This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/5d823bb3-5a01-4658-a783-f8e89fadcf45/0/77ACF18F5317E7A202E583C3C59C223234FA2D8B.mft File: 77ACF18F5317E7A202E583C3C59C223234FA2D8B.mft (raw, json) Hash identifier: mV6oTqZDE1xHgYau/yQLG/4szgrB4rkykwu5m5z/70g= Subject key identifier: 95:30:36:E8:F1:3F:2B:D8:6C:50:0C:65:EB:5C:2F:DB:CF:33:E5:48 Authority key identifier: 77:AC:F1:8F:53:17:E7:A2:02:E5:83:C3:C5:9C:22:32:34:FA:2D:8B Certificate issuer: /CN=77ACF18F5317E7A202E583C3C59C223234FA2D8B Certificate serial: 66E930B7756CD919794B9C1954C48E5140940345 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/77ACF18F5317E7A202E583C3C59C223234FA2D8B.cer Subject info access: rsync://repo-rpki.idnic.net/repo/5d823bb3-5a01-4658-a783-f8e89fadcf45/0/77ACF18F5317E7A202E583C3C59C223234FA2D8B.mft Manifest number: 010F Signing time: Wed 03 Dec 2025 07:53:54 +0000 Manifest this update: Wed 03 Dec 2025 07:48:54 +0000 Manifest next update: Sat 06 Dec 2025 16:11:54 +0000 Files and hashes: 1: 3135372e32302e3230342e302f32332d3234203d3e20313532343139.roa (hash: mBt52f39yB2WTMjY8yTiBWW7j1vK6aWMbOkMPXZ1lgU=) 2: 77ACF18F5317E7A202E583C3C59C223234FA2D8B.crl (hash: 5twbUjRPK4QulNgPlgBBGkNNGInsn7vdITcdLFThdrY=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/5d823bb3-5a01-4658-a783-f8e89fadcf45/0/77ACF18F5317E7A202E583C3C59C223234FA2D8B.crl rsync://repo-rpki.idnic.net/repo/5d823bb3-5a01-4658-a783-f8e89fadcf45/0/77ACF18F5317E7A202E583C3C59C223234FA2D8B.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/77ACF18F5317E7A202E583C3C59C223234FA2D8B.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 06 Dec 2025 11:07:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 66:e9:30:b7:75:6c:d9:19:79:4b:9c:19:54:c4:8e:51:40:94:03:45 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=77ACF18F5317E7A202E583C3C59C223234FA2D8B Validity Not Before: Dec 3 07:48:54 2025 GMT Not After : Dec 6 16:11:54 2025 GMT Subject: CN=953036E8F13F2BD86C500C65EB5C2FDBCF33E548 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:13:b8:94:e6:c3:20:6d:36:dd:d2:bf:14:08: 47:c6:3b:b5:bd:8f:7a:f4:9c:19:ac:e2:5f:c2:79: cc:cb:02:ca:ef:23:28:dd:5e:3d:ca:2b:59:75:1d: 5a:cc:bf:45:4d:39:fa:e3:19:ae:e7:38:41:f4:01: 14:dd:07:94:16:a7:5a:e3:0a:89:1d:d5:1b:cb:62: 00:b7:76:b6:74:81:1c:8b:ef:4e:35:a5:cb:0b:76: dc:8d:f2:ee:44:f6:1f:17:50:5c:62:fd:58:d6:42: ff:6f:fa:90:4f:ca:a8:3f:76:f6:89:12:af:77:29: 7a:99:98:30:62:57:8e:c3:08:09:87:93:38:b2:ca: d1:2e:2e:15:0a:4f:47:f0:42:09:a0:f8:2e:81:0d: 9d:2c:d7:97:84:63:38:4c:0f:4c:ed:c1:8b:4f:99: 79:72:d9:9f:01:67:a2:17:0a:ae:da:68:59:2f:97: 83:c9:ff:7a:33:d5:b8:29:bc:f7:40:96:c1:77:78: 05:a2:9d:08:73:88:b2:fa:a6:5d:4d:78:db:5e:be: 45:40:06:a7:b3:8f:b3:80:05:4a:9e:a4:33:06:0d: 4f:32:9a:8f:02:52:b8:bf:88:e1:bc:e5:46:ab:04: 1c:e6:9a:32:8b:54:9f:81:58:c0:73:6a:01:91:08: bf:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:30:36:E8:F1:3F:2B:D8:6C:50:0C:65:EB:5C:2F:DB:CF:33:E5:48 X509v3 Authority Key Identifier: keyid:77:AC:F1:8F:53:17:E7:A2:02:E5:83:C3:C5:9C:22:32:34:FA:2D:8B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/5d823bb3-5a01-4658-a783-f8e89fadcf45/0/77ACF18F5317E7A202E583C3C59C223234FA2D8B.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/77ACF18F5317E7A202E583C3C59C223234FA2D8B.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/5d823bb3-5a01-4658-a783-f8e89fadcf45/0/77ACF18F5317E7A202E583C3C59C223234FA2D8B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ac:6f:90:4c:cb:51:5a:0e:8b:4e:59:78:c7:61:52:48:c2:a5: de:09:dc:d8:75:e5:3d:40:c9:31:34:55:0d:00:f8:b6:db:04: 9a:ee:09:39:cf:7f:aa:69:6c:69:8b:29:81:75:bb:2d:8f:50: 09:95:1d:4d:fc:3f:17:b8:7e:5d:ba:53:39:eb:cd:26:e4:23: 22:0e:2d:c5:e2:ab:d5:78:3c:c1:4f:4d:b0:17:55:c3:15:e7: 9f:92:5a:66:a3:d2:2d:ea:be:0f:74:e4:7b:76:d9:b7:01:06: 57:63:94:75:a4:be:f3:f5:a7:89:bd:69:41:4b:10:ff:d5:c9: 41:82:61:30:31:c7:fd:6c:e2:ec:86:66:d3:3e:ad:26:57:13: e4:cd:b4:a8:65:52:1b:3a:e4:6f:d7:4f:69:2f:b6:27:f1:fd: 79:8d:de:95:12:fe:86:12:23:3e:88:f6:fd:cf:63:98:d9:1f: b6:17:83:80:7a:75:8e:ac:d6:72:b3:fe:d8:67:3b:90:b4:12: 61:4c:d0:62:a6:ec:f7:50:34:82:6a:f7:cd:57:d9:7d:a7:ff: 6d:de:2b:cd:d3:d3:51:2b:4d:4a:83:c3:19:be:52:07:9f:06: 26:b7:b0:9b:c4:4b:5d:10:85:92:1a:b3:44:ef:92:ad:b5:52: 07:5e:a8:1b -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUZukwt3Vs2Rl5S5wZVMSOUUCUA0UwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzdBQ0YxOEY1MzE3RTdBMjAyRTU4M0MzQzU5QzIyMzIz NEZBMkQ4QjAeFw0yNTEyMDMwNzQ4NTRaFw0yNTEyMDYxNjExNTRaMDMxMTAvBgNV BAMTKDk1MzAzNkU4RjEzRjJCRDg2QzUwMEM2NUVCNUMyRkRCQ0YzM0U1NDgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDcE7iU5sMgbTbd0r8UCEfGO7W9 j3r0nBms4l/CeczLAsrvIyjdXj3KK1l1HVrMv0VNOfrjGa7nOEH0ARTdB5QWp1rj Cokd1RvLYgC3drZ0gRyL7041pcsLdtyN8u5E9h8XUFxi/VjWQv9v+pBPyqg/dvaJ Eq93KXqZmDBiV47DCAmHkziyytEuLhUKT0fwQgmg+C6BDZ0s15eEYzhMD0ztwYtP mXly2Z8BZ6IXCq7aaFkvl4PJ/3oz1bgpvPdAlsF3eAWinQhziLL6pl1NeNtevkVA Bqezj7OABUqepDMGDU8ymo8CUri/iOG85UarBBzmmjKLVJ+BWMBzagGRCL+BAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUlTA26PE/K9hsUAxl61wv288z5UgwHwYDVR0j BBgwFoAUd6zxj1MX56IC5YPDxZwiMjT6LYswDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 ZDgyM2JiMy01YTAxLTQ2NTgtYTc4My1mOGU4OWZhZGNmNDUvMC83N0FDRjE4RjUz MTdFN0EyMDJFNTgzQzNDNTlDMjIzMjM0RkEyRDhCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvNzdBQ0YxOEY1MzE3RTdBMjAyRTU4M0MzQzU5QzIyMzIzNEZB MkQ4Qi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNWQ4MjNiYjMtNWEwMS00NjU4LWE3 ODMtZjhlODlmYWRjZjQ1LzAvNzdBQ0YxOEY1MzE3RTdBMjAyRTU4M0MzQzU5QzIy MzIzNEZBMkQ4Qi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKxvkEzLUVoOi05ZeMdhUkjCpd4J3Nh15T1A yTE0VQ0A+LbbBJruCTnPf6ppbGmLKYF1uy2PUAmVHU38Pxe4fl26UznrzSbkIyIO LcXiq9V4PMFPTbAXVcMV55+SWmaj0i3qvg905Ht22bcBBldjlHWkvvP1p4m9aUFL EP/VyUGCYTAxx/1s4uyGZtM+rSZXE+TNtKhlUhs65G/XT2kvtifx/XmN3pUS/oYS Iz6I9v3PY5jZH7YXg4B6dY6s1nKz/thnO5C0EmFM0GKm7PdQNIJq981X2X2n/23e K83T01ErTUqDwxm+UgefBia3sJvES10QhZIas0Tvkq21UgdeqBs= -----END CERTIFICATE-----Generated at Wed Dec 3 20:19:22 2025 by rpki-client