This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/a1f15a1d-5dac-4cc9-811a-e49cb4e7bce1/0/FE79E56CBE99C773CD721DF7AB0E5CA2809D0739.mft File: FE79E56CBE99C773CD721DF7AB0E5CA2809D0739.mft (raw, json) Hash identifier: x5VtJ8RmBrCpZYM8/bQZWPAmlUASjTHPDzaVpKa7lEg= Subject key identifier: 2A:FB:87:CE:D6:56:6C:DB:6F:56:C4:97:A9:85:25:F8:C2:B0:76:A4 Authority key identifier: FE:79:E5:6C:BE:99:C7:73:CD:72:1D:F7:AB:0E:5C:A2:80:9D:07:39 Certificate issuer: /CN=FE79E56CBE99C773CD721DF7AB0E5CA2809D0739 Certificate serial: 42F64384FB608D814E05D7688EE029B8F879C35C Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/FE79E56CBE99C773CD721DF7AB0E5CA2809D0739.cer Subject info access: rsync://repo-rpki.idnic.net/repo/a1f15a1d-5dac-4cc9-811a-e49cb4e7bce1/0/FE79E56CBE99C773CD721DF7AB0E5CA2809D0739.mft Manifest number: 0112 Signing time: Sat 06 Dec 2025 18:11:21 +0000 Manifest this update: Sat 06 Dec 2025 18:06:21 +0000 Manifest next update: Tue 09 Dec 2025 19:10:21 +0000 Files and hashes: 1: FE79E56CBE99C773CD721DF7AB0E5CA2809D0739.crl (hash: jiqv+mHd3h8kV0zFpQGb8i6/HMq2qAxBLoQjdVyTTLw=) 2: 3135372e32302e3232322e302f32342d3234203d3e20313532343337.roa (hash: xA0yIhK/pel57ulFN3HOQ4z99q0P1jOo4pSKaz4ovzA=) 3: 3135372e32302e3232332e302f32342d3234203d3e20313532343337.roa (hash: wm/OwjMJ3Mw2kK4LX3m4F0/jsfG1NixZfT/MRVx2gUc=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/a1f15a1d-5dac-4cc9-811a-e49cb4e7bce1/0/FE79E56CBE99C773CD721DF7AB0E5CA2809D0739.crl rsync://repo-rpki.idnic.net/repo/a1f15a1d-5dac-4cc9-811a-e49cb4e7bce1/0/FE79E56CBE99C773CD721DF7AB0E5CA2809D0739.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/FE79E56CBE99C773CD721DF7AB0E5CA2809D0739.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 09 Dec 2025 06:55:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 42:f6:43:84:fb:60:8d:81:4e:05:d7:68:8e:e0:29:b8:f8:79:c3:5c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=FE79E56CBE99C773CD721DF7AB0E5CA2809D0739 Validity Not Before: Dec 6 18:06:21 2025 GMT Not After : Dec 9 19:10:21 2025 GMT Subject: CN=2AFB87CED6566CDB6F56C497A98525F8C2B076A4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:b8:66:da:08:00:11:b0:05:31:df:7d:fc:a0: 53:a3:34:86:d0:a8:93:20:72:a4:f5:d3:bf:a4:23: 4d:a7:87:b0:35:98:f5:8c:3c:11:2e:87:9d:8b:b0: 7f:8c:1b:a0:5b:89:11:10:c0:88:3e:c1:6b:75:d2: 8e:a9:56:5d:b5:dd:5f:ed:1c:aa:dc:5d:7a:87:2f: ed:c3:86:9b:80:49:1c:87:d4:e2:6d:87:fb:91:c2: a3:32:f9:05:6b:8a:78:b3:9d:10:91:34:d4:45:d5: 43:f1:58:34:d9:e7:11:1d:f4:54:2b:93:93:1f:37: ab:40:1a:af:5c:3c:fd:be:9b:a1:b8:a6:f4:d6:58: 8d:8c:99:07:a8:ea:4b:a1:b4:38:b8:96:fc:dc:de: bb:5f:e9:ab:9a:86:f5:66:0f:1b:dd:79:86:05:4b: 32:66:51:b9:7c:c1:99:f3:9d:e6:88:72:d1:5c:9a: a1:36:f2:b7:71:fd:67:e4:71:c3:26:99:d5:e2:1f: ac:a6:d5:2f:8f:37:02:69:4c:e3:d9:60:32:6f:a7: 42:94:26:b1:74:a4:96:51:40:ba:54:6d:0f:ef:51: 38:9a:d7:fc:34:ea:a2:98:fe:59:36:f4:92:6c:3d: 66:b0:ae:5c:9b:5a:47:50:4f:6d:fa:2a:25:5d:3a: 12:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:FB:87:CE:D6:56:6C:DB:6F:56:C4:97:A9:85:25:F8:C2:B0:76:A4 X509v3 Authority Key Identifier: keyid:FE:79:E5:6C:BE:99:C7:73:CD:72:1D:F7:AB:0E:5C:A2:80:9D:07:39 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/a1f15a1d-5dac-4cc9-811a-e49cb4e7bce1/0/FE79E56CBE99C773CD721DF7AB0E5CA2809D0739.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/FE79E56CBE99C773CD721DF7AB0E5CA2809D0739.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a1f15a1d-5dac-4cc9-811a-e49cb4e7bce1/0/FE79E56CBE99C773CD721DF7AB0E5CA2809D0739.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3c:aa:93:ff:12:d5:8a:05:24:36:4a:fd:4b:31:c2:59:90:8b: 92:0e:86:7e:82:0a:70:07:27:c1:61:95:d8:f0:86:43:a5:e5: b3:09:df:78:a5:03:ae:f1:ce:fc:89:b6:85:fa:23:14:43:bc: d9:34:11:99:22:25:07:66:19:40:f3:37:70:d0:67:4e:e2:84: 61:83:2e:82:93:56:a1:25:ae:6d:44:93:6f:7c:8c:a3:3b:f4: b7:76:f8:d4:2e:02:2e:5c:91:44:eb:c3:23:7e:21:d5:21:a3: f7:63:08:60:16:4c:4c:1d:3e:d8:09:fc:e3:99:3d:48:62:73: 74:f2:0b:5a:06:bc:12:36:3f:ab:e0:22:eb:31:d6:b8:f7:6a: 0b:ed:82:a3:c4:8c:c5:98:1b:d3:46:4f:31:a5:19:ab:9b:a7: 74:39:d0:a1:ed:b1:fa:b5:9a:8d:34:1a:02:4b:90:a5:82:77: 1c:6f:59:50:bb:24:64:d4:40:30:d3:8f:7d:0e:4d:4b:e4:01: 48:61:22:55:9d:18:0a:34:5a:cf:a9:b2:21:40:4b:46:2c:8e: 69:38:55:9f:62:67:a2:59:ce:5a:5e:56:c6:35:5f:b6:65:4e: 37:39:71:e2:6f:25:f5:e1:1a:bd:9c:7b:a5:59:c6:13:80:d8: 7b:57:49:26 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUQvZDhPtgjYFOBddojuApuPh5w1wwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRkU3OUU1NkNCRTk5Qzc3M0NENzIxREY3QUIwRTVDQTI4 MDlEMDczOTAeFw0yNTEyMDYxODA2MjFaFw0yNTEyMDkxOTEwMjFaMDMxMTAvBgNV BAMTKDJBRkI4N0NFRDY1NjZDREI2RjU2QzQ5N0E5ODUyNUY4QzJCMDc2QTQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDDuGbaCAARsAUx3338oFOjNIbQ qJMgcqT107+kI02nh7A1mPWMPBEuh52LsH+MG6BbiREQwIg+wWt10o6pVl213V/t HKrcXXqHL+3DhpuASRyH1OJth/uRwqMy+QVriniznRCRNNRF1UPxWDTZ5xEd9FQr k5MfN6tAGq9cPP2+m6G4pvTWWI2MmQeo6kuhtDi4lvzc3rtf6auahvVmDxvdeYYF SzJmUbl8wZnzneaIctFcmqE28rdx/WfkccMmmdXiH6ym1S+PNwJpTOPZYDJvp0KU JrF0pJZRQLpUbQ/vUTia1/w06qKY/lk29JJsPWawrlybWkdQT236KiVdOhLvAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUKvuHztZWbNtvVsSXqYUl+MKwdqQwHwYDVR0j BBgwFoAU/nnlbL6Zx3PNch33qw5cooCdBzkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h MWYxNWExZC01ZGFjLTRjYzktODExYS1lNDljYjRlN2JjZTEvMC9GRTc5RTU2Q0JF OTlDNzczQ0Q3MjFERjdBQjBFNUNBMjgwOUQwNzM5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvRkU3OUU1NkNCRTk5Qzc3M0NENzIxREY3QUIwRTVDQTI4MDlE MDczOS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYTFmMTVhMWQtNWRhYy00Y2M5LTgx MWEtZTQ5Y2I0ZTdiY2UxLzAvRkU3OUU1NkNCRTk5Qzc3M0NENzIxREY3QUIwRTVD QTI4MDlEMDczOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADyqk/8S1YoFJDZK/UsxwlmQi5IOhn6CCnAH J8FhldjwhkOl5bMJ33ilA67xzvyJtoX6IxRDvNk0EZkiJQdmGUDzN3DQZ07ihGGD LoKTVqElrm1Ek298jKM79Ld2+NQuAi5ckUTrwyN+IdUho/djCGAWTEwdPtgJ/OOZ PUhic3TyC1oGvBI2P6vgIusx1rj3agvtgqPEjMWYG9NGTzGlGaubp3Q50KHtsfq1 mo00GgJLkKWCdxxvWVC7JGTUQDDTj30OTUvkAUhhIlWdGAo0Ws+psiFAS0Ysjmk4 VZ9iZ6JZzlpeVsY1X7ZlTjc5ceJvJfXhGr2ce6VZxhOA2HtXSSY= -----END CERTIFICATE-----Generated at Sun Dec 7 18:52:32 2025 by rpki-client