This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/5fb808eb-c98e-4036-be9a-193bbcc64892/0/FC2DAAA409BA60DE33EC91F3A861D1A00719D426.mft File: FC2DAAA409BA60DE33EC91F3A861D1A00719D426.mft (raw, json) Hash identifier: 0PuHogAPHVR/PDEaHVdOVg2zDCHGn7KsdxsA8Sd8SIA= Subject key identifier: 04:0A:57:B8:73:4B:E5:F8:34:B6:F4:7A:B3:DA:BE:66:09:8B:46:A7 Authority key identifier: FC:2D:AA:A4:09:BA:60:DE:33:EC:91:F3:A8:61:D1:A0:07:19:D4:26 Certificate issuer: /CN=FC2DAAA409BA60DE33EC91F3A861D1A00719D426 Certificate serial: 7D0E8B093E61A7F88D377114FF69F14D2043D11A Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/FC2DAAA409BA60DE33EC91F3A861D1A00719D426.cer Subject info access: rsync://repo-rpki.idnic.net/repo/5fb808eb-c98e-4036-be9a-193bbcc64892/0/FC2DAAA409BA60DE33EC91F3A861D1A00719D426.mft Manifest number: F9 Signing time: Mon 01 Dec 2025 21:10:54 +0000 Manifest this update: Mon 01 Dec 2025 21:05:54 +0000 Manifest next update: Fri 05 Dec 2025 05:55:54 +0000 Files and hashes: 1: 3135372e36362e322e302f32332d3234203d3e20313532343430.roa (hash: 3ZS5/0NJnXKv4Pk0J4oSOH1r1VKtA3mh1qb3WAlsXUw=) 2: FC2DAAA409BA60DE33EC91F3A861D1A00719D426.crl (hash: a95HQLFumS8lInfWhbcUpSsmcw0XQtD6hoROOB8nk1A=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/5fb808eb-c98e-4036-be9a-193bbcc64892/0/FC2DAAA409BA60DE33EC91F3A861D1A00719D426.crl rsync://repo-rpki.idnic.net/repo/5fb808eb-c98e-4036-be9a-193bbcc64892/0/FC2DAAA409BA60DE33EC91F3A861D1A00719D426.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/FC2DAAA409BA60DE33EC91F3A861D1A00719D426.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 05 Dec 2025 05:55:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7d:0e:8b:09:3e:61:a7:f8:8d:37:71:14:ff:69:f1:4d:20:43:d1:1a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=FC2DAAA409BA60DE33EC91F3A861D1A00719D426 Validity Not Before: Dec 1 21:05:54 2025 GMT Not After : Dec 5 05:55:54 2025 GMT Subject: CN=040A57B8734BE5F834B6F47AB3DABE66098B46A7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:00:23:ca:f4:86:99:47:80:3c:53:87:8c:9f: 63:6c:16:94:11:16:96:36:ad:12:b0:53:b2:f3:ef: 00:1a:d3:05:8f:80:b7:4b:71:2d:a1:af:24:14:68: 47:57:d4:cd:0c:92:28:6e:24:d0:91:27:ce:50:85: 13:1a:4c:11:14:75:a4:b1:af:30:86:b8:f6:71:ca: da:9a:06:e4:37:84:89:7c:f8:6a:c7:c9:07:b4:f2: 40:ae:79:86:3b:63:fe:44:1e:92:81:d0:6e:cf:d7: 70:48:5f:11:6c:e5:a4:d9:92:99:d5:f6:a0:cc:d7: 2c:39:38:e0:aa:71:08:52:cd:5b:7c:d9:95:c2:18: fa:16:00:ac:f2:bc:5e:13:1d:17:ef:9b:8b:71:a6: 1a:69:06:d0:00:4b:1f:56:6a:9c:50:5f:fb:2a:a5: 4a:b2:c2:d3:22:b6:de:fa:b9:85:45:d2:88:8f:b0: ba:c3:dc:f0:9b:a3:59:e9:5b:78:e0:e8:d5:3c:e6: 04:a4:e6:3b:99:ed:93:8f:06:fd:ab:69:97:19:57: a9:89:33:16:13:c4:ff:6d:b2:fb:39:e6:02:25:1e: e5:c8:27:be:e0:5e:12:60:a6:37:11:63:b7:85:9c: 07:00:b8:54:af:38:90:ea:fe:08:1a:1e:54:69:ff: 63:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 04:0A:57:B8:73:4B:E5:F8:34:B6:F4:7A:B3:DA:BE:66:09:8B:46:A7 X509v3 Authority Key Identifier: keyid:FC:2D:AA:A4:09:BA:60:DE:33:EC:91:F3:A8:61:D1:A0:07:19:D4:26 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/5fb808eb-c98e-4036-be9a-193bbcc64892/0/FC2DAAA409BA60DE33EC91F3A861D1A00719D426.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/FC2DAAA409BA60DE33EC91F3A861D1A00719D426.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/5fb808eb-c98e-4036-be9a-193bbcc64892/0/FC2DAAA409BA60DE33EC91F3A861D1A00719D426.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2a:cd:9c:0f:7e:be:db:de:12:f6:69:28:b9:4a:1b:6b:c6:68: 61:6e:9d:e7:c9:f4:d4:6e:40:16:82:5f:f5:4c:03:83:46:fc: 35:77:f9:ed:ac:0c:c5:91:e5:21:96:dc:04:19:7f:fb:59:c9: 26:13:0c:fa:4a:a6:2d:87:a8:0d:06:43:85:4a:bb:a0:ec:ca: db:17:82:1a:54:93:3f:42:8c:08:18:a5:71:ff:6a:0c:de:31: c8:31:ea:da:ba:a4:1d:db:80:ab:4a:4c:25:74:03:80:bc:5b: 28:fc:56:e1:f7:40:36:f1:68:52:05:48:59:7d:d6:b1:ad:65: 4a:da:ab:8a:87:86:0c:bf:47:94:bf:dd:a7:3c:07:fb:9f:0f: 07:c6:40:40:39:70:6f:0a:0e:58:b6:89:47:89:06:d5:25:a5: 4f:42:95:4b:39:90:3d:81:ca:ad:dd:2d:c3:0a:32:55:41:7c: b8:2f:24:d1:c8:b5:dc:dc:57:56:32:21:4b:32:ad:4a:fe:e5: 3d:43:52:ce:94:64:c4:1c:ef:43:20:f1:4e:e8:d2:0b:7a:d5: 9e:15:d8:59:05:85:d0:4b:e2:85:05:77:6e:74:d5:25:60:57: 18:75:a5:f7:a3:da:76:37:8c:d4:5a:9f:07:68:69:36:67:6b: c1:44:48:a6 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUfQ6LCT5hp/iNN3EU/2nxTSBD0RowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRkMyREFBQTQwOUJBNjBERTMzRUM5MUYzQTg2MUQxQTAw NzE5RDQyNjAeFw0yNTEyMDEyMTA1NTRaFw0yNTEyMDUwNTU1NTRaMDMxMTAvBgNV BAMTKDA0MEE1N0I4NzM0QkU1RjgzNEI2RjQ3QUIzREFCRTY2MDk4QjQ2QTcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCpACPK9IaZR4A8U4eMn2NsFpQR FpY2rRKwU7Lz7wAa0wWPgLdLcS2hryQUaEdX1M0MkihuJNCRJ85QhRMaTBEUdaSx rzCGuPZxytqaBuQ3hIl8+GrHyQe08kCueYY7Y/5EHpKB0G7P13BIXxFs5aTZkpnV 9qDM1yw5OOCqcQhSzVt82ZXCGPoWAKzyvF4THRfvm4txphppBtAASx9WapxQX/sq pUqywtMitt76uYVF0oiPsLrD3PCbo1npW3jg6NU85gSk5juZ7ZOPBv2raZcZV6mJ MxYTxP9tsvs55gIlHuXIJ77gXhJgpjcRY7eFnAcAuFSvOJDq/ggaHlRp/2OzAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUBApXuHNL5fg0tvR6s9q+ZgmLRqcwHwYDVR0j BBgwFoAU/C2qpAm6YN4z7JHzqGHRoAcZ1CYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 ZmI4MDhlYi1jOThlLTQwMzYtYmU5YS0xOTNiYmNjNjQ4OTIvMC9GQzJEQUFBNDA5 QkE2MERFMzNFQzkxRjNBODYxRDFBMDA3MTlENDI2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvRkMyREFBQTQwOUJBNjBERTMzRUM5MUYzQTg2MUQxQTAwNzE5 RDQyNi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNWZiODA4ZWItYzk4ZS00MDM2LWJl OWEtMTkzYmJjYzY0ODkyLzAvRkMyREFBQTQwOUJBNjBERTMzRUM5MUYzQTg2MUQx QTAwNzE5RDQyNi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACrNnA9+vtveEvZpKLlKG2vGaGFunefJ9NRu QBaCX/VMA4NG/DV3+e2sDMWR5SGW3AQZf/tZySYTDPpKpi2HqA0GQ4VKu6DsytsX ghpUkz9CjAgYpXH/agzeMcgx6tq6pB3bgKtKTCV0A4C8Wyj8VuH3QDbxaFIFSFl9 1rGtZUraq4qHhgy/R5S/3ac8B/ufDwfGQEA5cG8KDli2iUeJBtUlpU9ClUs5kD2B yq3dLcMKMlVBfLgvJNHItdzcV1YyIUsyrUr+5T1DUs6UZMQc70Mg8U7o0gt61Z4V 2FkFhdBL4oUFd2501SVgVxh1pfej2nY3jNRanwdoaTZna8FESKY= -----END CERTIFICATE-----Generated at Wed Dec 3 18:01:09 2025 by rpki-client