This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/0546183c-d9ef-4c33-be99-e84bedb10b68/0/FC4A38DAAF15E8284373FD82AE59B27383D4A68F.mft File: FC4A38DAAF15E8284373FD82AE59B27383D4A68F.mft (raw, json) Hash identifier: NlqDzijkfbx/JUofYJZSNxGXGQLCSLfBrZoIZXIuJo0= Subject key identifier: BD:8E:4F:E9:6A:2F:F7:10:6E:B4:15:BA:47:8D:E1:29:88:96:46:22 Authority key identifier: FC:4A:38:DA:AF:15:E8:28:43:73:FD:82:AE:59:B2:73:83:D4:A6:8F Certificate issuer: /CN=FC4A38DAAF15E8284373FD82AE59B27383D4A68F Certificate serial: 610DA506E3081EA9AF52DF9D0286DF856FA97723 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FC4A38DAAF15E8284373FD82AE59B27383D4A68F.cer Subject info access: rsync://repo-rpki.idnic.net/repo/0546183c-d9ef-4c33-be99-e84bedb10b68/0/FC4A38DAAF15E8284373FD82AE59B27383D4A68F.mft Manifest number: 052D Signing time: Sat 06 Dec 2025 08:41:21 +0000 Manifest this update: Sat 06 Dec 2025 08:36:21 +0000 Manifest next update: Tue 09 Dec 2025 10:23:21 +0000 Files and hashes: 1: 3130332e3133372e3134342e302f32332d3234203d3e20313338383439.roa (hash: UgrkGIb65avdk0c9bxD0Hl16cvFjKtiPVw8WTE1xwNs=) 2: FC4A38DAAF15E8284373FD82AE59B27383D4A68F.crl (hash: z4amq2Bt7W3HaLgDPEa7C3b3E2ze7mN/JcnR7Gygb2Q=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/0546183c-d9ef-4c33-be99-e84bedb10b68/0/FC4A38DAAF15E8284373FD82AE59B27383D4A68F.crl rsync://repo-rpki.idnic.net/repo/0546183c-d9ef-4c33-be99-e84bedb10b68/0/FC4A38DAAF15E8284373FD82AE59B27383D4A68F.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FC4A38DAAF15E8284373FD82AE59B27383D4A68F.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 09 Dec 2025 10:23:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 61:0d:a5:06:e3:08:1e:a9:af:52:df:9d:02:86:df:85:6f:a9:77:23 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=FC4A38DAAF15E8284373FD82AE59B27383D4A68F Validity Not Before: Dec 6 08:36:21 2025 GMT Not After : Dec 9 10:23:21 2025 GMT Subject: CN=BD8E4FE96A2FF7106EB415BA478DE12988964622 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:1e:36:21:2f:dd:66:eb:34:82:75:95:c4:bb: 8d:4c:a3:0a:10:11:be:20:1e:37:bb:4f:c2:ad:42: 7a:6d:d2:32:e3:bd:8a:7d:1e:a8:7a:ce:e0:4e:44: c7:5c:78:14:d4:d0:6b:15:1c:d0:ee:f6:41:d8:b2: 31:9e:0a:9e:59:ec:68:9c:0a:55:9e:ac:0b:19:7f: e6:62:0d:2b:37:0c:ba:13:39:fd:8d:8d:ed:d5:c1: cf:a7:dc:aa:11:74:7c:23:47:e6:71:93:f6:8f:9e: cb:f9:ce:9b:0b:33:b9:89:3c:e0:0d:eb:64:8d:4a: 87:9e:d0:86:bf:4e:f4:ec:dd:2a:e3:92:2a:81:81: 0a:59:ae:77:1b:b1:a2:2e:4e:9d:8c:0c:da:8f:5d: 2a:9a:4e:eb:8f:d1:46:e5:fc:3a:38:23:2a:0b:00: 1f:17:dd:e4:92:41:aa:46:65:c3:35:c0:98:4e:65: 87:b8:ca:e3:d1:a3:57:81:3a:c9:48:89:38:8f:2e: 16:cc:e3:9b:bf:80:c5:da:d0:fa:f8:fb:09:f6:80: 97:a7:6b:6a:7d:46:3c:07:ed:76:a2:43:1e:fa:87: be:34:e1:df:a4:a9:fa:1a:14:b8:25:7f:6a:e2:38: 01:d1:dd:a8:18:91:df:59:ad:38:a2:58:24:f5:02: bf:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:8E:4F:E9:6A:2F:F7:10:6E:B4:15:BA:47:8D:E1:29:88:96:46:22 X509v3 Authority Key Identifier: keyid:FC:4A:38:DA:AF:15:E8:28:43:73:FD:82:AE:59:B2:73:83:D4:A6:8F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/0546183c-d9ef-4c33-be99-e84bedb10b68/0/FC4A38DAAF15E8284373FD82AE59B27383D4A68F.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FC4A38DAAF15E8284373FD82AE59B27383D4A68F.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/0546183c-d9ef-4c33-be99-e84bedb10b68/0/FC4A38DAAF15E8284373FD82AE59B27383D4A68F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 39:ee:13:61:d2:af:34:87:7a:1f:e1:30:91:17:4c:14:64:be: 4e:66:25:74:9d:0d:b4:9b:0d:84:44:70:c7:c8:7f:1f:7c:72: d7:91:86:69:6d:3d:12:f8:96:b8:12:11:b6:df:5b:e7:17:d3: d9:3a:c5:92:05:9f:5e:25:db:31:1f:86:03:c7:62:38:e5:62: 88:78:61:ad:0f:4e:8b:0c:d8:99:24:bd:88:21:a2:cb:f2:33: d8:6d:a6:09:0f:ff:d4:a0:95:44:32:92:b1:3a:b9:7f:f7:af: b6:5d:83:fd:b4:15:c5:31:15:cb:8b:77:03:e4:df:32:cc:ff: a4:0c:bf:40:ad:f6:32:d0:9b:e2:bf:52:6d:31:f0:c0:d0:45: 0e:a3:72:c5:d9:59:3f:e6:64:45:26:31:eb:38:d7:01:6f:7f: e8:fa:a2:fc:da:0d:ba:49:74:1e:60:f6:4c:3b:a7:af:e8:3c: 11:1e:d6:21:0a:ab:b9:12:0b:1b:68:28:c7:9c:ff:36:dc:93: db:80:b7:ac:b3:88:0e:18:48:2d:54:c4:c6:3e:22:19:64:91: 5b:6f:10:69:db:c0:de:a6:ca:d1:8b:4e:fb:a7:8c:40:25:67: d5:22:18:72:87:85:35:f8:97:30:81:07:7d:e5:44:e8:08:db: 45:b7:fb:b2 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUYQ2lBuMIHqmvUt+dAobfhW+pdyMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRkM0QTM4REFBRjE1RTgyODQzNzNGRDgyQUU1OUIyNzM4 M0Q0QTY4RjAeFw0yNTEyMDYwODM2MjFaFw0yNTEyMDkxMDIzMjFaMDMxMTAvBgNV BAMTKEJEOEU0RkU5NkEyRkY3MTA2RUI0MTVCQTQ3OERFMTI5ODg5NjQ2MjIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDfHjYhL91m6zSCdZXEu41MowoQ Eb4gHje7T8KtQnpt0jLjvYp9Hqh6zuBORMdceBTU0GsVHNDu9kHYsjGeCp5Z7Gic ClWerAsZf+ZiDSs3DLoTOf2Nje3Vwc+n3KoRdHwjR+Zxk/aPnsv5zpsLM7mJPOAN 62SNSoee0Ia/TvTs3SrjkiqBgQpZrncbsaIuTp2MDNqPXSqaTuuP0Ubl/Do4IyoL AB8X3eSSQapGZcM1wJhOZYe4yuPRo1eBOslIiTiPLhbM45u/gMXa0Pr4+wn2gJen a2p9RjwH7XaiQx76h7404d+kqfoaFLglf2riOAHR3agYkd9ZrTiiWCT1Ar+VAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUvY5P6Wov9xButBW6R43hKYiWRiIwHwYDVR0j BBgwFoAU/Eo42q8V6ChDc/2Crlmyc4PUpo8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w NTQ2MTgzYy1kOWVmLTRjMzMtYmU5OS1lODRiZWRiMTBiNjgvMC9GQzRBMzhEQUFG MTVFODI4NDM3M0ZEODJBRTU5QjI3MzgzRDRBNjhGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRkM0QTM4REFBRjE1RTgyODQzNzNGRDgyQUU1OUIyNzM4M0Q0 QTY4Ri5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMDU0NjE4M2MtZDllZi00YzMzLWJl OTktZTg0YmVkYjEwYjY4LzAvRkM0QTM4REFBRjE1RTgyODQzNzNGRDgyQUU1OUIy NzM4M0Q0QTY4Ri5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADnuE2HSrzSHeh/hMJEXTBRkvk5mJXSdDbSb DYREcMfIfx98cteRhmltPRL4lrgSEbbfW+cX09k6xZIFn14l2zEfhgPHYjjlYoh4 Ya0PTosM2JkkvYghosvyM9htpgkP/9SglUQykrE6uX/3r7Zdg/20FcUxFcuLdwPk 3zLM/6QMv0Ct9jLQm+K/Um0x8MDQRQ6jcsXZWT/mZEUmMes41wFvf+j6ovzaDbpJ dB5g9kw7p6/oPBEe1iEKq7kSCxtoKMec/zbck9uAt6yziA4YSC1UxMY+IhlkkVtv EGnbwN6mytGLTvunjEAlZ9UiGHKHhTX4lzCBB33lROgI20W3+7I= -----END CERTIFICATE-----Generated at Sun Dec 7 03:06:31 2025 by rpki-client