This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repo-rpki.idnic.net/repo/73f75088-088e-41c0-bfce-edc69beafd4a/0/FED49ABCDA1C9D097F52AD26D8001C0C36632C89.mft
File: FED49ABCDA1C9D097F52AD26D8001C0C36632C89.mft (raw, json)
Hash identifier: Sij9B/AhKyVzmFQC2mjNvmdctbxIrxZ5Lt4Ik5miwnQ=
Subject key identifier: 9D:26:A7:53:28:4C:D8:76:28:83:21:43:7C:AF:C6:F7:ED:6F:CC:8F
Authority key identifier: FE:D4:9A:BC:DA:1C:9D:09:7F:52:AD:26:D8:00:1C:0C:36:63:2C:89
Certificate issuer: /CN=FED49ABCDA1C9D097F52AD26D8001C0C36632C89
Certificate serial: 21ED3EFBDDAE6F876FEF92356141AAA6253C5563
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FED49ABCDA1C9D097F52AD26D8001C0C36632C89.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/73f75088-088e-41c0-bfce-edc69beafd4a/0/FED49ABCDA1C9D097F52AD26D8001C0C36632C89.mft
Manifest number: 0281
Signing time: Sun 14 Dec 2025 02:10:47 +0000
Manifest this update: Sun 14 Dec 2025 02:05:47 +0000
Manifest next update: Wed 17 Dec 2025 03:26:47 +0000
Files and hashes: 1: 3130332e3138302e3139342e302f32342d3234203d3e2039333431.roa (hash: E01mZ15UIJ+QTIPPcGks35isU/hOcW6+FEQB5HchAFc=)
2: 3130332e3138302e3139352e302f32342d3234203d3e2039333431.roa (hash: jasipL9tt5lF7HvMmB9WMDxphox1aLuH+uQXtrmFRL8=)
3: 3130332e3138302e3139342e302f32332d3233203d3e2039333431.roa (hash: T5Fz3OXAuav/iqbItkD85kgf8QFMTkSpBn4rOH0yfRc=)
4: FED49ABCDA1C9D097F52AD26D8001C0C36632C89.crl (hash: Red6ePi8SjP9uiyqmQPC1UGwesIgxNRqHFxECF6IbUE=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/73f75088-088e-41c0-bfce-edc69beafd4a/0/FED49ABCDA1C9D097F52AD26D8001C0C36632C89.crl
rsync://repo-rpki.idnic.net/repo/73f75088-088e-41c0-bfce-edc69beafd4a/0/FED49ABCDA1C9D097F52AD26D8001C0C36632C89.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FED49ABCDA1C9D097F52AD26D8001C0C36632C89.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 17 Dec 2025 03:26:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
21:ed:3e:fb:dd:ae:6f:87:6f:ef:92:35:61:41:aa:a6:25:3c:55:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=FED49ABCDA1C9D097F52AD26D8001C0C36632C89
Validity
Not Before: Dec 14 02:05:47 2025 GMT
Not After : Dec 17 03:26:47 2025 GMT
Subject: CN=9D26A753284CD876288321437CAFC6F7ED6FCC8F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:fb:42:3f:dd:76:77:da:a1:9f:a0:e6:3a:c5:
0a:30:21:6a:35:8f:1a:27:be:03:c2:3c:26:0c:eb:
8c:a4:9a:a8:55:25:99:db:bf:c3:b3:45:86:3f:8b:
8a:e5:18:9f:07:ca:6c:bb:b6:e9:6e:3e:c0:e5:5e:
af:49:c9:ea:ad:74:d4:8b:45:31:45:52:10:33:b4:
99:7e:39:aa:98:43:0f:65:95:d9:ba:58:33:8a:61:
49:ac:77:f4:14:ab:8f:09:8a:f3:31:e5:08:d4:7c:
a0:6c:bc:4b:56:55:14:1a:1e:5c:45:af:a8:c4:fc:
8a:78:b9:ab:3c:ca:89:b0:68:f8:78:1a:47:97:b9:
d1:ca:49:4c:b8:6c:0a:9e:e0:48:2b:26:58:14:a4:
e6:01:5b:2f:52:05:dd:2f:cb:45:5a:a3:54:cd:e6:
5d:07:1d:59:8f:1f:94:06:3f:4f:ad:4b:1e:2b:74:
d5:8f:49:8d:98:66:c1:cb:9c:64:af:e4:0e:12:b0:
bb:23:af:64:7b:00:77:07:6a:80:44:d5:3a:96:11:
c8:4c:cd:d6:2a:8d:69:74:49:e6:7b:83:96:a3:b7:
34:a6:ee:57:54:5b:3f:0d:35:3b:7c:88:bc:fc:fb:
f8:13:0a:c7:e1:d1:a4:13:1f:6a:85:0a:21:f5:b8:
16:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:26:A7:53:28:4C:D8:76:28:83:21:43:7C:AF:C6:F7:ED:6F:CC:8F
X509v3 Authority Key Identifier:
keyid:FE:D4:9A:BC:DA:1C:9D:09:7F:52:AD:26:D8:00:1C:0C:36:63:2C:89
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/73f75088-088e-41c0-bfce-edc69beafd4a/0/FED49ABCDA1C9D097F52AD26D8001C0C36632C89.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FED49ABCDA1C9D097F52AD26D8001C0C36632C89.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/73f75088-088e-41c0-bfce-edc69beafd4a/0/FED49ABCDA1C9D097F52AD26D8001C0C36632C89.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5b:ae:93:f0:d7:7c:f9:d2:07:99:90:76:b0:f1:56:79:78:c4:
33:c3:e7:84:90:8a:cd:c6:bf:bf:be:a8:d1:1b:0f:b1:79:13:
7c:2e:06:fb:2d:cb:e0:4a:be:9d:93:d3:f5:8b:44:99:5e:a9:
a2:3b:ed:54:05:03:59:7e:4c:de:d3:c2:bf:b2:a5:b9:a9:b3:
29:59:c1:ee:6b:76:d1:a9:9a:a2:1f:b5:f4:c4:32:eb:ad:9c:
51:d6:8c:c9:40:6a:2f:33:36:1e:84:5e:a5:25:f8:19:fd:37:
ab:9a:cc:4d:9d:2c:58:ed:98:82:39:7d:de:4a:d4:f4:e2:26:
c3:67:f5:80:9d:2d:d5:b7:38:34:06:42:e0:17:e9:24:05:64:
ab:cf:06:9e:9b:4a:4c:2f:fe:28:db:81:5b:93:d2:22:04:a4:
1d:8b:2d:15:e6:85:a6:5f:ae:d7:01:09:65:06:5e:0d:73:09:
f1:c3:12:a9:1b:39:fe:07:03:28:48:10:02:dd:f4:3e:86:87:
e8:45:07:ab:d0:8d:d4:e8:c6:d5:06:59:8c:7e:c0:11:01:a5:
14:f4:9b:b4:2f:06:8b:36:b6:24:58:ea:30:26:74:3a:50:08:
c9:e2:4a:63:80:c9:a1:cb:5f:29:dc:b4:b4:68:e6:2d:28:2f:
b0:60:37:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Dec 15 22:12:42 2025 by rpki-client