This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/6aad6a3f-6ca0-4669-98f7-6f34837faa62/0/771D0AB9C445B28C887FD7BA18DEC515D8BA3862.mft File: 771D0AB9C445B28C887FD7BA18DEC515D8BA3862.mft (raw, json) Hash identifier: OTnbg2/2bo5BxNZiz/Ap0ir13b81Xs3lLELk4O9EFDA= Subject key identifier: 3A:A6:B6:18:98:B4:76:7F:5E:D3:A7:60:D4:4C:9E:F4:66:54:66:B4 Authority key identifier: 77:1D:0A:B9:C4:45:B2:8C:88:7F:D7:BA:18:DE:C5:15:D8:BA:38:62 Certificate issuer: /CN=771D0AB9C445B28C887FD7BA18DEC515D8BA3862 Certificate serial: 35BE3190FB4E875B0855969A101E2C33F00B5D78 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/771D0AB9C445B28C887FD7BA18DEC515D8BA3862.cer Subject info access: rsync://repo-rpki.idnic.net/repo/6aad6a3f-6ca0-4669-98f7-6f34837faa62/0/771D0AB9C445B28C887FD7BA18DEC515D8BA3862.mft Manifest number: 0215 Signing time: Sat 06 Dec 2025 16:20:52 +0000 Manifest this update: Sat 06 Dec 2025 16:15:52 +0000 Manifest next update: Tue 09 Dec 2025 22:37:52 +0000 Files and hashes: 1: 3130332e3232302e32332e302f32342d3234203d3e20313431363037.roa (hash: UB8JtipfosdHlml62Xhk5sLTDI0owepm37Luu+44jy4=) 2: 771D0AB9C445B28C887FD7BA18DEC515D8BA3862.crl (hash: 0thh2r4N//QmL5W/IhhEw2U1mZ6Hwl6lUvOVx5XS230=) 3: 3130332e3232302e32322e302f32342d3234203d3e20313431363037.roa (hash: 4o94mrc4fRlBDhHzDJcRb+ENMoJpRlPOPsOhrRbyRi4=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/6aad6a3f-6ca0-4669-98f7-6f34837faa62/0/771D0AB9C445B28C887FD7BA18DEC515D8BA3862.crl rsync://repo-rpki.idnic.net/repo/6aad6a3f-6ca0-4669-98f7-6f34837faa62/0/771D0AB9C445B28C887FD7BA18DEC515D8BA3862.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/771D0AB9C445B28C887FD7BA18DEC515D8BA3862.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 09 Dec 2025 15:57:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 35:be:31:90:fb:4e:87:5b:08:55:96:9a:10:1e:2c:33:f0:0b:5d:78 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=771D0AB9C445B28C887FD7BA18DEC515D8BA3862 Validity Not Before: Dec 6 16:15:52 2025 GMT Not After : Dec 9 22:37:52 2025 GMT Subject: CN=3AA6B61898B4767F5ED3A760D44C9EF4665466B4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:c2:c0:fb:41:67:c4:75:26:3e:6c:07:e5:ae: e5:7b:70:81:d3:46:a8:f4:89:dc:55:61:dd:bd:b0: 87:3c:24:f1:ad:8e:31:ef:b8:f4:3f:fc:bd:e9:17: f8:47:20:d6:37:44:fd:7b:1a:35:78:f5:74:4d:fc: 14:f3:21:3a:1f:7e:79:db:b0:bb:60:bd:9b:c1:1d: de:c9:e9:c7:0f:44:d4:04:cb:d3:0c:6c:34:b0:2c: 4f:fa:e2:5c:b7:14:1c:f8:47:a5:98:5b:48:86:22: aa:03:a4:5d:ea:e9:40:de:26:a8:18:50:1f:0b:ef: 99:55:75:65:31:07:05:85:1e:c5:9b:bf:8f:9a:28: 01:28:82:35:fc:fb:f5:91:5f:a6:2e:43:79:c8:92: fc:61:27:74:9e:24:a6:e5:6e:7e:2a:1f:b2:ee:ad: e5:51:25:9f:41:0c:0f:09:4b:eb:52:60:c1:c1:44: 50:d6:33:47:ad:8f:27:6f:de:8d:24:f6:67:f6:0b: d7:d4:bb:97:a8:91:f8:6e:d9:15:a1:e7:60:bd:50: 7f:55:04:23:20:d4:db:fa:0d:6c:9d:8e:1b:8d:eb: 3b:e5:34:2b:e7:68:35:b4:47:7d:e3:00:f4:33:4a: 0f:2f:11:3e:f6:08:eb:34:95:a0:d6:b2:a9:a2:d9: 81:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:A6:B6:18:98:B4:76:7F:5E:D3:A7:60:D4:4C:9E:F4:66:54:66:B4 X509v3 Authority Key Identifier: keyid:77:1D:0A:B9:C4:45:B2:8C:88:7F:D7:BA:18:DE:C5:15:D8:BA:38:62 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/6aad6a3f-6ca0-4669-98f7-6f34837faa62/0/771D0AB9C445B28C887FD7BA18DEC515D8BA3862.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/771D0AB9C445B28C887FD7BA18DEC515D8BA3862.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/6aad6a3f-6ca0-4669-98f7-6f34837faa62/0/771D0AB9C445B28C887FD7BA18DEC515D8BA3862.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 76:bb:ab:55:41:9e:12:33:2e:c8:73:8a:e7:2a:dd:4d:08:54: aa:02:4e:60:dc:f2:76:db:9f:e6:69:17:7c:f5:83:af:b0:70: 07:04:4f:85:db:b9:26:77:ac:e9:eb:1e:e1:af:ef:db:67:14: a8:a9:2a:69:fa:bf:23:fa:3a:0c:2a:53:a6:34:f0:00:46:15: a4:80:22:81:1c:02:73:80:7c:7d:73:2d:d0:0d:ce:4e:33:53: e7:d1:b4:75:ae:41:6f:25:a2:b7:50:ad:04:43:e1:72:b0:ad: 8a:29:a0:99:b8:eb:a2:11:6b:1f:29:b0:98:70:9f:c2:2a:20: ab:7a:4e:85:65:52:e3:c2:9e:87:04:03:4a:02:cc:4d:99:ed: 19:a5:d4:a4:97:89:93:9d:1f:33:42:02:c1:b3:fa:f1:c4:89: 5f:c1:f3:95:39:87:74:b1:09:09:69:a6:fe:d5:d1:0c:cd:9d: d9:e4:b2:6e:b5:a9:78:ae:d9:f0:da:c8:6c:50:d7:c1:1b:31: dd:28:30:60:09:db:90:e8:eb:ea:c9:50:27:45:db:bc:0e:70: 14:8a:20:21:f9:d7:25:8f:db:94:a1:d9:a1:f1:15:8a:0c:5f: 04:37:9f:73:9b:f1:f0:56:3b:cc:2c:7d:88:f7:ef:55:3a:40: 37:90:16:b4 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUNb4xkPtOh1sIVZaaEB4sM/ALXXgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzcxRDBBQjlDNDQ1QjI4Qzg4N0ZEN0JBMThERUM1MTVE OEJBMzg2MjAeFw0yNTEyMDYxNjE1NTJaFw0yNTEyMDkyMjM3NTJaMDMxMTAvBgNV BAMTKDNBQTZCNjE4OThCNDc2N0Y1RUQzQTc2MEQ0NEM5RUY0NjY1NDY2QjQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDMwsD7QWfEdSY+bAflruV7cIHT Rqj0idxVYd29sIc8JPGtjjHvuPQ//L3pF/hHINY3RP17GjV49XRN/BTzIToffnnb sLtgvZvBHd7J6ccPRNQEy9MMbDSwLE/64ly3FBz4R6WYW0iGIqoDpF3q6UDeJqgY UB8L75lVdWUxBwWFHsWbv4+aKAEogjX8+/WRX6YuQ3nIkvxhJ3SeJKblbn4qH7Lu reVRJZ9BDA8JS+tSYMHBRFDWM0etjydv3o0k9mf2C9fUu5eokfhu2RWh52C9UH9V BCMg1Nv6DWydjhuN6zvlNCvnaDW0R33jAPQzSg8vET72COs0laDWsqmi2YHxAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUOqa2GJi0dn9e06dg1Eye9GZUZrQwHwYDVR0j BBgwFoAUdx0KucRFsoyIf9e6GN7FFdi6OGIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 YWFkNmEzZi02Y2EwLTQ2NjktOThmNy02ZjM0ODM3ZmFhNjIvMC83NzFEMEFCOUM0 NDVCMjhDODg3RkQ3QkExOERFQzUxNUQ4QkEzODYyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNzcxRDBBQjlDNDQ1QjI4Qzg4N0ZEN0JBMThERUM1MTVEOEJB Mzg2Mi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNmFhZDZhM2YtNmNhMC00NjY5LTk4 ZjctNmYzNDgzN2ZhYTYyLzAvNzcxRDBBQjlDNDQ1QjI4Qzg4N0ZEN0JBMThERUM1 MTVEOEJBMzg2Mi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHa7q1VBnhIzLshziucq3U0IVKoCTmDc8nbb n+ZpF3z1g6+wcAcET4XbuSZ3rOnrHuGv79tnFKipKmn6vyP6OgwqU6Y08ABGFaSA IoEcAnOAfH1zLdANzk4zU+fRtHWuQW8lordQrQRD4XKwrYopoJm466IRax8psJhw n8IqIKt6ToVlUuPCnocEA0oCzE2Z7Rml1KSXiZOdHzNCAsGz+vHEiV/B85U5h3Sx CQlppv7V0QzNndnksm61qXiu2fDayGxQ18EbMd0oMGAJ25Do6+rJUCdF27wOcBSK ICH51yWP25Sh2aHxFYoMXwQ3n3Ob8fBWO8wsfYj371U6QDeQFrQ= -----END CERTIFICATE-----Generated at Sat Dec 6 23:57:56 2025 by rpki-client