This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/cf7b7677-6204-405f-8ba2-e714324c15d7/0/B76CEE66CD329E4EDD33E6D3452A33FBBE00D741.mft File: B76CEE66CD329E4EDD33E6D3452A33FBBE00D741.mft (raw, json) Hash identifier: iMtN1KzPixUXd5xJEHMyboeoVX4KXFDnFrBN0ksCOdQ= Subject key identifier: A2:01:33:21:17:CF:C1:E2:12:7F:77:27:CF:C2:F8:F4:D5:03:E4:5E Authority key identifier: B7:6C:EE:66:CD:32:9E:4E:DD:33:E6:D3:45:2A:33:FB:BE:00:D7:41 Certificate issuer: /CN=B76CEE66CD329E4EDD33E6D3452A33FBBE00D741 Certificate serial: 6C5C3AE7AE6B5281445BE376A2A91033C8CA72CA Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B76CEE66CD329E4EDD33E6D3452A33FBBE00D741.cer Subject info access: rsync://repo-rpki.idnic.net/repo/cf7b7677-6204-405f-8ba2-e714324c15d7/0/B76CEE66CD329E4EDD33E6D3452A33FBBE00D741.mft Manifest number: 0247 Signing time: Tue 02 Dec 2025 16:40:56 +0000 Manifest this update: Tue 02 Dec 2025 16:35:56 +0000 Manifest next update: Sat 06 Dec 2025 04:34:56 +0000 Files and hashes: 1: 3130332e3138362e39342e302f32332d3234203d3e20313439373430.roa (hash: 36f1oVCDIma5/edGeBmPtM2U4zeHtnBlVDsNRr5sez8=) 2: B76CEE66CD329E4EDD33E6D3452A33FBBE00D741.crl (hash: e9Dg1RCp8XBD6vnMkhHYDV44z0SRCHeRge2QLYAge5Y=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/cf7b7677-6204-405f-8ba2-e714324c15d7/0/B76CEE66CD329E4EDD33E6D3452A33FBBE00D741.crl rsync://repo-rpki.idnic.net/repo/cf7b7677-6204-405f-8ba2-e714324c15d7/0/B76CEE66CD329E4EDD33E6D3452A33FBBE00D741.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B76CEE66CD329E4EDD33E6D3452A33FBBE00D741.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 06 Dec 2025 04:34:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6c:5c:3a:e7:ae:6b:52:81:44:5b:e3:76:a2:a9:10:33:c8:ca:72:ca Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B76CEE66CD329E4EDD33E6D3452A33FBBE00D741 Validity Not Before: Dec 2 16:35:56 2025 GMT Not After : Dec 6 04:34:56 2025 GMT Subject: CN=A201332117CFC1E2127F7727CFC2F8F4D503E45E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:fa:4c:3d:cd:d4:c1:73:53:0b:a4:72:c1:f9: fc:7c:27:49:f1:97:45:82:df:08:bb:24:f4:9f:96: 9a:f8:af:bb:4a:76:bc:07:5d:09:18:27:b2:0b:ea: da:b3:9c:0e:d3:ee:d7:15:d3:51:ef:aa:9e:7f:9a: 56:e4:fd:de:ef:26:bb:d7:28:2d:39:fe:c3:37:fe: 99:15:1b:33:39:8c:61:1a:3d:11:79:59:07:95:40: d5:3c:db:f1:47:38:e3:19:f8:28:5e:41:fb:f9:04: 16:c5:f4:45:9f:4d:12:45:7c:2f:ca:ed:b6:96:21: 72:e6:37:63:66:97:be:c6:61:56:5a:e1:df:25:53: d4:8f:39:d8:45:ac:3d:d8:2d:97:c2:41:40:9e:90: a7:3b:fd:3e:e1:da:0a:ff:31:6d:69:ab:62:1c:9b: 8e:03:a3:70:89:a4:14:c9:95:82:7a:06:ed:7b:4e: 7b:62:37:4e:f5:bf:66:fa:cc:a2:6a:10:0a:0b:d7: cf:0b:03:91:8c:12:39:6e:31:a7:32:86:33:ae:24: a2:69:67:29:bc:7f:82:de:fe:bf:aa:00:ad:f6:c9: 3a:6b:47:3b:93:52:52:e9:d4:d9:bd:88:bc:45:4a: fb:b1:f8:7d:15:1c:23:af:16:38:72:81:52:1b:02: 0c:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:01:33:21:17:CF:C1:E2:12:7F:77:27:CF:C2:F8:F4:D5:03:E4:5E X509v3 Authority Key Identifier: keyid:B7:6C:EE:66:CD:32:9E:4E:DD:33:E6:D3:45:2A:33:FB:BE:00:D7:41 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/cf7b7677-6204-405f-8ba2-e714324c15d7/0/B76CEE66CD329E4EDD33E6D3452A33FBBE00D741.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B76CEE66CD329E4EDD33E6D3452A33FBBE00D741.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/cf7b7677-6204-405f-8ba2-e714324c15d7/0/B76CEE66CD329E4EDD33E6D3452A33FBBE00D741.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption d1:44:af:15:0e:10:cf:48:ed:9b:bf:69:c8:3f:da:cb:ad:7d: dc:63:fa:fc:08:28:ae:a6:9f:c9:22:24:d0:d4:ae:79:10:b7: 2a:88:3e:fb:26:7b:c6:11:2a:86:66:13:00:7c:b9:ba:c0:2c: c0:f2:0e:5d:91:51:79:63:47:6e:17:99:44:d6:35:85:ee:bf: 40:65:d5:6b:c6:95:34:63:bc:df:84:6b:dc:39:18:e7:be:34: 38:38:52:19:18:67:2f:8d:51:2f:2e:17:f5:96:50:33:6a:71: 27:c2:23:38:c6:14:14:24:21:6e:87:d9:20:1e:69:3e:58:90: fd:9b:51:92:07:c3:e0:cb:c3:a1:8e:91:2e:af:16:55:f5:81: 5f:48:6c:82:c0:18:74:24:c4:e0:59:1d:31:45:2f:7f:91:2f: da:ad:1e:14:21:d0:a7:08:91:3e:f9:93:7a:f9:69:73:10:3f: da:36:de:bc:db:35:34:a9:4d:c1:d9:72:4b:1e:af:a9:5b:f4: c2:20:08:71:64:55:e4:16:81:db:47:ca:a7:6c:92:6f:b8:d5: a1:0f:d1:2b:a9:df:9d:2b:66:cc:fd:9c:71:02:d6:d0:f3:6b: 1a:ce:4d:5f:6f:d8:48:20:00:1d:2f:7e:18:9e:06:12:c7:7c: c3:61:d6:8b -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUbFw6565rUoFEW+N2oqkQM8jKcsowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjc2Q0VFNjZDRDMyOUU0RUREMzNFNkQzNDUyQTMzRkJC RTAwRDc0MTAeFw0yNTEyMDIxNjM1NTZaFw0yNTEyMDYwNDM0NTZaMDMxMTAvBgNV BAMTKEEyMDEzMzIxMTdDRkMxRTIxMjdGNzcyN0NGQzJGOEY0RDUwM0U0NUUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCi+kw9zdTBc1MLpHLB+fx8J0nx l0WC3wi7JPSflpr4r7tKdrwHXQkYJ7IL6tqznA7T7tcV01Hvqp5/mlbk/d7vJrvX KC05/sM3/pkVGzM5jGEaPRF5WQeVQNU82/FHOOMZ+CheQfv5BBbF9EWfTRJFfC/K 7baWIXLmN2Nml77GYVZa4d8lU9SPOdhFrD3YLZfCQUCekKc7/T7h2gr/MW1pq2Ic m44Do3CJpBTJlYJ6Bu17TntiN071v2b6zKJqEAoL188LA5GMEjluMacyhjOuJKJp Zym8f4Le/r+qAK32yTprRzuTUlLp1Nm9iLxFSvux+H0VHCOvFjhygVIbAgyVAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUogEzIRfPweISf3cnz8L49NUD5F4wHwYDVR0j BBgwFoAUt2zuZs0ynk7dM+bTRSoz+74A10EwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j ZjdiNzY3Ny02MjA0LTQwNWYtOGJhMi1lNzE0MzI0YzE1ZDcvMC9CNzZDRUU2NkNE MzI5RTRFREQzM0U2RDM0NTJBMzNGQkJFMDBENzQxLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQjc2Q0VFNjZDRDMyOUU0RUREMzNFNkQzNDUyQTMzRkJCRTAw RDc0MS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vY2Y3Yjc2NzctNjIwNC00MDVmLThi YTItZTcxNDMyNGMxNWQ3LzAvQjc2Q0VFNjZDRDMyOUU0RUREMzNFNkQzNDUyQTMz RkJCRTAwRDc0MS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBANFErxUOEM9I7Zu/acg/2sutfdxj+vwIKK6m n8kiJNDUrnkQtyqIPvsme8YRKoZmEwB8ubrALMDyDl2RUXljR24XmUTWNYXuv0Bl 1WvGlTRjvN+Ea9w5GOe+NDg4UhkYZy+NUS8uF/WWUDNqcSfCIzjGFBQkIW6H2SAe aT5YkP2bUZIHw+DLw6GOkS6vFlX1gV9IbILAGHQkxOBZHTFFL3+RL9qtHhQh0KcI kT75k3r5aXMQP9o23rzbNTSpTcHZckser6lb9MIgCHFkVeQWgdtHyqdskm+41aEP 0Sup350rZsz9nHEC1tDzaxrOTV9v2EggAB0vfhieBhLHfMNh1os= -----END CERTIFICATE-----Generated at Wed Dec 3 14:44:21 2025 by rpki-client