This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/0461d7a7-a11e-400b-9170-c797ed88d702/0/FED855DD505D24B6FE25BD8656297329F7EF4785.mft File: FED855DD505D24B6FE25BD8656297329F7EF4785.mft (raw, json) Hash identifier: qGsjgPblhryila9pU+L1JddapTMW8RKy4/7xzjlrjew= Subject key identifier: 7F:44:77:F2:BC:B2:16:41:1B:0A:FD:F5:F2:83:7A:6B:C9:6F:B9:D7 Authority key identifier: FE:D8:55:DD:50:5D:24:B6:FE:25:BD:86:56:29:73:29:F7:EF:47:85 Certificate issuer: /CN=FED855DD505D24B6FE25BD8656297329F7EF4785 Certificate serial: 74C1A78DD84CE1EBC1D3D986D8CB9A64453AFDE4 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FED855DD505D24B6FE25BD8656297329F7EF4785.cer Subject info access: rsync://repo-rpki.idnic.net/repo/0461d7a7-a11e-400b-9170-c797ed88d702/0/FED855DD505D24B6FE25BD8656297329F7EF4785.mft Manifest number: 04AE Signing time: Fri 19 Dec 2025 15:22:02 +0000 Manifest this update: Fri 19 Dec 2025 15:17:02 +0000 Manifest next update: Tue 23 Dec 2025 01:16:02 +0000 Files and hashes: 1: 3130332e3130352e3132382e302f32342d3234203d3e203137373237.roa (hash: X2PEKknjtTcnLsrGiadMk08xxZNciTvdVjNrgOP4sHk=) 2: FED855DD505D24B6FE25BD8656297329F7EF4785.crl (hash: 4Ssgts2NAUECpW2HVaap5ZSUzxyZ/6hoxqmkzvipuDU=) 3: 3130332e3130352e3132392e302f32342d3234203d3e203137373237.roa (hash: hPyIxp0hj3k+joStahsmifFKwjq2yL5rkOsyq1Wlc34=) 4: 3130332e3130352e3133312e302f32342d3234203d3e203137373237.roa (hash: MeNQV5B+OerhDUDBOkfR5BHmeZ2GFCk+XtpnzmEeM9I=) 5: 3130332e3130352e3133302e302f32342d3234203d3e203137373237.roa (hash: yMrj8AoB/ixjd6PVgwO256Xjq06xuds8sgMBoLkTbyM=) 6: 3130332e3130352e3132382e302f32322d3232203d3e203137373237.roa (hash: IhDRQtUCQIm4IOPr5vP9tEfWgB4QjIXQlUOAr7HBNq4=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/0461d7a7-a11e-400b-9170-c797ed88d702/0/FED855DD505D24B6FE25BD8656297329F7EF4785.crl rsync://repo-rpki.idnic.net/repo/0461d7a7-a11e-400b-9170-c797ed88d702/0/FED855DD505D24B6FE25BD8656297329F7EF4785.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FED855DD505D24B6FE25BD8656297329F7EF4785.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 23 Dec 2025 00:38:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 74:c1:a7:8d:d8:4c:e1:eb:c1:d3:d9:86:d8:cb:9a:64:45:3a:fd:e4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=FED855DD505D24B6FE25BD8656297329F7EF4785 Validity Not Before: Dec 19 15:17:02 2025 GMT Not After : Dec 23 01:16:02 2025 GMT Subject: CN=7F4477F2BCB216411B0AFDF5F2837A6BC96FB9D7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:60:1b:3d:01:3f:0c:50:31:9f:94:ed:69:fd: c0:1d:85:0e:ab:00:fd:f9:c6:9d:78:aa:7f:09:3d: a4:4c:a4:64:55:3b:80:d3:51:da:d0:44:64:a9:82: cc:70:ff:c4:62:40:b2:98:55:3b:7b:1e:9c:c2:e5: 6b:0a:7d:b4:e0:94:0f:be:78:75:d5:16:81:cf:89: 3b:b7:be:e9:04:0b:4a:2d:f3:30:6f:47:fb:33:67: 05:32:3a:d5:9a:86:89:70:91:ec:7b:57:99:b4:d6: e5:98:39:80:d6:79:2e:c4:c2:fe:2c:f3:27:ac:13: 84:ec:b6:f2:57:69:88:a8:9c:43:b9:14:69:a5:f3: bd:12:5f:a3:45:ce:cf:7e:ef:b1:77:f1:b0:07:f0: b9:bd:c2:96:69:8b:9d:43:66:11:4a:fe:c4:02:d2: f9:70:26:53:36:9f:45:76:ca:ad:63:9a:9a:c4:f0: ee:dd:be:fd:41:d8:f8:20:db:6f:2a:2a:56:31:72: d1:3e:fd:84:00:1a:af:fb:dc:1f:50:ce:25:72:09: 99:1d:28:94:37:1a:83:e4:5d:9a:1c:3a:99:56:b0: 88:07:2f:d9:52:36:d2:4b:db:4f:bf:fd:b5:7c:d5: 70:86:21:55:61:c5:77:68:51:c9:05:18:47:b6:24: 63:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7F:44:77:F2:BC:B2:16:41:1B:0A:FD:F5:F2:83:7A:6B:C9:6F:B9:D7 X509v3 Authority Key Identifier: keyid:FE:D8:55:DD:50:5D:24:B6:FE:25:BD:86:56:29:73:29:F7:EF:47:85 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/0461d7a7-a11e-400b-9170-c797ed88d702/0/FED855DD505D24B6FE25BD8656297329F7EF4785.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FED855DD505D24B6FE25BD8656297329F7EF4785.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/0461d7a7-a11e-400b-9170-c797ed88d702/0/FED855DD505D24B6FE25BD8656297329F7EF4785.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a3:e1:2f:9d:ed:ef:67:40:ae:9e:66:92:0c:78:02:98:e9:da: 68:40:78:8f:98:d2:95:b1:2d:97:a1:64:31:87:ca:6f:c0:af: 96:92:56:a5:2d:fb:9c:e6:01:35:07:a7:be:36:37:d1:a3:a1: 09:72:a1:f0:7a:9f:5f:00:1f:14:fc:33:3a:e0:b0:df:6e:1c: 35:ce:f3:89:3b:43:5e:e2:c1:a1:ae:9e:d2:fe:3f:15:f8:21: a8:dc:04:fd:0f:cc:27:3a:a5:57:d3:c7:f4:49:c2:49:8c:f2: d9:2d:95:ee:08:66:44:5c:0a:95:5b:10:c3:44:cd:f6:c5:ef: f2:d8:a4:47:64:6e:58:c0:8f:2f:55:28:2f:95:f4:ec:ca:de: 69:f1:9b:28:65:75:25:08:2f:2e:2c:7f:44:82:be:21:7b:95: 67:8e:88:72:90:2c:73:a0:e9:de:8b:da:22:c8:7e:6d:f2:1a: 9d:0c:a4:c6:30:79:c4:89:04:04:33:54:ca:c4:5b:91:24:13: a1:46:3d:f3:a5:5b:f8:7e:71:95:fa:f6:3a:1d:36:ab:3e:d5: 5e:d3:ad:48:ab:48:c1:3c:ae:85:cb:68:ad:10:d2:70:51:d7: 05:28:d1:b1:3a:1a:88:60:55:4d:71:b6:52:cf:44:c5:28:ec: bc:ae:26:c9 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUdMGnjdhM4evB09mG2MuaZEU6/eQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRkVEODU1REQ1MDVEMjRCNkZFMjVCRDg2NTYyOTczMjlG N0VGNDc4NTAeFw0yNTEyMTkxNTE3MDJaFw0yNTEyMjMwMTE2MDJaMDMxMTAvBgNV BAMTKDdGNDQ3N0YyQkNCMjE2NDExQjBBRkRGNUYyODM3QTZCQzk2RkI5RDcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDaYBs9AT8MUDGflO1p/cAdhQ6r AP35xp14qn8JPaRMpGRVO4DTUdrQRGSpgsxw/8RiQLKYVTt7HpzC5WsKfbTglA++ eHXVFoHPiTu3vukEC0ot8zBvR/szZwUyOtWaholwkex7V5m01uWYOYDWeS7Ewv4s 8yesE4TstvJXaYionEO5FGml870SX6NFzs9+77F38bAH8Lm9wpZpi51DZhFK/sQC 0vlwJlM2n0V2yq1jmprE8O7dvv1B2Pgg228qKlYxctE+/YQAGq/73B9QziVyCZkd KJQ3GoPkXZocOplWsIgHL9lSNtJL20+//bV81XCGIVVhxXdoUckFGEe2JGNrAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUf0R38ryyFkEbCv318oN6a8lvudcwHwYDVR0j BBgwFoAU/thV3VBdJLb+Jb2GVilzKffvR4UwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w NDYxZDdhNy1hMTFlLTQwMGItOTE3MC1jNzk3ZWQ4OGQ3MDIvMC9GRUQ4NTVERDUw NUQyNEI2RkUyNUJEODY1NjI5NzMyOUY3RUY0Nzg1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRkVEODU1REQ1MDVEMjRCNkZFMjVCRDg2NTYyOTczMjlGN0VG NDc4NS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMDQ2MWQ3YTctYTExZS00MDBiLTkx NzAtYzc5N2VkODhkNzAyLzAvRkVEODU1REQ1MDVEMjRCNkZFMjVCRDg2NTYyOTcz MjlGN0VGNDc4NS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKPhL53t72dArp5mkgx4Apjp2mhAeI+Y0pWx LZehZDGHym/Ar5aSVqUt+5zmATUHp742N9GjoQlyofB6n18AHxT8MzrgsN9uHDXO 84k7Q17iwaGuntL+PxX4IajcBP0PzCc6pVfTx/RJwkmM8tktle4IZkRcCpVbEMNE zfbF7/LYpEdkbljAjy9VKC+V9OzK3mnxmyhldSUILy4sf0SCviF7lWeOiHKQLHOg 6d6L2iLIfm3yGp0MpMYwecSJBAQzVMrEW5EkE6FGPfOlW/h+cZX69jodNqs+1V7T rUirSME8roXLaK0Q0nBR1wUo0bE6GohgVU1xtlLPRMUo7LyuJsk= -----END CERTIFICATE-----Generated at Sat Dec 20 02:01:25 2025 by rpki-client