This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/478259d6-2655-4417-bec4-83ef6644f57e/0/277D3C0811B597BC22847329E543CCEE7E2449A0.mft File: 277D3C0811B597BC22847329E543CCEE7E2449A0.mft (raw, json) Hash identifier: hQY8niNfgiyztS9auWX7RNTD0cfG1nnOAT2p2gvz9lg= Subject key identifier: 57:DE:C2:FC:67:5A:EC:13:B7:58:28:87:57:0F:61:C8:C4:9C:AA:AC Authority key identifier: 27:7D:3C:08:11:B5:97:BC:22:84:73:29:E5:43:CC:EE:7E:24:49:A0 Certificate issuer: /CN=277D3C0811B597BC22847329E543CCEE7E2449A0 Certificate serial: 7CCA03A1BB54ECA42AAA9E1AA4E729BFB79AE7BA Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/277D3C0811B597BC22847329E543CCEE7E2449A0.cer Subject info access: rsync://repo-rpki.idnic.net/repo/478259d6-2655-4417-bec4-83ef6644f57e/0/277D3C0811B597BC22847329E543CCEE7E2449A0.mft Manifest number: E9 Signing time: Fri 19 Dec 2025 19:51:59 +0000 Manifest this update: Fri 19 Dec 2025 19:46:59 +0000 Manifest next update: Tue 23 Dec 2025 06:51:59 +0000 Files and hashes: 1: 3136302e32352e3131362e302f32342d3234203d3e20313533303739.roa (hash: fefCWKXr30YVqWiq342VlH8lfhnIRdZEARC93/LTaB0=) 2: 277D3C0811B597BC22847329E543CCEE7E2449A0.crl (hash: DdGIznAPuqs+cTwZNsPLdiPmXKbxGoVxiKedF5Oxudo=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/478259d6-2655-4417-bec4-83ef6644f57e/0/277D3C0811B597BC22847329E543CCEE7E2449A0.crl rsync://repo-rpki.idnic.net/repo/478259d6-2655-4417-bec4-83ef6644f57e/0/277D3C0811B597BC22847329E543CCEE7E2449A0.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/277D3C0811B597BC22847329E543CCEE7E2449A0.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 23 Dec 2025 06:51:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7c:ca:03:a1:bb:54:ec:a4:2a:aa:9e:1a:a4:e7:29:bf:b7:9a:e7:ba Signature Algorithm: sha256WithRSAEncryption Issuer: CN=277D3C0811B597BC22847329E543CCEE7E2449A0 Validity Not Before: Dec 19 19:46:59 2025 GMT Not After : Dec 23 06:51:59 2025 GMT Subject: CN=57DEC2FC675AEC13B7582887570F61C8C49CAAAC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:77:de:0d:8e:89:c8:0f:4d:02:4e:ea:dc:24: fa:14:18:f0:9b:bf:8c:25:22:0d:ce:98:dc:94:76: 93:c7:6c:3c:12:ed:7e:62:c5:81:55:31:22:45:cf: 9e:26:82:8c:3f:5c:fa:03:0c:bf:05:e3:ad:6c:9b: f8:a6:d2:e3:32:d7:0f:21:b4:39:27:e8:d8:99:68: 3a:52:d4:02:21:e2:dd:53:a5:df:e4:90:fb:40:88: 9d:25:f3:3c:a1:57:ed:af:11:cf:68:68:af:78:f0: b8:aa:22:8b:59:ba:0b:1d:1c:08:d8:74:92:63:15: 82:32:6c:0c:32:98:d9:c9:98:36:3d:0f:02:7d:8d: f9:8f:36:ef:2f:81:e2:6d:60:64:d5:d0:f9:99:94: 9f:29:b3:39:6f:5f:08:77:63:a6:6a:ef:a8:66:cb: 82:af:f8:c6:3f:42:c4:8c:00:5f:96:60:3c:5f:1c: 47:8c:a0:07:22:c3:44:4b:c1:51:5c:44:30:cb:a1: db:e7:7e:8b:65:50:55:29:dd:15:1f:5c:f9:c3:d5: 4b:1f:98:d3:b8:ae:31:6e:5f:ce:2c:14:80:dd:1e: 03:ff:d9:a5:f5:9f:67:3a:6b:7d:bd:9e:c9:32:cd: c2:f6:42:d8:01:99:ba:52:66:6f:de:2e:9b:4b:d0: f0:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 57:DE:C2:FC:67:5A:EC:13:B7:58:28:87:57:0F:61:C8:C4:9C:AA:AC X509v3 Authority Key Identifier: keyid:27:7D:3C:08:11:B5:97:BC:22:84:73:29:E5:43:CC:EE:7E:24:49:A0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/478259d6-2655-4417-bec4-83ef6644f57e/0/277D3C0811B597BC22847329E543CCEE7E2449A0.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/277D3C0811B597BC22847329E543CCEE7E2449A0.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/478259d6-2655-4417-bec4-83ef6644f57e/0/277D3C0811B597BC22847329E543CCEE7E2449A0.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 78:83:1c:c2:c6:00:f5:79:03:ad:c9:2b:88:9c:3d:4e:54:56: 89:fd:ea:38:de:5f:cf:c8:e5:b4:79:ab:86:cd:39:41:7a:7f: 5c:50:a6:12:70:62:33:c3:0f:8e:bb:7f:cb:4e:59:10:91:62: 8a:1c:bf:0a:bd:6c:71:44:b4:1c:12:7b:d6:81:c8:01:4b:eb: 8f:55:65:1f:b5:9c:38:2f:5f:f3:74:11:44:65:dc:97:6e:63: 8b:4a:af:38:ca:4c:b9:02:b8:7e:e0:15:1d:1a:8a:bf:42:46: b6:20:b5:fb:5d:ad:02:e8:c9:c8:b7:67:61:0d:4a:bd:7e:a0: ba:fe:0d:95:be:04:ed:24:6d:24:99:de:6f:22:89:9f:fb:e5: ce:d5:f5:96:cc:14:4c:a0:5a:3d:82:6d:08:5d:e6:1d:d7:e0: eb:cf:61:12:35:d7:1d:f3:d5:91:e1:3c:f9:52:2e:c7:d0:e5: a8:ac:93:34:f1:da:44:31:c8:77:04:8f:91:27:dd:ec:e9:b5: 23:ae:0f:79:50:03:a3:d0:bc:e8:6c:aa:20:6a:e5:8b:dc:e0: 2d:83:61:58:c7:61:68:89:d8:82:ae:eb:79:da:d9:36:0c:65: 2b:f7:aa:97:1d:63:e1:a5:8a:2e:a0:f2:4a:ec:a3:e2:c1:08: 54:88:c3:a1 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUfMoDobtU7KQqqp4apOcpv7ea57owDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjc3RDNDMDgxMUI1OTdCQzIyODQ3MzI5RTU0M0NDRUU3 RTI0NDlBMDAeFw0yNTEyMTkxOTQ2NTlaFw0yNTEyMjMwNjUxNTlaMDMxMTAvBgNV BAMTKDU3REVDMkZDNjc1QUVDMTNCNzU4Mjg4NzU3MEY2MUM4QzQ5Q0FBQUMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDJd94NjonID00CTurcJPoUGPCb v4wlIg3OmNyUdpPHbDwS7X5ixYFVMSJFz54mgow/XPoDDL8F461sm/im0uMy1w8h tDkn6NiZaDpS1AIh4t1Tpd/kkPtAiJ0l8zyhV+2vEc9oaK948LiqIotZugsdHAjY dJJjFYIybAwymNnJmDY9DwJ9jfmPNu8vgeJtYGTV0PmZlJ8pszlvXwh3Y6Zq76hm y4Kv+MY/QsSMAF+WYDxfHEeMoAciw0RLwVFcRDDLodvnfotlUFUp3RUfXPnD1Usf mNO4rjFuX84sFIDdHgP/2aX1n2c6a329nskyzcL2QtgBmbpSZm/eLptL0PDLAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUV97C/Gda7BO3WCiHVw9hyMScqqwwHwYDVR0j BBgwFoAUJ308CBG1l7wihHMp5UPM7n4kSaAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 NzgyNTlkNi0yNjU1LTQ0MTctYmVjNC04M2VmNjY0NGY1N2UvMC8yNzdEM0MwODEx QjU5N0JDMjI4NDczMjlFNTQzQ0NFRTdFMjQ0OUEwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvMjc3RDNDMDgxMUI1OTdCQzIyODQ3MzI5RTU0M0NDRUU3RTI0 NDlBMC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNDc4MjU5ZDYtMjY1NS00NDE3LWJl YzQtODNlZjY2NDRmNTdlLzAvMjc3RDNDMDgxMUI1OTdCQzIyODQ3MzI5RTU0M0ND RUU3RTI0NDlBMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHiDHMLGAPV5A63JK4icPU5UVon96jjeX8/I 5bR5q4bNOUF6f1xQphJwYjPDD467f8tOWRCRYoocvwq9bHFEtBwSe9aByAFL649V ZR+1nDgvX/N0EURl3JduY4tKrzjKTLkCuH7gFR0air9CRrYgtftdrQLoyci3Z2EN Sr1+oLr+DZW+BO0kbSSZ3m8iiZ/75c7V9ZbMFEygWj2CbQhd5h3X4OvPYRI11x3z 1ZHhPPlSLsfQ5aiskzTx2kQxyHcEj5En3ezptSOuD3lQA6PQvOhsqiBq5Yvc4C2D YVjHYWiJ2IKu63na2TYMZSv3qpcdY+Glii6g8krso+LBCFSIw6E= -----END CERTIFICATE-----Generated at Sun Dec 21 05:38:24 2025 by rpki-client