This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repo-rpki.idnic.net/repo/a8c068da-f9c5-4036-854b-922caa93f324/0/FE4F0E88F020271FABB0940107AF13E80DCCA4CE.mft
File: FE4F0E88F020271FABB0940107AF13E80DCCA4CE.mft (raw, json)
Hash identifier: CDpDk3W4ifdC5pOVpAVhSZ1JG/HwALEmLsSHutMHWTU=
Subject key identifier: DD:E5:D3:F9:F5:EB:51:F0:83:46:55:F5:51:07:E8:C3:25:69:7D:13
Authority key identifier: FE:4F:0E:88:F0:20:27:1F:AB:B0:94:01:07:AF:13:E8:0D:CC:A4:CE
Certificate issuer: /CN=FE4F0E88F020271FABB0940107AF13E80DCCA4CE
Certificate serial: 7C88B0EB99E466FEBF5AC00FB210A9AD6FCFC6E2
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FE4F0E88F020271FABB0940107AF13E80DCCA4CE.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/a8c068da-f9c5-4036-854b-922caa93f324/0/FE4F0E88F020271FABB0940107AF13E80DCCA4CE.mft
Manifest number: 0258
Signing time: Wed 17 Dec 2025 01:50:49 +0000
Manifest this update: Wed 17 Dec 2025 01:45:49 +0000
Manifest next update: Sat 20 Dec 2025 05:00:49 +0000
Files and hashes: 1: FE4F0E88F020271FABB0940107AF13E80DCCA4CE.crl (hash: BD/DPckPhGg9sPBmc6c6OYzZ31NiArEab+2tsgdkPOM=)
2: 3130332e3134352e3130392e302f32342d3234203d3e20313339343436.roa (hash: sUHotiaGBstsKmEhH9/fJpL1WcIuFBtfxzHmhhUaDnk=)
3: 3130332e3134352e3130382e302f32332d3233203d3e20313339343436.roa (hash: lWA47U73TE+1g96hIrmyt3gL+Oo/duzM7GOTLMASuNU=)
4: 3130332e3134352e3130382e302f32342d3234203d3e20313339343436.roa (hash: tjJDFxCynqLsg0EmTlTCtOOxQT65UN9NGhZvaT8tSbk=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/a8c068da-f9c5-4036-854b-922caa93f324/0/FE4F0E88F020271FABB0940107AF13E80DCCA4CE.crl
rsync://repo-rpki.idnic.net/repo/a8c068da-f9c5-4036-854b-922caa93f324/0/FE4F0E88F020271FABB0940107AF13E80DCCA4CE.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FE4F0E88F020271FABB0940107AF13E80DCCA4CE.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 20 Dec 2025 05:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7c:88:b0:eb:99:e4:66:fe:bf:5a:c0:0f:b2:10:a9:ad:6f:cf:c6:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=FE4F0E88F020271FABB0940107AF13E80DCCA4CE
Validity
Not Before: Dec 17 01:45:49 2025 GMT
Not After : Dec 20 05:00:49 2025 GMT
Subject: CN=DDE5D3F9F5EB51F0834655F55107E8C325697D13
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:2b:00:87:90:12:32:89:89:64:0a:f9:85:b2:
f0:6c:8b:db:53:38:2f:15:e2:ac:be:df:3a:2c:af:
6e:11:b5:d1:a2:34:33:07:aa:c0:c1:04:04:7b:43:
76:a4:39:7c:c7:38:6d:9a:a0:f3:eb:ee:05:f6:e4:
f9:4c:bc:8e:44:91:19:cb:a1:4b:78:ac:d7:23:1a:
e7:39:46:20:13:f9:a3:b8:ec:46:2c:c7:66:21:63:
59:79:9a:7e:25:38:a5:68:7c:4b:fb:9c:09:0f:db:
01:1f:e0:75:e0:47:67:04:9d:17:c4:4b:3a:e7:2e:
ce:a6:18:1d:1f:59:76:11:9b:80:8c:b1:8d:be:4b:
3a:74:8f:eb:70:3c:4f:92:e7:55:c5:6e:85:af:6f:
fc:86:ce:7c:ff:63:0a:6d:db:36:38:df:70:1f:0b:
bb:f3:cb:b2:08:51:e7:ec:8d:cf:0f:22:a3:34:53:
86:1c:07:d4:85:1e:93:5b:3d:cf:3b:3a:f2:bd:7d:
b9:8b:92:21:c8:e8:1d:cb:9a:4f:d9:99:e9:72:1f:
49:56:b5:62:4b:e0:1e:70:8f:dc:44:d6:bc:3e:76:
8a:4e:e9:35:ad:a2:a8:1c:14:97:47:7d:8b:3a:85:
ba:0f:d3:4b:19:d0:88:ec:f0:bb:2a:79:99:14:dc:
45:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:E5:D3:F9:F5:EB:51:F0:83:46:55:F5:51:07:E8:C3:25:69:7D:13
X509v3 Authority Key Identifier:
keyid:FE:4F:0E:88:F0:20:27:1F:AB:B0:94:01:07:AF:13:E8:0D:CC:A4:CE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/a8c068da-f9c5-4036-854b-922caa93f324/0/FE4F0E88F020271FABB0940107AF13E80DCCA4CE.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FE4F0E88F020271FABB0940107AF13E80DCCA4CE.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a8c068da-f9c5-4036-854b-922caa93f324/0/FE4F0E88F020271FABB0940107AF13E80DCCA4CE.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
96:96:22:4c:c2:e2:04:d5:35:f6:dc:5d:ed:25:92:9f:4f:45:
08:03:fa:14:a5:9d:1f:78:61:d0:51:f8:0f:3f:98:70:42:24:
e6:64:93:50:75:50:9c:96:ae:6e:29:7a:92:f0:5d:51:87:57:
ac:f7:da:eb:27:7d:db:3c:6d:8c:97:ad:5c:82:13:ff:f8:55:
44:ed:91:9b:64:85:8e:dc:ff:a4:1a:4a:9d:a3:47:78:2b:48:
a5:27:e0:40:9d:93:a0:a9:49:8f:8b:20:e4:9b:64:31:4d:0e:
70:a2:3a:54:c2:06:ac:cd:05:2f:00:9f:98:3e:60:fc:ac:76:
5d:7b:2d:1b:ba:00:a9:a9:ac:f0:d2:13:d3:9a:03:9a:f1:8b:
53:a7:82:9b:ab:ba:4b:0c:96:51:03:51:43:f9:d9:26:74:89:
81:d3:2e:a6:62:8c:7d:7c:92:3d:c8:c1:41:17:88:d9:b2:f9:
57:4a:db:75:94:48:5c:f1:f9:d9:c8:3f:fd:e6:a4:e3:8c:14:
6c:31:e8:bf:ba:c7:ca:e2:27:1f:8f:82:74:29:3e:27:ec:8b:
4b:18:c7:0d:d8:b0:f6:5c:d1:bd:88:6c:4b:48:52:97:7f:31:
53:5b:17:f6:e1:ff:26:dc:ae:af:2c:b0:25:60:32:8f:f7:30:
b3:d9:95:d4
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUfIiw65nkZv6/WsAPshCprW/PxuIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRkU0RjBFODhGMDIwMjcxRkFCQjA5NDAxMDdBRjEzRTgw
RENDQTRDRTAeFw0yNTEyMTcwMTQ1NDlaFw0yNTEyMjAwNTAwNDlaMDMxMTAvBgNV
BAMTKERERTVEM0Y5RjVFQjUxRjA4MzQ2NTVGNTUxMDdFOEMzMjU2OTdEMTMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDmKwCHkBIyiYlkCvmFsvBsi9tT
OC8V4qy+3zosr24RtdGiNDMHqsDBBAR7Q3akOXzHOG2aoPPr7gX25PlMvI5EkRnL
oUt4rNcjGuc5RiAT+aO47EYsx2YhY1l5mn4lOKVofEv7nAkP2wEf4HXgR2cEnRfE
SzrnLs6mGB0fWXYRm4CMsY2+Szp0j+twPE+S51XFboWvb/yGznz/Ywpt2zY433Af
C7vzy7IIUefsjc8PIqM0U4YcB9SFHpNbPc87OvK9fbmLkiHI6B3Lmk/ZmelyH0lW
tWJL4B5wj9xE1rw+dopO6TWtoqgcFJdHfYs6hboP00sZ0Ijs8LsqeZkU3EXRAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQU3eXT+fXrUfCDRlX1UQfowyVpfRMwHwYDVR0j
BBgwFoAU/k8OiPAgJx+rsJQBB68T6A3MpM4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h
OGMwNjhkYS1mOWM1LTQwMzYtODU0Yi05MjJjYWE5M2YzMjQvMC9GRTRGMEU4OEYw
MjAyNzFGQUJCMDk0MDEwN0FGMTNFODBEQ0NBNENFLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvRkU0RjBFODhGMDIwMjcxRkFCQjA5NDAxMDdBRjEzRTgwREND
QTRDRS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6
Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYThjMDY4ZGEtZjljNS00MDM2LTg1
NGItOTIyY2FhOTNmMzI0LzAvRkU0RjBFODhGMDIwMjcxRkFCQjA5NDAxMDdBRjEz
RTgwRENDQTRDRS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBAJaWIkzC4gTVNfbcXe0lkp9PRQgD+hSlnR94
YdBR+A8/mHBCJOZkk1B1UJyWrm4pepLwXVGHV6z32usnfds8bYyXrVyCE//4VUTt
kZtkhY7c/6QaSp2jR3grSKUn4ECdk6CpSY+LIOSbZDFNDnCiOlTCBqzNBS8An5g+
YPysdl17LRu6AKmprPDSE9OaA5rxi1OngpuruksMllEDUUP52SZ0iYHTLqZijH18
kj3IwUEXiNmy+VdK23WUSFzx+dnIP/3mpOOMFGwx6L+6x8riJx+PgnQpPifsi0sY
xw3YsPZc0b2IbEtIUpd/MVNbF/bh/ybcrq8ssCVgMo/3MLPZldQ=
-----END CERTIFICATE-----
Generated at Thu Dec 18 04:58:55 2025 by rpki-client