba:58:6e:f2:3d:6a:d6:2c: 54:0f:12:ba:ef:da:ba:08:2e:67:a4:84:51:5e:e8: 05:f1:b7:5a:4b:61:bd:9c:7f:b4:dd:a6:87:f6:d7: 08:be:2d:5b:b5:e3:6f:9e:43:bf:d6:4a:66:3f:cf: 6f:3d:33:56:ac:ed:97:5e:ce:ce:b0:47:83:8c:e8: 7d:17:4a:ab:c3:84:65:bc:94:c3:95:d2:6f:e6:c6: d2:60:36:eb:2d:db:e1:a2:33:c7:a7:10:35:2c:42: b9:f1:be:13:96:35:69:a1:af:38:e6:f0:56:5f:58: 2a:8f:54:56:69:00:78:5a:c4:90:ef:58:84:46:5b: 5e:c4:50:58:c3:95:09:5f:9e:b5:ff:f5:16:82:3a: 7d:55:b5:9b:7a:80:0d:fc:cd:73:66:50:2d:cb:f8: a0:f8:b2:04:e7:15:d3:f2:39:f3:ff:9a:7c:44:cd: 2c:45:d5:59:84:ac:85:52:f8:2a:1f:4a:7f:09:83: e0:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:4A:62:72:C0:90:4A:68:EB:44:36:CD:6D:92:88:34:51:A7:ED:08 X509v3 Authority Key Identifier: keyid:47:7C:72:D3:EF:66:E3:FE:69:23:E3:81:28:D2:75:7C:BB:2A:BE:05 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/2e6bbe4d-3a2b-4e1b-a1aa-593610b3dec9/0/477C72D3EF66E3FE6923E38128D2757CBB2ABE05.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/477C72D3EF66E3FE6923E38128D2757CBB2ABE05.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/2e6bbe4d-3a2b-4e1b-a1aa-593610b3dec9/0/477C72D3EF66E3FE6923E38128D2757CBB2ABE05.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 57:73:fb:73:ad:07:61:70:ce:3f:52:42:ea:3b:c8:ab:aa:03: 3d:c7:2c:fe:bc:a8:9e:c4:7d:b8:b7:8a:c4:d2:1b:c3:9d:40: 82:9a:34:9e:17:0a:c9:5e:db:dd:2e:9b:65:51:02:33:ab:12: 5a:08:23:03:a4:a2:f7:a7:ca:64:8f:38:02:33:33:3b:e5:68: 6b:13:cb:c9:fd:d7:62:d2:de:20:53:9d:d6:2f:cc:72:13:78: c5:24:ea:8c:56:e1:69:66:8f:d2:fd:06:46:d9:67:24:44:6e: 37:ea:b8:67:4d:7b:60:0b:50:fe:c0:59:d5:96:48:99:c1:33: 19:52:3d:30:8e:96:35:d9:10:a4:64:6e:bf:bb:35:cc:f3:82: 32:4d:f4:58:04:3d:55:64:32:ff:9f:08:d0:62:a8:c7:21:05: 74:75:fb:21:c1:92:91:63:93:f9:d4:cd:f3:4f:90:fd:a9:f1: a5:63:56:01:9b:f6:b5:5e:de:42:83:44:73:45:24:30:21:db: ed:71:88:0b:49:69:20:20:84:c3:3f:27:2f:b7:8a:4b:b0:8f: 79:10:05:2e:92:0f:1a:f0:7b:b4:12:b1:30:c0:ba:67:ba:c8: 52:1b:30:db:07:08:30:22:0f:1a:19:2e:33:ce:ee:ed:ea:57: ca:80:ab:19 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUIuCTaa3eVpc3ZEqzQL2isxRnVu0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDc3QzcyRDNFRjY2RTNGRTY5MjNFMzgxMjhEMjc1N0NC QjJBQkUwNTAeFw0yNTEyMDMwMTU2MjZaFw0yNTEyMDYxMDI4MjZaMDMxMTAvBgNV BAMTKDg4NEE2MjcyQzA5MDRBNjhFQjQ0MzZDRDZEOTI4ODM0NTFBN0VEMDgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDMztwAFuVqFeezCoaJoIP8aqSX +2ag2Lq+8M0g+UqmxeTcwGHxJhyS5v761xRaz/yEzqzZbBZpFUG4aLsAL7rC82y6 WG7yPWrWLFQPErrv2roILmekhFFe6AXxt1pLYb2cf7Tdpof21wi+LVu142+eQ7/W SmY/z289M1as7Zdezs6wR4OM6H0XSqvDhGW8lMOV0m/mxtJgNust2+GiM8enEDUs QrnxvhOWNWmhrzjm8FZfWCqPVFZpAHhaxJDvWIRGW17EUFjDlQlfnrX/9RaCOn1V tZt6gA38zXNmUC3L+KD4sgTnFdPyOfP/mnxEzSxF1VmErIVS+CofSn8Jg+ANAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUiEpicsCQSmjrRDbNbZKINFGn7QgwHwYDVR0j BBgwFoAUR3xy0+9m4/5pI+OBKNJ1fLsqvgUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y ZTZiYmU0ZC0zYTJiLTRlMWItYTFhYS01OTM2MTBiM2RlYzkvMC80NzdDNzJEM0VG NjZFM0ZFNjkyM0UzODEyOEQyNzU3Q0JCMkFCRTA1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNDc3QzcyRDNFRjY2RTNGRTY5MjNFMzgxMjhEMjc1N0NCQjJB QkUwNS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMmU2YmJlNGQtM2EyYi00ZTFiLWEx YWEtNTkzNjEwYjNkZWM5LzAvNDc3QzcyRDNFRjY2RTNGRTY5MjNFMzgxMjhEMjc1 N0NCQjJBQkUwNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFdz+3OtB2Fwzj9SQuo7yKuqAz3HLP68qJ7E fbi3isTSG8OdQIKaNJ4XCsle290um2VRAjOrEloIIwOkovenymSPOAIzMzvlaGsT y8n912LS3iBTndYvzHITeMUk6oxW4Wlmj9L9BkbZZyREbjfquGdNe2ALUP7AWdWW SJnBMxlSPTCOljXZEKRkbr+7NczzgjJN9FgEPVVkMv+fCNBiqMchBXR1+yHBkpFj k/nUzfNPkP2p8aVjVgGb9rVe3kKDRHNFJDAh2+1xiAtJaSAghMM/Jy+3ikuwj3kQ BS6SDxrwe7QSsTDAume6yFIbMNsHCDAiDxoZLjPO7u3qV8qAqxk= -----END CERTIFICATE-----Generated at Wed Dec 3 14:13:23 2025 by rpki-client