This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/a0f78bd4-c19b-4d40-aa54-ed8d7bc772ca/0/FD7C5A44A3CAAF7CD140CFD1C61622BA5EA2E623.mft File: FD7C5A44A3CAAF7CD140CFD1C61622BA5EA2E623.mft (raw, json) Hash identifier: SsvKdzpl0nmUCONMlxvzCk67FrSyduwW/W1aoI0Ev4s= Subject key identifier: 0E:36:86:DC:7B:E4:0E:DD:C8:73:CF:D9:F5:2A:A8:EA:EE:FB:AE:26 Authority key identifier: FD:7C:5A:44:A3:CA:AF:7C:D1:40:CF:D1:C6:16:22:BA:5E:A2:E6:23 Certificate issuer: /CN=FD7C5A44A3CAAF7CD140CFD1C61622BA5EA2E623 Certificate serial: 56AD23E219E3A70CDC83C7BFBDB81B2EB27BDD1C Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/FD7C5A44A3CAAF7CD140CFD1C61622BA5EA2E623.cer Subject info access: rsync://repo-rpki.idnic.net/repo/a0f78bd4-c19b-4d40-aa54-ed8d7bc772ca/0/FD7C5A44A3CAAF7CD140CFD1C61622BA5EA2E623.mft Manifest number: 0115 Signing time: Fri 05 Dec 2025 11:22:24 +0000 Manifest this update: Fri 05 Dec 2025 11:17:24 +0000 Manifest next update: Mon 08 Dec 2025 14:43:24 +0000 Files and hashes: 1: 3135372e32302e3132362e302f32332d3234203d3e20313532343130.roa (hash: mIAtzNrfjeKiFzHKpCt4+yI3FhKtEfckYghfutbPb44=) 2: FD7C5A44A3CAAF7CD140CFD1C61622BA5EA2E623.crl (hash: 2tms4CwmzeUNM4350WruZDuMfVP+r5oo+UE83yuqB48=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/a0f78bd4-c19b-4d40-aa54-ed8d7bc772ca/0/FD7C5A44A3CAAF7CD140CFD1C61622BA5EA2E623.crl rsync://repo-rpki.idnic.net/repo/a0f78bd4-c19b-4d40-aa54-ed8d7bc772ca/0/FD7C5A44A3CAAF7CD140CFD1C61622BA5EA2E623.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/FD7C5A44A3CAAF7CD140CFD1C61622BA5EA2E623.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 08 Dec 2025 14:43:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 56:ad:23:e2:19:e3:a7:0c:dc:83:c7:bf:bd:b8:1b:2e:b2:7b:dd:1c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=FD7C5A44A3CAAF7CD140CFD1C61622BA5EA2E623 Validity Not Before: Dec 5 11:17:24 2025 GMT Not After : Dec 8 14:43:24 2025 GMT Subject: CN=0E3686DC7BE40EDDC873CFD9F52AA8EAEEFBAE26 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:e3:33:aa:61:a0:dd:47:e5:18:0a:18:c3:33: fc:cc:34:d9:d9:46:53:bc:ad:84:c9:f7:6d:28:d0: bc:21:55:0b:fb:74:85:e9:85:d0:ff:e3:1a:3c:1e: 8e:ad:84:7c:c7:44:80:a8:06:92:6b:0e:bf:4a:c9: a5:03:c6:92:ec:e4:a6:85:00:4a:be:7d:4d:5e:85: 6a:f0:c3:64:7b:f0:40:0f:5c:6e:d0:16:3d:0f:1f: c1:c9:09:e1:9f:22:72:a4:ff:f8:1c:1b:9d:19:4f: bb:09:95:f8:53:f2:8e:f1:15:70:2a:24:d1:da:f4: e1:a1:26:2d:1c:5b:60:11:d9:47:3d:98:a9:b5:be: 5c:ba:ed:6c:78:ac:5b:bc:2f:77:22:24:6a:0d:3a: a9:59:fe:33:1f:6d:5d:b8:ea:27:d2:d1:be:10:95: 47:81:ac:d7:1e:27:e7:c7:04:4c:f4:3d:e2:20:b5: 17:c3:49:5b:12:8d:33:cb:4a:37:24:d5:42:f6:82: f9:50:bf:f9:a1:4b:34:fe:ef:50:b2:a2:10:45:8c: 93:7e:02:36:a9:ff:19:7b:7f:af:58:52:a2:ec:81: 38:a9:db:89:4e:89:0f:b5:9c:bc:ed:f0:29:eb:a2: 89:97:fe:13:c1:50:7f:02:7c:80:3e:6c:cd:0c:1e: 43:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:36:86:DC:7B:E4:0E:DD:C8:73:CF:D9:F5:2A:A8:EA:EE:FB:AE:26 X509v3 Authority Key Identifier: keyid:FD:7C:5A:44:A3:CA:AF:7C:D1:40:CF:D1:C6:16:22:BA:5E:A2:E6:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/a0f78bd4-c19b-4d40-aa54-ed8d7bc772ca/0/FD7C5A44A3CAAF7CD140CFD1C61622BA5EA2E623.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/FD7C5A44A3CAAF7CD140CFD1C61622BA5EA2E623.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a0f78bd4-c19b-4d40-aa54-ed8d7bc772ca/0/FD7C5A44A3CAAF7CD140CFD1C61622BA5EA2E623.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 64:aa:bf:87:b2:cd:2f:df:40:8c:df:98:e7:29:dc:a0:25:8f: 78:22:6d:a4:74:f6:76:e6:07:4d:16:2b:87:3d:84:5f:12:21: 6e:fe:d4:39:4d:a1:38:e6:f2:50:45:6d:f8:c3:36:10:89:29: c8:79:98:d8:40:9f:65:2c:db:c8:1f:68:b9:7f:33:21:4d:1b: ab:fb:43:77:78:e4:2c:9c:21:0d:87:03:92:62:53:96:3e:42: b8:b8:56:ca:c9:1c:92:58:7e:3d:16:c9:1a:8e:d6:d9:50:b9: 28:c5:7c:97:dd:92:0c:e2:21:26:21:1f:fc:09:0d:d3:8f:f7: cc:18:e9:03:22:bc:f0:76:ae:4d:fc:59:94:95:19:3d:3f:86: 88:e5:49:e7:14:ec:fe:08:54:6d:57:14:42:8c:3f:a7:5f:3e: 9e:4b:e1:ca:10:a7:ab:d1:03:09:ca:5e:13:b4:a9:63:91:f3: 2b:01:64:04:86:01:46:8e:03:bf:14:2a:8d:b1:b1:ec:56:e3: bf:9f:16:62:e6:6d:1e:5d:ab:2a:54:60:25:2b:ae:d4:34:f3: 42:c5:fc:38:24:e4:34:3c:ff:2a:5a:7d:18:52:64:16:24:c6: 13:3b:55:9e:89:8d:93:3a:07:77:20:be:8c:8e:68:2b:22:8d: de:0f:14:db -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUVq0j4hnjpwzcg8e/vbgbLrJ73RwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRkQ3QzVBNDRBM0NBQUY3Q0QxNDBDRkQxQzYxNjIyQkE1 RUEyRTYyMzAeFw0yNTEyMDUxMTE3MjRaFw0yNTEyMDgxNDQzMjRaMDMxMTAvBgNV BAMTKDBFMzY4NkRDN0JFNDBFRERDODczQ0ZEOUY1MkFBOEVBRUVGQkFFMjYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDL4zOqYaDdR+UYChjDM/zMNNnZ RlO8rYTJ920o0LwhVQv7dIXphdD/4xo8Ho6thHzHRICoBpJrDr9KyaUDxpLs5KaF AEq+fU1ehWrww2R78EAPXG7QFj0PH8HJCeGfInKk//gcG50ZT7sJlfhT8o7xFXAq JNHa9OGhJi0cW2AR2Uc9mKm1vly67Wx4rFu8L3ciJGoNOqlZ/jMfbV246ifS0b4Q lUeBrNceJ+fHBEz0PeIgtRfDSVsSjTPLSjck1UL2gvlQv/mhSzT+71CyohBFjJN+ Ajap/xl7f69YUqLsgTip24lOiQ+1nLzt8CnroomX/hPBUH8CfIA+bM0MHkOLAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUDjaG3HvkDt3Ic8/Z9Sqo6u77riYwHwYDVR0j BBgwFoAU/XxaRKPKr3zRQM/RxhYiul6i5iMwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h MGY3OGJkNC1jMTliLTRkNDAtYWE1NC1lZDhkN2JjNzcyY2EvMC9GRDdDNUE0NEEz Q0FBRjdDRDE0MENGRDFDNjE2MjJCQTVFQTJFNjIzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvRkQ3QzVBNDRBM0NBQUY3Q0QxNDBDRkQxQzYxNjIyQkE1RUEy RTYyMy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYTBmNzhiZDQtYzE5Yi00ZDQwLWFh NTQtZWQ4ZDdiYzc3MmNhLzAvRkQ3QzVBNDRBM0NBQUY3Q0QxNDBDRkQxQzYxNjIy QkE1RUEyRTYyMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGSqv4eyzS/fQIzfmOcp3KAlj3gibaR09nbm B00WK4c9hF8SIW7+1DlNoTjm8lBFbfjDNhCJKch5mNhAn2Us28gfaLl/MyFNG6v7 Q3d45CycIQ2HA5JiU5Y+Qri4VsrJHJJYfj0WyRqO1tlQuSjFfJfdkgziISYhH/wJ DdOP98wY6QMivPB2rk38WZSVGT0/hojlSecU7P4IVG1XFEKMP6dfPp5L4coQp6vR AwnKXhO0qWOR8ysBZASGAUaOA78UKo2xsexW47+fFmLmbR5dqypUYCUrrtQ080LF /Dgk5DQ8/ypafRhSZBYkxhM7VZ6JjZM6B3cgvoyOaCsijd4PFNs= -----END CERTIFICATE-----Generated at Sat Dec 6 17:50:58 2025 by rpki-client