This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/8b1664a7-c9c9-4442-8718-9aec9e2110a2/0/FF89F23BCBC42635E97AE15A7FB69E1E09A97DAF.mft File: FF89F23BCBC42635E97AE15A7FB69E1E09A97DAF.mft (raw, json) Hash identifier: L5fbpAvEX+21/ibE7E7GrDb3HAceMeZJl0quK4MgaT0= Subject key identifier: C6:38:D3:DF:71:BA:75:11:03:93:02:97:D2:47:3B:C8:65:5A:6B:2F Authority key identifier: FF:89:F2:3B:CB:C4:26:35:E9:7A:E1:5A:7F:B6:9E:1E:09:A9:7D:AF Certificate issuer: /CN=FF89F23BCBC42635E97AE15A7FB69E1E09A97DAF Certificate serial: 4AE6628158069C22C35F0527D74532AABAC9ADDB Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FF89F23BCBC42635E97AE15A7FB69E1E09A97DAF.cer Subject info access: rsync://repo-rpki.idnic.net/repo/8b1664a7-c9c9-4442-8718-9aec9e2110a2/0/FF89F23BCBC42635E97AE15A7FB69E1E09A97DAF.mft Manifest number: 02C4 Signing time: Fri 19 Dec 2025 13:02:50 +0000 Manifest this update: Fri 19 Dec 2025 12:57:50 +0000 Manifest next update: Mon 22 Dec 2025 17:59:50 +0000 Files and hashes: 1: 3130332e3136332e3138342e302f32342d3234203d3e20313432333636.roa (hash: T0kgQ8xq7nBxfVnwpyYEmmzA0fn9DjLFvoVcfJfTj5g=) 2: FF89F23BCBC42635E97AE15A7FB69E1E09A97DAF.crl (hash: Vjw/RJ8E3MNiARXZL/CvTTlcwa0cLhRGbIuDHDQr3T0=) 3: 3130332e3136332e3138352e302f32342d3234203d3e20313432333636.roa (hash: pdL/jDmC/bRYeiHS8cnl+uvo57Pja48iQZSIZZK07no=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/8b1664a7-c9c9-4442-8718-9aec9e2110a2/0/FF89F23BCBC42635E97AE15A7FB69E1E09A97DAF.crl rsync://repo-rpki.idnic.net/repo/8b1664a7-c9c9-4442-8718-9aec9e2110a2/0/FF89F23BCBC42635E97AE15A7FB69E1E09A97DAF.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FF89F23BCBC42635E97AE15A7FB69E1E09A97DAF.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 22 Dec 2025 17:59:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4a:e6:62:81:58:06:9c:22:c3:5f:05:27:d7:45:32:aa:ba:c9:ad:db Signature Algorithm: sha256WithRSAEncryption Issuer: CN=FF89F23BCBC42635E97AE15A7FB69E1E09A97DAF Validity Not Before: Dec 19 12:57:50 2025 GMT Not After : Dec 22 17:59:50 2025 GMT Subject: CN=C638D3DF71BA751103930297D2473BC8655A6B2F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:8e:ef:e3:95:b0:4c:62:de:6f:d3:de:d0:ff: e5:09:04:b0:10:9a:98:72:40:39:13:08:f4:0e:f7: a9:04:94:9a:1d:d5:ea:b8:a3:01:73:e8:e7:b5:71: 95:1c:2c:87:3b:c8:02:dd:cf:03:ba:17:e4:ed:6c: 11:5d:30:e7:e3:96:d2:c7:75:a0:b0:b5:39:8b:d5: 8c:a0:c0:ab:fa:39:03:5e:9d:50:e7:2f:ec:d9:30: 72:46:9d:8e:62:c5:a0:6a:6e:c3:6e:61:0c:11:42: 49:ca:96:17:2d:5e:3a:03:22:ed:e1:40:5a:f4:99: fa:fa:5d:2b:19:56:e7:df:fe:29:b4:a9:73:7d:4f: 8e:61:03:f6:46:66:07:6b:b8:dd:c8:22:2a:1c:84: 46:30:cc:09:49:78:0e:1f:59:75:90:e8:6e:44:fd: fb:e5:57:d6:cb:92:50:0b:b3:2c:1c:a6:78:a0:71: 5c:36:fc:5c:94:ad:89:4e:e1:7a:1b:f4:17:16:f1: 44:4a:22:be:78:cf:1e:6b:84:5c:e9:4e:13:7f:ff: 9d:0a:8e:68:ba:83:b2:af:db:0f:04:15:96:1c:98: 60:26:5a:43:60:5b:49:70:12:bd:7b:93:bc:45:c4: e4:ff:17:71:d1:42:61:b0:a4:6f:05:e1:6b:df:eb: e6:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C6:38:D3:DF:71:BA:75:11:03:93:02:97:D2:47:3B:C8:65:5A:6B:2F X509v3 Authority Key Identifier: keyid:FF:89:F2:3B:CB:C4:26:35:E9:7A:E1:5A:7F:B6:9E:1E:09:A9:7D:AF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/8b1664a7-c9c9-4442-8718-9aec9e2110a2/0/FF89F23BCBC42635E97AE15A7FB69E1E09A97DAF.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FF89F23BCBC42635E97AE15A7FB69E1E09A97DAF.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/8b1664a7-c9c9-4442-8718-9aec9e2110a2/0/FF89F23BCBC42635E97AE15A7FB69E1E09A97DAF.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 71:0c:6d:0e:58:fc:c3:8c:00:35:28:e4:10:ed:b8:bc:cf:32: 7e:6a:f3:ca:8e:e8:f3:67:f4:c1:62:65:ad:c4:26:4b:c9:84: 88:df:e6:81:6d:aa:89:fa:ef:72:e9:08:63:fe:7c:48:5b:64: cf:80:4d:d2:c3:96:f7:b8:a5:f6:93:91:03:93:be:8f:a4:a8: a9:ec:ee:22:7f:9f:38:2f:95:8c:76:90:ba:ca:6a:c5:62:fb: 3e:cd:05:91:55:8b:ad:ea:46:2b:41:bc:42:46:d7:f9:4e:60: c5:c5:18:b9:39:9c:ce:7f:02:34:f5:62:e4:5d:9d:28:05:75: 67:d3:e5:f5:43:b1:f7:66:0e:dd:61:40:74:be:9b:c7:d8:0c: 99:d9:3b:df:2a:6b:6c:36:69:5d:96:93:52:34:ea:33:84:f9: f0:76:9c:b3:bc:08:dc:5e:bd:57:ba:3f:9f:72:09:d2:45:b7: 96:1d:56:89:85:5d:67:d1:87:ab:9f:d2:b6:d4:c0:f8:f0:d7: fe:c8:ba:a8:ea:f6:a4:66:6d:bc:83:45:6a:fa:71:2c:1a:15: 7d:cc:18:2b:8e:c6:18:98:be:c3:b0:82:9d:b4:0d:5b:29:ee: f2:30:0c:c8:bf:c6:d9:49:6f:7a:12:f9:8a:62:c1:98:da:da: 2b:8e:38:c9 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUSuZigVgGnCLDXwUn10UyqrrJrdswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRkY4OUYyM0JDQkM0MjYzNUU5N0FFMTVBN0ZCNjlFMUUw OUE5N0RBRjAeFw0yNTEyMTkxMjU3NTBaFw0yNTEyMjIxNzU5NTBaMDMxMTAvBgNV BAMTKEM2MzhEM0RGNzFCQTc1MTEwMzkzMDI5N0QyNDczQkM4NjU1QTZCMkYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDaju/jlbBMYt5v097Q/+UJBLAQ mphyQDkTCPQO96kElJod1eq4owFz6Oe1cZUcLIc7yALdzwO6F+TtbBFdMOfjltLH daCwtTmL1YygwKv6OQNenVDnL+zZMHJGnY5ixaBqbsNuYQwRQknKlhctXjoDIu3h QFr0mfr6XSsZVuff/im0qXN9T45hA/ZGZgdruN3IIiochEYwzAlJeA4fWXWQ6G5E /fvlV9bLklALsywcpnigcVw2/FyUrYlO4Xob9BcW8URKIr54zx5rhFzpThN//50K jmi6g7Kv2w8EFZYcmGAmWkNgW0lwEr17k7xFxOT/F3HRQmGwpG8F4Wvf6+avAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUxjjT33G6dREDkwKX0kc7yGVaay8wHwYDVR0j BBgwFoAU/4nyO8vEJjXpeuFaf7aeHgmpfa8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 YjE2NjRhNy1jOWM5LTQ0NDItODcxOC05YWVjOWUyMTEwYTIvMC9GRjg5RjIzQkNC QzQyNjM1RTk3QUUxNUE3RkI2OUUxRTA5QTk3REFGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRkY4OUYyM0JDQkM0MjYzNUU5N0FFMTVBN0ZCNjlFMUUwOUE5 N0RBRi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOGIxNjY0YTctYzljOS00NDQyLTg3 MTgtOWFlYzllMjExMGEyLzAvRkY4OUYyM0JDQkM0MjYzNUU5N0FFMTVBN0ZCNjlF MUUwOUE5N0RBRi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHEMbQ5Y/MOMADUo5BDtuLzPMn5q88qO6PNn 9MFiZa3EJkvJhIjf5oFtqon673LpCGP+fEhbZM+ATdLDlve4pfaTkQOTvo+kqKns 7iJ/nzgvlYx2kLrKasVi+z7NBZFVi63qRitBvEJG1/lOYMXFGLk5nM5/AjT1YuRd nSgFdWfT5fVDsfdmDt1hQHS+m8fYDJnZO98qa2w2aV2Wk1I06jOE+fB2nLO8CNxe vVe6P59yCdJFt5YdVomFXWfRh6uf0rbUwPjw1/7Iuqjq9qRmbbyDRWr6cSwaFX3M GCuOxhiYvsOwgp20DVsp7vIwDMi/xtlJb3oS+YpiwZja2iuOOMk= -----END CERTIFICATE-----Generated at Sun Dec 21 17:27:41 2025 by rpki-client