This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/5b9752f6-6066-4b38-87cc-9ba63d19e22c/0/FC1C6395AD65E53AB9BC4BBD451AE79234BF63D7.mft File: FC1C6395AD65E53AB9BC4BBD451AE79234BF63D7.mft (raw, json) Hash identifier: xHglX3lKwHD3m3lg1AWjqPgo4alDB7+7U/O5Oc3N+ps= Subject key identifier: A2:01:6C:35:5D:E1:40:AC:AE:34:BA:46:58:F2:0B:7A:49:81:D0:39 Authority key identifier: FC:1C:63:95:AD:65:E5:3A:B9:BC:4B:BD:45:1A:E7:92:34:BF:63:D7 Certificate issuer: /CN=FC1C6395AD65E53AB9BC4BBD451AE79234BF63D7 Certificate serial: 573D2908D23B7F6A4A5F2EF4B20D7F1FDE3443CC Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FC1C6395AD65E53AB9BC4BBD451AE79234BF63D7.cer Subject info access: rsync://repo-rpki.idnic.net/repo/5b9752f6-6066-4b38-87cc-9ba63d19e22c/0/FC1C6395AD65E53AB9BC4BBD451AE79234BF63D7.mft Manifest number: 04EA Signing time: Wed 03 Dec 2025 06:52:12 +0000 Manifest this update: Wed 03 Dec 2025 06:47:12 +0000 Manifest next update: Sat 06 Dec 2025 18:03:12 +0000 Files and hashes: 1: 3130332e33392e35322e302f32342d3234203d3e203633353033.roa (hash: Bw5xJfUWgUnZZKn8O2MlqxKM9AFTPxg86d/p/QbMwfs=) 2: FC1C6395AD65E53AB9BC4BBD451AE79234BF63D7.crl (hash: aKg4m0a4yqMaulZdgCF4TJX0VAksmH+6YQypvyYiPB0=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/5b9752f6-6066-4b38-87cc-9ba63d19e22c/0/FC1C6395AD65E53AB9BC4BBD451AE79234BF63D7.crl rsync://repo-rpki.idnic.net/repo/5b9752f6-6066-4b38-87cc-9ba63d19e22c/0/FC1C6395AD65E53AB9BC4BBD451AE79234BF63D7.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FC1C6395AD65E53AB9BC4BBD451AE79234BF63D7.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 06 Dec 2025 12:07:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 57:3d:29:08:d2:3b:7f:6a:4a:5f:2e:f4:b2:0d:7f:1f:de:34:43:cc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=FC1C6395AD65E53AB9BC4BBD451AE79234BF63D7 Validity Not Before: Dec 3 06:47:12 2025 GMT Not After : Dec 6 18:03:12 2025 GMT Subject: CN=A2016C355DE140ACAE34BA4658F20B7A4981D039 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:11:89:2c:03:0b:af:52:c2:a0:89:e1:cd:f6: ef:b5:e9:3d:8d:4c:aa:dc:50:83:79:54:fc:36:e3: cf:ce:a0:e4:63:83:97:ea:b1:da:7b:04:72:c7:b7: 11:44:48:16:f8:a2:0e:d6:ee:77:4f:66:c3:0a:fc: cb:8c:b0:78:a1:1d:06:40:96:0a:9d:6e:35:aa:0e: 64:33:5c:8e:9e:26:d5:21:67:09:f2:1a:40:73:12: a4:5e:63:0f:68:82:f2:7e:6f:6b:4c:e8:aa:47:e0: 3f:1e:c7:a9:96:46:61:5f:ac:cb:b4:b2:ee:b9:b4: ea:a7:4a:28:45:ff:23:a6:69:c2:7c:37:03:03:4e: e5:68:1d:2d:2b:42:e3:b2:b5:6a:4e:d2:42:92:75: db:64:0d:ce:48:52:2c:7c:74:54:0d:e1:9f:5e:22: a4:da:7d:95:a0:ac:af:b7:c1:cf:41:e4:af:43:ac: 2c:33:2d:48:31:8a:e8:60:90:e9:ba:54:22:16:a4: b7:c4:0b:1b:91:c4:dd:56:0d:41:e1:3c:64:a8:0e: d9:c7:68:f1:c6:ea:86:46:77:d4:1a:2e:f3:1e:be: be:df:bf:58:84:62:69:e4:8a:c0:0c:29:18:30:02: 56:d2:da:95:40:96:5c:6f:09:a1:5b:5e:9a:4a:f8: e9:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:01:6C:35:5D:E1:40:AC:AE:34:BA:46:58:F2:0B:7A:49:81:D0:39 X509v3 Authority Key Identifier: keyid:FC:1C:63:95:AD:65:E5:3A:B9:BC:4B:BD:45:1A:E7:92:34:BF:63:D7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/5b9752f6-6066-4b38-87cc-9ba63d19e22c/0/FC1C6395AD65E53AB9BC4BBD451AE79234BF63D7.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FC1C6395AD65E53AB9BC4BBD451AE79234BF63D7.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/5b9752f6-6066-4b38-87cc-9ba63d19e22c/0/FC1C6395AD65E53AB9BC4BBD451AE79234BF63D7.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 41:3c:a8:2a:8c:8e:38:ac:e7:0d:b7:b1:42:2b:a4:95:91:3c: 16:c7:5f:94:d8:a7:1a:0f:cd:63:9a:3c:26:88:e6:ab:06:92: 88:ea:3b:78:89:f6:0b:a4:bc:b6:ae:ee:3c:36:c0:c8:e7:74: ed:90:67:10:00:ee:c2:77:ec:d7:5b:bd:3d:e3:1f:af:ed:a5: 70:eb:8f:90:3c:fb:d1:95:cf:5c:dd:54:7c:cf:fd:01:bf:16: af:b1:39:da:fc:e6:53:0a:3f:59:32:ba:c5:bf:31:d2:c7:88: 53:53:3b:2f:b2:2c:a5:83:0c:be:96:9b:67:e9:5b:a2:49:e3: fb:67:94:4a:b2:84:da:a8:34:f2:d2:60:e7:26:04:30:70:56: e0:76:a6:ce:34:f1:55:ae:47:d5:b5:f8:a3:4f:20:4b:e7:03: 10:13:29:ad:0e:3e:45:1c:6c:a6:31:32:5a:c9:69:0c:75:51: 19:8a:04:35:a8:fe:ea:7a:42:4f:4e:a7:91:20:d8:c5:f8:30: ef:cb:a3:c4:26:ac:58:75:37:77:c5:73:8b:5e:c7:27:bf:a7: dc:4b:ac:6f:42:69:c0:73:06:f2:bf:a4:76:94:c6:a1:d3:c1: 03:71:e7:9e:ef:2c:92:25:ec:69:1d:cc:23:76:03:3f:27:0c: 80:e9:1e:92 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUVz0pCNI7f2pKXy70sg1/H940Q8wwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRkMxQzYzOTVBRDY1RTUzQUI5QkM0QkJENDUxQUU3OTIz NEJGNjNENzAeFw0yNTEyMDMwNjQ3MTJaFw0yNTEyMDYxODAzMTJaMDMxMTAvBgNV BAMTKEEyMDE2QzM1NURFMTQwQUNBRTM0QkE0NjU4RjIwQjdBNDk4MUQwMzkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDOEYksAwuvUsKgieHN9u+16T2N TKrcUIN5VPw248/OoORjg5fqsdp7BHLHtxFESBb4og7W7ndPZsMK/MuMsHihHQZA lgqdbjWqDmQzXI6eJtUhZwnyGkBzEqReYw9ogvJ+b2tM6KpH4D8ex6mWRmFfrMu0 su65tOqnSihF/yOmacJ8NwMDTuVoHS0rQuOytWpO0kKSddtkDc5IUix8dFQN4Z9e IqTafZWgrK+3wc9B5K9DrCwzLUgxiuhgkOm6VCIWpLfECxuRxN1WDUHhPGSoDtnH aPHG6oZGd9QaLvMevr7fv1iEYmnkisAMKRgwAlbS2pVAllxvCaFbXppK+OnvAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUogFsNV3hQKyuNLpGWPILekmB0DkwHwYDVR0j BBgwFoAU/Bxjla1l5Tq5vEu9RRrnkjS/Y9cwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 Yjk3NTJmNi02MDY2LTRiMzgtODdjYy05YmE2M2QxOWUyMmMvMC9GQzFDNjM5NUFE NjVFNTNBQjlCQzRCQkQ0NTFBRTc5MjM0QkY2M0Q3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRkMxQzYzOTVBRDY1RTUzQUI5QkM0QkJENDUxQUU3OTIzNEJG NjNENy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNWI5NzUyZjYtNjA2Ni00YjM4LTg3 Y2MtOWJhNjNkMTllMjJjLzAvRkMxQzYzOTVBRDY1RTUzQUI5QkM0QkJENDUxQUU3 OTIzNEJGNjNENy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEE8qCqMjjis5w23sUIrpJWRPBbHX5TYpxoP zWOaPCaI5qsGkojqO3iJ9gukvLau7jw2wMjndO2QZxAA7sJ37NdbvT3jH6/tpXDr j5A8+9GVz1zdVHzP/QG/Fq+xOdr85lMKP1kyusW/MdLHiFNTOy+yLKWDDL6Wm2fp W6JJ4/tnlEqyhNqoNPLSYOcmBDBwVuB2ps408VWuR9W1+KNPIEvnAxATKa0OPkUc bKYxMlrJaQx1URmKBDWo/up6Qk9Op5Eg2MX4MO/Lo8QmrFh1N3fFc4texye/p9xL rG9CacBzBvK/pHaUxqHTwQNx557vLJIl7GkdzCN2Az8nDIDpHpI= -----END CERTIFICATE-----Generated at Wed Dec 3 14:13:22 2025 by rpki-client