This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/9b3784fe-f9fe-4cbe-8768-263a76986a3a/0/FF75AEDDC6059E8A2B830E487D72BE77E330BEEF.mft File: FF75AEDDC6059E8A2B830E487D72BE77E330BEEF.mft (raw, json) Hash identifier: m3+SGYFH4AhcFQg/jJJQPG17wg8Onrni/Oni+mX/y1c= Subject key identifier: 6B:E6:89:2E:3E:61:AC:0E:CE:23:E9:EC:49:6D:56:75:0E:BC:CC:1D Authority key identifier: FF:75:AE:DD:C6:05:9E:8A:2B:83:0E:48:7D:72:BE:77:E3:30:BE:EF Certificate issuer: /CN=FF75AEDDC6059E8A2B830E487D72BE77E330BEEF Certificate serial: 4E4E22C7D0C8D04762B05B62E5D84A05668B3A97 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FF75AEDDC6059E8A2B830E487D72BE77E330BEEF.cer Subject info access: rsync://repo-rpki.idnic.net/repo/9b3784fe-f9fe-4cbe-8768-263a76986a3a/0/FF75AEDDC6059E8A2B830E487D72BE77E330BEEF.mft Manifest number: 01DB Signing time: Tue 23 Dec 2025 15:21:52 +0000 Manifest this update: Tue 23 Dec 2025 15:16:52 +0000 Manifest next update: Fri 26 Dec 2025 20:35:52 +0000 Files and hashes: 1: 3130332e3132312e3133342e302f32332d3234203d3e20313335343738.roa (hash: YYTZNty3sg6WbwJZplWjBQqyNGraOYIziE5EjfxvIWA=) 2: FF75AEDDC6059E8A2B830E487D72BE77E330BEEF.crl (hash: fHoiQOqn+0jvKpvyjWYmCVYjvAHe/RJ8LgyQhn/eUNw=) 3: 3130332e3132312e3133322e302f32332d3234203d3e20313335343738.roa (hash: +aJ3urDYDAdZbLVxgK3efiShr+akQCYv1/hl/FmSvgY=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/9b3784fe-f9fe-4cbe-8768-263a76986a3a/0/FF75AEDDC6059E8A2B830E487D72BE77E330BEEF.crl rsync://repo-rpki.idnic.net/repo/9b3784fe-f9fe-4cbe-8768-263a76986a3a/0/FF75AEDDC6059E8A2B830E487D72BE77E330BEEF.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FF75AEDDC6059E8A2B830E487D72BE77E330BEEF.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 26 Dec 2025 20:35:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4e:4e:22:c7:d0:c8:d0:47:62:b0:5b:62:e5:d8:4a:05:66:8b:3a:97 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=FF75AEDDC6059E8A2B830E487D72BE77E330BEEF Validity Not Before: Dec 23 15:16:52 2025 GMT Not After : Dec 26 20:35:52 2025 GMT Subject: CN=6BE6892E3E61AC0ECE23E9EC496D56750EBCCC1D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:4e:20:d3:78:91:cf:8c:b8:50:31:c7:8f:d8: 01:11:4a:da:d5:4c:ce:92:1a:0c:a7:c2:79:a0:eb: 00:7f:91:ac:7c:ed:77:91:7b:38:62:4d:d0:50:0f: 06:99:1f:0f:ce:6a:87:83:e4:cb:de:ac:ae:dd:9c: 31:17:77:26:9c:07:2a:aa:f3:90:98:59:fe:f3:b5: 54:2c:be:b2:05:3f:22:01:bb:15:f0:c2:b6:8c:f8: 34:95:a4:db:9e:f2:bd:fe:7c:2f:96:da:34:6d:af: 79:3e:a9:83:08:88:0f:e3:9a:54:4d:5d:4d:a3:6c: 86:d2:6c:08:87:69:7e:87:c1:e5:cf:2c:67:51:ff: d8:11:73:8e:3e:8a:da:49:f5:4f:b5:f5:7c:35:c7: 57:2d:aa:f1:2d:7a:de:e9:b9:56:f5:22:68:3a:e2: 27:d2:48:ac:ee:23:95:4f:cc:26:27:74:65:46:bd: e6:bb:28:b4:3a:f5:53:71:ca:a3:36:4b:8d:7d:46: 25:ec:02:1b:42:b9:d1:a5:a6:d4:fa:ae:13:fe:22: 03:d3:48:16:03:9d:8e:12:7d:84:9b:29:08:a7:ab: f4:94:94:8c:01:4f:0c:9e:7c:cd:89:89:80:0f:1e: 21:b6:bc:b5:4b:06:32:57:7c:63:58:97:01:54:44: 6a:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6B:E6:89:2E:3E:61:AC:0E:CE:23:E9:EC:49:6D:56:75:0E:BC:CC:1D X509v3 Authority Key Identifier: keyid:FF:75:AE:DD:C6:05:9E:8A:2B:83:0E:48:7D:72:BE:77:E3:30:BE:EF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/9b3784fe-f9fe-4cbe-8768-263a76986a3a/0/FF75AEDDC6059E8A2B830E487D72BE77E330BEEF.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FF75AEDDC6059E8A2B830E487D72BE77E330BEEF.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/9b3784fe-f9fe-4cbe-8768-263a76986a3a/0/FF75AEDDC6059E8A2B830E487D72BE77E330BEEF.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7c:fd:cf:e0:6d:16:b4:c0:99:c3:88:f6:13:86:e9:2a:2b:50: 08:a6:fe:89:53:55:30:26:9d:a7:dc:c5:a2:e3:c0:ee:f0:b1: 80:54:ed:7a:3a:c7:a4:04:d8:d1:42:4a:d1:de:16:6c:22:4b: f5:30:14:6f:63:21:49:19:aa:e3:f1:00:d1:09:54:fa:f6:87: 35:36:b8:e6:da:e8:55:76:5c:14:10:4d:41:08:0d:68:a5:53: bc:c9:6a:6a:6a:ae:0e:70:5b:d8:09:61:7d:29:ac:cd:3e:e1: fd:51:27:6c:bd:16:ed:d0:80:d7:8e:8a:19:fa:37:98:d9:da: bd:15:82:14:b7:d6:92:c2:c2:55:06:43:df:9a:8a:8b:4b:ae: 7e:80:b1:7d:fb:c7:f9:fc:28:13:39:bd:30:02:7a:0f:97:a9: 7a:c0:f5:b9:1d:f5:eb:32:66:b4:dd:04:de:4d:51:0b:31:7c: 41:d5:cf:da:78:8e:c4:f7:80:9a:26:0d:b1:63:d9:23:33:b9: 9d:5a:40:86:2c:7e:d4:c7:a9:64:3f:90:e0:32:9a:07:b4:a2: 40:f1:4c:4f:68:2c:5c:ea:73:51:f1:01:51:d6:f1:e8:57:af: eb:4b:e9:6e:19:d7:ad:cb:52:dc:3f:7a:58:1d:3f:fe:71:df: b2:0f:be:e2 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUTk4ix9DI0EdisFti5dhKBWaLOpcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRkY3NUFFRERDNjA1OUU4QTJCODMwRTQ4N0Q3MkJFNzdF MzMwQkVFRjAeFw0yNTEyMjMxNTE2NTJaFw0yNTEyMjYyMDM1NTJaMDMxMTAvBgNV BAMTKDZCRTY4OTJFM0U2MUFDMEVDRTIzRTlFQzQ5NkQ1Njc1MEVCQ0NDMUQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC9TiDTeJHPjLhQMceP2AERStrV TM6SGgynwnmg6wB/kax87XeRezhiTdBQDwaZHw/OaoeD5MverK7dnDEXdyacByqq 85CYWf7ztVQsvrIFPyIBuxXwwraM+DSVpNue8r3+fC+W2jRtr3k+qYMIiA/jmlRN XU2jbIbSbAiHaX6HweXPLGdR/9gRc44+itpJ9U+19Xw1x1ctqvEtet7puVb1Img6 4ifSSKzuI5VPzCYndGVGvea7KLQ69VNxyqM2S419RiXsAhtCudGlptT6rhP+IgPT SBYDnY4SfYSbKQinq/SUlIwBTwyefM2JiYAPHiG2vLVLBjJXfGNYlwFURGr1AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUa+aJLj5hrA7OI+nsSW1WdQ68zB0wHwYDVR0j BBgwFoAU/3Wu3cYFnoorgw5IfXK+d+Mwvu8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 YjM3ODRmZS1mOWZlLTRjYmUtODc2OC0yNjNhNzY5ODZhM2EvMC9GRjc1QUVEREM2 MDU5RThBMkI4MzBFNDg3RDcyQkU3N0UzMzBCRUVGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRkY3NUFFRERDNjA1OUU4QTJCODMwRTQ4N0Q3MkJFNzdFMzMw QkVFRi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOWIzNzg0ZmUtZjlmZS00Y2JlLTg3 NjgtMjYzYTc2OTg2YTNhLzAvRkY3NUFFRERDNjA1OUU4QTJCODMwRTQ4N0Q3MkJF NzdFMzMwQkVFRi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHz9z+BtFrTAmcOI9hOG6SorUAim/olTVTAm nafcxaLjwO7wsYBU7Xo6x6QE2NFCStHeFmwiS/UwFG9jIUkZquPxANEJVPr2hzU2 uOba6FV2XBQQTUEIDWilU7zJampqrg5wW9gJYX0prM0+4f1RJ2y9Fu3QgNeOihn6 N5jZ2r0VghS31pLCwlUGQ9+aiotLrn6AsX37x/n8KBM5vTACeg+XqXrA9bkd9esy ZrTdBN5NUQsxfEHVz9p4jsT3gJomDbFj2SMzuZ1aQIYsftTHqWQ/kOAymge0okDx TE9oLFzqc1HxAVHW8ehXr+tL6W4Z163LUtw/elgdP/5x37IPvuI= -----END CERTIFICATE-----Generated at Wed Dec 24 18:31:31 2025 by rpki-client