This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/be11e98f-f54e-460b-88f3-bf91e0443e90/0/1FF9DE476AB686559E1C183A1B5BD4733E1B01ED.mft File: 1FF9DE476AB686559E1C183A1B5BD4733E1B01ED.mft (raw, json) Hash identifier: mrqnimbI+505XW+KmrwvCtRDmNOKC0hBSG+x6iJqBBc= Subject key identifier: 79:1E:7A:C8:BF:A8:EC:6D:7E:CA:3C:76:96:57:FE:42:B7:83:CB:03 Authority key identifier: 1F:F9:DE:47:6A:B6:86:55:9E:1C:18:3A:1B:5B:D4:73:3E:1B:01:ED Certificate issuer: /CN=1FF9DE476AB686559E1C183A1B5BD4733E1B01ED Certificate serial: 781ECAE8E9D5E8298842DACD54A4B8D688F898AE Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1FF9DE476AB686559E1C183A1B5BD4733E1B01ED.cer Subject info access: rsync://repo-rpki.idnic.net/repo/be11e98f-f54e-460b-88f3-bf91e0443e90/0/1FF9DE476AB686559E1C183A1B5BD4733E1B01ED.mft Manifest number: 01F1 Signing time: Fri 05 Dec 2025 14:51:48 +0000 Manifest this update: Fri 05 Dec 2025 14:46:48 +0000 Manifest next update: Mon 08 Dec 2025 23:44:48 +0000 Files and hashes: 1: 3130332e33362e37302e302f32342d3234203d3e20313530323037.roa (hash: 5j0Tt77Cz46MkrUQmLJBWqtCp8m1Y546C35T0cpKX64=) 2: 1FF9DE476AB686559E1C183A1B5BD4733E1B01ED.crl (hash: 89h5zUjP6RfLvybuAfiCM9gpafw5ZN/bZomUuVY9cgM=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/be11e98f-f54e-460b-88f3-bf91e0443e90/0/1FF9DE476AB686559E1C183A1B5BD4733E1B01ED.crl rsync://repo-rpki.idnic.net/repo/be11e98f-f54e-460b-88f3-bf91e0443e90/0/1FF9DE476AB686559E1C183A1B5BD4733E1B01ED.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1FF9DE476AB686559E1C183A1B5BD4733E1B01ED.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 08 Dec 2025 23:44:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 78:1e:ca:e8:e9:d5:e8:29:88:42:da:cd:54:a4:b8:d6:88:f8:98:ae Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1FF9DE476AB686559E1C183A1B5BD4733E1B01ED Validity Not Before: Dec 5 14:46:48 2025 GMT Not After : Dec 8 23:44:48 2025 GMT Subject: CN=791E7AC8BFA8EC6D7ECA3C769657FE42B783CB03 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:43:ac:ca:f5:4e:d2:6d:47:49:be:3b:35:13: b7:63:ad:cc:d5:9b:c3:3b:93:a0:bd:41:ec:ce:96: 51:91:ea:42:1e:bc:44:f1:e4:44:80:c3:32:50:e3: aa:6e:8c:5f:18:e2:19:3b:5a:ef:fa:7a:f5:97:2a: ec:b6:c5:e5:1b:ba:95:67:1b:2d:42:0e:25:29:dc: e3:10:38:21:9e:28:31:74:79:a4:3a:cb:64:13:d8: 61:08:96:3e:ce:f0:d2:19:b6:35:05:21:0c:38:da: 95:94:8b:8d:a0:89:98:e9:e5:5c:af:54:fb:6d:4b: c3:4b:4f:3f:ea:cd:f8:81:6d:4c:5a:47:40:64:8d: 52:db:a9:a8:a4:25:81:9e:a9:36:8c:cf:01:10:72: db:09:dc:59:41:27:52:3c:54:3c:bd:9e:6d:ab:2c: 66:4f:d7:10:97:f7:f1:b8:ed:8b:11:86:72:64:87: e6:e7:31:e6:66:2b:dd:72:81:89:9a:e5:d6:83:06: 4d:ac:c8:73:bd:38:26:32:d8:e7:54:a3:2a:b3:da: 8c:0c:5e:d7:ac:07:ae:fc:1b:f9:0a:60:b3:ea:48: c3:e1:36:22:78:96:f4:cc:4b:bb:88:5b:5a:7a:ce: d2:c8:7a:52:b6:94:3f:b4:f5:d0:c2:8a:89:62:26: e4:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 79:1E:7A:C8:BF:A8:EC:6D:7E:CA:3C:76:96:57:FE:42:B7:83:CB:03 X509v3 Authority Key Identifier: keyid:1F:F9:DE:47:6A:B6:86:55:9E:1C:18:3A:1B:5B:D4:73:3E:1B:01:ED X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/be11e98f-f54e-460b-88f3-bf91e0443e90/0/1FF9DE476AB686559E1C183A1B5BD4733E1B01ED.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1FF9DE476AB686559E1C183A1B5BD4733E1B01ED.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/be11e98f-f54e-460b-88f3-bf91e0443e90/0/1FF9DE476AB686559E1C183A1B5BD4733E1B01ED.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 11:b7:87:01:a2:57:ed:d7:d2:ae:aa:d0:93:33:29:b9:7a:23: 0d:f3:43:cd:6b:14:7b:fa:ca:87:03:bc:19:64:df:cd:61:8d: 2a:aa:7a:5a:cd:33:af:04:1c:1b:26:4c:db:01:c1:35:dc:e8: 35:7a:7f:c0:37:0d:72:a6:89:8a:1b:55:fb:e9:e3:bc:0e:c7: 61:6d:9f:70:b9:b0:dd:91:f6:79:7c:3e:00:16:f2:69:73:85: 0a:b7:f5:17:cc:6f:d8:9b:6a:e3:a9:e5:e8:1a:c2:b9:66:3e: a0:9a:e6:b1:46:f3:b3:e3:d1:69:c4:82:92:21:82:2d:18:04: 3e:5f:3d:69:5f:d5:a0:3b:83:7b:69:a2:7a:11:54:33:ac:bb: 5e:e0:e8:d9:ee:b3:20:dd:ad:05:ea:77:b2:71:56:72:f7:2c: 01:12:b4:cb:38:03:e8:d7:6e:43:c7:c4:2e:ed:5c:09:5a:24: 47:6d:4a:b5:8b:33:8f:f3:d6:b7:22:7c:31:36:71:68:0f:e6: c6:d3:4f:61:62:b3:73:d4:e3:fe:2c:44:9d:71:c1:4b:b4:77: 95:ee:f2:e6:ea:8d:f2:8e:a8:93:0d:a4:bf:c7:84:89:b8:ed: 20:50:8b:e9:f6:5c:05:77:51:dd:e1:ce:bc:1e:98:30:78:76: 78:20:37:3f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUeB7K6OnV6CmIQtrNVKS41oj4mK4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUZGOURFNDc2QUI2ODY1NTlFMUMxODNBMUI1QkQ0NzMz RTFCMDFFRDAeFw0yNTEyMDUxNDQ2NDhaFw0yNTEyMDgyMzQ0NDhaMDMxMTAvBgNV BAMTKDc5MUU3QUM4QkZBOEVDNkQ3RUNBM0M3Njk2NTdGRTQyQjc4M0NCMDMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDpQ6zK9U7SbUdJvjs1E7djrczV m8M7k6C9QezOllGR6kIevETx5ESAwzJQ46pujF8Y4hk7Wu/6evWXKuy2xeUbupVn Gy1CDiUp3OMQOCGeKDF0eaQ6y2QT2GEIlj7O8NIZtjUFIQw42pWUi42giZjp5Vyv VPttS8NLTz/qzfiBbUxaR0BkjVLbqaikJYGeqTaMzwEQctsJ3FlBJ1I8VDy9nm2r LGZP1xCX9/G47YsRhnJkh+bnMeZmK91ygYma5daDBk2syHO9OCYy2OdUoyqz2owM XtesB678G/kKYLPqSMPhNiJ4lvTMS7uIW1p6ztLIelK2lD+09dDCioliJuQ7AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUeR56yL+o7G1+yjx2llf+QreDywMwHwYDVR0j BBgwFoAUH/neR2q2hlWeHBg6G1vUcz4bAe0wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i ZTExZTk4Zi1mNTRlLTQ2MGItODhmMy1iZjkxZTA0NDNlOTAvMC8xRkY5REU0NzZB QjY4NjU1OUUxQzE4M0ExQjVCRDQ3MzNFMUIwMUVELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMUZGOURFNDc2QUI2ODY1NTlFMUMxODNBMUI1QkQ0NzMzRTFC MDFFRC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYmUxMWU5OGYtZjU0ZS00NjBiLTg4 ZjMtYmY5MWUwNDQzZTkwLzAvMUZGOURFNDc2QUI2ODY1NTlFMUMxODNBMUI1QkQ0 NzMzRTFCMDFFRC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABG3hwGiV+3X0q6q0JMzKbl6Iw3zQ81rFHv6 yocDvBlk381hjSqqelrNM68EHBsmTNsBwTXc6DV6f8A3DXKmiYobVfvp47wOx2Ft n3C5sN2R9nl8PgAW8mlzhQq39RfMb9ibauOp5egawrlmPqCa5rFG87Pj0WnEgpIh gi0YBD5fPWlf1aA7g3tponoRVDOsu17g6NnusyDdrQXqd7JxVnL3LAEStMs4A+jX bkPHxC7tXAlaJEdtSrWLM4/z1rcifDE2cWgP5sbTT2Fis3PU4/4sRJ1xwUu0d5Xu 8ubqjfKOqJMNpL/HhIm47SBQi+n2XAV3Ud3hzrwemDB4dnggNz8= -----END CERTIFICATE-----Generated at Sun Dec 7 06:20:52 2025 by rpki-client