This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/fbe04038-a1b6-432c-854b-cc6e8cf32e06/0/FF77507E6D1F0E0B6EB0112E9CFBD1AF1C1F6DD4.mft File: FF77507E6D1F0E0B6EB0112E9CFBD1AF1C1F6DD4.mft (raw, json) Hash identifier: BQ7vx6GsUt9DX1tp4/hu452FVd/p/qDN5uNPRy5QhaE= Subject key identifier: 6C:C1:22:70:5D:DB:98:B9:A1:44:B3:91:15:47:E3:1B:24:05:B3:09 Authority key identifier: FF:77:50:7E:6D:1F:0E:0B:6E:B0:11:2E:9C:FB:D1:AF:1C:1F:6D:D4 Certificate issuer: /CN=FF77507E6D1F0E0B6EB0112E9CFBD1AF1C1F6DD4 Certificate serial: 311FECBB9C057A9BB930655D95340070B71F1118 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FF77507E6D1F0E0B6EB0112E9CFBD1AF1C1F6DD4.cer Subject info access: rsync://repo-rpki.idnic.net/repo/fbe04038-a1b6-432c-854b-cc6e8cf32e06/0/FF77507E6D1F0E0B6EB0112E9CFBD1AF1C1F6DD4.mft Manifest number: 0230 Signing time: Fri 05 Dec 2025 16:12:30 +0000 Manifest this update: Fri 05 Dec 2025 16:07:30 +0000 Manifest next update: Mon 08 Dec 2025 20:10:30 +0000 Files and hashes: 1: 3130332e3137372e31342e302f32332d3233203d3e20313437313338.roa (hash: 5z8wRtouH3UZuHrJrJfhmhXWcm8bh9b9rb8I23FOiCg=) 2: FF77507E6D1F0E0B6EB0112E9CFBD1AF1C1F6DD4.crl (hash: cxjY9KleKOlpM+7IUeDnS2cJf8LHetukvDiOzwi8SLY=) 3: 3130332e3137372e31352e302f32342d3234203d3e20313437313338.roa (hash: eF9NB+BjEkYpNET986L8/mFTnt6eJT0/RWpF2VpYMW8=) 4: 3130332e3137372e31342e302f32342d3234203d3e20313437313338.roa (hash: 2HLKDZ4NotrKv5eD+avvVTu9dBP+/6Ewaq5ipG+lyWE=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/fbe04038-a1b6-432c-854b-cc6e8cf32e06/0/FF77507E6D1F0E0B6EB0112E9CFBD1AF1C1F6DD4.crl rsync://repo-rpki.idnic.net/repo/fbe04038-a1b6-432c-854b-cc6e8cf32e06/0/FF77507E6D1F0E0B6EB0112E9CFBD1AF1C1F6DD4.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FF77507E6D1F0E0B6EB0112E9CFBD1AF1C1F6DD4.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 08 Dec 2025 20:10:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 31:1f:ec:bb:9c:05:7a:9b:b9:30:65:5d:95:34:00:70:b7:1f:11:18 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=FF77507E6D1F0E0B6EB0112E9CFBD1AF1C1F6DD4 Validity Not Before: Dec 5 16:07:30 2025 GMT Not After : Dec 8 20:10:30 2025 GMT Subject: CN=6CC122705DDB98B9A144B3911547E31B2405B309 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ee:e1:4f:17:5b:91:d4:05:e1:d1:bf:fd:4d:77: c7:d7:12:b1:72:6f:76:12:08:c4:1a:88:15:b1:e2: 35:cd:2a:d0:de:c2:b3:95:4f:90:8c:c5:05:73:f8: 89:8b:57:d9:9a:f3:27:26:51:f8:4c:90:3e:94:ad: 34:3a:2a:83:4e:9b:a5:9a:00:dc:39:65:e5:6e:bb: 70:5f:4a:08:5e:d1:74:ba:0a:b4:d4:24:57:21:c0: 77:b5:e0:54:5e:5f:7b:e9:60:cc:a7:62:2c:3c:54: e0:8b:a5:c3:44:7e:31:74:90:9f:91:34:48:16:08: ab:f7:10:9f:2f:82:c4:e6:b2:a1:34:0a:74:00:06: 57:af:3d:be:ee:ef:67:04:5d:de:ef:e6:97:41:49: 60:94:1d:18:ee:c7:1b:43:01:f3:38:8f:bc:bd:8e: 7c:7e:c6:7e:58:8b:31:47:66:23:13:34:af:db:f5: 4a:ab:cb:24:b3:fb:db:ab:bd:bc:5d:7f:87:f3:d8: 06:b3:e9:88:3b:d9:99:3d:2c:2f:3a:cb:70:c4:03: 50:82:56:33:b9:c4:d9:aa:e3:0d:c4:13:66:e8:a8: 57:1f:06:aa:47:02:f7:46:7b:1c:73:68:f7:d5:06: 09:56:b6:f7:a5:43:23:99:fe:b8:bc:98:50:8c:40: 00:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6C:C1:22:70:5D:DB:98:B9:A1:44:B3:91:15:47:E3:1B:24:05:B3:09 X509v3 Authority Key Identifier: keyid:FF:77:50:7E:6D:1F:0E:0B:6E:B0:11:2E:9C:FB:D1:AF:1C:1F:6D:D4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/fbe04038-a1b6-432c-854b-cc6e8cf32e06/0/FF77507E6D1F0E0B6EB0112E9CFBD1AF1C1F6DD4.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FF77507E6D1F0E0B6EB0112E9CFBD1AF1C1F6DD4.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/fbe04038-a1b6-432c-854b-cc6e8cf32e06/0/FF77507E6D1F0E0B6EB0112E9CFBD1AF1C1F6DD4.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ad:2c:2e:ce:95:49:a8:c0:fa:d7:16:d6:00:d2:24:3e:63:e1: b1:93:a1:01:a9:ee:96:99:04:b2:f4:d2:d3:64:e0:c2:f2:e9: 95:a5:87:fb:78:d4:29:6f:66:5a:c0:9b:5a:d0:3f:70:8d:db: 19:12:7d:fd:67:b2:10:7d:14:d7:10:a3:7c:0f:35:75:7d:9c: 62:77:25:89:1a:3f:85:95:7c:7c:e7:8e:68:2f:f3:37:e0:f8: f5:06:59:03:a0:9c:24:49:21:cd:1c:82:71:43:d1:88:53:a1: de:c5:57:c9:39:00:fb:d2:28:cf:0f:17:23:88:75:c6:29:43: 95:7e:2e:f0:fe:10:18:93:5c:ad:da:79:fc:dc:e5:c6:82:47: 3d:d0:58:f9:6c:06:f2:82:b2:09:97:59:fc:db:9b:96:cd:66: 4c:0d:85:f6:88:bf:e0:05:e5:3a:38:c6:17:89:b9:1d:82:12: ed:26:47:aa:9b:a6:dc:6e:70:6b:93:7b:9f:9b:56:36:33:bc: a9:28:25:7a:2e:9a:f0:8e:0d:7b:f5:16:1b:65:23:2a:3d:7f: 66:c8:00:ef:17:e7:c8:f5:83:cb:ad:6e:ca:59:11:5a:aa:08: 72:9c:4b:ea:6f:2d:21:1b:47:65:f4:09:0c:ee:c3:f2:e0:9a: d8:f3:7a:de -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUMR/su5wFepu5MGVdlTQAcLcfERgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRkY3NzUwN0U2RDFGMEUwQjZFQjAxMTJFOUNGQkQxQUYx QzFGNkRENDAeFw0yNTEyMDUxNjA3MzBaFw0yNTEyMDgyMDEwMzBaMDMxMTAvBgNV BAMTKDZDQzEyMjcwNUREQjk4QjlBMTQ0QjM5MTE1NDdFMzFCMjQwNUIzMDkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDu4U8XW5HUBeHRv/1Nd8fXErFy b3YSCMQaiBWx4jXNKtDewrOVT5CMxQVz+ImLV9ma8ycmUfhMkD6UrTQ6KoNOm6Wa ANw5ZeVuu3BfSghe0XS6CrTUJFchwHe14FReX3vpYMynYiw8VOCLpcNEfjF0kJ+R NEgWCKv3EJ8vgsTmsqE0CnQABlevPb7u72cEXd7v5pdBSWCUHRjuxxtDAfM4j7y9 jnx+xn5YizFHZiMTNK/b9UqryySz+9urvbxdf4fz2Aaz6Yg72Zk9LC86y3DEA1CC VjO5xNmq4w3EE2boqFcfBqpHAvdGexxzaPfVBglWtvelQyOZ/ri8mFCMQABnAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUbMEicF3bmLmhRLORFUfjGyQFswkwHwYDVR0j BBgwFoAU/3dQfm0fDgtusBEunPvRrxwfbdQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m YmUwNDAzOC1hMWI2LTQzMmMtODU0Yi1jYzZlOGNmMzJlMDYvMC9GRjc3NTA3RTZE MUYwRTBCNkVCMDExMkU5Q0ZCRDFBRjFDMUY2REQ0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRkY3NzUwN0U2RDFGMEUwQjZFQjAxMTJFOUNGQkQxQUYxQzFG NkRENC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZmJlMDQwMzgtYTFiNi00MzJjLTg1 NGItY2M2ZThjZjMyZTA2LzAvRkY3NzUwN0U2RDFGMEUwQjZFQjAxMTJFOUNGQkQx QUYxQzFGNkRENC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAK0sLs6VSajA+tcW1gDSJD5j4bGToQGp7paZ BLL00tNk4MLy6ZWlh/t41ClvZlrAm1rQP3CN2xkSff1nshB9FNcQo3wPNXV9nGJ3 JYkaP4WVfHznjmgv8zfg+PUGWQOgnCRJIc0cgnFD0YhTod7FV8k5APvSKM8PFyOI dcYpQ5V+LvD+EBiTXK3aefzc5caCRz3QWPlsBvKCsgmXWfzbm5bNZkwNhfaIv+AF 5To4xheJuR2CEu0mR6qbptxucGuTe5+bVjYzvKkoJXoumvCODXv1FhtlIyo9f2bI AO8X58j1g8utbspZEVqqCHKcS+pvLSEbR2X0CQzuw/Lgmtjzet4= -----END CERTIFICATE-----Generated at Sun Dec 7 07:24:03 2025 by rpki-client