This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repo-rpki.idnic.net/repo/e81f68a3-b354-4801-b949-3452e7b1f72f/0/77629696624E40462330DA2AF610D32809C89E5A.mft
File: 77629696624E40462330DA2AF610D32809C89E5A.mft (raw, json)
Hash identifier: ExozYyE5YODnWsgBlrJyLn1SCR6zOWotDJ5uf6SkIjI=
Subject key identifier: 87:CF:9F:58:C5:56:A4:82:4A:48:E8:F5:1F:2D:D6:75:B2:11:AF:D7
Authority key identifier: 77:62:96:96:62:4E:40:46:23:30:DA:2A:F6:10:D3:28:09:C8:9E:5A
Certificate issuer: /CN=77629696624E40462330DA2AF610D32809C89E5A
Certificate serial: 0D3ADAFF4F46E618D7C4FA10F937C1E4B671256B
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/77629696624E40462330DA2AF610D32809C89E5A.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/e81f68a3-b354-4801-b949-3452e7b1f72f/0/77629696624E40462330DA2AF610D32809C89E5A.mft
Manifest number: 052B
Signing time: Tue 02 Dec 2025 16:50:41 +0000
Manifest this update: Tue 02 Dec 2025 16:45:41 +0000
Manifest next update: Fri 05 Dec 2025 19:58:41 +0000
Files and hashes: 1: 3130332e35312e3135382e302f32342d3234203d3e203538333934.roa (hash: MZpBnWfk42SFeduiN6RL28Su7KTp0RDTjQY3tu04WHo=)
2: 77629696624E40462330DA2AF610D32809C89E5A.crl (hash: TygVj1m6SZXNyN4kDqV/8wMBo94t0YdzX59r7zoKUVA=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/e81f68a3-b354-4801-b949-3452e7b1f72f/0/77629696624E40462330DA2AF610D32809C89E5A.crl
rsync://repo-rpki.idnic.net/repo/e81f68a3-b354-4801-b949-3452e7b1f72f/0/77629696624E40462330DA2AF610D32809C89E5A.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/77629696624E40462330DA2AF610D32809C89E5A.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 05 Dec 2025 19:58:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0d:3a:da:ff:4f:46:e6:18:d7:c4:fa:10:f9:37:c1:e4:b6:71:25:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=77629696624E40462330DA2AF610D32809C89E5A
Validity
Not Before: Dec 2 16:45:41 2025 GMT
Not After : Dec 5 19:58:41 2025 GMT
Subject: CN=87CF9F58C556A4824A48E8F51F2DD675B211AFD7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:78:3f:fd:17:66:df:0c:25:17:3c:92:53:37:
19:b1:c1:0a:d8:ff:0e:b5:a7:5d:19:dd:9a:d1:9c:
25:c6:df:09:a8:c2:45:97:67:4d:e4:a2:a4:fc:ee:
84:78:b1:47:41:23:e6:b3:80:f3:62:38:17:e0:81:
ba:1a:f0:2f:b1:8a:a4:c5:34:b7:dc:e6:92:f0:50:
3d:22:36:5a:e8:95:ef:bc:93:be:c3:cd:c3:5a:ed:
7e:86:bc:83:43:37:23:b8:cc:c9:41:04:23:21:56:
36:28:76:b7:88:7a:40:d9:02:19:28:a6:9f:14:4b:
25:b4:83:5a:fc:54:b7:c4:11:25:2f:e0:b6:5f:fe:
7e:df:95:a7:dd:ed:27:12:24:7d:56:e2:c9:e6:eb:
ad:ba:68:bd:56:96:a9:21:b3:e4:f2:47:fb:5b:a3:
9d:8a:19:ac:d0:53:c3:f9:9d:4c:2b:92:dd:4d:32:
97:6e:fb:9c:97:ef:21:a4:3a:1e:22:7e:60:6c:c8:
88:94:7b:04:f5:e5:db:ab:c0:ea:75:b8:31:ac:51:
6e:11:e8:19:c8:97:57:78:02:0c:7b:5a:74:a9:a5:
94:b5:88:7a:ce:dc:92:7b:e2:0d:74:5e:28:10:96:
2c:9a:d0:58:e8:72:3e:a2:50:d5:dd:d0:f7:33:ce:
e3:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:CF:9F:58:C5:56:A4:82:4A:48:E8:F5:1F:2D:D6:75:B2:11:AF:D7
X509v3 Authority Key Identifier:
keyid:77:62:96:96:62:4E:40:46:23:30:DA:2A:F6:10:D3:28:09:C8:9E:5A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/e81f68a3-b354-4801-b949-3452e7b1f72f/0/77629696624E40462330DA2AF610D32809C89E5A.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/77629696624E40462330DA2AF610D32809C89E5A.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e81f68a3-b354-4801-b949-3452e7b1f72f/0/77629696624E40462330DA2AF610D32809C89E5A.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c3:43:6f:9b:fe:0e:6f:21:3a:5c:a4:8d:c9:f7:3f:28:01:2e:
06:3d:ed:d4:f8:f0:e1:a0:1a:2e:55:0c:bd:5f:38:ae:10:4c:
6e:05:06:44:6e:e6:f4:1d:1c:a4:9f:72:ec:45:ea:c8:24:59:
79:c3:bd:73:43:17:be:12:9a:ac:18:24:8e:de:47:72:b2:85:
9a:5a:3d:42:14:46:9b:5c:c4:27:3e:92:d5:5a:de:55:c8:0f:
ae:6f:43:e8:9a:29:67:14:00:bb:0e:81:01:98:17:b7:04:3f:
dc:94:bb:70:a7:de:b8:5f:55:d2:62:f9:52:e4:a1:d8:ca:8c:
e0:f1:22:33:82:ec:56:2e:27:42:8f:88:94:e3:40:e6:5d:fe:
99:c6:b1:dd:f6:86:12:7a:dc:a2:65:ef:b1:dd:05:c6:3b:fb:
fa:89:43:34:d9:91:ce:95:a8:ea:04:4c:65:39:8b:ac:38:ee:
a1:de:3b:5f:4f:a7:d0:bd:0e:f7:fb:7c:06:28:60:5a:f2:ed:
0d:22:3e:ab:72:7a:26:89:f2:c5:85:73:cf:f5:07:ed:29:56:
45:5e:aa:0f:99:da:b9:34:d4:59:59:6f:de:cc:d8:1e:a1:80:
ff:12:b4:bf:42:9c:50:3a:2a:f8:1b:1b:ac:18:5a:c1:3e:bd:
12:d5:ee:a5
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUDTra/09G5hjXxPoQ+TfB5LZxJWswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNzc2Mjk2OTY2MjRFNDA0NjIzMzBEQTJBRjYxMEQzMjgw
OUM4OUU1QTAeFw0yNTEyMDIxNjQ1NDFaFw0yNTEyMDUxOTU4NDFaMDMxMTAvBgNV
BAMTKDg3Q0Y5RjU4QzU1NkE0ODI0QTQ4RThGNTFGMkRENjc1QjIxMUFGRDcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDjeD/9F2bfDCUXPJJTNxmxwQrY
/w61p10Z3ZrRnCXG3wmowkWXZ03koqT87oR4sUdBI+azgPNiOBfggboa8C+xiqTF
NLfc5pLwUD0iNlrole+8k77DzcNa7X6GvINDNyO4zMlBBCMhVjYodreIekDZAhko
pp8USyW0g1r8VLfEESUv4LZf/n7flafd7ScSJH1W4snm6626aL1Wlqkhs+TyR/tb
o52KGazQU8P5nUwrkt1NMpdu+5yX7yGkOh4ifmBsyIiUewT15durwOp1uDGsUW4R
6BnIl1d4Agx7WnSppZS1iHrO3JJ74g10XigQliya0Fjocj6iUNXd0PczzuNRAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQUh8+fWMVWpIJKSOj1Hy3WdbIRr9cwHwYDVR0j
BBgwFoAUd2KWlmJOQEYjMNoq9hDTKAnInlowDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l
ODFmNjhhMy1iMzU0LTQ4MDEtYjk0OS0zNDUyZTdiMWY3MmYvMC83NzYyOTY5NjYy
NEU0MDQ2MjMzMERBMkFGNjEwRDMyODA5Qzg5RTVBLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvNzc2Mjk2OTY2MjRFNDA0NjIzMzBEQTJBRjYxMEQzMjgwOUM4
OUU1QS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6
Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZTgxZjY4YTMtYjM1NC00ODAxLWI5
NDktMzQ1MmU3YjFmNzJmLzAvNzc2Mjk2OTY2MjRFNDA0NjIzMzBEQTJBRjYxMEQz
MjgwOUM4OUU1QS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBAMNDb5v+Dm8hOlykjcn3PygBLgY97dT48OGg
Gi5VDL1fOK4QTG4FBkRu5vQdHKSfcuxF6sgkWXnDvXNDF74SmqwYJI7eR3KyhZpa
PUIURptcxCc+ktVa3lXID65vQ+iaKWcUALsOgQGYF7cEP9yUu3Cn3rhfVdJi+VLk
odjKjODxIjOC7FYuJ0KPiJTjQOZd/pnGsd32hhJ63KJl77HdBcY7+/qJQzTZkc6V
qOoETGU5i6w47qHeO19Pp9C9Dvf7fAYoYFry7Q0iPqtyeiaJ8sWFc8/1B+0pVkVe
qg+Z2rk01FlZb97M2B6hgP8StL9CnFA6KvgbG6wYWsE+vRLV7qU=
-----END CERTIFICATE-----
Generated at Wed Dec 3 14:14:27 2025 by rpki-client