This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/1d011a1c-a0ad-4d93-86af-3f0aadd9684f/0/FF3F066A5E9AB8F988B8E17C7A56DD2E00A66AD8.mft File: FF3F066A5E9AB8F988B8E17C7A56DD2E00A66AD8.mft (raw, json) Hash identifier: HgEg4IB4c64iu/IR0bJ5qLr3iz4SYh3lSAps2OpxTyM= Subject key identifier: 3F:BB:82:C9:AB:14:D8:15:D3:8E:7B:32:94:B2:92:0C:05:62:B0:CC Authority key identifier: FF:3F:06:6A:5E:9A:B8:F9:88:B8:E1:7C:7A:56:DD:2E:00:A6:6A:D8 Certificate issuer: /CN=FF3F066A5E9AB8F988B8E17C7A56DD2E00A66AD8 Certificate serial: 1D603288549DF7998B4F83D97C0A95F37C43E185 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/FF3F066A5E9AB8F988B8E17C7A56DD2E00A66AD8.cer Subject info access: rsync://repo-rpki.idnic.net/repo/1d011a1c-a0ad-4d93-86af-3f0aadd9684f/0/FF3F066A5E9AB8F988B8E17C7A56DD2E00A66AD8.mft Manifest number: 0101 Signing time: Sun 21 Dec 2025 00:32:34 +0000 Manifest this update: Sun 21 Dec 2025 00:27:34 +0000 Manifest next update: Wed 24 Dec 2025 12:19:34 +0000 Files and hashes: 1: 3135372e31352e38322e302f32332d3233203d3e20313532333633.roa (hash: TxbDMhKSioNeR20MqOvnLPpYmLwOjXBp9YQNGW/Dswg=) 2: 3135372e31352e38322e302f32342d3234203d3e20313532333633.roa (hash: LhdUiZ829jnCYzP+T/q1kR6KjN+CYgUrJ54OONbPWMo=) 3: 3135372e31352e38332e302f32342d3234203d3e20313532333633.roa (hash: tmwMaZpoyniOHlrA1Ev0DGw1sFkx/sRTma2ZD2CnpMQ=) 4: FF3F066A5E9AB8F988B8E17C7A56DD2E00A66AD8.crl (hash: y1zcIqVR/m6s9OTmaCQjEjEPMiCP4ZovmaSeV/XZStA=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/1d011a1c-a0ad-4d93-86af-3f0aadd9684f/0/FF3F066A5E9AB8F988B8E17C7A56DD2E00A66AD8.crl rsync://repo-rpki.idnic.net/repo/1d011a1c-a0ad-4d93-86af-3f0aadd9684f/0/FF3F066A5E9AB8F988B8E17C7A56DD2E00A66AD8.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/FF3F066A5E9AB8F988B8E17C7A56DD2E00A66AD8.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 23 Dec 2025 15:37:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1d:60:32:88:54:9d:f7:99:8b:4f:83:d9:7c:0a:95:f3:7c:43:e1:85 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=FF3F066A5E9AB8F988B8E17C7A56DD2E00A66AD8 Validity Not Before: Dec 21 00:27:34 2025 GMT Not After : Dec 24 12:19:34 2025 GMT Subject: CN=3FBB82C9AB14D815D38E7B3294B2920C0562B0CC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:c5:9d:cb:22:1f:52:df:e0:f7:b7:e4:c3:4e: a2:0b:79:f7:26:0b:c7:05:07:ea:cc:d9:38:87:c1: f5:85:00:e7:1a:16:b0:d7:ab:ca:48:ad:9a:d3:f2: ce:cf:58:8a:5d:4e:d4:2f:ab:47:00:c2:2d:5e:7d: 0a:1c:4d:26:8a:e3:7f:46:a4:b5:ec:f2:23:16:8a: 49:7c:29:51:01:32:ad:af:85:fe:56:f6:aa:ac:0d: 1f:cd:73:4a:60:f3:66:85:0f:c7:24:fb:f7:28:61: ad:3f:2a:f6:98:a4:d4:ea:88:a7:4b:5b:57:ae:7f: 5d:e7:96:7b:ec:7e:73:d5:c0:ea:20:15:47:66:22: 7a:da:99:c1:10:2b:47:5e:5b:d4:07:41:fd:2d:ee: ff:55:09:b6:f8:e7:04:32:35:90:9b:8e:f3:3a:c3: 96:a0:cc:17:14:86:90:79:86:b9:6d:82:e4:77:26: 87:80:a3:70:12:28:14:3c:3a:04:ef:35:2f:30:22: bb:75:fb:49:7e:2b:f0:68:09:a4:49:04:d7:06:fa: fd:a1:64:36:ef:0a:68:f6:94:b6:65:3c:ca:3a:6e: 5d:2d:59:a3:92:17:0a:fa:63:0c:54:f4:c6:64:df: 3a:ca:09:37:69:f9:ac:d9:86:d5:b5:35:8e:00:0b: 69:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3F:BB:82:C9:AB:14:D8:15:D3:8E:7B:32:94:B2:92:0C:05:62:B0:CC X509v3 Authority Key Identifier: keyid:FF:3F:06:6A:5E:9A:B8:F9:88:B8:E1:7C:7A:56:DD:2E:00:A6:6A:D8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/1d011a1c-a0ad-4d93-86af-3f0aadd9684f/0/FF3F066A5E9AB8F988B8E17C7A56DD2E00A66AD8.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/FF3F066A5E9AB8F988B8E17C7A56DD2E00A66AD8.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/1d011a1c-a0ad-4d93-86af-3f0aadd9684f/0/FF3F066A5E9AB8F988B8E17C7A56DD2E00A66AD8.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 80:73:dc:a3:e5:86:05:d7:48:b6:69:70:d3:8e:b0:0b:be:00: c1:66:ab:86:63:e0:43:e3:38:12:05:12:81:af:85:c3:b2:a3: 19:54:42:66:1d:e8:6d:6c:cf:7c:8d:94:5f:04:5a:20:22:75: 12:c6:09:d2:a3:b7:65:52:08:ba:b7:76:a6:fc:bd:16:d2:c4: 9e:6f:2d:59:59:23:9d:61:45:4c:b5:28:f1:e1:45:85:fd:58: 09:6e:e0:40:28:e5:0a:2b:8d:f9:3e:19:2c:a6:f0:39:55:c2: 22:be:e6:56:c9:47:5a:39:90:7f:f0:5f:a3:57:69:2a:99:c0: dd:28:94:96:b1:b5:e0:a5:ec:76:77:64:90:86:e7:cb:ec:88: ee:8c:ec:81:fa:aa:a3:e1:3a:92:9c:7d:7b:2c:6a:f4:21:96: f1:ec:b1:a1:bd:ac:48:bf:d7:50:f0:2e:69:30:57:ad:1f:15: c1:96:0c:2d:eb:a8:df:0b:e1:0c:b8:6a:8f:cd:91:0b:a7:b1: a8:2c:a5:32:a7:20:7b:f3:b2:4a:70:ce:6b:c8:0b:c2:a7:79: 5a:f4:97:fb:3c:08:37:59:81:2e:b2:db:a2:79:f5:a2:1d:cf: c5:62:32:ca:38:9c:e7:ca:8f:ea:66:c5:91:40:f3:d4:23:76: df:d4:18:03 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUHWAyiFSd95mLT4PZfAqV83xD4YUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRkYzRjA2NkE1RTlBQjhGOTg4QjhFMTdDN0E1NkREMkUw MEE2NkFEODAeFw0yNTEyMjEwMDI3MzRaFw0yNTEyMjQxMjE5MzRaMDMxMTAvBgNV BAMTKDNGQkI4MkM5QUIxNEQ4MTVEMzhFN0IzMjk0QjI5MjBDMDU2MkIwQ0MwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDYxZ3LIh9S3+D3t+TDTqILefcm C8cFB+rM2TiHwfWFAOcaFrDXq8pIrZrT8s7PWIpdTtQvq0cAwi1efQocTSaK439G pLXs8iMWikl8KVEBMq2vhf5W9qqsDR/Nc0pg82aFD8ck+/coYa0/KvaYpNTqiKdL W1euf13nlnvsfnPVwOogFUdmInramcEQK0deW9QHQf0t7v9VCbb45wQyNZCbjvM6 w5agzBcUhpB5hrltguR3JoeAo3ASKBQ8OgTvNS8wIrt1+0l+K/BoCaRJBNcG+v2h ZDbvCmj2lLZlPMo6bl0tWaOSFwr6YwxU9MZk3zrKCTdp+azZhtW1NY4AC2lZAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUP7uCyasU2BXTjnsylLKSDAVisMwwHwYDVR0j BBgwFoAU/z8Gal6auPmIuOF8elbdLgCmatgwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x ZDAxMWExYy1hMGFkLTRkOTMtODZhZi0zZjBhYWRkOTY4NGYvMC9GRjNGMDY2QTVF OUFCOEY5ODhCOEUxN0M3QTU2REQyRTAwQTY2QUQ4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvRkYzRjA2NkE1RTlBQjhGOTg4QjhFMTdDN0E1NkREMkUwMEE2 NkFEOC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMWQwMTFhMWMtYTBhZC00ZDkzLTg2 YWYtM2YwYWFkZDk2ODRmLzAvRkYzRjA2NkE1RTlBQjhGOTg4QjhFMTdDN0E1NkRE MkUwMEE2NkFEOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIBz3KPlhgXXSLZpcNOOsAu+AMFmq4Zj4EPj OBIFEoGvhcOyoxlUQmYd6G1sz3yNlF8EWiAidRLGCdKjt2VSCLq3dqb8vRbSxJ5v LVlZI51hRUy1KPHhRYX9WAlu4EAo5Qorjfk+GSym8DlVwiK+5lbJR1o5kH/wX6NX aSqZwN0olJaxteCl7HZ3ZJCG58vsiO6M7IH6qqPhOpKcfXssavQhlvHssaG9rEi/ 11DwLmkwV60fFcGWDC3rqN8L4Qy4ao/NkQunsagspTKnIHvzskpwzmvIC8KneVr0 l/s8CDdZgS6y26J59aIdz8ViMso4nOfKj+pmxZFA89Qjdt/UGAM= -----END CERTIFICATE-----Generated at Sun Dec 21 23:10:20 2025 by rpki-client