This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/7a70d44e-0f70-45a3-af04-81f429db3a5d/0/7767CF49D7661AFAB45870341D88D2F3D9A86CE4.mft File: 7767CF49D7661AFAB45870341D88D2F3D9A86CE4.mft (raw, json) Hash identifier: Y9iy7w14BpMQh2Odmokg+iuBBTT75dUDqhlKuCM+BXo= Subject key identifier: AE:20:43:43:5F:24:D7:0F:A6:A4:B8:CC:B3:43:00:9C:54:73:DE:92 Authority key identifier: 77:67:CF:49:D7:66:1A:FA:B4:58:70:34:1D:88:D2:F3:D9:A8:6C:E4 Certificate issuer: /CN=7767CF49D7661AFAB45870341D88D2F3D9A86CE4 Certificate serial: 0EF11312C0902503A098EC57C8C4E5DFA8778766 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7767CF49D7661AFAB45870341D88D2F3D9A86CE4.cer Subject info access: rsync://repo-rpki.idnic.net/repo/7a70d44e-0f70-45a3-af04-81f429db3a5d/0/7767CF49D7661AFAB45870341D88D2F3D9A86CE4.mft Manifest number: 0256 Signing time: Sat 06 Dec 2025 10:31:47 +0000 Manifest this update: Sat 06 Dec 2025 10:26:47 +0000 Manifest next update: Tue 09 Dec 2025 22:22:47 +0000 Files and hashes: 1: 3130332e3137342e3137352e302f32342d3234203d3e20313437313031.roa (hash: hiVWfFJS+ICMc15b4VDK2HR8eWbWj/hyT+N05K9QMHE=) 2: 3130332e3137342e3137342e302f32332d3233203d3e20313437313031.roa (hash: qjco1QI2sNnouAlC+BzAGiX63kc+i+LJElEHwxqlyT4=) 3: 3130332e3137342e3137342e302f32342d3234203d3e20313437313031.roa (hash: mg4/qvSGbk0zDsf0Rx7OQC6CJE6sN8kDzPsI7vMCT4w=) 4: 7767CF49D7661AFAB45870341D88D2F3D9A86CE4.crl (hash: KN2ngxwqNrKCH6JFtLiqsNI9v2x0x4/QeHVz+iSOxTw=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/7a70d44e-0f70-45a3-af04-81f429db3a5d/0/7767CF49D7661AFAB45870341D88D2F3D9A86CE4.crl rsync://repo-rpki.idnic.net/repo/7a70d44e-0f70-45a3-af04-81f429db3a5d/0/7767CF49D7661AFAB45870341D88D2F3D9A86CE4.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7767CF49D7661AFAB45870341D88D2F3D9A86CE4.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 09 Dec 2025 15:57:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0e:f1:13:12:c0:90:25:03:a0:98:ec:57:c8:c4:e5:df:a8:77:87:66 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7767CF49D7661AFAB45870341D88D2F3D9A86CE4 Validity Not Before: Dec 6 10:26:47 2025 GMT Not After : Dec 9 22:22:47 2025 GMT Subject: CN=AE2043435F24D70FA6A4B8CCB343009C5473DE92 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f2:2e:fb:11:0e:a0:0d:8e:e2:33:77:3c:e7:83: 52:28:bd:f3:cd:61:cb:c4:58:84:b3:77:8c:c4:ce: 31:01:37:41:8f:16:b4:a6:d3:83:90:cf:6b:25:55: f8:3d:05:68:e7:a9:53:6d:42:2d:8d:f7:de:4f:0f: e9:ff:40:98:8a:f7:2a:a3:91:5f:5b:56:50:b7:d5: ca:e1:e6:ed:65:83:d5:74:43:ea:c7:12:c0:5a:0a: 1f:ba:a2:8b:a9:ce:0a:55:d2:b4:7e:a5:86:50:12: 86:2c:a0:66:d3:06:1e:9c:17:d8:be:27:db:59:b6: 62:ce:25:d2:c6:fe:27:56:7c:88:21:90:35:d7:4c: 71:98:c0:e7:d0:93:b3:b2:f9:36:80:ae:15:6f:51: 2c:65:9f:b1:c9:45:45:a5:32:63:e4:ea:05:91:e9: 7a:2b:f5:47:9b:c7:a0:b6:8f:55:80:0d:a6:02:42: 9f:2b:22:b2:80:3f:8f:fe:8b:8f:81:a0:e5:81:17: 03:b6:e1:77:e6:3a:23:51:b5:8a:d2:58:69:18:08: ca:93:ed:99:bf:42:21:a7:35:87:89:da:68:42:ae: a3:7d:d7:41:1a:52:1d:3d:e4:0f:f1:c1:ba:ad:db: ed:a9:52:d5:b2:cd:98:4f:84:a9:d3:4f:64:42:da: 31:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AE:20:43:43:5F:24:D7:0F:A6:A4:B8:CC:B3:43:00:9C:54:73:DE:92 X509v3 Authority Key Identifier: keyid:77:67:CF:49:D7:66:1A:FA:B4:58:70:34:1D:88:D2:F3:D9:A8:6C:E4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/7a70d44e-0f70-45a3-af04-81f429db3a5d/0/7767CF49D7661AFAB45870341D88D2F3D9A86CE4.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7767CF49D7661AFAB45870341D88D2F3D9A86CE4.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7a70d44e-0f70-45a3-af04-81f429db3a5d/0/7767CF49D7661AFAB45870341D88D2F3D9A86CE4.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 83:1e:2d:9b:2d:d7:f6:12:d8:98:2b:db:3f:8a:ff:66:e3:0c: 8f:e0:d2:fb:72:3a:42:9a:d3:ec:2b:81:42:18:5d:55:d8:a9: 92:a5:7e:58:de:11:4e:ce:76:95:9a:ef:73:4b:c7:aa:8e:a5: 22:89:be:4b:18:81:38:c0:e7:7e:04:04:75:00:95:52:17:9f: 9e:be:cb:5c:b3:0f:9b:ac:8b:5d:6f:b9:64:60:bc:b8:83:ac: 23:58:d7:a5:ae:b0:2b:a5:dd:ff:86:9b:da:a4:ce:47:4c:7d: 6d:d4:cf:01:8f:98:2f:1b:d3:37:b6:4f:09:b2:46:32:e3:1c: d1:6e:80:60:04:bd:1e:2f:31:36:b6:9e:f5:99:de:cb:5b:97: 22:3e:f0:c4:44:2f:dc:2f:77:c5:c8:5b:11:a3:b0:6a:dd:46: 7d:41:0d:cc:96:7b:96:53:54:46:98:b3:88:d3:a8:f3:3c:ed: c2:93:3d:93:ee:20:59:84:ef:2d:70:eb:90:58:c8:49:cf:f2: 3d:0d:d3:05:85:9d:d1:fc:14:ec:aa:7e:60:23:62:8f:6e:89: b0:96:78:6d:38:c7:3d:1e:6e:44:22:31:19:d7:a5:1d:9c:33: f1:ce:be:74:3d:8f:7e:51:29:f9:3f:03:17:16:56:82:49:50: 94:3d:ed:94 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUDvETEsCQJQOgmOxXyMTl36h3h2YwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzc2N0NGNDlENzY2MUFGQUI0NTg3MDM0MUQ4OEQyRjNE OUE4NkNFNDAeFw0yNTEyMDYxMDI2NDdaFw0yNTEyMDkyMjIyNDdaMDMxMTAvBgNV BAMTKEFFMjA0MzQzNUYyNEQ3MEZBNkE0QjhDQ0IzNDMwMDlDNTQ3M0RFOTIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDyLvsRDqANjuIzdzzng1IovfPN YcvEWISzd4zEzjEBN0GPFrSm04OQz2slVfg9BWjnqVNtQi2N995PD+n/QJiK9yqj kV9bVlC31crh5u1lg9V0Q+rHEsBaCh+6ooupzgpV0rR+pYZQEoYsoGbTBh6cF9i+ J9tZtmLOJdLG/idWfIghkDXXTHGYwOfQk7Oy+TaArhVvUSxln7HJRUWlMmPk6gWR 6Xor9Uebx6C2j1WADaYCQp8rIrKAP4/+i4+BoOWBFwO24XfmOiNRtYrSWGkYCMqT 7Zm/QiGnNYeJ2mhCrqN910EaUh095A/xwbqt2+2pUtWyzZhPhKnTT2RC2jEfAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUriBDQ18k1w+mpLjMs0MAnFRz3pIwHwYDVR0j BBgwFoAUd2fPSddmGvq0WHA0HYjS89mobOQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 YTcwZDQ0ZS0wZjcwLTQ1YTMtYWYwNC04MWY0MjlkYjNhNWQvMC83NzY3Q0Y0OUQ3 NjYxQUZBQjQ1ODcwMzQxRDg4RDJGM0Q5QTg2Q0U0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNzc2N0NGNDlENzY2MUFGQUI0NTg3MDM0MUQ4OEQyRjNEOUE4 NkNFNC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vN2E3MGQ0NGUtMGY3MC00NWEzLWFm MDQtODFmNDI5ZGIzYTVkLzAvNzc2N0NGNDlENzY2MUFGQUI0NTg3MDM0MUQ4OEQy RjNEOUE4NkNFNC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIMeLZst1/YS2Jgr2z+K/2bjDI/g0vtyOkKa 0+wrgUIYXVXYqZKlfljeEU7OdpWa73NLx6qOpSKJvksYgTjA534EBHUAlVIXn56+ y1yzD5usi11vuWRgvLiDrCNY16WusCul3f+Gm9qkzkdMfW3UzwGPmC8b0ze2Twmy RjLjHNFugGAEvR4vMTa2nvWZ3stblyI+8MREL9wvd8XIWxGjsGrdRn1BDcyWe5ZT VEaYs4jTqPM87cKTPZPuIFmE7y1w65BYyEnP8j0N0wWFndH8FOyqfmAjYo9uibCW eG04xz0ebkQiMRnXpR2cM/HOvnQ9j35RKfk/AxcWVoJJUJQ97ZQ= -----END CERTIFICATE-----Generated at Sat Dec 6 22:52:28 2025 by rpki-client