This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/ff7a7d98-2338-4d77-9662-f33ea68c86f2/0/1F609817DD084C4559EEB9B06E8013157EB82DB8.mft File: 1F609817DD084C4559EEB9B06E8013157EB82DB8.mft (raw, json) Hash identifier: RBuxeWNBWJECxtjFvV6jrWKiGKF5LibFy/b43eaedMc= Subject key identifier: 7B:B2:94:AA:63:27:10:82:D1:05:6C:32:BE:9D:AA:43:EC:E2:75:05 Authority key identifier: 1F:60:98:17:DD:08:4C:45:59:EE:B9:B0:6E:80:13:15:7E:B8:2D:B8 Certificate issuer: /CN=1F609817DD084C4559EEB9B06E8013157EB82DB8 Certificate serial: 783FFBF107A42D975DB7DCED8D8EAD953AC75EDE Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1F609817DD084C4559EEB9B06E8013157EB82DB8.cer Subject info access: rsync://repo-rpki.idnic.net/repo/ff7a7d98-2338-4d77-9662-f33ea68c86f2/0/1F609817DD084C4559EEB9B06E8013157EB82DB8.mft Manifest number: B0 Signing time: Wed 17 Dec 2025 17:41:46 +0000 Manifest this update: Wed 17 Dec 2025 17:36:46 +0000 Manifest next update: Sun 21 Dec 2025 04:46:46 +0000 Files and hashes: 1: 1F609817DD084C4559EEB9B06E8013157EB82DB8.crl (hash: n3Cv0cQyjDnm8LZ8HZ05yL5hmHzhQCYfwbhUlh5PUXU=) 2: 34352e3132332e3134302e302f32332d3234203d3e20313532303439.roa (hash: RD/RO/ie3tKJhpXhiY1wvpRhxWsn6xjmVmvMhdZr4lk=) 3: 34352e3132332e3134302e302f32332d3233203d3e20313532303439.roa (hash: PHcAVEeTYthOcGmorVA2c1r7wtqCpaWxCrN7FWMDJio=) 4: 34352e3132332e3134312e302f32342d3234203d3e20313532303439.roa (hash: mxAwK/MKmBpPTXvB+y7TO9Vx/LAA3W9mHnGSKrGKpTI=) 5: 34352e3132332e3134302e302f32342d3234203d3e20313532303439.roa (hash: eyKVqxooc3TAGiXmLnd8fFBCsIdu4PICiXyXT8Mjh6M=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/ff7a7d98-2338-4d77-9662-f33ea68c86f2/0/1F609817DD084C4559EEB9B06E8013157EB82DB8.crl rsync://repo-rpki.idnic.net/repo/ff7a7d98-2338-4d77-9662-f33ea68c86f2/0/1F609817DD084C4559EEB9B06E8013157EB82DB8.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1F609817DD084C4559EEB9B06E8013157EB82DB8.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 20 Dec 2025 20:54:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 78:3f:fb:f1:07:a4:2d:97:5d:b7:dc:ed:8d:8e:ad:95:3a:c7:5e:de Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1F609817DD084C4559EEB9B06E8013157EB82DB8 Validity Not Before: Dec 17 17:36:46 2025 GMT Not After : Dec 21 04:46:46 2025 GMT Subject: CN=7BB294AA63271082D1056C32BE9DAA43ECE27505 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:a1:20:92:b1:b5:f8:63:54:f3:25:ec:a3:98: 44:e5:bd:78:44:b0:88:3f:1c:e5:08:5c:c4:95:9c: f2:37:3f:09:d3:ae:86:17:50:9f:e8:11:01:41:20: b5:06:6d:b8:39:74:5f:98:12:7c:d9:c0:5c:8b:a1: 64:5d:8a:b9:1c:a6:1a:f3:43:e0:ef:45:0e:7d:78: 41:3d:32:5b:16:db:09:77:81:f1:d3:fe:53:1f:90: db:c9:b7:30:f9:57:c1:c3:d7:35:7e:54:97:33:cd: bd:71:1d:4a:e9:f0:74:43:45:e2:c0:9a:f9:fe:22: dc:0a:66:67:ef:71:20:3f:97:b2:d9:37:43:e1:fe: 40:69:0e:5b:77:d7:3b:3f:a5:e7:61:02:8d:f2:74: b7:b6:23:41:d1:d3:88:ec:b5:a6:7d:2a:46:b7:f5: 71:65:a1:56:9f:bf:d7:53:fe:49:ea:a0:5e:c1:1b: 02:cb:ee:f4:b4:ef:11:b5:5b:15:cf:96:9a:d7:f9: 73:a1:72:df:53:f3:58:88:7b:22:c8:fd:b5:f5:79: 0d:f8:62:00:3b:a0:56:dd:62:80:82:01:d4:20:55: 3e:67:db:0e:7a:04:b3:9a:ac:05:64:f7:77:b8:0e: 62:03:5c:c0:17:f9:d0:41:c2:ee:1d:70:32:c8:81: b5:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7B:B2:94:AA:63:27:10:82:D1:05:6C:32:BE:9D:AA:43:EC:E2:75:05 X509v3 Authority Key Identifier: keyid:1F:60:98:17:DD:08:4C:45:59:EE:B9:B0:6E:80:13:15:7E:B8:2D:B8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/ff7a7d98-2338-4d77-9662-f33ea68c86f2/0/1F609817DD084C4559EEB9B06E8013157EB82DB8.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1F609817DD084C4559EEB9B06E8013157EB82DB8.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ff7a7d98-2338-4d77-9662-f33ea68c86f2/0/1F609817DD084C4559EEB9B06E8013157EB82DB8.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c0:5b:93:4e:64:d6:98:74:74:d7:a9:74:8d:72:f9:eb:5d:90: cc:3c:5a:10:b1:c4:5b:13:4f:fd:cb:e9:6e:f0:07:c7:e6:9f: 76:71:4c:8a:13:c6:c9:fb:6f:40:e2:d7:53:df:ea:56:86:39: 53:8a:8e:05:41:5f:79:28:a2:52:49:56:f0:b4:63:50:d9:6c: d7:2a:3c:7c:e0:ca:24:c5:2d:7a:95:24:ac:3b:c6:1f:9b:ee: 5d:62:c3:85:fe:b2:a7:41:c6:88:7f:f8:c6:d7:32:c1:3c:fa: b8:3e:05:85:a1:5c:f3:e1:6b:d9:ed:9a:b4:71:d0:92:74:c3: 10:ee:18:a9:c8:cb:2b:ea:b4:2c:cc:7b:c3:bf:8a:80:dc:02: 7a:68:4d:aa:56:25:e3:88:82:5f:fe:99:96:66:71:0b:65:cc: 71:97:cf:6a:6a:34:c1:16:53:2c:77:a4:5e:b9:3b:3d:6d:f0: e7:54:82:31:ed:1c:05:68:47:43:69:91:97:b3:97:17:93:da: be:22:7d:9d:e5:59:a4:53:0d:14:d9:65:b5:1f:f9:b2:55:7d: 9c:3a:62:f5:99:9d:c5:ea:1b:41:aa:86:7e:a2:31:2e:c9:88: dc:89:12:27:1c:b8:54:f9:b9:40:81:3c:a2:27:af:ce:cf:f5: f8:8f:6e:74 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUeD/78QekLZddt9ztjY6tlTrHXt4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUY2MDk4MTdERDA4NEM0NTU5RUVCOUIwNkU4MDEzMTU3 RUI4MkRCODAeFw0yNTEyMTcxNzM2NDZaFw0yNTEyMjEwNDQ2NDZaMDMxMTAvBgNV BAMTKDdCQjI5NEFBNjMyNzEwODJEMTA1NkMzMkJFOURBQTQzRUNFMjc1MDUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCjoSCSsbX4Y1TzJeyjmETlvXhE sIg/HOUIXMSVnPI3PwnTroYXUJ/oEQFBILUGbbg5dF+YEnzZwFyLoWRdirkcphrz Q+DvRQ59eEE9MlsW2wl3gfHT/lMfkNvJtzD5V8HD1zV+VJczzb1xHUrp8HRDReLA mvn+ItwKZmfvcSA/l7LZN0Ph/kBpDlt31zs/pedhAo3ydLe2I0HR04jstaZ9Kka3 9XFloVafv9dT/knqoF7BGwLL7vS07xG1WxXPlprX+XOhct9T81iIeyLI/bX1eQ34 YgA7oFbdYoCCAdQgVT5n2w56BLOarAVk93e4DmIDXMAX+dBBwu4dcDLIgbW3AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUe7KUqmMnEILRBWwyvp2qQ+zidQUwHwYDVR0j BBgwFoAUH2CYF90ITEVZ7rmwboATFX64LbgwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m ZjdhN2Q5OC0yMzM4LTRkNzctOTY2Mi1mMzNlYTY4Yzg2ZjIvMC8xRjYwOTgxN0RE MDg0QzQ1NTlFRUI5QjA2RTgwMTMxNTdFQjgyREI4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMUY2MDk4MTdERDA4NEM0NTU5RUVCOUIwNkU4MDEzMTU3RUI4 MkRCOC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZmY3YTdkOTgtMjMzOC00ZDc3LTk2 NjItZjMzZWE2OGM4NmYyLzAvMUY2MDk4MTdERDA4NEM0NTU5RUVCOUIwNkU4MDEz MTU3RUI4MkRCOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAMBbk05k1ph0dNepdI1y+etdkMw8WhCxxFsT T/3L6W7wB8fmn3ZxTIoTxsn7b0Di11Pf6laGOVOKjgVBX3koolJJVvC0Y1DZbNcq PHzgyiTFLXqVJKw7xh+b7l1iw4X+sqdBxoh/+MbXMsE8+rg+BYWhXPPha9ntmrRx 0JJ0wxDuGKnIyyvqtCzMe8O/ioDcAnpoTapWJeOIgl/+mZZmcQtlzHGXz2pqNMEW Uyx3pF65Oz1t8OdUgjHtHAVoR0NpkZezlxeT2r4ifZ3lWaRTDRTZZbUf+bJVfZw6 YvWZncXqG0Gqhn6iMS7JiNyJEiccuFT5uUCBPKInr87P9fiPbnQ= -----END CERTIFICATE-----Generated at Wed Dec 17 21:04:08 2025 by rpki-client