This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/fbe04038-a1b6-432c-854b-cc6e8cf32e06/0/FF77507E6D1F0E0B6EB0112E9CFBD1AF1C1F6DD4.mft File: FF77507E6D1F0E0B6EB0112E9CFBD1AF1C1F6DD4.mft (raw, json) Hash identifier: 5gIuDJOZu4QvJQwNLDW/36BWNoCjceX5v/yeG0QvC4M= Subject key identifier: D4:94:65:48:13:8C:23:74:1E:30:B2:4C:78:35:29:87:30:1F:31:29 Authority key identifier: FF:77:50:7E:6D:1F:0E:0B:6E:B0:11:2E:9C:FB:D1:AF:1C:1F:6D:D4 Certificate issuer: /CN=FF77507E6D1F0E0B6EB0112E9CFBD1AF1C1F6DD4 Certificate serial: 034E02FB393CD16AF1F04B7C0A800FADD71EFC2A Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FF77507E6D1F0E0B6EB0112E9CFBD1AF1C1F6DD4.cer Subject info access: rsync://repo-rpki.idnic.net/repo/fbe04038-a1b6-432c-854b-cc6e8cf32e06/0/FF77507E6D1F0E0B6EB0112E9CFBD1AF1C1F6DD4.mft Manifest number: 0238 Signing time: Tue 23 Dec 2025 08:03:02 +0000 Manifest this update: Tue 23 Dec 2025 07:58:02 +0000 Manifest next update: Fri 26 Dec 2025 17:54:02 +0000 Files and hashes: 1: FF77507E6D1F0E0B6EB0112E9CFBD1AF1C1F6DD4.crl (hash: AvtRPxKlHo9OpwKUxkYE6/T2htIJXUITQWYaMiy//Yg=) 2: 3130332e3137372e31352e302f32342d3234203d3e20313437313338.roa (hash: eF9NB+BjEkYpNET986L8/mFTnt6eJT0/RWpF2VpYMW8=) 3: 3130332e3137372e31342e302f32332d3233203d3e20313437313338.roa (hash: 5z8wRtouH3UZuHrJrJfhmhXWcm8bh9b9rb8I23FOiCg=) 4: 3130332e3137372e31342e302f32342d3234203d3e20313437313338.roa (hash: 2HLKDZ4NotrKv5eD+avvVTu9dBP+/6Ewaq5ipG+lyWE=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/fbe04038-a1b6-432c-854b-cc6e8cf32e06/0/FF77507E6D1F0E0B6EB0112E9CFBD1AF1C1F6DD4.crl rsync://repo-rpki.idnic.net/repo/fbe04038-a1b6-432c-854b-cc6e8cf32e06/0/FF77507E6D1F0E0B6EB0112E9CFBD1AF1C1F6DD4.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FF77507E6D1F0E0B6EB0112E9CFBD1AF1C1F6DD4.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 26 Dec 2025 17:54:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 03:4e:02:fb:39:3c:d1:6a:f1:f0:4b:7c:0a:80:0f:ad:d7:1e:fc:2a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=FF77507E6D1F0E0B6EB0112E9CFBD1AF1C1F6DD4 Validity Not Before: Dec 23 07:58:02 2025 GMT Not After : Dec 26 17:54:02 2025 GMT Subject: CN=D4946548138C23741E30B24C78352987301F3129 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:28:2e:5f:e9:06:e7:5f:20:1f:5b:f6:a3:e3: 90:12:df:77:fa:7e:37:0c:a2:c5:74:5f:0f:bd:ce: b9:d9:4d:91:0d:53:f7:74:7b:8f:db:5f:70:b5:0f: 85:5b:89:67:58:9a:60:d5:6b:bd:c5:14:0a:8f:e3: cc:37:07:bb:98:8e:92:bc:84:e0:f7:a8:83:2b:83: 6c:63:87:3b:d9:64:cf:ba:9a:f7:04:cc:ca:10:4d: aa:96:30:96:e7:d0:44:a8:3a:b5:d9:7f:b6:51:b3: e4:2b:2c:57:05:49:e2:b3:84:26:2e:2a:2a:b3:cb: c9:46:72:88:94:c8:a9:2a:dd:7e:4b:5a:ad:0e:87: c2:00:f4:4e:4d:17:ee:c9:4c:97:ad:8a:42:eb:8c: 58:a1:dd:56:97:8e:79:3d:ba:d6:c6:da:bd:ae:8e: 3d:4e:4c:e0:77:1c:e6:3c:fc:45:61:d3:23:e1:fe: 62:7e:24:11:81:04:1b:57:58:60:71:f4:52:0c:16: 3e:04:8d:2f:12:2a:40:7f:8f:7b:fd:5f:47:f6:f1: 88:39:c7:09:fc:91:11:b7:ee:91:15:4b:b9:d7:89: 4e:ac:bc:22:5c:c1:c1:fc:91:bc:b0:50:83:d0:37: ab:aa:a3:59:0c:26:5f:fd:2f:7a:4b:3d:aa:97:ee: 49:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:94:65:48:13:8C:23:74:1E:30:B2:4C:78:35:29:87:30:1F:31:29 X509v3 Authority Key Identifier: keyid:FF:77:50:7E:6D:1F:0E:0B:6E:B0:11:2E:9C:FB:D1:AF:1C:1F:6D:D4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/fbe04038-a1b6-432c-854b-cc6e8cf32e06/0/FF77507E6D1F0E0B6EB0112E9CFBD1AF1C1F6DD4.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FF77507E6D1F0E0B6EB0112E9CFBD1AF1C1F6DD4.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/fbe04038-a1b6-432c-854b-cc6e8cf32e06/0/FF77507E6D1F0E0B6EB0112E9CFBD1AF1C1F6DD4.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8c:0a:66:f4:5b:b0:60:96:14:0e:c6:36:e6:95:97:cf:c4:ab: 94:a2:ea:b4:92:68:64:78:85:2a:18:2b:14:dd:56:6a:3e:b9: 56:81:3d:9d:05:d3:29:6a:c1:39:a3:17:1e:fd:0b:53:2d:55: c1:70:d5:1a:d9:27:f2:f2:0f:b6:4d:b1:eb:a0:32:0a:ba:d3: 82:44:ee:1e:0d:6e:5a:df:4f:83:33:7c:d1:64:07:63:d3:35: 43:86:df:e4:49:dc:0c:49:ba:ff:a1:2f:54:38:3a:8e:15:05: 08:b3:de:db:07:cd:ea:41:d7:23:ea:48:c1:5e:3e:1f:c0:66: 34:5b:24:ba:36:03:aa:eb:17:4b:36:9d:d4:3a:4c:5e:a6:36: b4:ef:e0:93:f5:da:ce:d0:2a:09:73:06:6e:79:af:d0:53:31: b2:0f:3f:0e:83:1a:98:2d:6d:d7:63:d8:af:d7:76:b4:63:d1: 1a:95:0c:73:3d:d0:61:b6:af:37:c4:93:51:31:d2:d9:92:43: f1:8d:9b:99:11:dc:c2:59:ad:d2:62:aa:77:73:a5:f2:2d:7a: c6:0f:d3:4d:5d:b4:bc:41:26:02:da:4a:9a:dc:4c:96:c2:6c: 5f:86:61:1f:a4:c7:dc:68:44:ed:a6:97:37:07:3c:86:3a:32: 91:b5:c8:71 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUA04C+zk80Wrx8Et8CoAPrdce/CowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRkY3NzUwN0U2RDFGMEUwQjZFQjAxMTJFOUNGQkQxQUYx QzFGNkRENDAeFw0yNTEyMjMwNzU4MDJaFw0yNTEyMjYxNzU0MDJaMDMxMTAvBgNV BAMTKEQ0OTQ2NTQ4MTM4QzIzNzQxRTMwQjI0Qzc4MzUyOTg3MzAxRjMxMjkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDKKC5f6QbnXyAfW/aj45AS33f6 fjcMosV0Xw+9zrnZTZENU/d0e4/bX3C1D4VbiWdYmmDVa73FFAqP48w3B7uYjpK8 hOD3qIMrg2xjhzvZZM+6mvcEzMoQTaqWMJbn0ESoOrXZf7ZRs+QrLFcFSeKzhCYu Kiqzy8lGcoiUyKkq3X5LWq0Oh8IA9E5NF+7JTJetikLrjFih3VaXjnk9utbG2r2u jj1OTOB3HOY8/EVh0yPh/mJ+JBGBBBtXWGBx9FIMFj4EjS8SKkB/j3v9X0f28Yg5 xwn8kRG37pEVS7nXiU6svCJcwcH8kbywUIPQN6uqo1kMJl/9L3pLPaqX7knHAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU1JRlSBOMI3QeMLJMeDUphzAfMSkwHwYDVR0j BBgwFoAU/3dQfm0fDgtusBEunPvRrxwfbdQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m YmUwNDAzOC1hMWI2LTQzMmMtODU0Yi1jYzZlOGNmMzJlMDYvMC9GRjc3NTA3RTZE MUYwRTBCNkVCMDExMkU5Q0ZCRDFBRjFDMUY2REQ0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRkY3NzUwN0U2RDFGMEUwQjZFQjAxMTJFOUNGQkQxQUYxQzFG NkRENC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZmJlMDQwMzgtYTFiNi00MzJjLTg1 NGItY2M2ZThjZjMyZTA2LzAvRkY3NzUwN0U2RDFGMEUwQjZFQjAxMTJFOUNGQkQx QUYxQzFGNkRENC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIwKZvRbsGCWFA7GNuaVl8/Eq5Si6rSSaGR4 hSoYKxTdVmo+uVaBPZ0F0ylqwTmjFx79C1MtVcFw1RrZJ/LyD7ZNseugMgq604JE 7h4NblrfT4MzfNFkB2PTNUOG3+RJ3AxJuv+hL1Q4Oo4VBQiz3tsHzepB1yPqSMFe Ph/AZjRbJLo2A6rrF0s2ndQ6TF6mNrTv4JP12s7QKglzBm55r9BTMbIPPw6DGpgt bddj2K/XdrRj0RqVDHM90GG2rzfEk1Ex0tmSQ/GNm5kR3MJZrdJiqndzpfItesYP 001dtLxBJgLaSprcTJbCbF+GYR+kx9xoRO2mlzcHPIY6MpG1yHE= -----END CERTIFICATE-----Generated at Thu Dec 25 00:39:53 2025 by rpki-client