This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/af5cfba3-e017-4e8a-9ac5-f2d304317365/0/FC2E85BE9AC0A6BE53B792A489D50609F924187F.mft File: FC2E85BE9AC0A6BE53B792A489D50609F924187F.mft (raw, json) Hash identifier: dASpYTSmd53TOVZ6v4whMi+MlwTNUjmfMrffMexYFCI= Subject key identifier: EE:58:80:B4:4F:A7:87:F0:C3:F8:F3:C8:F1:0F:3E:80:6C:DE:E1:84 Authority key identifier: FC:2E:85:BE:9A:C0:A6:BE:53:B7:92:A4:89:D5:06:09:F9:24:18:7F Certificate issuer: /CN=FC2E85BE9AC0A6BE53B792A489D50609F924187F Certificate serial: 732F0CA0A3AB9A8866747BFA3E659A54F0A57C84 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FC2E85BE9AC0A6BE53B792A489D50609F924187F.cer Subject info access: rsync://repo-rpki.idnic.net/repo/af5cfba3-e017-4e8a-9ac5-f2d304317365/0/FC2E85BE9AC0A6BE53B792A489D50609F924187F.mft Manifest number: 052C Signing time: Fri 05 Dec 2025 06:21:11 +0000 Manifest this update: Fri 05 Dec 2025 06:16:11 +0000 Manifest next update: Mon 08 Dec 2025 08:54:11 +0000 Files and hashes: 1: 3130332e3131322e3138392e302f32342d3234203d3e20313337333332.roa (hash: fTPWv2oiJIx2qSggb2hiWiOmKdtYeAQZFu4dr/E9CSA=) 2: FC2E85BE9AC0A6BE53B792A489D50609F924187F.crl (hash: nPwxM8epZmcwiXiQWRtobY6QzkVmXo5oLEEPOEWmZlE=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/af5cfba3-e017-4e8a-9ac5-f2d304317365/0/FC2E85BE9AC0A6BE53B792A489D50609F924187F.crl rsync://repo-rpki.idnic.net/repo/af5cfba3-e017-4e8a-9ac5-f2d304317365/0/FC2E85BE9AC0A6BE53B792A489D50609F924187F.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FC2E85BE9AC0A6BE53B792A489D50609F924187F.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 08 Dec 2025 08:54:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 73:2f:0c:a0:a3:ab:9a:88:66:74:7b:fa:3e:65:9a:54:f0:a5:7c:84 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=FC2E85BE9AC0A6BE53B792A489D50609F924187F Validity Not Before: Dec 5 06:16:11 2025 GMT Not After : Dec 8 08:54:11 2025 GMT Subject: CN=EE5880B44FA787F0C3F8F3C8F10F3E806CDEE184 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:cd:79:00:fc:fb:c9:00:d8:99:74:db:f8:93: 47:00:8b:86:ef:ad:6a:bd:52:ed:e9:15:77:e2:40: 35:a2:ae:90:26:4c:23:84:55:53:68:f4:e7:ea:ca: 08:63:da:85:f7:a5:dc:26:9d:d2:ea:5c:3b:66:45: 79:8b:c1:f4:f8:37:48:17:1f:3f:34:0c:f1:c0:09: 6a:9f:41:f9:af:16:2b:c1:bb:b6:63:cd:1e:ac:6d: c4:04:af:59:d8:28:c5:f1:f0:66:dd:f9:da:00:0e: 97:65:1f:7f:da:22:c1:51:4e:ed:4d:31:6c:85:03: 6b:d4:92:70:4e:3e:13:11:e9:62:ef:c4:c6:c4:1e: a3:55:9e:57:fc:1e:f7:07:a4:5d:8a:61:ec:62:0a: a6:7e:bc:89:b0:e4:0c:3b:9b:f8:cf:00:34:74:ce: a7:77:1b:0c:bd:76:b2:21:80:78:29:7b:d5:be:ce: 87:ae:38:f2:b6:c3:0d:2a:3f:ae:a4:ec:fa:c0:1b: 7a:46:5b:12:86:90:1d:05:a8:06:2c:45:0a:d8:cf: 38:9c:74:3f:db:50:44:d2:c8:13:bf:1e:17:7b:9d: 00:9a:f4:fe:5d:b5:51:ef:5f:08:3d:84:2f:85:2e: 27:ac:29:61:ec:6e:5e:64:31:4d:93:43:ce:67:8f: 84:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EE:58:80:B4:4F:A7:87:F0:C3:F8:F3:C8:F1:0F:3E:80:6C:DE:E1:84 X509v3 Authority Key Identifier: keyid:FC:2E:85:BE:9A:C0:A6:BE:53:B7:92:A4:89:D5:06:09:F9:24:18:7F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/af5cfba3-e017-4e8a-9ac5-f2d304317365/0/FC2E85BE9AC0A6BE53B792A489D50609F924187F.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FC2E85BE9AC0A6BE53B792A489D50609F924187F.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/af5cfba3-e017-4e8a-9ac5-f2d304317365/0/FC2E85BE9AC0A6BE53B792A489D50609F924187F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ab:bd:6c:3e:31:83:78:59:3b:55:de:52:d6:e8:4a:c3:d3:7f: 2f:54:05:3b:4d:09:75:ae:ef:7c:d4:46:f6:7a:d1:b2:d7:d1: 1a:37:da:e6:44:15:7d:17:cd:df:19:17:78:89:7d:44:c3:86: a5:8f:8c:96:ea:be:6c:41:0a:b4:95:96:19:8c:73:ba:45:21: 85:5e:97:18:67:ae:ed:b4:7c:1b:7f:0f:35:7e:7a:86:06:83: f3:47:3b:1b:78:38:e0:8d:24:78:4d:b7:9a:bc:09:e9:0f:8a: 33:f1:25:01:1c:f3:77:17:7f:48:6e:cc:86:ec:ca:bf:e3:01: 5b:bc:56:f9:01:60:df:5a:84:a3:6b:e2:e2:00:df:51:fb:d0: 31:03:ea:8b:78:84:6e:bf:77:45:74:81:3e:62:5b:cd:b4:e4: 79:8c:47:26:46:f3:2a:1f:26:4d:44:da:10:eb:87:b8:0f:fd: 99:dd:b0:f5:36:5f:aa:f0:44:96:ef:54:05:41:c2:a8:48:cd: 92:58:e8:e5:a9:c3:11:fe:0f:48:32:d7:93:64:be:02:60:ec: 51:50:20:41:ff:cb:65:58:a5:86:07:19:28:bb:f3:3f:c4:91: 53:30:14:77:f1:ef:a2:66:71:ad:a5:e8:95:ac:1d:2c:84:de: 3f:0d:2d:b0 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUcy8MoKOrmohmdHv6PmWaVPClfIQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRkMyRTg1QkU5QUMwQTZCRTUzQjc5MkE0ODlENTA2MDlG OTI0MTg3RjAeFw0yNTEyMDUwNjE2MTFaFw0yNTEyMDgwODU0MTFaMDMxMTAvBgNV BAMTKEVFNTg4MEI0NEZBNzg3RjBDM0Y4RjNDOEYxMEYzRTgwNkNERUUxODQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCuzXkA/PvJANiZdNv4k0cAi4bv rWq9Uu3pFXfiQDWirpAmTCOEVVNo9Ofqyghj2oX3pdwmndLqXDtmRXmLwfT4N0gX Hz80DPHACWqfQfmvFivBu7ZjzR6sbcQEr1nYKMXx8Gbd+doADpdlH3/aIsFRTu1N MWyFA2vUknBOPhMR6WLvxMbEHqNVnlf8HvcHpF2KYexiCqZ+vImw5Aw7m/jPADR0 zqd3Gwy9drIhgHgpe9W+zoeuOPK2ww0qP66k7PrAG3pGWxKGkB0FqAYsRQrYzzic dD/bUETSyBO/Hhd7nQCa9P5dtVHvXwg9hC+FLiesKWHsbl5kMU2TQ85nj4TnAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU7liAtE+nh/DD+PPI8Q8+gGze4YQwHwYDVR0j BBgwFoAU/C6FvprApr5Tt5KkidUGCfkkGH8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h ZjVjZmJhMy1lMDE3LTRlOGEtOWFjNS1mMmQzMDQzMTczNjUvMC9GQzJFODVCRTlB QzBBNkJFNTNCNzkyQTQ4OUQ1MDYwOUY5MjQxODdGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRkMyRTg1QkU5QUMwQTZCRTUzQjc5MkE0ODlENTA2MDlGOTI0 MTg3Ri5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYWY1Y2ZiYTMtZTAxNy00ZThhLTlh YzUtZjJkMzA0MzE3MzY1LzAvRkMyRTg1QkU5QUMwQTZCRTUzQjc5MkE0ODlENTA2 MDlGOTI0MTg3Ri5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKu9bD4xg3hZO1XeUtboSsPTfy9UBTtNCXWu 73zURvZ60bLX0Ro32uZEFX0Xzd8ZF3iJfUTDhqWPjJbqvmxBCrSVlhmMc7pFIYVe lxhnru20fBt/DzV+eoYGg/NHOxt4OOCNJHhNt5q8CekPijPxJQEc83cXf0huzIbs yr/jAVu8VvkBYN9ahKNr4uIA31H70DED6ot4hG6/d0V0gT5iW8205HmMRyZG8yof Jk1E2hDrh7gP/ZndsPU2X6rwRJbvVAVBwqhIzZJY6OWpwxH+D0gy15NkvgJg7FFQ IEH/y2VYpYYHGSi78z/EkVMwFHfx76Jmca2l6JWsHSyE3j8NLbA= -----END CERTIFICATE-----Generated at Sun Dec 7 04:52:12 2025 by rpki-client