This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/7a0210b3-cca2-43c5-89f9-5a9086a60703/1/DF77061CAEF30A8DAF6B52D8A3D9FD80F3720F11.mft File: DF77061CAEF30A8DAF6B52D8A3D9FD80F3720F11.mft (raw, json) Hash identifier: lMBy64SUcON2jNGe6Cv2+QTAHcKeuAMa1c49m3ZBa7E= Subject key identifier: 02:E5:CB:87:AC:A6:71:5A:3D:83:2A:B9:C6:92:29:86:17:26:FC:A8 Authority key identifier: DF:77:06:1C:AE:F3:0A:8D:AF:6B:52:D8:A3:D9:FD:80:F3:72:0F:11 Certificate issuer: /CN=DF77061CAEF30A8DAF6B52D8A3D9FD80F3720F11 Certificate serial: 07238D0B8CBBC8549530AD2BCDF54C9E26B851CF Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DF77061CAEF30A8DAF6B52D8A3D9FD80F3720F11.cer Subject info access: rsync://repo-rpki.idnic.net/repo/7a0210b3-cca2-43c5-89f9-5a9086a60703/1/DF77061CAEF30A8DAF6B52D8A3D9FD80F3720F11.mft Manifest number: E9 Signing time: Mon 01 Dec 2025 10:10:39 +0000 Manifest this update: Mon 01 Dec 2025 10:05:39 +0000 Manifest next update: Thu 04 Dec 2025 14:01:39 +0000 Files and hashes: 1: DF77061CAEF30A8DAF6B52D8A3D9FD80F3720F11.crl (hash: RrrBNK+pOEhMWE0t0KJu784/yah6Z5kc1RBiuSNz0nQ=) 2: 323030313a6466333a663834303a3a2f34382d3438203d3e20313532383330.roa (hash: 3aMUQeSx+u1/318Y8ScOuCTO+xUE/7Y4RTX6xf+E9CE=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/7a0210b3-cca2-43c5-89f9-5a9086a60703/1/DF77061CAEF30A8DAF6B52D8A3D9FD80F3720F11.crl rsync://repo-rpki.idnic.net/repo/7a0210b3-cca2-43c5-89f9-5a9086a60703/1/DF77061CAEF30A8DAF6B52D8A3D9FD80F3720F11.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DF77061CAEF30A8DAF6B52D8A3D9FD80F3720F11.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 04 Dec 2025 14:01:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 07:23:8d:0b:8c:bb:c8:54:95:30:ad:2b:cd:f5:4c:9e:26:b8:51:cf Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DF77061CAEF30A8DAF6B52D8A3D9FD80F3720F11 Validity Not Before: Dec 1 10:05:39 2025 GMT Not After : Dec 4 14:01:39 2025 GMT Subject: CN=02E5CB87ACA6715A3D832AB9C69229861726FCA8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:f9:3a:d7:3d:ce:a4:60:f1:a3:c5:53:fd:f6: d8:d4:ba:5d:e3:69:f8:d6:76:9a:0e:bb:63:50:b6: 0b:cd:90:65:6d:91:51:de:6e:15:90:09:2b:d4:3a: af:b0:15:18:f2:e8:1c:2c:ea:6b:07:ef:8c:f7:87: 63:83:8e:89:ac:db:38:01:bf:ca:58:5c:65:d7:e8: 30:10:1a:7c:47:8f:19:ea:3e:bc:61:a5:2a:93:e7: bd:1c:4f:5d:af:1e:a3:33:af:aa:73:6d:81:65:9e: 8f:43:e8:67:3b:32:5a:47:1a:8c:10:87:2a:c9:8f: de:0a:1c:a6:9f:14:ab:95:69:ba:38:93:ed:c4:e8: 04:15:46:c2:39:58:6d:b8:42:cb:74:f1:79:58:b9: ec:e3:68:37:c7:6d:f5:e7:d6:38:a2:92:f0:a3:17: 79:f0:12:cd:44:13:b6:4f:79:01:97:06:1e:f6:44: 15:d8:e2:f4:38:07:06:eb:18:69:6e:df:8c:90:c8: 56:06:1f:87:93:90:59:b6:5c:73:01:8c:51:af:a1: 08:5f:ee:84:f6:90:5a:7d:51:37:55:13:28:48:e7: 27:1d:cd:68:da:fe:3c:3a:25:62:90:89:36:da:54: 30:2c:0d:d0:74:d7:42:9c:3d:8d:d9:28:3e:27:f5: d2:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:E5:CB:87:AC:A6:71:5A:3D:83:2A:B9:C6:92:29:86:17:26:FC:A8 X509v3 Authority Key Identifier: keyid:DF:77:06:1C:AE:F3:0A:8D:AF:6B:52:D8:A3:D9:FD:80:F3:72:0F:11 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/7a0210b3-cca2-43c5-89f9-5a9086a60703/1/DF77061CAEF30A8DAF6B52D8A3D9FD80F3720F11.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DF77061CAEF30A8DAF6B52D8A3D9FD80F3720F11.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7a0210b3-cca2-43c5-89f9-5a9086a60703/1/DF77061CAEF30A8DAF6B52D8A3D9FD80F3720F11.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ab:3f:cb:0e:10:25:8f:c2:24:e3:82:57:2f:4c:32:ee:86:fe: 15:62:24:23:39:37:dc:46:4f:03:ea:75:cc:aa:4f:bf:8b:e3: 64:c7:04:dc:22:c1:f1:a2:97:35:c8:f8:28:c9:e2:67:e0:8d: 68:f5:0a:30:1a:a4:e4:bc:e0:2d:43:a2:5d:d0:a7:49:17:50: 83:b2:85:4a:c8:b3:89:64:98:9c:96:8a:8c:5c:c6:84:56:f5: af:4c:ac:cd:f6:f5:ce:44:c3:c1:9f:dd:09:cc:0a:9d:67:11: d7:9b:0d:8b:d3:ff:75:88:b1:37:c2:8c:78:d2:b4:cd:94:ec: e1:5f:8d:7c:8f:70:19:4a:89:d9:00:fe:c3:56:02:87:4e:3a: 52:53:0a:d1:6a:73:7b:80:6a:a4:11:3f:ec:50:0a:72:c8:45: 21:5f:8d:f5:f3:0b:a3:2a:89:37:0c:ca:f6:4d:af:ee:3a:06: e8:31:7a:7a:fb:55:ac:98:d6:a9:ac:da:a6:2f:cd:93:0a:93: f0:33:e5:2b:29:3f:e3:fe:8b:3a:fc:71:dd:c3:e7:a5:6e:e2: 7b:a4:9b:61:c7:70:21:6e:88:d8:50:93:ec:ca:cb:8a:c3:a4: d7:c5:cf:48:e2:ce:41:3b:b3:3d:92:03:79:5a:6e:60:58:da: 21:0c:f0:16 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUByONC4y7yFSVMK0rzfVMnia4Uc8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoREY3NzA2MUNBRUYzMEE4REFGNkI1MkQ4QTNEOUZEODBG MzcyMEYxMTAeFw0yNTEyMDExMDA1MzlaFw0yNTEyMDQxNDAxMzlaMDMxMTAvBgNV BAMTKDAyRTVDQjg3QUNBNjcxNUEzRDgzMkFCOUM2OTIyOTg2MTcyNkZDQTgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC0+TrXPc6kYPGjxVP99tjUul3j afjWdpoOu2NQtgvNkGVtkVHebhWQCSvUOq+wFRjy6Bws6msH74z3h2ODjoms2zgB v8pYXGXX6DAQGnxHjxnqPrxhpSqT570cT12vHqMzr6pzbYFlno9D6Gc7MlpHGowQ hyrJj94KHKafFKuVabo4k+3E6AQVRsI5WG24Qst08XlYuezjaDfHbfXn1jiikvCj F3nwEs1EE7ZPeQGXBh72RBXY4vQ4BwbrGGlu34yQyFYGH4eTkFm2XHMBjFGvoQhf 7oT2kFp9UTdVEyhI5ycdzWja/jw6JWKQiTbaVDAsDdB010KcPY3ZKD4n9dLdAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUAuXLh6ymcVo9gyq5xpIphhcm/KgwHwYDVR0j BBgwFoAU33cGHK7zCo2va1LYo9n9gPNyDxEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 YTAyMTBiMy1jY2EyLTQzYzUtODlmOS01YTkwODZhNjA3MDMvMS9ERjc3MDYxQ0FF RjMwQThEQUY2QjUyRDhBM0Q5RkQ4MEYzNzIwRjExLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvREY3NzA2MUNBRUYzMEE4REFGNkI1MkQ4QTNEOUZEODBGMzcy MEYxMS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vN2EwMjEwYjMtY2NhMi00M2M1LTg5 ZjktNWE5MDg2YTYwNzAzLzEvREY3NzA2MUNBRUYzMEE4REFGNkI1MkQ4QTNEOUZE ODBGMzcyMEYxMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKs/yw4QJY/CJOOCVy9MMu6G/hViJCM5N9xG TwPqdcyqT7+L42THBNwiwfGilzXI+CjJ4mfgjWj1CjAapOS84C1Dol3Qp0kXUIOy hUrIs4lkmJyWioxcxoRW9a9MrM329c5Ew8Gf3QnMCp1nEdebDYvT/3WIsTfCjHjS tM2U7OFfjXyPcBlKidkA/sNWAodOOlJTCtFqc3uAaqQRP+xQCnLIRSFfjfXzC6Mq iTcMyvZNr+46Bugxenr7VayY1qms2qYvzZMKk/Az5SspP+P+izr8cd3D56Vu4nuk m2HHcCFuiNhQk+zKy4rDpNfFz0jizkE7sz2SA3labmBY2iEM8BY= -----END CERTIFICATE-----Generated at Wed Dec 3 14:44:19 2025 by rpki-client