This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/8988c0f2-2800-48da-a83e-ab54df65c574/0/977EA5118551E98AEAA8BB11C9D99D7196D3DEBA.mft File: 977EA5118551E98AEAA8BB11C9D99D7196D3DEBA.mft (raw, json) Hash identifier: iuyy1onGG2GQE/FEHMW9VxrfkQYYRiGrlhDGGpKNCiU= Subject key identifier: 22:23:F1:B6:71:8F:C3:E9:DE:DE:F2:CB:99:FB:F0:8F:7F:8C:0F:68 Authority key identifier: 97:7E:A5:11:85:51:E9:8A:EA:A8:BB:11:C9:D9:9D:71:96:D3:DE:BA Certificate issuer: /CN=977EA5118551E98AEAA8BB11C9D99D7196D3DEBA Certificate serial: 4B3B3D978546A1C820F509C22C11D9BB1036C2B2 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/977EA5118551E98AEAA8BB11C9D99D7196D3DEBA.cer Subject info access: rsync://repo-rpki.idnic.net/repo/8988c0f2-2800-48da-a83e-ab54df65c574/0/977EA5118551E98AEAA8BB11C9D99D7196D3DEBA.mft Manifest number: 0531 Signing time: Sat 13 Dec 2025 20:21:13 +0000 Manifest this update: Sat 13 Dec 2025 20:16:13 +0000 Manifest next update: Wed 17 Dec 2025 07:32:13 +0000 Files and hashes: 1: 3130332e3132332e3130382e302f32342d3234203d3e20313338303636.roa (hash: q9pcjfkInqPcGghxGeh0wF/8x9n+wp0JshUKi76J40w=) 2: 977EA5118551E98AEAA8BB11C9D99D7196D3DEBA.crl (hash: GgcedTyY9RCj3xKMtlROSUVSjFBB8Zd7FxOltAA8uag=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/8988c0f2-2800-48da-a83e-ab54df65c574/0/977EA5118551E98AEAA8BB11C9D99D7196D3DEBA.crl rsync://repo-rpki.idnic.net/repo/8988c0f2-2800-48da-a83e-ab54df65c574/0/977EA5118551E98AEAA8BB11C9D99D7196D3DEBA.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/977EA5118551E98AEAA8BB11C9D99D7196D3DEBA.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 17 Dec 2025 07:32:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4b:3b:3d:97:85:46:a1:c8:20:f5:09:c2:2c:11:d9:bb:10:36:c2:b2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=977EA5118551E98AEAA8BB11C9D99D7196D3DEBA Validity Not Before: Dec 13 20:16:13 2025 GMT Not After : Dec 17 07:32:13 2025 GMT Subject: CN=2223F1B6718FC3E9DEDEF2CB99FBF08F7F8C0F68 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:76:c3:29:52:37:24:21:e0:75:35:b3:a7:be: 1f:df:35:de:bf:8a:f3:eb:15:77:72:67:41:d0:2f: 0d:81:e2:ed:12:95:14:f1:cb:54:7b:94:3b:98:98: b4:3e:21:94:3c:d8:83:15:3d:68:71:22:66:31:72: 5d:57:64:e4:c4:c3:4a:fd:f4:43:f6:08:4e:80:bd: 1a:af:1a:ce:1b:61:0f:20:fe:f6:9c:f6:90:8b:18: 02:09:b5:19:3a:26:1b:cf:28:cd:b0:9d:1a:76:05: 04:f3:94:ad:2d:71:cb:63:fd:80:0d:9a:ee:8f:b9: b7:b7:f7:fd:12:f9:be:8c:81:b3:5e:05:0d:dd:03: ba:c6:1a:4b:6a:79:eb:a7:9e:cd:54:f4:79:36:03: 80:52:73:2a:96:ad:1a:82:2f:21:10:a8:52:09:be: 3e:f8:bb:ca:5c:22:dd:cb:37:7d:0d:e6:07:a7:51: 32:25:b0:64:c5:9e:4a:bb:8a:00:6c:a5:52:20:3c: 03:51:85:67:23:89:80:c4:e4:94:6c:a6:18:e2:a5: 90:3e:f9:59:ac:c2:5c:d8:ca:5b:84:7c:6c:f9:46: 55:79:1c:10:08:83:42:7f:d1:b2:76:78:84:7c:be: 30:89:56:e8:cf:a8:df:d1:20:19:dc:4f:ee:50:08: 9a:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:23:F1:B6:71:8F:C3:E9:DE:DE:F2:CB:99:FB:F0:8F:7F:8C:0F:68 X509v3 Authority Key Identifier: keyid:97:7E:A5:11:85:51:E9:8A:EA:A8:BB:11:C9:D9:9D:71:96:D3:DE:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/8988c0f2-2800-48da-a83e-ab54df65c574/0/977EA5118551E98AEAA8BB11C9D99D7196D3DEBA.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/977EA5118551E98AEAA8BB11C9D99D7196D3DEBA.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/8988c0f2-2800-48da-a83e-ab54df65c574/0/977EA5118551E98AEAA8BB11C9D99D7196D3DEBA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 48:0b:fa:c1:19:6f:c7:41:25:8e:29:73:76:fb:47:79:dd:61: 86:9a:d2:c4:0d:8a:4d:bb:5d:88:31:8f:7a:d4:9e:12:e2:c0: 56:5f:8a:f1:b2:18:18:d9:26:54:7a:d9:f1:1e:17:c0:2b:56: bb:23:ce:35:64:d8:9d:75:ef:af:de:0e:6e:96:8e:14:af:c4: 90:cf:de:08:e5:28:de:c6:6a:4a:9f:aa:c8:5f:7f:66:ad:c2: 7d:6d:3b:ec:17:be:da:00:a4:54:b8:75:08:f1:57:e1:e4:fb: ee:a6:97:68:50:25:76:a1:9b:58:cb:cc:81:4a:ee:ed:93:7d: 72:ec:bb:03:a4:90:d3:fd:80:1b:7a:85:38:82:5b:0c:e4:85: 34:4e:6f:e9:86:bd:ce:7f:5a:ab:a3:e1:bd:d6:fb:5d:43:68: ee:07:59:a3:14:9b:37:d3:ba:a8:d3:8d:1d:8b:e0:ad:59:ca: 64:d8:fd:53:aa:01:d1:11:7b:1f:7c:b6:25:46:d7:2c:41:7f: 16:21:d0:43:6f:21:1b:70:18:44:47:9b:6f:e7:84:cc:dc:b8: cf:a2:40:74:d1:81:34:ad:e1:17:65:20:8e:f2:6c:b9:9c:df: 62:a0:ac:5e:38:9e:67:0d:63:7f:cc:5a:70:f4:85:3c:a1:fe: af:e8:4c:a5 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUSzs9l4VGocgg9QnCLBHZuxA2wrIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTc3RUE1MTE4NTUxRTk4QUVBQThCQjExQzlEOTlENzE5 NkQzREVCQTAeFw0yNTEyMTMyMDE2MTNaFw0yNTEyMTcwNzMyMTNaMDMxMTAvBgNV BAMTKDIyMjNGMUI2NzE4RkMzRTlERURFRjJDQjk5RkJGMDhGN0Y4QzBGNjgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDXdsMpUjckIeB1NbOnvh/fNd6/ ivPrFXdyZ0HQLw2B4u0SlRTxy1R7lDuYmLQ+IZQ82IMVPWhxImYxcl1XZOTEw0r9 9EP2CE6AvRqvGs4bYQ8g/vac9pCLGAIJtRk6JhvPKM2wnRp2BQTzlK0tcctj/YAN mu6Pube39/0S+b6MgbNeBQ3dA7rGGktqeeunns1U9Hk2A4BScyqWrRqCLyEQqFIJ vj74u8pcIt3LN30N5genUTIlsGTFnkq7igBspVIgPANRhWcjiYDE5JRsphjipZA+ +VmswlzYyluEfGz5RlV5HBAIg0J/0bJ2eIR8vjCJVujPqN/RIBncT+5QCJpTAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUIiPxtnGPw+ne3vLLmfvwj3+MD2gwHwYDVR0j BBgwFoAUl36lEYVR6YrqqLsRydmdcZbT3rowDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 OTg4YzBmMi0yODAwLTQ4ZGEtYTgzZS1hYjU0ZGY2NWM1NzQvMC85NzdFQTUxMTg1 NTFFOThBRUFBOEJCMTFDOUQ5OUQ3MTk2RDNERUJBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOTc3RUE1MTE4NTUxRTk4QUVBQThCQjExQzlEOTlENzE5NkQz REVCQS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vODk4OGMwZjItMjgwMC00OGRhLWE4 M2UtYWI1NGRmNjVjNTc0LzAvOTc3RUE1MTE4NTUxRTk4QUVBQThCQjExQzlEOTlE NzE5NkQzREVCQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEgL+sEZb8dBJY4pc3b7R3ndYYaa0sQNik27 XYgxj3rUnhLiwFZfivGyGBjZJlR62fEeF8ArVrsjzjVk2J1176/eDm6WjhSvxJDP 3gjlKN7Gakqfqshff2atwn1tO+wXvtoApFS4dQjxV+Hk++6ml2hQJXahm1jLzIFK 7u2TfXLsuwOkkNP9gBt6hTiCWwzkhTROb+mGvc5/Wquj4b3W+11DaO4HWaMUmzfT uqjTjR2L4K1ZymTY/VOqAdERex98tiVG1yxBfxYh0ENvIRtwGERHm2/nhMzcuM+i QHTRgTSt4RdlII7ybLmc32KgrF44nmcNY3/MWnD0hTyh/q/oTKU= -----END CERTIFICATE-----Generated at Sun Dec 14 21:47:50 2025 by rpki-client