This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/e8a9237a-726c-4c19-9b4e-7b94b1424c4b/0/FF947BE188D359EA7EDF887D86DA2C7CC7460B70.mft File: FF947BE188D359EA7EDF887D86DA2C7CC7460B70.mft (raw, json) Hash identifier: FxcFURkuCGplAxZufpAToYixRHAFzKC81IQrQXN9C7k= Subject key identifier: 1F:89:8F:66:90:08:74:66:55:BE:65:54:6F:07:DD:0C:F2:9C:EC:B0 Authority key identifier: FF:94:7B:E1:88:D3:59:EA:7E:DF:88:7D:86:DA:2C:7C:C7:46:0B:70 Certificate issuer: /CN=FF947BE188D359EA7EDF887D86DA2C7CC7460B70 Certificate serial: 5E8D10EB81391D359A67FE3BDE6789A6883E07EF Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FF947BE188D359EA7EDF887D86DA2C7CC7460B70.cer Subject info access: rsync://repo-rpki.idnic.net/repo/e8a9237a-726c-4c19-9b4e-7b94b1424c4b/0/FF947BE188D359EA7EDF887D86DA2C7CC7460B70.mft Manifest number: 0264 Signing time: Mon 15 Dec 2025 06:42:09 +0000 Manifest this update: Mon 15 Dec 2025 06:37:09 +0000 Manifest next update: Thu 18 Dec 2025 14:08:09 +0000 Files and hashes: 1: 3130332e3136322e3134312e302f32342d3234203d3e20313431303833.roa (hash: aO6ag29zhhjNXBpY8yr771GUZ2dWF2vzBvbIftVbJOY=) 2: FF947BE188D359EA7EDF887D86DA2C7CC7460B70.crl (hash: zkSu25WE8OcJv7CTcs8Iv+ehZK9UaN23HCrqc8vyQs8=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/e8a9237a-726c-4c19-9b4e-7b94b1424c4b/0/FF947BE188D359EA7EDF887D86DA2C7CC7460B70.crl rsync://repo-rpki.idnic.net/repo/e8a9237a-726c-4c19-9b4e-7b94b1424c4b/0/FF947BE188D359EA7EDF887D86DA2C7CC7460B70.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FF947BE188D359EA7EDF887D86DA2C7CC7460B70.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 18 Dec 2025 14:08:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5e:8d:10:eb:81:39:1d:35:9a:67:fe:3b:de:67:89:a6:88:3e:07:ef Signature Algorithm: sha256WithRSAEncryption Issuer: CN=FF947BE188D359EA7EDF887D86DA2C7CC7460B70 Validity Not Before: Dec 15 06:37:09 2025 GMT Not After : Dec 18 14:08:09 2025 GMT Subject: CN=1F898F669008746655BE65546F07DD0CF29CECB0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:97:2a:29:92:a6:01:b8:ed:fa:0b:2c:cb:c3: 90:21:08:01:9c:bf:8d:85:c9:9a:62:34:7e:d9:3d: f8:7a:27:30:91:81:e9:e0:5e:e6:66:57:71:74:0a: bd:e0:4d:11:b7:28:34:35:07:36:d3:b8:17:a3:c0: 4d:70:87:7e:87:4a:0b:3b:73:46:02:53:dc:6d:56: 00:40:8a:2e:dc:24:b0:34:b4:7b:a6:86:0b:43:1b: a5:dd:26:fc:a8:0d:1f:83:86:c9:6f:21:8d:2a:88: c0:71:06:47:4d:b0:f8:37:26:e7:20:ee:8d:b8:f5: 0f:57:51:8b:ee:b7:21:72:b5:37:e7:cb:ec:51:7b: 24:2d:46:f9:dd:74:9f:a1:8c:34:68:25:79:55:c3: a9:7b:e1:38:c3:de:8b:08:07:cb:55:6e:01:ca:69: 20:2b:ed:db:b2:69:43:78:0f:a8:a0:e7:e0:6e:ad: 0d:50:98:a4:0a:ac:d8:40:f7:a7:70:5b:59:d6:f4: 33:73:b6:c2:60:9b:35:29:9b:0e:3f:5d:e8:d0:7b: 80:4b:cd:b1:57:ad:59:d9:9a:b9:fd:f9:bb:f9:3d: 93:6f:b1:0d:3f:d7:df:61:bc:e3:0f:a8:94:ba:a7: 6f:98:b0:9c:41:3b:e2:be:3d:35:42:04:9c:ef:5b: 76:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:89:8F:66:90:08:74:66:55:BE:65:54:6F:07:DD:0C:F2:9C:EC:B0 X509v3 Authority Key Identifier: keyid:FF:94:7B:E1:88:D3:59:EA:7E:DF:88:7D:86:DA:2C:7C:C7:46:0B:70 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/e8a9237a-726c-4c19-9b4e-7b94b1424c4b/0/FF947BE188D359EA7EDF887D86DA2C7CC7460B70.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FF947BE188D359EA7EDF887D86DA2C7CC7460B70.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e8a9237a-726c-4c19-9b4e-7b94b1424c4b/0/FF947BE188D359EA7EDF887D86DA2C7CC7460B70.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7a:ff:ae:a1:7b:ed:e0:c8:55:55:a6:33:8b:a0:2b:47:6b:0e: 5e:97:c6:d9:e2:38:b3:f6:e7:4f:8f:6b:8f:9f:fe:86:a3:6b: 00:34:94:e5:29:ef:13:01:db:44:46:d8:c0:b7:8f:e9:7d:83: 59:26:df:79:6a:3d:de:8d:9f:fc:00:2a:94:bc:39:50:39:13: cd:ba:4e:98:ea:e3:08:2e:04:e5:0e:bb:f3:a7:16:7b:c7:c3: bd:c2:ca:05:73:44:9c:cc:0d:df:fb:25:c2:b4:c6:ca:a3:f1: 6c:25:a1:ca:b4:1b:65:3b:a1:d0:29:88:77:61:e0:7e:fd:4d: 79:5e:d7:fd:22:72:ff:64:05:fa:f1:0e:18:42:e2:95:25:e9: 44:8d:13:d7:88:d7:22:05:b8:89:3e:ca:ad:26:dc:bb:04:46: a4:f6:e7:8e:80:36:c8:31:9f:aa:2c:5d:fa:06:50:8b:65:d2: 29:d5:6c:dc:82:c6:55:91:a9:7a:61:17:28:42:77:94:91:bd: 6a:70:de:21:12:a4:78:f2:19:06:10:d1:39:d9:d5:a3:93:37: 18:f4:16:45:55:ca:7a:6b:48:df:82:99:62:96:58:05:bf:3e: f7:c8:b8:51:2a:f3:be:bb:d3:48:d8:b9:14:4c:a1:5f:19:8d: da:03:03:3c -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUXo0Q64E5HTWaZ/473meJpog+B+8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRkY5NDdCRTE4OEQzNTlFQTdFREY4ODdEODZEQTJDN0ND NzQ2MEI3MDAeFw0yNTEyMTUwNjM3MDlaFw0yNTEyMTgxNDA4MDlaMDMxMTAvBgNV BAMTKDFGODk4RjY2OTAwODc0NjY1NUJFNjU1NDZGMDdERDBDRjI5Q0VDQjAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDMlyopkqYBuO36CyzLw5AhCAGc v42FyZpiNH7ZPfh6JzCRgengXuZmV3F0Cr3gTRG3KDQ1BzbTuBejwE1wh36HSgs7 c0YCU9xtVgBAii7cJLA0tHumhgtDG6XdJvyoDR+DhslvIY0qiMBxBkdNsPg3Jucg 7o249Q9XUYvutyFytTfny+xReyQtRvnddJ+hjDRoJXlVw6l74TjD3osIB8tVbgHK aSAr7duyaUN4D6ig5+BurQ1QmKQKrNhA96dwW1nW9DNztsJgmzUpmw4/XejQe4BL zbFXrVnZmrn9+bv5PZNvsQ0/199hvOMPqJS6p2+YsJxBO+K+PTVCBJzvW3YnAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUH4mPZpAIdGZVvmVUbwfdDPKc7LAwHwYDVR0j BBgwFoAU/5R74YjTWep+34h9htosfMdGC3AwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l OGE5MjM3YS03MjZjLTRjMTktOWI0ZS03Yjk0YjE0MjRjNGIvMC9GRjk0N0JFMTg4 RDM1OUVBN0VERjg4N0Q4NkRBMkM3Q0M3NDYwQjcwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRkY5NDdCRTE4OEQzNTlFQTdFREY4ODdEODZEQTJDN0NDNzQ2 MEI3MC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZThhOTIzN2EtNzI2Yy00YzE5LTli NGUtN2I5NGIxNDI0YzRiLzAvRkY5NDdCRTE4OEQzNTlFQTdFREY4ODdEODZEQTJD N0NDNzQ2MEI3MC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHr/rqF77eDIVVWmM4ugK0drDl6XxtniOLP2 50+Pa4+f/oajawA0lOUp7xMB20RG2MC3j+l9g1km33lqPd6Nn/wAKpS8OVA5E826 Tpjq4wguBOUOu/OnFnvHw73CygVzRJzMDd/7JcK0xsqj8Wwlocq0G2U7odApiHdh 4H79TXle1/0icv9kBfrxDhhC4pUl6USNE9eI1yIFuIk+yq0m3LsERqT2546ANsgx n6osXfoGUItl0inVbNyCxlWRqXphFyhCd5SRvWpw3iESpHjyGQYQ0TnZ1aOTNxj0 FkVVynprSN+CmWKWWAW/PvfIuFEq876700jYuRRMoV8ZjdoDAzw= -----END CERTIFICATE-----Generated at Tue Dec 16 07:30:13 2025 by rpki-client