This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/c350f078-c535-4f8e-960f-32c1623aa4b1/0/9B77D523EDC2218C65DAB55B4538140243B7E862.mft File: 9B77D523EDC2218C65DAB55B4538140243B7E862.mft (raw, json) Hash identifier: BTWQibXLZEcvRDfNiq8sqTAm1z0whE7rwDP3zCs5bZA= Subject key identifier: C7:B5:E1:ED:1C:B8:C1:43:12:8F:C0:23:1E:C8:DB:D5:BE:E3:75:74 Authority key identifier: 9B:77:D5:23:ED:C2:21:8C:65:DA:B5:5B:45:38:14:02:43:B7:E8:62 Certificate issuer: /CN=9B77D523EDC2218C65DAB55B4538140243B7E862 Certificate serial: 3E66169ECFCA92434AB3EF433D728FA77F6452DE Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9B77D523EDC2218C65DAB55B4538140243B7E862.cer Subject info access: rsync://repo-rpki.idnic.net/repo/c350f078-c535-4f8e-960f-32c1623aa4b1/0/9B77D523EDC2218C65DAB55B4538140243B7E862.mft Manifest number: 0232 Signing time: Fri 19 Dec 2025 00:01:41 +0000 Manifest this update: Thu 18 Dec 2025 23:56:41 +0000 Manifest next update: Mon 22 Dec 2025 09:44:41 +0000 Files and hashes: 1: 9B77D523EDC2218C65DAB55B4538140243B7E862.crl (hash: nUVAMHe5XCI9+DnaKPNZaFdEEaF4UKmBic3/BxL98ac=) 2: 3130332e3137342e39302e302f32332d3234203d3e203338333230.roa (hash: qWPS0N/te+MWks31pquZu9fK7Gl6gv7U+N0yk9Foipw=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/c350f078-c535-4f8e-960f-32c1623aa4b1/0/9B77D523EDC2218C65DAB55B4538140243B7E862.crl rsync://repo-rpki.idnic.net/repo/c350f078-c535-4f8e-960f-32c1623aa4b1/0/9B77D523EDC2218C65DAB55B4538140243B7E862.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9B77D523EDC2218C65DAB55B4538140243B7E862.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 22 Dec 2025 09:44:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3e:66:16:9e:cf:ca:92:43:4a:b3:ef:43:3d:72:8f:a7:7f:64:52:de Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9B77D523EDC2218C65DAB55B4538140243B7E862 Validity Not Before: Dec 18 23:56:41 2025 GMT Not After : Dec 22 09:44:41 2025 GMT Subject: CN=C7B5E1ED1CB8C143128FC0231EC8DBD5BEE37574 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:00:0f:46:73:aa:48:83:e5:8d:70:47:67:4b: f1:96:55:6b:02:5f:71:6c:b8:e8:44:f5:3b:2f:e4: 65:61:88:36:e9:0b:88:9d:b6:4b:e3:c0:a8:4c:a0: 0c:9a:b0:02:9a:13:8d:7f:1e:f1:d4:42:28:6d:65: 59:84:2c:5a:12:5c:c5:e0:e2:97:af:b9:8d:51:1a: d5:5d:9f:82:92:41:f6:2b:03:9d:f8:0d:c5:62:e8: a4:4f:79:a8:c5:e4:b0:e7:0c:d4:a5:6c:91:bf:5e: 8b:f2:f1:62:8c:9e:23:7a:fd:1b:a5:5a:19:36:96: 71:a7:d7:06:cf:59:2a:c0:1d:75:0e:e9:93:6f:16: 55:3c:62:95:0c:bd:bc:d7:da:0c:de:7c:a8:18:cf: 26:49:ea:93:a1:2a:75:17:5a:a4:c1:59:6d:1d:25: 45:76:47:43:3d:42:a5:b4:b4:f2:7f:c2:b0:0f:ce: 54:b0:4c:41:24:49:81:66:98:e7:8a:76:06:c9:5b: f5:a5:2b:6f:a3:29:06:f5:7e:c2:b8:2c:cd:10:76: af:7e:34:f6:a0:54:0a:79:21:23:dd:99:56:20:6f: 2f:11:34:9e:89:17:12:ad:dc:2e:4a:46:a8:e9:9d: 7b:ea:2b:40:02:16:42:cf:3d:fb:2d:3a:71:9f:55: 13:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:B5:E1:ED:1C:B8:C1:43:12:8F:C0:23:1E:C8:DB:D5:BE:E3:75:74 X509v3 Authority Key Identifier: keyid:9B:77:D5:23:ED:C2:21:8C:65:DA:B5:5B:45:38:14:02:43:B7:E8:62 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/c350f078-c535-4f8e-960f-32c1623aa4b1/0/9B77D523EDC2218C65DAB55B4538140243B7E862.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9B77D523EDC2218C65DAB55B4538140243B7E862.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c350f078-c535-4f8e-960f-32c1623aa4b1/0/9B77D523EDC2218C65DAB55B4538140243B7E862.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 87:99:52:38:42:fa:76:7f:d7:01:6c:9d:fc:a6:f7:18:54:04: c3:51:61:2a:3e:62:54:7f:8c:bd:a8:c9:ca:5b:46:67:fb:47: 9c:3f:18:7b:a3:4f:c4:dc:60:af:8e:0a:cd:d6:16:6a:77:d4: f0:d1:d4:f8:26:2b:2a:bd:20:1c:45:d2:ea:61:c9:3b:b5:4f: 57:af:29:d7:96:44:4d:6f:bc:05:a3:98:cf:f8:35:a0:9d:b4: 15:79:d3:7d:59:13:84:15:8e:39:73:7d:5f:79:28:56:12:cf: c4:0e:59:3e:12:c2:1c:d1:8e:16:9b:e7:11:6c:fa:d0:82:25: 25:5f:1f:5a:fa:cb:43:8c:2a:40:32:dc:cd:59:20:0d:0e:20: ef:50:19:00:86:d4:f1:bf:81:8f:89:59:3a:21:28:ff:f2:6e: 5c:b7:bb:ac:6b:46:1c:c8:b7:24:0e:c6:63:79:4b:21:30:bf: 22:2d:68:81:e8:70:a7:8d:71:26:ae:fc:fd:6e:69:cc:48:69: 46:a1:e2:44:cc:17:86:ac:67:49:27:d0:d5:8d:07:6e:d7:a9: 32:dd:4c:f1:bc:92:d7:ef:cc:03:44:54:94:2f:25:c2:02:4f: 21:93:bc:ae:aa:d4:8f:88:ba:62:88:9f:e9:f9:9f:9b:df:64: ca:c8:b0:3e -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUPmYWns/KkkNKs+9DPXKPp39kUt4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUI3N0Q1MjNFREMyMjE4QzY1REFCNTVCNDUzODE0MDI0 M0I3RTg2MjAeFw0yNTEyMTgyMzU2NDFaFw0yNTEyMjIwOTQ0NDFaMDMxMTAvBgNV BAMTKEM3QjVFMUVEMUNCOEMxNDMxMjhGQzAyMzFFQzhEQkQ1QkVFMzc1NzQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCzAA9Gc6pIg+WNcEdnS/GWVWsC X3FsuOhE9Tsv5GVhiDbpC4idtkvjwKhMoAyasAKaE41/HvHUQihtZVmELFoSXMXg 4pevuY1RGtVdn4KSQfYrA534DcVi6KRPeajF5LDnDNSlbJG/Xovy8WKMniN6/Rul Whk2lnGn1wbPWSrAHXUO6ZNvFlU8YpUMvbzX2gzefKgYzyZJ6pOhKnUXWqTBWW0d JUV2R0M9QqW0tPJ/wrAPzlSwTEEkSYFmmOeKdgbJW/WlK2+jKQb1fsK4LM0Qdq9+ NPagVAp5ISPdmVYgby8RNJ6JFxKt3C5KRqjpnXvqK0ACFkLPPfstOnGfVRMJAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUx7Xh7Ry4wUMSj8AjHsjb1b7jdXQwHwYDVR0j BBgwFoAUm3fVI+3CIYxl2rVbRTgUAkO36GIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j MzUwZjA3OC1jNTM1LTRmOGUtOTYwZi0zMmMxNjIzYWE0YjEvMC85Qjc3RDUyM0VE QzIyMThDNjVEQUI1NUI0NTM4MTQwMjQzQjdFODYyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOUI3N0Q1MjNFREMyMjE4QzY1REFCNTVCNDUzODE0MDI0M0I3 RTg2Mi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYzM1MGYwNzgtYzUzNS00ZjhlLTk2 MGYtMzJjMTYyM2FhNGIxLzAvOUI3N0Q1MjNFREMyMjE4QzY1REFCNTVCNDUzODE0 MDI0M0I3RTg2Mi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIeZUjhC+nZ/1wFsnfym9xhUBMNRYSo+YlR/ jL2oycpbRmf7R5w/GHujT8TcYK+OCs3WFmp31PDR1PgmKyq9IBxF0uphyTu1T1ev KdeWRE1vvAWjmM/4NaCdtBV5031ZE4QVjjlzfV95KFYSz8QOWT4SwhzRjhab5xFs +tCCJSVfH1r6y0OMKkAy3M1ZIA0OIO9QGQCG1PG/gY+JWTohKP/ybly3u6xrRhzI tyQOxmN5SyEwvyItaIHocKeNcSau/P1uacxIaUah4kTMF4asZ0kn0NWNB27XqTLd TPG8ktfvzANEVJQvJcICTyGTvK6q1I+IumKIn+n5n5vfZMrIsD4= -----END CERTIFICATE-----Generated at Sat Dec 20 19:46:01 2025 by rpki-client