This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/8b29e912-35c6-480f-b869-2a0f8aef30d2/0/9FFCF0ADAECDBD1CC56CFEB68D9DCAF9535A1017.mft File: 9FFCF0ADAECDBD1CC56CFEB68D9DCAF9535A1017.mft (raw, json) Hash identifier: slOMZtR/L57QXgnXsG9YkaFfuuxyZiA2VOvvy+Jl3ew= Subject key identifier: 3F:2F:17:94:43:60:18:75:84:FA:12:58:E0:B7:90:B4:59:B2:29:C5 Authority key identifier: 9F:FC:F0:AD:AE:CD:BD:1C:C5:6C:FE:B6:8D:9D:CA:F9:53:5A:10:17 Certificate issuer: /CN=9FFCF0ADAECDBD1CC56CFEB68D9DCAF9535A1017 Certificate serial: 1928C1F4A0A441A2E296AED8B30112DD3F8D8484 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/9FFCF0ADAECDBD1CC56CFEB68D9DCAF9535A1017.cer Subject info access: rsync://repo-rpki.idnic.net/repo/8b29e912-35c6-480f-b869-2a0f8aef30d2/0/9FFCF0ADAECDBD1CC56CFEB68D9DCAF9535A1017.mft Manifest number: EB Signing time: Fri 05 Dec 2025 16:51:23 +0000 Manifest this update: Fri 05 Dec 2025 16:46:22 +0000 Manifest next update: Mon 08 Dec 2025 19:15:22 +0000 Files and hashes: 1: 9FFCF0ADAECDBD1CC56CFEB68D9DCAF9535A1017.crl (hash: mZ3YF/YxzH/zNzcT4oIUjDEsnNIWHhcZQt2JMA8J3C4=) 2: 3136302e32322e3232332e302f32342d3234203d3e20313533303633.roa (hash: 3zFHdm3a8hen194UbcBYniDHOiNEWgsX3k3vf+2U2C0=) 3: 3136302e32322e3232322e302f32342d3234203d3e20313533303633.roa (hash: AqEsrW0yCVLVneJjN1p8vBBqYiIcEpw7HZO5mfroGPs=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/8b29e912-35c6-480f-b869-2a0f8aef30d2/0/9FFCF0ADAECDBD1CC56CFEB68D9DCAF9535A1017.crl rsync://repo-rpki.idnic.net/repo/8b29e912-35c6-480f-b869-2a0f8aef30d2/0/9FFCF0ADAECDBD1CC56CFEB68D9DCAF9535A1017.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/9FFCF0ADAECDBD1CC56CFEB68D9DCAF9535A1017.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 08 Dec 2025 19:15:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 19:28:c1:f4:a0:a4:41:a2:e2:96:ae:d8:b3:01:12:dd:3f:8d:84:84 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9FFCF0ADAECDBD1CC56CFEB68D9DCAF9535A1017 Validity Not Before: Dec 5 16:46:22 2025 GMT Not After : Dec 8 19:15:22 2025 GMT Subject: CN=3F2F17944360187584FA1258E0B790B459B229C5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:72:aa:da:56:8c:ae:a0:f3:36:6d:55:3e:e4: 2d:86:08:75:9f:75:f3:8c:38:59:e1:bf:eb:b4:ba: 9f:74:36:8c:ba:6e:fb:d3:ea:4d:de:8c:22:0b:7f: 38:e9:79:62:30:ce:86:bc:40:c2:65:29:81:3d:93: ca:65:1e:40:ea:72:8e:c6:84:9c:c5:30:e1:37:56: f0:b2:cd:d3:63:72:71:5d:e2:af:73:d8:00:0a:c5: ec:a2:f9:a9:03:05:cb:4b:31:72:4b:75:b6:4a:12: 3f:c3:26:b4:63:f9:23:b3:5e:8e:42:8c:8e:0c:af: 29:eb:01:66:7f:51:45:82:f3:73:e7:65:b4:6e:a6: 7c:16:80:10:56:22:f7:ec:b5:31:eb:e7:e1:39:19: fe:af:ee:80:00:2c:34:55:ec:aa:9f:fa:28:ab:91: 93:d9:3c:76:cf:00:5c:f3:c4:5a:53:f0:c7:39:cf: 16:53:25:b6:3e:4e:15:cf:d7:f3:cf:aa:17:b3:09: 57:74:dd:07:be:90:32:05:4c:4b:10:5d:63:96:ab: 3c:e5:51:a8:75:75:b4:d0:bd:60:26:45:16:12:d9: f9:58:fe:27:46:4b:21:5a:15:ac:73:5a:4b:71:94: e7:78:bf:aa:e4:be:ca:0c:22:14:6a:4e:13:a4:02: 80:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3F:2F:17:94:43:60:18:75:84:FA:12:58:E0:B7:90:B4:59:B2:29:C5 X509v3 Authority Key Identifier: keyid:9F:FC:F0:AD:AE:CD:BD:1C:C5:6C:FE:B6:8D:9D:CA:F9:53:5A:10:17 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/8b29e912-35c6-480f-b869-2a0f8aef30d2/0/9FFCF0ADAECDBD1CC56CFEB68D9DCAF9535A1017.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/9FFCF0ADAECDBD1CC56CFEB68D9DCAF9535A1017.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/8b29e912-35c6-480f-b869-2a0f8aef30d2/0/9FFCF0ADAECDBD1CC56CFEB68D9DCAF9535A1017.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 73:e5:7d:26:07:56:e9:65:ec:93:eb:11:48:b1:03:c0:9d:85: bd:dc:c6:91:2c:38:69:14:d5:d3:82:a4:df:09:7f:d8:4e:03: 3d:74:2a:4d:c4:41:67:28:c0:7f:24:2d:ee:db:c4:9b:fe:b2: e7:fd:53:a6:76:3c:1f:bc:9c:0d:56:0f:d9:3c:f1:b1:68:d8: ad:09:6e:d6:9c:a4:36:77:38:45:21:ba:2a:bc:f8:f0:68:1d: 3f:a9:f0:f5:55:93:6e:ad:ab:5b:a5:f8:75:21:2b:2c:05:ed: b9:67:e2:b2:af:91:ef:32:30:5e:2f:f8:4d:50:1f:a9:f7:df: 39:98:bd:82:e7:26:07:54:0b:56:7e:47:97:bc:88:d5:03:3d: e6:81:29:07:2f:a0:78:2c:fa:e7:ef:05:9d:a4:6b:1f:ee:90: 75:f8:1d:56:ac:a6:fc:c1:c1:4a:b3:28:e1:d8:29:3a:c0:42: 26:78:9b:00:03:df:d6:7c:43:cd:09:50:9d:e4:4f:4c:1f:fc: b0:ed:d7:ff:5f:37:ec:00:d0:34:c4:9f:f7:bb:af:1c:67:2e: 43:a3:ce:6a:89:67:2c:54:49:be:d2:59:e8:51:fe:71:89:63: 19:dd:3a:0d:5b:77:46:0e:df:4d:7f:62:1d:d2:88:e8:d2:a0: ac:6f:c9:07 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUGSjB9KCkQaLilq7YswES3T+NhIQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUZGQ0YwQURBRUNEQkQxQ0M1NkNGRUI2OEQ5RENBRjk1 MzVBMTAxNzAeFw0yNTEyMDUxNjQ2MjJaFw0yNTEyMDgxOTE1MjJaMDMxMTAvBgNV BAMTKDNGMkYxNzk0NDM2MDE4NzU4NEZBMTI1OEUwQjc5MEI0NTlCMjI5QzUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDAcqraVoyuoPM2bVU+5C2GCHWf dfOMOFnhv+u0up90Noy6bvvT6k3ejCILfzjpeWIwzoa8QMJlKYE9k8plHkDqco7G hJzFMOE3VvCyzdNjcnFd4q9z2AAKxeyi+akDBctLMXJLdbZKEj/DJrRj+SOzXo5C jI4MrynrAWZ/UUWC83PnZbRupnwWgBBWIvfstTHr5+E5Gf6v7oAALDRV7Kqf+iir kZPZPHbPAFzzxFpT8Mc5zxZTJbY+ThXP1/PPqhezCVd03Qe+kDIFTEsQXWOWqzzl Uah1dbTQvWAmRRYS2flY/idGSyFaFaxzWktxlOd4v6rkvsoMIhRqThOkAoA1AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUPy8XlENgGHWE+hJY4LeQtFmyKcUwHwYDVR0j BBgwFoAUn/zwra7NvRzFbP62jZ3K+VNaEBcwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 YjI5ZTkxMi0zNWM2LTQ4MGYtYjg2OS0yYTBmOGFlZjMwZDIvMC85RkZDRjBBREFF Q0RCRDFDQzU2Q0ZFQjY4RDlEQ0FGOTUzNUExMDE3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvOUZGQ0YwQURBRUNEQkQxQ0M1NkNGRUI2OEQ5RENBRjk1MzVB MTAxNy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOGIyOWU5MTItMzVjNi00ODBmLWI4 NjktMmEwZjhhZWYzMGQyLzAvOUZGQ0YwQURBRUNEQkQxQ0M1NkNGRUI2OEQ5RENB Rjk1MzVBMTAxNy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHPlfSYHVull7JPrEUixA8Cdhb3cxpEsOGkU 1dOCpN8Jf9hOAz10Kk3EQWcowH8kLe7bxJv+suf9U6Z2PB+8nA1WD9k88bFo2K0J btacpDZ3OEUhuiq8+PBoHT+p8PVVk26tq1ul+HUhKywF7bln4rKvke8yMF4v+E1Q H6n33zmYvYLnJgdUC1Z+R5e8iNUDPeaBKQcvoHgs+ufvBZ2kax/ukHX4HVaspvzB wUqzKOHYKTrAQiZ4mwAD39Z8Q80JUJ3kT0wf/LDt1/9fN+wA0DTEn/e7rxxnLkOj zmqJZyxUSb7SWehR/nGJYxndOg1bd0YO301/Yh3SiOjSoKxvyQc= -----END CERTIFICATE-----Generated at Sat Dec 6 18:34:23 2025 by rpki-client