This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/16c0cd5d-d085-4e2f-b230-7b7e66d1393f/0/677D4AA669244DA65D976651DB5D051EEBDD0644.mft File: 677D4AA669244DA65D976651DB5D051EEBDD0644.mft (raw, json) Hash identifier: Ds/9uhXG4O94CPM3J++ZR/IRVv34gXVAuzX7iewjvrs= Subject key identifier: A4:75:44:14:21:82:99:87:50:4C:D3:C5:20:4F:C5:6A:98:44:CE:B3 Authority key identifier: 67:7D:4A:A6:69:24:4D:A6:5D:97:66:51:DB:5D:05:1E:EB:DD:06:44 Certificate issuer: /CN=677D4AA669244DA65D976651DB5D051EEBDD0644 Certificate serial: 20A9F2CCADB63E07BF95CB4CD4C74CC28281FD49 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/677D4AA669244DA65D976651DB5D051EEBDD0644.cer Subject info access: rsync://repo-rpki.idnic.net/repo/16c0cd5d-d085-4e2f-b230-7b7e66d1393f/0/677D4AA669244DA65D976651DB5D051EEBDD0644.mft Manifest number: 0203 Signing time: Tue 23 Dec 2025 05:02:25 +0000 Manifest this update: Tue 23 Dec 2025 04:57:25 +0000 Manifest next update: Fri 26 Dec 2025 11:17:25 +0000 Files and hashes: 1: 3130332e31382e3138342e302f32332d3234203d3e20313530323330.roa (hash: F7Gs7c34XXwy69oloBM+A2EWyB4TbouNV2bsholc9KU=) 2: 677D4AA669244DA65D976651DB5D051EEBDD0644.crl (hash: fA8AsvW7woJltdpGKrhrcnP1+6Isc+C7t9M3n0eG+9U=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/16c0cd5d-d085-4e2f-b230-7b7e66d1393f/0/677D4AA669244DA65D976651DB5D051EEBDD0644.crl rsync://repo-rpki.idnic.net/repo/16c0cd5d-d085-4e2f-b230-7b7e66d1393f/0/677D4AA669244DA65D976651DB5D051EEBDD0644.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/677D4AA669244DA65D976651DB5D051EEBDD0644.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 26 Dec 2025 11:17:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 20:a9:f2:cc:ad:b6:3e:07:bf:95:cb:4c:d4:c7:4c:c2:82:81:fd:49 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=677D4AA669244DA65D976651DB5D051EEBDD0644 Validity Not Before: Dec 23 04:57:25 2025 GMT Not After : Dec 26 11:17:25 2025 GMT Subject: CN=A475441421829987504CD3C5204FC56A9844CEB3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:7f:b6:00:fc:20:68:00:a7:f4:40:32:22:6b: ea:23:a4:0f:01:86:05:ec:e4:91:60:71:26:96:4c: 31:99:0f:49:c6:43:a7:a6:c2:a0:15:d2:fe:6d:fb: 63:5b:8c:3b:8b:5f:8f:f6:cd:cf:42:25:ee:b2:b5: 8e:31:54:34:6d:2a:9a:7b:ba:88:6b:2b:80:5b:b5: 7e:d5:22:2e:0a:eb:8d:c0:a7:f5:3b:89:89:cd:f5: 8f:a8:13:06:2e:a7:f0:96:72:61:84:1e:27:7b:c2: 5e:e5:82:c8:24:5c:11:3c:1f:22:b0:c6:ae:63:fc: b4:c5:e3:b3:89:e4:03:eb:fe:bf:80:35:df:39:83: 93:b9:6e:06:80:f1:10:fa:b9:de:5f:11:7c:c8:8f: fe:eb:b3:fc:3b:d7:19:d3:48:9b:a4:2b:b6:1b:70: f8:db:e2:96:f4:7e:14:35:7d:36:91:95:e8:a6:8e: 54:29:10:03:67:f5:ef:a9:80:20:95:90:f5:c9:7b: b2:fb:9c:3c:b5:be:e6:b0:d3:68:cc:ac:0d:9f:35: 31:7d:f8:53:17:34:32:58:0a:b0:c8:48:29:57:16: cb:cb:68:91:8f:ad:dc:ba:5c:fb:c2:b5:4a:a2:08: b6:53:e1:a8:98:d5:c5:b0:14:0e:0c:52:ba:f3:60: a0:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A4:75:44:14:21:82:99:87:50:4C:D3:C5:20:4F:C5:6A:98:44:CE:B3 X509v3 Authority Key Identifier: keyid:67:7D:4A:A6:69:24:4D:A6:5D:97:66:51:DB:5D:05:1E:EB:DD:06:44 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/16c0cd5d-d085-4e2f-b230-7b7e66d1393f/0/677D4AA669244DA65D976651DB5D051EEBDD0644.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/677D4AA669244DA65D976651DB5D051EEBDD0644.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/16c0cd5d-d085-4e2f-b230-7b7e66d1393f/0/677D4AA669244DA65D976651DB5D051EEBDD0644.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a5:2c:7a:76:e8:a9:f9:6d:4f:73:ac:d4:51:09:43:84:16:08: f1:4d:ba:2b:f1:89:ec:7f:d1:fd:2f:cf:3a:8b:11:b6:13:0d: cb:16:42:19:b4:8a:70:0e:ed:f1:58:56:fa:29:9f:78:af:c6: 69:d0:84:38:63:32:2a:75:c9:b2:7b:98:8a:bc:4e:ef:f3:f9: f8:af:0a:c9:df:38:4d:bd:da:95:a6:44:83:f9:ba:55:95:c7: ec:0b:cc:79:0a:14:9f:35:ab:6e:36:0f:bb:75:08:f2:ea:e2: bb:1d:4d:1a:eb:1c:94:7e:f5:4c:8a:e9:c7:99:30:65:54:a1: c2:66:23:a0:64:7a:6f:50:05:65:e3:ab:fc:b3:58:43:5c:2c: e9:5a:2f:d9:f6:7c:a8:a9:1d:52:c6:e6:cb:c6:42:af:7d:95: 48:73:1e:6c:8b:b7:6e:39:e2:0f:3b:c1:35:1c:a6:ee:ca:e6: ed:aa:50:d1:06:c0:c7:08:76:af:fb:b0:9a:2a:1c:0c:0e:e6: 4e:77:35:81:50:04:11:a2:a0:ed:78:2f:61:77:3e:ab:28:21: 7d:9b:0b:5c:05:f2:26:44:8c:b9:d9:57:9d:6b:aa:8f:ec:43: 39:0b:0d:01:0e:62:69:33:cc:ed:1b:fb:37:76:79:ca:80:f7: bf:cd:ad:4f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUIKnyzK22Pge/lctM1MdMwoKB/UkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjc3RDRBQTY2OTI0NERBNjVEOTc2NjUxREI1RDA1MUVF QkREMDY0NDAeFw0yNTEyMjMwNDU3MjVaFw0yNTEyMjYxMTE3MjVaMDMxMTAvBgNV BAMTKEE0NzU0NDE0MjE4Mjk5ODc1MDRDRDNDNTIwNEZDNTZBOTg0NENFQjMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDgf7YA/CBoAKf0QDIia+ojpA8B hgXs5JFgcSaWTDGZD0nGQ6emwqAV0v5t+2NbjDuLX4/2zc9CJe6ytY4xVDRtKpp7 uohrK4BbtX7VIi4K643Ap/U7iYnN9Y+oEwYup/CWcmGEHid7wl7lgsgkXBE8HyKw xq5j/LTF47OJ5APr/r+ANd85g5O5bgaA8RD6ud5fEXzIj/7rs/w71xnTSJukK7Yb cPjb4pb0fhQ1fTaRleimjlQpEANn9e+pgCCVkPXJe7L7nDy1vuaw02jMrA2fNTF9 +FMXNDJYCrDISClXFsvLaJGPrdy6XPvCtUqiCLZT4aiY1cWwFA4MUrrzYKCnAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUpHVEFCGCmYdQTNPFIE/FaphEzrMwHwYDVR0j BBgwFoAUZ31KpmkkTaZdl2ZR210FHuvdBkQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x NmMwY2Q1ZC1kMDg1LTRlMmYtYjIzMC03YjdlNjZkMTM5M2YvMC82NzdENEFBNjY5 MjQ0REE2NUQ5NzY2NTFEQjVEMDUxRUVCREQwNjQ0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNjc3RDRBQTY2OTI0NERBNjVEOTc2NjUxREI1RDA1MUVFQkRE MDY0NC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMTZjMGNkNWQtZDA4NS00ZTJmLWIy MzAtN2I3ZTY2ZDEzOTNmLzAvNjc3RDRBQTY2OTI0NERBNjVEOTc2NjUxREI1RDA1 MUVFQkREMDY0NC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKUsenboqfltT3Os1FEJQ4QWCPFNuivxiex/ 0f0vzzqLEbYTDcsWQhm0inAO7fFYVvopn3ivxmnQhDhjMip1ybJ7mIq8Tu/z+fiv CsnfOE292pWmRIP5ulWVx+wLzHkKFJ81q242D7t1CPLq4rsdTRrrHJR+9UyK6ceZ MGVUocJmI6Bkem9QBWXjq/yzWENcLOlaL9n2fKipHVLG5svGQq99lUhzHmyLt245 4g87wTUcpu7K5u2qUNEGwMcIdq/7sJoqHAwO5k53NYFQBBGioO14L2F3PqsoIX2b C1wF8iZEjLnZV51rqo/sQzkLDQEOYmkzzO0b+zd2ecqA97/NrU8= -----END CERTIFICATE-----Generated at Thu Dec 25 00:39:05 2025 by rpki-client