This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/6ff8f4ab-1ab8-4894-b758-d9bce3803e4c/0/DD77382BD9E8634AEF9E93D763B0149D915502F5.mft File: DD77382BD9E8634AEF9E93D763B0149D915502F5.mft (raw, json) Hash identifier: Twupwjwc0T2yi4CeUy4uQxjgiZgh5xoBk2osdB/sfMg= Subject key identifier: AB:BD:A9:AF:CF:2B:6B:37:A5:AE:35:26:8A:DA:18:75:D4:3F:EB:64 Authority key identifier: DD:77:38:2B:D9:E8:63:4A:EF:9E:93:D7:63:B0:14:9D:91:55:02:F5 Certificate issuer: /CN=DD77382BD9E8634AEF9E93D763B0149D915502F5 Certificate serial: 79E4DF92E03BA63161ECDC2AEA6CC4DBA8131CD7 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DD77382BD9E8634AEF9E93D763B0149D915502F5.cer Subject info access: rsync://repo-rpki.idnic.net/repo/6ff8f4ab-1ab8-4894-b758-d9bce3803e4c/0/DD77382BD9E8634AEF9E93D763B0149D915502F5.mft Manifest number: 0405 Signing time: Tue 02 Dec 2025 21:31:25 +0000 Manifest this update: Tue 02 Dec 2025 21:26:25 +0000 Manifest next update: Sat 06 Dec 2025 05:59:25 +0000 Files and hashes: 1: 3130332e3135352e3136382e302f32342d3234203d3e20313431303635.roa (hash: K3vShF0D9bPRn6sv5SW8yGmWNIRGvlLBsD0vPKS9a4E=) 2: 3130332e3135352e3136392e302f32342d3234203d3e20313431303635.roa (hash: c3TzylCEjs5xy8RF441nXx1uAnBKNVsy3aYQ1eehMFs=) 3: DD77382BD9E8634AEF9E93D763B0149D915502F5.crl (hash: KryHvcfzuZrKKyvo+0M/C630EauNhddMrlAZAlyVLbM=) 4: 3130332e3135352e3136382e302f32332d3233203d3e20313431303635.roa (hash: Y/t7s83TrJfcnDGlxRGeWKMHBRcUwBBITgOCbUYiXEc=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/6ff8f4ab-1ab8-4894-b758-d9bce3803e4c/0/DD77382BD9E8634AEF9E93D763B0149D915502F5.crl rsync://repo-rpki.idnic.net/repo/6ff8f4ab-1ab8-4894-b758-d9bce3803e4c/0/DD77382BD9E8634AEF9E93D763B0149D915502F5.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DD77382BD9E8634AEF9E93D763B0149D915502F5.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 06 Dec 2025 05:59:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 79:e4:df:92:e0:3b:a6:31:61:ec:dc:2a:ea:6c:c4:db:a8:13:1c:d7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DD77382BD9E8634AEF9E93D763B0149D915502F5 Validity Not Before: Dec 2 21:26:25 2025 GMT Not After : Dec 6 05:59:25 2025 GMT Subject: CN=ABBDA9AFCF2B6B37A5AE35268ADA1875D43FEB64 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:34:16:25:17:fc:c3:c1:26:56:1c:33:dc:05: 87:01:57:ce:e9:92:61:49:f9:e4:92:d5:6a:0f:be: d2:47:12:ae:1b:58:12:01:6a:44:2d:24:bb:f3:29: 98:67:73:91:6e:77:0d:f8:b5:54:69:ec:2c:46:de: ff:92:69:62:27:ed:0f:d5:a8:60:33:2e:89:ef:47: b6:a0:3d:53:17:2f:78:c0:de:f2:0f:c1:50:23:28: 5a:ac:00:4f:5c:cd:a5:c4:db:87:68:4f:7e:5a:03: 35:bf:a5:13:09:cf:98:2d:c4:39:fd:9c:71:cf:ed: c2:c4:55:8a:3b:9f:bf:41:18:56:84:8a:e3:45:44: 48:c3:fc:3f:69:5f:cf:8a:6a:c7:ea:57:ff:f2:b1: 61:67:44:9a:f6:44:bb:f4:7f:65:d2:ef:16:8d:e8: 69:92:ce:38:68:f7:6a:b9:cc:10:f2:ec:a0:11:bc: 24:94:4e:47:43:c1:e9:d9:f1:c5:62:22:1d:46:7a: 21:32:7e:f3:e1:36:be:e5:ab:9a:b6:4f:a4:15:27: 05:f1:ac:7d:34:0c:3f:1a:e6:61:6f:c5:ce:13:e5: 1d:a6:3c:a9:37:fd:9c:8e:e3:17:80:63:96:85:d5: f7:2c:8f:c9:3d:93:db:8d:7a:97:8d:9b:c8:dd:8a: cf:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AB:BD:A9:AF:CF:2B:6B:37:A5:AE:35:26:8A:DA:18:75:D4:3F:EB:64 X509v3 Authority Key Identifier: keyid:DD:77:38:2B:D9:E8:63:4A:EF:9E:93:D7:63:B0:14:9D:91:55:02:F5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/6ff8f4ab-1ab8-4894-b758-d9bce3803e4c/0/DD77382BD9E8634AEF9E93D763B0149D915502F5.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DD77382BD9E8634AEF9E93D763B0149D915502F5.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/6ff8f4ab-1ab8-4894-b758-d9bce3803e4c/0/DD77382BD9E8634AEF9E93D763B0149D915502F5.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 33:24:fe:a8:8f:d0:ed:a8:bb:e3:4e:81:c9:79:b4:9b:32:a2: fc:29:7e:93:49:8e:3b:c7:af:c1:71:e1:16:40:59:09:30:b1: 23:8d:1b:51:ed:be:73:0d:09:ec:ce:7f:fa:76:86:e9:e9:cc: 34:5a:85:f2:93:20:ee:19:b2:62:14:cc:4b:0f:8b:f8:61:bf: d3:df:5f:cd:0c:77:da:54:4b:35:d1:08:db:89:84:cb:3e:3f: 93:60:4b:16:80:e6:51:55:71:c7:25:1b:a1:02:b2:b3:75:39: 93:ef:05:5c:c0:92:e3:c7:11:5c:07:32:cc:5e:8d:6e:24:cb: 37:b6:a2:4d:a8:82:13:fc:06:2f:8e:c6:22:7d:10:7e:68:d5: 42:da:88:37:ee:21:ba:99:6f:be:ff:99:82:db:92:10:ee:95: 09:fa:41:03:96:3c:5d:fe:a9:70:2c:35:31:f8:95:90:dc:65: f8:04:4e:ea:5c:f7:43:be:a2:42:ef:5f:3a:99:06:4a:63:29: d9:34:1b:c3:98:58:a2:37:87:9b:f3:8c:18:2e:ba:40:c7:c3: 43:1f:71:28:1e:3b:42:d2:43:b2:63:4e:3f:de:7f:cd:5a:ac: 2b:43:1c:64:03:c7:96:e0:4c:7b:a6:0a:41:d8:20:1b:75:b8: bb:a1:65:c4 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUeeTfkuA7pjFh7Nwq6mzE26gTHNcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoREQ3NzM4MkJEOUU4NjM0QUVGOUU5M0Q3NjNCMDE0OUQ5 MTU1MDJGNTAeFw0yNTEyMDIyMTI2MjVaFw0yNTEyMDYwNTU5MjVaMDMxMTAvBgNV BAMTKEFCQkRBOUFGQ0YyQjZCMzdBNUFFMzUyNjhBREExODc1RDQzRkVCNjQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC8NBYlF/zDwSZWHDPcBYcBV87p kmFJ+eSS1WoPvtJHEq4bWBIBakQtJLvzKZhnc5Fudw34tVRp7CxG3v+SaWIn7Q/V qGAzLonvR7agPVMXL3jA3vIPwVAjKFqsAE9czaXE24doT35aAzW/pRMJz5gtxDn9 nHHP7cLEVYo7n79BGFaEiuNFREjD/D9pX8+KasfqV//ysWFnRJr2RLv0f2XS7xaN 6GmSzjho92q5zBDy7KARvCSUTkdDwenZ8cViIh1GeiEyfvPhNr7lq5q2T6QVJwXx rH00DD8a5mFvxc4T5R2mPKk3/ZyO4xeAY5aF1fcsj8k9k9uNepeNm8jdis/FAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUq72pr88razelrjUmitoYddQ/62QwHwYDVR0j BBgwFoAU3Xc4K9noY0rvnpPXY7AUnZFVAvUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 ZmY4ZjRhYi0xYWI4LTQ4OTQtYjc1OC1kOWJjZTM4MDNlNGMvMC9ERDc3MzgyQkQ5 RTg2MzRBRUY5RTkzRDc2M0IwMTQ5RDkxNTUwMkY1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvREQ3NzM4MkJEOUU4NjM0QUVGOUU5M0Q3NjNCMDE0OUQ5MTU1 MDJGNS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNmZmOGY0YWItMWFiOC00ODk0LWI3 NTgtZDliY2UzODAzZTRjLzAvREQ3NzM4MkJEOUU4NjM0QUVGOUU5M0Q3NjNCMDE0 OUQ5MTU1MDJGNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADMk/qiP0O2ou+NOgcl5tJsyovwpfpNJjjvH r8Fx4RZAWQkwsSONG1HtvnMNCezOf/p2hunpzDRahfKTIO4ZsmIUzEsPi/hhv9Pf X80Md9pUSzXRCNuJhMs+P5NgSxaA5lFVccclG6ECsrN1OZPvBVzAkuPHEVwHMsxe jW4kyze2ok2oghP8Bi+OxiJ9EH5o1ULaiDfuIbqZb77/mYLbkhDulQn6QQOWPF3+ qXAsNTH4lZDcZfgETupc90O+okLvXzqZBkpjKdk0G8OYWKI3h5vzjBguukDHw0Mf cSgeO0LSQ7JjTj/ef81arCtDHGQDx5bgTHumCkHYIBt1uLuhZcQ= -----END CERTIFICATE-----Generated at Wed Dec 3 14:13:38 2025 by rpki-client