This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/fe4ace11-9139-4485-aba9-04beddc5bc26/0/977D89E37F6F6C3815B2BC731E694AB878F26F30.mft File: 977D89E37F6F6C3815B2BC731E694AB878F26F30.mft (raw, json) Hash identifier: /j7M4FIdrLwF5ufqksD6Qz8gf4fo4/e/piFqBP4vbJA= Subject key identifier: 9B:2C:52:48:77:D5:20:BC:2E:C4:80:F9:B8:D1:A0:A3:E3:FF:3B:48 Authority key identifier: 97:7D:89:E3:7F:6F:6C:38:15:B2:BC:73:1E:69:4A:B8:78:F2:6F:30 Certificate issuer: /CN=977D89E37F6F6C3815B2BC731E694AB878F26F30 Certificate serial: 60F07D4ADA1BB4AC9B37D01841860419B7E47312 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/977D89E37F6F6C3815B2BC731E694AB878F26F30.cer Subject info access: rsync://repo-rpki.idnic.net/repo/fe4ace11-9139-4485-aba9-04beddc5bc26/0/977D89E37F6F6C3815B2BC731E694AB878F26F30.mft Manifest number: 01F0 Signing time: Sat 06 Dec 2025 03:31:19 +0000 Manifest this update: Sat 06 Dec 2025 03:26:19 +0000 Manifest next update: Tue 09 Dec 2025 05:59:19 +0000 Files and hashes: 1: 3130332e33312e34332e302f32342d3234203d3e2039333431.roa (hash: uM0XA0AM+x7njeHld4x4WvIPIQYCBW6QBEs97/wT47g=) 2: 977D89E37F6F6C3815B2BC731E694AB878F26F30.crl (hash: DKbzbDS/hEH3swYOfsapDnnissxkWYpUlp0xG1NnJGI=) 3: 3130332e33312e34322e302f32342d3234203d3e2039333431.roa (hash: j8MhQFCNNpgWTqqvo4wUA4sj1OS1sCETyG/kmulGJXY=) 4: 3130332e33312e34322e302f32332d3233203d3e2039333431.roa (hash: stIIdICFAUmmjPJbZPuus0zTsstOOiSfpPEmNfACiJs=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/fe4ace11-9139-4485-aba9-04beddc5bc26/0/977D89E37F6F6C3815B2BC731E694AB878F26F30.crl rsync://repo-rpki.idnic.net/repo/fe4ace11-9139-4485-aba9-04beddc5bc26/0/977D89E37F6F6C3815B2BC731E694AB878F26F30.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/977D89E37F6F6C3815B2BC731E694AB878F26F30.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 09 Dec 2025 05:59:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 60:f0:7d:4a:da:1b:b4:ac:9b:37:d0:18:41:86:04:19:b7:e4:73:12 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=977D89E37F6F6C3815B2BC731E694AB878F26F30 Validity Not Before: Dec 6 03:26:19 2025 GMT Not After : Dec 9 05:59:19 2025 GMT Subject: CN=9B2C524877D520BC2EC480F9B8D1A0A3E3FF3B48 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:f2:dd:7d:0f:98:af:f5:66:78:f1:37:81:fb: d0:6c:6b:b8:cb:45:5a:7b:e4:a5:3c:24:39:ba:58: 34:f4:27:6c:f2:35:76:1f:32:d8:3b:ed:00:d4:55: 64:d5:b9:24:f8:5e:f2:43:7b:15:13:fe:50:0b:3b: d3:9a:2f:b0:ff:7c:2e:ca:02:64:df:3e:51:5c:ae: 8e:33:d3:6e:f5:e4:0b:c5:3c:98:0a:0f:21:27:e3: 52:49:bc:b7:41:78:04:27:41:76:93:1c:5b:cd:d7: 10:90:ff:ef:3a:6c:80:aa:de:77:58:16:05:33:e3: 8b:7c:92:a4:fa:20:d6:af:59:4c:b7:70:09:ea:5b: 7f:ce:e0:39:56:36:f0:ae:21:e7:9e:c5:4b:f2:f6: b7:19:95:14:20:0d:14:88:22:52:05:88:b9:e1:05: 1d:4d:83:02:84:11:1e:fd:7b:c9:a6:20:33:77:66: a8:a2:97:1f:6f:e2:d4:21:d4:84:8f:4d:f9:47:f6: 28:be:a8:4e:9a:67:7b:64:18:1a:cf:72:74:07:93: 0c:86:b0:39:8b:86:bb:58:1d:14:76:cb:4e:f7:fa: 06:40:18:b5:65:4c:1e:05:52:d7:a4:5b:e9:0b:04: 34:c8:f2:e0:1a:ac:32:fb:39:83:04:cf:e5:42:b0: 64:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9B:2C:52:48:77:D5:20:BC:2E:C4:80:F9:B8:D1:A0:A3:E3:FF:3B:48 X509v3 Authority Key Identifier: keyid:97:7D:89:E3:7F:6F:6C:38:15:B2:BC:73:1E:69:4A:B8:78:F2:6F:30 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/fe4ace11-9139-4485-aba9-04beddc5bc26/0/977D89E37F6F6C3815B2BC731E694AB878F26F30.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/977D89E37F6F6C3815B2BC731E694AB878F26F30.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/fe4ace11-9139-4485-aba9-04beddc5bc26/0/977D89E37F6F6C3815B2BC731E694AB878F26F30.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5a:df:25:1f:2a:1c:4b:ea:27:ab:38:f7:32:04:e3:d1:b3:91: 89:ca:fc:a5:56:db:69:7e:06:77:a8:1a:52:c4:a3:10:bc:22: 9b:8d:e4:8a:a4:75:65:ea:0a:64:71:1c:53:91:bb:f8:da:db: 31:18:9e:bf:39:56:03:3e:0c:22:fc:e9:a5:41:a3:75:ba:db: c8:2b:69:b1:9d:e1:30:65:a2:a2:9a:50:71:3d:76:e0:d2:1b: 76:e1:d0:8f:8c:38:96:63:f0:1a:0f:46:8e:67:09:88:e5:0a: 28:01:8d:21:13:86:31:57:bb:e7:9e:db:47:cb:f3:1c:8b:45: 61:9d:1d:69:b1:bf:7f:ad:ad:cd:ab:8b:be:7e:73:e0:6e:35: 3c:32:10:85:a4:53:7f:5d:af:23:dc:ea:5b:5e:9b:b7:8a:5d: 22:16:88:c1:91:c0:bc:75:fb:57:4c:6e:52:0c:4d:4c:cc:c7: 17:2d:9c:5c:5c:32:bb:bb:34:11:9d:93:3a:77:e4:41:2c:b4: 0d:f8:cd:32:af:0d:75:40:61:2e:75:63:ef:1e:ba:ba:73:20: 61:8e:53:79:c0:12:b5:92:90:38:de:60:41:81:f5:bb:b8:f4: a6:c1:88:f5:eb:0c:f4:f7:eb:c9:4a:77:6d:4e:16:53:65:07: 09:a8:fd:b3 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUYPB9StobtKybN9AYQYYEGbfkcxIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTc3RDg5RTM3RjZGNkMzODE1QjJCQzczMUU2OTRBQjg3 OEYyNkYzMDAeFw0yNTEyMDYwMzI2MTlaFw0yNTEyMDkwNTU5MTlaMDMxMTAvBgNV BAMTKDlCMkM1MjQ4NzdENTIwQkMyRUM0ODBGOUI4RDFBMEEzRTNGRjNCNDgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDD8t19D5iv9WZ48TeB+9Bsa7jL RVp75KU8JDm6WDT0J2zyNXYfMtg77QDUVWTVuST4XvJDexUT/lALO9OaL7D/fC7K AmTfPlFcro4z02715AvFPJgKDyEn41JJvLdBeAQnQXaTHFvN1xCQ/+86bICq3ndY FgUz44t8kqT6INavWUy3cAnqW3/O4DlWNvCuIeeexUvy9rcZlRQgDRSIIlIFiLnh BR1NgwKEER79e8mmIDN3Zqiilx9v4tQh1ISPTflH9ii+qE6aZ3tkGBrPcnQHkwyG sDmLhrtYHRR2y073+gZAGLVlTB4FUtekW+kLBDTI8uAarDL7OYMEz+VCsGRBAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUmyxSSHfVILwuxID5uNGgo+P/O0gwHwYDVR0j BBgwFoAUl32J439vbDgVsrxzHmlKuHjybzAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m ZTRhY2UxMS05MTM5LTQ0ODUtYWJhOS0wNGJlZGRjNWJjMjYvMC85NzdEODlFMzdG NkY2QzM4MTVCMkJDNzMxRTY5NEFCODc4RjI2RjMwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOTc3RDg5RTM3RjZGNkMzODE1QjJCQzczMUU2OTRBQjg3OEYy NkYzMC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZmU0YWNlMTEtOTEzOS00NDg1LWFi YTktMDRiZWRkYzViYzI2LzAvOTc3RDg5RTM3RjZGNkMzODE1QjJCQzczMUU2OTRB Qjg3OEYyNkYzMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFrfJR8qHEvqJ6s49zIE49GzkYnK/KVW22l+ BneoGlLEoxC8IpuN5IqkdWXqCmRxHFORu/ja2zEYnr85VgM+DCL86aVBo3W628gr abGd4TBloqKaUHE9duDSG3bh0I+MOJZj8BoPRo5nCYjlCigBjSEThjFXu+ee20fL 8xyLRWGdHWmxv3+trc2ri75+c+BuNTwyEIWkU39dryPc6ltem7eKXSIWiMGRwLx1 +1dMblIMTUzMxxctnFxcMru7NBGdkzp35EEstA34zTKvDXVAYS51Y+8eurpzIGGO U3nAErWSkDjeYEGB9bu49KbBiPXrDPT368lKd21OFlNlBwmo/bM= -----END CERTIFICATE-----Generated at Sun Dec 7 01:10:23 2025 by rpki-client