This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/dae13bac-91c1-463b-8333-64eec6d2797e/0/FD18E3ECB5F2285C0751C48EAF23EF210BA8FDCC.mft File: FD18E3ECB5F2285C0751C48EAF23EF210BA8FDCC.mft (raw, json) Hash identifier: 2FrFxnvAsxSNHP6QIKGGdnzXWArcDYQaVqv1YbucWS8= Subject key identifier: F6:7A:E6:71:22:D6:C0:6A:B3:1D:8F:D9:8B:B5:E8:23:FE:1C:7D:CC Authority key identifier: FD:18:E3:EC:B5:F2:28:5C:07:51:C4:8E:AF:23:EF:21:0B:A8:FD:CC Certificate issuer: /CN=FD18E3ECB5F2285C0751C48EAF23EF210BA8FDCC Certificate serial: 1ACF44B75C8A365FA8A63D0E9B8AE2C60DBC7F26 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/FD18E3ECB5F2285C0751C48EAF23EF210BA8FDCC.cer Subject info access: rsync://repo-rpki.idnic.net/repo/dae13bac-91c1-463b-8333-64eec6d2797e/0/FD18E3ECB5F2285C0751C48EAF23EF210BA8FDCC.mft Manifest number: 0117 Signing time: Mon 01 Dec 2025 11:11:18 +0000 Manifest this update: Mon 01 Dec 2025 11:06:18 +0000 Manifest next update: Thu 04 Dec 2025 20:32:18 +0000 Files and hashes: 1: FD18E3ECB5F2285C0751C48EAF23EF210BA8FDCC.crl (hash: oz6nhzHALVdaJExgQlofWKMfTsupNgD+lTFbWiJ3umY=) 2: 3135372e32302e39352e302f32342d3234203d3e20313431363032.roa (hash: 88y84elDiek3O/IhTaNMS2vLlPQVqlAnqgDoLBdJafc=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/dae13bac-91c1-463b-8333-64eec6d2797e/0/FD18E3ECB5F2285C0751C48EAF23EF210BA8FDCC.crl rsync://repo-rpki.idnic.net/repo/dae13bac-91c1-463b-8333-64eec6d2797e/0/FD18E3ECB5F2285C0751C48EAF23EF210BA8FDCC.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/FD18E3ECB5F2285C0751C48EAF23EF210BA8FDCC.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 04 Dec 2025 20:32:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1a:cf:44:b7:5c:8a:36:5f:a8:a6:3d:0e:9b:8a:e2:c6:0d:bc:7f:26 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=FD18E3ECB5F2285C0751C48EAF23EF210BA8FDCC Validity Not Before: Dec 1 11:06:18 2025 GMT Not After : Dec 4 20:32:18 2025 GMT Subject: CN=F67AE67122D6C06AB31D8FD98BB5E823FE1C7DCC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:0d:54:d1:28:01:49:0e:36:63:63:ad:9f:f6: 82:27:50:0e:33:05:48:aa:4a:23:b8:10:d1:b8:1e: a8:7d:30:c9:44:57:6b:be:95:5e:3c:81:24:9c:06: 07:11:6d:6f:d4:59:43:c5:4f:60:a9:21:b6:d5:46: 34:96:c0:bc:d9:27:ed:8a:b5:33:db:8d:a7:fd:b6: d2:40:6b:91:10:5e:d7:5c:89:3a:01:08:2e:b0:e3: fa:ff:88:7f:08:7c:92:89:20:e4:76:9b:49:bb:a9: 3c:72:46:a9:1b:62:09:18:63:73:fa:89:d3:8c:d0: 32:aa:d7:13:b4:70:f4:31:35:2f:bf:61:4a:02:ad: ba:f0:14:45:ea:ea:c5:28:35:f8:03:32:6a:db:e9: 42:90:f6:6d:8e:03:e0:f8:e6:12:ab:bd:99:02:12: fc:78:5c:35:7e:62:d4:b1:dd:4f:73:38:76:24:4b: 8a:98:b9:09:b0:b5:da:62:d7:37:a8:72:68:04:95: 12:5d:d1:3c:91:7e:5a:c8:e5:ef:5a:d4:a5:d4:4e: 34:15:27:14:45:65:eb:c2:ab:28:1e:78:d4:bd:ad: 97:6c:7c:2a:4f:58:96:5e:29:5d:aa:fd:2a:bb:c6: 61:e3:9b:d9:d2:8a:8b:99:d2:2d:0d:e7:7c:5e:a9: ca:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F6:7A:E6:71:22:D6:C0:6A:B3:1D:8F:D9:8B:B5:E8:23:FE:1C:7D:CC X509v3 Authority Key Identifier: keyid:FD:18:E3:EC:B5:F2:28:5C:07:51:C4:8E:AF:23:EF:21:0B:A8:FD:CC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/dae13bac-91c1-463b-8333-64eec6d2797e/0/FD18E3ECB5F2285C0751C48EAF23EF210BA8FDCC.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/FD18E3ECB5F2285C0751C48EAF23EF210BA8FDCC.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/dae13bac-91c1-463b-8333-64eec6d2797e/0/FD18E3ECB5F2285C0751C48EAF23EF210BA8FDCC.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 74:39:f5:0e:80:ed:11:39:2f:50:a1:00:03:79:4e:1f:f6:d4: 4b:df:09:18:a6:07:c2:6e:98:7f:1a:ca:a1:0d:4c:3b:29:20: 10:4d:0e:fb:d0:2e:9e:95:09:4f:5c:3c:d9:85:fb:6d:8b:8c: 42:3c:86:06:1b:f9:6e:25:44:d8:7e:3b:77:c6:3c:1e:c5:68: c1:9c:60:ed:14:90:d2:15:ea:44:03:f7:80:4f:b3:09:56:be: c8:06:0b:20:bf:0f:5e:a5:eb:40:c7:5d:7a:62:c3:46:6d:19: 26:60:d3:ad:e5:c6:a4:5c:8c:c7:3f:f1:19:b6:05:40:e2:0e: c8:77:04:c8:50:c1:8f:00:a0:17:ef:c4:dc:9c:fd:1a:f2:eb: d9:26:74:bc:02:d2:e6:a5:81:3f:c4:5a:7e:f5:91:3b:c7:55: 96:98:b3:34:4d:c8:7c:12:f2:b1:11:b0:80:9b:69:48:6c:4e: 81:8c:0c:64:48:54:1a:a1:f8:50:19:30:75:d7:9c:c8:2d:81: bd:43:83:e1:fb:c8:5e:9e:08:fb:cc:e1:b1:86:cd:44:2e:17: 64:95:aa:1f:1d:35:86:48:6e:ea:4f:60:81:be:f8:b0:12:6c: 3b:99:da:30:51:89:41:07:37:2e:d7:d1:79:a7:8e:99:05:d4: 30:5b:2c:ba -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUGs9Et1yKNl+opj0Om4rixg28fyYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRkQxOEUzRUNCNUYyMjg1QzA3NTFDNDhFQUYyM0VGMjEw QkE4RkRDQzAeFw0yNTEyMDExMTA2MThaFw0yNTEyMDQyMDMyMThaMDMxMTAvBgNV BAMTKEY2N0FFNjcxMjJENkMwNkFCMzFEOEZEOThCQjVFODIzRkUxQzdEQ0MwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDRDVTRKAFJDjZjY62f9oInUA4z BUiqSiO4ENG4Hqh9MMlEV2u+lV48gSScBgcRbW/UWUPFT2CpIbbVRjSWwLzZJ+2K tTPbjaf9ttJAa5EQXtdciToBCC6w4/r/iH8IfJKJIOR2m0m7qTxyRqkbYgkYY3P6 idOM0DKq1xO0cPQxNS+/YUoCrbrwFEXq6sUoNfgDMmrb6UKQ9m2OA+D45hKrvZkC Evx4XDV+YtSx3U9zOHYkS4qYuQmwtdpi1zeocmgElRJd0TyRflrI5e9a1KXUTjQV JxRFZevCqygeeNS9rZdsfCpPWJZeKV2q/Sq7xmHjm9nSiouZ0i0N53xeqcoTAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU9nrmcSLWwGqzHY/Zi7XoI/4cfcwwHwYDVR0j BBgwFoAU/Rjj7LXyKFwHUcSOryPvIQuo/cwwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k YWUxM2JhYy05MWMxLTQ2M2ItODMzMy02NGVlYzZkMjc5N2UvMC9GRDE4RTNFQ0I1 RjIyODVDMDc1MUM0OEVBRjIzRUYyMTBCQThGRENDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvRkQxOEUzRUNCNUYyMjg1QzA3NTFDNDhFQUYyM0VGMjEwQkE4 RkRDQy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZGFlMTNiYWMtOTFjMS00NjNiLTgz MzMtNjRlZWM2ZDI3OTdlLzAvRkQxOEUzRUNCNUYyMjg1QzA3NTFDNDhFQUYyM0VG MjEwQkE4RkRDQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHQ59Q6A7RE5L1ChAAN5Th/21EvfCRimB8Ju mH8ayqENTDspIBBNDvvQLp6VCU9cPNmF+22LjEI8hgYb+W4lRNh+O3fGPB7FaMGc YO0UkNIV6kQD94BPswlWvsgGCyC/D16l60DHXXpiw0ZtGSZg063lxqRcjMc/8Rm2 BUDiDsh3BMhQwY8AoBfvxNyc/Rry69kmdLwC0ualgT/EWn71kTvHVZaYszRNyHwS 8rERsICbaUhsToGMDGRIVBqh+FAZMHXXnMgtgb1Dg+H7yF6eCPvM4bGGzUQuF2SV qh8dNYZIbupPYIG++LASbDuZ2jBRiUEHNy7X0XmnjpkF1DBbLLo= -----END CERTIFICATE-----Generated at Wed Dec 3 16:20:54 2025 by rpki-client