This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/0461d7a7-a11e-400b-9170-c797ed88d702/0/FED855DD505D24B6FE25BD8656297329F7EF4785.mft File: FED855DD505D24B6FE25BD8656297329F7EF4785.mft (raw, json) Hash identifier: tT4yFVKy5xZo878gION463ZNRcAO6WsUcBsqmwmHVxc= Subject key identifier: 09:3E:F1:4D:ED:E1:0C:73:F6:3D:18:FE:3C:58:72:67:F6:C3:B0:01 Authority key identifier: FE:D8:55:DD:50:5D:24:B6:FE:25:BD:86:56:29:73:29:F7:EF:47:85 Certificate issuer: /CN=FED855DD505D24B6FE25BD8656297329F7EF4785 Certificate serial: 2ACFA89533B9321378138D5377508E1A82F0FED6 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FED855DD505D24B6FE25BD8656297329F7EF4785.cer Subject info access: rsync://repo-rpki.idnic.net/repo/0461d7a7-a11e-400b-9170-c797ed88d702/0/FED855DD505D24B6FE25BD8656297329F7EF4785.mft Manifest number: 04A8 Signing time: Sat 06 Dec 2025 19:51:29 +0000 Manifest this update: Sat 06 Dec 2025 19:46:29 +0000 Manifest next update: Wed 10 Dec 2025 02:45:29 +0000 Files and hashes: 1: FED855DD505D24B6FE25BD8656297329F7EF4785.crl (hash: 8Ep3tisaOAFEjslliCw9N87XlwFAhZPTQ9Vvfx/b3yU=) 2: 3130332e3130352e3132392e302f32342d3234203d3e203137373237.roa (hash: hPyIxp0hj3k+joStahsmifFKwjq2yL5rkOsyq1Wlc34=) 3: 3130332e3130352e3132382e302f32342d3234203d3e203137373237.roa (hash: X2PEKknjtTcnLsrGiadMk08xxZNciTvdVjNrgOP4sHk=) 4: 3130332e3130352e3133312e302f32342d3234203d3e203137373237.roa (hash: MeNQV5B+OerhDUDBOkfR5BHmeZ2GFCk+XtpnzmEeM9I=) 5: 3130332e3130352e3133302e302f32342d3234203d3e203137373237.roa (hash: yMrj8AoB/ixjd6PVgwO256Xjq06xuds8sgMBoLkTbyM=) 6: 3130332e3130352e3132382e302f32322d3232203d3e203137373237.roa (hash: IhDRQtUCQIm4IOPr5vP9tEfWgB4QjIXQlUOAr7HBNq4=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/0461d7a7-a11e-400b-9170-c797ed88d702/0/FED855DD505D24B6FE25BD8656297329F7EF4785.crl rsync://repo-rpki.idnic.net/repo/0461d7a7-a11e-400b-9170-c797ed88d702/0/FED855DD505D24B6FE25BD8656297329F7EF4785.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FED855DD505D24B6FE25BD8656297329F7EF4785.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 09 Dec 2025 15:57:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2a:cf:a8:95:33:b9:32:13:78:13:8d:53:77:50:8e:1a:82:f0:fe:d6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=FED855DD505D24B6FE25BD8656297329F7EF4785 Validity Not Before: Dec 6 19:46:29 2025 GMT Not After : Dec 10 02:45:29 2025 GMT Subject: CN=093EF14DEDE10C73F63D18FE3C587267F6C3B001 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:06:c9:c4:b1:81:2f:5a:02:2c:9f:d7:06:63: df:07:18:a8:1c:82:1d:73:3f:70:76:d2:fc:30:58: 03:01:00:bc:4f:6e:2f:25:d3:76:57:1b:09:e8:bd: ee:99:80:b0:bc:81:c7:58:d8:d4:23:36:b2:e9:a4: 04:05:62:12:bc:1d:89:39:93:b4:c8:ef:09:13:27: 79:68:86:67:19:99:f2:e5:29:b2:2f:11:b6:79:a5: 92:be:4b:e1:0a:d0:c8:7d:e4:bb:e4:53:b9:65:6c: 01:3e:fa:3d:9b:fe:72:34:ba:ed:73:5c:ad:16:23: f8:ab:40:5e:8b:44:16:54:0b:cb:bd:66:6e:35:59: e2:46:02:a3:88:19:9b:4d:97:63:39:8d:a3:29:2e: c1:5b:82:38:5b:d8:e0:6e:f2:47:25:21:f7:06:c4: 18:6a:14:e9:ff:64:41:9a:e0:6c:b6:04:76:15:2c: e8:e0:ac:aa:1a:a5:9a:40:2a:ca:7b:32:8a:2f:92: 77:1d:e9:eb:84:ec:79:8b:ae:b0:6a:7a:86:dc:2e: a0:fc:1a:79:21:54:ca:41:1a:8d:c6:c0:99:24:09: f0:e0:29:c4:6f:79:c0:a1:b9:2a:ea:cd:c8:c3:7f: d4:12:6b:dd:94:0b:af:49:56:2d:ea:21:32:12:dc: ec:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:3E:F1:4D:ED:E1:0C:73:F6:3D:18:FE:3C:58:72:67:F6:C3:B0:01 X509v3 Authority Key Identifier: keyid:FE:D8:55:DD:50:5D:24:B6:FE:25:BD:86:56:29:73:29:F7:EF:47:85 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/0461d7a7-a11e-400b-9170-c797ed88d702/0/FED855DD505D24B6FE25BD8656297329F7EF4785.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FED855DD505D24B6FE25BD8656297329F7EF4785.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/0461d7a7-a11e-400b-9170-c797ed88d702/0/FED855DD505D24B6FE25BD8656297329F7EF4785.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption cc:62:a2:42:1c:d4:38:e7:71:a3:84:ea:f8:17:44:e0:3e:aa: e6:34:7f:a0:76:2e:95:53:0d:b3:4f:cc:0a:07:3c:eb:45:62: c6:c3:79:7f:ea:b0:cb:71:f2:58:e4:e7:70:5e:ea:6c:98:a2: ea:38:21:26:e0:96:88:28:a5:d0:53:9b:9b:86:ef:25:65:6e: 92:97:df:5a:9e:60:cc:ed:7d:cf:87:7e:44:f1:25:e0:61:f3: 15:ea:fa:65:d7:28:62:dd:21:3e:cc:4f:9a:27:9f:ae:d8:e3: 9a:cd:42:98:69:7d:f4:25:b1:ac:7d:76:a2:4e:2c:28:bf:f0: 97:6c:62:2b:11:d3:8e:d1:01:b0:8c:99:11:42:a1:ab:4c:9f: a2:f6:da:82:b1:2a:cb:9e:94:43:88:b5:4a:80:3a:85:9d:c9: a6:d1:29:05:bc:5f:77:96:b6:14:6a:71:9a:3e:33:f9:ca:da: a5:84:fe:f8:40:53:5b:e2:a6:87:d3:68:b4:ce:67:9b:b0:6b: 7f:0c:f3:84:ff:d4:38:30:f8:28:ea:77:f4:f8:3d:6a:84:d0: d3:7c:ef:70:78:06:53:3b:23:55:2c:54:38:6c:49:9e:1e:28: 06:67:10:23:c3:6b:90:77:49:d5:fe:d4:91:ed:03:72:fc:ee: ff:ad:12:27 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUKs+olTO5MhN4E41Td1COGoLw/tYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRkVEODU1REQ1MDVEMjRCNkZFMjVCRDg2NTYyOTczMjlG N0VGNDc4NTAeFw0yNTEyMDYxOTQ2MjlaFw0yNTEyMTAwMjQ1MjlaMDMxMTAvBgNV BAMTKDA5M0VGMTRERURFMTBDNzNGNjNEMThGRTNDNTg3MjY3RjZDM0IwMDEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDnBsnEsYEvWgIsn9cGY98HGKgc gh1zP3B20vwwWAMBALxPbi8l03ZXGwnove6ZgLC8gcdY2NQjNrLppAQFYhK8HYk5 k7TI7wkTJ3lohmcZmfLlKbIvEbZ5pZK+S+EK0Mh95LvkU7llbAE++j2b/nI0uu1z XK0WI/irQF6LRBZUC8u9Zm41WeJGAqOIGZtNl2M5jaMpLsFbgjhb2OBu8kclIfcG xBhqFOn/ZEGa4Gy2BHYVLOjgrKoapZpAKsp7Moovkncd6euE7HmLrrBqeobcLqD8 GnkhVMpBGo3GwJkkCfDgKcRvecChuSrqzcjDf9QSa92UC69JVi3qITIS3Ow5AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUCT7xTe3hDHP2PRj+PFhyZ/bDsAEwHwYDVR0j BBgwFoAU/thV3VBdJLb+Jb2GVilzKffvR4UwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w NDYxZDdhNy1hMTFlLTQwMGItOTE3MC1jNzk3ZWQ4OGQ3MDIvMC9GRUQ4NTVERDUw NUQyNEI2RkUyNUJEODY1NjI5NzMyOUY3RUY0Nzg1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRkVEODU1REQ1MDVEMjRCNkZFMjVCRDg2NTYyOTczMjlGN0VG NDc4NS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMDQ2MWQ3YTctYTExZS00MDBiLTkx NzAtYzc5N2VkODhkNzAyLzAvRkVEODU1REQ1MDVEMjRCNkZFMjVCRDg2NTYyOTcz MjlGN0VGNDc4NS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAMxiokIc1DjncaOE6vgXROA+quY0f6B2LpVT DbNPzAoHPOtFYsbDeX/qsMtx8ljk53Be6myYouo4ISbglogopdBTm5uG7yVlbpKX 31qeYMztfc+HfkTxJeBh8xXq+mXXKGLdIT7MT5onn67Y45rNQphpffQlsax9dqJO LCi/8JdsYisR047RAbCMmRFCoatMn6L22oKxKsuelEOItUqAOoWdyabRKQW8X3eW thRqcZo+M/nK2qWE/vhAU1vipofTaLTOZ5uwa38M84T/1Dgw+Cjqd/T4PWqE0NN8 73B4BlM7I1UsVDhsSZ4eKAZnECPDa5B3SdX+1JHtA3L87v+tEic= -----END CERTIFICATE-----Generated at Sun Dec 7 02:45:13 2025 by rpki-client