This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/ff7a7d98-2338-4d77-9662-f33ea68c86f2/0/1F609817DD084C4559EEB9B06E8013157EB82DB8.mft File: 1F609817DD084C4559EEB9B06E8013157EB82DB8.mft (raw, json) Hash identifier: CAysC3uzngz6vk+mHL4R5ZNVTBh1BO1L3tmamGt2Mhc= Subject key identifier: CC:31:14:0F:3A:D9:41:96:8B:00:C6:B1:4C:B4:D7:ED:1E:00:52:00 Authority key identifier: 1F:60:98:17:DD:08:4C:45:59:EE:B9:B0:6E:80:13:15:7E:B8:2D:B8 Certificate issuer: /CN=1F609817DD084C4559EEB9B06E8013157EB82DB8 Certificate serial: 0879C129C56687B8A53483FB1725E0AC4001A70F Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1F609817DD084C4559EEB9B06E8013157EB82DB8.cer Subject info access: rsync://repo-rpki.idnic.net/repo/ff7a7d98-2338-4d77-9662-f33ea68c86f2/0/1F609817DD084C4559EEB9B06E8013157EB82DB8.mft Manifest number: AB Signing time: Sat 06 Dec 2025 05:41:47 +0000 Manifest this update: Sat 06 Dec 2025 05:36:47 +0000 Manifest next update: Tue 09 Dec 2025 12:30:47 +0000 Files and hashes: 1: 34352e3132332e3134302e302f32332d3233203d3e20313532303439.roa (hash: PHcAVEeTYthOcGmorVA2c1r7wtqCpaWxCrN7FWMDJio=) 2: 34352e3132332e3134302e302f32332d3234203d3e20313532303439.roa (hash: RD/RO/ie3tKJhpXhiY1wvpRhxWsn6xjmVmvMhdZr4lk=) 3: 1F609817DD084C4559EEB9B06E8013157EB82DB8.crl (hash: fz7nGSejJ0oKMlkmIeD/nX4KBdVKWzpYvKHfY4+9Nz4=) 4: 34352e3132332e3134312e302f32342d3234203d3e20313532303439.roa (hash: mxAwK/MKmBpPTXvB+y7TO9Vx/LAA3W9mHnGSKrGKpTI=) 5: 34352e3132332e3134302e302f32342d3234203d3e20313532303439.roa (hash: eyKVqxooc3TAGiXmLnd8fFBCsIdu4PICiXyXT8Mjh6M=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/ff7a7d98-2338-4d77-9662-f33ea68c86f2/0/1F609817DD084C4559EEB9B06E8013157EB82DB8.crl rsync://repo-rpki.idnic.net/repo/ff7a7d98-2338-4d77-9662-f33ea68c86f2/0/1F609817DD084C4559EEB9B06E8013157EB82DB8.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1F609817DD084C4559EEB9B06E8013157EB82DB8.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 09 Dec 2025 12:30:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 08:79:c1:29:c5:66:87:b8:a5:34:83:fb:17:25:e0:ac:40:01:a7:0f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1F609817DD084C4559EEB9B06E8013157EB82DB8 Validity Not Before: Dec 6 05:36:47 2025 GMT Not After : Dec 9 12:30:47 2025 GMT Subject: CN=CC31140F3AD941968B00C6B14CB4D7ED1E005200 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:35:85:b8:7f:38:33:5e:f1:3c:55:26:8f:87: 86:f3:e1:47:06:77:f8:3a:0c:53:6c:3d:25:1c:9d: cf:14:0d:cb:91:da:79:da:17:4c:df:59:ad:5b:2d: 8a:6f:18:4b:a9:74:1a:e3:b0:c6:43:56:40:12:36: 3c:75:a9:fb:32:90:b5:06:4b:db:49:b4:ba:5b:48: ed:18:d6:fd:cd:13:94:c5:14:7f:7e:38:69:3f:39: bf:a6:7a:e7:a7:2d:e8:8a:7d:c4:07:b4:0f:73:5e: fa:00:68:02:8f:a0:5d:56:09:a3:b9:58:60:c8:e4: 74:ee:de:f2:5e:f7:d5:08:bd:de:76:4a:34:2f:73: 3f:d8:a1:22:44:1c:7b:25:a3:d4:20:00:06:4c:58: c6:28:3a:1d:07:1d:35:c3:e2:4d:f5:47:58:ac:b3: b7:35:3d:4e:1e:04:77:fa:e2:b0:b1:6e:6a:10:0f: 4c:bc:b2:98:7a:9d:d6:73:4b:14:5a:8b:4f:1e:b9: 1b:02:5c:7b:d2:8d:2a:ff:48:08:49:86:f2:e0:0c: ff:93:45:c7:d7:63:0a:09:b1:c7:09:29:a7:ff:8c: 57:41:5b:87:35:30:39:64:25:24:88:7d:52:7c:6a: 1c:67:3d:fc:17:90:14:f1:a9:b8:23:01:e2:a4:2b: 5d:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CC:31:14:0F:3A:D9:41:96:8B:00:C6:B1:4C:B4:D7:ED:1E:00:52:00 X509v3 Authority Key Identifier: keyid:1F:60:98:17:DD:08:4C:45:59:EE:B9:B0:6E:80:13:15:7E:B8:2D:B8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/ff7a7d98-2338-4d77-9662-f33ea68c86f2/0/1F609817DD084C4559EEB9B06E8013157EB82DB8.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1F609817DD084C4559EEB9B06E8013157EB82DB8.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ff7a7d98-2338-4d77-9662-f33ea68c86f2/0/1F609817DD084C4559EEB9B06E8013157EB82DB8.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 24:ef:0c:88:b6:d4:b9:eb:ce:2f:eb:1a:fe:0e:d2:22:f9:08: e7:37:e1:7e:84:d0:a6:a6:de:a3:57:80:ff:a3:1f:f0:52:10: d2:18:1b:08:5e:95:bf:7d:9a:3f:68:c8:2d:e2:1b:1f:04:03: b7:26:0e:ef:f8:4f:2a:b1:20:fe:97:08:71:c4:40:12:61:78: 9d:73:e3:9b:6c:27:a0:1d:05:cd:bd:3f:a2:ea:10:52:bb:37: f6:df:36:d3:40:d5:b4:cb:be:64:ef:e7:4e:a5:a0:fb:fa:ac: 3c:46:1f:6e:f8:83:0b:41:30:c3:11:91:5b:83:63:78:60:4f: 75:b1:59:d3:29:bb:e0:d8:92:2e:d4:23:c3:71:ce:82:0a:2c: 89:28:12:31:62:24:5f:49:0d:76:ca:bc:41:a9:da:c8:61:8a: de:68:6d:8f:3b:0e:80:6f:c1:40:76:97:ac:56:1e:df:36:6f: e0:ca:42:52:15:69:57:2b:54:b5:a9:71:4a:30:ea:32:d5:b2: f5:80:40:9a:db:c4:77:a9:a6:f6:11:14:f7:8c:6a:00:43:40: 88:04:9e:8c:70:7e:0e:47:c4:7a:31:60:e4:7a:05:72:78:4e: 4f:11:81:5b:cd:fd:a7:8c:75:6f:ee:61:dd:c3:9d:06:a5:3e: 6c:21:5c:89 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUCHnBKcVmh7ilNIP7FyXgrEABpw8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUY2MDk4MTdERDA4NEM0NTU5RUVCOUIwNkU4MDEzMTU3 RUI4MkRCODAeFw0yNTEyMDYwNTM2NDdaFw0yNTEyMDkxMjMwNDdaMDMxMTAvBgNV BAMTKENDMzExNDBGM0FEOTQxOTY4QjAwQzZCMTRDQjREN0VEMUUwMDUyMDAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDKNYW4fzgzXvE8VSaPh4bz4UcG d/g6DFNsPSUcnc8UDcuR2nnaF0zfWa1bLYpvGEupdBrjsMZDVkASNjx1qfsykLUG S9tJtLpbSO0Y1v3NE5TFFH9+OGk/Ob+meuenLeiKfcQHtA9zXvoAaAKPoF1WCaO5 WGDI5HTu3vJe99UIvd52SjQvcz/YoSJEHHslo9QgAAZMWMYoOh0HHTXD4k31R1is s7c1PU4eBHf64rCxbmoQD0y8sph6ndZzSxRai08euRsCXHvSjSr/SAhJhvLgDP+T RcfXYwoJsccJKaf/jFdBW4c1MDlkJSSIfVJ8ahxnPfwXkBTxqbgjAeKkK119AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUzDEUDzrZQZaLAMaxTLTX7R4AUgAwHwYDVR0j BBgwFoAUH2CYF90ITEVZ7rmwboATFX64LbgwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m ZjdhN2Q5OC0yMzM4LTRkNzctOTY2Mi1mMzNlYTY4Yzg2ZjIvMC8xRjYwOTgxN0RE MDg0QzQ1NTlFRUI5QjA2RTgwMTMxNTdFQjgyREI4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMUY2MDk4MTdERDA4NEM0NTU5RUVCOUIwNkU4MDEzMTU3RUI4 MkRCOC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZmY3YTdkOTgtMjMzOC00ZDc3LTk2 NjItZjMzZWE2OGM4NmYyLzAvMUY2MDk4MTdERDA4NEM0NTU5RUVCOUIwNkU4MDEz MTU3RUI4MkRCOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACTvDIi21Lnrzi/rGv4O0iL5COc34X6E0Kam 3qNXgP+jH/BSENIYGwhelb99mj9oyC3iGx8EA7cmDu/4TyqxIP6XCHHEQBJheJ1z 45tsJ6AdBc29P6LqEFK7N/bfNtNA1bTLvmTv506loPv6rDxGH274gwtBMMMRkVuD Y3hgT3WxWdMpu+DYki7UI8NxzoIKLIkoEjFiJF9JDXbKvEGp2shhit5obY87DoBv wUB2l6xWHt82b+DKQlIVaVcrVLWpcUow6jLVsvWAQJrbxHeppvYRFPeMagBDQIgE noxwfg5HxHoxYOR6BXJ4Tk8RgVvN/aeMdW/uYd3DnQalPmwhXIk= -----END CERTIFICATE-----Generated at Sat Dec 6 23:51:34 2025 by rpki-client