This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/e8a9237a-726c-4c19-9b4e-7b94b1424c4b/0/FF947BE188D359EA7EDF887D86DA2C7CC7460B70.mft File: FF947BE188D359EA7EDF887D86DA2C7CC7460B70.mft (raw, json) Hash identifier: R9vMLfDWX2JuHGCLkw1NkUiV/gBLSFIQmzkSKjcUA/U= Subject key identifier: 7C:3F:11:92:DF:87:7E:5B:AF:6F:50:6B:38:C2:B5:D7:8F:B0:6D:14 Authority key identifier: FF:94:7B:E1:88:D3:59:EA:7E:DF:88:7D:86:DA:2C:7C:C7:46:0B:70 Certificate issuer: /CN=FF947BE188D359EA7EDF887D86DA2C7CC7460B70 Certificate serial: 56D825E18E7E409DC639CD1FB81C139E45BEFFF8 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FF947BE188D359EA7EDF887D86DA2C7CC7460B70.cer Subject info access: rsync://repo-rpki.idnic.net/repo/e8a9237a-726c-4c19-9b4e-7b94b1424c4b/0/FF947BE188D359EA7EDF887D86DA2C7CC7460B70.mft Manifest number: 0265 Signing time: Wed 17 Dec 2025 14:12:09 +0000 Manifest this update: Wed 17 Dec 2025 14:07:09 +0000 Manifest next update: Sat 20 Dec 2025 20:14:09 +0000 Files and hashes: 1: 3130332e3136322e3134312e302f32342d3234203d3e20313431303833.roa (hash: aO6ag29zhhjNXBpY8yr771GUZ2dWF2vzBvbIftVbJOY=) 2: FF947BE188D359EA7EDF887D86DA2C7CC7460B70.crl (hash: 9yph/FCP4a0L7KxPHmi9SRwcvtpkHODaJDUreexjnNk=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/e8a9237a-726c-4c19-9b4e-7b94b1424c4b/0/FF947BE188D359EA7EDF887D86DA2C7CC7460B70.crl rsync://repo-rpki.idnic.net/repo/e8a9237a-726c-4c19-9b4e-7b94b1424c4b/0/FF947BE188D359EA7EDF887D86DA2C7CC7460B70.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FF947BE188D359EA7EDF887D86DA2C7CC7460B70.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 20 Dec 2025 20:14:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 56:d8:25:e1:8e:7e:40:9d:c6:39:cd:1f:b8:1c:13:9e:45:be:ff:f8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=FF947BE188D359EA7EDF887D86DA2C7CC7460B70 Validity Not Before: Dec 17 14:07:09 2025 GMT Not After : Dec 20 20:14:09 2025 GMT Subject: CN=7C3F1192DF877E5BAF6F506B38C2B5D78FB06D14 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:80:50:38:ba:50:61:ca:4b:a0:69:2a:7b:2d: aa:44:6a:9c:71:1d:dd:28:1f:ac:da:4b:b1:3d:a8: 57:45:aa:f4:f8:2b:b3:75:10:0c:e3:e9:a2:4c:4c: e5:65:72:ae:ab:01:01:2b:36:e3:81:36:81:72:92: 66:7f:9c:4b:b6:2a:70:ec:83:33:66:20:5e:a3:71: 9d:02:e2:d2:f6:6e:3d:f3:d3:0b:25:f2:6a:ae:06: 11:86:4c:33:9a:c3:1c:c4:52:9c:f6:00:e8:91:6c: e2:4f:e7:5b:f0:ff:c2:e1:99:1c:4a:03:51:05:09: 54:40:f7:34:99:40:f4:42:57:52:d0:83:6c:7a:70: 6a:df:c7:8d:67:43:65:ca:b1:02:2c:40:98:81:fc: ac:75:05:e1:cc:ec:9e:ec:9c:5c:10:ae:93:2a:c9: 86:bf:5f:67:3d:82:7e:87:90:f1:c0:0e:51:10:b7: fa:94:3f:50:7e:6f:e6:80:1d:44:7a:b7:d9:4d:d0: 9e:6b:f1:ff:ec:32:92:6f:63:57:86:50:c0:da:dc: 55:a5:53:f0:36:36:e0:75:c4:1f:39:77:34:a8:e1: 6b:24:04:69:71:54:5f:9c:17:3c:31:97:dd:d2:a1: 8a:e8:e0:0f:5b:b5:47:90:97:39:60:52:fb:e8:be: 2e:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7C:3F:11:92:DF:87:7E:5B:AF:6F:50:6B:38:C2:B5:D7:8F:B0:6D:14 X509v3 Authority Key Identifier: keyid:FF:94:7B:E1:88:D3:59:EA:7E:DF:88:7D:86:DA:2C:7C:C7:46:0B:70 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/e8a9237a-726c-4c19-9b4e-7b94b1424c4b/0/FF947BE188D359EA7EDF887D86DA2C7CC7460B70.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FF947BE188D359EA7EDF887D86DA2C7CC7460B70.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e8a9237a-726c-4c19-9b4e-7b94b1424c4b/0/FF947BE188D359EA7EDF887D86DA2C7CC7460B70.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 92:74:81:a4:72:27:97:01:4e:ee:59:29:a5:78:3a:38:4d:49: 7f:3e:bb:70:df:67:ad:4b:d6:bf:d1:85:93:7e:d7:46:df:ca: 46:5b:cf:03:1e:bf:91:20:b1:0d:30:d3:ed:30:26:4e:96:94: f0:b5:5c:7a:13:32:18:50:74:9c:e1:ed:a8:f8:ed:bc:1f:dc: 17:80:b3:c7:c6:ab:8d:3c:6e:32:d9:2c:72:d3:b2:c5:b3:bd: ee:73:4c:55:72:7c:c6:d5:bc:69:ec:b4:90:39:94:da:fe:d9: 82:bb:fa:8e:57:ce:fe:80:92:7d:5b:ea:b8:aa:77:8d:2d:0e: 05:bc:86:f6:18:a9:2d:94:c2:87:13:c0:6d:cb:75:fb:74:db: 6d:18:73:90:5f:c4:22:bc:bb:b5:3c:13:17:48:4f:e1:12:7f: 40:1d:5c:d7:d9:40:93:52:79:30:a9:02:fa:3c:6f:ee:b3:cf: f4:eb:36:1f:89:f4:84:fa:25:9c:be:b2:f9:28:51:1c:ad:a4: 5e:e7:1a:e4:69:8f:16:9f:df:d2:f7:23:e7:53:b5:1d:82:cf: 3e:82:3f:6f:91:07:83:30:25:1a:9f:11:b8:1d:5e:62:d9:35: e2:c8:df:f8:f9:b2:21:48:2e:69:e1:34:be:7d:9d:82:67:46: 38:5f:13:86 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUVtgl4Y5+QJ3GOc0fuBwTnkW+//gwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRkY5NDdCRTE4OEQzNTlFQTdFREY4ODdEODZEQTJDN0ND NzQ2MEI3MDAeFw0yNTEyMTcxNDA3MDlaFw0yNTEyMjAyMDE0MDlaMDMxMTAvBgNV BAMTKDdDM0YxMTkyREY4NzdFNUJBRjZGNTA2QjM4QzJCNUQ3OEZCMDZEMTQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDagFA4ulBhykugaSp7LapEapxx Hd0oH6zaS7E9qFdFqvT4K7N1EAzj6aJMTOVlcq6rAQErNuOBNoFykmZ/nEu2KnDs gzNmIF6jcZ0C4tL2bj3z0wsl8mquBhGGTDOawxzEUpz2AOiRbOJP51vw/8LhmRxK A1EFCVRA9zSZQPRCV1LQg2x6cGrfx41nQ2XKsQIsQJiB/Kx1BeHM7J7snFwQrpMq yYa/X2c9gn6HkPHADlEQt/qUP1B+b+aAHUR6t9lN0J5r8f/sMpJvY1eGUMDa3FWl U/A2NuB1xB85dzSo4WskBGlxVF+cFzwxl93SoYro4A9btUeQlzlgUvvovi5PAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUfD8Rkt+Hfluvb1BrOMK114+wbRQwHwYDVR0j BBgwFoAU/5R74YjTWep+34h9htosfMdGC3AwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l OGE5MjM3YS03MjZjLTRjMTktOWI0ZS03Yjk0YjE0MjRjNGIvMC9GRjk0N0JFMTg4 RDM1OUVBN0VERjg4N0Q4NkRBMkM3Q0M3NDYwQjcwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRkY5NDdCRTE4OEQzNTlFQTdFREY4ODdEODZEQTJDN0NDNzQ2 MEI3MC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZThhOTIzN2EtNzI2Yy00YzE5LTli NGUtN2I5NGIxNDI0YzRiLzAvRkY5NDdCRTE4OEQzNTlFQTdFREY4ODdEODZEQTJD N0NDNzQ2MEI3MC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJJ0gaRyJ5cBTu5ZKaV4OjhNSX8+u3DfZ61L 1r/RhZN+10bfykZbzwMev5EgsQ0w0+0wJk6WlPC1XHoTMhhQdJzh7aj47bwf3BeA s8fGq408bjLZLHLTssWzve5zTFVyfMbVvGnstJA5lNr+2YK7+o5Xzv6Akn1b6riq d40tDgW8hvYYqS2UwocTwG3Ldft0220Yc5BfxCK8u7U8ExdIT+ESf0AdXNfZQJNS eTCpAvo8b+6zz/TrNh+J9IT6JZy+svkoURytpF7nGuRpjxaf39L3I+dTtR2Czz6C P2+RB4MwJRqfEbgdXmLZNeLI3/j5siFILmnhNL59nYJnRjhfE4Y= -----END CERTIFICATE-----Generated at Fri Dec 19 11:16:55 2025 by rpki-client