This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/d6f4767d-e84f-4210-8423-40696618f377/0/A777F080277567701C7EF464D9A7351ADB0B538E.mft File: A777F080277567701C7EF464D9A7351ADB0B538E.mft (raw, json) Hash identifier: 9MXgedElreW8ATPJU3xp+FlY3qx2DxKaXTTXgHJ49Sg= Subject key identifier: 61:98:33:2B:AD:0B:D9:52:74:24:1B:2A:60:46:C2:E9:0C:20:BD:8C Authority key identifier: A7:77:F0:80:27:75:67:70:1C:7E:F4:64:D9:A7:35:1A:DB:0B:53:8E Certificate issuer: /CN=A777F080277567701C7EF464D9A7351ADB0B538E Certificate serial: 3C20295E426D2D32CD8099136311A01C58153A10 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A777F080277567701C7EF464D9A7351ADB0B538E.cer Subject info access: rsync://repo-rpki.idnic.net/repo/d6f4767d-e84f-4210-8423-40696618f377/0/A777F080277567701C7EF464D9A7351ADB0B538E.mft Manifest number: 0186 Signing time: Tue 02 Dec 2025 00:51:29 +0000 Manifest this update: Tue 02 Dec 2025 00:46:29 +0000 Manifest next update: Fri 05 Dec 2025 02:37:29 +0000 Files and hashes: 1: 3130332e31352e3231352e302f32342d3234203d3e20313335343737.roa (hash: nww0OvBV7eoF7ccGlEcWlOh6cTNl+JMulSg7kpc2Jzg=) 2: A777F080277567701C7EF464D9A7351ADB0B538E.crl (hash: QeoroO3a+DxNbZqos2z56+9BY/vymJjxi6rcL5WnE2o=) 3: 3130332e31352e3231342e302f32342d3234203d3e20313335343737.roa (hash: JBW3MNYcLkvyzbMzPH1digOsTzRoTjkVj2ZYm/AplQ8=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/d6f4767d-e84f-4210-8423-40696618f377/0/A777F080277567701C7EF464D9A7351ADB0B538E.crl rsync://repo-rpki.idnic.net/repo/d6f4767d-e84f-4210-8423-40696618f377/0/A777F080277567701C7EF464D9A7351ADB0B538E.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A777F080277567701C7EF464D9A7351ADB0B538E.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 05 Dec 2025 02:37:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3c:20:29:5e:42:6d:2d:32:cd:80:99:13:63:11:a0:1c:58:15:3a:10 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A777F080277567701C7EF464D9A7351ADB0B538E Validity Not Before: Dec 2 00:46:29 2025 GMT Not After : Dec 5 02:37:29 2025 GMT Subject: CN=6198332BAD0BD95274241B2A6046C2E90C20BD8C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:4e:f2:dc:9b:22:61:eb:9d:30:fb:20:7c:d9: 94:b3:24:ca:2a:87:8d:2f:da:a1:d7:e2:b0:32:d1: 3f:be:61:61:e0:c4:16:26:df:01:fd:04:16:15:95: 3a:ce:03:d0:a8:de:38:9b:7b:60:26:7b:27:5e:d5: c0:4e:76:d7:31:09:02:12:70:4b:6e:c8:b3:88:71: df:cd:86:db:cc:79:21:93:b9:f6:f8:88:2f:ad:64: be:04:9b:56:2d:fd:3f:5d:2a:81:0a:ec:5f:c6:47: c9:d5:ca:1d:83:d6:4f:7d:8a:9b:33:03:c6:19:e3: 20:a0:76:27:7e:19:c0:b2:c7:7d:08:26:09:f4:b8: b7:4c:20:af:60:dd:87:22:7f:e2:2f:34:81:d7:9c: 31:a3:94:00:8d:f0:42:56:0b:cf:a9:fd:49:1e:81: 4f:0b:ed:33:37:88:80:16:ac:a6:d9:5d:cc:ac:3e: 29:e2:4a:82:92:ca:41:bf:c2:e7:b2:48:21:55:b0: 05:20:05:12:43:be:03:4d:67:1e:fe:d2:51:fa:fb: 9d:95:e9:45:bd:ba:0e:01:70:ef:f1:e6:f5:bd:6d: 81:76:ff:2e:bb:e3:c8:8e:bc:18:2a:16:e6:9f:11: 0c:43:05:ae:cf:2d:89:73:c3:2b:4e:6e:c6:02:83: 91:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 61:98:33:2B:AD:0B:D9:52:74:24:1B:2A:60:46:C2:E9:0C:20:BD:8C X509v3 Authority Key Identifier: keyid:A7:77:F0:80:27:75:67:70:1C:7E:F4:64:D9:A7:35:1A:DB:0B:53:8E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/d6f4767d-e84f-4210-8423-40696618f377/0/A777F080277567701C7EF464D9A7351ADB0B538E.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A777F080277567701C7EF464D9A7351ADB0B538E.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d6f4767d-e84f-4210-8423-40696618f377/0/A777F080277567701C7EF464D9A7351ADB0B538E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5b:02:69:6b:78:20:32:b6:ec:e2:eb:28:df:3d:3b:0f:c1:a9: b2:56:d3:70:54:03:e5:3c:95:09:b9:15:2c:ff:8d:4a:d0:46: 12:5b:3d:5e:87:f4:7b:11:41:d6:de:1c:63:d1:1f:28:ca:ba: 9c:23:5f:41:92:1a:47:a9:6e:84:d5:cf:95:0d:aa:26:e3:88: 3c:45:2a:0c:e4:af:a8:23:19:9b:8e:99:8f:2e:79:e3:5f:fe: e3:6a:6b:3b:11:9e:f6:37:98:e7:df:5d:1a:e7:70:52:00:60: bf:fa:ff:c9:ee:e3:ba:cb:e3:76:d3:77:23:ef:1e:0c:f2:1e: bc:ca:fd:04:dc:d8:27:d4:ac:5b:61:29:38:cb:82:1c:1e:4a: 59:37:7e:1c:81:c7:b3:9b:4f:6f:4a:cf:f5:c8:c5:36:c2:c0: 0a:c2:ec:26:70:5e:65:c5:2f:ac:11:9c:42:e9:bb:04:1b:98: 49:de:de:bd:9b:1c:00:0e:50:7f:88:2d:70:e3:d2:94:b7:83: e9:bb:a1:04:7a:06:0c:22:93:09:de:4a:b1:11:3f:fe:a3:cf: 0a:69:3c:cc:a1:02:0e:04:75:00:7b:e2:27:02:fa:10:a3:f2: 5d:c6:06:e6:8b:10:8e:e2:59:f6:03:2a:80:e1:8c:18:19:94: 84:f9:35:32 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUPCApXkJtLTLNgJkTYxGgHFgVOhAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTc3N0YwODAyNzc1Njc3MDFDN0VGNDY0RDlBNzM1MUFE QjBCNTM4RTAeFw0yNTEyMDIwMDQ2MjlaFw0yNTEyMDUwMjM3MjlaMDMxMTAvBgNV BAMTKDYxOTgzMzJCQUQwQkQ5NTI3NDI0MUIyQTYwNDZDMkU5MEMyMEJEOEMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQChTvLcmyJh650w+yB82ZSzJMoq h40v2qHX4rAy0T++YWHgxBYm3wH9BBYVlTrOA9Co3jibe2Ameyde1cBOdtcxCQIS cEtuyLOIcd/NhtvMeSGTufb4iC+tZL4Em1Yt/T9dKoEK7F/GR8nVyh2D1k99ipsz A8YZ4yCgdid+GcCyx30IJgn0uLdMIK9g3Ycif+IvNIHXnDGjlACN8EJWC8+p/Uke gU8L7TM3iIAWrKbZXcysPiniSoKSykG/wueySCFVsAUgBRJDvgNNZx7+0lH6+52V 6UW9ug4BcO/x5vW9bYF2/y6748iOvBgqFuafEQxDBa7PLYlzwytObsYCg5FvAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUYZgzK60L2VJ0JBsqYEbC6QwgvYwwHwYDVR0j BBgwFoAUp3fwgCd1Z3AcfvRk2ac1GtsLU44wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k NmY0NzY3ZC1lODRmLTQyMTAtODQyMy00MDY5NjYxOGYzNzcvMC9BNzc3RjA4MDI3 NzU2NzcwMUM3RUY0NjREOUE3MzUxQURCMEI1MzhFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQTc3N0YwODAyNzc1Njc3MDFDN0VGNDY0RDlBNzM1MUFEQjBC NTM4RS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZDZmNDc2N2QtZTg0Zi00MjEwLTg0 MjMtNDA2OTY2MThmMzc3LzAvQTc3N0YwODAyNzc1Njc3MDFDN0VGNDY0RDlBNzM1 MUFEQjBCNTM4RS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFsCaWt4IDK27OLrKN89Ow/BqbJW03BUA+U8 lQm5FSz/jUrQRhJbPV6H9HsRQdbeHGPRHyjKupwjX0GSGkepboTVz5UNqibjiDxF Kgzkr6gjGZuOmY8ueeNf/uNqazsRnvY3mOffXRrncFIAYL/6/8nu47rL43bTdyPv HgzyHrzK/QTc2CfUrFthKTjLghweSlk3fhyBx7ObT29Kz/XIxTbCwArC7CZwXmXF L6wRnELpuwQbmEne3r2bHAAOUH+ILXDj0pS3g+m7oQR6BgwikwneSrERP/6jzwpp PMyhAg4EdQB74icC+hCj8l3GBuaLEI7iWfYDKoDhjBgZlIT5NTI= -----END CERTIFICATE-----Generated at Wed Dec 3 14:43:57 2025 by rpki-client