This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/1653247a-a56e-424a-a07b-36a2511d7caa/0/FE880CC93B6284E6833106A5BEB71A0CDDE57C0B.mft File: FE880CC93B6284E6833106A5BEB71A0CDDE57C0B.mft (raw, json) Hash identifier: AY6WoaLBMiFP6QVbWaoZhsrLbOn80D2eu/mhiTlkjEg= Subject key identifier: 45:4A:57:D4:CC:68:D9:8E:EA:DC:76:79:EA:F6:0E:7C:56:8E:70:D8 Authority key identifier: FE:88:0C:C9:3B:62:84:E6:83:31:06:A5:BE:B7:1A:0C:DD:E5:7C:0B Certificate issuer: /CN=FE880CC93B6284E6833106A5BEB71A0CDDE57C0B Certificate serial: 52999353F66DA08629121F3822BD3CD2FCDB6FEA Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FE880CC93B6284E6833106A5BEB71A0CDDE57C0B.cer Subject info access: rsync://repo-rpki.idnic.net/repo/1653247a-a56e-424a-a07b-36a2511d7caa/0/FE880CC93B6284E6833106A5BEB71A0CDDE57C0B.mft Manifest number: 0220 Signing time: Tue 23 Dec 2025 02:22:12 +0000 Manifest this update: Tue 23 Dec 2025 02:17:12 +0000 Manifest next update: Fri 26 Dec 2025 07:19:12 +0000 Files and hashes: 1: 3130332e31332e3133392e302f32342d3234203d3e20313530323135.roa (hash: cU1g8IvJ9xTyNpUSLD7UlYtWkf7YESigdS5w5xzxaBQ=) 2: FE880CC93B6284E6833106A5BEB71A0CDDE57C0B.crl (hash: SroazvyCVgFje+39DbC4fvbcqU9+VttVWLoiNPI5d7o=) 3: 3130332e31332e3133382e302f32342d3234203d3e20313530323135.roa (hash: 6ADoYkeIrhNdhv/k4Oyj/4jDcP6VkQMjB86DXlVYGIc=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/1653247a-a56e-424a-a07b-36a2511d7caa/0/FE880CC93B6284E6833106A5BEB71A0CDDE57C0B.crl rsync://repo-rpki.idnic.net/repo/1653247a-a56e-424a-a07b-36a2511d7caa/0/FE880CC93B6284E6833106A5BEB71A0CDDE57C0B.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FE880CC93B6284E6833106A5BEB71A0CDDE57C0B.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 26 Dec 2025 07:19:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 52:99:93:53:f6:6d:a0:86:29:12:1f:38:22:bd:3c:d2:fc:db:6f:ea Signature Algorithm: sha256WithRSAEncryption Issuer: CN=FE880CC93B6284E6833106A5BEB71A0CDDE57C0B Validity Not Before: Dec 23 02:17:12 2025 GMT Not After : Dec 26 07:19:12 2025 GMT Subject: CN=454A57D4CC68D98EEADC7679EAF60E7C568E70D8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:1e:d4:01:59:ba:27:9d:8d:2a:2f:d3:57:17: 1b:a1:f2:96:ce:e7:07:58:7e:a5:38:d9:4c:9b:ed: 65:13:2d:4d:d0:82:99:87:f5:9d:62:64:4b:14:ae: 28:fc:b0:1c:ef:1d:43:d0:a2:20:b3:50:54:a3:82: 46:3f:ec:f4:8a:4a:74:74:6a:0d:04:a6:86:53:d1: 9c:73:e2:0a:ed:62:a7:16:7c:03:26:88:b5:34:99: b6:ed:18:23:11:62:98:f6:f6:ff:5d:0b:20:f9:8f: 9e:ab:58:af:96:1e:8d:15:1c:0e:89:64:f3:49:2f: 3c:2e:e0:23:2f:c1:9b:f3:e1:12:43:86:0c:ef:76: 32:6a:bb:e0:bb:4c:b3:fa:b7:dd:f5:c0:60:a1:16: ea:84:cf:d7:b2:d3:25:b4:3b:80:1a:90:b9:eb:1e: 47:85:2d:ae:a2:a5:02:c0:f0:3a:cc:cb:a6:56:d1: 19:2b:1a:fa:87:b6:c2:c3:30:ff:be:ca:97:d0:61: 1f:77:8a:9a:8b:20:6e:c8:56:4b:11:1c:c1:58:49: 06:89:8f:53:80:00:01:3d:59:dc:d6:90:99:d1:2b: 6d:ef:eb:2b:9b:00:4d:7b:68:93:c5:53:c8:58:b2: 79:c5:b8:b0:da:70:af:17:8e:d3:15:bd:5b:36:2b: ef:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 45:4A:57:D4:CC:68:D9:8E:EA:DC:76:79:EA:F6:0E:7C:56:8E:70:D8 X509v3 Authority Key Identifier: keyid:FE:88:0C:C9:3B:62:84:E6:83:31:06:A5:BE:B7:1A:0C:DD:E5:7C:0B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/1653247a-a56e-424a-a07b-36a2511d7caa/0/FE880CC93B6284E6833106A5BEB71A0CDDE57C0B.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FE880CC93B6284E6833106A5BEB71A0CDDE57C0B.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/1653247a-a56e-424a-a07b-36a2511d7caa/0/FE880CC93B6284E6833106A5BEB71A0CDDE57C0B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7d:a1:0a:23:b5:e6:4c:06:62:82:69:b0:ac:ff:b8:4e:8b:90: 96:32:ab:5c:00:98:2c:b5:ea:7c:f0:34:4a:fb:d2:34:de:fc: dd:41:7b:bd:81:2e:ce:29:92:5e:66:e5:93:59:83:c8:dc:3a: 0c:0e:8e:1c:4f:54:1a:e6:60:ab:44:7d:66:33:c6:dc:d2:a8: 64:67:e7:af:60:c7:61:a9:1c:c6:91:b6:51:a0:86:62:bb:b1: 05:a4:a8:83:80:cf:1b:dd:fe:56:2e:8d:77:9f:e7:24:17:d1: ca:77:b4:0b:9a:52:4e:0f:4b:7e:2b:fc:a5:c0:87:d6:b2:0b: b6:37:f5:57:2d:5a:e3:e4:f7:e5:ee:ed:f1:84:e4:68:74:60: d3:8b:96:3d:93:bb:e4:be:6f:f4:95:95:f0:8b:01:f1:fe:cc: 27:a9:36:90:21:2a:9b:d0:8e:a1:e3:32:0b:d8:61:11:5c:8b: 85:7e:de:57:b6:8d:0c:a4:f6:53:e8:a4:10:c2:66:cf:1f:a2: 5f:64:df:53:a4:ba:2c:a7:06:d3:85:0e:ee:c0:70:ac:50:0f: f3:e0:8e:0e:f8:34:e8:73:26:d5:b9:51:2c:ad:74:32:8b:be: 41:e4:a0:e3:89:5d:04:94:bc:ee:f8:5b:68:ea:7a:2a:25:00: b4:d8:66:3a -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUUpmTU/ZtoIYpEh84Ir080vzbb+owDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRkU4ODBDQzkzQjYyODRFNjgzMzEwNkE1QkVCNzFBMENE REU1N0MwQjAeFw0yNTEyMjMwMjE3MTJaFw0yNTEyMjYwNzE5MTJaMDMxMTAvBgNV BAMTKDQ1NEE1N0Q0Q0M2OEQ5OEVFQURDNzY3OUVBRjYwRTdDNTY4RTcwRDgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCkHtQBWbonnY0qL9NXFxuh8pbO 5wdYfqU42Uyb7WUTLU3QgpmH9Z1iZEsUrij8sBzvHUPQoiCzUFSjgkY/7PSKSnR0 ag0EpoZT0Zxz4grtYqcWfAMmiLU0mbbtGCMRYpj29v9dCyD5j56rWK+WHo0VHA6J ZPNJLzwu4CMvwZvz4RJDhgzvdjJqu+C7TLP6t931wGChFuqEz9ey0yW0O4AakLnr HkeFLa6ipQLA8DrMy6ZW0RkrGvqHtsLDMP++ypfQYR93ipqLIG7IVksRHMFYSQaJ j1OAAAE9WdzWkJnRK23v6yubAE17aJPFU8hYsnnFuLDacK8XjtMVvVs2K+8/AgMB AAGjggI8MIICODAdBgNVHQ4EFgQURUpX1Mxo2Y7q3HZ56vYOfFaOcNgwHwYDVR0j BBgwFoAU/ogMyTtihOaDMQalvrcaDN3lfAswDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x NjUzMjQ3YS1hNTZlLTQyNGEtYTA3Yi0zNmEyNTExZDdjYWEvMC9GRTg4MENDOTNC NjI4NEU2ODMzMTA2QTVCRUI3MUEwQ0RERTU3QzBCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRkU4ODBDQzkzQjYyODRFNjgzMzEwNkE1QkVCNzFBMENEREU1 N0MwQi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMTY1MzI0N2EtYTU2ZS00MjRhLWEw N2ItMzZhMjUxMWQ3Y2FhLzAvRkU4ODBDQzkzQjYyODRFNjgzMzEwNkE1QkVCNzFB MENEREU1N0MwQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAH2hCiO15kwGYoJpsKz/uE6LkJYyq1wAmCy1 6nzwNEr70jTe/N1Be72BLs4pkl5m5ZNZg8jcOgwOjhxPVBrmYKtEfWYzxtzSqGRn 569gx2GpHMaRtlGghmK7sQWkqIOAzxvd/lYujXef5yQX0cp3tAuaUk4PS34r/KXA h9ayC7Y39VctWuPk9+Xu7fGE5Gh0YNOLlj2Tu+S+b/SVlfCLAfH+zCepNpAhKpvQ jqHjMgvYYRFci4V+3le2jQyk9lPopBDCZs8fol9k31OkuiynBtOFDu7AcKxQD/Pg jg74NOhzJtW5USytdDKLvkHkoOOJXQSUvO74W2jqeiolALTYZjo= -----END CERTIFICATE-----Generated at Thu Dec 25 00:39:19 2025 by rpki-client