This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/af5cfba3-e017-4e8a-9ac5-f2d304317365/0/FC2E85BE9AC0A6BE53B792A489D50609F924187F.mft File: FC2E85BE9AC0A6BE53B792A489D50609F924187F.mft (raw, json) Hash identifier: 3gpZrbyse9t+WhAcVgOA6xIyX7O+lysZj9eNYakgLAQ= Subject key identifier: 54:B1:A5:38:E3:56:5B:5E:34:C8:2E:54:4E:D6:61:B3:FD:68:69:6E Authority key identifier: FC:2E:85:BE:9A:C0:A6:BE:53:B7:92:A4:89:D5:06:09:F9:24:18:7F Certificate issuer: /CN=FC2E85BE9AC0A6BE53B792A489D50609F924187F Certificate serial: 15591E45E59A5DD40C54188DB22A06EB9147D2F9 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FC2E85BE9AC0A6BE53B792A489D50609F924187F.cer Subject info access: rsync://repo-rpki.idnic.net/repo/af5cfba3-e017-4e8a-9ac5-f2d304317365/0/FC2E85BE9AC0A6BE53B792A489D50609F924187F.mft Manifest number: 052B Signing time: Wed 03 Dec 2025 02:01:09 +0000 Manifest this update: Wed 03 Dec 2025 01:56:09 +0000 Manifest next update: Sat 06 Dec 2025 06:17:09 +0000 Files and hashes: 1: FC2E85BE9AC0A6BE53B792A489D50609F924187F.crl (hash: ag60JbfNaOyKIRAmRi7mG4gJQIZIyhpL0CA1Bcw/6C0=) 2: 3130332e3131322e3138392e302f32342d3234203d3e20313337333332.roa (hash: fTPWv2oiJIx2qSggb2hiWiOmKdtYeAQZFu4dr/E9CSA=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/af5cfba3-e017-4e8a-9ac5-f2d304317365/0/FC2E85BE9AC0A6BE53B792A489D50609F924187F.crl rsync://repo-rpki.idnic.net/repo/af5cfba3-e017-4e8a-9ac5-f2d304317365/0/FC2E85BE9AC0A6BE53B792A489D50609F924187F.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FC2E85BE9AC0A6BE53B792A489D50609F924187F.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 06 Dec 2025 06:17:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 15:59:1e:45:e5:9a:5d:d4:0c:54:18:8d:b2:2a:06:eb:91:47:d2:f9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=FC2E85BE9AC0A6BE53B792A489D50609F924187F Validity Not Before: Dec 3 01:56:09 2025 GMT Not After : Dec 6 06:17:09 2025 GMT Subject: CN=54B1A538E3565B5E34C82E544ED661B3FD68696E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:3a:79:76:99:ce:0b:34:85:48:36:b4:a0:57: 72:41:0e:34:6a:5a:f0:e3:e8:59:11:d7:1d:bc:62: fc:3a:5e:6d:2c:fc:7a:53:89:3b:b7:c3:57:eb:34: 3e:59:8d:3c:aa:18:34:f5:a3:eb:25:35:14:97:c3: e5:cc:2a:6c:e0:b3:d1:2b:30:81:3b:2c:59:ce:28: e2:4a:b5:74:39:08:64:d0:a7:08:19:27:60:49:26: e3:2b:eb:1f:9f:6a:2a:39:02:fd:25:66:5a:ac:d0: 95:09:a2:3f:04:c8:7c:e6:ea:9b:71:fa:f5:d7:5b: d2:15:a3:af:3b:fe:b4:df:bc:42:f9:b2:cb:f4:dc: 0a:30:38:69:6a:b3:78:40:bb:e8:54:1c:50:86:8d: 8e:05:f6:94:2d:1e:11:10:4c:7c:39:a1:c3:97:c1: 1b:2d:95:3c:d8:07:b0:48:4f:52:5a:5f:5e:8c:b2: bf:99:a2:d7:fb:0d:b4:e7:3b:a4:b1:42:fe:84:1e: bf:65:d7:f5:4a:fd:fd:d3:e4:f4:cd:c5:69:61:f6: c9:6f:15:82:e5:b9:05:59:58:3c:b1:4f:14:3e:5d: 58:8a:b2:e2:fa:5a:fc:b3:4c:88:8c:59:78:11:de: 47:6f:b8:10:7a:aa:f6:5f:58:86:9a:3f:82:9d:b8: 93:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 54:B1:A5:38:E3:56:5B:5E:34:C8:2E:54:4E:D6:61:B3:FD:68:69:6E X509v3 Authority Key Identifier: keyid:FC:2E:85:BE:9A:C0:A6:BE:53:B7:92:A4:89:D5:06:09:F9:24:18:7F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/af5cfba3-e017-4e8a-9ac5-f2d304317365/0/FC2E85BE9AC0A6BE53B792A489D50609F924187F.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FC2E85BE9AC0A6BE53B792A489D50609F924187F.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/af5cfba3-e017-4e8a-9ac5-f2d304317365/0/FC2E85BE9AC0A6BE53B792A489D50609F924187F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 70:ec:66:ff:19:8b:09:7c:85:c9:4a:b7:20:2e:26:e2:47:99: 5a:30:41:89:6d:a9:59:7b:61:0b:8a:27:73:09:c7:8b:64:51: 07:6b:c8:d5:2e:de:74:3a:e9:3d:bf:71:17:20:63:17:55:20: 57:02:98:be:9d:00:96:27:82:8d:a9:ad:29:d7:df:64:74:6b: f9:07:58:da:94:26:c4:a2:04:ca:4c:f3:65:ad:28:93:9c:9e: ab:77:52:95:6c:e9:dc:cc:56:6a:d2:15:24:98:0d:0b:1b:42: 97:50:36:ec:3e:3f:f3:a1:80:76:90:1a:2d:ac:f5:8f:f0:60: 7d:d9:0d:f4:b3:a5:2d:2f:48:9d:f8:da:f0:dd:a0:e9:c8:21: a6:6d:bb:af:a2:48:93:48:43:5a:a9:81:ea:3d:8b:4c:12:ee: 60:e4:a1:8b:f4:c3:64:d7:75:01:0e:76:af:43:20:e7:e6:84: d6:b8:97:d1:f2:37:cf:77:49:d1:eb:65:47:ea:05:4f:64:a0: 7f:2e:73:e3:9d:2c:f6:68:8c:86:75:0c:54:77:45:f3:6b:21: 78:55:cb:64:ef:6f:b3:6e:74:c5:6f:ea:91:2f:3d:f7:cc:aa: d9:e8:01:c9:25:5f:d1:56:0a:2c:1d:fb:12:62:e9:f8:f2:32: d2:4b:75:20 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUFVkeReWaXdQMVBiNsioG65FH0vkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRkMyRTg1QkU5QUMwQTZCRTUzQjc5MkE0ODlENTA2MDlG OTI0MTg3RjAeFw0yNTEyMDMwMTU2MDlaFw0yNTEyMDYwNjE3MDlaMDMxMTAvBgNV BAMTKDU0QjFBNTM4RTM1NjVCNUUzNEM4MkU1NDRFRDY2MUIzRkQ2ODY5NkUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDCOnl2mc4LNIVINrSgV3JBDjRq WvDj6FkR1x28Yvw6Xm0s/HpTiTu3w1frND5ZjTyqGDT1o+slNRSXw+XMKmzgs9Er MIE7LFnOKOJKtXQ5CGTQpwgZJ2BJJuMr6x+faio5Av0lZlqs0JUJoj8EyHzm6ptx +vXXW9IVo687/rTfvEL5ssv03AowOGlqs3hAu+hUHFCGjY4F9pQtHhEQTHw5ocOX wRstlTzYB7BIT1JaX16Msr+Zotf7DbTnO6SxQv6EHr9l1/VK/f3T5PTNxWlh9slv FYLluQVZWDyxTxQ+XViKsuL6WvyzTIiMWXgR3kdvuBB6qvZfWIaaP4KduJNHAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUVLGlOONWW140yC5UTtZhs/1oaW4wHwYDVR0j BBgwFoAU/C6FvprApr5Tt5KkidUGCfkkGH8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h ZjVjZmJhMy1lMDE3LTRlOGEtOWFjNS1mMmQzMDQzMTczNjUvMC9GQzJFODVCRTlB QzBBNkJFNTNCNzkyQTQ4OUQ1MDYwOUY5MjQxODdGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRkMyRTg1QkU5QUMwQTZCRTUzQjc5MkE0ODlENTA2MDlGOTI0 MTg3Ri5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYWY1Y2ZiYTMtZTAxNy00ZThhLTlh YzUtZjJkMzA0MzE3MzY1LzAvRkMyRTg1QkU5QUMwQTZCRTUzQjc5MkE0ODlENTA2 MDlGOTI0MTg3Ri5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHDsZv8Ziwl8hclKtyAuJuJHmVowQYltqVl7 YQuKJ3MJx4tkUQdryNUu3nQ66T2/cRcgYxdVIFcCmL6dAJYngo2prSnX32R0a/kH WNqUJsSiBMpM82WtKJOcnqt3UpVs6dzMVmrSFSSYDQsbQpdQNuw+P/OhgHaQGi2s 9Y/wYH3ZDfSzpS0vSJ342vDdoOnIIaZtu6+iSJNIQ1qpgeo9i0wS7mDkoYv0w2TX dQEOdq9DIOfmhNa4l9HyN893SdHrZUfqBU9koH8uc+OdLPZojIZ1DFR3RfNrIXhV y2Tvb7NudMVv6pEvPffMqtnoAcklX9FWCiwd+xJi6fjyMtJLdSA= -----END CERTIFICATE-----Generated at Wed Dec 3 15:51:03 2025 by rpki-client