This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/a8c068da-f9c5-4036-854b-922caa93f324/0/FE4F0E88F020271FABB0940107AF13E80DCCA4CE.mft File: FE4F0E88F020271FABB0940107AF13E80DCCA4CE.mft (raw, json) Hash identifier: JndtsFd3hX2CBHpofyO5dIeZukJe22GJtNbA+DQRXjU= Subject key identifier: FF:9F:97:97:7F:96:F8:EC:70:7F:CE:75:6A:48:BA:B1:EB:80:A5:7A Authority key identifier: FE:4F:0E:88:F0:20:27:1F:AB:B0:94:01:07:AF:13:E8:0D:CC:A4:CE Certificate issuer: /CN=FE4F0E88F020271FABB0940107AF13E80DCCA4CE Certificate serial: 25B15C5D98040A7569AB924ED5B1B04508D83D7A Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FE4F0E88F020271FABB0940107AF13E80DCCA4CE.cer Subject info access: rsync://repo-rpki.idnic.net/repo/a8c068da-f9c5-4036-854b-922caa93f324/0/FE4F0E88F020271FABB0940107AF13E80DCCA4CE.mft Manifest number: 0253 Signing time: Fri 05 Dec 2025 18:10:52 +0000 Manifest this update: Fri 05 Dec 2025 18:05:52 +0000 Manifest next update: Mon 08 Dec 2025 20:05:52 +0000 Files and hashes: 1: 3130332e3134352e3130392e302f32342d3234203d3e20313339343436.roa (hash: sUHotiaGBstsKmEhH9/fJpL1WcIuFBtfxzHmhhUaDnk=) 2: FE4F0E88F020271FABB0940107AF13E80DCCA4CE.crl (hash: ogHmVLbak1foCN3SgH8aou+DEII0EWEGBbvwiNrbncU=) 3: 3130332e3134352e3130382e302f32332d3233203d3e20313339343436.roa (hash: lWA47U73TE+1g96hIrmyt3gL+Oo/duzM7GOTLMASuNU=) 4: 3130332e3134352e3130382e302f32342d3234203d3e20313339343436.roa (hash: tjJDFxCynqLsg0EmTlTCtOOxQT65UN9NGhZvaT8tSbk=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/a8c068da-f9c5-4036-854b-922caa93f324/0/FE4F0E88F020271FABB0940107AF13E80DCCA4CE.crl rsync://repo-rpki.idnic.net/repo/a8c068da-f9c5-4036-854b-922caa93f324/0/FE4F0E88F020271FABB0940107AF13E80DCCA4CE.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FE4F0E88F020271FABB0940107AF13E80DCCA4CE.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 08 Dec 2025 20:05:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 25:b1:5c:5d:98:04:0a:75:69:ab:92:4e:d5:b1:b0:45:08:d8:3d:7a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=FE4F0E88F020271FABB0940107AF13E80DCCA4CE Validity Not Before: Dec 5 18:05:52 2025 GMT Not After : Dec 8 20:05:52 2025 GMT Subject: CN=FF9F97977F96F8EC707FCE756A48BAB1EB80A57A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:e3:af:cb:21:34:78:79:41:66:fa:35:f8:78: 4a:b3:58:9c:9b:38:f1:0a:d7:7f:b9:2a:05:b4:b4: 15:2f:a0:1c:6c:77:0b:c5:6f:7e:97:41:2e:4f:af: 7b:63:5f:2f:d3:42:22:0d:22:b5:31:3c:7f:7f:4b: d6:43:b5:23:a8:2e:be:2a:6d:41:54:98:17:12:ee: 2f:1a:33:8a:84:6b:2b:94:c9:3c:59:fd:9b:15:df: 04:53:e0:17:dd:06:3a:31:7a:20:65:8f:9b:db:89: e3:6f:70:13:1f:1a:e2:76:b5:2d:9a:b5:35:05:2e: ef:23:05:9a:b1:62:02:54:06:fe:71:d0:35:57:2c: 47:68:13:a5:48:96:cc:d0:77:6c:e4:8b:45:93:2e: 99:76:6c:96:bc:60:b6:3e:e8:5f:f0:d3:02:41:57: 35:f6:d8:23:8a:d3:0f:88:90:38:c1:0e:b9:30:80: a2:ff:5c:60:fa:87:fb:b2:6b:d5:b0:c8:03:44:35: a3:b9:aa:b1:0a:36:32:44:c9:9b:0e:ae:31:4a:15: c9:ca:fa:6c:99:b0:a5:77:f8:9c:f6:fb:e2:fb:1f: 06:ea:af:6b:0e:22:07:cb:2e:9f:2d:55:6c:43:c8: 76:e6:01:ba:56:dd:6e:1c:e3:f5:d4:1c:12:57:cc: aa:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:9F:97:97:7F:96:F8:EC:70:7F:CE:75:6A:48:BA:B1:EB:80:A5:7A X509v3 Authority Key Identifier: keyid:FE:4F:0E:88:F0:20:27:1F:AB:B0:94:01:07:AF:13:E8:0D:CC:A4:CE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/a8c068da-f9c5-4036-854b-922caa93f324/0/FE4F0E88F020271FABB0940107AF13E80DCCA4CE.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FE4F0E88F020271FABB0940107AF13E80DCCA4CE.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a8c068da-f9c5-4036-854b-922caa93f324/0/FE4F0E88F020271FABB0940107AF13E80DCCA4CE.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 25:99:63:e5:33:65:2b:b3:43:2b:09:fa:78:d2:90:5d:aa:3f: 28:b0:92:c0:f3:58:30:52:27:d6:bb:48:c4:6d:22:e7:b8:db: da:05:f7:7f:85:c7:c1:a0:57:8e:6e:be:a9:7e:69:fe:af:ac: be:5a:de:a1:97:28:a3:f4:7f:e5:92:60:46:a2:c4:02:92:2a: 39:d5:67:0f:98:b0:10:17:a3:92:37:20:1d:fc:ed:1b:05:64: a8:d7:33:74:b1:d4:82:f7:dc:e1:cd:33:4e:39:fc:20:33:d7: e4:a8:dd:b8:89:85:71:06:1b:35:c1:b3:ca:90:fb:62:6a:10: ae:b5:0b:f3:df:1e:af:b6:93:71:b8:02:7c:79:a5:7d:0d:74: d4:e8:81:eb:45:93:9a:81:2e:32:3d:8d:63:b4:09:c7:0f:84: cb:19:cd:56:a1:14:60:77:3b:20:bf:d2:a2:29:11:c9:d4:7d: 5e:c1:f3:56:b7:f9:83:2c:9d:7a:80:c9:ed:ce:e7:80:5d:59: 0e:b6:f3:01:97:fb:40:e8:dc:48:9f:92:25:3c:c9:7a:38:ff: 60:5f:ea:cb:f0:14:23:ed:9c:43:9d:4e:9b:41:bc:51:09:67: cd:e3:6c:dd:1f:a4:04:1f:17:c7:be:71:16:36:52:37:06:48: 54:a8:9c:b5 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUJbFcXZgECnVpq5JO1bGwRQjYPXowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRkU0RjBFODhGMDIwMjcxRkFCQjA5NDAxMDdBRjEzRTgw RENDQTRDRTAeFw0yNTEyMDUxODA1NTJaFw0yNTEyMDgyMDA1NTJaMDMxMTAvBgNV BAMTKEZGOUY5Nzk3N0Y5NkY4RUM3MDdGQ0U3NTZBNDhCQUIxRUI4MEE1N0EwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCo46/LITR4eUFm+jX4eEqzWJyb OPEK13+5KgW0tBUvoBxsdwvFb36XQS5Pr3tjXy/TQiINIrUxPH9/S9ZDtSOoLr4q bUFUmBcS7i8aM4qEayuUyTxZ/ZsV3wRT4BfdBjoxeiBlj5vbieNvcBMfGuJ2tS2a tTUFLu8jBZqxYgJUBv5x0DVXLEdoE6VIlszQd2zki0WTLpl2bJa8YLY+6F/w0wJB VzX22COK0w+IkDjBDrkwgKL/XGD6h/uya9WwyANENaO5qrEKNjJEyZsOrjFKFcnK +myZsKV3+Jz2++L7Hwbqr2sOIgfLLp8tVWxDyHbmAbpW3W4c4/XUHBJXzKpJAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU/5+Xl3+W+Oxwf851aki6seuApXowHwYDVR0j BBgwFoAU/k8OiPAgJx+rsJQBB68T6A3MpM4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h OGMwNjhkYS1mOWM1LTQwMzYtODU0Yi05MjJjYWE5M2YzMjQvMC9GRTRGMEU4OEYw MjAyNzFGQUJCMDk0MDEwN0FGMTNFODBEQ0NBNENFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRkU0RjBFODhGMDIwMjcxRkFCQjA5NDAxMDdBRjEzRTgwREND QTRDRS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYThjMDY4ZGEtZjljNS00MDM2LTg1 NGItOTIyY2FhOTNmMzI0LzAvRkU0RjBFODhGMDIwMjcxRkFCQjA5NDAxMDdBRjEz RTgwRENDQTRDRS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACWZY+UzZSuzQysJ+njSkF2qPyiwksDzWDBS J9a7SMRtIue429oF93+Fx8GgV45uvql+af6vrL5a3qGXKKP0f+WSYEaixAKSKjnV Zw+YsBAXo5I3IB387RsFZKjXM3Sx1IL33OHNM045/CAz1+So3biJhXEGGzXBs8qQ +2JqEK61C/PfHq+2k3G4Anx5pX0NdNTogetFk5qBLjI9jWO0CccPhMsZzVahFGB3 OyC/0qIpEcnUfV7B81a3+YMsnXqAye3O54BdWQ628wGX+0Do3EifkiU8yXo4/2Bf 6svwFCPtnEOdTptBvFEJZ83jbN0fpAQfF8e+cRY2UjcGSFSonLU= -----END CERTIFICATE-----Generated at Sun Dec 7 04:12:40 2025 by rpki-client