This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/6ff8f4ab-1ab8-4894-b758-d9bce3803e4c/0/DD77382BD9E8634AEF9E93D763B0149D915502F5.mft File: DD77382BD9E8634AEF9E93D763B0149D915502F5.mft (raw, json) Hash identifier: ChZBqkW6Ur7koqhhhBj9iwsYN552HLWMjnV9EfVod4I= Subject key identifier: 69:9F:40:A1:21:F1:90:D9:97:79:D3:4C:BD:3E:7B:18:73:AA:67:B2 Authority key identifier: DD:77:38:2B:D9:E8:63:4A:EF:9E:93:D7:63:B0:14:9D:91:55:02:F5 Certificate issuer: /CN=DD77382BD9E8634AEF9E93D763B0149D915502F5 Certificate serial: 523F4CADDE61940E36229F0C91DDF8A61C79F42D Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DD77382BD9E8634AEF9E93D763B0149D915502F5.cer Subject info access: rsync://repo-rpki.idnic.net/repo/6ff8f4ab-1ab8-4894-b758-d9bce3803e4c/0/DD77382BD9E8634AEF9E93D763B0149D915502F5.mft Manifest number: 040C Signing time: Fri 19 Dec 2025 03:41:58 +0000 Manifest this update: Fri 19 Dec 2025 03:36:58 +0000 Manifest next update: Mon 22 Dec 2025 13:16:58 +0000 Files and hashes: 1: 3130332e3135352e3136382e302f32342d3234203d3e20313431303635.roa (hash: K3vShF0D9bPRn6sv5SW8yGmWNIRGvlLBsD0vPKS9a4E=) 2: DD77382BD9E8634AEF9E93D763B0149D915502F5.crl (hash: 37fQKH8BCu5OqhTj/kClgtYf2id8/+PxwOJ2NfZc/LE=) 3: 3130332e3135352e3136382e302f32332d3233203d3e20313431303635.roa (hash: Y/t7s83TrJfcnDGlxRGeWKMHBRcUwBBITgOCbUYiXEc=) 4: 3130332e3135352e3136392e302f32342d3234203d3e20313431303635.roa (hash: c3TzylCEjs5xy8RF441nXx1uAnBKNVsy3aYQ1eehMFs=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/6ff8f4ab-1ab8-4894-b758-d9bce3803e4c/0/DD77382BD9E8634AEF9E93D763B0149D915502F5.crl rsync://repo-rpki.idnic.net/repo/6ff8f4ab-1ab8-4894-b758-d9bce3803e4c/0/DD77382BD9E8634AEF9E93D763B0149D915502F5.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DD77382BD9E8634AEF9E93D763B0149D915502F5.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 22 Dec 2025 13:16:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 52:3f:4c:ad:de:61:94:0e:36:22:9f:0c:91:dd:f8:a6:1c:79:f4:2d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DD77382BD9E8634AEF9E93D763B0149D915502F5 Validity Not Before: Dec 19 03:36:58 2025 GMT Not After : Dec 22 13:16:58 2025 GMT Subject: CN=699F40A121F190D99779D34CBD3E7B1873AA67B2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:db:65:a9:2c:39:ba:86:87:73:6f:75:4f:b4: e0:fe:6d:1c:ba:27:98:ff:08:e1:59:71:80:2c:74: 4d:99:1b:8f:3e:84:50:d6:ef:2f:4e:93:df:5c:7e: 55:65:b1:04:0f:5e:47:73:f2:9e:94:05:9d:24:60: 7e:36:90:de:d4:29:c0:86:d0:58:f0:18:e7:3b:04: 50:6d:6d:2b:56:c2:2b:aa:a5:86:0f:e7:cf:56:03: 93:e8:cc:02:8d:8a:14:7e:92:b8:58:2b:38:23:e0: 97:db:6f:c9:36:75:42:78:99:8f:4f:70:7d:6d:aa: f9:58:43:46:a0:59:6e:a7:c1:52:f7:ea:6b:53:dc: f9:d1:00:0d:7f:08:2a:8b:52:62:c2:5f:66:e1:9c: da:08:39:7d:8c:e5:bc:33:ad:8d:b5:76:b2:bc:4c: 8a:93:ba:2b:3c:70:63:e5:1e:54:f0:e5:30:f8:99: d6:b7:dd:4b:80:fd:2d:f2:08:32:53:52:c6:ed:4a: 13:98:4a:97:27:b9:9a:7f:6b:53:1b:38:5f:0a:6d: cb:d4:4c:7a:1d:02:87:e7:08:d3:b0:f5:7d:1f:c2: 4b:ce:81:21:0e:19:03:c2:9e:61:e8:aa:05:c7:20: 90:ca:02:83:bc:59:85:21:2a:8a:1b:a8:3d:98:76: 45:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 69:9F:40:A1:21:F1:90:D9:97:79:D3:4C:BD:3E:7B:18:73:AA:67:B2 X509v3 Authority Key Identifier: keyid:DD:77:38:2B:D9:E8:63:4A:EF:9E:93:D7:63:B0:14:9D:91:55:02:F5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/6ff8f4ab-1ab8-4894-b758-d9bce3803e4c/0/DD77382BD9E8634AEF9E93D763B0149D915502F5.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DD77382BD9E8634AEF9E93D763B0149D915502F5.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/6ff8f4ab-1ab8-4894-b758-d9bce3803e4c/0/DD77382BD9E8634AEF9E93D763B0149D915502F5.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 73:a3:bc:8d:c2:82:b1:c9:0f:d5:fe:dc:8d:6b:08:bc:4a:95: 79:56:08:ac:a0:59:5b:1f:17:4b:11:03:3c:0c:e7:41:42:70: fc:f0:30:bd:77:26:85:30:25:cb:67:ca:4d:df:f0:87:fe:55: 59:7d:c1:c6:95:6c:00:3d:20:0a:12:35:3a:75:5a:f2:1a:4e: 95:19:e1:54:a9:49:0b:9b:1e:37:7e:9d:2b:42:41:38:fc:f4: d8:37:b5:fa:85:cd:62:14:f7:1f:aa:df:9b:91:29:e7:d0:94: d2:d0:b4:5b:37:7c:8a:03:a3:15:0b:a9:36:41:b6:b6:81:3f: 52:81:19:d8:78:f4:19:57:12:74:59:17:ff:2c:17:ac:23:2a: 6d:5f:a4:2b:30:31:6c:f0:db:eb:22:9e:80:6c:b8:2c:d8:87: d0:ab:22:a6:eb:3e:16:7b:d9:98:56:5f:72:99:05:75:ba:3c: 1f:c5:10:c6:d9:fb:81:e3:a9:c0:b7:e8:a8:cc:3d:fd:7d:a3: 05:c0:37:ff:40:1e:ee:29:40:8b:c4:37:c7:01:a7:d6:78:73: 6d:7d:98:c8:3e:c3:9f:95:7c:9f:9d:1a:01:e7:16:bb:52:04: ce:f6:d5:b2:35:ed:e5:f4:5c:53:e4:97:21:3d:1d:ce:86:b0: 67:67:c0:77 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUUj9Mrd5hlA42Ip8Mkd34phx59C0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoREQ3NzM4MkJEOUU4NjM0QUVGOUU5M0Q3NjNCMDE0OUQ5 MTU1MDJGNTAeFw0yNTEyMTkwMzM2NThaFw0yNTEyMjIxMzE2NThaMDMxMTAvBgNV BAMTKDY5OUY0MEExMjFGMTkwRDk5Nzc5RDM0Q0JEM0U3QjE4NzNBQTY3QjIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDL22WpLDm6hodzb3VPtOD+bRy6 J5j/COFZcYAsdE2ZG48+hFDW7y9Ok99cflVlsQQPXkdz8p6UBZ0kYH42kN7UKcCG 0FjwGOc7BFBtbStWwiuqpYYP589WA5PozAKNihR+krhYKzgj4Jfbb8k2dUJ4mY9P cH1tqvlYQ0agWW6nwVL36mtT3PnRAA1/CCqLUmLCX2bhnNoIOX2M5bwzrY21drK8 TIqTuis8cGPlHlTw5TD4mda33UuA/S3yCDJTUsbtShOYSpcnuZp/a1MbOF8KbcvU THodAofnCNOw9X0fwkvOgSEOGQPCnmHoqgXHIJDKAoO8WYUhKoobqD2YdkXhAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUaZ9AoSHxkNmXedNMvT57GHOqZ7IwHwYDVR0j BBgwFoAU3Xc4K9noY0rvnpPXY7AUnZFVAvUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 ZmY4ZjRhYi0xYWI4LTQ4OTQtYjc1OC1kOWJjZTM4MDNlNGMvMC9ERDc3MzgyQkQ5 RTg2MzRBRUY5RTkzRDc2M0IwMTQ5RDkxNTUwMkY1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvREQ3NzM4MkJEOUU4NjM0QUVGOUU5M0Q3NjNCMDE0OUQ5MTU1 MDJGNS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNmZmOGY0YWItMWFiOC00ODk0LWI3 NTgtZDliY2UzODAzZTRjLzAvREQ3NzM4MkJEOUU4NjM0QUVGOUU5M0Q3NjNCMDE0 OUQ5MTU1MDJGNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHOjvI3CgrHJD9X+3I1rCLxKlXlWCKygWVsf F0sRAzwM50FCcPzwML13JoUwJctnyk3f8If+VVl9wcaVbAA9IAoSNTp1WvIaTpUZ 4VSpSQubHjd+nStCQTj89Ng3tfqFzWIU9x+q35uRKefQlNLQtFs3fIoDoxULqTZB traBP1KBGdh49BlXEnRZF/8sF6wjKm1fpCswMWzw2+sinoBsuCzYh9CrIqbrPhZ7 2ZhWX3KZBXW6PB/FEMbZ+4HjqcC36KjMPf19owXAN/9AHu4pQIvEN8cBp9Z4c219 mMg+w5+VfJ+dGgHnFrtSBM721bI17eX0XFPklyE9Hc6GsGdnwHc= -----END CERTIFICATE-----Generated at Sun Dec 21 20:54:49 2025 by rpki-client