This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/be11e98f-f54e-460b-88f3-bf91e0443e90/0/1FF9DE476AB686559E1C183A1B5BD4733E1B01ED.mft File: 1FF9DE476AB686559E1C183A1B5BD4733E1B01ED.mft (raw, json) Hash identifier: Zp+MgxJfPi15AToLj76IYISzZAwQPLZydParxQG9/pE= Subject key identifier: FF:2F:0A:72:17:23:71:AE:2B:8A:10:68:45:D9:FF:A6:63:EB:74:E4 Authority key identifier: 1F:F9:DE:47:6A:B6:86:55:9E:1C:18:3A:1B:5B:D4:73:3E:1B:01:ED Certificate issuer: /CN=1FF9DE476AB686559E1C183A1B5BD4733E1B01ED Certificate serial: 6BAB239FCDF7BE99E7C38C65DEBC876C240C875C Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1FF9DE476AB686559E1C183A1B5BD4733E1B01ED.cer Subject info access: rsync://repo-rpki.idnic.net/repo/be11e98f-f54e-460b-88f3-bf91e0443e90/0/1FF9DE476AB686559E1C183A1B5BD4733E1B01ED.mft Manifest number: 01F6 Signing time: Wed 17 Dec 2025 00:21:49 +0000 Manifest this update: Wed 17 Dec 2025 00:16:49 +0000 Manifest next update: Sat 20 Dec 2025 02:17:49 +0000 Files and hashes: 1: 1FF9DE476AB686559E1C183A1B5BD4733E1B01ED.crl (hash: P7eKa6K2kNSTnHcfwApvVTNiqRBBgYvk0ujF50Zrrd8=) 2: 3130332e33362e37302e302f32342d3234203d3e20313530323037.roa (hash: 5j0Tt77Cz46MkrUQmLJBWqtCp8m1Y546C35T0cpKX64=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/be11e98f-f54e-460b-88f3-bf91e0443e90/0/1FF9DE476AB686559E1C183A1B5BD4733E1B01ED.crl rsync://repo-rpki.idnic.net/repo/be11e98f-f54e-460b-88f3-bf91e0443e90/0/1FF9DE476AB686559E1C183A1B5BD4733E1B01ED.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1FF9DE476AB686559E1C183A1B5BD4733E1B01ED.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 20 Dec 2025 02:17:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6b:ab:23:9f:cd:f7:be:99:e7:c3:8c:65:de:bc:87:6c:24:0c:87:5c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1FF9DE476AB686559E1C183A1B5BD4733E1B01ED Validity Not Before: Dec 17 00:16:49 2025 GMT Not After : Dec 20 02:17:49 2025 GMT Subject: CN=FF2F0A72172371AE2B8A106845D9FFA663EB74E4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:ec:87:2d:b3:1f:9e:0a:38:cd:35:be:7b:f4: 45:20:81:4e:ab:da:9f:ff:28:6c:27:b2:c2:be:b2: fd:3a:01:5b:dc:b8:dd:a8:6f:12:6c:e5:b2:ad:83: 58:6d:2b:49:98:9f:d7:bf:d9:4f:77:15:db:a5:af: d8:fe:8f:07:0f:8e:b2:57:cc:54:15:25:ba:e0:73: 91:20:03:9c:88:ae:89:c9:2a:7d:d8:42:24:a3:be: cb:65:7a:b2:42:a8:94:f2:8a:d2:cf:68:a5:2d:32: 28:6d:eb:3d:6b:0a:96:4f:51:ed:85:92:81:e9:41: 30:47:25:39:6f:58:65:17:d0:79:4d:02:6a:97:9f: a0:f0:de:db:1f:a8:72:ac:14:a9:f7:83:d2:65:5f: 8a:41:b3:45:8e:e6:b8:4d:15:3f:49:f1:c8:61:2e: ea:08:73:d6:1b:7f:7c:69:56:cb:9c:5f:4f:77:44: 0c:a3:2a:16:d2:d4:6e:f2:d1:a2:85:aa:38:9a:a5: b8:09:0b:fb:6b:c4:1b:ab:09:d7:5d:83:9d:7e:ca: 1a:be:46:3c:c5:93:22:56:8e:64:79:9c:7a:4f:aa: b9:77:21:b1:ee:ac:41:c9:9c:4c:12:ce:93:0f:25: af:2a:c8:8b:a5:21:f2:6f:4c:09:31:6d:43:8f:7b: 34:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:2F:0A:72:17:23:71:AE:2B:8A:10:68:45:D9:FF:A6:63:EB:74:E4 X509v3 Authority Key Identifier: keyid:1F:F9:DE:47:6A:B6:86:55:9E:1C:18:3A:1B:5B:D4:73:3E:1B:01:ED X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/be11e98f-f54e-460b-88f3-bf91e0443e90/0/1FF9DE476AB686559E1C183A1B5BD4733E1B01ED.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1FF9DE476AB686559E1C183A1B5BD4733E1B01ED.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/be11e98f-f54e-460b-88f3-bf91e0443e90/0/1FF9DE476AB686559E1C183A1B5BD4733E1B01ED.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 72:f4:df:07:7e:b1:7f:c1:19:61:34:63:60:3a:28:4e:12:18: c2:d6:58:2a:f7:28:62:35:c9:7e:72:0b:a1:38:a4:0a:bf:42: 40:2c:90:5a:66:1a:ad:93:86:ae:14:81:55:c3:97:50:a6:93: b3:7f:24:6f:8c:9c:e0:bd:68:7e:ab:89:1b:ad:39:cf:4f:65: 8b:3d:cc:c4:e1:6a:65:c3:22:2b:40:7a:36:f6:4d:44:14:46: 81:2d:93:93:d0:cd:2c:03:42:25:73:a6:8b:e7:2e:40:42:ac: a3:4d:f6:c9:b8:3c:dc:1f:c5:87:bb:62:a0:b6:1e:5d:f3:fc: 76:d4:09:88:d1:5d:3d:55:18:ae:9b:65:93:7b:04:7d:a6:c9: 7d:4b:ab:81:bc:94:51:99:5f:70:71:0e:9b:69:43:60:65:77: 18:3d:2d:1d:81:7d:05:dc:7a:5d:48:c7:2f:eb:96:7a:39:11: 00:ea:b2:9e:b4:25:ad:df:a0:76:89:fa:2d:5f:c7:08:b3:0b: 12:7e:f3:c1:0e:8c:53:37:d9:95:73:22:5c:be:15:82:40:f7: 30:28:93:aa:81:2c:47:95:b1:64:23:ab:21:39:a3:6b:ef:b1: c8:48:3e:6b:f7:b3:29:a5:7b:6a:9a:b2:8f:92:77:f6:ed:2e: 22:17:ff:53 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUa6sjn833vpnnw4xl3ryHbCQMh1wwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUZGOURFNDc2QUI2ODY1NTlFMUMxODNBMUI1QkQ0NzMz RTFCMDFFRDAeFw0yNTEyMTcwMDE2NDlaFw0yNTEyMjAwMjE3NDlaMDMxMTAvBgNV BAMTKEZGMkYwQTcyMTcyMzcxQUUyQjhBMTA2ODQ1RDlGRkE2NjNFQjc0RTQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC37Ictsx+eCjjNNb579EUggU6r 2p//KGwnssK+sv06AVvcuN2obxJs5bKtg1htK0mYn9e/2U93Fdulr9j+jwcPjrJX zFQVJbrgc5EgA5yIronJKn3YQiSjvstlerJCqJTyitLPaKUtMiht6z1rCpZPUe2F koHpQTBHJTlvWGUX0HlNAmqXn6Dw3tsfqHKsFKn3g9JlX4pBs0WO5rhNFT9J8chh LuoIc9Ybf3xpVsucX093RAyjKhbS1G7y0aKFqjiapbgJC/trxBurCdddg51+yhq+ RjzFkyJWjmR5nHpPqrl3IbHurEHJnEwSzpMPJa8qyIulIfJvTAkxbUOPezSHAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU/y8Kchcjca4rihBoRdn/pmPrdOQwHwYDVR0j BBgwFoAUH/neR2q2hlWeHBg6G1vUcz4bAe0wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i ZTExZTk4Zi1mNTRlLTQ2MGItODhmMy1iZjkxZTA0NDNlOTAvMC8xRkY5REU0NzZB QjY4NjU1OUUxQzE4M0ExQjVCRDQ3MzNFMUIwMUVELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMUZGOURFNDc2QUI2ODY1NTlFMUMxODNBMUI1QkQ0NzMzRTFC MDFFRC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYmUxMWU5OGYtZjU0ZS00NjBiLTg4 ZjMtYmY5MWUwNDQzZTkwLzAvMUZGOURFNDc2QUI2ODY1NTlFMUMxODNBMUI1QkQ0 NzMzRTFCMDFFRC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHL03wd+sX/BGWE0Y2A6KE4SGMLWWCr3KGI1 yX5yC6E4pAq/QkAskFpmGq2Thq4UgVXDl1Cmk7N/JG+MnOC9aH6riRutOc9PZYs9 zMThamXDIitAejb2TUQURoEtk5PQzSwDQiVzpovnLkBCrKNN9sm4PNwfxYe7YqC2 Hl3z/HbUCYjRXT1VGK6bZZN7BH2myX1Lq4G8lFGZX3BxDptpQ2Bldxg9LR2BfQXc el1Ixy/rlno5EQDqsp60Ja3foHaJ+i1fxwizCxJ+88EOjFM32ZVzIly+FYJA9zAo k6qBLEeVsWQjqyE5o2vvschIPmv3symle2qaso+Sd/btLiIX/1M= -----END CERTIFICATE-----Generated at Thu Dec 18 11:26:21 2025 by rpki-client