This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/ede4719a-ace4-41f2-a070-8de3192b7f49/0/FC31DB70F7B2F17F13E92A2E7BAE5554792EFBBF.mft File: FC31DB70F7B2F17F13E92A2E7BAE5554792EFBBF.mft (raw, json) Hash identifier: ybm6mRX/qMm7ZGsOWTcgdvKe7Ocv9456Qf6y9QRlJ8Q= Subject key identifier: 49:69:B8:41:08:0A:0B:75:63:2F:CB:BD:BE:C8:D7:F2:84:13:6B:12 Authority key identifier: FC:31:DB:70:F7:B2:F1:7F:13:E9:2A:2E:7B:AE:55:54:79:2E:FB:BF Certificate issuer: /CN=FC31DB70F7B2F17F13E92A2E7BAE5554792EFBBF Certificate serial: 6AB2CB126DEDC78DE6D272F034D40E1DBE7BB1D1 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FC31DB70F7B2F17F13E92A2E7BAE5554792EFBBF.cer Subject info access: rsync://repo-rpki.idnic.net/repo/ede4719a-ace4-41f2-a070-8de3192b7f49/0/FC31DB70F7B2F17F13E92A2E7BAE5554792EFBBF.mft Manifest number: 0527 Signing time: Mon 01 Dec 2025 20:40:46 +0000 Manifest this update: Mon 01 Dec 2025 20:35:46 +0000 Manifest next update: Fri 05 Dec 2025 00:04:46 +0000 Files and hashes: 1: 3230322e36312e39382e302f32332d3234203d3e203234353337.roa (hash: 7v+UWewpBXKuzE8AR/fYejkKyBNOrEBvR5vrqtJwA4s=) 2: FC31DB70F7B2F17F13E92A2E7BAE5554792EFBBF.crl (hash: kHWdSk0Mn5QZSpf6AUJ9n02Z9V9D1z1FCqoO8PLXXfo=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/ede4719a-ace4-41f2-a070-8de3192b7f49/0/FC31DB70F7B2F17F13E92A2E7BAE5554792EFBBF.crl rsync://repo-rpki.idnic.net/repo/ede4719a-ace4-41f2-a070-8de3192b7f49/0/FC31DB70F7B2F17F13E92A2E7BAE5554792EFBBF.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FC31DB70F7B2F17F13E92A2E7BAE5554792EFBBF.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 05 Dec 2025 00:04:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6a:b2:cb:12:6d:ed:c7:8d:e6:d2:72:f0:34:d4:0e:1d:be:7b:b1:d1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=FC31DB70F7B2F17F13E92A2E7BAE5554792EFBBF Validity Not Before: Dec 1 20:35:46 2025 GMT Not After : Dec 5 00:04:46 2025 GMT Subject: CN=4969B841080A0B75632FCBBDBEC8D7F284136B12 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:21:37:22:50:e8:fe:11:9c:fd:07:17:7c:d7: 0d:73:b7:e1:da:e6:1c:04:b8:36:06:f5:74:7e:2f: cd:c6:21:db:21:db:78:ee:63:6c:7c:5a:64:a4:2d: e9:4f:05:c2:31:9d:02:e4:9f:ac:ef:48:62:a1:32: 0a:7c:52:39:f9:b4:1c:58:98:d0:a7:2f:0c:96:e5: 7b:0a:4e:88:fb:43:52:dc:a1:f7:5d:bf:7d:fe:89: 7a:21:a5:a8:12:14:c6:6b:e8:1d:5d:c1:63:29:1c: f2:00:31:b0:d4:ce:f0:c9:56:09:a6:5e:9b:0f:f2: c7:39:55:94:4a:9a:d5:e0:25:84:72:58:4e:97:6f: c1:60:7e:d8:eb:36:d5:e7:cb:88:72:96:d5:ad:2d: e9:9d:47:ec:2b:88:2f:64:24:98:d5:c9:a8:9b:ad: f9:86:9a:c6:5b:19:42:4a:ae:e3:61:5d:0d:1e:25: 46:f3:b1:09:69:c3:88:5a:60:26:75:1a:fd:0a:a8: dc:d2:01:44:ba:13:e4:32:72:92:4b:18:70:64:7b: 89:59:2d:a3:0a:1f:6b:a7:ff:48:91:9c:47:d8:6a: 7e:39:f3:8a:4f:18:2b:64:4e:8a:d1:71:cb:a6:14: ad:a9:21:c2:98:eb:5c:6d:d2:70:15:e3:c8:ef:b8: 73:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:69:B8:41:08:0A:0B:75:63:2F:CB:BD:BE:C8:D7:F2:84:13:6B:12 X509v3 Authority Key Identifier: keyid:FC:31:DB:70:F7:B2:F1:7F:13:E9:2A:2E:7B:AE:55:54:79:2E:FB:BF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/ede4719a-ace4-41f2-a070-8de3192b7f49/0/FC31DB70F7B2F17F13E92A2E7BAE5554792EFBBF.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FC31DB70F7B2F17F13E92A2E7BAE5554792EFBBF.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ede4719a-ace4-41f2-a070-8de3192b7f49/0/FC31DB70F7B2F17F13E92A2E7BAE5554792EFBBF.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 05:9e:96:48:f5:d2:a8:83:3e:df:4c:af:85:97:6c:d5:f4:d4: 20:a2:7a:24:f2:58:2b:16:3f:ae:d7:04:1b:e0:0b:a1:42:b8: 94:2a:80:b4:eb:c3:ed:09:5f:d5:e0:6f:4e:d3:3c:4e:0a:f7: 04:5d:40:dc:d3:96:68:9e:7b:0c:3d:c8:72:29:93:bb:13:36: 88:29:e0:38:14:fe:95:df:2d:96:84:e8:69:ab:b9:e2:2e:27: 2f:16:6e:68:cc:e6:15:b8:6b:46:13:b2:85:2c:f2:65:25:37: a2:16:4e:94:73:5d:c9:21:da:8b:86:49:66:2e:1f:fe:7c:a3: e0:85:ce:6a:5c:a9:06:8b:b2:75:70:49:2c:8f:66:92:82:3b: 5a:99:ad:18:7e:68:17:3c:08:4a:e9:73:d4:f1:53:80:d6:8c: aa:08:8f:e5:f3:ed:d4:fd:5e:72:de:0d:e7:5e:99:c3:3b:2a: e0:c5:a9:ed:77:3f:48:fe:9f:be:c9:9d:1a:b3:27:dc:b9:d3: 1d:ea:a6:33:c1:61:4e:51:b2:66:ac:6a:1f:a3:c2:a9:06:25: cc:6e:20:f4:46:f1:2b:99:90:fa:3a:28:84:84:3a:60:eb:6c: 7c:3e:18:3a:45:b1:c8:df:fc:f1:9b:9d:45:9e:93:99:69:09: 5b:7a:57:ae -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUarLLEm3tx43m0nLwNNQOHb57sdEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRkMzMURCNzBGN0IyRjE3RjEzRTkyQTJFN0JBRTU1NTQ3 OTJFRkJCRjAeFw0yNTEyMDEyMDM1NDZaFw0yNTEyMDUwMDA0NDZaMDMxMTAvBgNV BAMTKDQ5NjlCODQxMDgwQTBCNzU2MzJGQ0JCREJFQzhEN0YyODQxMzZCMTIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDKITciUOj+EZz9Bxd81w1zt+Ha 5hwEuDYG9XR+L83GIdsh23juY2x8WmSkLelPBcIxnQLkn6zvSGKhMgp8Ujn5tBxY mNCnLwyW5XsKToj7Q1Lcofddv33+iXohpagSFMZr6B1dwWMpHPIAMbDUzvDJVgmm XpsP8sc5VZRKmtXgJYRyWE6Xb8FgftjrNtXny4hyltWtLemdR+wriC9kJJjVyaib rfmGmsZbGUJKruNhXQ0eJUbzsQlpw4haYCZ1Gv0KqNzSAUS6E+QycpJLGHBke4lZ LaMKH2un/0iRnEfYan4584pPGCtkTorRccumFK2pIcKY61xt0nAV48jvuHNrAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUSWm4QQgKC3VjL8u9vsjX8oQTaxIwHwYDVR0j BBgwFoAU/DHbcPey8X8T6Soue65VVHku+78wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l ZGU0NzE5YS1hY2U0LTQxZjItYTA3MC04ZGUzMTkyYjdmNDkvMC9GQzMxREI3MEY3 QjJGMTdGMTNFOTJBMkU3QkFFNTU1NDc5MkVGQkJGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRkMzMURCNzBGN0IyRjE3RjEzRTkyQTJFN0JBRTU1NTQ3OTJF RkJCRi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZWRlNDcxOWEtYWNlNC00MWYyLWEw NzAtOGRlMzE5MmI3ZjQ5LzAvRkMzMURCNzBGN0IyRjE3RjEzRTkyQTJFN0JBRTU1 NTQ3OTJFRkJCRi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAWelkj10qiDPt9Mr4WXbNX01CCieiTyWCsW P67XBBvgC6FCuJQqgLTrw+0JX9Xgb07TPE4K9wRdQNzTlmieeww9yHIpk7sTNogp 4DgU/pXfLZaE6GmrueIuJy8WbmjM5hW4a0YTsoUs8mUlN6IWTpRzXckh2ouGSWYu H/58o+CFzmpcqQaLsnVwSSyPZpKCO1qZrRh+aBc8CErpc9TxU4DWjKoIj+Xz7dT9 XnLeDedemcM7KuDFqe13P0j+n77JnRqzJ9y50x3qpjPBYU5Rsmasah+jwqkGJcxu IPRG8SuZkPo6KISEOmDrbHw+GDpFscjf/PGbnUWek5lpCVt6V64= -----END CERTIFICATE-----Generated at Wed Dec 3 14:43:38 2025 by rpki-client