This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/795ee8fc-6efe-415d-b6c1-0f0cccf26144/0/FCA55FE68BF147AE20F00C45DADCDF960C120CF8.mft File: FCA55FE68BF147AE20F00C45DADCDF960C120CF8.mft (raw, json) Hash identifier: jKWcJhzpu7IJKXLwsrZg2AflYkRxx0FPGI5A0sWCDLI= Subject key identifier: 34:5A:F8:30:F7:2C:21:37:19:01:87:D0:CA:FA:AA:A8:A2:6F:B5:34 Authority key identifier: FC:A5:5F:E6:8B:F1:47:AE:20:F0:0C:45:DA:DC:DF:96:0C:12:0C:F8 Certificate issuer: /CN=FCA55FE68BF147AE20F00C45DADCDF960C120CF8 Certificate serial: 5C853BBDC49C28FB87DDBC732CAF712C948C7A57 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FCA55FE68BF147AE20F00C45DADCDF960C120CF8.cer Subject info access: rsync://repo-rpki.idnic.net/repo/795ee8fc-6efe-415d-b6c1-0f0cccf26144/0/FCA55FE68BF147AE20F00C45DADCDF960C120CF8.mft Manifest number: 01D1 Signing time: Tue 02 Dec 2025 11:32:33 +0000 Manifest this update: Tue 02 Dec 2025 11:27:33 +0000 Manifest next update: Fri 05 Dec 2025 16:00:33 +0000 Files and hashes: 1: 3130332e3132312e3234342e302f32332d3234203d3e20313335343738.roa (hash: ah6jjuDsScnETUKRuJMdbV7gAyHOG7vH/cUJcAPOG7U=) 2: 3130332e3132312e3234362e302f32332d3234203d3e20313335343738.roa (hash: 3Q3TcBWsaHvYgXVIh3Shkct0iPnHLeLaz/yA3bkjR18=) 3: FCA55FE68BF147AE20F00C45DADCDF960C120CF8.crl (hash: Qo5bdopfse5sz6UhHQaeZAYYp5v0gioXVaSYkOqltY0=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/795ee8fc-6efe-415d-b6c1-0f0cccf26144/0/FCA55FE68BF147AE20F00C45DADCDF960C120CF8.crl rsync://repo-rpki.idnic.net/repo/795ee8fc-6efe-415d-b6c1-0f0cccf26144/0/FCA55FE68BF147AE20F00C45DADCDF960C120CF8.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FCA55FE68BF147AE20F00C45DADCDF960C120CF8.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 05 Dec 2025 16:00:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5c:85:3b:bd:c4:9c:28:fb:87:dd:bc:73:2c:af:71:2c:94:8c:7a:57 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=FCA55FE68BF147AE20F00C45DADCDF960C120CF8 Validity Not Before: Dec 2 11:27:33 2025 GMT Not After : Dec 5 16:00:33 2025 GMT Subject: CN=345AF830F72C2137190187D0CAFAAAA8A26FB534 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:5d:4d:e3:27:c5:bf:96:0a:b4:2f:22:5f:b8: 80:e3:e5:6f:43:12:d6:f0:f2:f1:90:26:3e:0b:28: f7:d1:9e:14:a9:99:8e:2b:87:9c:ad:cc:49:78:cc: e1:f2:8b:04:7a:56:5f:fc:d4:6a:f4:4a:eb:b2:a5: 7e:1a:15:fd:60:ce:63:71:2d:4a:fd:3d:45:45:04: cf:3a:3b:e5:8e:8f:15:e1:13:e3:0b:70:19:18:ba: cb:b0:85:87:c8:bc:1a:b8:b6:c2:4b:df:4f:55:cc: c7:4b:6c:e1:a2:85:69:c2:06:7d:8a:3e:c4:e4:9d: 8d:e2:3e:ef:a6:70:1c:df:a2:eb:ec:5d:0e:1b:67: 31:8c:a5:0a:ef:51:f1:33:96:fb:5c:58:83:e6:d2: 4a:c1:cf:49:f0:7f:6a:07:bc:98:b0:ba:85:be:18: 99:95:46:a7:17:ef:64:96:d5:e8:4d:5d:71:0d:e9: 51:9c:4f:0e:35:07:f6:66:33:ff:fb:3d:39:2a:c7: 8d:be:2d:a4:35:32:1b:0d:b4:05:b2:4c:c8:51:fa: 77:73:12:eb:12:29:dd:3a:ef:7e:ee:8b:c9:50:84: fc:25:cc:aa:0d:39:80:27:db:29:b5:b9:17:3b:5e: 89:39:7f:18:9a:c8:8c:31:83:20:19:a2:97:18:fa: f3:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:5A:F8:30:F7:2C:21:37:19:01:87:D0:CA:FA:AA:A8:A2:6F:B5:34 X509v3 Authority Key Identifier: keyid:FC:A5:5F:E6:8B:F1:47:AE:20:F0:0C:45:DA:DC:DF:96:0C:12:0C:F8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/795ee8fc-6efe-415d-b6c1-0f0cccf26144/0/FCA55FE68BF147AE20F00C45DADCDF960C120CF8.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FCA55FE68BF147AE20F00C45DADCDF960C120CF8.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/795ee8fc-6efe-415d-b6c1-0f0cccf26144/0/FCA55FE68BF147AE20F00C45DADCDF960C120CF8.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 04:c1:99:40:f7:2f:97:c5:3c:12:76:ac:9f:1d:a0:0c:29:25: df:4d:3b:bd:ff:a9:4f:29:ef:ef:5c:59:19:d9:47:89:d9:82: 39:68:6a:71:16:a1:54:db:1a:f9:88:75:b4:07:e4:c4:1e:88: 0e:56:87:9b:1b:02:d6:66:f9:03:3a:4d:ca:f1:55:5f:c4:71: ca:c2:ac:b7:e6:5f:c9:ff:8e:df:fa:08:d5:8a:fc:fd:27:2d: e1:21:42:7b:a0:f9:12:69:3c:fe:63:de:58:fb:d5:8d:6f:eb: 67:6c:cd:8f:26:d4:a9:d5:ca:26:fe:1a:f5:1b:e9:80:dc:29: c9:d6:18:15:bb:f9:4d:b9:b0:4b:7f:0e:32:e3:35:93:18:ac: 50:38:5e:7e:f4:a8:0c:1a:8b:18:d7:13:5c:21:a2:fd:f7:16: 87:8f:1c:22:42:0c:89:e4:97:3b:b0:77:f5:a9:a5:7d:55:f1: c3:91:5f:4b:8a:48:5b:17:fb:f1:dc:89:40:08:8c:cc:33:67: b3:01:ac:1d:52:72:cf:ec:bb:9b:15:63:6e:31:5c:b7:b1:6f: 08:f6:72:15:1a:ac:0d:5b:c8:53:56:45:72:9d:3a:c3:15:d8: 65:a4:36:d2:0c:ab:6f:dd:80:cd:02:ec:9a:9b:ed:65:d4:2e: fc:30:08:1c -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUXIU7vcScKPuH3bxzLK9xLJSMelcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRkNBNTVGRTY4QkYxNDdBRTIwRjAwQzQ1REFEQ0RGOTYw QzEyMENGODAeFw0yNTEyMDIxMTI3MzNaFw0yNTEyMDUxNjAwMzNaMDMxMTAvBgNV BAMTKDM0NUFGODMwRjcyQzIxMzcxOTAxODdEMENBRkFBQUE4QTI2RkI1MzQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCqXU3jJ8W/lgq0LyJfuIDj5W9D Etbw8vGQJj4LKPfRnhSpmY4rh5ytzEl4zOHyiwR6Vl/81Gr0SuuypX4aFf1gzmNx LUr9PUVFBM86O+WOjxXhE+MLcBkYusuwhYfIvBq4tsJL309VzMdLbOGihWnCBn2K PsTknY3iPu+mcBzfouvsXQ4bZzGMpQrvUfEzlvtcWIPm0krBz0nwf2oHvJiwuoW+ GJmVRqcX72SW1ehNXXEN6VGcTw41B/ZmM//7PTkqx42+LaQ1MhsNtAWyTMhR+ndz EusSKd06737ui8lQhPwlzKoNOYAn2ym1uRc7Xok5fxiayIwxgyAZopcY+vOfAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUNFr4MPcsITcZAYfQyvqqqKJvtTQwHwYDVR0j BBgwFoAU/KVf5ovxR64g8AxF2tzflgwSDPgwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 OTVlZThmYy02ZWZlLTQxNWQtYjZjMS0wZjBjY2NmMjYxNDQvMC9GQ0E1NUZFNjhC RjE0N0FFMjBGMDBDNDVEQURDREY5NjBDMTIwQ0Y4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRkNBNTVGRTY4QkYxNDdBRTIwRjAwQzQ1REFEQ0RGOTYwQzEy MENGOC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNzk1ZWU4ZmMtNmVmZS00MTVkLWI2 YzEtMGYwY2NjZjI2MTQ0LzAvRkNBNTVGRTY4QkYxNDdBRTIwRjAwQzQ1REFEQ0RG OTYwQzEyMENGOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAATBmUD3L5fFPBJ2rJ8doAwpJd9NO73/qU8p 7+9cWRnZR4nZgjloanEWoVTbGvmIdbQH5MQeiA5Wh5sbAtZm+QM6TcrxVV/EccrC rLfmX8n/jt/6CNWK/P0nLeEhQnug+RJpPP5j3lj71Y1v62dszY8m1KnVyib+GvUb 6YDcKcnWGBW7+U25sEt/DjLjNZMYrFA4Xn70qAwaixjXE1whov33FoePHCJCDInk lzuwd/WppX1V8cORX0uKSFsX+/HciUAIjMwzZ7MBrB1Scs/su5sVY24xXLexbwj2 chUarA1byFNWRXKdOsMV2GWkNtIMq2/dgM0C7Jqb7WXULvwwCBw= -----END CERTIFICATE-----Generated at Wed Dec 3 12:41:37 2025 by rpki-client