This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/fbe15e6f-0689-4713-b0fc-943062ac592e/0/1FF652DE540015052EA06BCE3644C9C1C9B83B32.mft File: 1FF652DE540015052EA06BCE3644C9C1C9B83B32.mft (raw, json) Hash identifier: BvvNdfK1n6pQ+Leo9d8wYXKz3Crqq982y8nun+OImss= Subject key identifier: F3:E0:4E:28:51:1C:B6:E6:DE:9E:5D:3E:98:E6:83:5E:49:FA:29:F3 Authority key identifier: 1F:F6:52:DE:54:00:15:05:2E:A0:6B:CE:36:44:C9:C1:C9:B8:3B:32 Certificate issuer: /CN=1FF652DE540015052EA06BCE3644C9C1C9B83B32 Certificate serial: 36633810DBA6AED1C6B47277FB21C224CD400764 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1FF652DE540015052EA06BCE3644C9C1C9B83B32.cer Subject info access: rsync://repo-rpki.idnic.net/repo/fbe15e6f-0689-4713-b0fc-943062ac592e/0/1FF652DE540015052EA06BCE3644C9C1C9B83B32.mft Manifest number: 022F Signing time: Wed 17 Dec 2025 12:22:04 +0000 Manifest this update: Wed 17 Dec 2025 12:17:04 +0000 Manifest next update: Sat 20 Dec 2025 23:23:04 +0000 Files and hashes: 1: 3130332e3137342e3137362e302f32332d3234203d3e203338333230.roa (hash: BAcGuMLsPgJV3u2WPi981toHkg4Nsmz+4IDaHY/xX1M=) 2: 1FF652DE540015052EA06BCE3644C9C1C9B83B32.crl (hash: qm/Lf9AbZBkAXzZbsaJDyOypxxSmwWQg/ek+YpxfV8s=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/fbe15e6f-0689-4713-b0fc-943062ac592e/0/1FF652DE540015052EA06BCE3644C9C1C9B83B32.crl rsync://repo-rpki.idnic.net/repo/fbe15e6f-0689-4713-b0fc-943062ac592e/0/1FF652DE540015052EA06BCE3644C9C1C9B83B32.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1FF652DE540015052EA06BCE3644C9C1C9B83B32.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 20 Dec 2025 23:23:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 36:63:38:10:db:a6:ae:d1:c6:b4:72:77:fb:21:c2:24:cd:40:07:64 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1FF652DE540015052EA06BCE3644C9C1C9B83B32 Validity Not Before: Dec 17 12:17:04 2025 GMT Not After : Dec 20 23:23:04 2025 GMT Subject: CN=F3E04E28511CB6E6DE9E5D3E98E6835E49FA29F3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:ef:fa:9c:18:79:c2:b4:93:8f:4c:5a:d3:23: 93:ea:f6:c1:00:77:59:d0:f1:77:52:95:fa:d9:c0: fd:2c:a8:15:69:80:ed:63:57:3a:dd:76:d3:70:c6: 56:1c:01:fd:c4:83:19:40:37:e2:01:cc:58:2d:cf: 15:38:37:48:5d:b4:7f:82:9a:96:2e:85:3e:43:2b: 4f:e9:81:3f:75:d5:97:04:bf:36:71:4b:78:a7:a3: 96:e7:9e:39:90:83:d5:4d:0e:c9:66:6e:6c:e7:e5: 88:63:b7:37:f6:d3:84:86:f1:d9:98:a3:39:91:a0: 8f:7f:5f:09:72:9f:a2:0c:15:ae:7a:d0:c2:a0:78: 3c:4a:57:cc:ef:13:53:88:aa:da:c2:7e:c7:f9:c6: fc:7d:9a:bc:51:29:b3:74:40:3d:5a:88:61:18:32: 6c:78:86:a0:f9:70:05:8c:40:10:52:13:6c:66:86: db:58:77:eb:63:e4:04:d8:c2:be:74:da:ae:c5:92: b0:58:e0:ed:04:81:a0:ad:ca:2a:e3:7c:d5:e8:17: 08:33:3c:6c:3f:71:47:34:52:bb:bb:d0:dd:15:99: df:e3:30:17:08:c5:38:bd:74:e0:f3:e6:28:00:9d: 3b:6f:99:bc:c2:ef:4f:f5:2d:42:25:a9:24:65:fb: 9f:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F3:E0:4E:28:51:1C:B6:E6:DE:9E:5D:3E:98:E6:83:5E:49:FA:29:F3 X509v3 Authority Key Identifier: keyid:1F:F6:52:DE:54:00:15:05:2E:A0:6B:CE:36:44:C9:C1:C9:B8:3B:32 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/fbe15e6f-0689-4713-b0fc-943062ac592e/0/1FF652DE540015052EA06BCE3644C9C1C9B83B32.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1FF652DE540015052EA06BCE3644C9C1C9B83B32.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/fbe15e6f-0689-4713-b0fc-943062ac592e/0/1FF652DE540015052EA06BCE3644C9C1C9B83B32.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5e:38:d5:d8:9b:dc:51:d6:b0:4f:d3:a8:88:55:5e:08:04:e8: c3:8e:8d:4b:f2:62:e0:d2:f3:9d:d6:97:cc:7b:02:c6:99:ea: 20:54:df:4a:0f:98:72:a0:27:74:46:bf:24:14:b6:89:3b:6e: 0c:e5:ea:79:98:7a:2c:68:b1:87:e0:51:61:20:59:1c:86:e5: c2:29:f5:99:a6:74:74:96:eb:6a:18:3f:7b:f4:f5:51:53:84: b6:02:1f:39:06:bd:b6:f9:ea:2b:ef:bf:8c:ad:1f:02:53:86: fe:dd:76:21:65:e0:06:f4:21:91:18:a6:d1:04:7a:b4:7e:4c: c0:a5:26:81:54:68:86:5c:84:16:f5:bb:bd:2b:6c:3b:8d:08: e3:d4:87:09:db:12:b7:8d:35:8a:fc:66:dd:a5:18:c0:4f:c2: 0f:bb:25:5b:95:57:60:e0:27:06:6a:ba:f1:7c:a4:a8:a3:75: b9:c0:cd:f4:26:39:5c:1d:aa:48:90:3b:69:39:f3:8f:fe:ac: 98:e1:ae:12:7d:ab:09:9f:b2:d2:b1:37:a3:37:79:dc:20:c9: 45:13:ef:66:21:9c:13:48:3d:38:8b:b7:bf:11:63:61:7e:09: ae:41:01:87:9d:d3:02:e6:32:84:1d:a6:54:73:44:bd:21:e4: 35:b0:11:8b -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUNmM4ENumrtHGtHJ3+yHCJM1AB2QwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUZGNjUyREU1NDAwMTUwNTJFQTA2QkNFMzY0NEM5QzFD OUI4M0IzMjAeFw0yNTEyMTcxMjE3MDRaFw0yNTEyMjAyMzIzMDRaMDMxMTAvBgNV BAMTKEYzRTA0RTI4NTExQ0I2RTZERTlFNUQzRTk4RTY4MzVFNDlGQTI5RjMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDC7/qcGHnCtJOPTFrTI5Pq9sEA d1nQ8XdSlfrZwP0sqBVpgO1jVzrddtNwxlYcAf3EgxlAN+IBzFgtzxU4N0hdtH+C mpYuhT5DK0/pgT911ZcEvzZxS3ino5bnnjmQg9VNDslmbmzn5Yhjtzf204SG8dmY ozmRoI9/Xwlyn6IMFa560MKgeDxKV8zvE1OIqtrCfsf5xvx9mrxRKbN0QD1aiGEY Mmx4hqD5cAWMQBBSE2xmhttYd+tj5ATYwr502q7FkrBY4O0EgaCtyirjfNXoFwgz PGw/cUc0Uru70N0Vmd/jMBcIxTi9dODz5igAnTtvmbzC70/1LUIlqSRl+5/DAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU8+BOKFEctubenl0+mOaDXkn6KfMwHwYDVR0j BBgwFoAUH/ZS3lQAFQUuoGvONkTJwcm4OzIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m YmUxNWU2Zi0wNjg5LTQ3MTMtYjBmYy05NDMwNjJhYzU5MmUvMC8xRkY2NTJERTU0 MDAxNTA1MkVBMDZCQ0UzNjQ0QzlDMUM5QjgzQjMyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMUZGNjUyREU1NDAwMTUwNTJFQTA2QkNFMzY0NEM5QzFDOUI4 M0IzMi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZmJlMTVlNmYtMDY4OS00NzEzLWIw ZmMtOTQzMDYyYWM1OTJlLzAvMUZGNjUyREU1NDAwMTUwNTJFQTA2QkNFMzY0NEM5 QzFDOUI4M0IzMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAF441dib3FHWsE/TqIhVXggE6MOOjUvyYuDS 853Wl8x7AsaZ6iBU30oPmHKgJ3RGvyQUtok7bgzl6nmYeixosYfgUWEgWRyG5cIp 9ZmmdHSW62oYP3v09VFThLYCHzkGvbb56ivvv4ytHwJThv7ddiFl4Ab0IZEYptEE erR+TMClJoFUaIZchBb1u70rbDuNCOPUhwnbEreNNYr8Zt2lGMBPwg+7JVuVV2Dg JwZquvF8pKijdbnAzfQmOVwdqkiQO2k584/+rJjhrhJ9qwmfstKxN6M3edwgyUUT 72YhnBNIPTiLt78RY2F+Ca5BAYed0wLmMoQdplRzRL0h5DWwEYs= -----END CERTIFICATE-----Generated at Sat Dec 20 19:51:54 2025 by rpki-client