This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/6132a740-bd7d-46b8-b10a-a7a703e350f2/0/7701FBF4A9C9B559888F02656447A3AA1963811C.mft File: 7701FBF4A9C9B559888F02656447A3AA1963811C.mft (raw, json) Hash identifier: tE1o2iS7FNFK87UKBXrQxakHKhtjrSCaMH8+ZN0SwpI= Subject key identifier: 32:94:92:EE:5F:F0:4A:E6:83:97:F7:69:03:0B:F1:D5:58:5F:9E:2D Authority key identifier: 77:01:FB:F4:A9:C9:B5:59:88:8F:02:65:64:47:A3:AA:19:63:81:1C Certificate issuer: /CN=7701FBF4A9C9B559888F02656447A3AA1963811C Certificate serial: 2DB3D638BBFE47FFF2005EF781C7D0CC18F241FA Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7701FBF4A9C9B559888F02656447A3AA1963811C.cer Subject info access: rsync://repo-rpki.idnic.net/repo/6132a740-bd7d-46b8-b10a-a7a703e350f2/0/7701FBF4A9C9B559888F02656447A3AA1963811C.mft Manifest number: 020A Signing time: Tue 23 Dec 2025 11:51:52 +0000 Manifest this update: Tue 23 Dec 2025 11:46:52 +0000 Manifest next update: Fri 26 Dec 2025 23:03:52 +0000 Files and hashes: 1: 7701FBF4A9C9B559888F02656447A3AA1963811C.crl (hash: 16aJ/DwNS0X267Z42Y4+uDhVV4vYoHSrArIGTjwvmTI=) 2: 3130332e3230322e3232372e302f32342d3234203d3e20313334363335.roa (hash: nH1oMcdoDvuHP/DwzkTAyZckDG1Pwn9g7DHCrhDPMiw=) 3: 3130332e38342e3131372e302f32342d3234203d3e20313334363335.roa (hash: tgAxo2PkCLcwRQp+/tf9sxvBS4Sl8uCrZgT8LdPuiis=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/6132a740-bd7d-46b8-b10a-a7a703e350f2/0/7701FBF4A9C9B559888F02656447A3AA1963811C.crl rsync://repo-rpki.idnic.net/repo/6132a740-bd7d-46b8-b10a-a7a703e350f2/0/7701FBF4A9C9B559888F02656447A3AA1963811C.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7701FBF4A9C9B559888F02656447A3AA1963811C.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 26 Dec 2025 23:03:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2d:b3:d6:38:bb:fe:47:ff:f2:00:5e:f7:81:c7:d0:cc:18:f2:41:fa Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7701FBF4A9C9B559888F02656447A3AA1963811C Validity Not Before: Dec 23 11:46:52 2025 GMT Not After : Dec 26 23:03:52 2025 GMT Subject: CN=329492EE5FF04AE68397F769030BF1D5585F9E2D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:44:da:02:14:12:82:07:40:be:a3:e1:63:72: b6:af:54:28:47:6a:9c:e9:fc:82:d6:ac:bc:94:1a: 25:ec:42:1b:1f:a0:42:e0:9b:9c:08:05:76:49:2c: f3:52:dd:bf:07:46:f7:40:eb:e7:c1:0c:49:51:d4: 6f:b3:28:e5:69:2b:00:18:a6:b5:4a:23:57:a0:1b: 06:09:79:ec:f1:d5:1e:ab:06:12:4a:26:7a:9d:5b: 5b:6f:2a:71:1f:ad:4f:db:e7:72:df:9c:6f:21:51: 68:86:63:67:e1:03:55:cc:6f:84:6f:6b:3f:72:76: 57:13:de:08:c0:75:12:dd:10:ee:3b:a3:ce:c1:eb: 65:be:3d:98:25:0b:8f:2f:2b:f2:15:77:7e:8a:35: c6:05:6b:cb:a0:db:11:8b:71:b6:e4:92:38:de:94: 4e:ea:e7:15:cc:c5:59:57:51:0a:9e:af:63:d3:13: 92:1b:45:7c:96:e5:48:a3:18:e2:ba:70:68:4b:23: 12:a3:cb:a0:ae:20:18:d3:61:9e:72:06:6f:29:66: 88:08:4b:d4:6b:c4:d7:93:e7:80:74:7d:72:59:17: a3:25:2a:04:e0:05:72:66:f1:b4:5d:6c:0e:fa:4e: 7e:ad:8b:10:f7:6f:ed:12:17:01:2c:b1:d4:eb:a3: 85:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:94:92:EE:5F:F0:4A:E6:83:97:F7:69:03:0B:F1:D5:58:5F:9E:2D X509v3 Authority Key Identifier: keyid:77:01:FB:F4:A9:C9:B5:59:88:8F:02:65:64:47:A3:AA:19:63:81:1C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/6132a740-bd7d-46b8-b10a-a7a703e350f2/0/7701FBF4A9C9B559888F02656447A3AA1963811C.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7701FBF4A9C9B559888F02656447A3AA1963811C.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/6132a740-bd7d-46b8-b10a-a7a703e350f2/0/7701FBF4A9C9B559888F02656447A3AA1963811C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b0:cb:92:3e:8c:9a:87:38:cb:59:71:4d:69:dc:8c:94:37:77: 30:0c:f8:cd:25:47:03:3d:9a:0d:b5:a5:74:15:9f:d5:d9:40: 3a:51:40:d4:02:37:18:72:78:02:fa:8b:e6:0e:f7:97:f9:de: 39:0c:3f:3a:39:b4:9c:12:b1:78:03:04:53:f7:7d:17:45:c9: ff:5b:a4:9e:ba:19:a3:60:69:05:79:55:b9:14:d2:c0:75:ad: 08:f9:1c:c6:83:04:7e:ff:28:c7:e1:ad:90:53:82:4e:60:f4: 59:12:42:0f:b4:18:65:00:bd:ae:e0:55:5f:67:76:29:87:30: f9:8a:b6:04:4f:35:fb:ba:17:5a:f9:4a:6d:82:f3:d3:71:8f: 7a:ba:6d:4e:36:7a:72:a7:ad:ec:f5:39:63:8b:6c:c9:6b:4f: 59:cd:9b:48:4f:30:db:7f:c8:2e:5e:95:57:08:66:fb:b4:23: 4a:26:e2:1b:d1:98:9f:24:29:ce:68:8c:fa:52:26:0f:b9:8e: be:5f:db:e1:13:15:ed:88:59:66:96:e7:a0:ce:f3:e4:07:f2: 5a:b5:62:e9:a1:59:5d:c6:0c:a8:8c:d5:04:5f:66:3c:2d:76: 85:ee:e8:4d:b6:ea:f6:02:b8:b0:6c:f7:fd:01:26:33:50:7d: 9c:95:80:94 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIULbPWOLv+R//yAF73gcfQzBjyQfowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzcwMUZCRjRBOUM5QjU1OTg4OEYwMjY1NjQ0N0EzQUEx OTYzODExQzAeFw0yNTEyMjMxMTQ2NTJaFw0yNTEyMjYyMzAzNTJaMDMxMTAvBgNV BAMTKDMyOTQ5MkVFNUZGMDRBRTY4Mzk3Rjc2OTAzMEJGMUQ1NTg1RjlFMkQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC1RNoCFBKCB0C+o+FjcravVChH apzp/ILWrLyUGiXsQhsfoELgm5wIBXZJLPNS3b8HRvdA6+fBDElR1G+zKOVpKwAY prVKI1egGwYJeezx1R6rBhJKJnqdW1tvKnEfrU/b53LfnG8hUWiGY2fhA1XMb4Rv az9ydlcT3gjAdRLdEO47o87B62W+PZglC48vK/IVd36KNcYFa8ug2xGLcbbkkjje lE7q5xXMxVlXUQqer2PTE5IbRXyW5UijGOK6cGhLIxKjy6CuIBjTYZ5yBm8pZogI S9RrxNeT54B0fXJZF6MlKgTgBXJm8bRdbA76Tn6tixD3b+0SFwEssdTro4WfAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUMpSS7l/wSuaDl/dpAwvx1Vhfni0wHwYDVR0j BBgwFoAUdwH79KnJtVmIjwJlZEejqhljgRwwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 MTMyYTc0MC1iZDdkLTQ2YjgtYjEwYS1hN2E3MDNlMzUwZjIvMC83NzAxRkJGNEE5 QzlCNTU5ODg4RjAyNjU2NDQ3QTNBQTE5NjM4MTFDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNzcwMUZCRjRBOUM5QjU1OTg4OEYwMjY1NjQ0N0EzQUExOTYz ODExQy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNjEzMmE3NDAtYmQ3ZC00NmI4LWIx MGEtYTdhNzAzZTM1MGYyLzAvNzcwMUZCRjRBOUM5QjU1OTg4OEYwMjY1NjQ0N0Ez QUExOTYzODExQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALDLkj6Mmoc4y1lxTWncjJQ3dzAM+M0lRwM9 mg21pXQVn9XZQDpRQNQCNxhyeAL6i+YO95f53jkMPzo5tJwSsXgDBFP3fRdFyf9b pJ66GaNgaQV5VbkU0sB1rQj5HMaDBH7/KMfhrZBTgk5g9FkSQg+0GGUAva7gVV9n dimHMPmKtgRPNfu6F1r5Sm2C89Nxj3q6bU42enKnrez1OWOLbMlrT1nNm0hPMNt/ yC5elVcIZvu0I0om4hvRmJ8kKc5ojPpSJg+5jr5f2+ETFe2IWWaW56DO8+QH8lq1 YumhWV3GDKiM1QRfZjwtdoXu6E226vYCuLBs9/0BJjNQfZyVgJQ= -----END CERTIFICATE-----Generated at Thu Dec 25 00:41:48 2025 by rpki-client