This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/fbe04038-a1b6-432c-854b-cc6e8cf32e06/0/FF77507E6D1F0E0B6EB0112E9CFBD1AF1C1F6DD4.mft File: FF77507E6D1F0E0B6EB0112E9CFBD1AF1C1F6DD4.mft (raw, json) Hash identifier: uJDa0bnVTwoaQ+zq1wHFhslvM3ogvGd/hq6HA2ty5Zo= Subject key identifier: D9:19:9B:DA:C6:46:DE:9A:F9:46:CE:58:93:4E:6B:5D:10:9B:3B:6F Authority key identifier: FF:77:50:7E:6D:1F:0E:0B:6E:B0:11:2E:9C:FB:D1:AF:1C:1F:6D:D4 Certificate issuer: /CN=FF77507E6D1F0E0B6EB0112E9CFBD1AF1C1F6DD4 Certificate serial: 239B648BB113999955E6506EF7EFD9FCCB0E01CF Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FF77507E6D1F0E0B6EB0112E9CFBD1AF1C1F6DD4.cer Subject info access: rsync://repo-rpki.idnic.net/repo/fbe04038-a1b6-432c-854b-cc6e8cf32e06/0/FF77507E6D1F0E0B6EB0112E9CFBD1AF1C1F6DD4.mft Manifest number: 022F Signing time: Wed 03 Dec 2025 06:02:26 +0000 Manifest this update: Wed 03 Dec 2025 05:57:26 +0000 Manifest next update: Sat 06 Dec 2025 16:07:26 +0000 Files and hashes: 1: FF77507E6D1F0E0B6EB0112E9CFBD1AF1C1F6DD4.crl (hash: mXgedb/bdzjrkMq0S1LgJnHOKW+rKwcNyvWCtHZH/k4=) 2: 3130332e3137372e31342e302f32342d3234203d3e20313437313338.roa (hash: 2HLKDZ4NotrKv5eD+avvVTu9dBP+/6Ewaq5ipG+lyWE=) 3: 3130332e3137372e31352e302f32342d3234203d3e20313437313338.roa (hash: eF9NB+BjEkYpNET986L8/mFTnt6eJT0/RWpF2VpYMW8=) 4: 3130332e3137372e31342e302f32332d3233203d3e20313437313338.roa (hash: 5z8wRtouH3UZuHrJrJfhmhXWcm8bh9b9rb8I23FOiCg=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/fbe04038-a1b6-432c-854b-cc6e8cf32e06/0/FF77507E6D1F0E0B6EB0112E9CFBD1AF1C1F6DD4.crl rsync://repo-rpki.idnic.net/repo/fbe04038-a1b6-432c-854b-cc6e8cf32e06/0/FF77507E6D1F0E0B6EB0112E9CFBD1AF1C1F6DD4.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FF77507E6D1F0E0B6EB0112E9CFBD1AF1C1F6DD4.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 06 Dec 2025 12:07:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 23:9b:64:8b:b1:13:99:99:55:e6:50:6e:f7:ef:d9:fc:cb:0e:01:cf Signature Algorithm: sha256WithRSAEncryption Issuer: CN=FF77507E6D1F0E0B6EB0112E9CFBD1AF1C1F6DD4 Validity Not Before: Dec 3 05:57:26 2025 GMT Not After : Dec 6 16:07:26 2025 GMT Subject: CN=D9199BDAC646DE9AF946CE58934E6B5D109B3B6F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:79:56:bd:e1:d3:8c:63:9a:67:c8:a6:97:ff: bf:2b:c4:16:35:c0:58:c8:6b:82:2e:2e:00:26:33: 9c:d5:78:78:4a:b6:9f:e6:d9:14:be:73:6a:74:9e: 7d:57:e5:7c:43:94:f9:84:56:c0:2b:11:ff:e9:cc: e0:e7:5a:a1:2e:36:ed:41:84:82:35:f4:73:89:9a: 8d:63:5c:2c:be:e5:35:ef:cd:94:a6:44:32:3a:20: d9:31:31:b9:db:36:69:51:59:d1:25:2f:d1:1d:d1: 09:8c:9f:37:b3:44:f3:b1:34:d5:14:de:88:87:22: 2d:35:80:95:b7:e4:50:4c:ac:97:6a:ce:68:bd:28: 97:bc:7b:61:4a:63:01:f2:e5:28:84:61:dc:9b:47: f8:f7:c0:1d:b6:9b:3f:14:eb:17:1b:92:04:8b:1e: 9a:69:47:87:2c:07:2b:2c:2d:41:ba:9b:94:de:1e: e8:5f:25:63:fd:29:77:97:d3:d4:04:b8:0b:27:79: bd:39:3d:2b:f3:69:18:3b:9b:d9:35:bd:09:b8:81: b3:9b:01:83:1f:9c:3d:f1:2e:0e:02:53:f7:92:32: 49:58:45:bf:7a:0c:03:17:3b:8f:3e:0d:0c:67:2d: ef:51:56:97:55:38:3e:3e:18:b7:6f:6d:48:b6:e1: c6:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:19:9B:DA:C6:46:DE:9A:F9:46:CE:58:93:4E:6B:5D:10:9B:3B:6F X509v3 Authority Key Identifier: keyid:FF:77:50:7E:6D:1F:0E:0B:6E:B0:11:2E:9C:FB:D1:AF:1C:1F:6D:D4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/fbe04038-a1b6-432c-854b-cc6e8cf32e06/0/FF77507E6D1F0E0B6EB0112E9CFBD1AF1C1F6DD4.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FF77507E6D1F0E0B6EB0112E9CFBD1AF1C1F6DD4.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/fbe04038-a1b6-432c-854b-cc6e8cf32e06/0/FF77507E6D1F0E0B6EB0112E9CFBD1AF1C1F6DD4.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7d:37:19:7e:37:09:a3:97:56:64:23:0b:6c:0b:44:ea:58:ac: 79:ed:b6:1a:f4:75:2e:60:ec:7a:d7:43:3e:0c:48:b5:2a:5e: c8:df:4b:7d:26:8b:d5:c7:b0:1b:5d:4b:3d:7b:bd:ad:92:16: 99:3b:00:11:77:76:bf:83:78:3d:45:a8:0f:d5:04:0c:bc:e1: 41:7a:d3:9d:13:b2:b7:f4:6d:0b:01:00:fb:6a:e0:54:a7:79: 3c:a6:40:5a:2b:95:ec:a4:3a:90:00:df:95:16:59:57:37:67: 46:24:e3:c9:88:a7:97:20:bb:a7:ba:26:45:e3:e2:77:e0:a9: 6b:62:a3:1a:6d:57:d3:bd:6b:5d:a2:d7:76:12:f3:32:f2:de: 1e:4b:32:87:46:1e:9b:75:15:83:b6:b1:7a:0b:93:61:26:f4: 83:07:a7:b0:c9:39:8c:b2:81:26:07:2f:cf:d2:5d:d2:cc:39: 19:ef:0d:17:23:ca:75:16:74:54:b0:59:9a:64:46:67:04:31: 2a:83:70:f0:76:ae:be:4f:66:06:80:b5:9f:01:44:e0:47:1a: 7d:e9:9f:b1:6b:52:74:3c:66:ec:eb:0c:14:30:38:de:c5:6a: 7c:e8:fb:b5:9a:14:b7:ab:3d:75:63:33:b5:72:2e:9f:d2:12: b9:c8:34:0a -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUI5tki7ETmZlV5lBu9+/Z/MsOAc8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRkY3NzUwN0U2RDFGMEUwQjZFQjAxMTJFOUNGQkQxQUYx QzFGNkRENDAeFw0yNTEyMDMwNTU3MjZaFw0yNTEyMDYxNjA3MjZaMDMxMTAvBgNV BAMTKEQ5MTk5QkRBQzY0NkRFOUFGOTQ2Q0U1ODkzNEU2QjVEMTA5QjNCNkYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCUeVa94dOMY5pnyKaX/78rxBY1 wFjIa4IuLgAmM5zVeHhKtp/m2RS+c2p0nn1X5XxDlPmEVsArEf/pzODnWqEuNu1B hII19HOJmo1jXCy+5TXvzZSmRDI6INkxMbnbNmlRWdElL9Ed0QmMnzezRPOxNNUU 3oiHIi01gJW35FBMrJdqzmi9KJe8e2FKYwHy5SiEYdybR/j3wB22mz8U6xcbkgSL HpppR4csByssLUG6m5TeHuhfJWP9KXeX09QEuAsneb05PSvzaRg7m9k1vQm4gbOb AYMfnD3xLg4CU/eSMklYRb96DAMXO48+DQxnLe9RVpdVOD4+GLdvbUi24caZAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU2Rmb2sZG3pr5Rs5Yk05rXRCbO28wHwYDVR0j BBgwFoAU/3dQfm0fDgtusBEunPvRrxwfbdQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m YmUwNDAzOC1hMWI2LTQzMmMtODU0Yi1jYzZlOGNmMzJlMDYvMC9GRjc3NTA3RTZE MUYwRTBCNkVCMDExMkU5Q0ZCRDFBRjFDMUY2REQ0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRkY3NzUwN0U2RDFGMEUwQjZFQjAxMTJFOUNGQkQxQUYxQzFG NkRENC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZmJlMDQwMzgtYTFiNi00MzJjLTg1 NGItY2M2ZThjZjMyZTA2LzAvRkY3NzUwN0U2RDFGMEUwQjZFQjAxMTJFOUNGQkQx QUYxQzFGNkRENC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAH03GX43CaOXVmQjC2wLROpYrHntthr0dS5g 7HrXQz4MSLUqXsjfS30mi9XHsBtdSz17va2SFpk7ABF3dr+DeD1FqA/VBAy84UF6 050Tsrf0bQsBAPtq4FSneTymQForleykOpAA35UWWVc3Z0Yk48mIp5cgu6e6JkXj 4nfgqWtioxptV9O9a12i13YS8zLy3h5LModGHpt1FYO2sXoLk2Em9IMHp7DJOYyy gSYHL8/SXdLMORnvDRcjynUWdFSwWZpkRmcEMSqDcPB2rr5PZgaAtZ8BROBHGn3p n7FrUnQ8ZuzrDBQwON7Fanzo+7WaFLerPXVjM7VyLp/SErnINAo= -----END CERTIFICATE-----Generated at Wed Dec 3 14:55:12 2025 by rpki-client