This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/fe4ace11-9139-4485-aba9-04beddc5bc26/0/977D89E37F6F6C3815B2BC731E694AB878F26F30.mft File: 977D89E37F6F6C3815B2BC731E694AB878F26F30.mft (raw, json) Hash identifier: uVeg2u09tkN06zI25COQk72vJSA3G6V7+D4Y+GUukIg= Subject key identifier: 73:52:94:81:B3:70:C3:62:6E:DD:F2:85:2B:5B:17:71:FC:E4:6E:77 Authority key identifier: 97:7D:89:E3:7F:6F:6C:38:15:B2:BC:73:1E:69:4A:B8:78:F2:6F:30 Certificate issuer: /CN=977D89E37F6F6C3815B2BC731E694AB878F26F30 Certificate serial: 7BF17513B25B7786F700058DD0AC4283B7BF3F76 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/977D89E37F6F6C3815B2BC731E694AB878F26F30.cer Subject info access: rsync://repo-rpki.idnic.net/repo/fe4ace11-9139-4485-aba9-04beddc5bc26/0/977D89E37F6F6C3815B2BC731E694AB878F26F30.mft Manifest number: 01FA Signing time: Sun 28 Dec 2025 16:21:20 +0000 Manifest this update: Sun 28 Dec 2025 16:16:20 +0000 Manifest next update: Wed 31 Dec 2025 16:55:20 +0000 Files and hashes: 1: 3130332e33312e34322e302f32332d3233203d3e2039333431.roa (hash: stIIdICFAUmmjPJbZPuus0zTsstOOiSfpPEmNfACiJs=) 2: 977D89E37F6F6C3815B2BC731E694AB878F26F30.crl (hash: U9AlvAOLSUJ96d3MCkHv/r1aqu2uWBMX6OPpjfDcCHE=) 3: 3130332e33312e34332e302f32342d3234203d3e2039333431.roa (hash: uM0XA0AM+x7njeHld4x4WvIPIQYCBW6QBEs97/wT47g=) 4: 3130332e33312e34322e302f32342d3234203d3e2039333431.roa (hash: j8MhQFCNNpgWTqqvo4wUA4sj1OS1sCETyG/kmulGJXY=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/fe4ace11-9139-4485-aba9-04beddc5bc26/0/977D89E37F6F6C3815B2BC731E694AB878F26F30.crl rsync://repo-rpki.idnic.net/repo/fe4ace11-9139-4485-aba9-04beddc5bc26/0/977D89E37F6F6C3815B2BC731E694AB878F26F30.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/977D89E37F6F6C3815B2BC731E694AB878F26F30.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 31 Dec 2025 16:55:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7b:f1:75:13:b2:5b:77:86:f7:00:05:8d:d0:ac:42:83:b7:bf:3f:76 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=977D89E37F6F6C3815B2BC731E694AB878F26F30 Validity Not Before: Dec 28 16:16:20 2025 GMT Not After : Dec 31 16:55:20 2025 GMT Subject: CN=73529481B370C3626EDDF2852B5B1771FCE46E77 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f3:bc:b0:70:0c:79:95:94:60:2a:3a:0e:be:be: 03:6c:ab:9d:be:bc:04:5a:a6:98:e5:85:c1:d4:ad: 06:cc:15:85:34:54:e5:62:45:c8:38:ce:f3:de:89: 49:48:72:b1:5d:73:56:1c:ec:ac:7b:53:5d:5c:85: a0:08:f0:5d:c4:c7:48:3a:6e:16:58:9e:92:fc:fb: d6:51:a8:ac:c8:13:bf:0e:8b:e8:ad:9d:b6:e4:97: 42:2e:c5:9c:86:12:d0:e4:97:d9:f0:a6:ea:34:04: d4:4b:bd:65:d0:3f:91:3a:47:d6:b6:75:52:64:bb: 10:0b:96:3f:05:ad:7d:35:ec:ee:75:87:a3:9c:6a: 1a:ee:36:52:2b:25:ca:d5:1d:a6:7b:99:f3:fc:ea: 5c:0a:49:56:c0:e5:39:f8:b0:39:78:37:54:03:ce: 4f:47:97:24:9a:ed:66:21:7c:ca:4f:cd:a4:df:f5: 98:41:b4:53:b6:b5:14:4d:1c:f6:49:1f:77:fd:a8: 7d:7e:8c:6e:e3:7e:a4:d6:98:2b:0e:56:64:e6:8a: 8f:b3:c2:ba:3d:51:e6:8a:d8:d3:0c:ce:ee:b7:96: de:1a:bb:20:36:59:21:01:ce:38:f9:64:cc:a5:83: 01:a8:7b:81:71:fa:d0:cd:0f:06:1a:85:94:30:c2: 6d:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 73:52:94:81:B3:70:C3:62:6E:DD:F2:85:2B:5B:17:71:FC:E4:6E:77 X509v3 Authority Key Identifier: keyid:97:7D:89:E3:7F:6F:6C:38:15:B2:BC:73:1E:69:4A:B8:78:F2:6F:30 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/fe4ace11-9139-4485-aba9-04beddc5bc26/0/977D89E37F6F6C3815B2BC731E694AB878F26F30.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/977D89E37F6F6C3815B2BC731E694AB878F26F30.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/fe4ace11-9139-4485-aba9-04beddc5bc26/0/977D89E37F6F6C3815B2BC731E694AB878F26F30.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 97:6e:bf:a9:fb:c4:b6:7f:30:ae:3e:16:a0:fd:9d:97:17:9b: 46:6b:2f:5d:e6:2d:b9:0d:0e:b7:b1:4b:2d:c1:f2:e3:e9:38: 72:67:3d:cc:53:9d:43:0e:61:33:a4:b1:35:77:db:bd:b4:ff: d6:c5:1b:f4:98:21:9b:64:69:3f:0d:be:69:88:7f:08:71:00: 9a:e5:de:73:5f:c4:81:e5:54:d9:45:f1:d1:ed:92:2e:a5:ac: cb:27:ea:3d:ad:fe:a5:8c:07:55:19:ea:bf:01:ca:9e:16:4c: fb:95:e2:d4:58:45:8e:bc:61:37:f4:9e:87:1f:2c:b3:d2:35: d1:d4:c1:1d:86:ab:10:42:d6:06:58:83:7a:6b:10:5e:3c:99: 7b:26:59:f3:4f:12:a6:be:6f:ff:c9:93:34:ca:0d:8d:d4:2d: 8f:bc:87:9d:c2:b7:5a:1d:42:b4:65:bd:bf:eb:8e:d2:f6:2c: 24:c9:d6:42:02:96:8e:e4:91:c6:2a:19:25:01:42:7b:b3:44: 15:d8:49:c5:7d:8f:79:54:75:9f:54:d8:94:08:4f:d8:b5:a8: 53:c9:39:da:02:65:9a:07:4f:48:61:e6:8f:f8:59:d6:d6:ac: d6:17:b5:e9:a7:c9:6e:4c:50:f4:64:7a:36:1c:bc:22:1c:06: ba:1d:6d:f6 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUe/F1E7Jbd4b3AAWN0KxCg7e/P3YwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTc3RDg5RTM3RjZGNkMzODE1QjJCQzczMUU2OTRBQjg3 OEYyNkYzMDAeFw0yNTEyMjgxNjE2MjBaFw0yNTEyMzExNjU1MjBaMDMxMTAvBgNV BAMTKDczNTI5NDgxQjM3MEMzNjI2RURERjI4NTJCNUIxNzcxRkNFNDZFNzcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDzvLBwDHmVlGAqOg6+vgNsq52+ vARappjlhcHUrQbMFYU0VOViRcg4zvPeiUlIcrFdc1Yc7Kx7U11chaAI8F3Ex0g6 bhZYnpL8+9ZRqKzIE78Oi+itnbbkl0IuxZyGEtDkl9nwpuo0BNRLvWXQP5E6R9a2 dVJkuxALlj8FrX017O51h6OcahruNlIrJcrVHaZ7mfP86lwKSVbA5Tn4sDl4N1QD zk9HlySa7WYhfMpPzaTf9ZhBtFO2tRRNHPZJH3f9qH1+jG7jfqTWmCsOVmTmio+z wro9UeaK2NMMzu63lt4auyA2WSEBzjj5ZMylgwGoe4Fx+tDNDwYahZQwwm1bAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUc1KUgbNww2Ju3fKFK1sXcfzkbncwHwYDVR0j BBgwFoAUl32J439vbDgVsrxzHmlKuHjybzAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m ZTRhY2UxMS05MTM5LTQ0ODUtYWJhOS0wNGJlZGRjNWJjMjYvMC85NzdEODlFMzdG NkY2QzM4MTVCMkJDNzMxRTY5NEFCODc4RjI2RjMwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOTc3RDg5RTM3RjZGNkMzODE1QjJCQzczMUU2OTRBQjg3OEYy NkYzMC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZmU0YWNlMTEtOTEzOS00NDg1LWFi YTktMDRiZWRkYzViYzI2LzAvOTc3RDg5RTM3RjZGNkMzODE1QjJCQzczMUU2OTRB Qjg3OEYyNkYzMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJduv6n7xLZ/MK4+FqD9nZcXm0ZrL13mLbkN DrexSy3B8uPpOHJnPcxTnUMOYTOksTV32720/9bFG/SYIZtkaT8NvmmIfwhxAJrl 3nNfxIHlVNlF8dHtki6lrMsn6j2t/qWMB1UZ6r8Byp4WTPuV4tRYRY68YTf0nocf LLPSNdHUwR2GqxBC1gZYg3prEF48mXsmWfNPEqa+b//JkzTKDY3ULY+8h53Ct1od QrRlvb/rjtL2LCTJ1kIClo7kkcYqGSUBQnuzRBXYScV9j3lUdZ9U2JQIT9i1qFPJ OdoCZZoHT0hh5o/4WdbWrNYXtemnyW5MUPRkejYcvCIcBrodbfY= -----END CERTIFICATE-----Generated at Tue Dec 30 08:53:13 2025 by rpki-client