This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/88db7375-12d1-4935-bedd-902e9d432d5a/0/FF7F57218FD61F433A0C56952A393F8F52BD8926.mft File: FF7F57218FD61F433A0C56952A393F8F52BD8926.mft (raw, json) Hash identifier: l0kjo1XKJ/uxoh75H+uV+5uscQ/KIQAgsTu+8cD9yd4= Subject key identifier: BA:5B:3D:3B:EF:8E:B5:29:65:7D:6D:DE:9A:36:2B:0A:4C:B0:81:6C Authority key identifier: FF:7F:57:21:8F:D6:1F:43:3A:0C:56:95:2A:39:3F:8F:52:BD:89:26 Certificate issuer: /CN=FF7F57218FD61F433A0C56952A393F8F52BD8926 Certificate serial: 31FD1EE2A113BBF70108E691FB1760737634FD00 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FF7F57218FD61F433A0C56952A393F8F52BD8926.cer Subject info access: rsync://repo-rpki.idnic.net/repo/88db7375-12d1-4935-bedd-902e9d432d5a/0/FF7F57218FD61F433A0C56952A393F8F52BD8926.mft Manifest number: 0217 Signing time: Tue 02 Dec 2025 13:20:00 +0000 Manifest this update: Tue 02 Dec 2025 13:15:00 +0000 Manifest next update: Fri 05 Dec 2025 22:44:00 +0000 Files and hashes: 1: FF7F57218FD61F433A0C56952A393F8F52BD8926.crl (hash: H94HrTTs6kVh/HehMSKGyp16Nnh++ypHcvs9wvtEMHg=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/88db7375-12d1-4935-bedd-902e9d432d5a/0/FF7F57218FD61F433A0C56952A393F8F52BD8926.crl rsync://repo-rpki.idnic.net/repo/88db7375-12d1-4935-bedd-902e9d432d5a/0/FF7F57218FD61F433A0C56952A393F8F52BD8926.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FF7F57218FD61F433A0C56952A393F8F52BD8926.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 05 Dec 2025 22:44:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 31:fd:1e:e2:a1:13:bb:f7:01:08:e6:91:fb:17:60:73:76:34:fd:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=FF7F57218FD61F433A0C56952A393F8F52BD8926 Validity Not Before: Dec 2 13:15:00 2025 GMT Not After : Dec 5 22:44:00 2025 GMT Subject: CN=BA5B3D3BEF8EB529657D6DDE9A362B0A4CB0816C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:2b:4d:91:89:10:36:d7:08:95:1c:87:a9:d7: b4:5f:93:c2:48:9e:28:d8:9a:80:ea:37:5a:37:41: 31:a4:b6:d5:bc:a0:70:ac:e0:7c:bf:f6:a0:35:a4: de:21:d7:db:36:30:84:7c:79:25:6a:ee:61:c9:8f: da:49:c4:f4:f0:aa:3d:07:85:ba:9c:76:b6:55:00: b1:e9:70:48:9e:b2:7e:a3:1a:1f:72:c3:b2:32:72: 31:3d:d8:0b:e8:db:8b:a9:10:be:b5:09:f5:cd:93: e8:a3:d0:81:7a:b2:34:66:8f:af:14:56:29:77:06: 02:ca:79:68:bc:fd:90:8a:28:48:c4:c2:44:66:71: 3e:7d:48:a2:08:f7:75:1a:8d:70:b6:35:0c:d1:bc: 39:85:bf:a1:7e:e7:04:b0:bb:42:bc:93:e1:fc:de: 46:91:db:9d:97:60:0c:49:07:77:df:9d:9d:3d:5b: 03:8c:3a:d7:a1:39:2c:d8:dd:fb:86:83:7f:cb:5d: 0f:10:a3:1b:c7:a8:f2:4f:f2:6c:bb:3f:10:e9:ca: 2e:b1:92:30:17:d8:1e:9f:04:ef:a8:d4:22:73:c4: 3b:ec:25:8f:3c:f4:82:4a:3a:93:7c:77:01:b2:44: 18:49:3c:bf:3c:7d:fc:5c:9b:12:bc:e9:0a:1e:36: 10:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:5B:3D:3B:EF:8E:B5:29:65:7D:6D:DE:9A:36:2B:0A:4C:B0:81:6C X509v3 Authority Key Identifier: keyid:FF:7F:57:21:8F:D6:1F:43:3A:0C:56:95:2A:39:3F:8F:52:BD:89:26 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/88db7375-12d1-4935-bedd-902e9d432d5a/0/FF7F57218FD61F433A0C56952A393F8F52BD8926.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FF7F57218FD61F433A0C56952A393F8F52BD8926.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/88db7375-12d1-4935-bedd-902e9d432d5a/0/FF7F57218FD61F433A0C56952A393F8F52BD8926.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 12:54:c3:08:25:6b:d0:f3:5e:2f:9e:5e:48:2c:72:46:1d:8c: 85:6e:4c:82:a7:22:22:8c:49:8d:c3:c3:c6:f4:0e:8a:2c:b6: 4b:de:99:0a:45:f6:e8:1c:76:30:23:71:07:80:a5:6a:28:ab: cd:e0:45:37:11:bd:8e:a1:06:b7:a2:11:3c:69:7a:e9:26:e5: 62:8c:83:09:1d:23:b4:29:70:6f:86:e2:dc:53:5a:c5:09:b6: 5b:c9:b5:50:ec:ae:bb:99:ca:bb:f5:49:07:3f:46:d0:3c:97: 36:74:1c:81:3b:4f:2a:22:68:cf:90:8a:0e:4e:c8:a3:41:ff: 9a:de:49:8e:b6:c7:1a:f5:fe:e4:67:39:10:73:32:f6:b0:dc: 5f:8d:32:27:23:e0:07:30:99:94:11:ca:4a:60:22:f9:55:74: ac:51:1a:26:6a:ee:df:d9:50:ed:24:8b:63:51:a2:0d:13:28: eb:5b:2d:11:89:d0:f8:8e:ef:df:f8:4f:90:7a:14:41:5a:3d: 46:6a:4b:13:f7:09:6e:45:a8:55:09:3e:89:6d:ea:d2:a4:e6: 0c:c9:06:e7:dc:dd:3f:28:53:8f:8f:44:00:0d:a4:55:68:16: bf:9c:c0:15:e2:38:aa:b0:02:21:69:9f:8a:ee:cb:39:ac:7f: aa:33:4c:e5 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUMf0e4qETu/cBCOaR+xdgc3Y0/QAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRkY3RjU3MjE4RkQ2MUY0MzNBMEM1Njk1MkEzOTNGOEY1 MkJEODkyNjAeFw0yNTEyMDIxMzE1MDBaFw0yNTEyMDUyMjQ0MDBaMDMxMTAvBgNV BAMTKEJBNUIzRDNCRUY4RUI1Mjk2NTdENkRERTlBMzYyQjBBNENCMDgxNkMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCqK02RiRA21wiVHIep17Rfk8JI nijYmoDqN1o3QTGkttW8oHCs4Hy/9qA1pN4h19s2MIR8eSVq7mHJj9pJxPTwqj0H hbqcdrZVALHpcEiesn6jGh9yw7IycjE92Avo24upEL61CfXNk+ij0IF6sjRmj68U Vil3BgLKeWi8/ZCKKEjEwkRmcT59SKII93UajXC2NQzRvDmFv6F+5wSwu0K8k+H8 3kaR252XYAxJB3ffnZ09WwOMOtehOSzY3fuGg3/LXQ8QoxvHqPJP8my7PxDpyi6x kjAX2B6fBO+o1CJzxDvsJY889IJKOpN8dwGyRBhJPL88ffxcmxK86QoeNhALAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUuls9O++OtSllfW3emjYrCkywgWwwHwYDVR0j BBgwFoAU/39XIY/WH0M6DFaVKjk/j1K9iSYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 OGRiNzM3NS0xMmQxLTQ5MzUtYmVkZC05MDJlOWQ0MzJkNWEvMC9GRjdGNTcyMThG RDYxRjQzM0EwQzU2OTUyQTM5M0Y4RjUyQkQ4OTI2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRkY3RjU3MjE4RkQ2MUY0MzNBMEM1Njk1MkEzOTNGOEY1MkJE ODkyNi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vODhkYjczNzUtMTJkMS00OTM1LWJl ZGQtOTAyZTlkNDMyZDVhLzAvRkY3RjU3MjE4RkQ2MUY0MzNBMEM1Njk1MkEzOTNG OEY1MkJEODkyNi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABJUwwgla9DzXi+eXkgsckYdjIVuTIKnIiKM SY3Dw8b0DoostkvemQpF9ugcdjAjcQeApWooq83gRTcRvY6hBreiETxpeukm5WKM gwkdI7QpcG+G4txTWsUJtlvJtVDsrruZyrv1SQc/RtA8lzZ0HIE7TyoiaM+Qig5O yKNB/5reSY62xxr1/uRnORBzMvaw3F+NMicj4AcwmZQRykpgIvlVdKxRGiZq7t/Z UO0ki2NRog0TKOtbLRGJ0PiO79/4T5B6FEFaPUZqSxP3CW5FqFUJPolt6tKk5gzJ Bufc3T8oU4+PRAANpFVoFr+cwBXiOKqwAiFpn4ruyzmsf6ozTOU= -----END CERTIFICATE-----Generated at Wed Dec 3 15:30:34 2025 by rpki-client