This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/c350f078-c535-4f8e-960f-32c1623aa4b1/0/9B77D523EDC2218C65DAB55B4538140243B7E862.mft File: 9B77D523EDC2218C65DAB55B4538140243B7E862.mft (raw, json) Hash identifier: ID83bPQ24LaAfpEvBoXloqWGJ/BNp32jZLtUTUyXKQU= Subject key identifier: 65:95:72:E2:DF:E4:D6:2D:E6:AA:C0:3E:00:F3:1D:DA:D4:1B:80:C9 Authority key identifier: 9B:77:D5:23:ED:C2:21:8C:65:DA:B5:5B:45:38:14:02:43:B7:E8:62 Certificate issuer: /CN=9B77D523EDC2218C65DAB55B4538140243B7E862 Certificate serial: 17D58C4C66B9E32A6BEA6E7E87FD00F3A7EC5106 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9B77D523EDC2218C65DAB55B4538140243B7E862.cer Subject info access: rsync://repo-rpki.idnic.net/repo/c350f078-c535-4f8e-960f-32c1623aa4b1/0/9B77D523EDC2218C65DAB55B4538140243B7E862.mft Manifest number: 022C Signing time: Fri 05 Dec 2025 02:01:39 +0000 Manifest this update: Fri 05 Dec 2025 01:56:39 +0000 Manifest next update: Mon 08 Dec 2025 04:03:39 +0000 Files and hashes: 1: 9B77D523EDC2218C65DAB55B4538140243B7E862.crl (hash: BnKxtuAKPoqLFS5QOx/YcdXiJI/WS7ZyT4uO4q9LIIs=) 2: 3130332e3137342e39302e302f32332d3234203d3e203338333230.roa (hash: qWPS0N/te+MWks31pquZu9fK7Gl6gv7U+N0yk9Foipw=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/c350f078-c535-4f8e-960f-32c1623aa4b1/0/9B77D523EDC2218C65DAB55B4538140243B7E862.crl rsync://repo-rpki.idnic.net/repo/c350f078-c535-4f8e-960f-32c1623aa4b1/0/9B77D523EDC2218C65DAB55B4538140243B7E862.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9B77D523EDC2218C65DAB55B4538140243B7E862.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 08 Dec 2025 04:03:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 17:d5:8c:4c:66:b9:e3:2a:6b:ea:6e:7e:87:fd:00:f3:a7:ec:51:06 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9B77D523EDC2218C65DAB55B4538140243B7E862 Validity Not Before: Dec 5 01:56:39 2025 GMT Not After : Dec 8 04:03:39 2025 GMT Subject: CN=659572E2DFE4D62DE6AAC03E00F31DDAD41B80C9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:e8:96:82:32:96:8b:ef:f2:a4:45:f4:cb:56: f6:34:3e:c7:90:03:a9:63:93:a8:36:c8:ed:1f:18: 45:53:c2:d5:a0:df:3e:a3:e8:42:dd:08:06:cd:3a: ee:5f:a7:b7:2f:8e:fd:e5:6e:08:19:28:e6:3a:7b: 62:b7:e1:22:49:c3:aa:ee:43:b8:cf:35:c9:43:6c: e8:15:d5:58:eb:44:39:43:80:b4:76:9f:99:ed:fe: ed:c9:9a:47:2a:6e:3d:d2:c8:68:2d:b7:86:d2:08: de:eb:9d:c7:db:e8:c5:24:ab:b7:d5:e9:f1:53:7a: a9:ff:68:0d:3a:54:f3:9b:a1:50:64:7f:25:86:54: 0f:ce:5c:3c:ff:90:6b:ac:85:8c:65:4f:8c:31:d9: a9:be:39:4a:84:e8:e7:81:d5:b6:0c:43:25:b2:9c: 33:a6:c3:ea:e6:8c:d8:f5:c6:e4:e4:a6:c9:11:cb: 66:52:e7:bd:10:72:b0:72:b7:fa:07:69:f2:c1:5a: 9e:e3:cd:9b:32:fb:01:47:f1:03:fc:83:1d:37:82: 0f:0d:f4:0d:55:c2:0b:3c:60:c2:c3:6b:af:57:de: d3:26:79:27:25:28:82:db:8b:c6:c0:38:59:15:16: e9:2f:ca:63:4a:f3:df:c3:2a:90:cc:7b:8c:70:af: 24:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:95:72:E2:DF:E4:D6:2D:E6:AA:C0:3E:00:F3:1D:DA:D4:1B:80:C9 X509v3 Authority Key Identifier: keyid:9B:77:D5:23:ED:C2:21:8C:65:DA:B5:5B:45:38:14:02:43:B7:E8:62 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/c350f078-c535-4f8e-960f-32c1623aa4b1/0/9B77D523EDC2218C65DAB55B4538140243B7E862.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9B77D523EDC2218C65DAB55B4538140243B7E862.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c350f078-c535-4f8e-960f-32c1623aa4b1/0/9B77D523EDC2218C65DAB55B4538140243B7E862.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2f:bf:b6:39:c8:60:81:ee:c7:c8:5a:8b:3c:48:76:36:c7:a5: e1:15:8f:0d:a1:c3:a4:05:2a:9e:93:7b:04:bd:bd:e1:50:73: 0f:27:0b:52:f5:3a:63:ec:38:02:fa:69:b4:52:19:5a:5b:a7: 6e:7b:8a:04:f6:b5:d4:d9:77:2b:1b:da:db:74:08:7b:c0:a7: 22:9b:96:51:34:fb:a7:fe:58:40:54:2c:38:b4:8e:25:c4:c7: 81:5f:1c:a2:dc:a6:4d:ed:45:46:ed:7d:79:92:89:7b:4d:42: 2f:5c:81:2a:b3:22:34:ae:c1:00:3f:ec:bb:2c:3f:c1:21:73: 18:ae:77:c7:13:03:fd:db:d2:42:3f:b4:e1:c6:72:ef:40:47: 4b:27:1f:7c:d8:f8:e0:a3:43:d2:09:53:f7:e8:64:dd:92:db: d2:c8:fb:f2:48:a2:82:51:81:2e:9e:26:e2:15:65:dc:69:40: 81:30:27:b0:41:a5:49:90:b8:0a:e1:34:05:e4:56:86:8e:7c: 44:b4:3a:21:7f:af:f5:91:c8:c4:2e:d7:01:84:71:28:39:ef: 98:7a:77:b6:de:a2:fb:54:2f:d2:ea:7c:8a:d7:96:1f:f2:90: f2:77:ee:f7:a0:ee:16:ad:ea:39:23:fa:5d:0b:13:4a:6f:da: 5c:45:0d:dd -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUF9WMTGa54ypr6m5+h/0A86fsUQYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUI3N0Q1MjNFREMyMjE4QzY1REFCNTVCNDUzODE0MDI0 M0I3RTg2MjAeFw0yNTEyMDUwMTU2MzlaFw0yNTEyMDgwNDAzMzlaMDMxMTAvBgNV BAMTKDY1OTU3MkUyREZFNEQ2MkRFNkFBQzAzRTAwRjMxRERBRDQxQjgwQzkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDV6JaCMpaL7/KkRfTLVvY0PseQ A6ljk6g2yO0fGEVTwtWg3z6j6ELdCAbNOu5fp7cvjv3lbggZKOY6e2K34SJJw6ru Q7jPNclDbOgV1VjrRDlDgLR2n5nt/u3Jmkcqbj3SyGgtt4bSCN7rncfb6MUkq7fV 6fFTeqn/aA06VPOboVBkfyWGVA/OXDz/kGushYxlT4wx2am+OUqE6OeB1bYMQyWy nDOmw+rmjNj1xuTkpskRy2ZS570QcrByt/oHafLBWp7jzZsy+wFH8QP8gx03gg8N 9A1Vwgs8YMLDa69X3tMmeSclKILbi8bAOFkVFukvymNK89/DKpDMe4xwryS9AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUZZVy4t/k1i3mqsA+APMd2tQbgMkwHwYDVR0j BBgwFoAUm3fVI+3CIYxl2rVbRTgUAkO36GIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j MzUwZjA3OC1jNTM1LTRmOGUtOTYwZi0zMmMxNjIzYWE0YjEvMC85Qjc3RDUyM0VE QzIyMThDNjVEQUI1NUI0NTM4MTQwMjQzQjdFODYyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOUI3N0Q1MjNFREMyMjE4QzY1REFCNTVCNDUzODE0MDI0M0I3 RTg2Mi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYzM1MGYwNzgtYzUzNS00ZjhlLTk2 MGYtMzJjMTYyM2FhNGIxLzAvOUI3N0Q1MjNFREMyMjE4QzY1REFCNTVCNDUzODE0 MDI0M0I3RTg2Mi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAC+/tjnIYIHux8haizxIdjbHpeEVjw2hw6QF Kp6TewS9veFQcw8nC1L1OmPsOAL6abRSGVpbp257igT2tdTZdysb2tt0CHvApyKb llE0+6f+WEBULDi0jiXEx4FfHKLcpk3tRUbtfXmSiXtNQi9cgSqzIjSuwQA/7Lss P8Ehcxiud8cTA/3b0kI/tOHGcu9AR0snH3zY+OCjQ9IJU/foZN2S29LI+/JIooJR gS6eJuIVZdxpQIEwJ7BBpUmQuArhNAXkVoaOfES0OiF/r/WRyMQu1wGEcSg575h6 d7beovtUL9LqfIrXlh/ykPJ37veg7hat6jkj+l0LE0pv2lxFDd0= -----END CERTIFICATE-----Generated at Sat Dec 6 23:51:05 2025 by rpki-client