This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/cf7b7677-6204-405f-8ba2-e714324c15d7/0/B76CEE66CD329E4EDD33E6D3452A33FBBE00D741.mft File: B76CEE66CD329E4EDD33E6D3452A33FBBE00D741.mft (raw, json) Hash identifier: HqDGcjywJglTB8dATVYyvhe7iAfxgF8kUt3mIOkumLM= Subject key identifier: 87:C5:F7:85:6F:B2:C1:4D:03:6B:4C:34:26:35:EC:E9:75:61:58:2E Authority key identifier: B7:6C:EE:66:CD:32:9E:4E:DD:33:E6:D3:45:2A:33:FB:BE:00:D7:41 Certificate issuer: /CN=B76CEE66CD329E4EDD33E6D3452A33FBBE00D741 Certificate serial: 21F9509FBBBA8A9F8EA6E8AA5B69793C52B562B5 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B76CEE66CD329E4EDD33E6D3452A33FBBE00D741.cer Subject info access: rsync://repo-rpki.idnic.net/repo/cf7b7677-6204-405f-8ba2-e714324c15d7/0/B76CEE66CD329E4EDD33E6D3452A33FBBE00D741.mft Manifest number: 024E Signing time: Thu 18 Dec 2025 08:30:55 +0000 Manifest this update: Thu 18 Dec 2025 08:25:55 +0000 Manifest next update: Sun 21 Dec 2025 10:16:55 +0000 Files and hashes: 1: 3130332e3138362e39342e302f32332d3234203d3e20313439373430.roa (hash: 36f1oVCDIma5/edGeBmPtM2U4zeHtnBlVDsNRr5sez8=) 2: B76CEE66CD329E4EDD33E6D3452A33FBBE00D741.crl (hash: CJzAAx1TDyJZBoyTcn+IgjPzY/wf3IfBjNiqlxlXtU8=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/cf7b7677-6204-405f-8ba2-e714324c15d7/0/B76CEE66CD329E4EDD33E6D3452A33FBBE00D741.crl rsync://repo-rpki.idnic.net/repo/cf7b7677-6204-405f-8ba2-e714324c15d7/0/B76CEE66CD329E4EDD33E6D3452A33FBBE00D741.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B76CEE66CD329E4EDD33E6D3452A33FBBE00D741.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 21 Dec 2025 10:16:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 21:f9:50:9f:bb:ba:8a:9f:8e:a6:e8:aa:5b:69:79:3c:52:b5:62:b5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B76CEE66CD329E4EDD33E6D3452A33FBBE00D741 Validity Not Before: Dec 18 08:25:55 2025 GMT Not After : Dec 21 10:16:55 2025 GMT Subject: CN=87C5F7856FB2C14D036B4C342635ECE97561582E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:39:e0:10:34:eb:e1:4e:1e:55:c1:4e:d5:89: 6d:61:c9:6b:25:4f:7d:19:ce:33:b1:26:46:49:47: 05:9b:96:05:cf:bc:dd:af:bf:9b:27:9f:7b:5c:23: cf:39:3e:b6:4d:f9:e0:ab:9b:2b:e2:01:f6:6a:7f: 31:47:2a:5a:45:3c:b4:33:07:62:6e:3e:19:8d:9a: de:7d:db:19:c7:5c:82:29:10:d4:6f:dd:63:41:1b: 8b:e2:52:f2:c6:ac:16:9a:80:fb:1b:c7:69:7c:9a: 52:85:68:ac:96:59:f3:4c:8d:30:8a:d1:06:7a:0f: 6f:97:be:c7:7c:2a:3a:e3:99:16:92:c5:06:69:0e: 9d:d9:73:6a:3e:df:73:01:b4:c4:a8:23:df:c2:d6: 50:e8:f7:35:92:20:8e:9f:a6:a1:aa:1b:9d:89:aa: 57:82:2b:22:7c:3a:7f:74:fc:1a:8f:69:dc:2a:c7: ed:53:89:fb:6e:26:35:27:35:34:d9:e0:25:b4:68: 86:c0:ed:75:6a:41:38:dc:7a:f1:c4:cf:a8:d9:67: 17:6b:a3:46:3e:64:54:57:01:43:2c:7d:e9:61:1d: 8e:f1:77:21:2a:3c:f3:24:a2:21:d1:fb:e5:c5:3a: bb:42:3d:86:28:e3:36:f6:58:5c:91:0c:a7:d2:43: b8:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:C5:F7:85:6F:B2:C1:4D:03:6B:4C:34:26:35:EC:E9:75:61:58:2E X509v3 Authority Key Identifier: keyid:B7:6C:EE:66:CD:32:9E:4E:DD:33:E6:D3:45:2A:33:FB:BE:00:D7:41 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/cf7b7677-6204-405f-8ba2-e714324c15d7/0/B76CEE66CD329E4EDD33E6D3452A33FBBE00D741.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B76CEE66CD329E4EDD33E6D3452A33FBBE00D741.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/cf7b7677-6204-405f-8ba2-e714324c15d7/0/B76CEE66CD329E4EDD33E6D3452A33FBBE00D741.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 86:94:d5:e8:6f:c4:ab:30:89:a6:1e:a5:be:59:0f:cd:2b:3a: 0e:77:e5:24:10:cc:0e:c8:26:79:37:66:5a:8b:bd:fc:c8:90: cd:7b:42:07:91:7a:62:fe:d5:18:02:f3:50:1c:39:72:02:a4: 75:46:31:be:6f:a4:0a:22:25:c0:1b:34:e6:3d:7a:ba:d5:ac: 33:3a:9d:ae:de:37:78:14:34:e1:61:ed:b1:22:8b:18:a2:be: 70:c2:55:58:84:df:78:8d:c2:fd:ba:bd:8f:6e:25:44:b7:59: a4:90:9e:1e:ff:b7:2a:e6:9c:fa:1e:37:37:df:96:cf:09:d9: 3d:0e:41:34:81:c1:4c:bf:ad:aa:1b:67:9b:16:3d:db:e0:37: 1f:53:f8:c9:2e:d4:e9:40:4e:da:6c:8b:1a:de:2e:c5:22:fe: f3:62:4d:24:45:66:42:18:b4:5d:40:29:32:32:73:49:0c:41: f8:49:69:c9:4f:23:4c:71:bd:99:91:fb:c1:3d:16:2f:95:06: cd:ed:5e:09:a0:95:ef:10:fa:5d:4d:9e:51:be:9f:9c:82:01: 9d:7c:d9:7f:a8:3a:a5:40:29:77:c9:2b:85:52:6a:cc:60:ca: 7c:eb:16:55:50:a9:32:6b:44:1d:84:98:45:9d:64:3b:98:f9: 36:f7:13:f9 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUIflQn7u6ip+OpuiqW2l5PFK1YrUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjc2Q0VFNjZDRDMyOUU0RUREMzNFNkQzNDUyQTMzRkJC RTAwRDc0MTAeFw0yNTEyMTgwODI1NTVaFw0yNTEyMjExMDE2NTVaMDMxMTAvBgNV BAMTKDg3QzVGNzg1NkZCMkMxNEQwMzZCNEMzNDI2MzVFQ0U5NzU2MTU4MkUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDEOeAQNOvhTh5VwU7ViW1hyWsl T30ZzjOxJkZJRwWblgXPvN2vv5snn3tcI885PrZN+eCrmyviAfZqfzFHKlpFPLQz B2JuPhmNmt592xnHXIIpENRv3WNBG4viUvLGrBaagPsbx2l8mlKFaKyWWfNMjTCK 0QZ6D2+Xvsd8KjrjmRaSxQZpDp3Zc2o+33MBtMSoI9/C1lDo9zWSII6fpqGqG52J qleCKyJ8On90/BqPadwqx+1TiftuJjUnNTTZ4CW0aIbA7XVqQTjcevHEz6jZZxdr o0Y+ZFRXAUMsfelhHY7xdyEqPPMkoiHR++XFOrtCPYYo4zb2WFyRDKfSQ7ibAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUh8X3hW+ywU0Da0w0JjXs6XVhWC4wHwYDVR0j BBgwFoAUt2zuZs0ynk7dM+bTRSoz+74A10EwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j ZjdiNzY3Ny02MjA0LTQwNWYtOGJhMi1lNzE0MzI0YzE1ZDcvMC9CNzZDRUU2NkNE MzI5RTRFREQzM0U2RDM0NTJBMzNGQkJFMDBENzQxLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQjc2Q0VFNjZDRDMyOUU0RUREMzNFNkQzNDUyQTMzRkJCRTAw RDc0MS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vY2Y3Yjc2NzctNjIwNC00MDVmLThi YTItZTcxNDMyNGMxNWQ3LzAvQjc2Q0VFNjZDRDMyOUU0RUREMzNFNkQzNDUyQTMz RkJCRTAwRDc0MS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIaU1ehvxKswiaYepb5ZD80rOg535SQQzA7I Jnk3ZlqLvfzIkM17QgeRemL+1RgC81AcOXICpHVGMb5vpAoiJcAbNOY9errVrDM6 na7eN3gUNOFh7bEiixiivnDCVViE33iNwv26vY9uJUS3WaSQnh7/tyrmnPoeNzff ls8J2T0OQTSBwUy/raobZ5sWPdvgNx9T+Mku1OlATtpsixreLsUi/vNiTSRFZkIY tF1AKTIyc0kMQfhJaclPI0xxvZmR+8E9Fi+VBs3tXgmgle8Q+l1NnlG+n5yCAZ18 2X+oOqVAKXfJK4VSasxgynzrFlVQqTJrRB2EmEWdZDuY+Tb3E/k= -----END CERTIFICATE-----Generated at Thu Dec 18 23:16:54 2025 by rpki-client