This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/1653247a-a56e-424a-a07b-36a2511d7caa/0/FE880CC93B6284E6833106A5BEB71A0CDDE57C0B.mft File: FE880CC93B6284E6833106A5BEB71A0CDDE57C0B.mft (raw, json) Hash identifier: xCX9IsGlw/JPaEcgRZsV2quAqEh2b+/YK0Q20JFi3rk= Subject key identifier: 4E:99:B6:8B:88:98:A1:E6:6E:43:30:A7:B3:49:5E:58:A7:50:0A:C7 Authority key identifier: FE:88:0C:C9:3B:62:84:E6:83:31:06:A5:BE:B7:1A:0C:DD:E5:7C:0B Certificate issuer: /CN=FE880CC93B6284E6833106A5BEB71A0CDDE57C0B Certificate serial: 3B8094A638C97FBF0B3003F35A3BC5F28766C807 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FE880CC93B6284E6833106A5BEB71A0CDDE57C0B.cer Subject info access: rsync://repo-rpki.idnic.net/repo/1653247a-a56e-424a-a07b-36a2511d7caa/0/FE880CC93B6284E6833106A5BEB71A0CDDE57C0B.mft Manifest number: 0217 Signing time: Wed 03 Dec 2025 12:02:11 +0000 Manifest this update: Wed 03 Dec 2025 11:57:11 +0000 Manifest next update: Sat 06 Dec 2025 15:18:11 +0000 Files and hashes: 1: 3130332e31332e3133392e302f32342d3234203d3e20313530323135.roa (hash: cU1g8IvJ9xTyNpUSLD7UlYtWkf7YESigdS5w5xzxaBQ=) 2: 3130332e31332e3133382e302f32342d3234203d3e20313530323135.roa (hash: 6ADoYkeIrhNdhv/k4Oyj/4jDcP6VkQMjB86DXlVYGIc=) 3: FE880CC93B6284E6833106A5BEB71A0CDDE57C0B.crl (hash: KvQ726gDlcIK9gQrkEC1daIfxLdBQG8HAzsxWpyZX18=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/1653247a-a56e-424a-a07b-36a2511d7caa/0/FE880CC93B6284E6833106A5BEB71A0CDDE57C0B.crl rsync://repo-rpki.idnic.net/repo/1653247a-a56e-424a-a07b-36a2511d7caa/0/FE880CC93B6284E6833106A5BEB71A0CDDE57C0B.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FE880CC93B6284E6833106A5BEB71A0CDDE57C0B.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 06 Dec 2025 12:07:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3b:80:94:a6:38:c9:7f:bf:0b:30:03:f3:5a:3b:c5:f2:87:66:c8:07 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=FE880CC93B6284E6833106A5BEB71A0CDDE57C0B Validity Not Before: Dec 3 11:57:11 2025 GMT Not After : Dec 6 15:18:11 2025 GMT Subject: CN=4E99B68B8898A1E66E4330A7B3495E58A7500AC7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:1a:f3:13:eb:fe:99:8b:28:33:b9:9b:5c:20: a5:50:27:24:8f:b7:22:2a:73:6e:6d:d7:df:07:1e: 3c:0a:c0:e0:65:9b:bf:1e:3d:34:a7:69:e6:d8:1d: f7:22:51:c0:7f:13:77:77:75:dd:d2:d6:0a:eb:9c: d2:37:a0:d7:ab:12:1e:39:2d:69:90:92:f4:9e:43: 94:98:f7:fd:d0:96:e6:1b:42:2c:56:78:6d:ed:7c: 43:b5:75:d5:dd:82:77:06:e4:0f:88:f0:e8:f0:75: 60:15:3c:2f:aa:26:82:67:ae:83:b2:42:fc:b1:f9: a5:66:a1:c4:13:70:3f:71:3e:d8:42:53:50:50:ca: 47:e4:97:20:6e:ad:a2:c2:52:c8:ab:47:c4:da:e5: 33:65:57:9f:95:e3:50:4e:2c:1f:e3:b2:4f:c3:d7: 4c:f3:dd:38:cf:5f:81:28:10:00:7f:cf:d6:a8:a0: 9e:19:b1:2e:4e:52:40:89:30:2e:37:b6:9c:77:97: ed:a0:52:16:f6:ec:37:ff:06:a6:ee:7d:ba:4e:7c: 93:05:a9:8a:7c:de:e3:e9:1c:01:e4:53:59:80:28: c1:33:da:f2:1b:e3:77:be:89:6a:66:2b:9c:9e:cc: 72:5f:65:bc:64:6f:df:6d:17:1c:54:e8:6f:0e:2e: 2a:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:99:B6:8B:88:98:A1:E6:6E:43:30:A7:B3:49:5E:58:A7:50:0A:C7 X509v3 Authority Key Identifier: keyid:FE:88:0C:C9:3B:62:84:E6:83:31:06:A5:BE:B7:1A:0C:DD:E5:7C:0B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/1653247a-a56e-424a-a07b-36a2511d7caa/0/FE880CC93B6284E6833106A5BEB71A0CDDE57C0B.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FE880CC93B6284E6833106A5BEB71A0CDDE57C0B.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/1653247a-a56e-424a-a07b-36a2511d7caa/0/FE880CC93B6284E6833106A5BEB71A0CDDE57C0B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 42:d6:f2:09:5e:2f:9f:1e:70:9f:ae:03:12:e1:3c:66:e1:b4: c7:91:0a:0b:12:fd:94:a8:af:f4:26:d2:99:14:85:b9:83:e8: 65:75:18:0c:33:f0:cc:14:fe:3c:12:16:36:29:42:9c:be:ca: 8d:08:09:51:37:de:1f:7b:59:23:60:dd:6b:2e:8b:4e:22:dc: 4e:2c:5d:2f:41:90:f5:3c:0a:0b:96:e4:17:78:de:07:57:da: 46:2e:8f:94:44:2c:17:8b:c9:a2:47:a2:70:f4:3e:c1:9d:fe: d8:da:a6:78:64:15:6b:e3:c1:32:31:da:f9:71:64:d0:dc:3a: 66:74:b8:4b:72:28:ed:6f:65:9c:a1:86:8c:f4:87:47:79:0c: 1c:4b:70:9f:ba:36:19:54:5b:c3:3e:4a:9c:85:9d:54:a4:10: 18:24:e3:b6:03:fb:c2:8a:eb:42:7b:c8:51:86:e6:1d:83:a5: 44:96:d1:1c:84:ea:e3:9f:f3:9f:c4:b2:48:83:59:8a:81:c1: 25:07:32:a7:40:db:38:0a:88:32:0c:85:81:e6:bc:c1:3e:ed: 60:ee:bc:46:be:01:c2:2f:8e:cc:d1:18:af:3d:e9:92:18:7d: 05:a5:ab:e2:0e:68:4a:87:17:76:e2:57:12:73:63:53:21:a6: cb:f7:38:a1 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUO4CUpjjJf78LMAPzWjvF8odmyAcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRkU4ODBDQzkzQjYyODRFNjgzMzEwNkE1QkVCNzFBMENE REU1N0MwQjAeFw0yNTEyMDMxMTU3MTFaFw0yNTEyMDYxNTE4MTFaMDMxMTAvBgNV BAMTKDRFOTlCNjhCODg5OEExRTY2RTQzMzBBN0IzNDk1RTU4QTc1MDBBQzcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC3GvMT6/6ZiygzuZtcIKVQJySP tyIqc25t198HHjwKwOBlm78ePTSnaebYHfciUcB/E3d3dd3S1grrnNI3oNerEh45 LWmQkvSeQ5SY9/3QluYbQixWeG3tfEO1ddXdgncG5A+I8OjwdWAVPC+qJoJnroOy Qvyx+aVmocQTcD9xPthCU1BQykfklyBuraLCUsirR8Ta5TNlV5+V41BOLB/jsk/D 10zz3TjPX4EoEAB/z9aooJ4ZsS5OUkCJMC43tpx3l+2gUhb27Df/BqbufbpOfJMF qYp83uPpHAHkU1mAKMEz2vIb43e+iWpmK5yezHJfZbxkb99tFxxU6G8OLiq1AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUTpm2i4iYoeZuQzCns0leWKdQCscwHwYDVR0j BBgwFoAU/ogMyTtihOaDMQalvrcaDN3lfAswDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x NjUzMjQ3YS1hNTZlLTQyNGEtYTA3Yi0zNmEyNTExZDdjYWEvMC9GRTg4MENDOTNC NjI4NEU2ODMzMTA2QTVCRUI3MUEwQ0RERTU3QzBCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRkU4ODBDQzkzQjYyODRFNjgzMzEwNkE1QkVCNzFBMENEREU1 N0MwQi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMTY1MzI0N2EtYTU2ZS00MjRhLWEw N2ItMzZhMjUxMWQ3Y2FhLzAvRkU4ODBDQzkzQjYyODRFNjgzMzEwNkE1QkVCNzFB MENEREU1N0MwQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAELW8gleL58ecJ+uAxLhPGbhtMeRCgsS/ZSo r/Qm0pkUhbmD6GV1GAwz8MwU/jwSFjYpQpy+yo0ICVE33h97WSNg3Wsui04i3E4s XS9BkPU8CguW5Bd43gdX2kYuj5RELBeLyaJHonD0PsGd/tjapnhkFWvjwTIx2vlx ZNDcOmZ0uEtyKO1vZZyhhoz0h0d5DBxLcJ+6NhlUW8M+SpyFnVSkEBgk47YD+8KK 60J7yFGG5h2DpUSW0RyE6uOf85/EskiDWYqBwSUHMqdA2zgKiDIMhYHmvME+7WDu vEa+AcIvjszRGK896ZIYfQWlq+IOaEqHF3biVxJzY1Mhpsv3OKE= -----END CERTIFICATE-----Generated at Wed Dec 3 14:45:56 2025 by rpki-client