This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/e139ac1f-38e2-45aa-97dc-992796411cc1/0/FFD09495181408CBE83FD333EACEF29FBCDAD633.mft File: FFD09495181408CBE83FD333EACEF29FBCDAD633.mft (raw, json) Hash identifier: VXqIzHXTCGWGPVWNKgeVVJc1RZBXpdWLisErOvU3VTo= Subject key identifier: F0:EB:58:5D:AE:CD:3C:5A:FD:94:5F:2E:18:C3:E4:60:BD:2D:85:88 Authority key identifier: FF:D0:94:95:18:14:08:CB:E8:3F:D3:33:EA:CE:F2:9F:BC:DA:D6:33 Certificate issuer: /CN=FFD09495181408CBE83FD333EACEF29FBCDAD633 Certificate serial: 21C47CE4A33B1AA5D4ED2296D7641C0312DC368F Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FFD09495181408CBE83FD333EACEF29FBCDAD633.cer Subject info access: rsync://repo-rpki.idnic.net/repo/e139ac1f-38e2-45aa-97dc-992796411cc1/0/FFD09495181408CBE83FD333EACEF29FBCDAD633.mft Manifest number: 13 Signing time: Thu 18 Dec 2025 11:01:48 +0000 Manifest this update: Thu 18 Dec 2025 10:56:48 +0000 Manifest next update: Sun 21 Dec 2025 20:17:48 +0000 Files and hashes: 1: 3131362e3230342e3234382e302f32332d3233203d3e20313332363434.roa (hash: 2dbUHoYqjRohW3IHxlUvKZf6dq91UB5nDLAXnYGv67o=) 2: 3131362e3230342e3235302e302f32332d3233203d3e20313332363434.roa (hash: EFxWA7vxSgHBwram8ylJUW5n68a3XpYhbkZqHyGTFPU=) 3: 3131362e3230342e3132382e302f32342d3234203d3e20313332363434.roa (hash: P1YBvGHSMw2KSmorZM6GVpNPSOsIMTGTDkbnAUEcz4U=) 4: 3131362e3230342e3133302e302f32342d3234203d3e20313332363434.roa (hash: xioTUNg3YtC13S6Cj3SPOGks7jmJZPc/QomqvXyPDT0=) 5: 34352e3132362e3133322e302f32322d3232203d3e20313332363434.roa (hash: nEvjJAuLU5NVHyPCkT4t36RWeV+PULX/Gg0P3xFzBdA=) 6: 3131362e3230342e3132392e302f32342d3234203d3e20313332363434.roa (hash: 9dGh3Dmwfr7Qg1VTty4nQgm98lmd64c7x7uG+kRxXvs=) 7: 3131362e3230342e3133312e302f32342d3234203d3e20313332363434.roa (hash: bD3z2MHh1z8AA6G7X+ZWEL+ijpSpYsmo1zxz1oUdyZ4=) 8: FFD09495181408CBE83FD333EACEF29FBCDAD633.crl (hash: FZmrpDsg8eFaCC34kXgH+F1gda11a/H4bBmxkKJiCg4=) 9: 3130332e32342e31322e302f32332d3233203d3e20313332363434.roa (hash: /NCGV+SwtDLnV3TMTVLORuZVELyx2f18pHCo9yoVgIU=) 10: 3130332e3235332e36382e302f32332d3233203d3e20313332363434.roa (hash: 5LnPe1qqPi1/xX5VnvEUwwekWCcAbF1I2gMcXgA6ERo=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/e139ac1f-38e2-45aa-97dc-992796411cc1/0/FFD09495181408CBE83FD333EACEF29FBCDAD633.crl rsync://repo-rpki.idnic.net/repo/e139ac1f-38e2-45aa-97dc-992796411cc1/0/FFD09495181408CBE83FD333EACEF29FBCDAD633.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FFD09495181408CBE83FD333EACEF29FBCDAD633.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 21 Dec 2025 20:17:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 21:c4:7c:e4:a3:3b:1a:a5:d4:ed:22:96:d7:64:1c:03:12:dc:36:8f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=FFD09495181408CBE83FD333EACEF29FBCDAD633 Validity Not Before: Dec 18 10:56:48 2025 GMT Not After : Dec 21 20:17:48 2025 GMT Subject: CN=F0EB585DAECD3C5AFD945F2E18C3E460BD2D8588 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:09:64:bf:18:15:8d:25:63:8b:40:8b:2a:e1: bd:12:68:f1:d2:fd:b8:8d:2a:7a:2d:a2:6d:f5:a5: bf:7a:15:ed:10:f2:6a:e7:74:37:37:13:4b:0c:96: 1c:da:8b:41:f4:4f:b1:75:4d:f1:3b:94:97:f7:55: e0:f1:f3:a4:70:5b:7e:b3:86:10:b2:1c:ce:f1:ca: e6:b2:6c:a2:4b:74:b6:4c:f3:b5:f9:62:38:2e:42: d0:76:1b:ab:16:00:0f:f6:d5:64:3c:ea:e6:98:09: 70:08:41:67:96:17:0d:74:46:ab:80:cc:79:32:31: b1:40:f6:25:bd:f8:47:1e:04:5c:78:8b:1d:fe:4f: 08:4b:a5:79:9a:16:a2:40:47:57:18:70:5b:0d:b4: 74:2e:51:a3:df:18:11:69:4d:0c:dc:9c:3a:35:a5: 21:e6:fa:a7:8a:90:7e:44:19:b5:41:c0:23:43:dc: 81:58:d2:46:73:5c:69:64:55:d4:cd:5a:18:4e:1d: c0:17:5f:f3:7a:04:47:fe:ed:9c:3f:65:7f:8f:a3: 8a:01:4d:da:3f:96:25:4f:d1:b9:22:46:67:4c:25: a2:4c:1e:c8:ac:61:52:0d:21:df:d0:3b:f4:7e:2e: b6:73:0b:65:6d:36:3e:33:0d:9a:62:f3:6d:51:f1: 10:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F0:EB:58:5D:AE:CD:3C:5A:FD:94:5F:2E:18:C3:E4:60:BD:2D:85:88 X509v3 Authority Key Identifier: keyid:FF:D0:94:95:18:14:08:CB:E8:3F:D3:33:EA:CE:F2:9F:BC:DA:D6:33 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/e139ac1f-38e2-45aa-97dc-992796411cc1/0/FFD09495181408CBE83FD333EACEF29FBCDAD633.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FFD09495181408CBE83FD333EACEF29FBCDAD633.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e139ac1f-38e2-45aa-97dc-992796411cc1/0/FFD09495181408CBE83FD333EACEF29FBCDAD633.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0a:f3:01:9b:fa:eb:79:90:bc:c5:40:d1:d9:a1:9f:6b:91:68: 53:df:b9:08:19:83:95:89:4c:0b:a1:9e:a4:49:b9:35:32:f7: aa:da:90:f4:95:e3:df:d7:55:e4:3b:2e:2e:29:c5:7a:14:0b: 1e:a8:4e:5d:f2:1f:4a:fa:29:ba:46:0f:2a:da:ea:04:d4:a7: 19:2a:c8:e8:78:93:99:86:ed:aa:cd:c1:dd:91:64:6e:2c:b5: b0:9e:29:f4:e3:5e:ed:3e:60:9b:16:ae:3d:83:70:91:38:53: 29:b6:ea:ba:18:21:93:2e:26:4c:b7:f1:d9:de:84:93:00:b8: 5c:69:cc:fd:26:c8:f7:b2:d5:9c:64:cb:42:45:3b:74:fc:2d: b3:7a:ae:e5:df:b7:1c:b0:12:c6:28:fc:50:cf:fb:a5:12:fd: 0f:3d:1d:eb:a8:a9:88:60:10:b0:7b:ee:28:63:08:29:54:8f: 7f:66:89:11:87:0a:a6:1b:dc:0c:28:d0:4c:4b:e3:c0:e2:62: 35:72:9d:f1:65:06:42:c9:4a:ff:50:ba:65:f9:7e:1e:88:bd: 48:e1:5b:c0:76:bc:6e:16:eb:91:10:87:b6:39:1a:ec:26:1e: e5:f4:bb:e1:5a:de:0f:63:d6:27:f9:d4:f2:02:94:5e:c4:91: 71:7f:16:18 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUIcR85KM7GqXU7SKW12QcAxLcNo8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRkZEMDk0OTUxODE0MDhDQkU4M0ZEMzMzRUFDRUYyOUZC Q0RBRDYzMzAeFw0yNTEyMTgxMDU2NDhaFw0yNTEyMjEyMDE3NDhaMDMxMTAvBgNV BAMTKEYwRUI1ODVEQUVDRDNDNUFGRDk0NUYyRTE4QzNFNDYwQkQyRDg1ODgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC0CWS/GBWNJWOLQIsq4b0SaPHS /biNKnotom31pb96Fe0Q8mrndDc3E0sMlhzai0H0T7F1TfE7lJf3VeDx86RwW36z hhCyHM7xyuaybKJLdLZM87X5YjguQtB2G6sWAA/21WQ86uaYCXAIQWeWFw10RquA zHkyMbFA9iW9+EceBFx4ix3+TwhLpXmaFqJAR1cYcFsNtHQuUaPfGBFpTQzcnDo1 pSHm+qeKkH5EGbVBwCND3IFY0kZzXGlkVdTNWhhOHcAXX/N6BEf+7Zw/ZX+Po4oB Tdo/liVP0bkiRmdMJaJMHsisYVINId/QO/R+LrZzC2VtNj4zDZpi821R8RDlAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU8OtYXa7NPFr9lF8uGMPkYL0thYgwHwYDVR0j BBgwFoAU/9CUlRgUCMvoP9Mz6s7yn7za1jMwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l MTM5YWMxZi0zOGUyLTQ1YWEtOTdkYy05OTI3OTY0MTFjYzEvMC9GRkQwOTQ5NTE4 MTQwOENCRTgzRkQzMzNFQUNFRjI5RkJDREFENjMzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRkZEMDk0OTUxODE0MDhDQkU4M0ZEMzMzRUFDRUYyOUZCQ0RB RDYzMy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZTEzOWFjMWYtMzhlMi00NWFhLTk3 ZGMtOTkyNzk2NDExY2MxLzAvRkZEMDk0OTUxODE0MDhDQkU4M0ZEMzMzRUFDRUYy OUZCQ0RBRDYzMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAArzAZv663mQvMVA0dmhn2uRaFPfuQgZg5WJ TAuhnqRJuTUy96rakPSV49/XVeQ7Li4pxXoUCx6oTl3yH0r6KbpGDyra6gTUpxkq yOh4k5mG7arNwd2RZG4stbCeKfTjXu0+YJsWrj2DcJE4Uym26roYIZMuJky38dne hJMAuFxpzP0myPey1Zxky0JFO3T8LbN6ruXftxywEsYo/FDP+6US/Q89HeuoqYhg ELB77ihjCClUj39miRGHCqYb3Awo0ExL48DiYjVynfFlBkLJSv9QumX5fh6IvUjh W8B2vG4W65EQh7Y5GuwmHuX0u+Fa3g9j1if51PIClF7EkXF/Fhg= -----END CERTIFICATE-----Generated at Fri Dec 19 10:50:20 2025 by rpki-client