This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/a89a0661-31ee-49a2-ae9f-f6d573a17df7/0/FF1246B1AF5B158EA26E75654D7B7A6DED645787.mft File: FF1246B1AF5B158EA26E75654D7B7A6DED645787.mft (raw, json) Hash identifier: d49lC3JVSf0cietyXVmj85s1zTgLAVYUtMu41p6Eg+w= Subject key identifier: FA:F3:5D:89:DC:60:31:4A:A4:11:E8:68:C6:CB:89:1C:BE:64:40:CF Authority key identifier: FF:12:46:B1:AF:5B:15:8E:A2:6E:75:65:4D:7B:7A:6D:ED:64:57:87 Certificate issuer: /CN=FF1246B1AF5B158EA26E75654D7B7A6DED645787 Certificate serial: 72B2DA969E39E90F72254BB87B54FEC526FF0D18 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FF1246B1AF5B158EA26E75654D7B7A6DED645787.cer Subject info access: rsync://repo-rpki.idnic.net/repo/a89a0661-31ee-49a2-ae9f-f6d573a17df7/0/FF1246B1AF5B158EA26E75654D7B7A6DED645787.mft Manifest number: FD Signing time: Mon 01 Dec 2025 04:52:07 +0000 Manifest this update: Mon 01 Dec 2025 04:47:07 +0000 Manifest next update: Thu 04 Dec 2025 15:35:07 +0000 Files and hashes: 1: FF1246B1AF5B158EA26E75654D7B7A6DED645787.crl (hash: ujFQzV1n2CHJuMJAmKgNESCnfVqLfOWWtyDXIL3UPRM=) 2: 3130332e3136312e3130382e302f32342d3234203d3e20313431393132.roa (hash: uvIhcJu4c3esMkst4+88cWSmjSO0QaYXOH2ffUAXAVQ=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/a89a0661-31ee-49a2-ae9f-f6d573a17df7/0/FF1246B1AF5B158EA26E75654D7B7A6DED645787.crl rsync://repo-rpki.idnic.net/repo/a89a0661-31ee-49a2-ae9f-f6d573a17df7/0/FF1246B1AF5B158EA26E75654D7B7A6DED645787.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FF1246B1AF5B158EA26E75654D7B7A6DED645787.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 04 Dec 2025 15:35:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 72:b2:da:96:9e:39:e9:0f:72:25:4b:b8:7b:54:fe:c5:26:ff:0d:18 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=FF1246B1AF5B158EA26E75654D7B7A6DED645787 Validity Not Before: Dec 1 04:47:07 2025 GMT Not After : Dec 4 15:35:07 2025 GMT Subject: CN=FAF35D89DC60314AA411E868C6CB891CBE6440CF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:2d:9a:52:6f:a8:40:05:79:d2:17:c5:4c:e8: 21:9b:c0:d9:ee:f1:72:ff:e1:cb:f2:82:57:e1:e3: 58:89:ca:a5:6d:9d:6b:20:d2:ec:b8:0d:a5:41:08: 6a:e8:a8:c2:77:65:5d:f9:95:cb:e2:a8:10:65:6f: fb:6d:2c:bb:4f:ac:3b:ea:8b:8f:bd:7f:f7:d4:42: c9:cd:11:97:92:32:b1:9e:2f:45:1e:50:08:a0:b8: 21:38:a5:09:06:47:11:8d:e5:de:4d:32:e2:fb:6b: 48:6e:b3:64:6f:fc:9d:0a:74:7e:5d:a0:b8:32:25: d9:af:ad:7f:ac:74:cf:cd:de:63:84:d6:b7:17:cd: d4:37:5d:0b:93:72:ef:a7:5c:3c:d8:50:4c:65:ee: d3:98:5b:42:ea:a1:ba:27:58:ed:08:74:cc:7f:d4: 06:35:d7:15:69:4a:a0:9b:47:35:a7:cb:ad:dc:e0: 3b:bf:85:76:ff:d1:c8:7b:aa:ec:0a:7c:1b:92:91: 1a:f1:da:2d:ec:90:2a:92:4c:7e:24:2b:f3:27:7a: c0:af:53:da:1c:56:5e:3f:55:57:36:b9:22:6b:9c: 46:af:8d:07:b5:9a:ab:c1:f0:38:9c:e1:02:c3:7d: 67:9a:a3:2b:87:5d:47:06:3e:bc:b9:2b:1f:dc:9b: 10:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:F3:5D:89:DC:60:31:4A:A4:11:E8:68:C6:CB:89:1C:BE:64:40:CF X509v3 Authority Key Identifier: keyid:FF:12:46:B1:AF:5B:15:8E:A2:6E:75:65:4D:7B:7A:6D:ED:64:57:87 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/a89a0661-31ee-49a2-ae9f-f6d573a17df7/0/FF1246B1AF5B158EA26E75654D7B7A6DED645787.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FF1246B1AF5B158EA26E75654D7B7A6DED645787.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a89a0661-31ee-49a2-ae9f-f6d573a17df7/0/FF1246B1AF5B158EA26E75654D7B7A6DED645787.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 57:a1:97:18:32:d4:eb:fc:d7:41:72:33:ee:ac:d0:4d:85:3c: eb:5f:ba:55:72:1f:3c:f7:21:eb:5b:0c:17:c5:21:e4:75:63: 13:cd:ea:00:67:c2:4b:fa:51:34:70:29:79:d1:76:f4:d7:15: 24:18:66:bf:4d:38:41:a0:86:53:69:eb:bc:2d:0a:23:08:7d: b3:31:f1:42:3d:02:34:9d:04:ca:7d:08:8f:69:92:8b:ab:e2: b0:3e:c6:36:4a:b0:6f:45:24:f3:4d:e6:41:54:bf:dc:de:b6: 36:ff:bf:5d:43:b6:6f:47:89:8f:75:dc:66:ad:70:ea:4e:15: 01:e3:2d:d6:25:b9:06:62:93:0f:e1:a4:a0:c3:c6:10:ea:67: 2d:7f:80:a0:9c:f2:55:89:77:77:0c:26:08:f5:8f:74:6f:d8: 0e:13:4a:4b:e0:78:d5:98:02:7b:b0:23:34:b5:72:e4:49:b4: 0a:1c:ec:23:a6:e3:5d:2f:93:ee:51:bf:09:2a:fd:83:79:ac: a5:50:1e:b2:6f:1d:00:e9:63:ee:01:49:cf:c3:db:09:a6:ce: 20:cd:12:f7:fa:33:0b:d4:fa:73:9d:0a:84:1e:93:50:60:03: ea:1e:78:d9:d1:11:34:e0:82:85:21:50:2d:b9:cf:f6:47:33: e5:ef:68:a8 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUcrLalp456Q9yJUu4e1T+xSb/DRgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRkYxMjQ2QjFBRjVCMTU4RUEyNkU3NTY1NEQ3QjdBNkRF RDY0NTc4NzAeFw0yNTEyMDEwNDQ3MDdaFw0yNTEyMDQxNTM1MDdaMDMxMTAvBgNV BAMTKEZBRjM1RDg5REM2MDMxNEFBNDExRTg2OEM2Q0I4OTFDQkU2NDQwQ0YwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCuLZpSb6hABXnSF8VM6CGbwNnu 8XL/4cvyglfh41iJyqVtnWsg0uy4DaVBCGroqMJ3ZV35lcviqBBlb/ttLLtPrDvq i4+9f/fUQsnNEZeSMrGeL0UeUAiguCE4pQkGRxGN5d5NMuL7a0hus2Rv/J0KdH5d oLgyJdmvrX+sdM/N3mOE1rcXzdQ3XQuTcu+nXDzYUExl7tOYW0LqobonWO0IdMx/ 1AY11xVpSqCbRzWny63c4Du/hXb/0ch7quwKfBuSkRrx2i3skCqSTH4kK/MnesCv U9ocVl4/VVc2uSJrnEavjQe1mqvB8Dic4QLDfWeaoyuHXUcGPry5Kx/cmxC5AgMB AAGjggI8MIICODAdBgNVHQ4EFgQU+vNdidxgMUqkEehoxsuJHL5kQM8wHwYDVR0j BBgwFoAU/xJGsa9bFY6ibnVlTXt6be1kV4cwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h ODlhMDY2MS0zMWVlLTQ5YTItYWU5Zi1mNmQ1NzNhMTdkZjcvMC9GRjEyNDZCMUFG NUIxNThFQTI2RTc1NjU0RDdCN0E2REVENjQ1Nzg3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRkYxMjQ2QjFBRjVCMTU4RUEyNkU3NTY1NEQ3QjdBNkRFRDY0 NTc4Ny5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYTg5YTA2NjEtMzFlZS00OWEyLWFl OWYtZjZkNTczYTE3ZGY3LzAvRkYxMjQ2QjFBRjVCMTU4RUEyNkU3NTY1NEQ3QjdB NkRFRDY0NTc4Ny5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFehlxgy1Ov810FyM+6s0E2FPOtfulVyHzz3 IetbDBfFIeR1YxPN6gBnwkv6UTRwKXnRdvTXFSQYZr9NOEGghlNp67wtCiMIfbMx 8UI9AjSdBMp9CI9pkour4rA+xjZKsG9FJPNN5kFUv9zetjb/v11Dtm9HiY913Gat cOpOFQHjLdYluQZikw/hpKDDxhDqZy1/gKCc8lWJd3cMJgj1j3Rv2A4TSkvgeNWY AnuwIzS1cuRJtAoc7COm410vk+5Rvwkq/YN5rKVQHrJvHQDpY+4BSc/D2wmmziDN Evf6MwvU+nOdCoQek1BgA+oeeNnRETTggoUhUC25z/ZHM+XvaKg= -----END CERTIFICATE-----Generated at Wed Dec 3 14:13:39 2025 by rpki-client