This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/343f29ea-874a-4d1a-abcc-75293cb51a6d/0/FF102371565831DDB9C06DF47DF79B1120C9861E.mft File: FF102371565831DDB9C06DF47DF79B1120C9861E.mft (raw, json) Hash identifier: LBF/Dzi/q9sapX6o0HCHOWOrEVgSdzC3+5oUOYzaJxI= Subject key identifier: F7:E1:78:4C:70:80:B3:4B:B6:BD:73:37:4B:02:86:3C:5A:F1:21:63 Authority key identifier: FF:10:23:71:56:58:31:DD:B9:C0:6D:F4:7D:F7:9B:11:20:C9:86:1E Certificate issuer: /CN=FF102371565831DDB9C06DF47DF79B1120C9861E Certificate serial: 266469950F442169CA85D6B1134F60A063B9582D Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FF102371565831DDB9C06DF47DF79B1120C9861E.cer Subject info access: rsync://repo-rpki.idnic.net/repo/343f29ea-874a-4d1a-abcc-75293cb51a6d/0/FF102371565831DDB9C06DF47DF79B1120C9861E.mft Manifest number: DE Signing time: Fri 05 Dec 2025 16:01:20 +0000 Manifest this update: Fri 05 Dec 2025 15:56:20 +0000 Manifest next update: Mon 08 Dec 2025 16:39:20 +0000 Files and hashes: 1: FF102371565831DDB9C06DF47DF79B1120C9861E.crl (hash: 7NDH2T/Du+qzQ56nBiTN94GAhUTdFvvJquif7wd1aC0=) 2: 3130332e332e3233332e302f32342d3234203d3e203538343837.roa (hash: J+VrJkjfilmZKoAgsIWnKv1mOwdSs14Mc87IKiPWNdQ=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/343f29ea-874a-4d1a-abcc-75293cb51a6d/0/FF102371565831DDB9C06DF47DF79B1120C9861E.crl rsync://repo-rpki.idnic.net/repo/343f29ea-874a-4d1a-abcc-75293cb51a6d/0/FF102371565831DDB9C06DF47DF79B1120C9861E.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FF102371565831DDB9C06DF47DF79B1120C9861E.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 08 Dec 2025 16:39:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 26:64:69:95:0f:44:21:69:ca:85:d6:b1:13:4f:60:a0:63:b9:58:2d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=FF102371565831DDB9C06DF47DF79B1120C9861E Validity Not Before: Dec 5 15:56:20 2025 GMT Not After : Dec 8 16:39:20 2025 GMT Subject: CN=F7E1784C7080B34BB6BD73374B02863C5AF12163 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:66:aa:35:7c:3f:40:98:74:98:9f:ec:17:33: 30:5e:07:7f:a7:fa:6a:24:74:39:90:51:b2:ff:68: b2:0b:3a:a0:78:1f:2e:60:7a:36:bc:8e:29:2e:02: 8d:b2:b0:ea:32:65:0b:6a:e3:48:7c:58:2a:82:bb: 77:f5:70:7d:56:2a:3d:29:d7:36:05:90:ad:00:63: fb:b9:e6:38:a5:98:af:65:d9:0a:66:1a:95:9c:fd: c2:da:55:38:61:2f:24:09:5b:c9:c7:11:88:e9:2f: 69:64:78:c5:c5:52:2d:25:08:2f:c0:9b:8e:78:1c: 7c:a4:91:bc:ca:13:ba:4c:58:79:1e:7e:85:cc:aa: 7d:2c:28:2d:84:dd:2f:e7:d2:4a:39:4b:c4:9f:ff: 9a:53:9f:b2:1a:f4:6c:97:a6:39:47:1f:e8:ee:2d: be:47:ee:4b:b0:fe:3b:63:80:0d:3e:b9:2a:32:a6: 18:05:f5:6e:d3:9b:57:3e:6f:09:3c:5c:56:61:86: db:fe:8c:2b:80:dc:49:c8:d2:a7:3c:03:f0:d4:5d: fa:99:d7:42:66:80:90:48:0a:7f:7e:c1:78:b3:1c: 9e:5f:05:ee:2f:f6:99:36:7a:e2:c4:10:1c:d0:8b: e2:c1:c4:9c:06:bc:d0:49:78:84:47:6f:64:8b:5c: 8c:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F7:E1:78:4C:70:80:B3:4B:B6:BD:73:37:4B:02:86:3C:5A:F1:21:63 X509v3 Authority Key Identifier: keyid:FF:10:23:71:56:58:31:DD:B9:C0:6D:F4:7D:F7:9B:11:20:C9:86:1E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/343f29ea-874a-4d1a-abcc-75293cb51a6d/0/FF102371565831DDB9C06DF47DF79B1120C9861E.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FF102371565831DDB9C06DF47DF79B1120C9861E.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/343f29ea-874a-4d1a-abcc-75293cb51a6d/0/FF102371565831DDB9C06DF47DF79B1120C9861E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 94:24:8a:17:bd:56:a8:02:53:31:c9:06:15:35:20:82:74:7d: 35:96:f9:9b:3f:d4:b1:ba:4a:d1:46:47:75:8f:f6:1f:d2:d4: 4f:fa:a4:8f:12:50:34:d2:62:01:bf:f0:d1:ed:8c:f6:26:86: 7a:e6:af:79:a6:9c:b9:f0:3e:56:9d:86:ca:cb:f5:7a:db:e8: 8d:b7:6f:bf:c2:58:c4:2d:fb:bb:d2:cd:48:e9:d2:ce:2a:2f: 3f:ac:ad:ce:1a:bd:f9:1d:fe:99:27:3f:87:bd:c2:f8:81:17: 6a:c1:0c:46:25:dd:38:b6:be:64:15:90:ee:7c:4d:1b:1d:66: ad:8b:07:8d:ee:39:60:14:5e:35:b5:8c:69:28:78:c8:27:f2: 81:58:64:ff:9c:a5:c5:bb:0a:76:c5:7a:9a:93:4d:14:93:58: 58:f5:9a:5e:cb:2c:ef:0a:c3:81:88:8c:64:e1:45:bb:c8:e3: 3a:79:a8:be:94:77:7e:ec:61:aa:2c:8f:5f:a5:79:f8:0a:33: e0:2b:d8:e6:91:52:55:91:1c:43:a6:ac:52:a9:4f:a3:f9:b4: 89:46:45:49:64:81:3a:8b:f1:bd:ca:ad:43:ef:7e:e1:fa:07: 71:89:1a:a6:24:45:e7:87:18:dc:15:94:83:07:48:1a:0d:1f: 0b:a2:f5:8e -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUJmRplQ9EIWnKhdaxE09goGO5WC0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRkYxMDIzNzE1NjU4MzFEREI5QzA2REY0N0RGNzlCMTEy MEM5ODYxRTAeFw0yNTEyMDUxNTU2MjBaFw0yNTEyMDgxNjM5MjBaMDMxMTAvBgNV BAMTKEY3RTE3ODRDNzA4MEIzNEJCNkJENzMzNzRCMDI4NjNDNUFGMTIxNjMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCuZqo1fD9AmHSYn+wXMzBeB3+n +mokdDmQUbL/aLILOqB4Hy5geja8jikuAo2ysOoyZQtq40h8WCqCu3f1cH1WKj0p 1zYFkK0AY/u55jilmK9l2QpmGpWc/cLaVThhLyQJW8nHEYjpL2lkeMXFUi0lCC/A m454HHykkbzKE7pMWHkefoXMqn0sKC2E3S/n0ko5S8Sf/5pTn7Ia9GyXpjlHH+ju Lb5H7kuw/jtjgA0+uSoyphgF9W7Tm1c+bwk8XFZhhtv+jCuA3EnI0qc8A/DUXfqZ 10JmgJBICn9+wXizHJ5fBe4v9pk2euLEEBzQi+LBxJwGvNBJeIRHb2SLXIxrAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU9+F4THCAs0u2vXM3SwKGPFrxIWMwHwYDVR0j BBgwFoAU/xAjcVZYMd25wG30ffebESDJhh4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z NDNmMjllYS04NzRhLTRkMWEtYWJjYy03NTI5M2NiNTFhNmQvMC9GRjEwMjM3MTU2 NTgzMUREQjlDMDZERjQ3REY3OUIxMTIwQzk4NjFFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRkYxMDIzNzE1NjU4MzFEREI5QzA2REY0N0RGNzlCMTEyMEM5 ODYxRS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMzQzZjI5ZWEtODc0YS00ZDFhLWFi Y2MtNzUyOTNjYjUxYTZkLzAvRkYxMDIzNzE1NjU4MzFEREI5QzA2REY0N0RGNzlC MTEyMEM5ODYxRS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJQkihe9VqgCUzHJBhU1IIJ0fTWW+Zs/1LG6 StFGR3WP9h/S1E/6pI8SUDTSYgG/8NHtjPYmhnrmr3mmnLnwPladhsrL9Xrb6I23 b7/CWMQt+7vSzUjp0s4qLz+src4avfkd/pknP4e9wviBF2rBDEYl3Ti2vmQVkO58 TRsdZq2LB43uOWAUXjW1jGkoeMgn8oFYZP+cpcW7CnbFepqTTRSTWFj1ml7LLO8K w4GIjGThRbvI4zp5qL6Ud37sYaosj1+lefgKM+Ar2OaRUlWRHEOmrFKpT6P5tIlG RUlkgTqL8b3KrUPvfuH6B3GJGqYkReeHGNwVlIMHSBoNHwui9Y4= -----END CERTIFICATE-----Generated at Sun Dec 7 03:05:51 2025 by rpki-client