This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/7a0210b3-cca2-43c5-89f9-5a9086a60703/1/DF77061CAEF30A8DAF6B52D8A3D9FD80F3720F11.mft File: DF77061CAEF30A8DAF6B52D8A3D9FD80F3720F11.mft (raw, json) Hash identifier: sdMp3GOrGVm5loB6c8K3EQX1sXCCXMTjS/avGqZXC38= Subject key identifier: 65:5F:C8:BC:07:20:81:77:2E:99:B4:0A:9D:5A:F7:0D:AC:8D:15:41 Authority key identifier: DF:77:06:1C:AE:F3:0A:8D:AF:6B:52:D8:A3:D9:FD:80:F3:72:0F:11 Certificate issuer: /CN=DF77061CAEF30A8DAF6B52D8A3D9FD80F3720F11 Certificate serial: 791B172DEAC0B006F3B6C5D1CB7228055C79A41D Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DF77061CAEF30A8DAF6B52D8A3D9FD80F3720F11.cer Subject info access: rsync://repo-rpki.idnic.net/repo/7a0210b3-cca2-43c5-89f9-5a9086a60703/1/DF77061CAEF30A8DAF6B52D8A3D9FD80F3720F11.mft Manifest number: F3 Signing time: Wed 24 Dec 2025 10:31:12 +0000 Manifest this update: Wed 24 Dec 2025 10:26:12 +0000 Manifest next update: Sat 27 Dec 2025 13:51:12 +0000 Files and hashes: 1: 323030313a6466333a663834303a3a2f34382d3438203d3e20313532383330.roa (hash: 3aMUQeSx+u1/318Y8ScOuCTO+xUE/7Y4RTX6xf+E9CE=) 2: DF77061CAEF30A8DAF6B52D8A3D9FD80F3720F11.crl (hash: 79rhxss+Tusw+OcaaQzDBTrRUSddG9LjLfCLn/WV7ZU=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/7a0210b3-cca2-43c5-89f9-5a9086a60703/1/DF77061CAEF30A8DAF6B52D8A3D9FD80F3720F11.crl rsync://repo-rpki.idnic.net/repo/7a0210b3-cca2-43c5-89f9-5a9086a60703/1/DF77061CAEF30A8DAF6B52D8A3D9FD80F3720F11.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DF77061CAEF30A8DAF6B52D8A3D9FD80F3720F11.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 27 Dec 2025 13:51:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 79:1b:17:2d:ea:c0:b0:06:f3:b6:c5:d1:cb:72:28:05:5c:79:a4:1d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DF77061CAEF30A8DAF6B52D8A3D9FD80F3720F11 Validity Not Before: Dec 24 10:26:12 2025 GMT Not After : Dec 27 13:51:12 2025 GMT Subject: CN=655FC8BC072081772E99B40A9D5AF70DAC8D1541 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:81:aa:5a:c5:56:51:f2:8f:ef:b8:54:5c:e2: eb:d1:a9:7d:23:f9:5b:82:8c:8e:17:96:c0:4a:db: ff:b6:82:bd:29:47:13:0d:02:37:7e:af:b4:4f:8d: 0e:0d:66:f5:ec:a9:0c:84:a6:bc:4e:be:c7:90:91: cc:cf:52:3d:3f:c8:12:ee:f7:85:32:56:ce:f7:40: 3c:ee:0b:fe:be:f0:a8:11:0d:f5:ba:2f:68:8f:37: 37:d1:75:49:b7:63:e2:03:57:43:c4:9f:a7:64:91: f7:04:8b:57:6e:ea:b3:8c:d7:f0:0d:7a:c9:70:9c: e8:70:e5:7c:0b:c7:13:7a:63:fd:8a:1c:da:92:b0: e8:21:e1:41:08:93:df:32:ff:20:6e:8a:45:38:38: 3f:20:74:31:7a:5f:a9:08:2f:da:65:80:7b:c6:a3: 0b:69:64:88:99:3d:cb:5c:d1:65:40:7e:cc:bd:ce: e1:c7:c1:09:b8:db:5c:2d:7a:57:f8:fb:1b:72:c4: 90:ca:7c:25:96:79:e3:0a:06:11:69:fb:99:21:0a: 23:99:4f:dc:81:1f:45:90:c6:90:a2:29:e2:20:b1: b1:eb:cf:3a:9c:0a:38:11:b4:6c:65:eb:56:2f:bf: a0:c5:b2:ab:81:f0:b0:06:21:13:84:a2:55:50:ad: 5c:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:5F:C8:BC:07:20:81:77:2E:99:B4:0A:9D:5A:F7:0D:AC:8D:15:41 X509v3 Authority Key Identifier: keyid:DF:77:06:1C:AE:F3:0A:8D:AF:6B:52:D8:A3:D9:FD:80:F3:72:0F:11 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/7a0210b3-cca2-43c5-89f9-5a9086a60703/1/DF77061CAEF30A8DAF6B52D8A3D9FD80F3720F11.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DF77061CAEF30A8DAF6B52D8A3D9FD80F3720F11.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7a0210b3-cca2-43c5-89f9-5a9086a60703/1/DF77061CAEF30A8DAF6B52D8A3D9FD80F3720F11.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 93:b9:1c:49:71:ea:aa:ad:2e:46:7c:00:21:f2:06:16:a4:e9: 60:87:c8:7f:3e:54:72:bf:7b:1b:95:90:5e:7e:da:4c:20:bd: 08:9d:3a:9e:d1:0c:3b:0e:e9:0e:33:43:09:11:63:2b:e3:24: e8:91:c1:60:88:06:3f:c7:cd:45:64:ca:0e:88:c6:ae:6a:00: 28:0d:9f:76:b1:88:f9:bc:73:ef:53:79:43:07:d4:df:c3:16: 14:cc:50:90:a8:4c:56:3f:e8:f0:9e:15:b4:ea:3a:1e:b8:65: 05:c1:08:e2:44:f9:14:34:73:d7:ef:5f:ba:c2:fc:4c:b0:f2: 64:fb:7b:f5:35:03:9e:24:09:0b:da:97:70:65:ac:8e:48:e4: 7f:37:74:0b:d3:ac:3f:e7:95:28:1e:ca:d5:3b:2f:bb:fa:16: 07:49:a5:2a:80:ef:05:db:62:b8:6c:fc:7a:33:ba:3a:26:f2: 4a:8e:fe:1f:85:04:d9:a7:9b:ff:e0:e2:66:f8:19:67:36:1f: 90:ab:95:7d:a3:2e:8b:b0:b5:0c:56:6b:b1:d0:bc:7e:99:73: 9c:38:b2:19:15:ba:a7:0e:71:b7:53:e7:fc:69:03:c2:c8:22: 03:6a:1f:2e:50:86:36:be:6b:7c:20:01:3f:ca:3e:7e:71:94: 73:8d:f1:0f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUeRsXLerAsAbztsXRy3IoBVx5pB0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoREY3NzA2MUNBRUYzMEE4REFGNkI1MkQ4QTNEOUZEODBG MzcyMEYxMTAeFw0yNTEyMjQxMDI2MTJaFw0yNTEyMjcxMzUxMTJaMDMxMTAvBgNV BAMTKDY1NUZDOEJDMDcyMDgxNzcyRTk5QjQwQTlENUFGNzBEQUM4RDE1NDEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDDgapaxVZR8o/vuFRc4uvRqX0j +VuCjI4XlsBK2/+2gr0pRxMNAjd+r7RPjQ4NZvXsqQyEprxOvseQkczPUj0/yBLu 94UyVs73QDzuC/6+8KgRDfW6L2iPNzfRdUm3Y+IDV0PEn6dkkfcEi1du6rOM1/AN eslwnOhw5XwLxxN6Y/2KHNqSsOgh4UEIk98y/yBuikU4OD8gdDF6X6kIL9plgHvG owtpZIiZPctc0WVAfsy9zuHHwQm421wtelf4+xtyxJDKfCWWeeMKBhFp+5khCiOZ T9yBH0WQxpCiKeIgsbHrzzqcCjgRtGxl61Yvv6DFsquB8LAGIROEolVQrVx/AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUZV/IvAcggXcumbQKnVr3DayNFUEwHwYDVR0j BBgwFoAU33cGHK7zCo2va1LYo9n9gPNyDxEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 YTAyMTBiMy1jY2EyLTQzYzUtODlmOS01YTkwODZhNjA3MDMvMS9ERjc3MDYxQ0FF RjMwQThEQUY2QjUyRDhBM0Q5RkQ4MEYzNzIwRjExLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvREY3NzA2MUNBRUYzMEE4REFGNkI1MkQ4QTNEOUZEODBGMzcy MEYxMS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vN2EwMjEwYjMtY2NhMi00M2M1LTg5 ZjktNWE5MDg2YTYwNzAzLzEvREY3NzA2MUNBRUYzMEE4REFGNkI1MkQ4QTNEOUZE ODBGMzcyMEYxMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJO5HElx6qqtLkZ8ACHyBhak6WCHyH8+VHK/ exuVkF5+2kwgvQidOp7RDDsO6Q4zQwkRYyvjJOiRwWCIBj/HzUVkyg6Ixq5qACgN n3axiPm8c+9TeUMH1N/DFhTMUJCoTFY/6PCeFbTqOh64ZQXBCOJE+RQ0c9fvX7rC /Eyw8mT7e/U1A54kCQval3BlrI5I5H83dAvTrD/nlSgeytU7L7v6FgdJpSqA7wXb Yrhs/Hozujom8kqO/h+FBNmnm//g4mb4GWc2H5CrlX2jLouwtQxWa7HQvH6Zc5w4 shkVuqcOcbdT5/xpA8LIIgNqHy5Qhja+a3wgAT/KPn5xlHON8Q8= -----END CERTIFICATE-----Generated at Wed Dec 24 22:05:56 2025 by rpki-client