This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/a89a0661-31ee-49a2-ae9f-f6d573a17df7/0/FF1246B1AF5B158EA26E75654D7B7A6DED645787.mft File: FF1246B1AF5B158EA26E75654D7B7A6DED645787.mft (raw, json) Hash identifier: /yPXtepDfE5N/US23CDhdDbe8+SWWIWYzA0MidVLXMc= Subject key identifier: 57:97:04:C3:C2:7F:30:C6:F9:80:4A:84:91:4E:BD:86:F4:FF:9A:F3 Authority key identifier: FF:12:46:B1:AF:5B:15:8E:A2:6E:75:65:4D:7B:7A:6D:ED:64:57:87 Certificate issuer: /CN=FF1246B1AF5B158EA26E75654D7B7A6DED645787 Certificate serial: 5AB21CB8DB2C95EFA3EA12318AF09FCFDE45C0E4 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FF1246B1AF5B158EA26E75654D7B7A6DED645787.cer Subject info access: rsync://repo-rpki.idnic.net/repo/a89a0661-31ee-49a2-ae9f-f6d573a17df7/0/FF1246B1AF5B158EA26E75654D7B7A6DED645787.mft Manifest number: FF Signing time: Fri 05 Dec 2025 16:32:07 +0000 Manifest this update: Fri 05 Dec 2025 16:27:07 +0000 Manifest next update: Tue 09 Dec 2025 01:14:07 +0000 Files and hashes: 1: FF1246B1AF5B158EA26E75654D7B7A6DED645787.crl (hash: s/Fb6RRq0MAneUe/hcJREGrY90oF7rdhrzJSBohn1kg=) 2: 3130332e3136312e3130382e302f32342d3234203d3e20313431393132.roa (hash: uvIhcJu4c3esMkst4+88cWSmjSO0QaYXOH2ffUAXAVQ=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/a89a0661-31ee-49a2-ae9f-f6d573a17df7/0/FF1246B1AF5B158EA26E75654D7B7A6DED645787.crl rsync://repo-rpki.idnic.net/repo/a89a0661-31ee-49a2-ae9f-f6d573a17df7/0/FF1246B1AF5B158EA26E75654D7B7A6DED645787.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FF1246B1AF5B158EA26E75654D7B7A6DED645787.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 09 Dec 2025 01:14:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5a:b2:1c:b8:db:2c:95:ef:a3:ea:12:31:8a:f0:9f:cf:de:45:c0:e4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=FF1246B1AF5B158EA26E75654D7B7A6DED645787 Validity Not Before: Dec 5 16:27:07 2025 GMT Not After : Dec 9 01:14:07 2025 GMT Subject: CN=579704C3C27F30C6F9804A84914EBD86F4FF9AF3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:fa:06:d6:f6:eb:7d:aa:86:9a:2e:6c:e9:4e: 8d:7a:d8:a6:d3:15:ad:eb:29:45:28:b7:f6:2e:d6: bb:e1:81:ca:25:66:ad:be:71:96:03:ed:11:ec:15: 9b:23:92:b1:5d:7b:74:63:44:c9:8e:c6:9e:88:4f: fd:b1:6d:63:ed:43:3a:d6:0c:dc:39:ea:06:67:f6: b3:ff:e0:04:96:6a:ef:d1:08:c1:c4:9c:da:28:8c: 4f:99:e0:ca:40:13:8b:5a:e1:4a:d4:f8:b6:7f:6c: e7:a7:3c:f3:e3:7d:2b:45:e5:72:92:9e:26:ed:37: a0:ce:a0:44:de:97:14:9f:c4:97:7d:a3:6f:2c:d6: d3:64:81:f1:9f:dc:3d:60:43:80:4a:71:9c:22:40: 29:53:ae:d5:56:a0:ba:fa:bc:9c:3c:9f:3b:ef:d6: 36:d8:12:7b:07:3e:78:e8:a7:2c:5e:12:e0:97:9e: b3:af:08:f7:67:33:4d:69:4c:5d:ad:90:81:22:c7: 6d:e8:fa:fd:05:ad:15:ad:ed:26:da:0f:97:c7:f9: be:e6:51:74:5b:98:6f:54:37:73:74:0e:74:56:6f: 3f:c9:21:83:2d:3c:7d:4c:24:a0:4b:df:4e:98:d2: 7a:93:f0:93:10:14:35:90:f9:a1:b6:29:61:dc:bc: 91:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 57:97:04:C3:C2:7F:30:C6:F9:80:4A:84:91:4E:BD:86:F4:FF:9A:F3 X509v3 Authority Key Identifier: keyid:FF:12:46:B1:AF:5B:15:8E:A2:6E:75:65:4D:7B:7A:6D:ED:64:57:87 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/a89a0661-31ee-49a2-ae9f-f6d573a17df7/0/FF1246B1AF5B158EA26E75654D7B7A6DED645787.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FF1246B1AF5B158EA26E75654D7B7A6DED645787.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a89a0661-31ee-49a2-ae9f-f6d573a17df7/0/FF1246B1AF5B158EA26E75654D7B7A6DED645787.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1c:41:72:c2:8c:92:13:82:a8:1d:39:05:87:01:db:aa:be:11: 02:05:8c:66:b4:fd:c0:8c:cf:7f:20:c4:3d:df:46:bb:e4:5a: c2:b2:54:47:8f:12:7a:f8:f6:85:8d:eb:73:1d:e7:2d:87:2c: 09:a9:76:2c:84:d4:1b:b1:b4:a2:13:66:ea:75:9d:24:78:93: 8f:55:aa:b4:d0:b2:bc:03:e1:e9:53:84:53:69:1d:89:a3:e2: 84:48:13:b1:5c:82:43:0b:1f:d9:5c:85:fb:bd:09:80:97:9d: 60:64:b0:de:73:0d:af:df:fa:4b:eb:86:0d:82:f8:a0:bc:85: 70:8d:74:d0:be:1b:53:df:03:cd:28:7c:dd:7d:50:34:15:f2: 0e:f3:2b:c0:23:d1:b8:f4:de:61:89:dd:8f:9e:1a:33:ee:73: 8e:f4:60:53:75:79:1a:c2:05:f6:f8:49:b1:00:f7:45:98:6d: 45:8f:9e:37:fc:4f:98:d9:53:e8:9b:e1:03:16:74:60:99:03: fd:2a:01:70:86:c1:da:16:b1:ea:cd:9d:2c:02:81:61:cf:58: e6:a9:cf:5e:01:6b:74:83:f9:4a:bf:41:c3:e8:69:90:8d:64: 1f:3b:67:ec:16:0f:3e:98:0c:ab:93:c2:eb:81:3f:cf:dc:c2: 90:03:8c:74 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUWrIcuNssle+j6hIxivCfz95FwOQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRkYxMjQ2QjFBRjVCMTU4RUEyNkU3NTY1NEQ3QjdBNkRF RDY0NTc4NzAeFw0yNTEyMDUxNjI3MDdaFw0yNTEyMDkwMTE0MDdaMDMxMTAvBgNV BAMTKDU3OTcwNEMzQzI3RjMwQzZGOTgwNEE4NDkxNEVCRDg2RjRGRjlBRjMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDb+gbW9ut9qoaaLmzpTo162KbT Fa3rKUUot/Yu1rvhgcolZq2+cZYD7RHsFZsjkrFde3RjRMmOxp6IT/2xbWPtQzrW DNw56gZn9rP/4ASWau/RCMHEnNoojE+Z4MpAE4ta4UrU+LZ/bOenPPPjfStF5XKS nibtN6DOoETelxSfxJd9o28s1tNkgfGf3D1gQ4BKcZwiQClTrtVWoLr6vJw8nzvv 1jbYEnsHPnjopyxeEuCXnrOvCPdnM01pTF2tkIEix23o+v0FrRWt7SbaD5fH+b7m UXRbmG9UN3N0DnRWbz/JIYMtPH1MJKBL306Y0nqT8JMQFDWQ+aG2KWHcvJH5AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUV5cEw8J/MMb5gEqEkU69hvT/mvMwHwYDVR0j BBgwFoAU/xJGsa9bFY6ibnVlTXt6be1kV4cwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h ODlhMDY2MS0zMWVlLTQ5YTItYWU5Zi1mNmQ1NzNhMTdkZjcvMC9GRjEyNDZCMUFG NUIxNThFQTI2RTc1NjU0RDdCN0E2REVENjQ1Nzg3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRkYxMjQ2QjFBRjVCMTU4RUEyNkU3NTY1NEQ3QjdBNkRFRDY0 NTc4Ny5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYTg5YTA2NjEtMzFlZS00OWEyLWFl OWYtZjZkNTczYTE3ZGY3LzAvRkYxMjQ2QjFBRjVCMTU4RUEyNkU3NTY1NEQ3QjdB NkRFRDY0NTc4Ny5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABxBcsKMkhOCqB05BYcB26q+EQIFjGa0/cCM z38gxD3fRrvkWsKyVEePEnr49oWN63Md5y2HLAmpdiyE1BuxtKITZup1nSR4k49V qrTQsrwD4elThFNpHYmj4oRIE7FcgkMLH9lchfu9CYCXnWBksN5zDa/f+kvrhg2C +KC8hXCNdNC+G1PfA80ofN19UDQV8g7zK8Aj0bj03mGJ3Y+eGjPuc470YFN1eRrC Bfb4SbEA90WYbUWPnjf8T5jZU+ib4QMWdGCZA/0qAXCGwdoWserNnSwCgWHPWOap z14Ba3SD+Uq/QcPoaZCNZB87Z+wWDz6YDKuTwuuBP8/cwpADjHQ= -----END CERTIFICATE-----Generated at Sun Dec 7 07:29:32 2025 by rpki-client