This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/8792a4cd-dbac-43ac-8060-2e8d42eae655/0/1FCD47FB4BD729E22E4FEEFCE5B61B4E1C7FE946.mft File: 1FCD47FB4BD729E22E4FEEFCE5B61B4E1C7FE946.mft (raw, json) Hash identifier: W0vJDBTrUF7kSoRToPHts3SlmCiGW+f6GRUD9fhpwng= Subject key identifier: B5:B5:A0:89:4B:75:12:C1:AD:E3:BE:02:33:65:39:FF:FB:BD:C4:29 Authority key identifier: 1F:CD:47:FB:4B:D7:29:E2:2E:4F:EE:FC:E5:B6:1B:4E:1C:7F:E9:46 Certificate issuer: /CN=1FCD47FB4BD729E22E4FEEFCE5B61B4E1C7FE946 Certificate serial: 6ED34C9421F0B81D3C34DFD949E2DFFF9A3093C9 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1FCD47FB4BD729E22E4FEEFCE5B61B4E1C7FE946.cer Subject info access: rsync://repo-rpki.idnic.net/repo/8792a4cd-dbac-43ac-8060-2e8d42eae655/0/1FCD47FB4BD729E22E4FEEFCE5B61B4E1C7FE946.mft Manifest number: 04F7 Signing time: Tue 02 Dec 2025 12:30:43 +0000 Manifest this update: Tue 02 Dec 2025 12:25:43 +0000 Manifest next update: Fri 05 Dec 2025 14:46:43 +0000 Files and hashes: 1: 3131382e39312e3132382e302f32312d3234203d3e203234313935.roa (hash: yiPIGsDISayK97qWqm2UWsTxEHdxKETOsL8gSiwFMjA=) 2: 3131382e39312e3134302e302f32322d3234203d3e203633353032.roa (hash: XlrHKxvILobzAM8qX1Td9F4llGO1s7dDnxuDShAIB6Q=) 3: 1FCD47FB4BD729E22E4FEEFCE5B61B4E1C7FE946.crl (hash: 0hk/icqmiXmxrdEehrnoJn/iUF4HLwq8oGZgE1ER+rk=) 4: 323430313a343230303a3a2f33322d3438203d3e203234313935.roa (hash: xPjBnSpHmpcu0qAxiY2wE80xegcTsRNtPEAJ6PwASdw=) 5: 3230322e36372e382e302f32312d3234203d3e203234313935.roa (hash: B+C/2EohdvfSLSdEWCv4uFVDG8om8Pw0dnsHmi+NJ9Y=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/8792a4cd-dbac-43ac-8060-2e8d42eae655/0/1FCD47FB4BD729E22E4FEEFCE5B61B4E1C7FE946.crl rsync://repo-rpki.idnic.net/repo/8792a4cd-dbac-43ac-8060-2e8d42eae655/0/1FCD47FB4BD729E22E4FEEFCE5B61B4E1C7FE946.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1FCD47FB4BD729E22E4FEEFCE5B61B4E1C7FE946.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 05 Dec 2025 14:46:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6e:d3:4c:94:21:f0:b8:1d:3c:34:df:d9:49:e2:df:ff:9a:30:93:c9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1FCD47FB4BD729E22E4FEEFCE5B61B4E1C7FE946 Validity Not Before: Dec 2 12:25:43 2025 GMT Not After : Dec 5 14:46:43 2025 GMT Subject: CN=B5B5A0894B7512C1ADE3BE02336539FFFBBDC429 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:c1:02:f8:f0:4d:50:72:98:6b:da:15:7a:b6: 3e:da:dc:89:23:25:ed:3f:85:7f:cd:e2:f5:1a:95: 3d:8a:24:8c:d3:b3:40:5a:f2:97:bf:67:ce:31:e5: f4:59:14:d0:23:41:62:05:c4:bb:e7:31:74:f1:24: 3b:2e:03:90:ed:5c:0c:20:b9:2f:05:a8:ee:bf:12: 2a:88:59:5b:a1:6b:f2:b5:96:f4:09:12:ad:52:a5: 95:8e:b0:9d:8e:26:e9:50:b9:d7:57:d3:7a:5a:af: 43:64:0e:b2:39:d4:cb:df:66:65:96:d8:3e:19:cb: 3e:4c:8a:08:c9:2e:86:53:46:a4:28:66:8d:0a:a3: b4:23:fc:ea:f0:62:8f:f0:5a:0f:55:af:05:fa:f5: 6b:d3:36:6a:62:81:58:0c:c3:85:6f:1a:f6:ce:0e: 2e:f9:e7:b1:61:1b:40:d8:85:e0:00:a3:eb:d1:cc: eb:b0:61:c3:dd:a5:68:e7:b8:7b:74:eb:ec:de:8e: f7:3e:8b:20:73:fc:92:01:70:66:8b:58:bc:59:67: 7c:bf:8f:e7:71:4d:9d:42:e4:59:5b:0e:26:3e:a1: a0:19:3f:12:a9:9d:63:5e:d5:6f:7d:d2:fc:36:e6: ec:00:c3:79:c2:da:05:6b:d8:a8:e8:16:49:d8:1e: 17:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B5:B5:A0:89:4B:75:12:C1:AD:E3:BE:02:33:65:39:FF:FB:BD:C4:29 X509v3 Authority Key Identifier: keyid:1F:CD:47:FB:4B:D7:29:E2:2E:4F:EE:FC:E5:B6:1B:4E:1C:7F:E9:46 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/8792a4cd-dbac-43ac-8060-2e8d42eae655/0/1FCD47FB4BD729E22E4FEEFCE5B61B4E1C7FE946.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1FCD47FB4BD729E22E4FEEFCE5B61B4E1C7FE946.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/8792a4cd-dbac-43ac-8060-2e8d42eae655/0/1FCD47FB4BD729E22E4FEEFCE5B61B4E1C7FE946.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9a:40:cc:22:b4:05:b6:26:19:f0:b8:52:f0:06:b4:b4:62:ae: 14:3f:3d:3c:32:56:b7:4f:86:a4:19:f4:c2:52:47:21:8b:cc: 11:2d:a7:0d:c2:31:e1:12:8c:99:2a:5f:d1:91:56:98:cd:d6: a6:d2:f4:e8:be:6f:18:a0:a4:0f:1e:a1:e6:83:2a:5b:17:39: 1d:7b:48:3a:f4:e3:13:e5:e0:28:41:65:a0:0b:e1:fe:3e:b1: 00:68:a6:f2:5e:3f:c7:66:06:fe:5f:39:e5:c2:22:eb:1c:9d: 07:77:ac:7d:41:ef:23:c5:87:6e:b9:d6:a7:dc:b0:08:fe:f9: 38:32:e8:48:13:02:ad:a3:64:0b:43:6d:a7:2b:21:fe:7c:4d: f6:71:42:da:cb:d7:7f:ad:3a:c4:bb:ff:a2:b6:2a:c1:7e:48: f3:0a:aa:3f:f5:69:5c:09:e0:c8:06:1f:5e:94:37:7c:f4:04: 00:25:45:92:e5:b2:0b:9c:2a:f3:e8:77:7e:95:8f:4a:26:e1: 50:ad:76:83:26:7c:d4:ff:f9:09:c4:22:40:eb:f6:d9:8c:6c: 74:cb:c6:57:84:69:59:06:9c:88:37:e9:20:5e:93:54:cd:e1: f7:c0:3e:c4:59:ba:71:bb:29:31:0c:20:98:73:1b:bd:6b:8b: 14:3a:04:f3 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUbtNMlCHwuB08NN/ZSeLf/5owk8kwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUZDRDQ3RkI0QkQ3MjlFMjJFNEZFRUZDRTVCNjFCNEUx QzdGRTk0NjAeFw0yNTEyMDIxMjI1NDNaFw0yNTEyMDUxNDQ2NDNaMDMxMTAvBgNV BAMTKEI1QjVBMDg5NEI3NTEyQzFBREUzQkUwMjMzNjUzOUZGRkJCREM0MjkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDCwQL48E1Qcphr2hV6tj7a3Ikj Je0/hX/N4vUalT2KJIzTs0Ba8pe/Z84x5fRZFNAjQWIFxLvnMXTxJDsuA5DtXAwg uS8FqO6/EiqIWVuha/K1lvQJEq1SpZWOsJ2OJulQuddX03par0NkDrI51MvfZmWW 2D4Zyz5MigjJLoZTRqQoZo0Ko7Qj/OrwYo/wWg9VrwX69WvTNmpigVgMw4VvGvbO Di7557FhG0DYheAAo+vRzOuwYcPdpWjnuHt06+zejvc+iyBz/JIBcGaLWLxZZ3y/ j+dxTZ1C5FlbDiY+oaAZPxKpnWNe1W990vw25uwAw3nC2gVr2KjoFknYHhfrAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUtbWgiUt1EsGt474CM2U5//u9xCkwHwYDVR0j BBgwFoAUH81H+0vXKeIuT+785bYbThx/6UYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 NzkyYTRjZC1kYmFjLTQzYWMtODA2MC0yZThkNDJlYWU2NTUvMC8xRkNENDdGQjRC RDcyOUUyMkU0RkVFRkNFNUI2MUI0RTFDN0ZFOTQ2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMUZDRDQ3RkI0QkQ3MjlFMjJFNEZFRUZDRTVCNjFCNEUxQzdG RTk0Ni5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vODc5MmE0Y2QtZGJhYy00M2FjLTgw NjAtMmU4ZDQyZWFlNjU1LzAvMUZDRDQ3RkI0QkQ3MjlFMjJFNEZFRUZDRTVCNjFC NEUxQzdGRTk0Ni5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJpAzCK0BbYmGfC4UvAGtLRirhQ/PTwyVrdP hqQZ9MJSRyGLzBEtpw3CMeESjJkqX9GRVpjN1qbS9Oi+bxigpA8eoeaDKlsXOR17 SDr04xPl4ChBZaAL4f4+sQBopvJeP8dmBv5fOeXCIuscnQd3rH1B7yPFh2651qfc sAj++Tgy6EgTAq2jZAtDbacrIf58TfZxQtrL13+tOsS7/6K2KsF+SPMKqj/1aVwJ 4MgGH16UN3z0BAAlRZLlsgucKvPod36Vj0om4VCtdoMmfNT/+QnEIkDr9tmMbHTL xleEaVkGnIg36SBek1TN4ffAPsRZunG7KTEMIJhzG71rixQ6BPM= -----END CERTIFICATE-----Generated at Wed Dec 3 13:57:07 2025 by rpki-client