This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/3248d27b-ccb0-4fc7-abca-9fc0a3e15754/0/FF45D0F44B7B63B976B41EEE18CC92393CF8184F.mft File: FF45D0F44B7B63B976B41EEE18CC92393CF8184F.mft (raw, json) Hash identifier: OWhJ90zJ4KLO1EfR+kTxfoZ9jxqEcvWTz+VrWR8/IHg= Subject key identifier: 69:3C:AC:9C:48:DA:01:F3:FF:3F:96:A4:7D:A1:9C:DB:97:9A:57:6D Authority key identifier: FF:45:D0:F4:4B:7B:63:B9:76:B4:1E:EE:18:CC:92:39:3C:F8:18:4F Certificate issuer: /CN=FF45D0F44B7B63B976B41EEE18CC92393CF8184F Certificate serial: 547EACDA5201A2B9F9D6CCC44465D412CEA151C3 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FF45D0F44B7B63B976B41EEE18CC92393CF8184F.cer Subject info access: rsync://repo-rpki.idnic.net/repo/3248d27b-ccb0-4fc7-abca-9fc0a3e15754/0/FF45D0F44B7B63B976B41EEE18CC92393CF8184F.mft Manifest number: 0207 Signing time: Wed 03 Dec 2025 11:20:03 +0000 Manifest this update: Wed 03 Dec 2025 11:15:03 +0000 Manifest next update: Sat 06 Dec 2025 17:57:03 +0000 Files and hashes: 1: FF45D0F44B7B63B976B41EEE18CC92393CF8184F.crl (hash: i66G/o/mUnNYr8dOQSi9jrv3IKzLD6tRUzZELSMUY4Y=) 2: 3130332e3136392e33382e302f32332d3234203d3e20313432333331.roa (hash: XR+TpGg6coEePHmhn8BPw57A0ogwMebLb1ve/vRAoWA=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/3248d27b-ccb0-4fc7-abca-9fc0a3e15754/0/FF45D0F44B7B63B976B41EEE18CC92393CF8184F.crl rsync://repo-rpki.idnic.net/repo/3248d27b-ccb0-4fc7-abca-9fc0a3e15754/0/FF45D0F44B7B63B976B41EEE18CC92393CF8184F.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FF45D0F44B7B63B976B41EEE18CC92393CF8184F.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 06 Dec 2025 12:07:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 54:7e:ac:da:52:01:a2:b9:f9:d6:cc:c4:44:65:d4:12:ce:a1:51:c3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=FF45D0F44B7B63B976B41EEE18CC92393CF8184F Validity Not Before: Dec 3 11:15:03 2025 GMT Not After : Dec 6 17:57:03 2025 GMT Subject: CN=693CAC9C48DA01F3FF3F96A47DA19CDB979A576D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:c4:06:21:e0:3f:ec:1c:a1:56:fd:36:17:a6: 18:ae:21:ab:bd:7d:33:e1:84:8c:9d:fa:b1:b0:91: 8f:3e:ce:56:6d:e3:74:f6:f9:36:2b:db:47:a7:4c: 6f:a1:52:fb:40:fa:86:42:0f:ce:4f:f9:86:18:28: 90:c3:37:01:80:ce:55:f7:d7:f7:0c:34:63:5a:16: 58:21:15:72:1e:55:d7:2d:af:f1:4d:80:11:4b:b2: fc:55:23:f3:75:2e:64:5a:26:23:76:1d:84:e3:9d: d4:32:9c:21:b4:eb:28:9a:e6:0b:a3:4a:48:73:53: dd:64:d0:08:12:b0:c6:9a:ce:2d:19:73:47:8a:eb: c2:23:bd:27:25:e2:c9:fe:7b:8f:bf:40:b5:d7:4f: f6:5b:e6:1d:f6:ab:71:8d:1f:d2:f6:f7:57:01:a4: 43:e3:7a:3b:ff:23:66:ef:86:56:b1:01:45:ae:49: ee:f4:c3:7f:26:34:98:3c:e5:54:a7:90:74:5c:11: b6:2b:07:58:57:5a:0c:ec:53:a9:4e:35:4f:11:f1: 61:1d:4c:51:22:76:d7:49:4e:ab:6e:92:e1:a5:4e: df:80:5d:3b:91:03:bf:cf:1e:bd:52:40:bd:bc:9d: 87:f7:48:d1:e3:e6:bc:ce:ae:ae:b5:33:8e:be:3a: 90:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 69:3C:AC:9C:48:DA:01:F3:FF:3F:96:A4:7D:A1:9C:DB:97:9A:57:6D X509v3 Authority Key Identifier: keyid:FF:45:D0:F4:4B:7B:63:B9:76:B4:1E:EE:18:CC:92:39:3C:F8:18:4F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/3248d27b-ccb0-4fc7-abca-9fc0a3e15754/0/FF45D0F44B7B63B976B41EEE18CC92393CF8184F.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FF45D0F44B7B63B976B41EEE18CC92393CF8184F.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3248d27b-ccb0-4fc7-abca-9fc0a3e15754/0/FF45D0F44B7B63B976B41EEE18CC92393CF8184F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 08:f5:fd:6a:d7:e8:c9:3b:d5:fe:48:6c:23:5d:1c:c0:47:dd: 13:a8:56:b3:c8:6e:9c:f2:5b:b5:e8:91:f7:56:f9:ba:43:2c: c8:46:b5:cb:5a:d1:58:b1:9b:8f:23:ed:17:f5:fc:6c:bb:76: b4:4e:21:7f:fa:0c:c9:29:40:8e:7a:ec:a0:6c:88:48:b4:4b: 74:0c:83:47:74:ac:32:a9:ef:96:93:f6:49:16:60:c2:ea:af: 56:17:53:cb:fe:c8:56:11:8a:06:6f:81:27:53:3e:b7:63:13: 72:94:d5:91:ad:b7:de:6e:4c:b3:61:2c:f7:63:24:b1:cc:7d: 19:8a:63:5f:12:8d:b5:fc:0b:0e:af:ad:43:1e:fe:00:a0:2b: dc:94:31:59:c8:94:f8:8a:24:67:ba:c5:77:62:69:43:07:75: 5d:fb:3d:40:d9:dd:33:b7:17:60:c3:c1:20:e1:3a:28:0d:66: c2:af:b5:03:58:fe:e5:9c:1a:b8:2e:b0:73:52:0d:f7:00:52: e7:ec:62:55:6f:a2:d3:24:74:da:cc:f9:29:60:b4:9a:86:f5: ca:42:2d:3b:bf:f7:00:11:77:38:b0:5c:a7:79:df:7b:f9:73: b0:ad:37:79:33:5c:d8:5b:88:81:5e:0a:16:af:88:a3:eb:4f: e6:2a:b7:ce -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUVH6s2lIBorn51szERGXUEs6hUcMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRkY0NUQwRjQ0QjdCNjNCOTc2QjQxRUVFMThDQzkyMzkz Q0Y4MTg0RjAeFw0yNTEyMDMxMTE1MDNaFw0yNTEyMDYxNzU3MDNaMDMxMTAvBgNV BAMTKDY5M0NBQzlDNDhEQTAxRjNGRjNGOTZBNDdEQTE5Q0RCOTc5QTU3NkQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCkxAYh4D/sHKFW/TYXphiuIau9 fTPhhIyd+rGwkY8+zlZt43T2+TYr20enTG+hUvtA+oZCD85P+YYYKJDDNwGAzlX3 1/cMNGNaFlghFXIeVdctr/FNgBFLsvxVI/N1LmRaJiN2HYTjndQynCG06yia5guj SkhzU91k0AgSsMaazi0Zc0eK68IjvScl4sn+e4+/QLXXT/Zb5h32q3GNH9L291cB pEPjejv/I2bvhlaxAUWuSe70w38mNJg85VSnkHRcEbYrB1hXWgzsU6lONU8R8WEd TFEidtdJTqtukuGlTt+AXTuRA7/PHr1SQL28nYf3SNHj5rzOrq61M46+OpD/AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUaTysnEjaAfP/P5akfaGc25eaV20wHwYDVR0j BBgwFoAU/0XQ9Et7Y7l2tB7uGMySOTz4GE8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z MjQ4ZDI3Yi1jY2IwLTRmYzctYWJjYS05ZmMwYTNlMTU3NTQvMC9GRjQ1RDBGNDRC N0I2M0I5NzZCNDFFRUUxOENDOTIzOTNDRjgxODRGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRkY0NUQwRjQ0QjdCNjNCOTc2QjQxRUVFMThDQzkyMzkzQ0Y4 MTg0Ri5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMzI0OGQyN2ItY2NiMC00ZmM3LWFi Y2EtOWZjMGEzZTE1NzU0LzAvRkY0NUQwRjQ0QjdCNjNCOTc2QjQxRUVFMThDQzky MzkzQ0Y4MTg0Ri5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAj1/WrX6Mk71f5IbCNdHMBH3ROoVrPIbpzy W7XokfdW+bpDLMhGtcta0Vixm48j7Rf1/Gy7drROIX/6DMkpQI567KBsiEi0S3QM g0d0rDKp75aT9kkWYMLqr1YXU8v+yFYRigZvgSdTPrdjE3KU1ZGtt95uTLNhLPdj JLHMfRmKY18SjbX8Cw6vrUMe/gCgK9yUMVnIlPiKJGe6xXdiaUMHdV37PUDZ3TO3 F2DDwSDhOigNZsKvtQNY/uWcGrgusHNSDfcAUufsYlVvotMkdNrM+SlgtJqG9cpC LTu/9wARdziwXKd533v5c7CtN3kzXNhbiIFeChaviKPrT+Yqt84= -----END CERTIFICATE-----Generated at Wed Dec 3 14:44:08 2025 by rpki-client