This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/6ff8f4ab-1ab8-4894-b758-d9bce3803e4c/0/DD77382BD9E8634AEF9E93D763B0149D915502F5.mft File: DD77382BD9E8634AEF9E93D763B0149D915502F5.mft (raw, json) Hash identifier: 1w93EYSP3zC/bob1ak85/WPPyzpgGixQA9eMOLDHJmI= Subject key identifier: 43:F8:92:6A:FC:C8:7C:33:42:1B:CC:5F:90:C6:31:21:D7:D1:F1:64 Authority key identifier: DD:77:38:2B:D9:E8:63:4A:EF:9E:93:D7:63:B0:14:9D:91:55:02:F5 Certificate issuer: /CN=DD77382BD9E8634AEF9E93D763B0149D915502F5 Certificate serial: 1C7EAD473A1AD0AD41DFA8D9ED154270862DA596 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DD77382BD9E8634AEF9E93D763B0149D915502F5.cer Subject info access: rsync://repo-rpki.idnic.net/repo/6ff8f4ab-1ab8-4894-b758-d9bce3803e4c/0/DD77382BD9E8634AEF9E93D763B0149D915502F5.mft Manifest number: 0406 Signing time: Fri 05 Dec 2025 06:01:24 +0000 Manifest this update: Fri 05 Dec 2025 05:56:24 +0000 Manifest next update: Mon 08 Dec 2025 08:44:24 +0000 Files and hashes: 1: 3130332e3135352e3136382e302f32342d3234203d3e20313431303635.roa (hash: K3vShF0D9bPRn6sv5SW8yGmWNIRGvlLBsD0vPKS9a4E=) 2: 3130332e3135352e3136392e302f32342d3234203d3e20313431303635.roa (hash: c3TzylCEjs5xy8RF441nXx1uAnBKNVsy3aYQ1eehMFs=) 3: DD77382BD9E8634AEF9E93D763B0149D915502F5.crl (hash: qZcE7+1cX1a35a0PlGaRi6u5ooirLhCRxiN/LU62WrE=) 4: 3130332e3135352e3136382e302f32332d3233203d3e20313431303635.roa (hash: Y/t7s83TrJfcnDGlxRGeWKMHBRcUwBBITgOCbUYiXEc=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/6ff8f4ab-1ab8-4894-b758-d9bce3803e4c/0/DD77382BD9E8634AEF9E93D763B0149D915502F5.crl rsync://repo-rpki.idnic.net/repo/6ff8f4ab-1ab8-4894-b758-d9bce3803e4c/0/DD77382BD9E8634AEF9E93D763B0149D915502F5.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DD77382BD9E8634AEF9E93D763B0149D915502F5.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 08 Dec 2025 08:44:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1c:7e:ad:47:3a:1a:d0:ad:41:df:a8:d9:ed:15:42:70:86:2d:a5:96 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DD77382BD9E8634AEF9E93D763B0149D915502F5 Validity Not Before: Dec 5 05:56:24 2025 GMT Not After : Dec 8 08:44:24 2025 GMT Subject: CN=43F8926AFCC87C33421BCC5F90C63121D7D1F164 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:3e:7d:03:fe:97:27:c3:4c:f5:cd:03:c0:c6: f4:69:de:75:67:39:1c:00:a0:12:89:b4:e2:a9:aa: fe:34:78:18:5e:28:fb:cb:68:84:e3:a7:dc:b2:5c: d6:a4:73:61:e3:ea:88:ae:70:4e:ca:7d:f6:b6:5c: 77:78:3f:0c:a3:ce:98:22:37:88:51:5a:47:52:c2: 41:a1:08:3f:90:84:2d:e9:26:fd:60:e2:b5:97:9f: 22:79:f5:77:34:f6:90:67:46:31:59:27:bc:27:4c: ca:be:d3:c1:ae:6b:ec:b5:71:32:e6:39:9c:63:e3: eb:2a:f7:1d:10:fc:b1:02:9d:74:0f:d5:9f:8c:3f: 86:35:02:76:e5:31:33:d2:38:a9:d9:11:5a:42:2a: 08:5a:b2:68:57:2b:63:69:14:27:46:91:03:64:1d: 0a:16:8f:36:7c:1d:8d:59:3b:2c:48:ba:b9:73:30: dc:6a:0d:b1:f7:6c:09:7c:b3:c8:9a:7f:37:30:f8: 3a:e9:b4:f9:de:19:4b:73:52:92:7a:9e:0a:c9:b7: 21:10:c8:09:5f:7b:34:d2:e8:13:26:47:ff:b5:08: 81:c5:48:3e:63:06:23:36:58:08:90:ee:a1:99:44: 71:ac:e1:87:4b:40:21:de:db:52:43:59:48:c1:81: 73:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:F8:92:6A:FC:C8:7C:33:42:1B:CC:5F:90:C6:31:21:D7:D1:F1:64 X509v3 Authority Key Identifier: keyid:DD:77:38:2B:D9:E8:63:4A:EF:9E:93:D7:63:B0:14:9D:91:55:02:F5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/6ff8f4ab-1ab8-4894-b758-d9bce3803e4c/0/DD77382BD9E8634AEF9E93D763B0149D915502F5.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DD77382BD9E8634AEF9E93D763B0149D915502F5.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/6ff8f4ab-1ab8-4894-b758-d9bce3803e4c/0/DD77382BD9E8634AEF9E93D763B0149D915502F5.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 11:ec:d6:5f:fa:ae:9a:4b:98:73:d8:35:da:0a:99:2e:33:dc: 22:51:40:c4:41:4f:d0:f1:8c:cb:6a:96:f2:0a:9b:f6:ec:2d: 09:e0:cf:5b:ca:c6:c3:2b:ea:2d:a3:69:cf:7f:3c:72:8e:ba: 63:4b:79:30:40:90:7d:3f:44:25:72:0d:7e:88:fe:ea:ce:0a: ad:4b:7b:fc:b0:f2:25:a7:dd:60:f6:70:46:88:86:b4:bb:1d: c8:d5:d4:d7:5d:ac:de:38:f7:6c:f3:d0:39:9f:38:5c:13:87: 20:d0:c3:9a:03:87:23:76:f8:29:49:b2:ae:3a:03:1f:55:ef: 49:79:1f:85:5c:59:37:8b:29:d0:f6:72:c3:89:f6:22:00:4e: 45:b6:ea:d5:f8:3c:14:5e:de:36:55:12:b0:65:f2:e9:c4:1b: 2d:a4:8a:c9:11:45:7f:68:dd:d6:2d:a2:00:a8:d2:58:ce:a4: 78:61:9d:6a:67:ab:44:12:2d:85:c1:6c:9a:ae:cf:bd:be:2b: 6b:c8:9a:be:c7:48:87:2d:9c:4a:85:a5:72:2e:4f:1c:7c:e8: 84:0a:39:50:6b:ba:29:19:f4:65:61:42:2c:ef:ad:06:ff:97: 6f:21:4a:bb:16:5b:d8:65:df:4b:b7:00:aa:82:ad:73:c2:eb: e7:65:c2:76 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUHH6tRzoa0K1B36jZ7RVCcIYtpZYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoREQ3NzM4MkJEOUU4NjM0QUVGOUU5M0Q3NjNCMDE0OUQ5 MTU1MDJGNTAeFw0yNTEyMDUwNTU2MjRaFw0yNTEyMDgwODQ0MjRaMDMxMTAvBgNV BAMTKDQzRjg5MjZBRkNDODdDMzM0MjFCQ0M1RjkwQzYzMTIxRDdEMUYxNjQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCnPn0D/pcnw0z1zQPAxvRp3nVn ORwAoBKJtOKpqv40eBheKPvLaITjp9yyXNakc2Hj6oiucE7Kffa2XHd4Pwyjzpgi N4hRWkdSwkGhCD+QhC3pJv1g4rWXnyJ59Xc09pBnRjFZJ7wnTMq+08Gua+y1cTLm OZxj4+sq9x0Q/LECnXQP1Z+MP4Y1AnblMTPSOKnZEVpCKghasmhXK2NpFCdGkQNk HQoWjzZ8HY1ZOyxIurlzMNxqDbH3bAl8s8iafzcw+DrptPneGUtzUpJ6ngrJtyEQ yAlfezTS6BMmR/+1CIHFSD5jBiM2WAiQ7qGZRHGs4YdLQCHe21JDWUjBgXMzAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUQ/iSavzIfDNCG8xfkMYxIdfR8WQwHwYDVR0j BBgwFoAU3Xc4K9noY0rvnpPXY7AUnZFVAvUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 ZmY4ZjRhYi0xYWI4LTQ4OTQtYjc1OC1kOWJjZTM4MDNlNGMvMC9ERDc3MzgyQkQ5 RTg2MzRBRUY5RTkzRDc2M0IwMTQ5RDkxNTUwMkY1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvREQ3NzM4MkJEOUU4NjM0QUVGOUU5M0Q3NjNCMDE0OUQ5MTU1 MDJGNS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNmZmOGY0YWItMWFiOC00ODk0LWI3 NTgtZDliY2UzODAzZTRjLzAvREQ3NzM4MkJEOUU4NjM0QUVGOUU5M0Q3NjNCMDE0 OUQ5MTU1MDJGNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABHs1l/6rppLmHPYNdoKmS4z3CJRQMRBT9Dx jMtqlvIKm/bsLQngz1vKxsMr6i2jac9/PHKOumNLeTBAkH0/RCVyDX6I/urOCq1L e/yw8iWn3WD2cEaIhrS7HcjV1NddrN4492zz0DmfOFwThyDQw5oDhyN2+ClJsq46 Ax9V70l5H4VcWTeLKdD2csOJ9iIATkW26tX4PBRe3jZVErBl8unEGy2kiskRRX9o 3dYtogCo0ljOpHhhnWpnq0QSLYXBbJquz72+K2vImr7HSIctnEqFpXIuTxx86IQK OVBruikZ9GVhQizvrQb/l28hSrsWW9hl30u3AKqCrXPC6+dlwnY= -----END CERTIFICATE-----Generated at Sun Dec 7 02:09:02 2025 by rpki-client