This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/d7a6b23b-c41e-4449-a149-bc0c6c8b011b/0/D77C7D38397FCDE17250AA403BF110EC387F7C02.mft File: D77C7D38397FCDE17250AA403BF110EC387F7C02.mft (raw, json) Hash identifier: OsDGZW74PtqwbLWMWuz3gYr+xUrvZ9BT3CjfCYH/PoI= Subject key identifier: 6B:09:9E:E9:7D:4E:DF:2B:C2:89:78:A1:92:F4:0A:45:A1:FE:3D:A5 Authority key identifier: D7:7C:7D:38:39:7F:CD:E1:72:50:AA:40:3B:F1:10:EC:38:7F:7C:02 Certificate issuer: /CN=D77C7D38397FCDE17250AA403BF110EC387F7C02 Certificate serial: 2357B7741916A528946B107327D28CB3FF8A3EB2 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D77C7D38397FCDE17250AA403BF110EC387F7C02.cer Subject info access: rsync://repo-rpki.idnic.net/repo/d7a6b23b-c41e-4449-a149-bc0c6c8b011b/0/D77C7D38397FCDE17250AA403BF110EC387F7C02.mft Manifest number: 015C Signing time: Wed 03 Dec 2025 03:01:29 +0000 Manifest this update: Wed 03 Dec 2025 02:56:29 +0000 Manifest next update: Sat 06 Dec 2025 13:55:29 +0000 Files and hashes: 1: D77C7D38397FCDE17250AA403BF110EC387F7C02.crl (hash: +121e20zgnhb7mvFrznUupoHl7J67FLea53V32Q7a1E=) 2: 3130332e3233342e33342e302f32342d3234203d3e20313531353231.roa (hash: aAQ3gTdw9Ba4EyqO5leg/m+5A85FY5W+Vc3itSgQl30=) 3: 3130332e3233342e33352e302f32342d3234203d3e20313531353231.roa (hash: AZoj+0FC7tr+2ZKJboWJyczOYWAwC/zNvBvRBqK06eM=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/d7a6b23b-c41e-4449-a149-bc0c6c8b011b/0/D77C7D38397FCDE17250AA403BF110EC387F7C02.crl rsync://repo-rpki.idnic.net/repo/d7a6b23b-c41e-4449-a149-bc0c6c8b011b/0/D77C7D38397FCDE17250AA403BF110EC387F7C02.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D77C7D38397FCDE17250AA403BF110EC387F7C02.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 06 Dec 2025 12:07:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 23:57:b7:74:19:16:a5:28:94:6b:10:73:27:d2:8c:b3:ff:8a:3e:b2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D77C7D38397FCDE17250AA403BF110EC387F7C02 Validity Not Before: Dec 3 02:56:29 2025 GMT Not After : Dec 6 13:55:29 2025 GMT Subject: CN=6B099EE97D4EDF2BC28978A192F40A45A1FE3DA5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:a7:f7:32:43:a5:9e:c8:35:fb:aa:e8:bf:23: 62:1d:1d:d8:0b:9d:fd:61:31:a3:12:d7:36:49:46: 9a:ea:bc:32:30:31:ee:94:fe:fd:2c:51:b9:f0:e8: 5f:01:0a:d2:9c:45:90:2c:f6:a9:6d:8e:97:a4:e2: 35:1e:85:0a:72:81:48:f6:98:3b:32:0e:e9:5e:d9: 73:4c:bc:34:04:56:9e:44:3d:5c:bd:4c:be:37:e6: 0d:9e:2f:bf:f3:e8:cc:7e:a7:03:56:8a:ae:23:16: 39:8d:19:d9:c3:37:ec:92:a3:71:93:f1:d0:a4:5c: 3b:ff:c0:b1:03:44:ce:4a:3f:00:c9:7f:bd:08:ff: d1:61:ab:31:a4:f1:70:68:44:c4:30:17:2d:b7:9b: 5d:1f:96:64:60:f0:da:66:db:1d:29:22:f9:ad:e6: 8d:c7:4a:71:48:4a:d2:a4:4b:9c:d5:ab:c7:ec:fa: bb:64:24:ec:eb:f5:ae:29:a2:2e:1c:cf:7e:e4:7f: 93:68:4d:39:52:8a:21:67:84:08:fa:cf:1c:66:f3: 5c:7d:be:74:0c:92:ea:8d:0a:55:ce:08:7a:55:9f: 3f:3b:9f:5d:60:16:ff:7e:bc:33:c4:1d:37:46:e7: f3:52:7a:06:7f:cc:39:3b:ca:c6:00:52:5a:d3:5d: d2:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6B:09:9E:E9:7D:4E:DF:2B:C2:89:78:A1:92:F4:0A:45:A1:FE:3D:A5 X509v3 Authority Key Identifier: keyid:D7:7C:7D:38:39:7F:CD:E1:72:50:AA:40:3B:F1:10:EC:38:7F:7C:02 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/d7a6b23b-c41e-4449-a149-bc0c6c8b011b/0/D77C7D38397FCDE17250AA403BF110EC387F7C02.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D77C7D38397FCDE17250AA403BF110EC387F7C02.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d7a6b23b-c41e-4449-a149-bc0c6c8b011b/0/D77C7D38397FCDE17250AA403BF110EC387F7C02.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1a:ed:3f:06:e9:d4:51:11:55:d4:ad:68:45:47:72:2c:e9:85: 23:af:7b:cb:be:69:6f:77:11:7d:30:c5:68:bc:60:23:3c:f8: 8d:df:d2:b8:20:64:e0:e9:a5:c4:33:b1:b1:af:d6:61:bb:5c: 70:29:ec:d4:cd:c4:c3:5d:93:56:b3:78:3f:a7:59:f1:cf:c0: 25:d5:72:97:86:69:a2:6d:46:b8:7b:d2:88:d3:b4:d6:8f:bb: 28:eb:43:b9:1a:87:a7:9f:11:b6:ef:cb:2c:a4:06:ed:b9:60: 8f:bf:6f:7b:6a:61:ca:14:df:a3:08:d8:95:4b:04:d2:01:e1: e9:05:60:0e:5a:fb:fd:8c:c8:dc:a5:eb:07:f1:5c:41:dd:ba: 9f:b4:bf:82:40:88:6c:df:ab:20:fc:3d:e1:b7:7a:23:ea:e5: 40:ee:a6:c0:2d:52:da:ce:e7:65:20:70:71:96:9f:9b:92:00: 37:8b:8b:47:0c:20:05:16:a8:b1:c9:c3:03:0c:73:37:de:bf: 4b:8d:69:f7:44:5d:c4:be:d1:59:56:0e:9e:59:52:55:7e:58: de:83:c2:60:9a:14:27:d3:18:01:be:03:a2:c5:45:ce:a5:b7: 57:c0:d2:b3:af:21:47:57:ec:be:bc:1b:ac:14:ef:c4:38:81: 37:fc:6c:03 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUI1e3dBkWpSiUaxBzJ9KMs/+KPrIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDc3QzdEMzgzOTdGQ0RFMTcyNTBBQTQwM0JGMTEwRUMz ODdGN0MwMjAeFw0yNTEyMDMwMjU2MjlaFw0yNTEyMDYxMzU1MjlaMDMxMTAvBgNV BAMTKDZCMDk5RUU5N0Q0RURGMkJDMjg5NzhBMTkyRjQwQTQ1QTFGRTNEQTUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDOp/cyQ6WeyDX7qui/I2IdHdgL nf1hMaMS1zZJRprqvDIwMe6U/v0sUbnw6F8BCtKcRZAs9qltjpek4jUehQpygUj2 mDsyDule2XNMvDQEVp5EPVy9TL435g2eL7/z6Mx+pwNWiq4jFjmNGdnDN+ySo3GT 8dCkXDv/wLEDRM5KPwDJf70I/9FhqzGk8XBoRMQwFy23m10flmRg8Npm2x0pIvmt 5o3HSnFIStKkS5zVq8fs+rtkJOzr9a4poi4cz37kf5NoTTlSiiFnhAj6zxxm81x9 vnQMkuqNClXOCHpVnz87n11gFv9+vDPEHTdG5/NSegZ/zDk7ysYAUlrTXdIZAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUawme6X1O3yvCiXihkvQKRaH+PaUwHwYDVR0j BBgwFoAU13x9ODl/zeFyUKpAO/EQ7Dh/fAIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k N2E2YjIzYi1jNDFlLTQ0NDktYTE0OS1iYzBjNmM4YjAxMWIvMC9ENzdDN0QzODM5 N0ZDREUxNzI1MEFBNDAzQkYxMTBFQzM4N0Y3QzAyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRDc3QzdEMzgzOTdGQ0RFMTcyNTBBQTQwM0JGMTEwRUMzODdG N0MwMi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZDdhNmIyM2ItYzQxZS00NDQ5LWEx NDktYmMwYzZjOGIwMTFiLzAvRDc3QzdEMzgzOTdGQ0RFMTcyNTBBQTQwM0JGMTEw RUMzODdGN0MwMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABrtPwbp1FERVdStaEVHcizphSOve8u+aW93 EX0wxWi8YCM8+I3f0rggZODppcQzsbGv1mG7XHAp7NTNxMNdk1azeD+nWfHPwCXV cpeGaaJtRrh70ojTtNaPuyjrQ7kah6efEbbvyyykBu25YI+/b3tqYcoU36MI2JVL BNIB4ekFYA5a+/2MyNyl6wfxXEHdup+0v4JAiGzfqyD8PeG3eiPq5UDupsAtUtrO 52UgcHGWn5uSADeLi0cMIAUWqLHJwwMMczfev0uNafdEXcS+0VlWDp5ZUlV+WN6D wmCaFCfTGAG+A6LFRc6lt1fA0rOvIUdX7L68G6wU78Q4gTf8bAM= -----END CERTIFICATE-----Generated at Wed Dec 3 14:58:01 2025 by rpki-client