This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/dae13bac-91c1-463b-8333-64eec6d2797e/0/FD18E3ECB5F2285C0751C48EAF23EF210BA8FDCC.mft File: FD18E3ECB5F2285C0751C48EAF23EF210BA8FDCC.mft (raw, json) Hash identifier: BWaBKZ82kTH5M3BkPOtu3RcijT+1LmZ2dyKWWdmWJH8= Subject key identifier: 27:D0:1F:3C:EC:9F:8A:4B:45:72:99:AA:FD:DA:3A:58:06:7C:88:10 Authority key identifier: FD:18:E3:EC:B5:F2:28:5C:07:51:C4:8E:AF:23:EF:21:0B:A8:FD:CC Certificate issuer: /CN=FD18E3ECB5F2285C0751C48EAF23EF210BA8FDCC Certificate serial: 475E24F14B76544576ADCF2DC89170F5A240F0E2 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/FD18E3ECB5F2285C0751C48EAF23EF210BA8FDCC.cer Subject info access: rsync://repo-rpki.idnic.net/repo/dae13bac-91c1-463b-8333-64eec6d2797e/0/FD18E3ECB5F2285C0751C48EAF23EF210BA8FDCC.mft Manifest number: 0119 Signing time: Sat 06 Dec 2025 06:11:16 +0000 Manifest this update: Sat 06 Dec 2025 06:06:16 +0000 Manifest next update: Tue 09 Dec 2025 07:52:16 +0000 Files and hashes: 1: FD18E3ECB5F2285C0751C48EAF23EF210BA8FDCC.crl (hash: BBU7+668mcfzw1payD+Ir4aWqfuoXEaKzMselOtP7S8=) 2: 3135372e32302e39352e302f32342d3234203d3e20313431363032.roa (hash: 88y84elDiek3O/IhTaNMS2vLlPQVqlAnqgDoLBdJafc=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/dae13bac-91c1-463b-8333-64eec6d2797e/0/FD18E3ECB5F2285C0751C48EAF23EF210BA8FDCC.crl rsync://repo-rpki.idnic.net/repo/dae13bac-91c1-463b-8333-64eec6d2797e/0/FD18E3ECB5F2285C0751C48EAF23EF210BA8FDCC.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/FD18E3ECB5F2285C0751C48EAF23EF210BA8FDCC.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 09 Dec 2025 06:55:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 47:5e:24:f1:4b:76:54:45:76:ad:cf:2d:c8:91:70:f5:a2:40:f0:e2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=FD18E3ECB5F2285C0751C48EAF23EF210BA8FDCC Validity Not Before: Dec 6 06:06:16 2025 GMT Not After : Dec 9 07:52:16 2025 GMT Subject: CN=27D01F3CEC9F8A4B457299AAFDDA3A58067C8810 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:b2:e6:b7:1d:07:09:b1:b8:be:fd:af:b0:b0: 1f:20:a8:1e:1e:56:17:d2:2c:14:92:85:46:83:33: 8c:c0:71:b4:e5:4d:ca:35:bd:5b:6d:cf:0e:a5:81: a5:37:58:ac:30:45:47:e2:37:11:62:f5:59:4f:7e: 27:e5:8b:b7:93:ab:69:b1:3d:7d:88:57:93:08:2a: f7:77:77:ed:5d:5e:76:e8:23:89:94:ca:0d:e3:f5: bc:0b:8c:06:a5:1c:02:fc:d9:dc:f1:10:9d:28:54: 49:d7:76:84:98:88:0f:40:5e:6c:ba:18:f5:4e:b8: 19:6d:f3:dd:8e:14:88:11:df:c3:39:d0:56:3d:62: fa:b7:ea:5d:8e:7e:7c:c6:9f:61:8d:dd:a1:25:fd: ff:ce:1e:72:fc:b1:29:5e:ef:0f:bf:45:10:0e:45: fe:c0:3d:88:18:e4:3a:bd:9a:3b:d5:83:f5:32:d7: f7:67:e3:04:ae:69:6f:1f:b9:8f:a2:81:9f:86:e4: d7:65:f4:f6:d0:46:0d:ca:ef:65:66:ca:17:d3:8b: fe:bb:04:7b:a1:71:14:e6:cf:5f:88:de:96:f5:68: c2:c2:09:b6:84:aa:08:8d:2c:25:08:fd:9b:b9:e6: 1a:ba:70:5e:be:6b:5e:09:95:a2:52:4d:6d:9b:4b: e1:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 27:D0:1F:3C:EC:9F:8A:4B:45:72:99:AA:FD:DA:3A:58:06:7C:88:10 X509v3 Authority Key Identifier: keyid:FD:18:E3:EC:B5:F2:28:5C:07:51:C4:8E:AF:23:EF:21:0B:A8:FD:CC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/dae13bac-91c1-463b-8333-64eec6d2797e/0/FD18E3ECB5F2285C0751C48EAF23EF210BA8FDCC.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/FD18E3ECB5F2285C0751C48EAF23EF210BA8FDCC.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/dae13bac-91c1-463b-8333-64eec6d2797e/0/FD18E3ECB5F2285C0751C48EAF23EF210BA8FDCC.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5e:d4:ea:22:c7:8c:39:49:4c:2f:01:54:3a:6a:9c:42:ae:2c: 25:63:84:bd:1f:8d:0e:6e:92:0f:05:87:ef:93:b9:f2:1d:0c: ac:17:05:3a:4e:0c:c6:d2:c5:f8:49:ec:72:3e:ac:13:2e:34: 9f:89:26:59:5e:bc:66:d7:e0:7d:9e:a7:30:48:62:52:09:88: 5b:4b:b5:d5:ed:bf:6b:d8:2b:36:3e:74:9a:7f:7f:77:0a:23: 8a:bb:73:a5:9a:a7:d1:71:b2:8f:17:a0:9b:0a:b1:46:17:c5: 7d:55:08:3f:39:7e:04:0c:37:33:f2:2a:7f:e9:89:21:db:10: 67:b3:c4:57:42:29:d1:ab:39:06:d6:f5:70:36:3b:74:45:d9: 96:b0:bc:61:9f:7f:3f:3a:33:76:6c:79:07:7a:29:37:1d:61: fd:65:cc:14:1f:6a:14:2e:46:13:78:e7:9c:6e:04:ee:f2:f1: 11:68:76:99:3f:74:04:4c:a3:7a:9b:37:09:7d:99:44:10:98: 77:07:57:c8:22:e6:26:7f:df:f1:f3:09:75:51:74:1d:03:a5: c0:f5:43:4f:93:12:59:ac:12:8f:36:24:bd:6c:73:c3:50:c7: 39:74:bc:1a:e0:0e:44:29:bf:0c:84:0b:53:44:79:29:e9:f2: a2:f4:ec:c9 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUR14k8Ut2VEV2rc8tyJFw9aJA8OIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRkQxOEUzRUNCNUYyMjg1QzA3NTFDNDhFQUYyM0VGMjEw QkE4RkRDQzAeFw0yNTEyMDYwNjA2MTZaFw0yNTEyMDkwNzUyMTZaMDMxMTAvBgNV BAMTKDI3RDAxRjNDRUM5RjhBNEI0NTcyOTlBQUZEREEzQTU4MDY3Qzg4MTAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDgsua3HQcJsbi+/a+wsB8gqB4e VhfSLBSShUaDM4zAcbTlTco1vVttzw6lgaU3WKwwRUfiNxFi9VlPfifli7eTq2mx PX2IV5MIKvd3d+1dXnboI4mUyg3j9bwLjAalHAL82dzxEJ0oVEnXdoSYiA9AXmy6 GPVOuBlt892OFIgR38M50FY9Yvq36l2OfnzGn2GN3aEl/f/OHnL8sSle7w+/RRAO Rf7APYgY5Dq9mjvVg/Uy1/dn4wSuaW8fuY+igZ+G5Ndl9PbQRg3K72VmyhfTi/67 BHuhcRTmz1+I3pb1aMLCCbaEqgiNLCUI/Zu55hq6cF6+a14JlaJSTW2bS+EPAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUJ9AfPOyfiktFcpmq/do6WAZ8iBAwHwYDVR0j BBgwFoAU/Rjj7LXyKFwHUcSOryPvIQuo/cwwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k YWUxM2JhYy05MWMxLTQ2M2ItODMzMy02NGVlYzZkMjc5N2UvMC9GRDE4RTNFQ0I1 RjIyODVDMDc1MUM0OEVBRjIzRUYyMTBCQThGRENDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvRkQxOEUzRUNCNUYyMjg1QzA3NTFDNDhFQUYyM0VGMjEwQkE4 RkRDQy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZGFlMTNiYWMtOTFjMS00NjNiLTgz MzMtNjRlZWM2ZDI3OTdlLzAvRkQxOEUzRUNCNUYyMjg1QzA3NTFDNDhFQUYyM0VG MjEwQkE4RkRDQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAF7U6iLHjDlJTC8BVDpqnEKuLCVjhL0fjQ5u kg8Fh++TufIdDKwXBTpODMbSxfhJ7HI+rBMuNJ+JJllevGbX4H2epzBIYlIJiFtL tdXtv2vYKzY+dJp/f3cKI4q7c6Wap9Fxso8XoJsKsUYXxX1VCD85fgQMNzPyKn/p iSHbEGezxFdCKdGrOQbW9XA2O3RF2ZawvGGffz86M3ZseQd6KTcdYf1lzBQfahQu RhN455xuBO7y8RFodpk/dARMo3qbNwl9mUQQmHcHV8gi5iZ/3/HzCXVRdB0DpcD1 Q0+TElmsEo82JL1sc8NQxzl0vBrgDkQpvwyEC1NEeSnp8qL07Mk= -----END CERTIFICATE-----Generated at Sat Dec 6 17:56:12 2025 by rpki-client