This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/8988c0f2-2800-48da-a83e-ab54df65c574/0/977EA5118551E98AEAA8BB11C9D99D7196D3DEBA.mft File: 977EA5118551E98AEAA8BB11C9D99D7196D3DEBA.mft (raw, json) Hash identifier: P14Fnzi3yLcSLyuT3oXlT6NgULCQRiV6wj/nJdAokF8= Subject key identifier: 27:EB:34:CD:ED:EC:DC:07:70:BB:DB:A5:57:B3:1D:67:52:A5:9C:CB Authority key identifier: 97:7E:A5:11:85:51:E9:8A:EA:A8:BB:11:C9:D9:9D:71:96:D3:DE:BA Certificate issuer: /CN=977EA5118551E98AEAA8BB11C9D99D7196D3DEBA Certificate serial: 7593AA3B24FA2459EB2C8477FC20BC3A471B9C21 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/977EA5118551E98AEAA8BB11C9D99D7196D3DEBA.cer Subject info access: rsync://repo-rpki.idnic.net/repo/8988c0f2-2800-48da-a83e-ab54df65c574/0/977EA5118551E98AEAA8BB11C9D99D7196D3DEBA.mft Manifest number: 0537 Signing time: Sat 27 Dec 2025 05:21:14 +0000 Manifest this update: Sat 27 Dec 2025 05:16:14 +0000 Manifest next update: Tue 30 Dec 2025 08:38:14 +0000 Files and hashes: 1: 3130332e3132332e3130382e302f32342d3234203d3e20313338303636.roa (hash: q9pcjfkInqPcGghxGeh0wF/8x9n+wp0JshUKi76J40w=) 2: 977EA5118551E98AEAA8BB11C9D99D7196D3DEBA.crl (hash: 5jdtNTZ/Y3Nujk841jPj9wp/Nq2C0Op8SNSYzSHQcTI=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/8988c0f2-2800-48da-a83e-ab54df65c574/0/977EA5118551E98AEAA8BB11C9D99D7196D3DEBA.crl rsync://repo-rpki.idnic.net/repo/8988c0f2-2800-48da-a83e-ab54df65c574/0/977EA5118551E98AEAA8BB11C9D99D7196D3DEBA.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/977EA5118551E98AEAA8BB11C9D99D7196D3DEBA.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 29 Dec 2025 11:33:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 75:93:aa:3b:24:fa:24:59:eb:2c:84:77:fc:20:bc:3a:47:1b:9c:21 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=977EA5118551E98AEAA8BB11C9D99D7196D3DEBA Validity Not Before: Dec 27 05:16:14 2025 GMT Not After : Dec 30 08:38:14 2025 GMT Subject: CN=27EB34CDEDECDC0770BBDBA557B31D6752A59CCB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:1a:14:8f:c4:e0:03:60:70:c6:97:6f:82:32: bb:45:78:a8:1f:b0:6c:dd:20:c2:2c:0c:a5:16:4a: d9:ec:72:13:43:03:86:8f:34:5a:3e:e5:ed:cf:6c: 38:d7:14:c8:ba:a6:0d:e0:64:eb:c2:b8:6a:87:da: 88:05:ee:92:ee:01:c2:80:4e:52:e0:7c:82:d3:34: 98:37:d9:35:00:b2:43:62:f5:6a:bf:9f:de:aa:ba: 0d:89:a0:cd:82:63:db:d1:43:2b:b2:74:74:ec:63: 48:43:1f:df:7f:1a:bd:fa:28:d0:83:2c:f1:5a:18: 96:cf:9e:9e:21:fe:63:c8:b2:9f:80:cf:2f:67:58: 86:66:cd:eb:e7:0b:7e:66:8f:35:7c:61:b9:40:f3: 66:9f:d0:70:28:fc:db:c6:d9:0d:fd:02:0a:2f:18: 1c:5a:30:06:05:64:86:75:13:12:66:23:08:85:71: 44:41:c5:37:45:74:68:40:a2:d5:e1:ac:d7:2a:70: 2e:91:52:7e:c3:94:11:e9:7c:d3:fd:7c:08:37:3b: e3:4b:c8:22:a7:c9:dc:8e:38:94:4a:c3:c4:1e:db: 0b:81:38:3d:16:6f:67:97:e9:5e:53:84:16:d4:d6: eb:d4:88:39:c7:d2:18:06:1f:01:8d:a7:07:18:96: d8:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 27:EB:34:CD:ED:EC:DC:07:70:BB:DB:A5:57:B3:1D:67:52:A5:9C:CB X509v3 Authority Key Identifier: keyid:97:7E:A5:11:85:51:E9:8A:EA:A8:BB:11:C9:D9:9D:71:96:D3:DE:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/8988c0f2-2800-48da-a83e-ab54df65c574/0/977EA5118551E98AEAA8BB11C9D99D7196D3DEBA.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/977EA5118551E98AEAA8BB11C9D99D7196D3DEBA.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/8988c0f2-2800-48da-a83e-ab54df65c574/0/977EA5118551E98AEAA8BB11C9D99D7196D3DEBA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ef:46:f3:20:4b:ce:93:b2:70:9a:5f:a5:fd:0a:88:9b:41:bc: e4:7f:d0:f5:70:cd:61:b4:b5:ea:de:0a:f9:84:a3:58:b4:b0: 58:31:c5:2d:56:26:d0:d1:0e:ec:a0:fa:a0:58:2e:0a:6a:dd: 5d:74:43:29:3d:bc:27:1b:68:6c:80:ed:c2:ac:d1:6e:03:77: 43:42:59:52:bb:7f:a1:a1:7d:a9:2c:38:97:bc:c0:54:01:83: 54:44:2d:29:f6:63:c7:86:49:98:cc:ce:a7:43:3a:fe:a7:a3: 91:40:81:62:f4:db:2a:19:9e:cf:0e:94:06:7d:3f:6c:60:26: 2e:ad:87:de:55:39:21:5e:36:43:64:3b:85:8b:7e:5e:e6:8f: 7a:b9:2e:80:dc:30:da:e4:54:62:2e:4e:42:29:45:53:80:6f: 5a:24:1b:7d:f5:f9:14:2f:c9:ab:65:9f:ef:64:57:b0:02:82: e8:c6:a7:29:5f:e0:e6:48:0c:5e:de:c9:c2:c5:b5:6d:35:f6: 3d:b4:a7:67:34:51:d0:14:3e:b4:dc:16:d7:1c:b6:d5:61:ad: f2:9c:43:f8:49:5c:c8:23:7f:65:69:64:62:63:8f:90:54:19: 54:9e:a3:4a:13:a7:95:fb:0d:b4:c6:72:cf:a3:ba:78:e3:8e: a2:ed:0c:50 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUdZOqOyT6JFnrLIR3/CC8OkcbnCEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTc3RUE1MTE4NTUxRTk4QUVBQThCQjExQzlEOTlENzE5 NkQzREVCQTAeFw0yNTEyMjcwNTE2MTRaFw0yNTEyMzAwODM4MTRaMDMxMTAvBgNV BAMTKDI3RUIzNENERURFQ0RDMDc3MEJCREJBNTU3QjMxRDY3NTJBNTlDQ0IwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDLGhSPxOADYHDGl2+CMrtFeKgf sGzdIMIsDKUWStnschNDA4aPNFo+5e3PbDjXFMi6pg3gZOvCuGqH2ogF7pLuAcKA TlLgfILTNJg32TUAskNi9Wq/n96qug2JoM2CY9vRQyuydHTsY0hDH99/Gr36KNCD LPFaGJbPnp4h/mPIsp+Azy9nWIZmzevnC35mjzV8YblA82af0HAo/NvG2Q39Agov GBxaMAYFZIZ1ExJmIwiFcURBxTdFdGhAotXhrNcqcC6RUn7DlBHpfNP9fAg3O+NL yCKnydyOOJRKw8Qe2wuBOD0Wb2eX6V5ThBbU1uvUiDnH0hgGHwGNpwcYltipAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUJ+s0ze3s3Adwu9ulV7MdZ1KlnMswHwYDVR0j BBgwFoAUl36lEYVR6YrqqLsRydmdcZbT3rowDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 OTg4YzBmMi0yODAwLTQ4ZGEtYTgzZS1hYjU0ZGY2NWM1NzQvMC85NzdFQTUxMTg1 NTFFOThBRUFBOEJCMTFDOUQ5OUQ3MTk2RDNERUJBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOTc3RUE1MTE4NTUxRTk4QUVBQThCQjExQzlEOTlENzE5NkQz REVCQS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vODk4OGMwZjItMjgwMC00OGRhLWE4 M2UtYWI1NGRmNjVjNTc0LzAvOTc3RUE1MTE4NTUxRTk4QUVBQThCQjExQzlEOTlE NzE5NkQzREVCQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAO9G8yBLzpOycJpfpf0KiJtBvOR/0PVwzWG0 tereCvmEo1i0sFgxxS1WJtDRDuyg+qBYLgpq3V10Qyk9vCcbaGyA7cKs0W4Dd0NC WVK7f6GhfaksOJe8wFQBg1RELSn2Y8eGSZjMzqdDOv6no5FAgWL02yoZns8OlAZ9 P2xgJi6th95VOSFeNkNkO4WLfl7mj3q5LoDcMNrkVGIuTkIpRVOAb1okG331+RQv yatln+9kV7ACgujGpylf4OZIDF7eycLFtW019j20p2c0UdAUPrTcFtccttVhrfKc Q/hJXMgjf2VpZGJjj5BUGVSeo0oTp5X7DbTGcs+junjjjqLtDFA= -----END CERTIFICATE-----Generated at Sun Dec 28 06:41:52 2025 by rpki-client