This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/be11e98f-f54e-460b-88f3-bf91e0443e90/0/1FF9DE476AB686559E1C183A1B5BD4733E1B01ED.mft File: 1FF9DE476AB686559E1C183A1B5BD4733E1B01ED.mft (raw, json) Hash identifier: rjLTKDH5s6O47imeuSVnzvcKgo+nqgPVO4TRg0d/sPs= Subject key identifier: 3D:6C:03:D2:C3:3A:19:B7:9C:21:29:3A:B2:A4:A9:D8:3B:17:B7:C6 Authority key identifier: 1F:F9:DE:47:6A:B6:86:55:9E:1C:18:3A:1B:5B:D4:73:3E:1B:01:ED Certificate issuer: /CN=1FF9DE476AB686559E1C183A1B5BD4733E1B01ED Certificate serial: 3B30948925208D6056C8817D026769F135D081CA Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1FF9DE476AB686559E1C183A1B5BD4733E1B01ED.cer Subject info access: rsync://repo-rpki.idnic.net/repo/be11e98f-f54e-460b-88f3-bf91e0443e90/0/1FF9DE476AB686559E1C183A1B5BD4733E1B01ED.mft Manifest number: 01F9 Signing time: Tue 23 Dec 2025 10:42:52 +0000 Manifest this update: Tue 23 Dec 2025 10:37:52 +0000 Manifest next update: Fri 26 Dec 2025 18:21:52 +0000 Files and hashes: 1: 3130332e33362e37302e302f32342d3234203d3e20313530323037.roa (hash: 5j0Tt77Cz46MkrUQmLJBWqtCp8m1Y546C35T0cpKX64=) 2: 1FF9DE476AB686559E1C183A1B5BD4733E1B01ED.crl (hash: 24o46sZF4FAXvKKMx+BYbOQHtHs3jF24yn6gQX6PQKc=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/be11e98f-f54e-460b-88f3-bf91e0443e90/0/1FF9DE476AB686559E1C183A1B5BD4733E1B01ED.crl rsync://repo-rpki.idnic.net/repo/be11e98f-f54e-460b-88f3-bf91e0443e90/0/1FF9DE476AB686559E1C183A1B5BD4733E1B01ED.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1FF9DE476AB686559E1C183A1B5BD4733E1B01ED.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 26 Dec 2025 18:21:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3b:30:94:89:25:20:8d:60:56:c8:81:7d:02:67:69:f1:35:d0:81:ca Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1FF9DE476AB686559E1C183A1B5BD4733E1B01ED Validity Not Before: Dec 23 10:37:52 2025 GMT Not After : Dec 26 18:21:52 2025 GMT Subject: CN=3D6C03D2C33A19B79C21293AB2A4A9D83B17B7C6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:48:cf:1b:87:72:90:ee:3d:42:17:8e:ea:5f: a7:7b:45:bb:47:d5:0d:99:3d:ea:19:38:8d:35:c0: 46:44:02:60:19:b0:9c:21:3a:e4:b5:0f:a9:21:47: 20:e3:e8:ab:59:c3:54:42:7e:54:f9:f9:65:da:2a: 67:6a:17:17:69:75:9c:ce:31:5f:cf:26:91:d6:b3: 4d:9f:05:95:17:60:5b:85:0e:d4:38:ea:a5:ba:ed: b3:65:e6:43:8a:10:3c:9e:56:d1:89:6e:e5:5e:d5: c6:aa:55:53:ba:91:1b:23:24:8e:77:7e:dc:51:2d: 92:86:13:5d:4a:39:17:92:f3:86:62:69:5b:63:64: 0c:0f:fc:95:54:03:c3:bb:9b:9a:a5:6c:49:55:c9: 18:99:ca:62:dc:22:b4:c7:ce:79:a6:d6:07:b5:22: 98:1d:00:f7:90:db:5f:21:e9:db:df:5b:4a:aa:06: 6a:aa:c1:e1:d4:93:b2:f4:71:83:d4:37:7f:17:58: 66:2e:bb:e7:66:a2:f9:86:d5:d3:43:3f:2a:e3:87: 24:ca:ff:ab:f5:21:ba:33:ce:9e:9a:89:41:2b:99: 72:95:67:8c:72:2c:9f:fc:90:db:e1:52:af:f0:02: 70:64:86:36:e7:65:39:2e:86:74:82:6b:31:8e:cd: 8c:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:6C:03:D2:C3:3A:19:B7:9C:21:29:3A:B2:A4:A9:D8:3B:17:B7:C6 X509v3 Authority Key Identifier: keyid:1F:F9:DE:47:6A:B6:86:55:9E:1C:18:3A:1B:5B:D4:73:3E:1B:01:ED X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/be11e98f-f54e-460b-88f3-bf91e0443e90/0/1FF9DE476AB686559E1C183A1B5BD4733E1B01ED.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1FF9DE476AB686559E1C183A1B5BD4733E1B01ED.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/be11e98f-f54e-460b-88f3-bf91e0443e90/0/1FF9DE476AB686559E1C183A1B5BD4733E1B01ED.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 92:81:f7:57:94:92:95:36:20:5d:af:37:b8:9d:0e:c1:61:48: e5:b0:62:ef:9e:88:5a:2f:38:77:d7:28:84:ed:e2:af:ac:66: 0c:be:73:26:0d:91:11:7f:ac:6a:1b:3c:e1:97:ec:5f:a9:46: c7:77:da:c7:ff:62:7d:b8:a7:53:0c:34:21:bc:f2:ff:86:3b: c9:dd:d3:c7:f8:20:13:a1:83:34:58:c6:10:20:d3:a4:8d:0c: e6:1b:57:2c:5e:04:46:e3:db:87:40:d1:cb:d7:c1:50:77:c9: 99:63:0b:dd:24:5f:19:70:eb:91:21:db:37:1b:40:0b:9d:c4: 2d:fd:63:1b:7b:11:b3:99:37:19:e6:3a:0d:88:26:25:49:87: 2b:f7:bf:59:71:87:59:e7:77:b8:53:ad:e4:5c:c8:10:a2:62: 73:8d:e4:74:17:af:01:16:b0:74:3c:4e:e5:59:64:52:3d:0d: 1b:0b:ff:e7:ea:21:15:87:7b:bc:bb:e8:d3:75:db:28:ad:63: 95:f1:07:73:5d:4b:00:f5:63:ea:fa:8b:d3:7f:d3:b6:17:55: 1d:74:1f:77:53:ab:08:fc:4b:a3:8e:d0:24:ad:5d:e7:e7:52: 6a:14:ed:14:99:5f:8d:0e:56:ad:36:d0:c3:05:98:60:61:69: a1:99:cd:d3 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUOzCUiSUgjWBWyIF9Amdp8TXQgcowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUZGOURFNDc2QUI2ODY1NTlFMUMxODNBMUI1QkQ0NzMz RTFCMDFFRDAeFw0yNTEyMjMxMDM3NTJaFw0yNTEyMjYxODIxNTJaMDMxMTAvBgNV BAMTKDNENkMwM0QyQzMzQTE5Qjc5QzIxMjkzQUIyQTRBOUQ4M0IxN0I3QzYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDBSM8bh3KQ7j1CF47qX6d7RbtH 1Q2ZPeoZOI01wEZEAmAZsJwhOuS1D6khRyDj6KtZw1RCflT5+WXaKmdqFxdpdZzO MV/PJpHWs02fBZUXYFuFDtQ46qW67bNl5kOKEDyeVtGJbuVe1caqVVO6kRsjJI53 ftxRLZKGE11KOReS84ZiaVtjZAwP/JVUA8O7m5qlbElVyRiZymLcIrTHznmm1ge1 IpgdAPeQ218h6dvfW0qqBmqqweHUk7L0cYPUN38XWGYuu+dmovmG1dNDPyrjhyTK /6v1Ibozzp6aiUErmXKVZ4xyLJ/8kNvhUq/wAnBkhjbnZTkuhnSCazGOzYyzAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUPWwD0sM6GbecISk6sqSp2DsXt8YwHwYDVR0j BBgwFoAUH/neR2q2hlWeHBg6G1vUcz4bAe0wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i ZTExZTk4Zi1mNTRlLTQ2MGItODhmMy1iZjkxZTA0NDNlOTAvMC8xRkY5REU0NzZB QjY4NjU1OUUxQzE4M0ExQjVCRDQ3MzNFMUIwMUVELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMUZGOURFNDc2QUI2ODY1NTlFMUMxODNBMUI1QkQ0NzMzRTFC MDFFRC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYmUxMWU5OGYtZjU0ZS00NjBiLTg4 ZjMtYmY5MWUwNDQzZTkwLzAvMUZGOURFNDc2QUI2ODY1NTlFMUMxODNBMUI1QkQ0 NzMzRTFCMDFFRC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJKB91eUkpU2IF2vN7idDsFhSOWwYu+eiFov OHfXKITt4q+sZgy+cyYNkRF/rGobPOGX7F+pRsd32sf/Yn24p1MMNCG88v+GO8nd 08f4IBOhgzRYxhAg06SNDOYbVyxeBEbj24dA0cvXwVB3yZljC90kXxlw65Eh2zcb QAudxC39Yxt7EbOZNxnmOg2IJiVJhyv3v1lxh1nnd7hTreRcyBCiYnON5HQXrwEW sHQ8TuVZZFI9DRsL/+fqIRWHe7y76NN12yitY5XxB3NdSwD1Y+r6i9N/07YXVR10 H3dTqwj8S6OO0CStXefnUmoU7RSZX40OVq020MMFmGBhaaGZzdM= -----END CERTIFICATE-----Generated at Wed Dec 24 20:25:11 2025 by rpki-client