This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/68466889-c1ef-4410-ad9c-306c09e1be06/0/FE47963FB6E13EFC318606E3CA31013421827343.mft File: FE47963FB6E13EFC318606E3CA31013421827343.mft (raw, json) Hash identifier: BYpKxr3qYaoAXC/0PNH3gT6tsnxWjcXMywgzTb1I1Pk= Subject key identifier: C2:4E:42:91:79:8C:98:E7:A2:38:01:80:EA:74:E8:B9:6A:EB:A1:FD Authority key identifier: FE:47:96:3F:B6:E1:3E:FC:31:86:06:E3:CA:31:01:34:21:82:73:43 Certificate issuer: /CN=FE47963FB6E13EFC318606E3CA31013421827343 Certificate serial: 2D79F7BAE0B9653A02E4414B8AF9414207D4371B Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FE47963FB6E13EFC318606E3CA31013421827343.cer Subject info access: rsync://repo-rpki.idnic.net/repo/68466889-c1ef-4410-ad9c-306c09e1be06/0/FE47963FB6E13EFC318606E3CA31013421827343.mft Manifest number: 0143 Signing time: Sat 20 Dec 2025 08:32:21 +0000 Manifest this update: Sat 20 Dec 2025 08:27:21 +0000 Manifest next update: Tue 23 Dec 2025 10:52:21 +0000 Files and hashes: 1: 3130332e36372e34392e302f32342d3234203d3e20313431363732.roa (hash: BDIVxvQovejwSTdQVoThOksyexqcbmKKBcpAZUy8WSU=) 2: 3130332e3136322e3235322e302f32342d3234203d3e20313431363732.roa (hash: SKZ4JC2PVchiPELxqukX4ZUosexDdg2XkKRXWqgW864=) 3: FE47963FB6E13EFC318606E3CA31013421827343.crl (hash: SFyz7jVRofR4snaTRr5WPkFWxGbAx6AEg6rYyl3Cu4U=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/68466889-c1ef-4410-ad9c-306c09e1be06/0/FE47963FB6E13EFC318606E3CA31013421827343.crl rsync://repo-rpki.idnic.net/repo/68466889-c1ef-4410-ad9c-306c09e1be06/0/FE47963FB6E13EFC318606E3CA31013421827343.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FE47963FB6E13EFC318606E3CA31013421827343.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 23 Dec 2025 10:52:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2d:79:f7:ba:e0:b9:65:3a:02:e4:41:4b:8a:f9:41:42:07:d4:37:1b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=FE47963FB6E13EFC318606E3CA31013421827343 Validity Not Before: Dec 20 08:27:21 2025 GMT Not After : Dec 23 10:52:21 2025 GMT Subject: CN=C24E4291798C98E7A2380180EA74E8B96AEBA1FD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:d7:b6:b9:4c:cb:2f:79:6c:7b:69:7d:9c:9f: 1c:04:23:ae:14:f3:fd:c8:2c:62:d3:b4:b1:fa:fe: be:71:d8:1c:9c:b5:bd:3c:1d:53:9a:18:cd:5e:de: bd:22:8b:46:3f:6e:bb:3a:1b:29:b8:26:77:f9:57: 34:25:24:e1:79:0a:ff:47:7c:d3:5a:1d:f8:7c:ac: 4b:ac:ef:cc:8c:5e:cc:f2:28:03:72:15:89:1d:10: 8c:4b:d1:bf:2a:4e:83:c4:a8:4f:1b:9b:fd:2e:62: 27:43:1d:44:37:56:0c:de:ab:ea:b6:f6:10:1f:af: 01:da:7a:33:a4:34:05:f1:2d:2a:3a:44:5a:8b:8f: 18:59:88:5a:1e:02:72:28:9a:b2:8d:e1:04:dd:85: fe:a0:ba:a6:6d:b6:a6:9a:52:9f:b1:bf:ff:1a:6f: c4:61:3f:36:65:14:c3:e7:f9:18:37:64:fb:f1:8e: a7:16:45:16:36:09:bc:51:30:b0:2e:24:93:26:1b: 4a:29:ab:bc:1b:23:d4:2f:68:0d:3c:db:ce:33:bd: eb:ae:bc:04:e1:da:ef:b0:d8:99:e0:89:cc:3a:54: 76:85:19:25:69:2a:e6:b0:97:31:34:b8:17:86:25: a5:46:01:5f:9d:44:d3:b2:73:c2:1c:32:6f:33:17: 06:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:4E:42:91:79:8C:98:E7:A2:38:01:80:EA:74:E8:B9:6A:EB:A1:FD X509v3 Authority Key Identifier: keyid:FE:47:96:3F:B6:E1:3E:FC:31:86:06:E3:CA:31:01:34:21:82:73:43 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/68466889-c1ef-4410-ad9c-306c09e1be06/0/FE47963FB6E13EFC318606E3CA31013421827343.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FE47963FB6E13EFC318606E3CA31013421827343.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/68466889-c1ef-4410-ad9c-306c09e1be06/0/FE47963FB6E13EFC318606E3CA31013421827343.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 05:fe:e4:4c:8d:f6:ad:36:22:8d:46:b4:95:08:38:3d:c2:9e: c5:df:66:1b:0a:88:b1:06:8f:58:42:98:83:60:36:4c:02:02: 43:85:53:5d:9c:28:b0:c2:44:41:45:61:a6:0a:8f:23:c9:63: b8:38:74:61:fe:92:89:2c:2e:3f:da:48:29:f3:d8:d5:ab:7f: 59:03:aa:23:5c:d2:00:bd:a2:e9:10:6e:16:9c:be:7d:00:7f: 61:f7:fa:22:79:3e:4a:6f:9f:cc:54:5a:54:ce:e8:04:77:60: c2:77:5e:33:da:f4:9b:3f:14:37:60:8f:de:92:3e:79:e9:24: 9a:09:48:e1:7e:c0:bf:33:af:50:c2:c6:3c:2d:d6:01:ab:fc: 0e:fd:20:8f:79:55:08:50:60:b3:57:17:33:88:fa:d3:33:cb: ee:1c:0e:2a:7c:ee:e9:6c:09:1a:ea:b1:24:a4:b3:46:b1:d2: e0:d1:7c:89:82:91:2a:2c:cc:d8:1d:e5:9e:ca:2c:09:f9:c1: 03:07:59:15:86:60:72:6f:5a:56:66:58:21:ed:8e:bc:37:94: e7:32:ee:d7:f8:62:85:23:20:0c:32:d6:86:dc:26:ac:4a:be: 28:8f:a7:0b:13:de:48:cf:4e:ef:ea:b7:9b:91:ed:c2:09:c0: 94:0c:a0:94 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIULXn3uuC5ZToC5EFLivlBQgfUNxswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRkU0Nzk2M0ZCNkUxM0VGQzMxODYwNkUzQ0EzMTAxMzQy MTgyNzM0MzAeFw0yNTEyMjAwODI3MjFaFw0yNTEyMjMxMDUyMjFaMDMxMTAvBgNV BAMTKEMyNEU0MjkxNzk4Qzk4RTdBMjM4MDE4MEVBNzRFOEI5NkFFQkExRkQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCp17a5TMsveWx7aX2cnxwEI64U 8/3ILGLTtLH6/r5x2Byctb08HVOaGM1e3r0ii0Y/brs6Gym4Jnf5VzQlJOF5Cv9H fNNaHfh8rEus78yMXszyKANyFYkdEIxL0b8qToPEqE8bm/0uYidDHUQ3Vgzeq+q2 9hAfrwHaejOkNAXxLSo6RFqLjxhZiFoeAnIomrKN4QTdhf6guqZttqaaUp+xv/8a b8RhPzZlFMPn+Rg3ZPvxjqcWRRY2CbxRMLAuJJMmG0opq7wbI9QvaA08284zveuu vATh2u+w2Jngicw6VHaFGSVpKuawlzE0uBeGJaVGAV+dRNOyc8IcMm8zFwYVAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUwk5CkXmMmOeiOAGA6nTouWrrof0wHwYDVR0j BBgwFoAU/keWP7bhPvwxhgbjyjEBNCGCc0MwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 ODQ2Njg4OS1jMWVmLTQ0MTAtYWQ5Yy0zMDZjMDllMWJlMDYvMC9GRTQ3OTYzRkI2 RTEzRUZDMzE4NjA2RTNDQTMxMDEzNDIxODI3MzQzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRkU0Nzk2M0ZCNkUxM0VGQzMxODYwNkUzQ0EzMTAxMzQyMTgy NzM0My5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNjg0NjY4ODktYzFlZi00NDEwLWFk OWMtMzA2YzA5ZTFiZTA2LzAvRkU0Nzk2M0ZCNkUxM0VGQzMxODYwNkUzQ0EzMTAx MzQyMTgyNzM0My5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAX+5EyN9q02Io1GtJUIOD3CnsXfZhsKiLEG j1hCmINgNkwCAkOFU12cKLDCREFFYaYKjyPJY7g4dGH+koksLj/aSCnz2NWrf1kD qiNc0gC9oukQbhacvn0Af2H3+iJ5Pkpvn8xUWlTO6AR3YMJ3XjPa9Js/FDdgj96S PnnpJJoJSOF+wL8zr1DCxjwt1gGr/A79II95VQhQYLNXFzOI+tMzy+4cDip87uls CRrqsSSks0ax0uDRfImCkSoszNgd5Z7KLAn5wQMHWRWGYHJvWlZmWCHtjrw3lOcy 7tf4YoUjIAwy1obcJqxKviiPpwsT3kjPTu/qt5uR7cIJwJQMoJQ= -----END CERTIFICATE-----Generated at Sun Dec 21 10:17:28 2025 by rpki-client