This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/fbe15e6f-0689-4713-b0fc-943062ac592e/0/1FF652DE540015052EA06BCE3644C9C1C9B83B32.mft File: 1FF652DE540015052EA06BCE3644C9C1C9B83B32.mft (raw, json) Hash identifier: xMuYltPCrR5S7Zn8UWxTTSyl0aDCiqHmV2PEyRwHlrk= Subject key identifier: 59:F2:D2:94:63:5D:B5:FD:83:11:50:41:A8:69:55:E2:55:23:91:A4 Authority key identifier: 1F:F6:52:DE:54:00:15:05:2E:A0:6B:CE:36:44:C9:C1:C9:B8:3B:32 Certificate issuer: /CN=1FF652DE540015052EA06BCE3644C9C1C9B83B32 Certificate serial: 56EFE98317F84454734AE28737B0646DED7B3B29 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1FF652DE540015052EA06BCE3644C9C1C9B83B32.cer Subject info access: rsync://repo-rpki.idnic.net/repo/fbe15e6f-0689-4713-b0fc-943062ac592e/0/1FF652DE540015052EA06BCE3644C9C1C9B83B32.mft Manifest number: 022A Signing time: Fri 05 Dec 2025 21:02:03 +0000 Manifest this update: Fri 05 Dec 2025 20:57:03 +0000 Manifest next update: Tue 09 Dec 2025 03:32:03 +0000 Files and hashes: 1: 1FF652DE540015052EA06BCE3644C9C1C9B83B32.crl (hash: T2gefUhEHewfGH7anIp61kPnxIFSCkDLjBYEtJdxnRo=) 2: 3130332e3137342e3137362e302f32332d3234203d3e203338333230.roa (hash: BAcGuMLsPgJV3u2WPi981toHkg4Nsmz+4IDaHY/xX1M=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/fbe15e6f-0689-4713-b0fc-943062ac592e/0/1FF652DE540015052EA06BCE3644C9C1C9B83B32.crl rsync://repo-rpki.idnic.net/repo/fbe15e6f-0689-4713-b0fc-943062ac592e/0/1FF652DE540015052EA06BCE3644C9C1C9B83B32.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1FF652DE540015052EA06BCE3644C9C1C9B83B32.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 09 Dec 2025 03:32:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 56:ef:e9:83:17:f8:44:54:73:4a:e2:87:37:b0:64:6d:ed:7b:3b:29 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1FF652DE540015052EA06BCE3644C9C1C9B83B32 Validity Not Before: Dec 5 20:57:03 2025 GMT Not After : Dec 9 03:32:03 2025 GMT Subject: CN=59F2D294635DB5FD83115041A86955E2552391A4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:2a:12:40:ac:ad:72:9a:a9:bc:3d:06:44:0b: 65:d0:c1:95:8e:6d:b7:b5:0f:db:9c:1b:3c:79:a9: 2d:f6:bb:b5:53:f8:6f:55:fa:b3:39:ad:0f:f0:65: cb:3b:98:b1:cc:db:06:a5:76:92:2e:ab:18:c2:24: 90:21:61:57:07:97:72:d5:3b:65:1c:cf:01:64:1b: c5:68:98:c8:86:61:25:fc:24:ce:47:9e:73:ab:b7: 57:68:b8:a2:12:43:42:26:6a:3a:c6:b6:94:59:51: c0:5b:0d:ba:c6:40:33:bd:4f:8a:45:85:90:88:60: 9d:24:8b:8d:1f:43:5b:34:ac:77:67:43:6a:e7:6b: c6:a6:b3:fc:9a:7a:ae:2e:9b:91:4c:8b:12:1b:4b: e7:38:36:f3:0e:a7:88:30:b9:65:b3:04:9c:08:2b: f4:53:fa:d2:9e:aa:3b:68:e6:40:0e:94:29:ac:99: 45:27:cb:54:5d:6e:2d:05:44:54:4c:1b:d1:92:5f: 75:09:6b:7c:dc:33:4b:b4:9d:4e:32:25:4e:c5:23: 1a:92:2e:e7:78:7f:9d:4d:e3:14:5a:41:b7:ef:0e: 83:ca:4b:c9:25:f3:17:35:8f:76:2a:92:fc:38:03: 0f:94:75:30:8c:8c:c8:b2:20:74:c6:a3:6c:11:62: 39:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 59:F2:D2:94:63:5D:B5:FD:83:11:50:41:A8:69:55:E2:55:23:91:A4 X509v3 Authority Key Identifier: keyid:1F:F6:52:DE:54:00:15:05:2E:A0:6B:CE:36:44:C9:C1:C9:B8:3B:32 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/fbe15e6f-0689-4713-b0fc-943062ac592e/0/1FF652DE540015052EA06BCE3644C9C1C9B83B32.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1FF652DE540015052EA06BCE3644C9C1C9B83B32.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/fbe15e6f-0689-4713-b0fc-943062ac592e/0/1FF652DE540015052EA06BCE3644C9C1C9B83B32.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9a:67:40:2d:a9:52:d7:72:5f:a0:5b:37:29:6a:f1:e6:58:22: d1:28:8e:a8:da:d6:93:8b:3c:4a:7a:b3:8f:36:fc:9e:18:9f: 07:b7:97:35:36:ef:2c:aa:de:22:97:18:33:77:22:01:ec:b8: fd:de:bb:01:aa:d8:91:92:d4:d5:fe:2b:b6:98:15:3c:19:9e: 8b:2e:c2:45:f1:95:ac:af:c4:a9:b0:e1:70:f8:51:cc:1b:7d: 3b:19:50:0b:5c:62:44:bc:57:ee:79:0d:3f:4c:c2:db:c9:00: a9:37:94:50:c9:f1:bd:d6:a2:aa:da:67:85:6e:63:ad:10:3e: 7b:52:6f:10:00:9e:d8:82:b2:5d:bd:0e:df:e2:b0:94:10:31: 74:8c:5e:0a:29:ba:9d:84:0c:2a:49:5d:7c:6f:39:e6:cc:5d: f1:49:39:e0:c6:01:ad:54:45:7c:ba:b4:d1:06:ec:f0:2e:04: 2a:0c:a0:6f:78:18:42:cd:1d:7a:7d:3e:f2:89:69:af:61:d7: 3a:db:d3:11:37:78:af:40:6f:fd:18:b4:81:a0:48:95:93:66: 59:6a:bc:28:ca:5d:c3:11:9d:4f:e9:7e:57:63:5f:1d:27:18: 9e:0b:30:27:41:41:6d:7b:a7:89:2c:fa:df:65:f4:36:01:b7: 2e:6c:73:c5 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUVu/pgxf4RFRzSuKHN7Bkbe17OykwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUZGNjUyREU1NDAwMTUwNTJFQTA2QkNFMzY0NEM5QzFD OUI4M0IzMjAeFw0yNTEyMDUyMDU3MDNaFw0yNTEyMDkwMzMyMDNaMDMxMTAvBgNV BAMTKDU5RjJEMjk0NjM1REI1RkQ4MzExNTA0MUE4Njk1NUUyNTUyMzkxQTQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDiKhJArK1ymqm8PQZEC2XQwZWO bbe1D9ucGzx5qS32u7VT+G9V+rM5rQ/wZcs7mLHM2waldpIuqxjCJJAhYVcHl3LV O2UczwFkG8VomMiGYSX8JM5HnnOrt1douKISQ0ImajrGtpRZUcBbDbrGQDO9T4pF hZCIYJ0ki40fQ1s0rHdnQ2rna8ams/yaeq4um5FMixIbS+c4NvMOp4gwuWWzBJwI K/RT+tKeqjto5kAOlCmsmUUny1Rdbi0FRFRMG9GSX3UJa3zcM0u0nU4yJU7FIxqS Lud4f51N4xRaQbfvDoPKS8kl8xc1j3Yqkvw4Aw+UdTCMjMiyIHTGo2wRYjntAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUWfLSlGNdtf2DEVBBqGlV4lUjkaQwHwYDVR0j BBgwFoAUH/ZS3lQAFQUuoGvONkTJwcm4OzIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m YmUxNWU2Zi0wNjg5LTQ3MTMtYjBmYy05NDMwNjJhYzU5MmUvMC8xRkY2NTJERTU0 MDAxNTA1MkVBMDZCQ0UzNjQ0QzlDMUM5QjgzQjMyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMUZGNjUyREU1NDAwMTUwNTJFQTA2QkNFMzY0NEM5QzFDOUI4 M0IzMi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZmJlMTVlNmYtMDY4OS00NzEzLWIw ZmMtOTQzMDYyYWM1OTJlLzAvMUZGNjUyREU1NDAwMTUwNTJFQTA2QkNFMzY0NEM5 QzFDOUI4M0IzMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJpnQC2pUtdyX6BbNylq8eZYItEojqja1pOL PEp6s482/J4Ynwe3lzU27yyq3iKXGDN3IgHsuP3euwGq2JGS1NX+K7aYFTwZnosu wkXxlayvxKmw4XD4UcwbfTsZUAtcYkS8V+55DT9MwtvJAKk3lFDJ8b3WoqraZ4Vu Y60QPntSbxAAntiCsl29Dt/isJQQMXSMXgopup2EDCpJXXxvOebMXfFJOeDGAa1U RXy6tNEG7PAuBCoMoG94GELNHXp9PvKJaa9h1zrb0xE3eK9Ab/0YtIGgSJWTZllq vCjKXcMRnU/pfldjXx0nGJ4LMCdBQW17p4ks+t9l9DYBty5sc8U= -----END CERTIFICATE-----Generated at Sun Dec 7 07:34:29 2025 by rpki-client