This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/0588dff7-6a92-4293-8800-b53e2a918aca/1/97776FFF02B90FFC17B658A0B1A598DBEA888F04.mft File: 97776FFF02B90FFC17B658A0B1A598DBEA888F04.mft (raw, json) Hash identifier: eSSkmm7SvBaL7BJBK5SYgpPv4CPUJ2lNjuiOEfZg0nw= Subject key identifier: E3:CF:AB:1C:F2:49:44:36:0D:DA:BB:10:FC:9D:BC:F8:88:9B:3D:C9 Authority key identifier: 97:77:6F:FF:02:B9:0F:FC:17:B6:58:A0:B1:A5:98:DB:EA:88:8F:04 Certificate issuer: /CN=97776FFF02B90FFC17B658A0B1A598DBEA888F04 Certificate serial: 78DDC452D3085A49DFBDD85B7A0643678D2506BE Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/97776FFF02B90FFC17B658A0B1A598DBEA888F04.cer Subject info access: rsync://repo-rpki.idnic.net/repo/0588dff7-6a92-4293-8800-b53e2a918aca/1/97776FFF02B90FFC17B658A0B1A598DBEA888F04.mft Manifest number: 0108 Signing time: Sat 20 Dec 2025 04:41:41 +0000 Manifest this update: Sat 20 Dec 2025 04:36:41 +0000 Manifest next update: Tue 23 Dec 2025 05:30:41 +0000 Files and hashes: 1: 97776FFF02B90FFC17B658A0B1A598DBEA888F04.crl (hash: gU0fHKGCc6ZXhqI0v0+rj35IiIG3ZnZL3uDA+WjYCBk=) 2: 323030313a6466333a633334303a3a2f34382d3438203d3e20313532333932.roa (hash: DWvVDDRpAMOpRUqp8QzsrLlGUPEfbewyxxzSjcofq2U=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/0588dff7-6a92-4293-8800-b53e2a918aca/1/97776FFF02B90FFC17B658A0B1A598DBEA888F04.crl rsync://repo-rpki.idnic.net/repo/0588dff7-6a92-4293-8800-b53e2a918aca/1/97776FFF02B90FFC17B658A0B1A598DBEA888F04.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/97776FFF02B90FFC17B658A0B1A598DBEA888F04.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 23 Dec 2025 05:30:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 78:dd:c4:52:d3:08:5a:49:df:bd:d8:5b:7a:06:43:67:8d:25:06:be Signature Algorithm: sha256WithRSAEncryption Issuer: CN=97776FFF02B90FFC17B658A0B1A598DBEA888F04 Validity Not Before: Dec 20 04:36:41 2025 GMT Not After : Dec 23 05:30:41 2025 GMT Subject: CN=E3CFAB1CF24944360DDABB10FC9DBCF8889B3DC9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:fc:3b:d9:38:3c:4c:b0:0e:09:10:50:16:9a:7b: f8:43:e0:25:ad:53:04:ed:d0:48:45:5b:47:ac:78: d0:b8:39:95:4b:76:05:42:0c:c8:cb:b1:f2:f3:9a: 59:a2:f5:56:d1:e1:66:d1:25:0f:ed:43:3b:92:4f: f8:2f:2c:59:3f:ac:bf:bb:d0:81:f9:7f:0c:b5:65: c3:c2:1b:4e:29:49:3e:f9:ff:53:d8:dc:42:4d:3b: 6b:65:10:54:5d:31:c1:be:36:3d:a0:1b:02:b1:eb: e4:00:d1:45:92:2d:ae:ae:35:e2:66:2e:e2:fe:d5: 5b:f5:55:15:8d:5a:ed:1c:f8:04:6a:fd:2b:ce:a6: 33:f9:3c:6a:30:c5:10:bb:2b:6c:9b:fa:0f:bd:78: 28:f9:cd:08:bc:66:64:9e:b9:ac:21:4e:1d:21:f8: c6:ef:71:9d:6a:36:54:39:37:cb:27:ef:b0:8a:dc: 19:c0:d9:d4:2c:49:59:0f:6c:11:e6:bd:e6:6d:53: b0:8c:f2:2b:a4:4f:8c:09:12:52:56:a8:16:90:d2: dc:02:2b:cf:8d:76:dc:63:62:1f:d6:38:35:cd:4e: e3:bf:f0:3e:67:81:bf:d5:38:74:27:f0:e0:61:ec: 30:7b:6d:8f:2e:bd:52:a2:de:7b:69:bc:a7:06:fb: 7a:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E3:CF:AB:1C:F2:49:44:36:0D:DA:BB:10:FC:9D:BC:F8:88:9B:3D:C9 X509v3 Authority Key Identifier: keyid:97:77:6F:FF:02:B9:0F:FC:17:B6:58:A0:B1:A5:98:DB:EA:88:8F:04 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/0588dff7-6a92-4293-8800-b53e2a918aca/1/97776FFF02B90FFC17B658A0B1A598DBEA888F04.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/97776FFF02B90FFC17B658A0B1A598DBEA888F04.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/0588dff7-6a92-4293-8800-b53e2a918aca/1/97776FFF02B90FFC17B658A0B1A598DBEA888F04.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption d3:31:66:31:fb:34:25:d2:e7:1b:59:39:a8:df:8b:28:4a:9d: 7e:df:6a:1f:9d:24:0e:7b:1e:ab:42:07:c6:39:5e:6f:f5:b4: 3c:7a:fb:b1:0d:56:8b:a2:1e:e8:81:04:34:89:e1:38:74:9a: e5:83:32:9b:01:51:a9:43:cf:4c:5c:3a:80:21:52:76:93:b3: d0:80:e7:73:d4:e3:ab:1f:1d:e7:7d:e5:c0:36:9f:15:4f:fb: a3:6f:e5:5b:1c:d2:b4:90:80:51:28:41:a6:f6:92:af:ae:7e: 4c:71:6a:d0:7d:79:c5:27:a8:76:9a:69:c7:5f:69:45:51:98: 8f:62:36:0a:35:dc:43:34:63:62:2b:35:d9:4c:11:33:55:a9: dd:c6:fb:8f:60:59:24:34:68:d1:0d:0e:b1:6e:1b:53:be:c3: f6:b4:2d:3b:89:d4:72:ef:d2:fb:f3:4d:8a:5a:ae:b6:ea:a2: 37:ad:19:d2:b1:bf:09:38:91:b4:7e:7f:4e:ef:8a:19:50:11: e5:c0:be:25:58:14:8f:38:9a:0a:b6:6c:bd:56:a4:c8:f5:29: 8a:b5:6a:57:66:d5:fe:12:61:14:bf:3f:e0:47:8b:f9:64:fd: b1:f3:c8:e4:e6:25:0f:dd:34:f9:99:16:0a:36:ad:e7:8f:9f: ac:c2:6b:f4 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUeN3EUtMIWknfvdhbegZDZ40lBr4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTc3NzZGRkYwMkI5MEZGQzE3QjY1OEEwQjFBNTk4REJF QTg4OEYwNDAeFw0yNTEyMjAwNDM2NDFaFw0yNTEyMjMwNTMwNDFaMDMxMTAvBgNV BAMTKEUzQ0ZBQjFDRjI0OTQ0MzYwRERBQkIxMEZDOURCQ0Y4ODg5QjNEQzkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD8O9k4PEywDgkQUBaae/hD4CWt UwTt0EhFW0eseNC4OZVLdgVCDMjLsfLzmlmi9VbR4WbRJQ/tQzuST/gvLFk/rL+7 0IH5fwy1ZcPCG04pST75/1PY3EJNO2tlEFRdMcG+Nj2gGwKx6+QA0UWSLa6uNeJm LuL+1Vv1VRWNWu0c+ARq/SvOpjP5PGowxRC7K2yb+g+9eCj5zQi8ZmSeuawhTh0h +MbvcZ1qNlQ5N8sn77CK3BnA2dQsSVkPbBHmveZtU7CM8iukT4wJElJWqBaQ0twC K8+NdtxjYh/WODXNTuO/8D5ngb/VOHQn8OBh7DB7bY8uvVKi3ntpvKcG+3rnAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU48+rHPJJRDYN2rsQ/J28+IibPckwHwYDVR0j BBgwFoAUl3dv/wK5D/wXtligsaWY2+qIjwQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w NTg4ZGZmNy02YTkyLTQyOTMtODgwMC1iNTNlMmE5MThhY2EvMS85Nzc3NkZGRjAy QjkwRkZDMTdCNjU4QTBCMUE1OThEQkVBODg4RjA0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOTc3NzZGRkYwMkI5MEZGQzE3QjY1OEEwQjFBNTk4REJFQTg4 OEYwNC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMDU4OGRmZjctNmE5Mi00MjkzLTg4 MDAtYjUzZTJhOTE4YWNhLzEvOTc3NzZGRkYwMkI5MEZGQzE3QjY1OEEwQjFBNTk4 REJFQTg4OEYwNC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBANMxZjH7NCXS5xtZOajfiyhKnX7fah+dJA57 HqtCB8Y5Xm/1tDx6+7ENVouiHuiBBDSJ4Th0muWDMpsBUalDz0xcOoAhUnaTs9CA 53PU46sfHed95cA2nxVP+6Nv5Vsc0rSQgFEoQab2kq+ufkxxatB9ecUnqHaaacdf aUVRmI9iNgo13EM0Y2IrNdlMETNVqd3G+49gWSQ0aNENDrFuG1O+w/a0LTuJ1HLv 0vvzTYparrbqojetGdKxvwk4kbR+f07vihlQEeXAviVYFI84mgq2bL1WpMj1KYq1 aldm1f4SYRS/P+BHi/lk/bHzyOTmJQ/dNPmZFgo2reePn6zCa/Q= -----END CERTIFICATE-----Generated at Sun Dec 21 07:58:07 2025 by rpki-client