This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/343f29ea-874a-4d1a-abcc-75293cb51a6d/0/FF102371565831DDB9C06DF47DF79B1120C9861E.mft File: FF102371565831DDB9C06DF47DF79B1120C9861E.mft (raw, json) Hash identifier: J+kIxQygf4g4mxxP3RJqYBSaXhHt1mrNt9DDmq+beEk= Subject key identifier: F8:33:08:D3:81:90:F9:C7:D4:9D:F6:E3:D7:AA:F7:F9:8B:FC:84:4F Authority key identifier: FF:10:23:71:56:58:31:DD:B9:C0:6D:F4:7D:F7:9B:11:20:C9:86:1E Certificate issuer: /CN=FF102371565831DDB9C06DF47DF79B1120C9861E Certificate serial: 3590C3F0DF9F9B081B3F981335AEDAD9C81A3CE7 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FF102371565831DDB9C06DF47DF79B1120C9861E.cer Subject info access: rsync://repo-rpki.idnic.net/repo/343f29ea-874a-4d1a-abcc-75293cb51a6d/0/FF102371565831DDB9C06DF47DF79B1120C9861E.mft Manifest number: E6 Signing time: Tue 23 Dec 2025 12:41:52 +0000 Manifest this update: Tue 23 Dec 2025 12:36:52 +0000 Manifest next update: Fri 26 Dec 2025 13:52:52 +0000 Files and hashes: 1: 3130332e332e3233332e302f32342d3234203d3e203538343837.roa (hash: J+VrJkjfilmZKoAgsIWnKv1mOwdSs14Mc87IKiPWNdQ=) 2: FF102371565831DDB9C06DF47DF79B1120C9861E.crl (hash: KE9pdyXO3Rw+fsU+4mWioheLgCE0Wjl/GJ7uZOHgeZg=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/343f29ea-874a-4d1a-abcc-75293cb51a6d/0/FF102371565831DDB9C06DF47DF79B1120C9861E.crl rsync://repo-rpki.idnic.net/repo/343f29ea-874a-4d1a-abcc-75293cb51a6d/0/FF102371565831DDB9C06DF47DF79B1120C9861E.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FF102371565831DDB9C06DF47DF79B1120C9861E.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 26 Dec 2025 13:52:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 35:90:c3:f0:df:9f:9b:08:1b:3f:98:13:35:ae:da:d9:c8:1a:3c:e7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=FF102371565831DDB9C06DF47DF79B1120C9861E Validity Not Before: Dec 23 12:36:52 2025 GMT Not After : Dec 26 13:52:52 2025 GMT Subject: CN=F83308D38190F9C7D49DF6E3D7AAF7F98BFC844F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:0e:d4:62:24:be:64:98:25:8d:5f:08:75:41: b4:ff:32:09:fa:7d:d2:87:0c:47:56:55:92:7e:89: 72:1a:0e:5b:fc:18:f6:ec:06:48:65:ca:1d:58:1e: 00:8d:34:97:fc:08:fc:04:3e:2f:ad:0f:7c:12:b1: 0d:92:5a:d7:74:85:1f:c1:e4:61:8f:24:fb:70:df: 7d:b9:a8:c7:b7:bd:b1:0e:59:45:89:84:1c:a4:23: 72:ce:0a:43:3c:e2:72:92:e4:f1:bc:b2:10:fb:b7: 03:30:d7:36:40:64:82:ef:62:47:63:cf:7c:ae:6c: 11:5d:00:23:34:da:a1:1e:61:c6:1d:aa:ad:58:f0: f8:61:4a:07:b4:76:6d:63:3b:f3:80:fc:41:f3:35: 1a:5f:38:ef:65:d7:ff:63:7c:c3:7d:06:5f:ee:7b: 97:cc:d8:ee:44:c7:f2:77:c3:05:a1:1d:72:30:9f: ea:35:49:72:fb:67:9c:d8:be:20:eb:e1:9d:d3:ba: 12:7e:ad:c7:86:4b:b8:09:8e:1f:7e:2e:69:28:73: 11:d8:32:28:a9:7e:02:cb:ad:77:cb:a5:68:66:8c: b9:34:a7:93:cc:61:85:a7:16:b2:35:45:78:8c:94: 00:ab:18:c5:a4:8d:b0:3f:16:fe:3b:6c:eb:f0:1d: ab:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:33:08:D3:81:90:F9:C7:D4:9D:F6:E3:D7:AA:F7:F9:8B:FC:84:4F X509v3 Authority Key Identifier: keyid:FF:10:23:71:56:58:31:DD:B9:C0:6D:F4:7D:F7:9B:11:20:C9:86:1E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/343f29ea-874a-4d1a-abcc-75293cb51a6d/0/FF102371565831DDB9C06DF47DF79B1120C9861E.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FF102371565831DDB9C06DF47DF79B1120C9861E.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/343f29ea-874a-4d1a-abcc-75293cb51a6d/0/FF102371565831DDB9C06DF47DF79B1120C9861E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 75:77:57:88:ed:28:ba:c4:d5:0f:02:17:55:66:83:d8:60:2b: e5:22:a8:18:a8:d8:3a:26:f5:07:18:f6:d1:8b:8d:a4:05:84: 49:42:cd:20:81:39:cc:5a:73:b1:bd:59:ce:5a:9e:b5:59:76: aa:83:0b:24:af:c8:16:f8:a7:a5:20:35:de:74:13:82:f8:3b: 0d:8f:a1:35:31:e4:1d:e8:85:9a:50:8f:70:59:b6:d6:4e:56: d2:bc:47:02:9b:27:1f:8c:8a:54:0d:b3:e7:a7:63:d2:42:98: d0:12:58:82:90:7a:3b:e5:cc:be:81:26:b7:31:74:ca:56:08: 19:c5:c0:74:03:e5:68:b3:40:f3:e4:ec:93:4d:42:8d:a5:96: 54:41:60:2e:c5:3d:ed:06:56:12:9d:17:f7:f3:8a:9a:c0:49: c8:0a:f2:25:7c:61:b9:fd:f3:0a:e5:8d:81:eb:a9:5b:3b:f2: 58:5d:aa:f5:7f:fd:f4:60:3c:8d:95:0a:b0:cc:4a:b1:ba:8c: c1:44:72:d2:46:db:d9:56:86:00:25:6d:6f:67:e9:03:07:c8: bf:72:d5:cb:8e:26:6c:c8:6e:31:57:bf:5d:d7:94:01:30:8a: 33:a6:20:9d:c3:20:8c:87:52:8b:19:f8:7e:ec:8d:d7:ba:44: 6e:88:ee:b2 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUNZDD8N+fmwgbP5gTNa7a2cgaPOcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRkYxMDIzNzE1NjU4MzFEREI5QzA2REY0N0RGNzlCMTEy MEM5ODYxRTAeFw0yNTEyMjMxMjM2NTJaFw0yNTEyMjYxMzUyNTJaMDMxMTAvBgNV BAMTKEY4MzMwOEQzODE5MEY5QzdENDlERjZFM0Q3QUFGN0Y5OEJGQzg0NEYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC9DtRiJL5kmCWNXwh1QbT/Mgn6 fdKHDEdWVZJ+iXIaDlv8GPbsBkhlyh1YHgCNNJf8CPwEPi+tD3wSsQ2SWtd0hR/B 5GGPJPtw3325qMe3vbEOWUWJhBykI3LOCkM84nKS5PG8shD7twMw1zZAZILvYkdj z3yubBFdACM02qEeYcYdqq1Y8PhhSge0dm1jO/OA/EHzNRpfOO9l1/9jfMN9Bl/u e5fM2O5Ex/J3wwWhHXIwn+o1SXL7Z5zYviDr4Z3TuhJ+rceGS7gJjh9+LmkocxHY MiipfgLLrXfLpWhmjLk0p5PMYYWnFrI1RXiMlACrGMWkjbA/Fv47bOvwHatBAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU+DMI04GQ+cfUnfbj16r3+Yv8hE8wHwYDVR0j BBgwFoAU/xAjcVZYMd25wG30ffebESDJhh4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z NDNmMjllYS04NzRhLTRkMWEtYWJjYy03NTI5M2NiNTFhNmQvMC9GRjEwMjM3MTU2 NTgzMUREQjlDMDZERjQ3REY3OUIxMTIwQzk4NjFFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRkYxMDIzNzE1NjU4MzFEREI5QzA2REY0N0RGNzlCMTEyMEM5 ODYxRS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMzQzZjI5ZWEtODc0YS00ZDFhLWFi Y2MtNzUyOTNjYjUxYTZkLzAvRkYxMDIzNzE1NjU4MzFEREI5QzA2REY0N0RGNzlC MTEyMEM5ODYxRS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHV3V4jtKLrE1Q8CF1Vmg9hgK+UiqBio2Dom 9QcY9tGLjaQFhElCzSCBOcxac7G9Wc5anrVZdqqDCySvyBb4p6UgNd50E4L4Ow2P oTUx5B3ohZpQj3BZttZOVtK8RwKbJx+MilQNs+enY9JCmNASWIKQejvlzL6BJrcx dMpWCBnFwHQD5WizQPPk7JNNQo2lllRBYC7FPe0GVhKdF/fziprAScgK8iV8Ybn9 8wrljYHrqVs78lhdqvV//fRgPI2VCrDMSrG6jMFEctJG29lWhgAlbW9n6QMHyL9y 1cuOJmzIbjFXv13XlAEwijOmIJ3DIIyHUosZ+H7sjde6RG6I7rI= -----END CERTIFICATE-----Generated at Wed Dec 24 22:10:49 2025 by rpki-client