This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/342c1f32-81ac-4118-be2f-574ca5b541ea/0/FF96D30557BDACE26C511E1F48A3514643130EA8.mft File: FF96D30557BDACE26C511E1F48A3514643130EA8.mft (raw, json) Hash identifier: P9jWQaMs0+vnul8UeaGNSAeYUOlXC+e6fOIhOFW0fX0= Subject key identifier: C4:AE:E6:DA:24:5B:BC:AB:E5:7C:50:29:7B:57:37:96:46:5A:33:62 Authority key identifier: FF:96:D3:05:57:BD:AC:E2:6C:51:1E:1F:48:A3:51:46:43:13:0E:A8 Certificate issuer: /CN=FF96D30557BDACE26C511E1F48A3514643130EA8 Certificate serial: 69DD7827412974ACB230687BD52B11BB6A3E33EF Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FF96D30557BDACE26C511E1F48A3514643130EA8.cer Subject info access: rsync://repo-rpki.idnic.net/repo/342c1f32-81ac-4118-be2f-574ca5b541ea/0/FF96D30557BDACE26C511E1F48A3514643130EA8.mft Manifest number: DD Signing time: Sat 06 Dec 2025 14:21:32 +0000 Manifest this update: Sat 06 Dec 2025 14:16:32 +0000 Manifest next update: Tue 09 Dec 2025 22:37:32 +0000 Files and hashes: 1: FF96D30557BDACE26C511E1F48A3514643130EA8.crl (hash: QTqHwB8/M5jpZOo6giI32CNzxnco23z956ck4YkKzLc=) 2: 3130332e3232392e3133312e302f32342d3234203d3e20313530393632.roa (hash: ATfPtcSN9IeC66O3vEUygO5SRQOxL5VmkMshCygiymo=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/342c1f32-81ac-4118-be2f-574ca5b541ea/0/FF96D30557BDACE26C511E1F48A3514643130EA8.crl rsync://repo-rpki.idnic.net/repo/342c1f32-81ac-4118-be2f-574ca5b541ea/0/FF96D30557BDACE26C511E1F48A3514643130EA8.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FF96D30557BDACE26C511E1F48A3514643130EA8.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 09 Dec 2025 15:57:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 69:dd:78:27:41:29:74:ac:b2:30:68:7b:d5:2b:11:bb:6a:3e:33:ef Signature Algorithm: sha256WithRSAEncryption Issuer: CN=FF96D30557BDACE26C511E1F48A3514643130EA8 Validity Not Before: Dec 6 14:16:32 2025 GMT Not After : Dec 9 22:37:32 2025 GMT Subject: CN=C4AEE6DA245BBCABE57C50297B573796465A3362 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:7e:8d:a9:d5:99:ae:ee:6a:2b:3d:74:96:99: ba:bc:19:76:c6:17:77:6a:78:20:62:3e:bf:85:b3: e2:78:4f:5f:40:12:a7:e3:81:0d:5b:61:ea:5e:02: 18:4f:9d:1a:18:be:0b:f8:ce:77:40:61:1e:9d:bd: 46:c9:22:f9:7a:db:c2:94:8e:a0:d1:bc:c6:16:0e: 51:f4:c5:fb:1c:15:4e:87:15:b6:87:01:f3:b5:45: 6e:e8:b7:ee:f9:a7:c6:2e:20:03:47:95:9f:5c:5b: d8:af:43:ea:3b:6c:b0:6f:3b:b4:ae:40:33:01:e3: a7:c3:84:9d:62:08:2a:a4:79:9a:a8:bc:1b:f3:d6: 95:e5:b5:8c:98:12:34:70:1c:be:05:f6:9f:9a:06: 67:c4:21:1f:4b:ce:e5:79:fb:75:6b:f4:20:e1:82: 45:fd:79:64:5d:5d:e2:99:74:d7:45:60:b3:58:c2: 59:73:e7:a9:ee:59:81:70:2d:6c:a1:49:fe:4e:f5: 64:f0:ed:02:80:35:f1:3b:5b:b2:95:72:44:8d:f2: 80:fe:08:26:bd:db:78:7f:a3:07:81:95:b1:38:83: db:30:93:1f:28:7d:4a:4e:45:73:6d:27:a2:4b:ab: 6d:71:e9:58:71:22:5e:65:07:a4:73:6a:a9:89:7a: 83:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:AE:E6:DA:24:5B:BC:AB:E5:7C:50:29:7B:57:37:96:46:5A:33:62 X509v3 Authority Key Identifier: keyid:FF:96:D3:05:57:BD:AC:E2:6C:51:1E:1F:48:A3:51:46:43:13:0E:A8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/342c1f32-81ac-4118-be2f-574ca5b541ea/0/FF96D30557BDACE26C511E1F48A3514643130EA8.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FF96D30557BDACE26C511E1F48A3514643130EA8.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/342c1f32-81ac-4118-be2f-574ca5b541ea/0/FF96D30557BDACE26C511E1F48A3514643130EA8.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 78:59:c1:ea:43:bb:6c:65:c1:24:e0:15:dc:91:62:e3:a3:83: 32:ca:2b:a2:f5:02:5b:fc:dc:98:61:38:6a:75:a0:a6:30:e4: ca:73:66:ed:54:d6:f9:b5:d5:41:c1:9d:38:b1:40:3a:b3:94: a7:bf:33:7c:b6:20:38:0a:d4:93:2b:41:93:5a:67:57:76:58: e0:30:82:f2:65:0a:fd:a4:fa:48:66:9c:34:7c:e2:b2:1d:0b: 6e:f3:04:7a:ee:a1:3c:33:00:87:71:0f:7e:05:48:0b:8f:31: f9:7e:37:a8:29:76:52:99:61:c3:31:91:39:10:ee:7e:df:91: b6:dc:22:4a:ac:26:30:3a:da:77:fb:97:0a:a8:87:9c:e1:08: 02:d8:a6:a0:b7:0a:59:d2:00:36:03:32:0d:3c:4e:db:b8:41: c3:45:a1:d6:d0:b0:49:3a:58:f8:0d:f9:ae:b3:73:32:fd:5c: b2:29:2e:20:e0:92:95:a2:75:3e:02:3d:f7:58:2d:f0:c9:8a: 31:90:84:c9:c5:e7:bd:f0:80:34:c4:d0:2c:dd:d7:bf:b2:cb: a6:e0:fa:ef:4f:53:a8:95:bc:86:3e:d5:3b:a3:e9:42:54:3a: cc:66:43:02:97:e8:f5:1f:32:4b:a9:15:26:ef:2c:a3:46:f3: 2c:58:16:d9 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUad14J0EpdKyyMGh71SsRu2o+M+8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRkY5NkQzMDU1N0JEQUNFMjZDNTExRTFGNDhBMzUxNDY0 MzEzMEVBODAeFw0yNTEyMDYxNDE2MzJaFw0yNTEyMDkyMjM3MzJaMDMxMTAvBgNV BAMTKEM0QUVFNkRBMjQ1QkJDQUJFNTdDNTAyOTdCNTczNzk2NDY1QTMzNjIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCdfo2p1Zmu7morPXSWmbq8GXbG F3dqeCBiPr+Fs+J4T19AEqfjgQ1bYepeAhhPnRoYvgv4zndAYR6dvUbJIvl628KU jqDRvMYWDlH0xfscFU6HFbaHAfO1RW7ot+75p8YuIANHlZ9cW9ivQ+o7bLBvO7Su QDMB46fDhJ1iCCqkeZqovBvz1pXltYyYEjRwHL4F9p+aBmfEIR9LzuV5+3Vr9CDh gkX9eWRdXeKZdNdFYLNYwllz56nuWYFwLWyhSf5O9WTw7QKANfE7W7KVckSN8oD+ CCa923h/oweBlbE4g9swkx8ofUpORXNtJ6JLq21x6VhxIl5lB6RzaqmJeoMHAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUxK7m2iRbvKvlfFApe1c3lkZaM2IwHwYDVR0j BBgwFoAU/5bTBVe9rOJsUR4fSKNRRkMTDqgwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z NDJjMWYzMi04MWFjLTQxMTgtYmUyZi01NzRjYTViNTQxZWEvMC9GRjk2RDMwNTU3 QkRBQ0UyNkM1MTFFMUY0OEEzNTE0NjQzMTMwRUE4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRkY5NkQzMDU1N0JEQUNFMjZDNTExRTFGNDhBMzUxNDY0MzEz MEVBOC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMzQyYzFmMzItODFhYy00MTE4LWJl MmYtNTc0Y2E1YjU0MWVhLzAvRkY5NkQzMDU1N0JEQUNFMjZDNTExRTFGNDhBMzUx NDY0MzEzMEVBOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHhZwepDu2xlwSTgFdyRYuOjgzLKK6L1Alv8 3JhhOGp1oKYw5MpzZu1U1vm11UHBnTixQDqzlKe/M3y2IDgK1JMrQZNaZ1d2WOAw gvJlCv2k+khmnDR84rIdC27zBHruoTwzAIdxD34FSAuPMfl+N6gpdlKZYcMxkTkQ 7n7fkbbcIkqsJjA62nf7lwqoh5zhCALYpqC3ClnSADYDMg08Ttu4QcNFodbQsEk6 WPgN+a6zczL9XLIpLiDgkpWidT4CPfdYLfDJijGQhMnF573wgDTE0Czd17+yy6bg +u9PU6iVvIY+1Tuj6UJUOsxmQwKX6PUfMkupFSbvLKNG8yxYFtk= -----END CERTIFICATE-----Generated at Sun Dec 7 02:09:38 2025 by rpki-client