This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repo-rpki.idnic.net/repo/3cf0a77c-3928-4130-a098-b437572d722c/0/FC4AE05C1547B778063F91C4687D12E8D6978309.mft
File: FC4AE05C1547B778063F91C4687D12E8D6978309.mft (raw, json)
Hash identifier: mKziyMMq6zWgLY3gFR6Q/sOenOXeBo1QgBXSF6bqBuw=
Subject key identifier: 1E:07:39:42:8F:D3:01:0F:05:7D:A1:C2:81:B2:4E:FC:1A:9B:13:10
Authority key identifier: FC:4A:E0:5C:15:47:B7:78:06:3F:91:C4:68:7D:12:E8:D6:97:83:09
Certificate issuer: /CN=FC4AE05C1547B778063F91C4687D12E8D6978309
Certificate serial: 182BD2DE0B8F42EA91E146E4B6B8CC41B84B4C46
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/FC4AE05C1547B778063F91C4687D12E8D6978309.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/3cf0a77c-3928-4130-a098-b437572d722c/0/FC4AE05C1547B778063F91C4687D12E8D6978309.mft
Manifest number: 010E
Signing time: Thu 25 Dec 2025 23:11:59 +0000
Manifest this update: Thu 25 Dec 2025 23:06:59 +0000
Manifest next update: Mon 29 Dec 2025 03:37:59 +0000
Files and hashes: 1: 3135372e32302e3233302e302f32332d3234203d3e20313532343331.roa (hash: zEX2zvBjt157yqeJ3lViczjWUiYCUWpG52AxWV4xz8k=)
2: FC4AE05C1547B778063F91C4687D12E8D6978309.crl (hash: leqxcj27rs+Siw7if4YIoQfoXHy9df0NdNVCZa+2hkQ=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/3cf0a77c-3928-4130-a098-b437572d722c/0/FC4AE05C1547B778063F91C4687D12E8D6978309.crl
rsync://repo-rpki.idnic.net/repo/3cf0a77c-3928-4130-a098-b437572d722c/0/FC4AE05C1547B778063F91C4687D12E8D6978309.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/FC4AE05C1547B778063F91C4687D12E8D6978309.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 27 Dec 2025 21:07:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
18:2b:d2:de:0b:8f:42:ea:91:e1:46:e4:b6:b8:cc:41:b8:4b:4c:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=FC4AE05C1547B778063F91C4687D12E8D6978309
Validity
Not Before: Dec 25 23:06:59 2025 GMT
Not After : Dec 29 03:37:59 2025 GMT
Subject: CN=1E0739428FD3010F057DA1C281B24EFC1A9B1310
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:e9:26:93:6a:f5:3a:de:a8:0a:4b:4c:31:5c:
bb:d6:8a:10:20:6c:d2:e6:46:92:4e:d4:27:df:70:
54:1b:32:0b:4d:37:f2:cb:3c:8d:c0:b9:ef:0c:b3:
49:e7:3b:ae:6f:55:bc:7c:81:9d:3b:13:85:47:75:
ed:f3:e3:73:ca:8b:c1:a4:da:6b:e0:ae:92:b5:08:
f5:e4:cb:ad:60:1f:02:8e:85:27:dc:7e:d4:7a:26:
6f:48:d1:dc:84:d3:a0:f8:00:10:8e:d1:1a:8c:d8:
6f:99:47:24:f9:55:62:80:b7:e7:90:86:db:d5:b4:
29:91:a0:c5:6a:4b:c6:3c:0f:5d:e8:6e:a9:0a:b7:
0d:26:b5:52:90:88:38:5b:3e:1a:a5:da:4f:07:7e:
24:93:25:18:b6:47:c4:f1:f0:68:20:cc:f4:94:e8:
60:f2:d1:75:9f:19:39:c7:72:61:67:d1:3c:1d:b1:
b8:ed:c3:40:0a:b8:79:b6:2f:d0:1b:c0:cb:c8:a2:
08:5b:8c:d2:1f:ce:47:cb:8a:04:c7:ad:9f:46:b5:
9b:bd:f8:6c:4d:a6:3e:ef:d7:5d:51:22:52:c9:09:
ea:93:1a:3a:c0:00:ab:fb:58:8d:ac:cf:82:57:b0:
d2:7c:05:45:58:18:04:4b:95:35:4f:c3:2c:d8:77:
89:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:07:39:42:8F:D3:01:0F:05:7D:A1:C2:81:B2:4E:FC:1A:9B:13:10
X509v3 Authority Key Identifier:
keyid:FC:4A:E0:5C:15:47:B7:78:06:3F:91:C4:68:7D:12:E8:D6:97:83:09
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/3cf0a77c-3928-4130-a098-b437572d722c/0/FC4AE05C1547B778063F91C4687D12E8D6978309.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/FC4AE05C1547B778063F91C4687D12E8D6978309.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3cf0a77c-3928-4130-a098-b437572d722c/0/FC4AE05C1547B778063F91C4687D12E8D6978309.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
61:98:48:43:2c:f5:9a:53:e4:cb:b4:a6:cf:f7:cf:5b:d2:1a:
e9:c0:64:cf:a5:b3:dd:f0:a9:08:0f:e3:1b:1d:68:fc:2e:8d:
93:1f:84:13:af:16:14:1e:cb:28:8e:53:e6:15:57:57:62:3f:
5c:36:9d:01:70:3f:96:4f:46:65:23:56:9a:ef:4c:aa:12:f0:
12:01:16:51:2e:ff:71:e6:ab:34:e6:1f:92:00:91:56:55:69:
45:d4:35:06:23:57:3d:3f:5e:00:09:a6:09:5e:79:11:30:db:
5b:15:30:9c:ec:76:5c:ad:55:5c:fe:71:ff:d3:2d:8a:af:8e:
1f:f9:ff:cc:9a:8d:93:83:63:ba:27:60:c7:99:a7:6b:d1:d7:
f3:8f:09:57:6c:29:c7:d1:8a:a4:d6:70:9a:80:f2:4a:76:b9:
93:f7:ef:71:0c:35:32:07:ce:49:a8:d0:2f:e5:cf:71:1e:e9:
09:5a:fb:1d:3b:72:fb:ac:53:f6:17:f8:7c:6e:a0:bc:15:b1:
0c:b2:31:6e:45:df:e6:a7:da:f3:96:99:7d:f5:a0:af:4f:e1:
6b:a0:5c:94:b0:e9:b9:04:e2:54:c1:80:c3:b7:e3:59:03:d0:
a2:d2:c3:83:07:19:b6:21:1d:f4:2e:19:c7:d8:b1:67:f3:5d:
90:23:eb:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 26 09:32:47 2025 by rpki-client