This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/a89a0661-31ee-49a2-ae9f-f6d573a17df7/0/FF1246B1AF5B158EA26E75654D7B7A6DED645787.mft File: FF1246B1AF5B158EA26E75654D7B7A6DED645787.mft (raw, json) Hash identifier: YIa1v+zKLMHQNzdgus8GdB4BkQdJPh9wB2wUD+UCs2M= Subject key identifier: 0F:38:15:9E:DA:C2:2E:D9:0B:87:67:0A:AF:A7:EB:67:AB:6D:3E:49 Authority key identifier: FF:12:46:B1:AF:5B:15:8E:A2:6E:75:65:4D:7B:7A:6D:ED:64:57:87 Certificate issuer: /CN=FF1246B1AF5B158EA26E75654D7B7A6DED645787 Certificate serial: 39723A97CDB53E1B8788030C09F3A7D3E3D3F834 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FF1246B1AF5B158EA26E75654D7B7A6DED645787.cer Subject info access: rsync://repo-rpki.idnic.net/repo/a89a0661-31ee-49a2-ae9f-f6d573a17df7/0/FF1246B1AF5B158EA26E75654D7B7A6DED645787.mft Manifest number: 0104 Signing time: Wed 17 Dec 2025 04:42:08 +0000 Manifest this update: Wed 17 Dec 2025 04:37:08 +0000 Manifest next update: Sat 20 Dec 2025 14:17:08 +0000 Files and hashes: 1: FF1246B1AF5B158EA26E75654D7B7A6DED645787.crl (hash: elC9HpZE1wdF+yvshoE88Uoo04nPY3bkYtZ5qtB78L4=) 2: 3130332e3136312e3130382e302f32342d3234203d3e20313431393132.roa (hash: uvIhcJu4c3esMkst4+88cWSmjSO0QaYXOH2ffUAXAVQ=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/a89a0661-31ee-49a2-ae9f-f6d573a17df7/0/FF1246B1AF5B158EA26E75654D7B7A6DED645787.crl rsync://repo-rpki.idnic.net/repo/a89a0661-31ee-49a2-ae9f-f6d573a17df7/0/FF1246B1AF5B158EA26E75654D7B7A6DED645787.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FF1246B1AF5B158EA26E75654D7B7A6DED645787.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 20 Dec 2025 14:17:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 39:72:3a:97:cd:b5:3e:1b:87:88:03:0c:09:f3:a7:d3:e3:d3:f8:34 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=FF1246B1AF5B158EA26E75654D7B7A6DED645787 Validity Not Before: Dec 17 04:37:08 2025 GMT Not After : Dec 20 14:17:08 2025 GMT Subject: CN=0F38159EDAC22ED90B87670AAFA7EB67AB6D3E49 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:fc:26:c4:17:a1:a8:e3:56:2d:29:87:67:7e: 49:d7:df:ec:d7:79:9b:7a:3d:94:ea:4f:88:58:84: e4:e2:37:c3:78:0d:50:56:a5:1b:15:a9:42:82:18: 0b:87:aa:4c:81:16:be:6c:5a:15:97:a5:69:08:75: d4:ac:44:9a:0d:32:1d:ba:48:f5:50:b6:0d:bf:d0: 36:b6:74:cf:f5:93:cf:bf:ea:7d:11:0b:bf:6e:3e: 3d:cd:e6:60:d3:ad:02:d9:b4:ae:f9:10:11:d0:6c: 0a:37:98:95:75:3b:27:57:6e:08:c2:ca:09:28:52: a2:af:33:2d:b8:cf:5c:d3:53:21:0a:33:90:43:b8: 86:78:6c:a6:7c:2b:2d:71:37:ae:54:9e:24:16:18: cb:e8:7c:c8:ec:ca:23:c6:13:42:da:9e:41:88:8f: 52:5e:99:0e:92:a6:10:ba:d5:99:db:f6:77:2e:33: fd:62:d3:2e:73:f0:81:e6:51:25:b3:45:28:24:51: 4a:96:09:56:26:53:eb:ac:27:85:4a:f8:e8:51:4e: 94:70:5d:9b:eb:7a:fd:6e:80:53:ac:d8:f8:f5:5c: e1:13:bb:7c:57:57:3a:65:46:b0:fb:61:8f:fa:74: f7:5e:a7:9f:e1:f6:f2:d9:6b:dc:2a:47:6b:c9:d2: 12:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0F:38:15:9E:DA:C2:2E:D9:0B:87:67:0A:AF:A7:EB:67:AB:6D:3E:49 X509v3 Authority Key Identifier: keyid:FF:12:46:B1:AF:5B:15:8E:A2:6E:75:65:4D:7B:7A:6D:ED:64:57:87 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/a89a0661-31ee-49a2-ae9f-f6d573a17df7/0/FF1246B1AF5B158EA26E75654D7B7A6DED645787.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FF1246B1AF5B158EA26E75654D7B7A6DED645787.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a89a0661-31ee-49a2-ae9f-f6d573a17df7/0/FF1246B1AF5B158EA26E75654D7B7A6DED645787.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 96:2e:23:63:85:c4:17:50:26:0a:36:51:d9:94:a5:7d:1b:95: 25:76:74:36:95:3e:d2:f2:53:e3:02:41:aa:da:c6:d4:96:6a: 9c:10:d9:53:a9:1a:b6:a5:3f:f7:e3:89:9e:20:fc:da:00:7f: 3f:66:ee:b2:d1:a8:1c:99:a7:52:b0:c0:bc:d5:40:be:02:a9: dc:92:d8:dc:f2:78:78:0e:a6:c0:f0:ba:b9:06:77:c5:1a:1d: db:3b:9d:8f:57:19:dc:f9:15:3b:27:38:77:05:3a:c3:de:dc: c8:9f:7b:86:bf:bc:d6:d9:5a:e5:c5:46:4f:85:6f:71:a4:3e: 67:48:1f:c8:84:61:de:53:a9:b4:17:ac:03:20:89:34:b1:c1: b4:48:a2:86:b0:ab:0f:e6:03:8b:99:22:ce:ce:78:fc:01:16: 57:c9:e4:d5:ea:b4:3c:0d:35:cf:7c:46:2b:6c:45:3a:86:04: ac:91:77:a5:5c:73:75:04:8c:21:cb:be:02:37:4c:4a:2e:7d: 5b:fc:45:6c:08:63:5e:d1:b4:d6:d1:65:18:38:60:4f:43:46: 9d:74:e0:76:37:09:ee:0e:a4:c8:3e:4e:6b:5a:94:21:46:0e: 8e:24:f6:2d:9e:f9:39:86:21:d7:04:5f:68:ae:43:c2:96:fe: ef:3f:12:8a -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUOXI6l821PhuHiAMMCfOn0+PT+DQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRkYxMjQ2QjFBRjVCMTU4RUEyNkU3NTY1NEQ3QjdBNkRF RDY0NTc4NzAeFw0yNTEyMTcwNDM3MDhaFw0yNTEyMjAxNDE3MDhaMDMxMTAvBgNV BAMTKDBGMzgxNTlFREFDMjJFRDkwQjg3NjcwQUFGQTdFQjY3QUI2RDNFNDkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC2/CbEF6Go41YtKYdnfknX3+zX eZt6PZTqT4hYhOTiN8N4DVBWpRsVqUKCGAuHqkyBFr5sWhWXpWkIddSsRJoNMh26 SPVQtg2/0Da2dM/1k8+/6n0RC79uPj3N5mDTrQLZtK75EBHQbAo3mJV1OydXbgjC ygkoUqKvMy24z1zTUyEKM5BDuIZ4bKZ8Ky1xN65UniQWGMvofMjsyiPGE0LankGI j1JemQ6SphC61Znb9ncuM/1i0y5z8IHmUSWzRSgkUUqWCVYmU+usJ4VK+OhRTpRw XZvrev1ugFOs2Pj1XOETu3xXVzplRrD7YY/6dPdep5/h9vLZa9wqR2vJ0hJJAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUDzgVntrCLtkLh2cKr6frZ6ttPkkwHwYDVR0j BBgwFoAU/xJGsa9bFY6ibnVlTXt6be1kV4cwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h ODlhMDY2MS0zMWVlLTQ5YTItYWU5Zi1mNmQ1NzNhMTdkZjcvMC9GRjEyNDZCMUFG NUIxNThFQTI2RTc1NjU0RDdCN0E2REVENjQ1Nzg3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRkYxMjQ2QjFBRjVCMTU4RUEyNkU3NTY1NEQ3QjdBNkRFRDY0 NTc4Ny5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYTg5YTA2NjEtMzFlZS00OWEyLWFl OWYtZjZkNTczYTE3ZGY3LzAvRkYxMjQ2QjFBRjVCMTU4RUEyNkU3NTY1NEQ3QjdB NkRFRDY0NTc4Ny5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJYuI2OFxBdQJgo2UdmUpX0blSV2dDaVPtLy U+MCQaraxtSWapwQ2VOpGralP/fjiZ4g/NoAfz9m7rLRqByZp1KwwLzVQL4CqdyS 2NzyeHgOpsDwurkGd8UaHds7nY9XGdz5FTsnOHcFOsPe3Mife4a/vNbZWuXFRk+F b3GkPmdIH8iEYd5TqbQXrAMgiTSxwbRIooawqw/mA4uZIs7OePwBFlfJ5NXqtDwN Nc98RitsRTqGBKyRd6Vcc3UEjCHLvgI3TEoufVv8RWwIY17RtNbRZRg4YE9DRp10 4HY3Ce4OpMg+TmtalCFGDo4k9i2e+TmGIdcEX2iuQ8KW/u8/Eoo= -----END CERTIFICATE-----Generated at Thu Dec 18 17:42:30 2025 by rpki-client