This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/483a1db2-b11e-4cdc-a25c-0f124cae70ee/0/FF467F8613654288ED5F52ACB466941450FA5DF8.mft File: FF467F8613654288ED5F52ACB466941450FA5DF8.mft (raw, json) Hash identifier: ciV2FW8mkW9dyjr6g9jFVOlIQDEI/vfeRsVyeCb92G4= Subject key identifier: 6D:D6:B0:DC:99:41:37:6E:6B:3B:CB:DA:5A:5B:88:90:0C:CB:BB:6D Authority key identifier: FF:46:7F:86:13:65:42:88:ED:5F:52:AC:B4:66:94:14:50:FA:5D:F8 Certificate issuer: /CN=FF467F8613654288ED5F52ACB466941450FA5DF8 Certificate serial: 55365F4818F5B2F0DBD2803AA0656C5B3B1C99D5 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FF467F8613654288ED5F52ACB466941450FA5DF8.cer Subject info access: rsync://repo-rpki.idnic.net/repo/483a1db2-b11e-4cdc-a25c-0f124cae70ee/0/FF467F8613654288ED5F52ACB466941450FA5DF8.mft Manifest number: 0230 Signing time: Mon 15 Dec 2025 03:21:12 +0000 Manifest this update: Mon 15 Dec 2025 03:16:12 +0000 Manifest next update: Thu 18 Dec 2025 09:35:12 +0000 Files and hashes: 1: 3130332e3136342e3137342e302f32332d3234203d3e203538383231.roa (hash: jzcCuMzgA2hFvogRgeLk2i1RvRvQmpOi1ucxBzHIX1A=) 2: FF467F8613654288ED5F52ACB466941450FA5DF8.crl (hash: 9mhQxII1hlIblmv8SGuJIOowtZ2bnxGVgwFbFbcKyo8=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/483a1db2-b11e-4cdc-a25c-0f124cae70ee/0/FF467F8613654288ED5F52ACB466941450FA5DF8.crl rsync://repo-rpki.idnic.net/repo/483a1db2-b11e-4cdc-a25c-0f124cae70ee/0/FF467F8613654288ED5F52ACB466941450FA5DF8.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FF467F8613654288ED5F52ACB466941450FA5DF8.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 18 Dec 2025 09:35:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 55:36:5f:48:18:f5:b2:f0:db:d2:80:3a:a0:65:6c:5b:3b:1c:99:d5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=FF467F8613654288ED5F52ACB466941450FA5DF8 Validity Not Before: Dec 15 03:16:12 2025 GMT Not After : Dec 18 09:35:12 2025 GMT Subject: CN=6DD6B0DC9941376E6B3BCBDA5A5B88900CCBBB6D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:d8:95:82:99:82:a2:03:e7:c1:b2:a3:c0:32: 3c:dd:dc:6f:dd:c8:fa:62:c7:d3:bb:1e:39:e4:56: ba:2a:c4:e4:34:19:59:6c:2a:c0:c7:32:4c:f1:81: c5:e2:9f:16:1c:1c:9a:3b:93:1f:1c:64:5b:9a:5d: 0c:38:cd:16:cb:a3:63:10:ce:7e:e4:d8:5e:82:6c: da:b5:e4:0a:82:ac:16:84:9a:2f:48:1e:7c:e3:5b: 58:e1:5f:90:3e:c0:be:43:80:da:ce:1c:b2:6a:42: 4e:e9:cd:26:4b:e2:ae:01:39:12:b0:c3:80:2c:34: 6e:43:bf:f9:4e:d7:8f:10:0b:61:0c:dc:14:36:9c: aa:28:5b:1e:c9:13:5a:56:ea:8d:65:5e:ce:0d:ce: e0:b5:62:6c:a5:00:52:1b:b9:50:11:a6:6c:ad:2e: 95:d9:41:2e:5c:39:88:67:33:2b:1a:9d:92:fc:ab: 53:2f:a1:be:df:13:df:04:44:6f:b4:8c:a9:ba:b9: 97:8d:c6:a5:e0:a7:04:e3:82:dd:b0:06:0f:a7:52: cd:5c:fe:45:8f:2f:d2:c6:b9:eb:0b:c0:10:a0:56: 90:18:f7:03:03:65:64:f5:3a:09:39:2b:2d:7d:a4: 01:a1:a8:6e:d0:61:a3:83:db:95:52:fe:5d:62:f3: 9a:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6D:D6:B0:DC:99:41:37:6E:6B:3B:CB:DA:5A:5B:88:90:0C:CB:BB:6D X509v3 Authority Key Identifier: keyid:FF:46:7F:86:13:65:42:88:ED:5F:52:AC:B4:66:94:14:50:FA:5D:F8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/483a1db2-b11e-4cdc-a25c-0f124cae70ee/0/FF467F8613654288ED5F52ACB466941450FA5DF8.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FF467F8613654288ED5F52ACB466941450FA5DF8.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/483a1db2-b11e-4cdc-a25c-0f124cae70ee/0/FF467F8613654288ED5F52ACB466941450FA5DF8.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2e:3b:01:b0:90:a4:8e:b1:5e:a0:83:0b:fc:40:4a:64:26:61: ce:31:59:a9:91:ae:9c:f6:d7:13:77:82:7d:15:b5:32:f1:d2: 3b:7a:ec:bb:07:41:9f:11:6b:a4:cc:69:29:a4:dc:ca:f0:e7: 35:9e:10:e6:03:0d:f2:7e:f2:09:49:11:03:03:53:59:ef:b0: ab:9d:a0:28:39:40:4c:85:0e:48:cc:90:99:b3:e2:18:33:f2: e6:ca:01:6e:b4:64:45:5b:09:d0:fb:66:cd:69:56:40:0b:eb: 1e:d7:8e:19:c1:7a:be:61:17:be:f8:3e:99:72:a4:f3:2b:78: 2a:50:a2:15:a4:52:55:4c:f1:c2:94:87:f3:43:2a:33:dc:d6: 8a:71:ff:6e:38:13:0f:82:7e:17:7c:68:25:d3:49:53:e0:84: 41:28:aa:b2:b0:81:1f:f5:5a:75:f6:74:1a:c1:ba:f4:08:1f: 43:a6:01:85:16:1b:a3:78:a2:61:a5:f6:3e:62:35:cc:b4:6b: 34:f0:4f:f7:50:0c:6b:23:4d:b5:f7:15:58:59:92:67:ab:09: 81:63:b2:59:c9:ef:a8:ac:ec:82:f0:28:05:63:29:f0:b7:91: ab:05:f8:d8:de:50:b1:c1:c4:5f:5a:c9:d0:ea:4f:4b:01:22: 7d:25:17:9e -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUVTZfSBj1svDb0oA6oGVsWzscmdUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRkY0NjdGODYxMzY1NDI4OEVENUY1MkFDQjQ2Njk0MTQ1 MEZBNURGODAeFw0yNTEyMTUwMzE2MTJaFw0yNTEyMTgwOTM1MTJaMDMxMTAvBgNV BAMTKDZERDZCMERDOTk0MTM3NkU2QjNCQ0JEQTVBNUI4ODkwMENDQkJCNkQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDA2JWCmYKiA+fBsqPAMjzd3G/d yPpix9O7HjnkVroqxOQ0GVlsKsDHMkzxgcXinxYcHJo7kx8cZFuaXQw4zRbLo2MQ zn7k2F6CbNq15AqCrBaEmi9IHnzjW1jhX5A+wL5DgNrOHLJqQk7pzSZL4q4BORKw w4AsNG5Dv/lO148QC2EM3BQ2nKooWx7JE1pW6o1lXs4NzuC1YmylAFIbuVARpmyt LpXZQS5cOYhnMysanZL8q1Mvob7fE98ERG+0jKm6uZeNxqXgpwTjgt2wBg+nUs1c /kWPL9LGuesLwBCgVpAY9wMDZWT1Ogk5Ky19pAGhqG7QYaOD25VS/l1i85pnAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUbdaw3JlBN25rO8vaWluIkAzLu20wHwYDVR0j BBgwFoAU/0Z/hhNlQojtX1KstGaUFFD6XfgwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 ODNhMWRiMi1iMTFlLTRjZGMtYTI1Yy0wZjEyNGNhZTcwZWUvMC9GRjQ2N0Y4NjEz NjU0Mjg4RUQ1RjUyQUNCNDY2OTQxNDUwRkE1REY4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRkY0NjdGODYxMzY1NDI4OEVENUY1MkFDQjQ2Njk0MTQ1MEZB NURGOC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNDgzYTFkYjItYjExZS00Y2RjLWEy NWMtMGYxMjRjYWU3MGVlLzAvRkY0NjdGODYxMzY1NDI4OEVENUY1MkFDQjQ2Njk0 MTQ1MEZBNURGOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAC47AbCQpI6xXqCDC/xASmQmYc4xWamRrpz2 1xN3gn0VtTLx0jt67LsHQZ8Ra6TMaSmk3Mrw5zWeEOYDDfJ+8glJEQMDU1nvsKud oCg5QEyFDkjMkJmz4hgz8ubKAW60ZEVbCdD7Zs1pVkAL6x7XjhnBer5hF774Pply pPMreCpQohWkUlVM8cKUh/NDKjPc1opx/244Ew+Cfhd8aCXTSVPghEEoqrKwgR/1 WnX2dBrBuvQIH0OmAYUWG6N4omGl9j5iNcy0azTwT/dQDGsjTbX3FVhZkmerCYFj slnJ76is7ILwKAVjKfC3kasF+NjeULHBxF9aydDqT0sBIn0lF54= -----END CERTIFICATE-----Generated at Tue Dec 16 04:12:09 2025 by rpki-client