This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/d6f4767d-e84f-4210-8423-40696618f377/0/A777F080277567701C7EF464D9A7351ADB0B538E.mft File: A777F080277567701C7EF464D9A7351ADB0B538E.mft (raw, json) Hash identifier: j5wRzU1DdTXEGJT46oyHfGOm7TU4Nf3rMS1hwNloNTY= Subject key identifier: 78:FD:03:60:77:EB:75:52:EC:AB:A5:97:B0:19:51:94:D6:F4:BC:A7 Authority key identifier: A7:77:F0:80:27:75:67:70:1C:7E:F4:64:D9:A7:35:1A:DB:0B:53:8E Certificate issuer: /CN=A777F080277567701C7EF464D9A7351ADB0B538E Certificate serial: 0B6C594AD5E825B9DDE660F2262D07F826343DD2 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A777F080277567701C7EF464D9A7351ADB0B538E.cer Subject info access: rsync://repo-rpki.idnic.net/repo/d6f4767d-e84f-4210-8423-40696618f377/0/A777F080277567701C7EF464D9A7351ADB0B538E.mft Manifest number: 018D Signing time: Wed 17 Dec 2025 09:41:27 +0000 Manifest this update: Wed 17 Dec 2025 09:36:27 +0000 Manifest next update: Sat 20 Dec 2025 13:11:27 +0000 Files and hashes: 1: 3130332e31352e3231342e302f32342d3234203d3e20313335343737.roa (hash: JBW3MNYcLkvyzbMzPH1digOsTzRoTjkVj2ZYm/AplQ8=) 2: A777F080277567701C7EF464D9A7351ADB0B538E.crl (hash: q1yomqs+70YeDfmM20qKa03we0U0XeM8hqt/HtIRxuw=) 3: 3130332e31352e3231352e302f32342d3234203d3e20313335343737.roa (hash: nww0OvBV7eoF7ccGlEcWlOh6cTNl+JMulSg7kpc2Jzg=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/d6f4767d-e84f-4210-8423-40696618f377/0/A777F080277567701C7EF464D9A7351ADB0B538E.crl rsync://repo-rpki.idnic.net/repo/d6f4767d-e84f-4210-8423-40696618f377/0/A777F080277567701C7EF464D9A7351ADB0B538E.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A777F080277567701C7EF464D9A7351ADB0B538E.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 20 Dec 2025 13:11:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0b:6c:59:4a:d5:e8:25:b9:dd:e6:60:f2:26:2d:07:f8:26:34:3d:d2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A777F080277567701C7EF464D9A7351ADB0B538E Validity Not Before: Dec 17 09:36:27 2025 GMT Not After : Dec 20 13:11:27 2025 GMT Subject: CN=78FD036077EB7552ECABA597B0195194D6F4BCA7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:48:1a:88:ab:7c:63:c4:3e:d5:c8:aa:5f:ad: 38:30:73:a0:8c:9d:6b:59:54:97:1b:5c:dd:1c:42: 7b:92:67:91:d2:23:4d:60:7f:f2:a7:d8:1e:4b:49: 27:16:a8:73:e4:6f:04:91:83:f9:2f:0c:c8:94:e5: 32:5f:a7:ad:d3:67:d6:22:8d:ea:9a:4e:87:9e:a1: c9:ff:32:f6:47:a0:67:a0:a6:e4:3c:70:99:78:06: 1e:5e:01:e6:66:0f:9f:41:7a:b1:72:ff:98:11:19: 41:36:37:f9:8e:e8:4b:15:e1:11:49:1d:01:ec:e9: 28:88:2d:8a:ef:8d:22:25:37:50:87:b5:e3:1c:71: 18:8c:d8:c1:be:44:40:61:fe:62:6a:76:a5:7e:a6: 1d:33:a2:48:89:a6:77:fe:ee:0f:e1:40:73:33:cc: 58:35:63:12:e6:cf:0d:b5:0e:ab:17:e0:5f:24:8e: 1d:70:48:53:aa:65:77:a7:25:84:39:24:00:25:3d: 64:b9:0d:a3:6d:bc:6d:94:79:6e:a9:0a:83:57:a3: 56:31:8a:7d:67:0d:81:80:28:9d:1b:17:89:b5:ca: 47:b3:1e:8e:aa:a7:be:45:8e:a3:82:fe:03:1b:ee: 68:4a:e1:a3:9d:2b:88:9a:ba:00:31:7a:5f:e0:bb: ba:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 78:FD:03:60:77:EB:75:52:EC:AB:A5:97:B0:19:51:94:D6:F4:BC:A7 X509v3 Authority Key Identifier: keyid:A7:77:F0:80:27:75:67:70:1C:7E:F4:64:D9:A7:35:1A:DB:0B:53:8E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/d6f4767d-e84f-4210-8423-40696618f377/0/A777F080277567701C7EF464D9A7351ADB0B538E.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A777F080277567701C7EF464D9A7351ADB0B538E.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d6f4767d-e84f-4210-8423-40696618f377/0/A777F080277567701C7EF464D9A7351ADB0B538E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c5:5b:be:8a:e5:81:11:50:fe:01:79:90:18:3c:d7:1c:4e:4a: a2:cd:76:ea:cc:fb:54:7a:21:86:be:bd:13:36:b0:2f:f0:39: 09:9f:9c:42:68:0b:bc:89:53:7d:b4:c8:ed:d6:a1:28:e5:f5: a9:e1:65:8a:cc:be:9d:56:08:70:04:0f:75:9b:43:21:d4:52: ca:e8:0b:a0:2c:96:ad:e1:11:27:85:df:cc:6e:34:2e:65:60: 76:e3:80:28:4f:ee:70:e5:d2:c6:07:d3:92:ac:a2:7a:cf:18: c6:de:95:1f:3e:d1:18:b2:93:56:fd:e6:dd:1d:cf:23:2f:8b: f2:9f:23:f4:47:d4:2a:fd:4a:e4:e6:87:28:3b:05:40:d7:d7: 06:30:f9:ec:d2:78:9d:3f:52:34:1e:e2:dd:4a:e9:6b:f7:ca: e3:46:52:92:39:a4:60:1e:f5:80:be:69:d5:34:9f:f3:34:10: a9:2f:d2:ac:95:ba:35:bc:0f:bf:a1:2c:66:9c:01:22:47:b1: 8e:5e:aa:d8:c7:55:20:b7:2c:12:43:6d:87:76:f7:1f:ac:08: 11:e1:08:2b:41:f8:13:65:d2:13:47:d3:1f:a7:46:33:30:b0: 75:e8:d0:25:18:de:2e:ad:7a:4d:5c:2e:46:0a:49:83:18:b0: 08:48:0b:15 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUC2xZStXoJbnd5mDyJi0H+CY0PdIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTc3N0YwODAyNzc1Njc3MDFDN0VGNDY0RDlBNzM1MUFE QjBCNTM4RTAeFw0yNTEyMTcwOTM2MjdaFw0yNTEyMjAxMzExMjdaMDMxMTAvBgNV BAMTKDc4RkQwMzYwNzdFQjc1NTJFQ0FCQTU5N0IwMTk1MTk0RDZGNEJDQTcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDGSBqIq3xjxD7VyKpfrTgwc6CM nWtZVJcbXN0cQnuSZ5HSI01gf/Kn2B5LSScWqHPkbwSRg/kvDMiU5TJfp63TZ9Yi jeqaToeeocn/MvZHoGegpuQ8cJl4Bh5eAeZmD59BerFy/5gRGUE2N/mO6EsV4RFJ HQHs6SiILYrvjSIlN1CHteMccRiM2MG+REBh/mJqdqV+ph0zokiJpnf+7g/hQHMz zFg1YxLmzw21DqsX4F8kjh1wSFOqZXenJYQ5JAAlPWS5DaNtvG2UeW6pCoNXo1Yx in1nDYGAKJ0bF4m1ykezHo6qp75FjqOC/gMb7mhK4aOdK4iaugAxel/gu7ovAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUeP0DYHfrdVLsq6WXsBlRlNb0vKcwHwYDVR0j BBgwFoAUp3fwgCd1Z3AcfvRk2ac1GtsLU44wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k NmY0NzY3ZC1lODRmLTQyMTAtODQyMy00MDY5NjYxOGYzNzcvMC9BNzc3RjA4MDI3 NzU2NzcwMUM3RUY0NjREOUE3MzUxQURCMEI1MzhFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQTc3N0YwODAyNzc1Njc3MDFDN0VGNDY0RDlBNzM1MUFEQjBC NTM4RS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZDZmNDc2N2QtZTg0Zi00MjEwLTg0 MjMtNDA2OTY2MThmMzc3LzAvQTc3N0YwODAyNzc1Njc3MDFDN0VGNDY0RDlBNzM1 MUFEQjBCNTM4RS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAMVbvorlgRFQ/gF5kBg81xxOSqLNdurM+1R6 IYa+vRM2sC/wOQmfnEJoC7yJU320yO3WoSjl9anhZYrMvp1WCHAED3WbQyHUUsro C6Aslq3hESeF38xuNC5lYHbjgChP7nDl0sYH05KsonrPGMbelR8+0Riyk1b95t0d zyMvi/KfI/RH1Cr9SuTmhyg7BUDX1wYw+ezSeJ0/UjQe4t1K6Wv3yuNGUpI5pGAe 9YC+adU0n/M0EKkv0qyVujW8D7+hLGacASJHsY5eqtjHVSC3LBJDbYd29x+sCBHh CCtB+BNl0hNH0x+nRjMwsHXo0CUY3i6tek1cLkYKSYMYsAhICxU= -----END CERTIFICATE-----Generated at Wed Dec 17 13:45:39 2025 by rpki-client