This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/6efb90b1-b68f-4463-a1bd-e908c8a1ed1a/0/FFEFEB2C96B1BED5C5D6D823EE3C6D80698B9FD6.mft File: FFEFEB2C96B1BED5C5D6D823EE3C6D80698B9FD6.mft (raw, json) Hash identifier: q2xESMA0OK07kn3Has1TmfKITyZwYCtbRWrE9OgapHQ= Subject key identifier: 4A:85:91:52:97:5D:0D:0B:97:CB:F0:60:5A:0A:88:70:B9:28:6E:A6 Authority key identifier: FF:EF:EB:2C:96:B1:BE:D5:C5:D6:D8:23:EE:3C:6D:80:69:8B:9F:D6 Certificate issuer: /CN=FFEFEB2C96B1BED5C5D6D823EE3C6D80698B9FD6 Certificate serial: 0C0D7DAC163A62D64072D89F6D9CA4D9F71CDF81 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FFEFEB2C96B1BED5C5D6D823EE3C6D80698B9FD6.cer Subject info access: rsync://repo-rpki.idnic.net/repo/6efb90b1-b68f-4463-a1bd-e908c8a1ed1a/0/FFEFEB2C96B1BED5C5D6D823EE3C6D80698B9FD6.mft Manifest number: 03E4 Signing time: Wed 03 Dec 2025 12:41:11 +0000 Manifest this update: Wed 03 Dec 2025 12:36:11 +0000 Manifest next update: Sat 06 Dec 2025 23:26:11 +0000 Files and hashes: 1: FFEFEB2C96B1BED5C5D6D823EE3C6D80698B9FD6.crl (hash: 7AYJM6SdyuMa+2vrnMcGFxWXYW6tyb5LeeIArJc+//s=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/6efb90b1-b68f-4463-a1bd-e908c8a1ed1a/0/FFEFEB2C96B1BED5C5D6D823EE3C6D80698B9FD6.crl rsync://repo-rpki.idnic.net/repo/6efb90b1-b68f-4463-a1bd-e908c8a1ed1a/0/FFEFEB2C96B1BED5C5D6D823EE3C6D80698B9FD6.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FFEFEB2C96B1BED5C5D6D823EE3C6D80698B9FD6.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 06 Dec 2025 23:26:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0c:0d:7d:ac:16:3a:62:d6:40:72:d8:9f:6d:9c:a4:d9:f7:1c:df:81 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=FFEFEB2C96B1BED5C5D6D823EE3C6D80698B9FD6 Validity Not Before: Dec 3 12:36:11 2025 GMT Not After : Dec 6 23:26:11 2025 GMT Subject: CN=4A859152975D0D0B97CBF0605A0A8870B9286EA6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:db:37:7d:82:27:d6:64:7d:c8:c5:fb:02:a2: c5:19:d3:fd:9d:f7:45:7b:c2:01:8c:3c:ea:99:e7: 32:7c:36:3b:30:02:fd:06:d2:df:55:d9:64:c7:a5: 5c:ab:a9:67:1d:f8:1b:4c:58:42:84:ee:0f:c4:4a: 74:2e:b0:ff:ae:15:c7:51:19:1f:4c:41:ee:d4:45: 2a:4a:0a:9f:22:30:15:9c:16:5b:51:78:dc:a1:fb: 6f:74:82:3a:cb:b0:4d:a5:9a:35:18:ac:75:59:d4: 3d:21:86:54:da:ba:35:67:df:9b:40:cd:73:f9:be: 50:c1:02:1c:87:2f:d3:d5:ac:aa:a5:09:04:db:c9: d8:90:d2:19:9a:53:ad:72:59:19:1e:00:5b:2e:02: 80:20:80:d2:f8:5f:2a:08:85:06:2b:35:68:8e:a6: 18:4e:a0:e0:dd:e9:3c:c0:a7:26:2e:f9:63:d3:b9: 7c:61:41:b2:21:f0:09:af:67:9d:9f:0f:6f:59:3e: 1e:73:84:f4:c5:24:0e:4c:be:56:e1:09:49:cd:a0: 56:26:b4:3c:79:6c:27:88:ca:19:05:71:98:d2:26: c6:c5:92:86:88:ee:03:ad:47:3d:2c:ea:8e:ea:a1: b2:d1:19:d7:12:56:ed:86:94:90:f2:07:8e:39:8a: da:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:85:91:52:97:5D:0D:0B:97:CB:F0:60:5A:0A:88:70:B9:28:6E:A6 X509v3 Authority Key Identifier: keyid:FF:EF:EB:2C:96:B1:BE:D5:C5:D6:D8:23:EE:3C:6D:80:69:8B:9F:D6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/6efb90b1-b68f-4463-a1bd-e908c8a1ed1a/0/FFEFEB2C96B1BED5C5D6D823EE3C6D80698B9FD6.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FFEFEB2C96B1BED5C5D6D823EE3C6D80698B9FD6.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/6efb90b1-b68f-4463-a1bd-e908c8a1ed1a/0/FFEFEB2C96B1BED5C5D6D823EE3C6D80698B9FD6.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 47:5e:67:6a:68:4a:1b:30:0b:be:17:9b:f7:77:b9:cd:98:37: fd:92:61:bc:83:d9:2e:47:90:1a:99:3f:71:1d:e9:b0:d3:23: 1a:43:27:b6:be:51:25:2c:e6:6a:b8:d2:4a:d4:93:a5:7a:ea: cc:da:c5:73:54:d4:04:8a:a8:04:be:ce:98:b2:08:98:9a:a7: 46:6c:9e:14:53:b0:d2:95:e6:18:2f:ba:c6:f7:b9:7b:c8:f4: 5e:9f:e8:36:50:57:d9:7b:31:ba:19:04:a0:7a:5c:5c:e8:ad: c3:7c:2a:33:58:e4:96:26:08:ef:ab:d3:ef:90:d4:23:a5:c4: 5f:be:af:b1:de:fc:aa:51:a7:a8:5d:fa:5a:29:33:b7:3d:c0: 2e:3b:21:43:a8:4d:56:91:73:28:88:d0:8c:db:25:35:ed:d7: 6b:18:e1:23:dc:2e:0f:65:26:ff:24:28:d5:c8:4b:51:ce:0c: a3:32:9b:d5:90:bb:15:c1:56:90:53:33:78:bd:dc:77:59:a9: 78:29:cf:f0:29:a1:7a:7b:dc:e6:57:0b:08:6d:de:5a:c8:19: 38:07:89:cb:b1:6e:21:e4:f7:ca:d5:7a:b9:7b:f5:15:5b:d4: e9:bc:57:9a:f6:04:b9:63:a0:3e:67:4f:88:33:ed:5f:33:dc: f5:a8:e0:e0 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUDA19rBY6YtZActifbZyk2fcc34EwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRkZFRkVCMkM5NkIxQkVENUM1RDZEODIzRUUzQzZEODA2 OThCOUZENjAeFw0yNTEyMDMxMjM2MTFaFw0yNTEyMDYyMzI2MTFaMDMxMTAvBgNV BAMTKDRBODU5MTUyOTc1RDBEMEI5N0NCRjA2MDVBMEE4ODcwQjkyODZFQTYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDm2zd9gifWZH3IxfsCosUZ0/2d 90V7wgGMPOqZ5zJ8NjswAv0G0t9V2WTHpVyrqWcd+BtMWEKE7g/ESnQusP+uFcdR GR9MQe7URSpKCp8iMBWcFltReNyh+290gjrLsE2lmjUYrHVZ1D0hhlTaujVn35tA zXP5vlDBAhyHL9PVrKqlCQTbydiQ0hmaU61yWRkeAFsuAoAggNL4XyoIhQYrNWiO phhOoODd6TzApyYu+WPTuXxhQbIh8AmvZ52fD29ZPh5zhPTFJA5MvlbhCUnNoFYm tDx5bCeIyhkFcZjSJsbFkoaI7gOtRz0s6o7qobLRGdcSVu2GlJDyB445itoBAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUSoWRUpddDQuXy/BgWgqIcLkobqYwHwYDVR0j BBgwFoAU/+/rLJaxvtXF1tgj7jxtgGmLn9YwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 ZWZiOTBiMS1iNjhmLTQ0NjMtYTFiZC1lOTA4YzhhMWVkMWEvMC9GRkVGRUIyQzk2 QjFCRUQ1QzVENkQ4MjNFRTNDNkQ4MDY5OEI5RkQ2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRkZFRkVCMkM5NkIxQkVENUM1RDZEODIzRUUzQzZEODA2OThC OUZENi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNmVmYjkwYjEtYjY4Zi00NDYzLWEx YmQtZTkwOGM4YTFlZDFhLzAvRkZFRkVCMkM5NkIxQkVENUM1RDZEODIzRUUzQzZE ODA2OThCOUZENi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEdeZ2poShswC74Xm/d3uc2YN/2SYbyD2S5H kBqZP3Ed6bDTIxpDJ7a+USUs5mq40krUk6V66szaxXNU1ASKqAS+zpiyCJiap0Zs nhRTsNKV5hgvusb3uXvI9F6f6DZQV9l7MboZBKB6XFzorcN8KjNY5JYmCO+r0++Q 1COlxF++r7He/KpRp6hd+lopM7c9wC47IUOoTVaRcyiI0IzbJTXt12sY4SPcLg9l Jv8kKNXIS1HODKMym9WQuxXBVpBTM3i93HdZqXgpz/ApoXp73OZXCwht3lrIGTgH icuxbiHk98rVerl79RVb1Om8V5r2BLljoD5nT4gz7V8z3PWo4OA= -----END CERTIFICATE-----Generated at Wed Dec 3 16:37:19 2025 by rpki-client