This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/8792a4cd-dbac-43ac-8060-2e8d42eae655/0/1FCD47FB4BD729E22E4FEEFCE5B61B4E1C7FE946.mft File: 1FCD47FB4BD729E22E4FEEFCE5B61B4E1C7FE946.mft (raw, json) Hash identifier: m/GtfsWnDZsnagDeboRRY1WiXWXbmEmMI2Sz+fdtrkY= Subject key identifier: 76:EE:58:49:9A:37:70:CE:CD:5E:F4:83:67:0F:5A:27:97:CB:CB:D6 Authority key identifier: 1F:CD:47:FB:4B:D7:29:E2:2E:4F:EE:FC:E5:B6:1B:4E:1C:7F:E9:46 Certificate issuer: /CN=1FCD47FB4BD729E22E4FEEFCE5B61B4E1C7FE946 Certificate serial: 29BD173A78C0B7B84BBFBA2FE3E86270087DADF0 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1FCD47FB4BD729E22E4FEEFCE5B61B4E1C7FE946.cer Subject info access: rsync://repo-rpki.idnic.net/repo/8792a4cd-dbac-43ac-8060-2e8d42eae655/0/1FCD47FB4BD729E22E4FEEFCE5B61B4E1C7FE946.mft Manifest number: 04F9 Signing time: Sat 06 Dec 2025 21:30:43 +0000 Manifest this update: Sat 06 Dec 2025 21:25:43 +0000 Manifest next update: Wed 10 Dec 2025 07:26:43 +0000 Files and hashes: 1: 1FCD47FB4BD729E22E4FEEFCE5B61B4E1C7FE946.crl (hash: z5/FFeElf8vdImWDom7wj7GkM9HCs3An09a+NGaNaVg=) 2: 3131382e39312e3132382e302f32312d3234203d3e203234313935.roa (hash: yiPIGsDISayK97qWqm2UWsTxEHdxKETOsL8gSiwFMjA=) 3: 3230322e36372e382e302f32312d3234203d3e203234313935.roa (hash: B+C/2EohdvfSLSdEWCv4uFVDG8om8Pw0dnsHmi+NJ9Y=) 4: 323430313a343230303a3a2f33322d3438203d3e203234313935.roa (hash: xPjBnSpHmpcu0qAxiY2wE80xegcTsRNtPEAJ6PwASdw=) 5: 3131382e39312e3134302e302f32322d3234203d3e203633353032.roa (hash: XlrHKxvILobzAM8qX1Td9F4llGO1s7dDnxuDShAIB6Q=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/8792a4cd-dbac-43ac-8060-2e8d42eae655/0/1FCD47FB4BD729E22E4FEEFCE5B61B4E1C7FE946.crl rsync://repo-rpki.idnic.net/repo/8792a4cd-dbac-43ac-8060-2e8d42eae655/0/1FCD47FB4BD729E22E4FEEFCE5B61B4E1C7FE946.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1FCD47FB4BD729E22E4FEEFCE5B61B4E1C7FE946.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 09 Dec 2025 15:57:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 29:bd:17:3a:78:c0:b7:b8:4b:bf:ba:2f:e3:e8:62:70:08:7d:ad:f0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1FCD47FB4BD729E22E4FEEFCE5B61B4E1C7FE946 Validity Not Before: Dec 6 21:25:43 2025 GMT Not After : Dec 10 07:26:43 2025 GMT Subject: CN=76EE58499A3770CECD5EF483670F5A2797CBCBD6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:40:f9:57:60:9f:29:e3:db:d7:d2:b5:fe:ba: 00:c5:ba:14:8c:84:89:0f:ba:03:5b:3a:fe:4e:c3: 44:3c:1f:8d:80:15:98:1e:58:05:b4:2b:e2:97:59: cd:e1:d5:98:36:41:c7:45:06:b9:23:51:49:b9:98: 17:2b:96:08:05:be:4f:9f:15:3a:1d:70:81:e2:48: 0e:76:08:d7:5d:43:0c:51:5b:a0:04:92:84:3e:5f: ae:d3:fb:79:a1:41:50:bf:dd:d7:7d:c1:47:46:dd: 54:3a:ea:00:53:30:d3:02:f7:14:90:83:bb:28:66: 2a:2e:20:2b:20:66:c7:66:21:c5:90:10:75:e1:13: db:3f:ac:25:12:55:2a:95:95:c9:d0:94:14:1e:63: 1a:91:01:dd:f5:e7:34:39:f9:5b:65:6e:f3:15:53: 37:69:d8:f0:6b:5e:9c:ea:be:75:07:81:14:56:b6: 96:58:a4:b3:78:06:4c:fb:09:e3:e4:32:bd:2f:fa: 37:ab:7d:38:51:d7:8c:03:40:eb:2c:46:52:f7:ac: 96:6d:96:54:90:7a:67:83:10:dc:21:6b:d7:87:56: c2:a7:8d:1a:a3:75:73:ab:22:62:05:8d:de:c3:24: 79:51:0f:40:47:f1:97:77:09:8e:3b:d8:cc:06:24: 6f:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 76:EE:58:49:9A:37:70:CE:CD:5E:F4:83:67:0F:5A:27:97:CB:CB:D6 X509v3 Authority Key Identifier: keyid:1F:CD:47:FB:4B:D7:29:E2:2E:4F:EE:FC:E5:B6:1B:4E:1C:7F:E9:46 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/8792a4cd-dbac-43ac-8060-2e8d42eae655/0/1FCD47FB4BD729E22E4FEEFCE5B61B4E1C7FE946.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1FCD47FB4BD729E22E4FEEFCE5B61B4E1C7FE946.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/8792a4cd-dbac-43ac-8060-2e8d42eae655/0/1FCD47FB4BD729E22E4FEEFCE5B61B4E1C7FE946.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 69:bf:41:5f:84:c1:e4:5b:f9:86:7a:2d:be:c0:31:be:60:b9: 42:12:cd:09:de:ae:d0:ca:d9:c8:d9:99:4c:cf:7c:fb:9b:c2: 89:ef:c9:59:ef:9a:ae:91:19:b5:31:72:29:92:c2:55:40:90: ac:05:30:5b:74:1d:5e:ad:e3:0f:42:39:aa:57:9a:a6:8b:6c: d7:3f:1d:43:0c:a7:a1:3f:dd:e6:a4:b0:3e:b4:d1:ba:da:3f: 11:b8:dd:8d:90:06:bb:14:d2:54:5e:66:c1:c3:ad:db:b1:44: ac:23:5a:75:d2:76:8d:e0:c4:7a:e0:06:23:65:4d:42:ec:72: 39:a2:ed:49:c0:dc:f0:e6:70:ec:08:5d:1d:09:80:3a:ac:ce: 41:24:71:d3:5d:d9:9d:93:3e:e4:ca:e3:1c:53:61:40:70:c5: 87:d9:d4:f2:66:70:d8:61:6c:c7:6e:ea:40:66:8f:f3:ff:e8: a0:3f:27:ba:49:79:7b:b9:1b:0f:6c:fb:1a:4a:2b:6f:f4:25: f5:88:5e:fa:81:9e:5a:ca:fb:f2:1c:15:52:9b:b1:d9:da:10: a1:a3:da:fa:78:3f:e4:35:d8:0f:c0:aa:91:ff:9a:39:e1:b8: 30:12:d6:eb:87:67:7d:58:1c:b0:bf:e9:0a:1e:52:13:48:d0: 80:73:df:5c -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUKb0XOnjAt7hLv7ov4+hicAh9rfAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUZDRDQ3RkI0QkQ3MjlFMjJFNEZFRUZDRTVCNjFCNEUx QzdGRTk0NjAeFw0yNTEyMDYyMTI1NDNaFw0yNTEyMTAwNzI2NDNaMDMxMTAvBgNV BAMTKDc2RUU1ODQ5OUEzNzcwQ0VDRDVFRjQ4MzY3MEY1QTI3OTdDQkNCRDYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDaQPlXYJ8p49vX0rX+ugDFuhSM hIkPugNbOv5Ow0Q8H42AFZgeWAW0K+KXWc3h1Zg2QcdFBrkjUUm5mBcrlggFvk+f FTodcIHiSA52CNddQwxRW6AEkoQ+X67T+3mhQVC/3dd9wUdG3VQ66gBTMNMC9xSQ g7soZiouICsgZsdmIcWQEHXhE9s/rCUSVSqVlcnQlBQeYxqRAd315zQ5+VtlbvMV Uzdp2PBrXpzqvnUHgRRWtpZYpLN4Bkz7CePkMr0v+jerfThR14wDQOssRlL3rJZt llSQemeDENwha9eHVsKnjRqjdXOrImIFjd7DJHlRD0BH8Zd3CY472MwGJG+5AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUdu5YSZo3cM7NXvSDZw9aJ5fLy9YwHwYDVR0j BBgwFoAUH81H+0vXKeIuT+785bYbThx/6UYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 NzkyYTRjZC1kYmFjLTQzYWMtODA2MC0yZThkNDJlYWU2NTUvMC8xRkNENDdGQjRC RDcyOUUyMkU0RkVFRkNFNUI2MUI0RTFDN0ZFOTQ2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMUZDRDQ3RkI0QkQ3MjlFMjJFNEZFRUZDRTVCNjFCNEUxQzdG RTk0Ni5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vODc5MmE0Y2QtZGJhYy00M2FjLTgw NjAtMmU4ZDQyZWFlNjU1LzAvMUZDRDQ3RkI0QkQ3MjlFMjJFNEZFRUZDRTVCNjFC NEUxQzdGRTk0Ni5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGm/QV+EweRb+YZ6Lb7AMb5guUISzQnertDK 2cjZmUzPfPubwonvyVnvmq6RGbUxcimSwlVAkKwFMFt0HV6t4w9COapXmqaLbNc/ HUMMp6E/3eaksD600braPxG43Y2QBrsU0lReZsHDrduxRKwjWnXSdo3gxHrgBiNl TULscjmi7UnA3PDmcOwIXR0JgDqszkEkcdNd2Z2TPuTK4xxTYUBwxYfZ1PJmcNhh bMdu6kBmj/P/6KA/J7pJeXu5Gw9s+xpKK2/0JfWIXvqBnlrK+/IcFVKbsdnaEKGj 2vp4P+Q12A/AqpH/mjnhuDAS1uuHZ31YHLC/6QoeUhNI0IBz31w= -----END CERTIFICATE-----Generated at Sun Dec 7 04:57:44 2025 by rpki-client