This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/1653247a-a56e-424a-a07b-36a2511d7caa/0/FE880CC93B6284E6833106A5BEB71A0CDDE57C0B.mft File: FE880CC93B6284E6833106A5BEB71A0CDDE57C0B.mft (raw, json) Hash identifier: 5zsjhK6x7rX9ybRbxLOKMBehPRFbJf7gbVA0j7bhu8U= Subject key identifier: 42:F1:16:52:E3:0B:46:A5:E2:D2:33:72:32:27:6A:98:23:0E:DE:10 Authority key identifier: FE:88:0C:C9:3B:62:84:E6:83:31:06:A5:BE:B7:1A:0C:DD:E5:7C:0B Certificate issuer: /CN=FE880CC93B6284E6833106A5BEB71A0CDDE57C0B Certificate serial: 54614ED050E53AFEB90AE49CDDFA97B52E8AFE36 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FE880CC93B6284E6833106A5BEB71A0CDDE57C0B.cer Subject info access: rsync://repo-rpki.idnic.net/repo/1653247a-a56e-424a-a07b-36a2511d7caa/0/FE880CC93B6284E6833106A5BEB71A0CDDE57C0B.mft Manifest number: 0218 Signing time: Fri 05 Dec 2025 15:22:08 +0000 Manifest this update: Fri 05 Dec 2025 15:17:08 +0000 Manifest next update: Tue 09 Dec 2025 02:11:08 +0000 Files and hashes: 1: 3130332e31332e3133392e302f32342d3234203d3e20313530323135.roa (hash: cU1g8IvJ9xTyNpUSLD7UlYtWkf7YESigdS5w5xzxaBQ=) 2: FE880CC93B6284E6833106A5BEB71A0CDDE57C0B.crl (hash: hig8ixRjeMMG7G2Z+i1wIWNNRsWP799wgqftq757gTA=) 3: 3130332e31332e3133382e302f32342d3234203d3e20313530323135.roa (hash: 6ADoYkeIrhNdhv/k4Oyj/4jDcP6VkQMjB86DXlVYGIc=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/1653247a-a56e-424a-a07b-36a2511d7caa/0/FE880CC93B6284E6833106A5BEB71A0CDDE57C0B.crl rsync://repo-rpki.idnic.net/repo/1653247a-a56e-424a-a07b-36a2511d7caa/0/FE880CC93B6284E6833106A5BEB71A0CDDE57C0B.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FE880CC93B6284E6833106A5BEB71A0CDDE57C0B.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 09 Dec 2025 02:11:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 54:61:4e:d0:50:e5:3a:fe:b9:0a:e4:9c:dd:fa:97:b5:2e:8a:fe:36 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=FE880CC93B6284E6833106A5BEB71A0CDDE57C0B Validity Not Before: Dec 5 15:17:08 2025 GMT Not After : Dec 9 02:11:08 2025 GMT Subject: CN=42F11652E30B46A5E2D2337232276A98230EDE10 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:68:d4:e6:04:e3:3a:8d:27:01:b5:df:d4:f2: 42:1a:f2:92:83:2b:e8:06:73:30:ee:11:47:8d:f9: 9e:ac:54:65:df:cd:a9:c3:ba:2e:62:28:db:5b:02: ba:91:83:ad:1c:11:5a:4c:06:22:2a:24:f4:53:ca: 1e:bb:34:df:68:d4:46:c0:83:32:9c:75:e5:02:ac: ac:66:22:14:06:79:96:ae:f9:14:9e:ab:f2:96:a1: 59:45:ea:f9:b2:07:7c:84:62:0b:e5:79:dc:da:25: 9a:f5:fe:33:61:a7:ed:c3:0a:a6:7d:2f:f1:7a:c7: 2b:6a:af:be:16:36:bd:77:ce:1c:b5:54:f1:a5:1b: bf:bd:c2:6c:3c:8c:56:ec:9a:a6:34:a1:00:13:40: 91:34:42:33:3a:b1:c0:e6:f3:47:0c:67:ca:67:f8: 4c:79:6b:2d:22:7b:44:51:0c:07:22:de:34:0c:c3: 48:75:88:17:e3:27:dd:f5:60:38:b1:2d:c9:f4:51: 98:70:31:18:6e:33:83:24:15:16:cb:f1:93:6e:f3: 47:82:c9:1c:a8:42:89:6a:fb:fa:2a:e7:bf:2b:87: bd:18:48:28:7e:49:ff:a0:dc:d9:e6:72:70:23:45: b8:a4:b3:d2:c7:78:f8:86:a5:e7:f8:2e:5d:33:ed: 1a:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:F1:16:52:E3:0B:46:A5:E2:D2:33:72:32:27:6A:98:23:0E:DE:10 X509v3 Authority Key Identifier: keyid:FE:88:0C:C9:3B:62:84:E6:83:31:06:A5:BE:B7:1A:0C:DD:E5:7C:0B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/1653247a-a56e-424a-a07b-36a2511d7caa/0/FE880CC93B6284E6833106A5BEB71A0CDDE57C0B.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FE880CC93B6284E6833106A5BEB71A0CDDE57C0B.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/1653247a-a56e-424a-a07b-36a2511d7caa/0/FE880CC93B6284E6833106A5BEB71A0CDDE57C0B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 92:ca:f5:45:71:46:91:ea:95:42:e4:55:68:81:ff:67:f0:25: 04:7b:da:5c:60:9a:d2:d1:0a:74:2d:ed:29:c8:16:d9:dc:b3: 96:e3:3d:4e:20:0e:6d:d2:c9:9d:d1:7f:11:8d:d1:fa:9f:41: d9:28:53:a2:d9:b8:e1:ac:be:95:79:62:0b:40:ae:e7:84:5d: ba:2b:97:5e:73:59:67:78:7f:62:1e:2c:9d:ff:37:11:ef:4d: 94:3d:d4:ca:35:6a:e1:cf:64:dd:2e:99:3c:63:91:41:9a:32: 42:79:ca:0f:0b:53:3f:9f:88:ed:fd:bc:15:d9:e5:da:48:bd: 6e:e0:a1:44:82:84:40:80:31:c9:83:79:41:b8:18:8d:9f:aa: 66:be:ba:d2:37:a3:d6:19:4d:c1:08:43:54:81:38:a1:3c:25: 8b:1f:27:0c:65:5f:ac:8a:0e:dc:5b:7b:63:ed:53:64:25:f9: f5:6b:21:b8:0e:89:32:0b:ab:d4:55:65:72:0a:49:58:1f:dc: 63:78:08:62:ae:95:c0:b9:6f:8e:7f:bd:f8:7f:3b:77:a8:29: 61:dd:f2:ea:6f:c2:a2:57:20:00:24:99:9c:73:d9:67:18:d5: 58:aa:21:09:52:a0:81:6b:8c:09:9d:8c:22:fe:4a:5c:31:5b: ca:4f:fa:d5 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUVGFO0FDlOv65CuSc3fqXtS6K/jYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRkU4ODBDQzkzQjYyODRFNjgzMzEwNkE1QkVCNzFBMENE REU1N0MwQjAeFw0yNTEyMDUxNTE3MDhaFw0yNTEyMDkwMjExMDhaMDMxMTAvBgNV BAMTKDQyRjExNjUyRTMwQjQ2QTVFMkQyMzM3MjMyMjc2QTk4MjMwRURFMTAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDaaNTmBOM6jScBtd/U8kIa8pKD K+gGczDuEUeN+Z6sVGXfzanDui5iKNtbArqRg60cEVpMBiIqJPRTyh67NN9o1EbA gzKcdeUCrKxmIhQGeZau+RSeq/KWoVlF6vmyB3yEYgvledzaJZr1/jNhp+3DCqZ9 L/F6xytqr74WNr13zhy1VPGlG7+9wmw8jFbsmqY0oQATQJE0QjM6scDm80cMZ8pn +Ex5ay0ie0RRDAci3jQMw0h1iBfjJ931YDixLcn0UZhwMRhuM4MkFRbL8ZNu80eC yRyoQolq+/oq578rh70YSCh+Sf+g3NnmcnAjRbiks9LHePiGpef4Ll0z7RrnAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUQvEWUuMLRqXi0jNyMidqmCMO3hAwHwYDVR0j BBgwFoAU/ogMyTtihOaDMQalvrcaDN3lfAswDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x NjUzMjQ3YS1hNTZlLTQyNGEtYTA3Yi0zNmEyNTExZDdjYWEvMC9GRTg4MENDOTNC NjI4NEU2ODMzMTA2QTVCRUI3MUEwQ0RERTU3QzBCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRkU4ODBDQzkzQjYyODRFNjgzMzEwNkE1QkVCNzFBMENEREU1 N0MwQi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMTY1MzI0N2EtYTU2ZS00MjRhLWEw N2ItMzZhMjUxMWQ3Y2FhLzAvRkU4ODBDQzkzQjYyODRFNjgzMzEwNkE1QkVCNzFB MENEREU1N0MwQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJLK9UVxRpHqlULkVWiB/2fwJQR72lxgmtLR CnQt7SnIFtncs5bjPU4gDm3SyZ3RfxGN0fqfQdkoU6LZuOGsvpV5YgtArueEXbor l15zWWd4f2IeLJ3/NxHvTZQ91Mo1auHPZN0umTxjkUGaMkJ5yg8LUz+fiO39vBXZ 5dpIvW7goUSChECAMcmDeUG4GI2fqma+utI3o9YZTcEIQ1SBOKE8JYsfJwxlX6yK Dtxbe2PtU2Ql+fVrIbgOiTILq9RVZXIKSVgf3GN4CGKulcC5b45/vfh/O3eoKWHd 8upvwqJXIAAkmZxz2WcY1ViqIQlSoIFrjAmdjCL+SlwxW8pP+tU= -----END CERTIFICATE-----Generated at Sun Dec 7 05:17:08 2025 by rpki-client