This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/1d011a1c-a0ad-4d93-86af-3f0aadd9684f/0/FF3F066A5E9AB8F988B8E17C7A56DD2E00A66AD8.mft File: FF3F066A5E9AB8F988B8E17C7A56DD2E00A66AD8.mft (raw, json) Hash identifier: /ntuK+8ixpqyz/UTTxCCDQdee7Gezcnqu3mxjq04sZg= Subject key identifier: F6:28:E6:CA:82:F1:49:61:75:F3:0A:B5:B6:CA:D3:9E:27:7B:87:6F Authority key identifier: FF:3F:06:6A:5E:9A:B8:F9:88:B8:E1:7C:7A:56:DD:2E:00:A6:6A:D8 Certificate issuer: /CN=FF3F066A5E9AB8F988B8E17C7A56DD2E00A66AD8 Certificate serial: 5E91EF66273F6A1B70518C0BA1D6F58EC8AC5A93 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/FF3F066A5E9AB8F988B8E17C7A56DD2E00A66AD8.cer Subject info access: rsync://repo-rpki.idnic.net/repo/1d011a1c-a0ad-4d93-86af-3f0aadd9684f/0/FF3F066A5E9AB8F988B8E17C7A56DD2E00A66AD8.mft Manifest number: FB Signing time: Sun 07 Dec 2025 10:52:27 +0000 Manifest this update: Sun 07 Dec 2025 10:47:27 +0000 Manifest next update: Wed 10 Dec 2025 14:03:27 +0000 Files and hashes: 1: 3135372e31352e38332e302f32342d3234203d3e20313532333633.roa (hash: tmwMaZpoyniOHlrA1Ev0DGw1sFkx/sRTma2ZD2CnpMQ=) 2: FF3F066A5E9AB8F988B8E17C7A56DD2E00A66AD8.crl (hash: GJOZP5wGwJSkNaxt5bsuNTurxOj7jGf6GcQyAyU7m9I=) 3: 3135372e31352e38322e302f32332d3233203d3e20313532333633.roa (hash: TxbDMhKSioNeR20MqOvnLPpYmLwOjXBp9YQNGW/Dswg=) 4: 3135372e31352e38322e302f32342d3234203d3e20313532333633.roa (hash: LhdUiZ829jnCYzP+T/q1kR6KjN+CYgUrJ54OONbPWMo=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/1d011a1c-a0ad-4d93-86af-3f0aadd9684f/0/FF3F066A5E9AB8F988B8E17C7A56DD2E00A66AD8.crl rsync://repo-rpki.idnic.net/repo/1d011a1c-a0ad-4d93-86af-3f0aadd9684f/0/FF3F066A5E9AB8F988B8E17C7A56DD2E00A66AD8.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/FF3F066A5E9AB8F988B8E17C7A56DD2E00A66AD8.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 09 Dec 2025 06:55:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5e:91:ef:66:27:3f:6a:1b:70:51:8c:0b:a1:d6:f5:8e:c8:ac:5a:93 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=FF3F066A5E9AB8F988B8E17C7A56DD2E00A66AD8 Validity Not Before: Dec 7 10:47:27 2025 GMT Not After : Dec 10 14:03:27 2025 GMT Subject: CN=F628E6CA82F1496175F30AB5B6CAD39E277B876F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:5d:d5:10:04:f4:b0:4b:cf:92:c7:55:0e:50: 68:bb:0f:29:0a:d3:ce:9d:2b:97:d9:d2:cc:f2:f3: 52:6d:c4:90:0b:bc:71:a2:7b:cc:80:0a:79:96:de: 0d:eb:6c:84:d8:b3:db:06:8b:04:9a:eb:91:0d:05: 62:2e:5e:e2:3f:1c:a8:b1:eb:f0:ec:d4:82:c1:16: a5:4c:62:7a:da:16:ed:dc:6b:2c:98:3e:7e:77:e4: a6:f2:a9:60:73:7f:e8:be:58:98:8e:60:b0:58:e1: 9f:83:ec:2e:26:da:08:91:13:b8:28:bd:96:d0:8a: 7c:c1:d8:8e:10:fb:d9:5a:8d:18:17:67:16:4d:9a: 9d:88:de:c5:1b:65:23:28:62:1a:a5:35:91:db:e8: 82:f1:6e:da:00:1d:51:72:eb:15:3e:0e:6e:70:99: 1a:19:a7:f9:9d:40:44:ac:8e:64:72:11:91:be:88: 23:4b:a2:85:05:70:58:1b:13:13:cd:ac:f2:33:bb: b6:41:f6:e2:3e:04:d4:04:ac:92:c1:8f:60:83:ee: a7:eb:7e:71:61:92:0f:12:ad:f7:d9:90:57:88:10: 08:6e:7a:4b:64:24:f0:7d:23:c6:f9:17:87:81:88: 16:95:0c:e5:1a:22:eb:91:b1:a5:83:cd:13:f3:1e: 24:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F6:28:E6:CA:82:F1:49:61:75:F3:0A:B5:B6:CA:D3:9E:27:7B:87:6F X509v3 Authority Key Identifier: keyid:FF:3F:06:6A:5E:9A:B8:F9:88:B8:E1:7C:7A:56:DD:2E:00:A6:6A:D8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/1d011a1c-a0ad-4d93-86af-3f0aadd9684f/0/FF3F066A5E9AB8F988B8E17C7A56DD2E00A66AD8.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/FF3F066A5E9AB8F988B8E17C7A56DD2E00A66AD8.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/1d011a1c-a0ad-4d93-86af-3f0aadd9684f/0/FF3F066A5E9AB8F988B8E17C7A56DD2E00A66AD8.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 73:57:48:77:08:bb:16:c8:58:b6:36:cd:2c:03:1a:92:5f:da: 34:7d:97:d2:e4:3b:b4:66:f9:3f:48:d0:bf:8a:9e:f1:4a:94: 06:b8:f5:40:23:3f:90:ad:de:bf:55:c5:c4:c0:a9:85:5c:70: 00:53:c2:46:54:f1:f2:b1:09:89:83:ce:a9:2e:b5:1d:6b:0e: 76:ad:55:4f:e2:ba:1f:e1:5b:4a:e9:a5:55:fc:d9:a6:a7:c7: 44:2e:ea:cb:64:b8:cc:78:d3:f2:e9:98:33:18:50:b5:a5:a6: 54:aa:79:0b:82:56:af:17:a2:5c:57:9b:89:66:3f:37:da:c4: c0:e6:1a:15:46:cb:c5:5a:0f:52:75:1a:58:f4:f0:05:19:7d: e4:ad:02:2d:f0:80:10:4a:41:8b:b4:ed:8a:ef:21:13:62:15: 55:64:13:07:0c:21:8a:f8:69:c1:17:a3:1e:0c:b4:28:bc:fb: 7e:2a:5b:6d:df:53:80:63:e3:82:a9:43:bc:8d:e5:29:da:52: 61:9e:35:4d:b7:9b:8f:f7:be:20:78:2f:56:ab:a2:f9:fb:15: 77:a1:b2:93:5e:61:f9:3d:8c:09:a3:b1:b1:53:2f:e1:73:6a: bd:8d:62:77:54:2d:0e:d4:0a:08:14:af:74:91:fc:04:a0:99: 78:01:b9:76 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUXpHvZic/ahtwUYwLodb1jsisWpMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRkYzRjA2NkE1RTlBQjhGOTg4QjhFMTdDN0E1NkREMkUw MEE2NkFEODAeFw0yNTEyMDcxMDQ3MjdaFw0yNTEyMTAxNDAzMjdaMDMxMTAvBgNV BAMTKEY2MjhFNkNBODJGMTQ5NjE3NUYzMEFCNUI2Q0FEMzlFMjc3Qjg3NkYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDVXdUQBPSwS8+Sx1UOUGi7DykK 086dK5fZ0szy81JtxJALvHGie8yACnmW3g3rbITYs9sGiwSa65ENBWIuXuI/HKix 6/Ds1ILBFqVMYnraFu3cayyYPn535KbyqWBzf+i+WJiOYLBY4Z+D7C4m2giRE7go vZbQinzB2I4Q+9lajRgXZxZNmp2I3sUbZSMoYhqlNZHb6ILxbtoAHVFy6xU+Dm5w mRoZp/mdQESsjmRyEZG+iCNLooUFcFgbExPNrPIzu7ZB9uI+BNQErJLBj2CD7qfr fnFhkg8SrffZkFeIEAhuektkJPB9I8b5F4eBiBaVDOUaIuuRsaWDzRPzHiTbAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU9ijmyoLxSWF18wq1tsrTnid7h28wHwYDVR0j BBgwFoAU/z8Gal6auPmIuOF8elbdLgCmatgwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x ZDAxMWExYy1hMGFkLTRkOTMtODZhZi0zZjBhYWRkOTY4NGYvMC9GRjNGMDY2QTVF OUFCOEY5ODhCOEUxN0M3QTU2REQyRTAwQTY2QUQ4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvRkYzRjA2NkE1RTlBQjhGOTg4QjhFMTdDN0E1NkREMkUwMEE2 NkFEOC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMWQwMTFhMWMtYTBhZC00ZDkzLTg2 YWYtM2YwYWFkZDk2ODRmLzAvRkYzRjA2NkE1RTlBQjhGOTg4QjhFMTdDN0E1NkRE MkUwMEE2NkFEOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHNXSHcIuxbIWLY2zSwDGpJf2jR9l9LkO7Rm +T9I0L+KnvFKlAa49UAjP5Ct3r9VxcTAqYVccABTwkZU8fKxCYmDzqkutR1rDnat VU/iuh/hW0rppVX82aanx0Qu6stkuMx40/LpmDMYULWlplSqeQuCVq8XolxXm4lm PzfaxMDmGhVGy8VaD1J1Glj08AUZfeStAi3wgBBKQYu07YrvIRNiFVVkEwcMIYr4 acEXox4MtCi8+34qW23fU4Bj44KpQ7yN5SnaUmGeNU23m4/3viB4L1arovn7FXeh spNeYfk9jAmjsbFTL+Fzar2NYndULQ7UCggUr3SR/ASgmXgBuXY= -----END CERTIFICATE-----Generated at Sun Dec 7 18:52:29 2025 by rpki-client