This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/5d823bb3-5a01-4658-a783-f8e89fadcf45/0/77ACF18F5317E7A202E583C3C59C223234FA2D8B.mft
File:                     77ACF18F5317E7A202E583C3C59C223234FA2D8B.mft (raw, json)
Hash identifier:          rUHd2SJBZ6WX8/Z0cKpc6jZTEh0c6EDN6nO7yNAgzjQ=
Subject key identifier:   4E:94:02:F6:E6:D8:B1:AF:6B:D8:F1:A4:9D:50:25:BB:9C:E3:37:08
Authority key identifier: 77:AC:F1:8F:53:17:E7:A2:02:E5:83:C3:C5:9C:22:32:34:FA:2D:8B
Certificate issuer:       /CN=77ACF18F5317E7A202E583C3C59C223234FA2D8B
Certificate serial:       400CAD7AD18CEDF81FD0D10815FDC139305DBF
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/77ACF18F5317E7A202E583C3C59C223234FA2D8B.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/5d823bb3-5a01-4658-a783-f8e89fadcf45/0/77ACF18F5317E7A202E583C3C59C223234FA2D8B.mft
Manifest number:          0110
Signing time:             Fri 05 Dec 2025 16:21:45 +0000
Manifest this update:     Fri 05 Dec 2025 16:16:45 +0000
Manifest next update:     Tue 09 Dec 2025 03:12:45 +0000
Files and hashes:         1: 3135372e32302e3230342e302f32332d3234203d3e20313532343139.roa (hash: mBt52f39yB2WTMjY8yTiBWW7j1vK6aWMbOkMPXZ1lgU=)
                          2: 77ACF18F5317E7A202E583C3C59C223234FA2D8B.crl (hash: w7cBXeSneUbyMlUoGwg3uzzOUOvB5e9rT3xS6n6GOTk=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/5d823bb3-5a01-4658-a783-f8e89fadcf45/0/77ACF18F5317E7A202E583C3C59C223234FA2D8B.crl
                          rsync://repo-rpki.idnic.net/repo/5d823bb3-5a01-4658-a783-f8e89fadcf45/0/77ACF18F5317E7A202E583C3C59C223234FA2D8B.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/77ACF18F5317E7A202E583C3C59C223234FA2D8B.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 09 Dec 2025 03:12:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            40:0c:ad:7a:d1:8c:ed:f8:1f:d0:d1:08:15:fd:c1:39:30:5d:bf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=77ACF18F5317E7A202E583C3C59C223234FA2D8B
        Validity
            Not Before: Dec  5 16:16:45 2025 GMT
            Not After : Dec  9 03:12:45 2025 GMT
        Subject: CN=4E9402F6E6D8B1AF6BD8F1A49D5025BB9CE33708
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:d1:9a:b6:fb:ff:b2:34:b6:33:76:b8:57:1d:
                    5e:d7:de:d3:99:3e:a9:a5:0c:1a:96:f5:e9:60:20:
                    27:53:44:e8:b8:31:0d:da:02:b1:fb:f2:ad:af:8b:
                    6a:31:4e:9f:39:cd:67:b0:fa:1a:6a:81:bb:53:a0:
                    43:f3:23:3e:99:5c:b0:c0:42:d6:d5:f8:09:ab:21:
                    17:c1:26:57:15:50:59:e9:d2:6e:1a:f1:11:52:4b:
                    44:39:d9:64:14:a1:f7:2f:1f:80:69:36:53:16:7f:
                    58:9b:bc:0f:d3:24:7a:46:87:e1:94:64:c3:a9:11:
                    8d:74:49:7a:5b:bc:03:1b:a1:42:d3:0f:97:d1:a8:
                    88:0e:7c:82:0d:42:4e:8f:cd:b2:87:51:9a:c8:33:
                    fc:be:1d:2b:74:db:36:35:88:3c:ab:7a:7f:0c:32:
                    f2:21:66:55:75:2d:6a:40:60:d4:4d:c2:bf:6c:3a:
                    03:e1:f4:04:d4:88:17:0e:bf:6d:4b:2d:a9:62:52:
                    ea:8e:ab:40:d4:88:3a:5b:6f:b3:b8:15:70:99:f1:
                    cb:33:d4:b9:82:59:b5:80:95:5d:de:c2:28:1d:cd:
                    21:1c:ff:28:88:2f:2e:aa:8d:f9:0a:df:50:e9:d4:
                    df:36:70:71:8f:c2:63:09:7c:68:10:75:72:62:89:
                    d2:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:94:02:F6:E6:D8:B1:AF:6B:D8:F1:A4:9D:50:25:BB:9C:E3:37:08
            X509v3 Authority Key Identifier:
                keyid:77:AC:F1:8F:53:17:E7:A2:02:E5:83:C3:C5:9C:22:32:34:FA:2D:8B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/5d823bb3-5a01-4658-a783-f8e89fadcf45/0/77ACF18F5317E7A202E583C3C59C223234FA2D8B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/77ACF18F5317E7A202E583C3C59C223234FA2D8B.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/5d823bb3-5a01-4658-a783-f8e89fadcf45/0/77ACF18F5317E7A202E583C3C59C223234FA2D8B.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ac:40:36:17:a0:6d:bd:d9:03:2b:2d:0a:f2:3f:5b:a0:23:f6:
         df:15:9b:ff:db:e9:80:41:81:d4:02:4d:90:40:4e:49:2e:e6:
         85:8d:62:3d:e2:70:0a:06:a6:c9:68:78:a2:c2:3e:c2:e8:36:
         47:a8:17:ce:89:73:73:44:b6:63:c4:43:64:b4:2d:7c:e1:ee:
         54:10:3f:cb:77:b5:c5:20:ef:bf:df:4e:a8:cc:3d:2f:b9:c7:
         70:df:af:fd:13:c3:00:7d:76:36:d0:38:55:be:b7:ae:8c:79:
         d4:8b:3c:0c:03:b5:1f:34:f3:dc:c0:95:87:c4:21:11:57:13:
         46:7c:7d:c0:fb:c2:0c:8d:c3:47:bc:b0:4a:73:3b:58:e1:40:
         91:63:84:21:62:fb:82:06:73:6a:28:90:a3:4c:03:26:7a:7f:
         64:60:ad:48:4f:e0:fe:cb:3d:84:c2:cb:e5:97:f4:28:1a:10:
         32:48:8b:0d:9a:d8:a5:42:6b:90:8e:2e:3c:9c:d1:88:54:a7:
         f5:a6:90:72:b9:b2:78:a5:ea:d7:3a:f0:e1:fe:cb:ad:f2:f2:
         b1:d4:73:96:2a:c3:80:c2:0f:e2:48:c8:2b:26:aa:5d:a7:c8:
         65:bc:0b:0d:ce:5e:28:4d:a0:f6:1e:17:f0:b6:e0:68:e6:22:
         0d:76:c8:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 01:28:06 2025 by rpki-client