This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/6efb90b1-b68f-4463-a1bd-e908c8a1ed1a/0/FFEFEB2C96B1BED5C5D6D823EE3C6D80698B9FD6.mft File: FFEFEB2C96B1BED5C5D6D823EE3C6D80698B9FD6.mft (raw, json) Hash identifier: GjMw+Qd0B5kftvhxOF5ij7FXdPitk+oAA1qJvN292D8= Subject key identifier: 0F:A9:B7:88:F3:62:8F:6A:0E:7A:BA:29:0D:92:FD:1D:2D:6C:59:9C Authority key identifier: FF:EF:EB:2C:96:B1:BE:D5:C5:D6:D8:23:EE:3C:6D:80:69:8B:9F:D6 Certificate issuer: /CN=FFEFEB2C96B1BED5C5D6D823EE3C6D80698B9FD6 Certificate serial: 7930161511742EBA1D9053C1717B0AF64C9851B7 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FFEFEB2C96B1BED5C5D6D823EE3C6D80698B9FD6.cer Subject info access: rsync://repo-rpki.idnic.net/repo/6efb90b1-b68f-4463-a1bd-e908c8a1ed1a/0/FFEFEB2C96B1BED5C5D6D823EE3C6D80698B9FD6.mft Manifest number: 03EA Signing time: Wed 17 Dec 2025 03:01:12 +0000 Manifest this update: Wed 17 Dec 2025 02:56:12 +0000 Manifest next update: Sat 20 Dec 2025 08:19:12 +0000 Files and hashes: 1: FFEFEB2C96B1BED5C5D6D823EE3C6D80698B9FD6.crl (hash: r5v+SnAhW2ZaXstoHVe7yz/6VpFmX6iM5t0Tbu0fqFI=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/6efb90b1-b68f-4463-a1bd-e908c8a1ed1a/0/FFEFEB2C96B1BED5C5D6D823EE3C6D80698B9FD6.crl rsync://repo-rpki.idnic.net/repo/6efb90b1-b68f-4463-a1bd-e908c8a1ed1a/0/FFEFEB2C96B1BED5C5D6D823EE3C6D80698B9FD6.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FFEFEB2C96B1BED5C5D6D823EE3C6D80698B9FD6.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 20 Dec 2025 08:19:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 79:30:16:15:11:74:2e:ba:1d:90:53:c1:71:7b:0a:f6:4c:98:51:b7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=FFEFEB2C96B1BED5C5D6D823EE3C6D80698B9FD6 Validity Not Before: Dec 17 02:56:12 2025 GMT Not After : Dec 20 08:19:12 2025 GMT Subject: CN=0FA9B788F3628F6A0E7ABA290D92FD1D2D6C599C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:aa:3e:d5:07:39:4d:92:91:5c:a4:cc:f3:de: 9d:bd:7d:c0:18:67:ad:aa:e3:0b:91:ff:a8:e3:b7: 64:5c:1e:77:b5:b6:0c:93:14:0b:71:2c:ca:19:dd: 54:12:06:bb:f9:52:d9:96:91:f2:29:e7:2e:f8:0b: 3c:c0:cf:5d:29:b3:79:3d:6e:ab:bc:dd:46:1e:f9: 35:42:d0:16:99:33:26:a7:a5:73:80:86:ad:d4:ad: 0d:24:e1:01:0d:2c:b4:ba:0c:4b:ea:0b:ec:44:64: 38:8a:19:96:01:21:1e:cb:de:8f:41:f4:57:e9:ab: 86:28:3d:4e:da:f1:44:02:19:6d:7b:28:f3:96:c4: 93:9b:7a:eb:24:f6:b3:9b:fb:91:f6:4a:13:c0:0b: 78:9a:c8:cb:ef:df:c0:c7:21:2c:eb:f5:de:43:13: e9:c4:29:cb:8b:a3:b5:4a:c3:16:0f:08:5f:32:db: 72:1a:b7:cb:a8:ea:2a:54:ea:d8:d4:14:19:88:2a: 94:da:78:ae:70:70:96:83:e1:65:26:6f:17:7e:5c: 27:6a:c1:37:db:9f:79:df:d2:94:14:7f:ad:6e:f5: 1b:60:03:33:22:b8:79:20:4d:da:e2:d3:c4:4a:90: f1:ef:1b:a6:37:39:9d:68:58:fb:b5:c7:c3:8a:ea: f5:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0F:A9:B7:88:F3:62:8F:6A:0E:7A:BA:29:0D:92:FD:1D:2D:6C:59:9C X509v3 Authority Key Identifier: keyid:FF:EF:EB:2C:96:B1:BE:D5:C5:D6:D8:23:EE:3C:6D:80:69:8B:9F:D6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/6efb90b1-b68f-4463-a1bd-e908c8a1ed1a/0/FFEFEB2C96B1BED5C5D6D823EE3C6D80698B9FD6.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FFEFEB2C96B1BED5C5D6D823EE3C6D80698B9FD6.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/6efb90b1-b68f-4463-a1bd-e908c8a1ed1a/0/FFEFEB2C96B1BED5C5D6D823EE3C6D80698B9FD6.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 76:9b:7b:b3:e7:46:88:a1:41:06:e0:ab:9e:fd:8c:05:64:20: 6e:2f:96:14:6a:f3:88:00:69:10:d1:e9:9a:be:1d:10:93:95: f3:f0:85:58:e0:23:8c:a3:e6:2d:0d:86:af:91:a7:dd:9b:27: b1:70:7a:3c:2d:83:5b:e1:b9:b5:5b:3c:d5:96:ed:47:ce:33: ce:38:01:21:ce:0c:6b:4a:d3:44:e5:92:05:62:12:6f:1b:d4: bd:c8:1b:44:de:5e:f8:6f:ec:6a:45:9c:05:69:ad:1c:29:88: dc:a5:05:a9:27:3a:33:c5:c4:90:79:59:80:f6:22:a4:04:ea: 44:6f:b4:43:12:6c:7d:4d:e3:1d:a5:34:ea:6c:d1:27:50:05: 5b:96:64:da:cc:39:9e:4c:9c:0e:5a:55:94:4f:56:08:c9:cf: 2e:f9:f9:d4:e4:59:cc:af:5e:c9:94:fc:2d:5f:9f:ba:94:91: 90:ff:e5:6a:1c:dc:9b:df:05:b1:cb:b4:be:ed:5c:23:f9:e2: e0:69:aa:94:f5:95:b4:f0:27:aa:57:73:9d:fd:34:ef:78:eb: 23:ac:19:bd:c5:16:3b:bd:d6:6e:46:72:63:b2:7c:1a:e2:13: 1f:7b:b6:b7:11:37:19:63:6d:6f:1e:78:55:81:0e:77:d2:09: ef:b1:c1:99 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUeTAWFRF0LrodkFPBcXsK9kyYUbcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRkZFRkVCMkM5NkIxQkVENUM1RDZEODIzRUUzQzZEODA2 OThCOUZENjAeFw0yNTEyMTcwMjU2MTJaFw0yNTEyMjAwODE5MTJaMDMxMTAvBgNV BAMTKDBGQTlCNzg4RjM2MjhGNkEwRTdBQkEyOTBEOTJGRDFEMkQ2QzU5OUMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDjqj7VBzlNkpFcpMzz3p29fcAY Z62q4wuR/6jjt2RcHne1tgyTFAtxLMoZ3VQSBrv5UtmWkfIp5y74CzzAz10ps3k9 bqu83UYe+TVC0BaZMyanpXOAhq3UrQ0k4QENLLS6DEvqC+xEZDiKGZYBIR7L3o9B 9Ffpq4YoPU7a8UQCGW17KPOWxJObeusk9rOb+5H2ShPAC3iayMvv38DHISzr9d5D E+nEKcuLo7VKwxYPCF8y23Iat8uo6ipU6tjUFBmIKpTaeK5wcJaD4WUmbxd+XCdq wTfbn3nf0pQUf61u9RtgAzMiuHkgTdri08RKkPHvG6Y3OZ1oWPu1x8OK6vUjAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUD6m3iPNij2oOeropDZL9HS1sWZwwHwYDVR0j BBgwFoAU/+/rLJaxvtXF1tgj7jxtgGmLn9YwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 ZWZiOTBiMS1iNjhmLTQ0NjMtYTFiZC1lOTA4YzhhMWVkMWEvMC9GRkVGRUIyQzk2 QjFCRUQ1QzVENkQ4MjNFRTNDNkQ4MDY5OEI5RkQ2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRkZFRkVCMkM5NkIxQkVENUM1RDZEODIzRUUzQzZEODA2OThC OUZENi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNmVmYjkwYjEtYjY4Zi00NDYzLWEx YmQtZTkwOGM4YTFlZDFhLzAvRkZFRkVCMkM5NkIxQkVENUM1RDZEODIzRUUzQzZE ODA2OThCOUZENi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHabe7PnRoihQQbgq579jAVkIG4vlhRq84gA aRDR6Zq+HRCTlfPwhVjgI4yj5i0Nhq+Rp92bJ7Fwejwtg1vhubVbPNWW7UfOM844 ASHODGtK00TlkgViEm8b1L3IG0TeXvhv7GpFnAVprRwpiNylBaknOjPFxJB5WYD2 IqQE6kRvtEMSbH1N4x2lNOps0SdQBVuWZNrMOZ5MnA5aVZRPVgjJzy75+dTkWcyv XsmU/C1fn7qUkZD/5Woc3JvfBbHLtL7tXCP54uBpqpT1lbTwJ6pXc539NO946yOs Gb3FFju91m5GcmOyfBriEx97trcRNxljbW8eeFWBDnfSCe+xwZk= -----END CERTIFICATE-----Generated at Thu Dec 18 04:55:59 2025 by rpki-client