This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/1d011a1c-a0ad-4d93-86af-3f0aadd9684f/0/FF3F066A5E9AB8F988B8E17C7A56DD2E00A66AD8.mft File: FF3F066A5E9AB8F988B8E17C7A56DD2E00A66AD8.mft (raw, json) Hash identifier: 7KhnB5h0QxP1SPnoc2NLXFUbDUZUQZVfA6yivm7j2vU= Subject key identifier: 85:89:E3:75:DC:56:FA:47:DC:4A:E0:70:22:76:DA:0D:48:E6:99:C5 Authority key identifier: FF:3F:06:6A:5E:9A:B8:F9:88:B8:E1:7C:7A:56:DD:2E:00:A6:6A:D8 Certificate issuer: /CN=FF3F066A5E9AB8F988B8E17C7A56DD2E00A66AD8 Certificate serial: 744FFD6A49F0AF2FEA2B64168F126D4D6716239C Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/FF3F066A5E9AB8F988B8E17C7A56DD2E00A66AD8.cer Subject info access: rsync://repo-rpki.idnic.net/repo/1d011a1c-a0ad-4d93-86af-3f0aadd9684f/0/FF3F066A5E9AB8F988B8E17C7A56DD2E00A66AD8.mft Manifest number: FA Signing time: Fri 05 Dec 2025 06:32:26 +0000 Manifest this update: Fri 05 Dec 2025 06:27:26 +0000 Manifest next update: Mon 08 Dec 2025 10:48:26 +0000 Files and hashes: 1: FF3F066A5E9AB8F988B8E17C7A56DD2E00A66AD8.crl (hash: vCWdCe8Us1aoKi/RPWqggtdDkVqQtu84JHPU81kSM5Q=) 2: 3135372e31352e38332e302f32342d3234203d3e20313532333633.roa (hash: tmwMaZpoyniOHlrA1Ev0DGw1sFkx/sRTma2ZD2CnpMQ=) 3: 3135372e31352e38322e302f32332d3233203d3e20313532333633.roa (hash: TxbDMhKSioNeR20MqOvnLPpYmLwOjXBp9YQNGW/Dswg=) 4: 3135372e31352e38322e302f32342d3234203d3e20313532333633.roa (hash: LhdUiZ829jnCYzP+T/q1kR6KjN+CYgUrJ54OONbPWMo=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/1d011a1c-a0ad-4d93-86af-3f0aadd9684f/0/FF3F066A5E9AB8F988B8E17C7A56DD2E00A66AD8.crl rsync://repo-rpki.idnic.net/repo/1d011a1c-a0ad-4d93-86af-3f0aadd9684f/0/FF3F066A5E9AB8F988B8E17C7A56DD2E00A66AD8.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/FF3F066A5E9AB8F988B8E17C7A56DD2E00A66AD8.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 08 Dec 2025 10:48:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 74:4f:fd:6a:49:f0:af:2f:ea:2b:64:16:8f:12:6d:4d:67:16:23:9c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=FF3F066A5E9AB8F988B8E17C7A56DD2E00A66AD8 Validity Not Before: Dec 5 06:27:26 2025 GMT Not After : Dec 8 10:48:26 2025 GMT Subject: CN=8589E375DC56FA47DC4AE0702276DA0D48E699C5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:45:e7:00:fb:4d:0d:71:ed:8c:37:c0:0e:05: 85:f0:21:8e:64:e0:26:4d:a1:46:bd:60:dc:66:53: 62:0a:95:5e:6c:44:c5:88:d1:73:84:8c:92:0c:99: 6a:bd:95:24:ea:d0:c3:00:fb:61:1c:be:89:2d:ce: 4e:3c:b2:51:a6:73:7a:89:26:91:c0:f2:54:fa:8d: a8:a8:33:7a:ad:53:cb:9d:68:ff:f4:55:18:0b:5f: 17:55:b5:46:2f:37:76:ac:b7:88:4d:6a:2b:e0:ce: 8d:f8:3e:e2:c5:6d:af:c0:1c:55:82:86:7a:c5:8f: 3b:3c:a9:a6:2e:02:bb:bd:3f:e3:f8:a7:7e:7a:48: 6b:a9:1b:94:87:30:d8:f3:aa:d6:f6:06:93:d5:f6: 2e:d2:06:7b:7f:a8:ad:2b:9b:dc:42:bc:7d:dd:4b: 37:7f:7e:53:59:8d:fb:09:03:51:46:1c:da:2e:52: 7e:99:60:ca:86:6c:bd:09:a9:99:d3:88:e8:b9:27: bc:77:ae:b9:15:31:23:d9:55:ef:8e:8c:a7:7f:a0: 1a:47:45:a3:6f:80:4b:b4:20:68:12:96:9f:fb:cb: d5:2c:ac:72:41:c2:8c:94:2a:98:62:0e:40:58:89: 70:48:ca:2b:dc:18:31:5b:cf:4e:46:b4:80:d6:77: e8:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:89:E3:75:DC:56:FA:47:DC:4A:E0:70:22:76:DA:0D:48:E6:99:C5 X509v3 Authority Key Identifier: keyid:FF:3F:06:6A:5E:9A:B8:F9:88:B8:E1:7C:7A:56:DD:2E:00:A6:6A:D8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/1d011a1c-a0ad-4d93-86af-3f0aadd9684f/0/FF3F066A5E9AB8F988B8E17C7A56DD2E00A66AD8.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/FF3F066A5E9AB8F988B8E17C7A56DD2E00A66AD8.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/1d011a1c-a0ad-4d93-86af-3f0aadd9684f/0/FF3F066A5E9AB8F988B8E17C7A56DD2E00A66AD8.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 29:6e:b1:a4:3b:2d:c2:39:22:ce:2f:c5:b2:73:68:1b:c7:13: 37:ad:57:12:67:ef:25:a8:13:8c:54:7e:b0:76:a1:d2:f6:26: cc:48:bf:c1:27:99:3a:c4:05:9c:96:2a:03:7d:d5:5b:cc:8f: 74:22:ef:28:06:0f:9d:22:63:a7:5b:bf:c0:a1:fc:ca:0e:4b: dc:f9:fc:f1:05:73:8b:12:73:6f:f8:22:5f:d4:7c:db:df:4c: 8d:0e:74:ed:a8:b2:ad:b3:8e:fd:43:bb:13:ba:70:16:fc:bf: 83:b5:2b:0e:bb:51:33:4f:09:d3:d1:3e:69:f5:71:b7:6b:4a: 4a:81:b6:64:b5:74:26:ca:44:e2:6c:29:45:85:f8:86:3c:e6: 1b:af:da:ce:73:f9:a9:92:57:68:c3:3f:b0:d8:33:3b:87:9e: 8f:75:17:a0:90:56:a5:81:7e:5c:9c:4b:7c:68:cc:15:1f:8c: 30:a7:db:8a:d7:08:f1:08:3f:63:7a:c0:ea:ca:98:6e:6d:c1: 78:3c:ab:50:8d:54:2f:ba:3b:45:6b:3f:30:ed:5c:7e:44:5a: a0:7b:d9:4c:27:8e:a3:53:1e:ae:34:46:45:2b:b0:91:bc:04: ff:8c:8c:65:77:56:a0:05:20:61:63:c9:44:74:35:b4:f6:36: 7a:62:07:a1 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUdE/9aknwry/qK2QWjxJtTWcWI5wwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRkYzRjA2NkE1RTlBQjhGOTg4QjhFMTdDN0E1NkREMkUw MEE2NkFEODAeFw0yNTEyMDUwNjI3MjZaFw0yNTEyMDgxMDQ4MjZaMDMxMTAvBgNV BAMTKDg1ODlFMzc1REM1NkZBNDdEQzRBRTA3MDIyNzZEQTBENDhFNjk5QzUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQChRecA+00Nce2MN8AOBYXwIY5k 4CZNoUa9YNxmU2IKlV5sRMWI0XOEjJIMmWq9lSTq0MMA+2Ecvoktzk48slGmc3qJ JpHA8lT6jaioM3qtU8udaP/0VRgLXxdVtUYvN3ast4hNaivgzo34PuLFba/AHFWC hnrFjzs8qaYuAru9P+P4p356SGupG5SHMNjzqtb2BpPV9i7SBnt/qK0rm9xCvH3d Szd/flNZjfsJA1FGHNouUn6ZYMqGbL0JqZnTiOi5J7x3rrkVMSPZVe+OjKd/oBpH RaNvgEu0IGgSlp/7y9UsrHJBwoyUKphiDkBYiXBIyivcGDFbz05GtIDWd+iNAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUhYnjddxW+kfcSuBwInbaDUjmmcUwHwYDVR0j BBgwFoAU/z8Gal6auPmIuOF8elbdLgCmatgwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x ZDAxMWExYy1hMGFkLTRkOTMtODZhZi0zZjBhYWRkOTY4NGYvMC9GRjNGMDY2QTVF OUFCOEY5ODhCOEUxN0M3QTU2REQyRTAwQTY2QUQ4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvRkYzRjA2NkE1RTlBQjhGOTg4QjhFMTdDN0E1NkREMkUwMEE2 NkFEOC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMWQwMTFhMWMtYTBhZC00ZDkzLTg2 YWYtM2YwYWFkZDk2ODRmLzAvRkYzRjA2NkE1RTlBQjhGOTg4QjhFMTdDN0E1NkRE MkUwMEE2NkFEOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAClusaQ7LcI5Is4vxbJzaBvHEzetVxJn7yWo E4xUfrB2odL2JsxIv8EnmTrEBZyWKgN91VvMj3Qi7ygGD50iY6dbv8Ch/MoOS9z5 /PEFc4sSc2/4Il/UfNvfTI0OdO2osq2zjv1DuxO6cBb8v4O1Kw67UTNPCdPRPmn1 cbdrSkqBtmS1dCbKROJsKUWF+IY85huv2s5z+amSV2jDP7DYMzuHno91F6CQVqWB flycS3xozBUfjDCn24rXCPEIP2N6wOrKmG5twXg8q1CNVC+6O0VrPzDtXH5EWqB7 2UwnjqNTHq40RkUrsJG8BP+MjGV3VqAFIGFjyUR0NbT2NnpiB6E= -----END CERTIFICATE-----Generated at Sun Dec 7 08:11:50 2025 by rpki-client