This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/af6d185e-d4f4-4820-b4b6-798c307ad7e5/0/B877CD1C542C3DE2CBB8EF151F179B857E9376E4.mft File: B877CD1C542C3DE2CBB8EF151F179B857E9376E4.mft (raw, json) Hash identifier: Gvtn7KCoAttGG8AgbXWUQ4jze+SsSv0sQwcbLb5Q0bc= Subject key identifier: 9C:06:A1:1B:25:96:3B:B7:E3:E8:6C:8C:B8:16:44:15:7C:2F:D6:0F Authority key identifier: B8:77:CD:1C:54:2C:3D:E2:CB:B8:EF:15:1F:17:9B:85:7E:93:76:E4 Certificate issuer: /CN=B877CD1C542C3DE2CBB8EF151F179B857E9376E4 Certificate serial: 37A60E9B83E82347EA10BD9C9CC315D76BAE2BCA Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B877CD1C542C3DE2CBB8EF151F179B857E9376E4.cer Subject info access: rsync://repo-rpki.idnic.net/repo/af6d185e-d4f4-4820-b4b6-798c307ad7e5/0/B877CD1C542C3DE2CBB8EF151F179B857E9376E4.mft Manifest number: 01B1 Signing time: Wed 17 Dec 2025 17:32:22 +0000 Manifest this update: Wed 17 Dec 2025 17:27:22 +0000 Manifest next update: Sat 20 Dec 2025 19:53:22 +0000 Files and hashes: 1: B877CD1C542C3DE2CBB8EF151F179B857E9376E4.crl (hash: V/HCrJCAatKT3pwHjfPTfngVoJzuz0Ox/0AK5nE3Yrw=) 2: 3130332e3133302e3139382e302f32332d3234203d3e20313338303737.roa (hash: GBdm9qQ0p29KR8e28QB9UjrYbB7/EDKaMJEitqFkR/M=) 3: 3136302e32302e3232322e302f32342d3234203d3e20313338303737.roa (hash: qNVUMuIrsRym1al7QBcjtB+KpEbJtW/3ayQKIjCttbA=) 4: 3131372e3130332e3131362e302f32342d3234203d3e20313338303737.roa (hash: XZBWXgwi6/bY0uActUG5TDU+WKOBs9TQUHXitVU+Zwk=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/af6d185e-d4f4-4820-b4b6-798c307ad7e5/0/B877CD1C542C3DE2CBB8EF151F179B857E9376E4.crl rsync://repo-rpki.idnic.net/repo/af6d185e-d4f4-4820-b4b6-798c307ad7e5/0/B877CD1C542C3DE2CBB8EF151F179B857E9376E4.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B877CD1C542C3DE2CBB8EF151F179B857E9376E4.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 20 Dec 2025 19:53:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 37:a6:0e:9b:83:e8:23:47:ea:10:bd:9c:9c:c3:15:d7:6b:ae:2b:ca Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B877CD1C542C3DE2CBB8EF151F179B857E9376E4 Validity Not Before: Dec 17 17:27:22 2025 GMT Not After : Dec 20 19:53:22 2025 GMT Subject: CN=9C06A11B25963BB7E3E86C8CB81644157C2FD60F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:aa:34:e0:da:cd:31:3f:2d:a3:be:0b:c4:f9: 2d:16:59:d9:fd:cd:3a:79:c4:6e:87:92:b1:65:5e: 5d:88:25:55:00:9b:97:a6:6a:3a:d6:78:07:7c:5d: 86:9f:c1:31:6b:b3:03:c7:54:44:e5:d5:ec:16:16: 0c:9f:9a:31:9b:eb:c9:45:39:54:dc:11:c2:c4:da: 53:ea:a0:52:a4:35:49:6a:cd:f1:df:45:31:d7:71: 8e:9b:da:ef:41:89:97:a4:dc:c8:34:fb:7d:1a:93: df:43:08:1a:60:5f:52:80:9e:dd:8a:3c:f9:17:74: 1d:ce:cf:55:ba:21:58:13:33:d2:af:0c:bb:66:a5: 0c:af:48:11:24:10:6a:5c:50:00:50:94:3d:a4:8e: 59:c7:53:11:a2:25:53:76:bb:5e:c2:2a:98:73:7c: f9:8f:96:53:cb:55:cc:3d:0c:0d:c9:e4:e1:3f:49: 7e:19:bd:00:7e:10:07:95:92:b5:a7:f7:17:03:e0: 32:4a:98:d7:8b:48:04:b7:36:82:fc:e0:a6:91:ab: 1b:f2:42:bc:27:58:98:77:6e:f4:31:f6:61:47:78: 1f:3b:68:80:95:f4:02:ae:09:a8:42:bf:da:ec:2e: 67:81:2d:4d:f0:49:c8:5b:df:83:71:fd:28:4a:05: 94:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:06:A1:1B:25:96:3B:B7:E3:E8:6C:8C:B8:16:44:15:7C:2F:D6:0F X509v3 Authority Key Identifier: keyid:B8:77:CD:1C:54:2C:3D:E2:CB:B8:EF:15:1F:17:9B:85:7E:93:76:E4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/af6d185e-d4f4-4820-b4b6-798c307ad7e5/0/B877CD1C542C3DE2CBB8EF151F179B857E9376E4.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B877CD1C542C3DE2CBB8EF151F179B857E9376E4.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/af6d185e-d4f4-4820-b4b6-798c307ad7e5/0/B877CD1C542C3DE2CBB8EF151F179B857E9376E4.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 73:ce:0c:42:b9:36:13:5e:fa:7d:3d:6e:34:4a:9e:2d:9b:e3: ac:5b:e1:55:3e:1b:6e:86:c4:45:7c:a2:90:9e:46:c7:a0:13: 83:ce:18:bb:b4:d5:1a:32:84:f2:69:04:f0:10:5b:24:4a:d5: fd:6b:74:6b:dd:8e:18:07:9b:d5:1b:14:86:81:99:67:c9:d6: 81:95:d7:1f:61:b1:69:b0:a5:5f:9b:d1:5a:5c:04:26:94:70: f1:e1:03:ea:d0:89:56:21:6e:82:4c:c9:a1:d8:29:76:2e:8f: 67:c2:22:ca:bb:44:5c:c5:d4:16:13:e4:89:07:fd:e9:fc:a3: 30:0b:89:ee:ea:a7:db:97:6a:8f:f9:63:f6:fe:93:50:ce:a1: 88:18:3a:8a:62:81:53:9e:9e:5e:1d:7e:87:10:14:11:c1:f6: 88:29:ea:15:80:4d:5e:62:18:6b:f7:c9:fd:61:51:e0:d1:3d: c1:ee:52:a1:d9:15:4e:49:81:23:f2:8c:43:b0:41:ae:d7:1d: 19:83:16:53:67:70:f8:69:d4:55:d0:28:91:42:99:02:48:88: 4b:31:ae:5f:7b:a7:7e:b9:84:d2:48:e9:31:be:4b:e2:86:95: d8:44:b1:e1:23:b7:54:16:56:c0:81:3a:d3:b0:c5:11:6d:34: b4:ab:cd:ad -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUN6YOm4PoI0fqEL2cnMMV12uuK8owDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjg3N0NEMUM1NDJDM0RFMkNCQjhFRjE1MUYxNzlCODU3 RTkzNzZFNDAeFw0yNTEyMTcxNzI3MjJaFw0yNTEyMjAxOTUzMjJaMDMxMTAvBgNV BAMTKDlDMDZBMTFCMjU5NjNCQjdFM0U4NkM4Q0I4MTY0NDE1N0MyRkQ2MEYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCoqjTg2s0xPy2jvgvE+S0WWdn9 zTp5xG6HkrFlXl2IJVUAm5emajrWeAd8XYafwTFrswPHVETl1ewWFgyfmjGb68lF OVTcEcLE2lPqoFKkNUlqzfHfRTHXcY6b2u9BiZek3Mg0+30ak99DCBpgX1KAnt2K PPkXdB3Oz1W6IVgTM9KvDLtmpQyvSBEkEGpcUABQlD2kjlnHUxGiJVN2u17CKphz fPmPllPLVcw9DA3J5OE/SX4ZvQB+EAeVkrWn9xcD4DJKmNeLSAS3NoL84KaRqxvy QrwnWJh3bvQx9mFHeB87aICV9AKuCahCv9rsLmeBLU3wSchb34Nx/ShKBZTNAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUnAahGyWWO7fj6GyMuBZEFXwv1g8wHwYDVR0j BBgwFoAUuHfNHFQsPeLLuO8VHxebhX6TduQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h ZjZkMTg1ZS1kNGY0LTQ4MjAtYjRiNi03OThjMzA3YWQ3ZTUvMC9CODc3Q0QxQzU0 MkMzREUyQ0JCOEVGMTUxRjE3OUI4NTdFOTM3NkU0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQjg3N0NEMUM1NDJDM0RFMkNCQjhFRjE1MUYxNzlCODU3RTkz NzZFNC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYWY2ZDE4NWUtZDRmNC00ODIwLWI0 YjYtNzk4YzMwN2FkN2U1LzAvQjg3N0NEMUM1NDJDM0RFMkNCQjhFRjE1MUYxNzlC ODU3RTkzNzZFNC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHPODEK5NhNe+n09bjRKni2b46xb4VU+G26G xEV8opCeRsegE4POGLu01RoyhPJpBPAQWyRK1f1rdGvdjhgHm9UbFIaBmWfJ1oGV 1x9hsWmwpV+b0VpcBCaUcPHhA+rQiVYhboJMyaHYKXYuj2fCIsq7RFzF1BYT5IkH /en8ozALie7qp9uXao/5Y/b+k1DOoYgYOopigVOenl4dfocQFBHB9ogp6hWATV5i GGv3yf1hUeDRPcHuUqHZFU5JgSPyjEOwQa7XHRmDFlNncPhp1FXQKJFCmQJIiEsx rl97p365hNJI6TG+S+KGldhEseEjt1QWVsCBOtOwxRFtNLSrza0= -----END CERTIFICATE-----Generated at Thu Dec 18 14:22:00 2025 by rpki-client