This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/9b3784fe-f9fe-4cbe-8768-263a76986a3a/0/FF75AEDDC6059E8A2B830E487D72BE77E330BEEF.mft File: FF75AEDDC6059E8A2B830E487D72BE77E330BEEF.mft (raw, json) Hash identifier: oWS4KCDTChKZLQcZ33BPh6fkM4v8wKyBn9xCtquH0fY= Subject key identifier: 97:38:18:D8:79:8C:FC:33:DD:01:7A:B9:01:13:A2:73:EE:A3:42:E0 Authority key identifier: FF:75:AE:DD:C6:05:9E:8A:2B:83:0E:48:7D:72:BE:77:E3:30:BE:EF Certificate issuer: /CN=FF75AEDDC6059E8A2B830E487D72BE77E330BEEF Certificate serial: 71CE1EACF179F0DE0413CB792F1293FC2514F3EC Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FF75AEDDC6059E8A2B830E487D72BE77E330BEEF.cer Subject info access: rsync://repo-rpki.idnic.net/repo/9b3784fe-f9fe-4cbe-8768-263a76986a3a/0/FF75AEDDC6059E8A2B830E487D72BE77E330BEEF.mft Manifest number: 01D2 Signing time: Wed 03 Dec 2025 04:51:30 +0000 Manifest this update: Wed 03 Dec 2025 04:46:30 +0000 Manifest next update: Sat 06 Dec 2025 16:38:30 +0000 Files and hashes: 1: 3130332e3132312e3133322e302f32332d3234203d3e20313335343738.roa (hash: +aJ3urDYDAdZbLVxgK3efiShr+akQCYv1/hl/FmSvgY=) 2: 3130332e3132312e3133342e302f32332d3234203d3e20313335343738.roa (hash: YYTZNty3sg6WbwJZplWjBQqyNGraOYIziE5EjfxvIWA=) 3: FF75AEDDC6059E8A2B830E487D72BE77E330BEEF.crl (hash: x9fma02/wPqHfneL5hqy/ViWKfBaz9qVuyV/G/6aF1o=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/9b3784fe-f9fe-4cbe-8768-263a76986a3a/0/FF75AEDDC6059E8A2B830E487D72BE77E330BEEF.crl rsync://repo-rpki.idnic.net/repo/9b3784fe-f9fe-4cbe-8768-263a76986a3a/0/FF75AEDDC6059E8A2B830E487D72BE77E330BEEF.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FF75AEDDC6059E8A2B830E487D72BE77E330BEEF.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 06 Dec 2025 12:07:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 71:ce:1e:ac:f1:79:f0:de:04:13:cb:79:2f:12:93:fc:25:14:f3:ec Signature Algorithm: sha256WithRSAEncryption Issuer: CN=FF75AEDDC6059E8A2B830E487D72BE77E330BEEF Validity Not Before: Dec 3 04:46:30 2025 GMT Not After : Dec 6 16:38:30 2025 GMT Subject: CN=973818D8798CFC33DD017AB90113A273EEA342E0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:84:21:34:dd:ef:70:8b:12:5f:c4:67:2c:da: 94:0e:e9:0c:71:b8:79:26:87:3f:8e:b6:76:e7:3a: 58:f4:9d:9e:ef:60:d1:8c:11:b0:8a:df:63:ed:b1: 45:33:80:b0:3f:4f:ea:4a:6b:63:6c:0e:7e:cc:09: 12:6f:16:0e:d7:f3:a2:cb:10:2b:d7:72:c6:58:5f: c6:89:01:52:55:c2:94:b6:db:e1:5f:cd:c1:88:77: 34:0f:27:1b:8a:81:3a:9d:71:12:b3:c2:cb:c6:e3: 69:46:c0:07:05:90:bb:e8:af:26:64:04:51:51:ea: dc:53:88:dc:51:b4:9f:b1:4e:e6:ba:de:af:f9:c9: 13:93:29:63:ab:ee:0a:59:1d:cb:cb:20:c2:36:3c: 82:53:fd:9b:e4:cd:16:3f:f8:77:70:b5:9f:49:d4: 6c:3e:7a:0f:f8:4c:dc:19:d3:e5:ff:1e:19:37:d0: 34:05:fc:6f:17:1f:d9:e8:e0:e6:93:45:f7:66:85: 8c:99:96:49:18:81:28:f6:41:85:99:61:e3:81:4e: 5c:65:d5:87:ea:e7:65:1a:88:ff:16:2d:cb:ba:40: ef:78:20:9f:35:51:8f:19:e6:44:75:ee:54:50:ad: 79:7d:05:f9:a2:1b:41:42:86:d2:71:a1:9e:cc:16: b8:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 97:38:18:D8:79:8C:FC:33:DD:01:7A:B9:01:13:A2:73:EE:A3:42:E0 X509v3 Authority Key Identifier: keyid:FF:75:AE:DD:C6:05:9E:8A:2B:83:0E:48:7D:72:BE:77:E3:30:BE:EF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/9b3784fe-f9fe-4cbe-8768-263a76986a3a/0/FF75AEDDC6059E8A2B830E487D72BE77E330BEEF.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FF75AEDDC6059E8A2B830E487D72BE77E330BEEF.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/9b3784fe-f9fe-4cbe-8768-263a76986a3a/0/FF75AEDDC6059E8A2B830E487D72BE77E330BEEF.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 46:93:21:53:a0:ba:a1:07:d2:fe:0f:2c:2b:29:74:8c:ea:92: f9:a2:48:07:9a:9f:b3:67:51:f9:07:58:bb:10:13:7e:f3:cb: a0:6b:57:6b:19:d2:45:68:26:55:d4:df:7b:8d:e3:f7:6c:3a: 8d:bf:70:ab:7c:8e:b1:93:8e:70:b6:c0:27:45:d9:66:a1:87: 1e:2e:14:76:2c:b7:b0:28:02:c8:66:19:41:19:af:3b:a5:70: f7:93:70:e8:dd:83:9a:a3:4a:2e:d5:5e:5c:f4:20:bc:aa:3e: 91:22:fd:6a:6f:69:e4:a5:71:d6:ca:f1:f2:e7:bb:10:85:dc: 4c:c5:a3:82:f4:11:3f:a7:c2:0a:86:63:b2:60:dc:45:92:7f: 37:86:5c:4b:62:73:70:6b:d5:3b:0d:e6:73:86:f7:63:8b:53: 85:30:03:70:c3:59:0b:8e:bc:7b:14:cc:30:b9:0b:b5:03:35: 06:79:b2:6f:22:c3:53:60:03:50:2d:f6:ce:2b:3e:b9:c8:70: 41:76:43:d7:06:b5:81:36:ea:22:3d:e9:6d:6d:0b:04:ad:a4: 5f:de:ec:25:75:b3:ee:e6:39:ae:5d:0a:31:36:d3:13:31:ef: 83:ba:da:94:8e:7b:9f:9d:0a:a9:40:bd:e4:d6:f5:a3:29:36: 4e:c4:91:ad -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUcc4erPF58N4EE8t5LxKT/CUU8+wwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRkY3NUFFRERDNjA1OUU4QTJCODMwRTQ4N0Q3MkJFNzdF MzMwQkVFRjAeFw0yNTEyMDMwNDQ2MzBaFw0yNTEyMDYxNjM4MzBaMDMxMTAvBgNV BAMTKDk3MzgxOEQ4Nzk4Q0ZDMzNERDAxN0FCOTAxMTNBMjczRUVBMzQyRTAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDThCE03e9wixJfxGcs2pQO6Qxx uHkmhz+OtnbnOlj0nZ7vYNGMEbCK32PtsUUzgLA/T+pKa2NsDn7MCRJvFg7X86LL ECvXcsZYX8aJAVJVwpS22+FfzcGIdzQPJxuKgTqdcRKzwsvG42lGwAcFkLvoryZk BFFR6txTiNxRtJ+xTua63q/5yROTKWOr7gpZHcvLIMI2PIJT/ZvkzRY/+HdwtZ9J 1Gw+eg/4TNwZ0+X/Hhk30DQF/G8XH9no4OaTRfdmhYyZlkkYgSj2QYWZYeOBTlxl 1Yfq52UaiP8WLcu6QO94IJ81UY8Z5kR17lRQrXl9BfmiG0FChtJxoZ7MFrinAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUlzgY2HmM/DPdAXq5AROic+6jQuAwHwYDVR0j BBgwFoAU/3Wu3cYFnoorgw5IfXK+d+Mwvu8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 YjM3ODRmZS1mOWZlLTRjYmUtODc2OC0yNjNhNzY5ODZhM2EvMC9GRjc1QUVEREM2 MDU5RThBMkI4MzBFNDg3RDcyQkU3N0UzMzBCRUVGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRkY3NUFFRERDNjA1OUU4QTJCODMwRTQ4N0Q3MkJFNzdFMzMw QkVFRi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOWIzNzg0ZmUtZjlmZS00Y2JlLTg3 NjgtMjYzYTc2OTg2YTNhLzAvRkY3NUFFRERDNjA1OUU4QTJCODMwRTQ4N0Q3MkJF NzdFMzMwQkVFRi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEaTIVOguqEH0v4PLCspdIzqkvmiSAean7Nn UfkHWLsQE37zy6BrV2sZ0kVoJlXU33uN4/dsOo2/cKt8jrGTjnC2wCdF2Wahhx4u FHYst7AoAshmGUEZrzulcPeTcOjdg5qjSi7VXlz0ILyqPpEi/WpvaeSlcdbK8fLn uxCF3EzFo4L0ET+nwgqGY7Jg3EWSfzeGXEtic3Br1TsN5nOG92OLU4UwA3DDWQuO vHsUzDC5C7UDNQZ5sm8iw1NgA1At9s4rPrnIcEF2Q9cGtYE26iI96W1tCwStpF/e 7CV1s+7mOa5dCjE20xMx74O62pSOe5+dCqlAveTW9aMpNk7Eka0= -----END CERTIFICATE-----Generated at Wed Dec 3 12:45:53 2025 by rpki-client