This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/2e6bbe4d-3a2b-4e1b-a1aa-593610b3dec9/0/477C72D3EF66E3FE6923E38128D2757CBB2ABE05.mft File: 477C72D3EF66E3FE6923E38128D2757CBB2ABE05.mft (raw, json) Hash identifier: XSN5/pSTNpDm/GyBxD8X5eI29P11ZBxlqcrGgGLwmwI= Subject key identifier: DD:58:1D:6F:E6:39:32:F6:8C:B8:ED:F1:15:F8:63:DE:AE:18:72:C4 Authority key identifier: 47:7C:72:D3:EF:66:E3:FE:69:23:E3:81:28:D2:75:7C:BB:2A:BE:05 Certificate issuer: /CN=477C72D3EF66E3FE6923E38128D2757CBB2ABE05 Certificate serial: 354BF2E9324C6C2C8A8C1D9FE88E1E082AC19DAB Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/477C72D3EF66E3FE6923E38128D2757CBB2ABE05.cer Subject info access: rsync://repo-rpki.idnic.net/repo/2e6bbe4d-3a2b-4e1b-a1aa-593610b3dec9/0/477C72D3EF66E3FE6923E38128D2757CBB2ABE05.mft Manifest number: 03BB Signing time: Mon 22 Dec 2025 22:11:59 +0000 Manifest this update: Mon 22 Dec 2025 22:06:59 +0000 Manifest next update: Fri 26 Dec 2025 06:43:59 +0000 Files and hashes: 1: 3130332e3132392e36302e302f32342d3234203d3e20313338303538.roa (hash: h8z8T7cMvO94VMJFPw+4vnKbTM1KYMCD+Y7LpeHOwow=) 2: 477C72D3EF66E3FE6923E38128D2757CBB2ABE05.crl (hash: tTYJD7RPH4k/0ec8Uuy487lm4fpe//GR8/KKZdoisJA=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/2e6bbe4d-3a2b-4e1b-a1aa-593610b3dec9/0/477C72D3EF66E3FE6923E38128D2757CBB2ABE05.crl rsync://repo-rpki.idnic.net/repo/2e6bbe4d-3a2b-4e1b-a1aa-593610b3dec9/0/477C72D3EF66E3FE6923E38128D2757CBB2ABE05.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/477C72D3EF66E3FE6923E38128D2757CBB2ABE05.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 26 Dec 2025 06:43:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 35:4b:f2:e9:32:4c:6c:2c:8a:8c:1d:9f:e8:8e:1e:08:2a:c1:9d:ab Signature Algorithm: sha256WithRSAEncryption Issuer: CN=477C72D3EF66E3FE6923E38128D2757CBB2ABE05 Validity Not Before: Dec 22 22:06:59 2025 GMT Not After : Dec 26 06:43:59 2025 GMT Subject: CN=DD581D6FE63932F68CB8EDF115F863DEAE1872C4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:fc:9a:9f:2d:c0:84:66:7c:37:52:cb:11:89: 92:8b:2b:32:1e:d5:d0:a1:30:ab:1f:3c:9f:27:5c: 98:49:2d:29:9f:75:94:3a:c6:aa:be:12:b4:30:98: d3:9b:af:8e:32:ba:db:11:7c:b3:7c:5e:4c:da:dc: 3d:3c:86:18:c2:46:b1:8e:7f:b1:fd:ab:e5:26:7d: 43:e5:a0:61:7c:b1:3c:31:0a:53:96:fd:aa:d0:76: f0:18:db:fc:3b:58:f8:ad:00:a1:41:cb:f3:ee:22: 7f:29:42:ee:17:4f:c7:99:ad:82:6c:0d:c8:93:bd: 6a:d1:cd:a1:7b:ed:0e:55:e4:b7:99:fb:3e:34:a6: aa:72:6b:6d:e8:53:94:2c:0d:ed:8b:b8:28:f9:e7: 92:8b:10:20:61:69:eb:71:f6:83:54:e8:7f:b8:7a: f9:e0:0b:5c:1b:48:bc:0d:5a:2f:64:83:a3:84:27: 34:3f:9e:42:bb:41:6f:28:09:76:91:6e:46:bd:f5: 6b:83:cb:14:9b:8d:64:10:14:a6:52:56:68:1f:51: 52:86:17:9e:0c:8e:69:4c:e0:00:92:76:0a:09:6b: 1c:ac:c9:b2:10:44:5f:d3:00:a7:98:c9:e9:1b:31: 88:67:f5:9f:e4:29:49:b9:15:11:2d:18:d3:48:c5: 77:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:58:1D:6F:E6:39:32:F6:8C:B8:ED:F1:15:F8:63:DE:AE:18:72:C4 X509v3 Authority Key Identifier: keyid:47:7C:72:D3:EF:66:E3:FE:69:23:E3:81:28:D2:75:7C:BB:2A:BE:05 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/2e6bbe4d-3a2b-4e1b-a1aa-593610b3dec9/0/477C72D3EF66E3FE6923E38128D2757CBB2ABE05.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/477C72D3EF66E3FE6923E38128D2757CBB2ABE05.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/2e6bbe4d-3a2b-4e1b-a1aa-593610b3dec9/0/477C72D3EF66E3FE6923E38128D2757CBB2ABE05.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 54:e8:e2:de:2f:54:ce:1c:69:a8:2c:7d:2c:45:6c:bc:10:8d: 20:fd:49:9d:30:78:95:f4:bc:1e:fc:bf:2c:36:1d:0c:3b:8f: 0c:61:da:e5:3f:20:04:56:5d:5c:3e:bc:56:cc:fc:90:c9:19: dd:66:31:be:1e:60:1b:c2:6e:a7:d8:8f:37:a3:94:c4:7f:cf: db:d0:45:31:74:c4:f5:aa:74:48:7e:79:97:a2:d5:5e:c1:e7: c5:0d:b9:01:6a:c9:ea:1f:c4:59:9e:b4:00:ed:f8:6e:67:e7: 28:ee:e9:be:ca:51:9f:f0:c0:bb:65:fd:04:db:11:a3:99:bb: d7:17:c3:d5:29:6e:68:3d:7c:cf:0d:49:32:75:46:22:68:67: 15:9b:2a:fe:a8:cb:a1:0b:24:3f:0d:33:88:3d:83:79:21:a5: 51:49:5b:25:bb:13:72:77:a9:4a:0e:3f:46:80:fd:6e:4a:03: 69:0f:f7:90:a0:bb:18:e9:32:fb:dd:16:b4:ba:1c:91:5b:08: c4:8f:9a:7d:f3:2c:e7:f6:c5:88:18:68:81:ad:07:b7:70:0d: 8f:8f:bf:d5:57:a9:0b:7e:0f:d6:55:4a:8d:28:e3:b2:51:f2: e7:9c:80:67:c8:7f:e2:e0:bd:16:c5:fe:5c:68:76:2f:18:61: 50:52:b4:12 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUNUvy6TJMbCyKjB2f6I4eCCrBnaswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDc3QzcyRDNFRjY2RTNGRTY5MjNFMzgxMjhEMjc1N0NC QjJBQkUwNTAeFw0yNTEyMjIyMjA2NTlaFw0yNTEyMjYwNjQzNTlaMDMxMTAvBgNV BAMTKERENTgxRDZGRTYzOTMyRjY4Q0I4RURGMTE1Rjg2M0RFQUUxODcyQzQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDC/JqfLcCEZnw3UssRiZKLKzIe 1dChMKsfPJ8nXJhJLSmfdZQ6xqq+ErQwmNObr44yutsRfLN8Xkza3D08hhjCRrGO f7H9q+UmfUPloGF8sTwxClOW/arQdvAY2/w7WPitAKFBy/PuIn8pQu4XT8eZrYJs DciTvWrRzaF77Q5V5LeZ+z40pqpya23oU5QsDe2LuCj555KLECBhaetx9oNU6H+4 evngC1wbSLwNWi9kg6OEJzQ/nkK7QW8oCXaRbka99WuDyxSbjWQQFKZSVmgfUVKG F54MjmlM4ACSdgoJaxysybIQRF/TAKeYyekbMYhn9Z/kKUm5FREtGNNIxXcLAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU3Vgdb+Y5MvaMuO3xFfhj3q4YcsQwHwYDVR0j BBgwFoAUR3xy0+9m4/5pI+OBKNJ1fLsqvgUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y ZTZiYmU0ZC0zYTJiLTRlMWItYTFhYS01OTM2MTBiM2RlYzkvMC80NzdDNzJEM0VG NjZFM0ZFNjkyM0UzODEyOEQyNzU3Q0JCMkFCRTA1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNDc3QzcyRDNFRjY2RTNGRTY5MjNFMzgxMjhEMjc1N0NCQjJB QkUwNS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMmU2YmJlNGQtM2EyYi00ZTFiLWEx YWEtNTkzNjEwYjNkZWM5LzAvNDc3QzcyRDNFRjY2RTNGRTY5MjNFMzgxMjhEMjc1 N0NCQjJBQkUwNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFTo4t4vVM4caagsfSxFbLwQjSD9SZ0weJX0 vB78vyw2HQw7jwxh2uU/IARWXVw+vFbM/JDJGd1mMb4eYBvCbqfYjzejlMR/z9vQ RTF0xPWqdEh+eZei1V7B58UNuQFqyeofxFmetADt+G5n5yju6b7KUZ/wwLtl/QTb EaOZu9cXw9Upbmg9fM8NSTJ1RiJoZxWbKv6oy6ELJD8NM4g9g3khpVFJWyW7E3J3 qUoOP0aA/W5KA2kP95CguxjpMvvdFrS6HJFbCMSPmn3zLOf2xYgYaIGtB7dwDY+P v9VXqQt+D9ZVSo0o47JR8uecgGfIf+LgvRbF/lxodi8YYVBStBI= -----END CERTIFICATE-----Generated at Wed Dec 24 22:10:51 2025 by rpki-client