This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/d6f4767d-e84f-4210-8423-40696618f377/0/A777F080277567701C7EF464D9A7351ADB0B538E.mft File: A777F080277567701C7EF464D9A7351ADB0B538E.mft (raw, json) Hash identifier: DvAhzYnFz2bCbZWZwGIs0ouiKYj3ygFKzxbjX09ht5Q= Subject key identifier: 84:70:10:28:34:BA:89:96:89:26:1E:F6:43:04:5A:8D:8E:A1:91:21 Authority key identifier: A7:77:F0:80:27:75:67:70:1C:7E:F4:64:D9:A7:35:1A:DB:0B:53:8E Certificate issuer: /CN=A777F080277567701C7EF464D9A7351ADB0B538E Certificate serial: 6624470757B9D907493E177B74D03FF9ECE4EAB8 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A777F080277567701C7EF464D9A7351ADB0B538E.cer Subject info access: rsync://repo-rpki.idnic.net/repo/d6f4767d-e84f-4210-8423-40696618f377/0/A777F080277567701C7EF464D9A7351ADB0B538E.mft Manifest number: 0188 Signing time: Sat 06 Dec 2025 14:11:28 +0000 Manifest this update: Sat 06 Dec 2025 14:06:28 +0000 Manifest next update: Tue 09 Dec 2025 17:46:28 +0000 Files and hashes: 1: 3130332e31352e3231342e302f32342d3234203d3e20313335343737.roa (hash: JBW3MNYcLkvyzbMzPH1digOsTzRoTjkVj2ZYm/AplQ8=) 2: A777F080277567701C7EF464D9A7351ADB0B538E.crl (hash: m0Mpy++Ie7ZZypzHyPYdxJRLyPOLsZzOlHaYjZG4Bsc=) 3: 3130332e31352e3231352e302f32342d3234203d3e20313335343737.roa (hash: nww0OvBV7eoF7ccGlEcWlOh6cTNl+JMulSg7kpc2Jzg=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/d6f4767d-e84f-4210-8423-40696618f377/0/A777F080277567701C7EF464D9A7351ADB0B538E.crl rsync://repo-rpki.idnic.net/repo/d6f4767d-e84f-4210-8423-40696618f377/0/A777F080277567701C7EF464D9A7351ADB0B538E.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A777F080277567701C7EF464D9A7351ADB0B538E.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 09 Dec 2025 15:57:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 66:24:47:07:57:b9:d9:07:49:3e:17:7b:74:d0:3f:f9:ec:e4:ea:b8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A777F080277567701C7EF464D9A7351ADB0B538E Validity Not Before: Dec 6 14:06:28 2025 GMT Not After : Dec 9 17:46:28 2025 GMT Subject: CN=8470102834BA899689261EF643045A8D8EA19121 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:8f:27:95:64:1a:5b:14:a4:36:c0:05:70:c3: 34:97:98:41:41:40:68:50:60:0d:f9:7a:35:65:cb: c2:a3:ad:cc:14:0c:8b:5d:01:11:80:80:e0:49:db: 98:1b:c9:85:4e:82:7a:f7:93:97:3e:54:ff:69:f2: 59:d2:d8:58:ba:f2:b5:bc:97:0f:86:a3:56:83:45: 3e:73:e9:e5:ab:ee:2c:0e:79:ca:46:6a:13:a5:8d: 9b:73:59:b6:a6:b2:4e:38:0b:80:af:31:ef:fd:ac: 1a:fe:6c:4c:79:52:b4:64:bb:15:d7:12:18:2f:eb: 41:17:37:c0:6d:5d:41:ea:d3:69:52:45:52:7a:e9: df:16:fd:ee:3d:8e:7f:ce:1f:ee:e2:45:a9:8e:52: c0:7e:90:3e:b0:31:60:7a:21:a8:e3:82:99:53:03: d5:80:c6:ab:3d:05:a6:9a:9a:b7:c6:f8:a3:4c:ff: ef:51:ae:30:4f:04:43:ff:99:af:93:b2:84:fb:a5: 9d:b7:72:c2:79:5e:8c:00:44:80:66:e3:b6:94:fa: b7:75:f6:76:ae:33:87:84:38:c5:5c:74:24:cf:74: d4:30:1a:e9:67:c7:de:7c:1c:df:d6:2a:c5:8d:39: 16:0b:9c:34:c2:12:37:fa:f5:f3:ce:e6:f2:cb:74: 7e:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:70:10:28:34:BA:89:96:89:26:1E:F6:43:04:5A:8D:8E:A1:91:21 X509v3 Authority Key Identifier: keyid:A7:77:F0:80:27:75:67:70:1C:7E:F4:64:D9:A7:35:1A:DB:0B:53:8E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/d6f4767d-e84f-4210-8423-40696618f377/0/A777F080277567701C7EF464D9A7351ADB0B538E.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A777F080277567701C7EF464D9A7351ADB0B538E.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d6f4767d-e84f-4210-8423-40696618f377/0/A777F080277567701C7EF464D9A7351ADB0B538E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 01:6b:8f:32:1c:31:a4:3e:3d:f7:e0:b1:a3:83:f5:19:f3:5d: b3:28:61:17:85:5a:5b:0e:73:5b:e4:8b:85:c5:2e:3c:9f:80: c2:55:6c:a2:8c:c2:10:d9:a5:54:8f:0e:4b:ee:32:b1:32:00: 11:c3:84:53:c5:a6:1c:2d:0e:c8:50:44:0d:70:76:d0:c2:5b: fc:93:ec:e0:aa:93:e6:26:7c:0a:85:82:0c:a4:c6:96:85:9c: 1e:73:46:82:ad:be:3e:ed:e8:4c:c3:ec:83:a5:89:88:4f:d5: 01:4d:ab:81:96:0b:25:fd:78:a0:eb:9f:59:ad:8b:6e:01:6f: b6:b1:fe:82:cd:4f:2b:11:e9:6a:72:0b:af:55:00:1b:48:e0: 8f:3b:d1:dc:28:90:6d:63:1b:57:5a:29:f4:8f:b5:a4:49:eb: d0:78:60:17:20:84:fb:f6:46:f2:8c:f8:18:2a:ea:44:03:54: b5:e6:b0:46:df:7a:4a:0f:1b:07:8a:ab:46:4b:c1:a5:d7:63: 44:3f:77:c0:9a:f8:a1:62:5a:06:e7:9d:37:23:9f:74:c9:17: 99:52:1f:a3:e7:80:a9:e8:eb:69:00:28:e5:8c:65:46:34:09: 3e:45:41:42:06:3b:1d:60:46:aa:dd:05:de:e7:6c:3c:18:73: d1:9e:2f:f2 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUZiRHB1e52QdJPhd7dNA/+ezk6rgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTc3N0YwODAyNzc1Njc3MDFDN0VGNDY0RDlBNzM1MUFE QjBCNTM4RTAeFw0yNTEyMDYxNDA2MjhaFw0yNTEyMDkxNzQ2MjhaMDMxMTAvBgNV BAMTKDg0NzAxMDI4MzRCQTg5OTY4OTI2MUVGNjQzMDQ1QThEOEVBMTkxMjEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDbjyeVZBpbFKQ2wAVwwzSXmEFB QGhQYA35ejVly8KjrcwUDItdARGAgOBJ25gbyYVOgnr3k5c+VP9p8lnS2Fi68rW8 lw+Go1aDRT5z6eWr7iwOecpGahOljZtzWbamsk44C4CvMe/9rBr+bEx5UrRkuxXX Ehgv60EXN8BtXUHq02lSRVJ66d8W/e49jn/OH+7iRamOUsB+kD6wMWB6IajjgplT A9WAxqs9BaaamrfG+KNM/+9RrjBPBEP/ma+TsoT7pZ23csJ5XowARIBm47aU+rd1 9nauM4eEOMVcdCTPdNQwGulnx958HN/WKsWNORYLnDTCEjf69fPO5vLLdH7hAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUhHAQKDS6iZaJJh72QwRajY6hkSEwHwYDVR0j BBgwFoAUp3fwgCd1Z3AcfvRk2ac1GtsLU44wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k NmY0NzY3ZC1lODRmLTQyMTAtODQyMy00MDY5NjYxOGYzNzcvMC9BNzc3RjA4MDI3 NzU2NzcwMUM3RUY0NjREOUE3MzUxQURCMEI1MzhFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQTc3N0YwODAyNzc1Njc3MDFDN0VGNDY0RDlBNzM1MUFEQjBC NTM4RS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZDZmNDc2N2QtZTg0Zi00MjEwLTg0 MjMtNDA2OTY2MThmMzc3LzAvQTc3N0YwODAyNzc1Njc3MDFDN0VGNDY0RDlBNzM1 MUFEQjBCNTM4RS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAFrjzIcMaQ+PffgsaOD9RnzXbMoYReFWlsO c1vki4XFLjyfgMJVbKKMwhDZpVSPDkvuMrEyABHDhFPFphwtDshQRA1wdtDCW/yT 7OCqk+YmfAqFggykxpaFnB5zRoKtvj7t6EzD7IOliYhP1QFNq4GWCyX9eKDrn1mt i24Bb7ax/oLNTysR6WpyC69VABtI4I870dwokG1jG1daKfSPtaRJ69B4YBcghPv2 RvKM+Bgq6kQDVLXmsEbfekoPGweKq0ZLwaXXY0Q/d8Ca+KFiWgbnnTcjn3TJF5lS H6PngKno62kAKOWMZUY0CT5FQUIGOx1gRqrdBd7nbDwYc9GeL/I= -----END CERTIFICATE-----Generated at Sun Dec 7 00:48:47 2025 by rpki-client