This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/8b1664a7-c9c9-4442-8718-9aec9e2110a2/0/FF89F23BCBC42635E97AE15A7FB69E1E09A97DAF.mft File: FF89F23BCBC42635E97AE15A7FB69E1E09A97DAF.mft (raw, json) Hash identifier: Gbl1OWKxMfHFJyZUP8YLPDbn85B1MsxMFPjnuNBGkD4= Subject key identifier: FB:36:A9:C3:A2:7A:D4:96:C3:EB:22:E1:A0:65:EC:81:5B:23:14:EE Authority key identifier: FF:89:F2:3B:CB:C4:26:35:E9:7A:E1:5A:7F:B6:9E:1E:09:A9:7D:AF Certificate issuer: /CN=FF89F23BCBC42635E97AE15A7FB69E1E09A97DAF Certificate serial: 7B11A638DCDE0E6A14CD87BE83DD65B69983D654 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FF89F23BCBC42635E97AE15A7FB69E1E09A97DAF.cer Subject info access: rsync://repo-rpki.idnic.net/repo/8b1664a7-c9c9-4442-8718-9aec9e2110a2/0/FF89F23BCBC42635E97AE15A7FB69E1E09A97DAF.mft Manifest number: 02BD Signing time: Wed 03 Dec 2025 06:22:15 +0000 Manifest this update: Wed 03 Dec 2025 06:17:15 +0000 Manifest next update: Sat 06 Dec 2025 12:05:15 +0000 Files and hashes: 1: 3130332e3136332e3138342e302f32342d3234203d3e20313432333636.roa (hash: T0kgQ8xq7nBxfVnwpyYEmmzA0fn9DjLFvoVcfJfTj5g=) 2: FF89F23BCBC42635E97AE15A7FB69E1E09A97DAF.crl (hash: /84eR/3s3gBOVxQgzb1r8IP1vDy4hURYwv6frveNqKg=) 3: 3130332e3136332e3138352e302f32342d3234203d3e20313432333636.roa (hash: pdL/jDmC/bRYeiHS8cnl+uvo57Pja48iQZSIZZK07no=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/8b1664a7-c9c9-4442-8718-9aec9e2110a2/0/FF89F23BCBC42635E97AE15A7FB69E1E09A97DAF.crl rsync://repo-rpki.idnic.net/repo/8b1664a7-c9c9-4442-8718-9aec9e2110a2/0/FF89F23BCBC42635E97AE15A7FB69E1E09A97DAF.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FF89F23BCBC42635E97AE15A7FB69E1E09A97DAF.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 06 Dec 2025 12:05:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7b:11:a6:38:dc:de:0e:6a:14:cd:87:be:83:dd:65:b6:99:83:d6:54 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=FF89F23BCBC42635E97AE15A7FB69E1E09A97DAF Validity Not Before: Dec 3 06:17:15 2025 GMT Not After : Dec 6 12:05:15 2025 GMT Subject: CN=FB36A9C3A27AD496C3EB22E1A065EC815B2314EE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:07:ca:65:ca:bc:84:a4:8f:c0:6f:78:d7:1e: b9:f2:33:35:c6:de:76:eb:74:48:b2:45:42:e4:df: 7f:69:11:64:83:d7:66:5e:3b:2a:c5:29:d8:10:df: ad:57:d3:af:fe:74:63:dc:f0:ef:ca:d2:5b:35:18: f0:33:95:33:5b:ab:60:3c:8e:d0:7a:f6:ea:be:b3: 03:68:13:51:c4:82:4b:29:89:1b:1f:91:24:da:6f: 1f:c4:cf:f2:06:4f:3d:cd:e3:30:88:1a:4c:db:d6: 3a:5d:53:86:ba:55:2e:62:23:73:d9:fb:de:20:c5: de:59:72:7c:65:4b:50:8c:5f:24:e0:c5:f3:f8:61: fe:cc:d1:aa:55:83:28:7d:4b:39:bd:76:a1:82:c0: 80:57:d1:2d:0b:0e:6a:2b:52:f6:56:c9:4f:f3:61: 8a:b6:d4:fb:64:5c:43:bd:8b:90:a1:c5:04:49:f6: 42:4e:12:77:b3:42:ad:8b:10:1a:08:db:ce:12:5f: 64:2f:c2:be:49:5e:77:66:a0:95:78:83:d4:df:d6: 8a:9c:bb:55:4b:dc:7b:f4:c6:38:e2:7d:eb:fe:cc: 40:94:27:f4:c6:0a:be:1f:37:62:99:ba:b3:61:e3: a9:05:16:c0:7f:15:fc:91:fc:ce:81:66:40:28:2c: e0:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FB:36:A9:C3:A2:7A:D4:96:C3:EB:22:E1:A0:65:EC:81:5B:23:14:EE X509v3 Authority Key Identifier: keyid:FF:89:F2:3B:CB:C4:26:35:E9:7A:E1:5A:7F:B6:9E:1E:09:A9:7D:AF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/8b1664a7-c9c9-4442-8718-9aec9e2110a2/0/FF89F23BCBC42635E97AE15A7FB69E1E09A97DAF.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FF89F23BCBC42635E97AE15A7FB69E1E09A97DAF.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/8b1664a7-c9c9-4442-8718-9aec9e2110a2/0/FF89F23BCBC42635E97AE15A7FB69E1E09A97DAF.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 20:e9:39:43:c4:f3:99:2a:a4:93:fb:4e:ed:d7:15:cb:79:e3: 14:01:a4:16:86:c9:e5:c0:1e:a5:7b:56:42:ce:ca:e7:13:fc: 48:6f:45:03:74:27:a6:1c:c8:06:1c:1a:69:f9:fa:4e:55:1a: e3:49:e1:97:fa:b7:bf:c2:31:0e:2c:72:ed:17:c4:76:fb:da: b9:97:00:10:80:e2:86:3e:7e:e6:25:d2:35:fc:72:9e:1e:a1: f7:3e:f5:98:4d:5d:a7:1c:a4:91:21:6f:b9:ae:01:d3:4e:be: b8:bd:92:29:16:79:f3:55:61:e2:87:f2:17:a1:d8:28:9a:0c: e8:d3:1d:2b:74:37:82:9a:69:ef:11:25:31:06:8b:fa:07:f6: 1b:3b:e8:9c:50:84:96:6d:38:a8:69:26:30:ed:a3:d9:1d:2b: cb:e1:c5:96:01:c2:84:93:ee:6a:e7:b7:75:67:66:b0:cf:3c: 7f:69:26:73:3c:19:2d:80:ae:6d:00:ac:b9:3c:a2:70:e7:89: e0:9e:4e:fd:e5:5c:d6:d2:5a:a4:77:26:d6:88:b0:9c:23:0d: fa:f9:cc:41:92:fd:e1:65:1c:c1:2e:e8:a5:dc:5a:30:fe:d4: f3:34:d0:15:73:09:04:f7:35:cb:cd:51:9d:1f:b8:85:0f:4a: cb:e0:a5:17 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUexGmONzeDmoUzYe+g91ltpmD1lQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRkY4OUYyM0JDQkM0MjYzNUU5N0FFMTVBN0ZCNjlFMUUw OUE5N0RBRjAeFw0yNTEyMDMwNjE3MTVaFw0yNTEyMDYxMjA1MTVaMDMxMTAvBgNV BAMTKEZCMzZBOUMzQTI3QUQ0OTZDM0VCMjJFMUEwNjVFQzgxNUIyMzE0RUUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDEB8plyryEpI/Ab3jXHrnyMzXG 3nbrdEiyRULk339pEWSD12ZeOyrFKdgQ361X06/+dGPc8O/K0ls1GPAzlTNbq2A8 jtB69uq+swNoE1HEgkspiRsfkSTabx/Ez/IGTz3N4zCIGkzb1jpdU4a6VS5iI3PZ +94gxd5ZcnxlS1CMXyTgxfP4Yf7M0apVgyh9Szm9dqGCwIBX0S0LDmorUvZWyU/z YYq21PtkXEO9i5ChxQRJ9kJOEnezQq2LEBoI284SX2Qvwr5JXndmoJV4g9Tf1oqc u1VL3Hv0xjjifev+zECUJ/TGCr4fN2KZurNh46kFFsB/FfyR/M6BZkAoLOAHAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU+zapw6J61JbD6yLhoGXsgVsjFO4wHwYDVR0j BBgwFoAU/4nyO8vEJjXpeuFaf7aeHgmpfa8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 YjE2NjRhNy1jOWM5LTQ0NDItODcxOC05YWVjOWUyMTEwYTIvMC9GRjg5RjIzQkNC QzQyNjM1RTk3QUUxNUE3RkI2OUUxRTA5QTk3REFGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRkY4OUYyM0JDQkM0MjYzNUU5N0FFMTVBN0ZCNjlFMUUwOUE5 N0RBRi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOGIxNjY0YTctYzljOS00NDQyLTg3 MTgtOWFlYzllMjExMGEyLzAvRkY4OUYyM0JDQkM0MjYzNUU5N0FFMTVBN0ZCNjlF MUUwOUE5N0RBRi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACDpOUPE85kqpJP7Tu3XFct54xQBpBaGyeXA HqV7VkLOyucT/EhvRQN0J6YcyAYcGmn5+k5VGuNJ4Zf6t7/CMQ4scu0XxHb72rmX ABCA4oY+fuYl0jX8cp4eofc+9ZhNXaccpJEhb7muAdNOvri9kikWefNVYeKH8heh 2CiaDOjTHSt0N4Kaae8RJTEGi/oH9hs76JxQhJZtOKhpJjDto9kdK8vhxZYBwoST 7mrnt3VnZrDPPH9pJnM8GS2Arm0ArLk8onDnieCeTv3lXNbSWqR3JtaIsJwjDfr5 zEGS/eFlHMEu6KXcWjD+1PM00BVzCQT3NcvNUZ0fuIUPSsvgpRc= -----END CERTIFICATE-----Generated at Wed Dec 3 13:58:07 2025 by rpki-client