This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/fe4ace11-9139-4485-aba9-04beddc5bc26/0/977D89E37F6F6C3815B2BC731E694AB878F26F30.mft
File:                     977D89E37F6F6C3815B2BC731E694AB878F26F30.mft (raw, json)
Hash identifier:          w3957DhySsAjwAvGwIaq6zpV7J7tufvdUXuFHtNCRgo=
Subject key identifier:   17:D5:39:DE:69:9A:1F:85:28:20:43:F9:13:B8:10:52:EC:0B:F2:EB
Authority key identifier: 97:7D:89:E3:7F:6F:6C:38:15:B2:BC:73:1E:69:4A:B8:78:F2:6F:30
Certificate issuer:       /CN=977D89E37F6F6C3815B2BC731E694AB878F26F30
Certificate serial:       0464896A69D8C0D63C5EACA650878EC9FC93ED68
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/977D89E37F6F6C3815B2BC731E694AB878F26F30.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/fe4ace11-9139-4485-aba9-04beddc5bc26/0/977D89E37F6F6C3815B2BC731E694AB878F26F30.mft
Manifest number:          01F6
Signing time:             Fri 19 Dec 2025 17:51:53 +0000
Manifest this update:     Fri 19 Dec 2025 17:46:53 +0000
Manifest next update:     Tue 23 Dec 2025 03:52:53 +0000
Files and hashes:         1: 977D89E37F6F6C3815B2BC731E694AB878F26F30.crl (hash: 1tumuPJ3Gxk4bKUjEm2lgElSHwKRoVgGQHnaVoZn1i0=)
                          2: 3130332e33312e34322e302f32332d3233203d3e2039333431.roa (hash: stIIdICFAUmmjPJbZPuus0zTsstOOiSfpPEmNfACiJs=)
                          3: 3130332e33312e34332e302f32342d3234203d3e2039333431.roa (hash: uM0XA0AM+x7njeHld4x4WvIPIQYCBW6QBEs97/wT47g=)
                          4: 3130332e33312e34322e302f32342d3234203d3e2039333431.roa (hash: j8MhQFCNNpgWTqqvo4wUA4sj1OS1sCETyG/kmulGJXY=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/fe4ace11-9139-4485-aba9-04beddc5bc26/0/977D89E37F6F6C3815B2BC731E694AB878F26F30.crl
                          rsync://repo-rpki.idnic.net/repo/fe4ace11-9139-4485-aba9-04beddc5bc26/0/977D89E37F6F6C3815B2BC731E694AB878F26F30.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/977D89E37F6F6C3815B2BC731E694AB878F26F30.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 23 Dec 2025 00:38:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            04:64:89:6a:69:d8:c0:d6:3c:5e:ac:a6:50:87:8e:c9:fc:93:ed:68
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=977D89E37F6F6C3815B2BC731E694AB878F26F30
        Validity
            Not Before: Dec 19 17:46:53 2025 GMT
            Not After : Dec 23 03:52:53 2025 GMT
        Subject: CN=17D539DE699A1F85282043F913B81052EC0BF2EB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:93:94:e2:ca:2a:95:f6:b3:d4:68:05:5d:17:
                    2e:cc:fd:94:cc:0a:42:4d:3e:eb:81:de:58:60:46:
                    88:e9:3d:75:f9:a7:8a:68:d5:a8:b5:97:27:d5:5c:
                    66:0a:33:37:89:bc:49:3c:17:06:95:fd:b7:e5:c3:
                    e5:3d:35:53:89:c0:5c:31:bb:14:8d:71:12:33:31:
                    99:92:e6:f0:35:c8:c4:5b:2f:92:45:55:41:89:ab:
                    d8:b7:42:39:9f:dd:35:94:cb:f4:43:e3:46:85:73:
                    6f:2c:04:f2:6a:9a:6c:76:0f:76:12:55:4e:7e:b7:
                    69:5d:99:a7:5f:ea:41:b0:19:99:09:62:11:2d:6d:
                    f9:c5:cb:3b:23:97:85:43:7a:01:c1:ed:4d:e1:89:
                    7a:0c:ef:83:0e:e8:43:28:e8:cc:2b:e2:36:27:8d:
                    ea:a2:6f:27:8f:d3:c0:f0:c1:f0:4a:5f:81:15:97:
                    73:99:0b:84:e6:fe:6f:45:e3:aa:9f:1b:f7:93:c2:
                    fc:7e:90:ab:3e:b1:b4:27:06:63:c8:13:64:db:bb:
                    6c:a9:85:46:98:cf:43:2d:75:c1:c8:3a:06:9b:31:
                    30:e7:d6:bb:aa:b8:5a:eb:85:95:d2:21:e5:10:c9:
                    e2:09:9b:13:e0:45:ab:05:11:e2:52:4a:1b:3c:e0:
                    f5:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:D5:39:DE:69:9A:1F:85:28:20:43:F9:13:B8:10:52:EC:0B:F2:EB
            X509v3 Authority Key Identifier:
                keyid:97:7D:89:E3:7F:6F:6C:38:15:B2:BC:73:1E:69:4A:B8:78:F2:6F:30

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/fe4ace11-9139-4485-aba9-04beddc5bc26/0/977D89E37F6F6C3815B2BC731E694AB878F26F30.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/977D89E37F6F6C3815B2BC731E694AB878F26F30.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/fe4ace11-9139-4485-aba9-04beddc5bc26/0/977D89E37F6F6C3815B2BC731E694AB878F26F30.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         77:cf:66:64:8d:63:32:61:fd:35:8c:8e:ad:c3:2f:9b:57:3e:
         2c:51:06:52:9c:92:cb:20:6e:39:bb:dc:2f:22:f9:b4:e3:92:
         4e:c8:d8:4e:d0:6a:ba:9a:5b:a3:ae:e6:c9:27:0c:3f:86:05:
         95:e9:5c:d1:69:ee:0c:8a:b9:33:2a:b3:80:50:48:42:66:a6:
         2f:55:5c:f2:7d:26:cd:c1:a6:2c:f9:0d:b0:de:b1:55:e5:9d:
         64:07:fb:01:7f:35:e0:f6:ce:da:49:40:90:9c:6d:bd:49:4a:
         a9:f4:06:32:5c:8d:e9:76:1f:d6:ad:f4:df:a2:18:77:6a:d0:
         c5:14:95:dc:27:62:65:76:46:41:0e:8b:a8:9f:78:76:fb:f8:
         44:c0:ab:93:7b:fe:05:1f:66:5a:8f:b3:47:ce:40:a3:5a:61:
         34:38:ef:a5:56:be:2e:3e:0a:ba:52:e0:33:58:4a:c6:c7:c1:
         bf:dd:d3:83:4e:af:a5:39:11:a8:d0:35:17:05:ec:d0:2c:84:
         4c:e4:51:57:56:85:e6:20:03:c1:8d:00:ca:18:8d:c5:33:5d:
         70:25:18:70:82:32:aa:37:16:43:1b:91:10:65:e3:13:66:77:
         c1:28:bc:46:ce:9c:bd:3d:3b:e9:28:9c:8f:12:eb:f4:18:31:
         dd:ab:a3:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 20 22:23:22 2025 by rpki-client