This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/5fb808eb-c98e-4036-be9a-193bbcc64892/0/FC2DAAA409BA60DE33EC91F3A861D1A00719D426.mft File: FC2DAAA409BA60DE33EC91F3A861D1A00719D426.mft (raw, json) Hash identifier: xNZRdn5FE/nDXBt0QYcwugsCz/lApYNGyzK+xZWVIkM= Subject key identifier: 88:85:15:58:97:88:D8:24:BC:C3:B1:29:71:6B:50:30:B3:F7:FD:18 Authority key identifier: FC:2D:AA:A4:09:BA:60:DE:33:EC:91:F3:A8:61:D1:A0:07:19:D4:26 Certificate issuer: /CN=FC2DAAA409BA60DE33EC91F3A861D1A00719D426 Certificate serial: 272FD1AB5EEE087A87B2066964F0CE4E013EE5D5 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/FC2DAAA409BA60DE33EC91F3A861D1A00719D426.cer Subject info access: rsync://repo-rpki.idnic.net/repo/5fb808eb-c98e-4036-be9a-193bbcc64892/0/FC2DAAA409BA60DE33EC91F3A861D1A00719D426.mft Manifest number: FF Signing time: Mon 15 Dec 2025 21:00:54 +0000 Manifest this update: Mon 15 Dec 2025 20:55:54 +0000 Manifest next update: Thu 18 Dec 2025 21:04:54 +0000 Files and hashes: 1: FC2DAAA409BA60DE33EC91F3A861D1A00719D426.crl (hash: LrUhW1G7EWQqglTrZa6RPRTz097IXtyPOhD4iHkN+kY=) 2: 3135372e36362e322e302f32332d3234203d3e20313532343430.roa (hash: 3ZS5/0NJnXKv4Pk0J4oSOH1r1VKtA3mh1qb3WAlsXUw=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/5fb808eb-c98e-4036-be9a-193bbcc64892/0/FC2DAAA409BA60DE33EC91F3A861D1A00719D426.crl rsync://repo-rpki.idnic.net/repo/5fb808eb-c98e-4036-be9a-193bbcc64892/0/FC2DAAA409BA60DE33EC91F3A861D1A00719D426.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/FC2DAAA409BA60DE33EC91F3A861D1A00719D426.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 18 Dec 2025 21:04:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 27:2f:d1:ab:5e:ee:08:7a:87:b2:06:69:64:f0:ce:4e:01:3e:e5:d5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=FC2DAAA409BA60DE33EC91F3A861D1A00719D426 Validity Not Before: Dec 15 20:55:54 2025 GMT Not After : Dec 18 21:04:54 2025 GMT Subject: CN=888515589788D824BCC3B129716B5030B3F7FD18 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ef:81:91:00:a3:ec:f9:b4:6d:f5:35:c8:48:55: a9:22:84:26:8e:76:7b:c9:ee:b5:ca:34:f3:6d:57: d2:65:d5:6f:f3:f7:03:01:05:fc:7c:5b:4c:1c:f5: 94:29:ff:39:bd:75:cb:6d:0d:d4:07:d3:c5:00:dd: 19:d8:49:1a:02:19:cf:92:31:47:25:aa:00:28:aa: e2:c7:77:26:f3:5b:cd:91:b7:7c:32:cf:30:24:b9: 85:81:36:9e:8f:ff:3e:fd:5c:6b:56:eb:8a:7c:5d: 2a:94:84:aa:a8:0b:38:bd:26:b7:4b:20:80:62:ea: f8:98:a1:3f:23:01:02:25:ad:d2:48:de:b7:0a:94: 1d:88:61:0c:4b:b2:67:3e:0a:5f:9f:76:02:b0:3d: 39:85:e0:86:0e:32:12:de:9a:46:8e:31:1a:6d:45: 65:c4:6b:15:0f:1b:3e:61:33:ca:49:1d:4a:98:93: 36:f6:49:f6:08:fc:03:c7:5c:b3:d7:9f:9e:13:c2: 96:7c:e1:d6:6a:0c:fb:63:69:4b:be:ba:a6:c5:2c: 47:0b:c1:57:eb:d1:89:0a:fd:10:02:e3:16:55:2c: 45:a8:d6:48:99:5f:84:0f:5a:c9:af:fb:ca:77:bc: b5:57:30:cb:3d:62:c9:e4:a5:9f:94:87:48:72:91: 6c:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:85:15:58:97:88:D8:24:BC:C3:B1:29:71:6B:50:30:B3:F7:FD:18 X509v3 Authority Key Identifier: keyid:FC:2D:AA:A4:09:BA:60:DE:33:EC:91:F3:A8:61:D1:A0:07:19:D4:26 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/5fb808eb-c98e-4036-be9a-193bbcc64892/0/FC2DAAA409BA60DE33EC91F3A861D1A00719D426.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/FC2DAAA409BA60DE33EC91F3A861D1A00719D426.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/5fb808eb-c98e-4036-be9a-193bbcc64892/0/FC2DAAA409BA60DE33EC91F3A861D1A00719D426.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5a:ce:0c:1f:6a:5c:b3:87:ca:d8:b4:48:23:2c:da:32:88:00: af:31:51:b7:db:72:d9:38:d5:5f:cb:9e:19:fd:db:91:71:0a: 4a:b0:f4:3c:66:14:fb:32:6c:6b:eb:31:f4:dc:e7:2e:de:b9: b7:75:73:3a:7a:10:0d:08:30:c9:40:99:cb:b9:25:96:a9:29: 4c:b3:f4:f5:50:bd:93:ec:04:c4:62:50:57:0a:36:81:bf:b6: b1:83:25:bf:2e:58:e9:e8:71:4f:48:0a:8c:13:1c:3d:b8:02: 83:5a:06:cb:ff:c5:df:41:8b:12:78:c2:6c:1e:e0:d2:a1:f6: 13:e3:38:c1:1a:2f:0f:f4:3b:80:77:52:c6:35:2c:ac:45:c5: 95:cf:ef:85:de:d9:b4:2c:3e:6c:9b:c3:69:24:84:b7:16:97: 67:b9:6a:89:b3:ea:ba:ac:2c:fa:a1:fd:2a:54:c1:90:32:a8: 4c:0e:e9:4c:eb:53:7d:3e:58:63:55:22:b6:84:cc:d0:5e:2a: 33:2e:d2:63:15:fc:30:d8:4c:bb:4b:12:15:70:3c:c3:cb:97: d5:35:8c:83:ce:17:b2:83:56:b3:3c:01:e3:ca:5d:d6:31:74: c3:d1:61:40:56:d9:2c:41:b4:25:ff:fd:64:f5:7e:5d:94:d1: 01:6a:b8:ab -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUJy/Rq17uCHqHsgZpZPDOTgE+5dUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRkMyREFBQTQwOUJBNjBERTMzRUM5MUYzQTg2MUQxQTAw NzE5RDQyNjAeFw0yNTEyMTUyMDU1NTRaFw0yNTEyMTgyMTA0NTRaMDMxMTAvBgNV BAMTKDg4ODUxNTU4OTc4OEQ4MjRCQ0MzQjEyOTcxNkI1MDMwQjNGN0ZEMTgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDvgZEAo+z5tG31NchIVakihCaO dnvJ7rXKNPNtV9Jl1W/z9wMBBfx8W0wc9ZQp/zm9dcttDdQH08UA3RnYSRoCGc+S MUclqgAoquLHdybzW82Rt3wyzzAkuYWBNp6P/z79XGtW64p8XSqUhKqoCzi9JrdL IIBi6viYoT8jAQIlrdJI3rcKlB2IYQxLsmc+Cl+fdgKwPTmF4IYOMhLemkaOMRpt RWXEaxUPGz5hM8pJHUqYkzb2SfYI/APHXLPXn54TwpZ84dZqDPtjaUu+uqbFLEcL wVfr0YkK/RAC4xZVLEWo1kiZX4QPWsmv+8p3vLVXMMs9YsnkpZ+Uh0hykWxDAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUiIUVWJeI2CS8w7EpcWtQMLP3/RgwHwYDVR0j BBgwFoAU/C2qpAm6YN4z7JHzqGHRoAcZ1CYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 ZmI4MDhlYi1jOThlLTQwMzYtYmU5YS0xOTNiYmNjNjQ4OTIvMC9GQzJEQUFBNDA5 QkE2MERFMzNFQzkxRjNBODYxRDFBMDA3MTlENDI2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvRkMyREFBQTQwOUJBNjBERTMzRUM5MUYzQTg2MUQxQTAwNzE5 RDQyNi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNWZiODA4ZWItYzk4ZS00MDM2LWJl OWEtMTkzYmJjYzY0ODkyLzAvRkMyREFBQTQwOUJBNjBERTMzRUM5MUYzQTg2MUQx QTAwNzE5RDQyNi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFrODB9qXLOHyti0SCMs2jKIAK8xUbfbctk4 1V/Lnhn925FxCkqw9DxmFPsybGvrMfTc5y7eubd1czp6EA0IMMlAmcu5JZapKUyz 9PVQvZPsBMRiUFcKNoG/trGDJb8uWOnocU9ICowTHD24AoNaBsv/xd9BixJ4wmwe 4NKh9hPjOMEaLw/0O4B3UsY1LKxFxZXP74Xe2bQsPmybw2kkhLcWl2e5aomz6rqs LPqh/SpUwZAyqEwO6UzrU30+WGNVIraEzNBeKjMu0mMV/DDYTLtLEhVwPMPLl9U1 jIPOF7KDVrM8AePKXdYxdMPRYUBW2SxBtCX//WT1fl2U0QFquKs= -----END CERTIFICATE-----Generated at Wed Dec 17 18:13:03 2025 by rpki-client