This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repo-rpki.idnic.net/repo/e517fe98-8f58-497f-be57-8665a7a04bb0/0/77776250E47CDCAE9263AB4AF8FA40A1391792EA.mft
File: 77776250E47CDCAE9263AB4AF8FA40A1391792EA.mft (raw, json)
Hash identifier: Wy+gEnN9minVgvCrPAZGGNgfSsAVjn1G5kmE6jpMc5o=
Subject key identifier: EF:A8:80:FA:0B:A5:54:22:5C:51:A3:E3:57:86:FB:15:92:2D:53:F3
Authority key identifier: 77:77:62:50:E4:7C:DC:AE:92:63:AB:4A:F8:FA:40:A1:39:17:92:EA
Certificate issuer: /CN=77776250E47CDCAE9263AB4AF8FA40A1391792EA
Certificate serial: 792E221AE457DA5E42540089B9B43D30FBBF5D8F
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/77776250E47CDCAE9263AB4AF8FA40A1391792EA.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/e517fe98-8f58-497f-be57-8665a7a04bb0/0/77776250E47CDCAE9263AB4AF8FA40A1391792EA.mft
Manifest number: 021D
Signing time: Thu 18 Dec 2025 22:22:15 +0000
Manifest this update: Thu 18 Dec 2025 22:17:15 +0000
Manifest next update: Mon 22 Dec 2025 03:43:15 +0000
Files and hashes: 1: 323030313a6466303a663534303a3a2f34382d3438203d3e20313431363231.roa (hash: vAIjmbx3dVuW8GpN3/fZq5ol916CeS6StRg+6uf/1t0=)
2: 3130332e3136312e3136342e302f32332d3233203d3e20313431363231.roa (hash: mgkxr/SuMyMsRvRjiMcUueP3vdh3ZYSiC7xct6qMuK4=)
3: 3130332e3136312e3136342e302f32342d3234203d3e20313431363231.roa (hash: F7Hvn3nr15WKTOMp+UJFZvJVrdndxdoOm2ecLXQTtiA=)
4: 77776250E47CDCAE9263AB4AF8FA40A1391792EA.crl (hash: 5YzN4WkHdyt3wAI6poGWKqp8aATdzJC4x8K0HsfHZb4=)
5: 3130332e3136312e3136352e302f32342d3234203d3e20313431363231.roa (hash: VfFxxuazE0SD/9aiBAJNKHpH/m4/DEssj0TquLDvxPg=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/e517fe98-8f58-497f-be57-8665a7a04bb0/0/77776250E47CDCAE9263AB4AF8FA40A1391792EA.crl
rsync://repo-rpki.idnic.net/repo/e517fe98-8f58-497f-be57-8665a7a04bb0/0/77776250E47CDCAE9263AB4AF8FA40A1391792EA.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/77776250E47CDCAE9263AB4AF8FA40A1391792EA.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 22 Dec 2025 03:43:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
79:2e:22:1a:e4:57:da:5e:42:54:00:89:b9:b4:3d:30:fb:bf:5d:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=77776250E47CDCAE9263AB4AF8FA40A1391792EA
Validity
Not Before: Dec 18 22:17:15 2025 GMT
Not After : Dec 22 03:43:15 2025 GMT
Subject: CN=EFA880FA0BA554225C51A3E35786FB15922D53F3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:61:a0:e1:e9:70:ea:22:07:e3:b9:9b:50:d6:
a4:c7:e2:2e:27:05:36:3a:5f:30:3a:e3:04:1e:24:
63:3a:ba:43:7c:41:c7:6f:88:8d:18:c4:0e:98:88:
be:35:3f:78:66:1e:b1:4c:3b:4e:d8:19:02:ff:20:
72:90:5a:43:c0:de:de:9c:41:7a:7b:39:99:8b:29:
7e:de:f2:c3:57:c7:e9:19:ef:e3:18:d1:16:d1:ab:
f7:52:9c:cf:0d:ff:c8:91:73:f0:64:fb:f4:49:50:
77:fc:31:0f:fd:ef:aa:73:87:03:31:88:60:88:2b:
99:b5:02:18:60:db:bd:8e:8e:93:ed:5a:76:60:97:
3a:47:a5:79:63:bf:20:ae:09:c6:e5:3d:22:f7:5d:
d2:7d:91:22:91:31:60:c2:c4:af:bf:5b:6a:38:ff:
60:c7:e9:fa:d4:8e:3b:58:16:e0:98:05:10:cd:1a:
de:ad:14:5e:a6:b7:2b:f4:4d:3a:20:52:28:45:a6:
17:e3:a5:f5:5e:e3:41:1d:28:f3:ce:7d:8d:e1:77:
35:da:db:e6:8c:8d:0d:4a:b7:85:99:18:ad:66:c5:
c5:18:4b:95:57:08:c8:77:6b:d2:00:6b:08:22:39:
c6:f3:6d:80:37:a8:22:72:27:1a:db:75:dd:f9:cf:
78:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:A8:80:FA:0B:A5:54:22:5C:51:A3:E3:57:86:FB:15:92:2D:53:F3
X509v3 Authority Key Identifier:
keyid:77:77:62:50:E4:7C:DC:AE:92:63:AB:4A:F8:FA:40:A1:39:17:92:EA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/e517fe98-8f58-497f-be57-8665a7a04bb0/0/77776250E47CDCAE9263AB4AF8FA40A1391792EA.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/77776250E47CDCAE9263AB4AF8FA40A1391792EA.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e517fe98-8f58-497f-be57-8665a7a04bb0/0/77776250E47CDCAE9263AB4AF8FA40A1391792EA.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2b:1f:89:1b:83:8d:bb:20:b4:4e:a4:b2:8c:95:e8:d2:a2:cd:
c2:f9:08:1e:88:ce:91:05:64:c3:fb:af:1a:ea:08:15:f5:e4:
8f:c7:6f:34:e1:49:60:a0:0c:5c:05:5c:1c:bf:de:35:38:84:
14:56:62:8a:bf:10:9b:68:70:a2:de:c6:e3:fb:c1:24:12:ad:
79:42:d2:fc:a0:7b:fa:51:d8:c4:36:43:97:6d:b3:ff:0a:f4:
34:c9:bb:bd:73:16:d3:4c:40:70:24:31:d1:ea:28:32:bb:0f:
05:d7:3a:6c:b3:26:ae:c5:d9:57:44:6c:b2:bb:22:9a:f3:97:
26:f9:66:b2:b0:6e:a2:7c:f9:4a:96:0c:92:3f:21:05:02:a9:
51:bb:7f:5d:8f:4b:e8:4e:e3:69:2f:cb:7b:b9:49:b4:e9:ee:
07:d7:f6:69:55:88:6f:10:e8:0d:47:e4:03:53:2b:55:29:71:
2c:3c:96:14:cc:3c:50:80:8e:8e:24:43:fc:d9:81:41:75:74:
60:4e:94:52:a4:6e:da:8d:c9:0d:ea:a0:1e:2c:79:ea:54:ea:
3e:23:22:27:ea:d1:ca:c5:25:2c:81:5e:1e:0e:e1:68:d5:70:
70:29:89:d2:90:24:ca:68:ba:5b:94:e2:bb:2e:8f:76:2c:b9:
e1:25:09:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 19 08:07:03 2025 by rpki-client