This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/6efb90b1-b68f-4463-a1bd-e908c8a1ed1a/0/FFEFEB2C96B1BED5C5D6D823EE3C6D80698B9FD6.mft File: FFEFEB2C96B1BED5C5D6D823EE3C6D80698B9FD6.mft (raw, json) Hash identifier: qJefzV2n00ygXCXlTUg0GGWB55jdzeXrXi0/Z08eq5g= Subject key identifier: B1:37:DE:98:D5:C2:15:43:12:76:A8:29:67:E1:2E:B6:E7:69:D3:34 Authority key identifier: FF:EF:EB:2C:96:B1:BE:D5:C5:D6:D8:23:EE:3C:6D:80:69:8B:9F:D6 Certificate issuer: /CN=FFEFEB2C96B1BED5C5D6D823EE3C6D80698B9FD6 Certificate serial: 18223215ADD54E6482B373F7F37EAB17B5B4C3B8 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FFEFEB2C96B1BED5C5D6D823EE3C6D80698B9FD6.cer Subject info access: rsync://repo-rpki.idnic.net/repo/6efb90b1-b68f-4463-a1bd-e908c8a1ed1a/0/FFEFEB2C96B1BED5C5D6D823EE3C6D80698B9FD6.mft Manifest number: 03E5 Signing time: Fri 05 Dec 2025 23:31:10 +0000 Manifest this update: Fri 05 Dec 2025 23:26:10 +0000 Manifest next update: Tue 09 Dec 2025 01:24:10 +0000 Files and hashes: 1: FFEFEB2C96B1BED5C5D6D823EE3C6D80698B9FD6.crl (hash: 7PHKZXWIvMQN4QgZYOiPPt/xnT7YARdKF6XSMqQ1cS0=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/6efb90b1-b68f-4463-a1bd-e908c8a1ed1a/0/FFEFEB2C96B1BED5C5D6D823EE3C6D80698B9FD6.crl rsync://repo-rpki.idnic.net/repo/6efb90b1-b68f-4463-a1bd-e908c8a1ed1a/0/FFEFEB2C96B1BED5C5D6D823EE3C6D80698B9FD6.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FFEFEB2C96B1BED5C5D6D823EE3C6D80698B9FD6.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 09 Dec 2025 01:24:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 18:22:32:15:ad:d5:4e:64:82:b3:73:f7:f3:7e:ab:17:b5:b4:c3:b8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=FFEFEB2C96B1BED5C5D6D823EE3C6D80698B9FD6 Validity Not Before: Dec 5 23:26:10 2025 GMT Not After : Dec 9 01:24:10 2025 GMT Subject: CN=B137DE98D5C215431276A82967E12EB6E769D334 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:c4:01:65:a6:ff:de:5d:4b:d9:2c:64:fb:ab: 76:26:34:78:22:ad:66:5a:ac:e9:80:50:12:f7:ed: cb:49:e0:e2:1a:83:83:e7:2d:82:ea:f0:3b:ef:ec: a4:21:7c:8b:31:25:c0:de:cf:da:2b:ec:4f:51:53: e6:4c:8f:dd:54:1d:b3:87:87:fd:6b:24:da:91:29: 5a:0f:93:75:a7:b8:7e:72:13:0c:11:03:30:02:8a: 6c:e7:ba:47:eb:bb:60:69:94:c6:30:66:e0:3d:33: f8:df:47:ea:56:cf:71:56:b5:0c:55:b0:34:b9:26: 24:46:be:5d:35:d8:1f:89:76:a2:fb:1b:22:0d:ff: 1c:e7:39:4c:68:35:d3:f6:d5:b9:63:60:a6:c5:6e: 78:70:ab:0a:f4:c8:48:7f:55:99:33:84:3e:c6:f0: 87:80:ae:8b:60:9d:89:ee:ed:63:31:68:12:9e:ff: fe:33:e2:91:eb:36:01:f8:39:ef:44:49:32:69:ab: 39:b5:7b:b1:83:12:91:11:0b:bc:e9:04:db:c7:90: c7:05:14:54:88:ef:0e:ef:92:ad:f1:a6:1d:64:09: 18:3b:7b:db:66:cd:09:17:fd:86:71:a4:42:bb:fe: 58:e4:0c:70:e4:ce:59:ee:63:6d:5a:ef:9d:dc:b2: 58:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:37:DE:98:D5:C2:15:43:12:76:A8:29:67:E1:2E:B6:E7:69:D3:34 X509v3 Authority Key Identifier: keyid:FF:EF:EB:2C:96:B1:BE:D5:C5:D6:D8:23:EE:3C:6D:80:69:8B:9F:D6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/6efb90b1-b68f-4463-a1bd-e908c8a1ed1a/0/FFEFEB2C96B1BED5C5D6D823EE3C6D80698B9FD6.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FFEFEB2C96B1BED5C5D6D823EE3C6D80698B9FD6.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/6efb90b1-b68f-4463-a1bd-e908c8a1ed1a/0/FFEFEB2C96B1BED5C5D6D823EE3C6D80698B9FD6.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 08:91:7a:f4:29:b4:d8:da:9f:95:c8:be:2c:ad:4b:e0:a2:84: b1:ef:50:6c:97:9c:90:fc:4b:56:66:46:50:9f:58:fc:e9:a5: 0f:19:b5:14:e2:43:f6:62:70:07:c6:74:d2:26:e5:df:a5:9f: 0a:12:d4:aa:f4:b6:c0:c0:8b:05:ad:1b:f7:04:d9:a0:19:fa: 80:dc:56:d4:f7:6d:be:fb:40:28:4e:e6:78:9b:a6:d0:01:07: 60:e3:fd:86:5a:67:fc:73:49:d2:d8:b1:e2:d2:e1:e3:06:25: 91:f8:83:9f:bf:83:92:71:28:fc:7f:a4:ae:19:5e:f0:b8:2e: b9:11:0b:7f:b3:af:bf:3f:09:9e:05:09:b4:5a:34:7f:69:e2: bf:d2:b2:5c:e2:cd:43:10:46:7a:fd:98:c3:4b:39:3d:b7:ff: 98:ae:37:e2:b5:3a:41:5e:a7:90:00:1c:89:b9:83:34:61:17: f5:9f:ce:e5:0b:61:0f:a1:be:94:a4:8f:a5:b0:d0:c4:c6:19: 6b:21:a0:e3:e1:c8:ef:2f:39:68:c3:32:ea:2e:dd:53:8b:33: d5:d2:1a:8c:62:71:fc:22:50:ae:1a:aa:7b:fc:c7:3a:5d:e5: 30:62:47:0e:e5:9b:7d:45:65:0a:e8:13:27:4d:6a:4b:19:fe: 0a:9f:52:5b -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUGCIyFa3VTmSCs3P3836rF7W0w7gwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRkZFRkVCMkM5NkIxQkVENUM1RDZEODIzRUUzQzZEODA2 OThCOUZENjAeFw0yNTEyMDUyMzI2MTBaFw0yNTEyMDkwMTI0MTBaMDMxMTAvBgNV BAMTKEIxMzdERTk4RDVDMjE1NDMxMjc2QTgyOTY3RTEyRUI2RTc2OUQzMzQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC4xAFlpv/eXUvZLGT7q3YmNHgi rWZarOmAUBL37ctJ4OIag4PnLYLq8Dvv7KQhfIsxJcDez9or7E9RU+ZMj91UHbOH h/1rJNqRKVoPk3WnuH5yEwwRAzACimznukfru2BplMYwZuA9M/jfR+pWz3FWtQxV sDS5JiRGvl012B+JdqL7GyIN/xznOUxoNdP21bljYKbFbnhwqwr0yEh/VZkzhD7G 8IeArotgnYnu7WMxaBKe//4z4pHrNgH4Oe9ESTJpqzm1e7GDEpERC7zpBNvHkMcF FFSI7w7vkq3xph1kCRg7e9tmzQkX/YZxpEK7/ljkDHDkzlnuY21a753cslgDAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUsTfemNXCFUMSdqgpZ+Eutudp0zQwHwYDVR0j BBgwFoAU/+/rLJaxvtXF1tgj7jxtgGmLn9YwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 ZWZiOTBiMS1iNjhmLTQ0NjMtYTFiZC1lOTA4YzhhMWVkMWEvMC9GRkVGRUIyQzk2 QjFCRUQ1QzVENkQ4MjNFRTNDNkQ4MDY5OEI5RkQ2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRkZFRkVCMkM5NkIxQkVENUM1RDZEODIzRUUzQzZEODA2OThC OUZENi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNmVmYjkwYjEtYjY4Zi00NDYzLWEx YmQtZTkwOGM4YTFlZDFhLzAvRkZFRkVCMkM5NkIxQkVENUM1RDZEODIzRUUzQzZE ODA2OThCOUZENi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAiRevQptNjan5XIviytS+CihLHvUGyXnJD8 S1ZmRlCfWPzppQ8ZtRTiQ/ZicAfGdNIm5d+lnwoS1Kr0tsDAiwWtG/cE2aAZ+oDc VtT3bb77QChO5nibptABB2Dj/YZaZ/xzSdLYseLS4eMGJZH4g5+/g5JxKPx/pK4Z XvC4LrkRC3+zr78/CZ4FCbRaNH9p4r/SslzizUMQRnr9mMNLOT23/5iuN+K1OkFe p5AAHIm5gzRhF/WfzuULYQ+hvpSkj6Ww0MTGGWshoOPhyO8vOWjDMuou3VOLM9XS GoxicfwiUK4aqnv8xzpd5TBiRw7lm31FZQroEydNaksZ/gqfUls= -----END CERTIFICATE-----Generated at Sun Dec 7 01:02:52 2025 by rpki-client