This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/68466889-c1ef-4410-ad9c-306c09e1be06/0/FE47963FB6E13EFC318606E3CA31013421827343.mft File: FE47963FB6E13EFC318606E3CA31013421827343.mft (raw, json) Hash identifier: nhy/hIqaMwlDgdF6Nb1EJCeZpVbtHXHWoRK1ljIvaJE= Subject key identifier: AE:C6:6B:D0:C3:E8:82:2E:FF:6A:1D:E9:8F:54:55:C6:17:DA:CE:2B Authority key identifier: FE:47:96:3F:B6:E1:3E:FC:31:86:06:E3:CA:31:01:34:21:82:73:43 Certificate issuer: /CN=FE47963FB6E13EFC318606E3CA31013421827343 Certificate serial: 1982313781EA03407BBAA7EADC822A72E810B7F5 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FE47963FB6E13EFC318606E3CA31013421827343.cer Subject info access: rsync://repo-rpki.idnic.net/repo/68466889-c1ef-4410-ad9c-306c09e1be06/0/FE47963FB6E13EFC318606E3CA31013421827343.mft Manifest number: 0137 Signing time: Sun 23 Nov 2025 17:21:31 +0000 Manifest this update: Sun 23 Nov 2025 17:16:31 +0000 Manifest next update: Wed 26 Nov 2025 22:47:31 +0000 Files and hashes: 1: 3130332e36372e34392e302f32342d3234203d3e20313431363732.roa (hash: BDIVxvQovejwSTdQVoThOksyexqcbmKKBcpAZUy8WSU=) 2: 3130332e3136322e3235322e302f32342d3234203d3e20313431363732.roa (hash: SKZ4JC2PVchiPELxqukX4ZUosexDdg2XkKRXWqgW864=) 3: FE47963FB6E13EFC318606E3CA31013421827343.crl (hash: 643LjsVgohgEhrqHAZL4AMGq4J/CBwBwtTOmFFAwWYo=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/68466889-c1ef-4410-ad9c-306c09e1be06/0/FE47963FB6E13EFC318606E3CA31013421827343.crl rsync://repo-rpki.idnic.net/repo/68466889-c1ef-4410-ad9c-306c09e1be06/0/FE47963FB6E13EFC318606E3CA31013421827343.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FE47963FB6E13EFC318606E3CA31013421827343.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 26 Nov 2025 22:47:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 19:82:31:37:81:ea:03:40:7b:ba:a7:ea:dc:82:2a:72:e8:10:b7:f5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=FE47963FB6E13EFC318606E3CA31013421827343 Validity Not Before: Nov 23 17:16:31 2025 GMT Not After : Nov 26 22:47:31 2025 GMT Subject: CN=AEC66BD0C3E8822EFF6A1DE98F5455C617DACE2B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:7e:ac:03:a1:1a:bf:95:60:90:0a:5e:db:64: 00:8d:17:51:09:c6:0c:4f:cb:ac:ef:2a:e2:a0:45: 6a:6e:f7:10:dd:59:9b:18:2e:da:e8:d6:53:2c:eb: ea:29:45:05:36:ba:61:c2:bc:83:a4:a9:a2:b1:12: 94:12:2e:36:06:ea:ed:93:5c:9f:de:85:32:f2:34: 5f:f2:b1:8b:43:93:75:2d:fd:17:9d:50:a8:e8:7f: 0e:7a:59:5b:86:29:18:d1:e2:2c:65:9c:81:d3:5e: 70:56:2a:ff:4c:7f:af:f6:89:7c:81:d1:ea:30:c4: 3d:f8:5b:b9:a5:a6:2c:da:77:07:82:96:ef:1f:b1: c6:d4:71:27:6c:8e:e8:d9:bd:07:41:24:43:95:14: e1:7f:4e:2a:75:f2:60:b4:02:ad:c1:93:30:d4:57: 21:f4:e8:6b:1b:32:3f:e6:fe:13:28:57:52:58:f8: 94:d9:97:fb:95:20:1d:7e:73:51:b0:44:11:29:8a: 8c:ad:4f:8a:1a:c1:34:42:dd:28:61:de:de:37:24: 08:5a:b7:05:b8:ec:3a:1b:55:07:e8:13:8a:b7:3a: 10:91:a4:a4:1f:60:b3:7a:05:b7:14:73:f0:af:48: 7b:e2:0c:b2:71:d4:d8:94:a5:9a:f5:54:ba:6e:31: ca:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AE:C6:6B:D0:C3:E8:82:2E:FF:6A:1D:E9:8F:54:55:C6:17:DA:CE:2B X509v3 Authority Key Identifier: keyid:FE:47:96:3F:B6:E1:3E:FC:31:86:06:E3:CA:31:01:34:21:82:73:43 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/68466889-c1ef-4410-ad9c-306c09e1be06/0/FE47963FB6E13EFC318606E3CA31013421827343.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FE47963FB6E13EFC318606E3CA31013421827343.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/68466889-c1ef-4410-ad9c-306c09e1be06/0/FE47963FB6E13EFC318606E3CA31013421827343.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 01:75:1f:85:c9:14:8f:8d:81:c1:34:f4:c6:c4:df:68:52:a0: 8b:94:7c:4c:f3:c3:5d:8c:a6:fc:b1:a8:61:11:f1:52:af:d4: ca:99:a0:0c:9b:b7:20:bb:83:3f:57:a3:c1:9a:45:21:fb:16: 00:52:8c:2a:92:5d:04:d6:c3:20:cc:76:e1:d3:1a:2f:01:4b: 94:07:0b:b8:8a:6a:f2:c9:b0:ae:92:e7:d7:5d:70:68:ce:b0: 92:93:ab:9e:94:12:ea:46:63:69:61:49:0f:35:df:4d:0e:40: b9:f7:57:16:4a:0f:cf:67:a7:5f:5c:bd:f7:35:45:55:f0:36: 01:d9:c4:5f:23:e7:dc:08:77:0c:13:3a:3a:53:25:88:6f:85: 20:43:0d:ba:b1:c8:26:5a:9a:5a:7b:3a:d7:6d:66:42:cd:4d: cb:17:bc:82:1e:80:8c:1c:80:6c:87:6e:25:9a:89:00:9c:1a: 9f:00:3b:58:06:ee:d9:82:5c:a5:3d:b2:31:d4:33:37:eb:2a: a2:6c:b1:20:1f:da:9e:d1:dc:0e:1d:e5:10:90:d1:aa:7b:a5: 5d:af:c8:0f:2a:28:bc:42:49:ed:a4:ab:5e:33:12:62:0d:9f: ab:d1:65:03:a0:92:8e:eb:64:b1:5a:df:3c:40:6f:99:55:56: b6:96:d8:71 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUGYIxN4HqA0B7uqfq3IIqcugQt/UwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRkU0Nzk2M0ZCNkUxM0VGQzMxODYwNkUzQ0EzMTAxMzQy MTgyNzM0MzAeFw0yNTExMjMxNzE2MzFaFw0yNTExMjYyMjQ3MzFaMDMxMTAvBgNV BAMTKEFFQzY2QkQwQzNFODgyMkVGRjZBMURFOThGNTQ1NUM2MTdEQUNFMkIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDRfqwDoRq/lWCQCl7bZACNF1EJ xgxPy6zvKuKgRWpu9xDdWZsYLtro1lMs6+opRQU2umHCvIOkqaKxEpQSLjYG6u2T XJ/ehTLyNF/ysYtDk3Ut/RedUKjofw56WVuGKRjR4ixlnIHTXnBWKv9Mf6/2iXyB 0eowxD34W7mlpizadweClu8fscbUcSdsjujZvQdBJEOVFOF/Tip18mC0Aq3BkzDU VyH06GsbMj/m/hMoV1JY+JTZl/uVIB1+c1GwRBEpioytT4oawTRC3Shh3t43JAha twW47DobVQfoE4q3OhCRpKQfYLN6BbcUc/CvSHviDLJx1NiUpZr1VLpuMcrxAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUrsZr0MPogi7/ah3pj1RVxhfaziswHwYDVR0j BBgwFoAU/keWP7bhPvwxhgbjyjEBNCGCc0MwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 ODQ2Njg4OS1jMWVmLTQ0MTAtYWQ5Yy0zMDZjMDllMWJlMDYvMC9GRTQ3OTYzRkI2 RTEzRUZDMzE4NjA2RTNDQTMxMDEzNDIxODI3MzQzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRkU0Nzk2M0ZCNkUxM0VGQzMxODYwNkUzQ0EzMTAxMzQyMTgy NzM0My5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNjg0NjY4ODktYzFlZi00NDEwLWFk OWMtMzA2YzA5ZTFiZTA2LzAvRkU0Nzk2M0ZCNkUxM0VGQzMxODYwNkUzQ0EzMTAx MzQyMTgyNzM0My5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAF1H4XJFI+NgcE09MbE32hSoIuUfEzzw12M pvyxqGER8VKv1MqZoAybtyC7gz9Xo8GaRSH7FgBSjCqSXQTWwyDMduHTGi8BS5QH C7iKavLJsK6S59ddcGjOsJKTq56UEupGY2lhSQ81300OQLn3VxZKD89np19cvfc1 RVXwNgHZxF8j59wIdwwTOjpTJYhvhSBDDbqxyCZamlp7OtdtZkLNTcsXvIIegIwc gGyHbiWaiQCcGp8AO1gG7tmCXKU9sjHUMzfrKqJssSAf2p7R3A4d5RCQ0ap7pV2v yA8qKLxCSe2kq14zEmINn6vRZQOgko7rZLFa3zxAb5lVVraW2HE= -----END CERTIFICATE-----Generated at Tue Nov 25 20:33:47 2025 by rpki-client