This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/d47026a9-0c9a-4d79-ad67-2c9dbd366d0b/0/FCD5B562FAED9B9D67F9DE5DB70578BFDB0057B3.mft File: FCD5B562FAED9B9D67F9DE5DB70578BFDB0057B3.mft (raw, json) Hash identifier: 21fG1Y+KZXgCQNOvSqd+F6KUBFH7+6lUmknqyyk87PU= Subject key identifier: 79:79:AF:DA:2F:21:2C:95:FB:EB:24:C1:7D:B0:DF:0C:44:57:48:21 Authority key identifier: FC:D5:B5:62:FA:ED:9B:9D:67:F9:DE:5D:B7:05:78:BF:DB:00:57:B3 Certificate issuer: /CN=FCD5B562FAED9B9D67F9DE5DB70578BFDB0057B3 Certificate serial: 35E10D885CE4174A393A9DF27D99C68AE7B7262F Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FCD5B562FAED9B9D67F9DE5DB70578BFDB0057B3.cer Subject info access: rsync://repo-rpki.idnic.net/repo/d47026a9-0c9a-4d79-ad67-2c9dbd366d0b/0/FCD5B562FAED9B9D67F9DE5DB70578BFDB0057B3.mft Manifest number: 0357 Signing time: Tue 02 Dec 2025 22:21:16 +0000 Manifest this update: Tue 02 Dec 2025 22:16:16 +0000 Manifest next update: Sat 06 Dec 2025 06:47:16 +0000 Files and hashes: 1: 3130332e3135312e3134302e302f32332d3233203d3e20313430343137.roa (hash: 8NA8ztqKmdQKSo6VJIi8+Ky4DaNAGzE3fau0y6GTEzI=) 2: 3130332e3135312e3134302e302f32332d3234203d3e20313430343137.roa (hash: maLwNGdhj2YMExFHAn5+1Sop9522GuyaLGRVR2YiAsA=) 3: FCD5B562FAED9B9D67F9DE5DB70578BFDB0057B3.crl (hash: dl9c42I8h42Jt53ZIUJ3qldkM+Wao+hzXtLTrBNlW58=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/d47026a9-0c9a-4d79-ad67-2c9dbd366d0b/0/FCD5B562FAED9B9D67F9DE5DB70578BFDB0057B3.crl rsync://repo-rpki.idnic.net/repo/d47026a9-0c9a-4d79-ad67-2c9dbd366d0b/0/FCD5B562FAED9B9D67F9DE5DB70578BFDB0057B3.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FCD5B562FAED9B9D67F9DE5DB70578BFDB0057B3.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 06 Dec 2025 06:47:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 35:e1:0d:88:5c:e4:17:4a:39:3a:9d:f2:7d:99:c6:8a:e7:b7:26:2f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=FCD5B562FAED9B9D67F9DE5DB70578BFDB0057B3 Validity Not Before: Dec 2 22:16:16 2025 GMT Not After : Dec 6 06:47:16 2025 GMT Subject: CN=7979AFDA2F212C95FBEB24C17DB0DF0C44574821 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:18:9a:8a:58:04:e3:15:17:22:81:81:75:1d: c2:3b:8a:f2:6a:69:02:bc:f2:55:90:b6:dd:25:43: ab:13:d8:22:8c:d4:1a:f8:f5:09:3e:3f:f1:df:3d: 9a:bf:79:c9:f0:4a:27:ff:b6:44:9b:6b:8d:24:1d: e8:16:67:39:ff:c0:2f:9b:89:f8:4d:80:74:fc:c3: 87:af:1b:06:cd:3b:d9:32:5c:6a:6e:8b:42:f5:93: 17:44:b8:e6:c3:9b:e6:80:6a:2e:18:28:2b:09:10: 35:74:c5:1b:08:e1:ea:2f:9c:2e:ef:7f:39:7c:b6: 30:a4:c7:b0:68:e0:92:31:bc:56:57:c4:e2:7c:ee: f5:3c:01:a0:4d:c7:db:1f:04:5a:5c:a9:b7:cb:42: 79:c8:dd:17:f8:fe:d4:81:ae:2c:42:3a:65:81:20: 63:d2:c8:67:b7:fc:a5:6f:0c:ba:61:75:7c:71:da: d9:72:3e:41:ec:66:5e:b8:25:01:3d:05:06:c7:c7: 92:b8:92:16:7b:c4:61:12:6e:46:03:b4:3e:76:01: 9e:68:56:a2:c7:02:4b:9a:15:a1:1d:b2:20:5f:0f: b2:dd:f2:bb:81:31:91:ab:71:66:50:84:8a:85:bf: 4b:b0:73:39:5d:13:2f:f3:2c:da:85:41:85:89:55: 23:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 79:79:AF:DA:2F:21:2C:95:FB:EB:24:C1:7D:B0:DF:0C:44:57:48:21 X509v3 Authority Key Identifier: keyid:FC:D5:B5:62:FA:ED:9B:9D:67:F9:DE:5D:B7:05:78:BF:DB:00:57:B3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/d47026a9-0c9a-4d79-ad67-2c9dbd366d0b/0/FCD5B562FAED9B9D67F9DE5DB70578BFDB0057B3.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FCD5B562FAED9B9D67F9DE5DB70578BFDB0057B3.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d47026a9-0c9a-4d79-ad67-2c9dbd366d0b/0/FCD5B562FAED9B9D67F9DE5DB70578BFDB0057B3.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 71:09:ec:b7:f9:06:fb:d2:ed:2d:a5:08:cd:b8:de:7e:6e:56: 1b:d7:2c:f6:10:aa:00:5c:f5:de:66:7a:8a:0f:82:ca:46:99: f7:16:c9:d1:1d:54:b3:59:fb:c7:d3:11:f6:95:f0:cd:c7:79: 4f:9e:ee:10:dd:2a:50:8e:bf:10:d6:c6:dc:fc:20:95:8f:b1: 96:90:99:5a:6f:3e:f9:67:4f:87:d4:95:71:77:4b:13:9f:a9: 46:11:b9:f4:4e:3a:3a:7e:93:7a:57:92:c6:be:08:24:b2:cb: 44:8c:64:a4:c1:ed:67:b4:83:f7:d0:23:81:eb:f1:1e:fd:e7: 3e:ca:80:2d:0c:63:31:26:a0:7e:ee:fb:57:9e:87:be:85:52: 7f:d0:a9:2e:13:b7:57:b2:c1:cb:1f:2c:ff:8d:50:5d:fe:ff: ca:1b:bf:24:e3:61:82:f9:ea:74:ec:1c:19:b8:33:5a:22:d8: 7e:c9:e6:77:47:02:ab:ec:5a:4a:86:11:fd:df:a0:d2:e7:85: 20:f3:be:20:c7:9f:7f:4d:fb:ec:55:9f:f7:a0:eb:35:81:69: be:8e:fa:bb:88:79:f9:2e:dc:67:18:ea:71:ba:a6:95:f4:5a: e5:84:d2:32:b6:f8:ae:3d:7b:47:d8:01:63:c1:5e:f1:e3:fe: 02:4f:a5:80 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUNeENiFzkF0o5Op3yfZnGiue3Ji8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRkNENUI1NjJGQUVEOUI5RDY3RjlERTVEQjcwNTc4QkZE QjAwNTdCMzAeFw0yNTEyMDIyMjE2MTZaFw0yNTEyMDYwNjQ3MTZaMDMxMTAvBgNV BAMTKDc5NzlBRkRBMkYyMTJDOTVGQkVCMjRDMTdEQjBERjBDNDQ1NzQ4MjEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC7GJqKWATjFRcigYF1HcI7ivJq aQK88lWQtt0lQ6sT2CKM1Br49Qk+P/HfPZq/ecnwSif/tkSba40kHegWZzn/wC+b ifhNgHT8w4evGwbNO9kyXGpui0L1kxdEuObDm+aAai4YKCsJEDV0xRsI4eovnC7v fzl8tjCkx7Bo4JIxvFZXxOJ87vU8AaBNx9sfBFpcqbfLQnnI3Rf4/tSBrixCOmWB IGPSyGe3/KVvDLphdXxx2tlyPkHsZl64JQE9BQbHx5K4khZ7xGESbkYDtD52AZ5o VqLHAkuaFaEdsiBfD7Ld8ruBMZGrcWZQhIqFv0uwczldEy/zLNqFQYWJVSNNAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUeXmv2i8hLJX76yTBfbDfDERXSCEwHwYDVR0j BBgwFoAU/NW1Yvrtm51n+d5dtwV4v9sAV7MwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k NDcwMjZhOS0wYzlhLTRkNzktYWQ2Ny0yYzlkYmQzNjZkMGIvMC9GQ0Q1QjU2MkZB RUQ5QjlENjdGOURFNURCNzA1NzhCRkRCMDA1N0IzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRkNENUI1NjJGQUVEOUI5RDY3RjlERTVEQjcwNTc4QkZEQjAw NTdCMy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZDQ3MDI2YTktMGM5YS00ZDc5LWFk NjctMmM5ZGJkMzY2ZDBiLzAvRkNENUI1NjJGQUVEOUI5RDY3RjlERTVEQjcwNTc4 QkZEQjAwNTdCMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHEJ7Lf5BvvS7S2lCM243n5uVhvXLPYQqgBc 9d5meooPgspGmfcWydEdVLNZ+8fTEfaV8M3HeU+e7hDdKlCOvxDWxtz8IJWPsZaQ mVpvPvlnT4fUlXF3SxOfqUYRufROOjp+k3pXksa+CCSyy0SMZKTB7We0g/fQI4Hr 8R795z7KgC0MYzEmoH7u+1eeh76FUn/QqS4Tt1eywcsfLP+NUF3+/8obvyTjYYL5 6nTsHBm4M1oi2H7J5ndHAqvsWkqGEf3foNLnhSDzviDHn39N++xVn/eg6zWBab6O +ruIefku3GcY6nG6ppX0WuWE0jK2+K49e0fYAWPBXvHj/gJPpYA= -----END CERTIFICATE-----Generated at Wed Dec 3 14:55:17 2025 by rpki-client