This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/73f75088-088e-41c0-bfce-edc69beafd4a/0/FED49ABCDA1C9D097F52AD26D8001C0C36632C89.mft File: FED49ABCDA1C9D097F52AD26D8001C0C36632C89.mft (raw, json) Hash identifier: kpDLnTGquNS/TU7zfirK89pXFzzTdc7+vvcVdoGCkLM= Subject key identifier: AF:01:EC:CB:92:6A:07:15:AD:D5:D4:70:1C:A8:EB:26:DD:D0:42:AB Authority key identifier: FE:D4:9A:BC:DA:1C:9D:09:7F:52:AD:26:D8:00:1C:0C:36:63:2C:89 Certificate issuer: /CN=FED49ABCDA1C9D097F52AD26D8001C0C36632C89 Certificate serial: 2E79A1B699D1815E78EFB16B6105CF109C08382D Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FED49ABCDA1C9D097F52AD26D8001C0C36632C89.cer Subject info access: rsync://repo-rpki.idnic.net/repo/73f75088-088e-41c0-bfce-edc69beafd4a/0/FED49ABCDA1C9D097F52AD26D8001C0C36632C89.mft Manifest number: 0283 Signing time: Thu 18 Dec 2025 14:10:47 +0000 Manifest this update: Thu 18 Dec 2025 14:05:47 +0000 Manifest next update: Sun 21 Dec 2025 18:39:47 +0000 Files and hashes: 1: 3130332e3138302e3139352e302f32342d3234203d3e2039333431.roa (hash: jasipL9tt5lF7HvMmB9WMDxphox1aLuH+uQXtrmFRL8=) 2: FED49ABCDA1C9D097F52AD26D8001C0C36632C89.crl (hash: bmk9RRwrVfpfFYXDS/dGgCM9qdHO2ehUPDs/StFCyYk=) 3: 3130332e3138302e3139342e302f32342d3234203d3e2039333431.roa (hash: E01mZ15UIJ+QTIPPcGks35isU/hOcW6+FEQB5HchAFc=) 4: 3130332e3138302e3139342e302f32332d3233203d3e2039333431.roa (hash: T5Fz3OXAuav/iqbItkD85kgf8QFMTkSpBn4rOH0yfRc=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/73f75088-088e-41c0-bfce-edc69beafd4a/0/FED49ABCDA1C9D097F52AD26D8001C0C36632C89.crl rsync://repo-rpki.idnic.net/repo/73f75088-088e-41c0-bfce-edc69beafd4a/0/FED49ABCDA1C9D097F52AD26D8001C0C36632C89.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FED49ABCDA1C9D097F52AD26D8001C0C36632C89.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 21 Dec 2025 18:39:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2e:79:a1:b6:99:d1:81:5e:78:ef:b1:6b:61:05:cf:10:9c:08:38:2d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=FED49ABCDA1C9D097F52AD26D8001C0C36632C89 Validity Not Before: Dec 18 14:05:47 2025 GMT Not After : Dec 21 18:39:47 2025 GMT Subject: CN=AF01ECCB926A0715ADD5D4701CA8EB26DDD042AB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:ae:72:6f:04:df:78:a0:b3:58:83:48:00:c2: b3:be:a0:63:3d:c7:cf:a4:91:ff:2e:a9:a4:4e:5e: bf:81:a1:7b:11:c6:9c:aa:1d:c3:3a:c2:77:86:eb: 51:21:c0:eb:21:38:1a:d9:51:7e:a9:4e:f0:64:00: 6c:84:49:81:5c:cc:fc:ac:8d:62:c8:ca:25:68:9c: 85:4d:e4:92:ec:21:6b:80:c2:4f:4b:82:5c:1c:6e: 24:a7:ad:8b:aa:ae:ff:2f:ed:38:4f:8e:66:3c:47: 13:bc:ef:52:98:eb:84:c8:6c:97:5a:32:89:28:f5: 61:66:22:79:64:02:73:50:c3:31:9e:d3:0b:f3:79: 12:2c:58:a3:1a:12:c9:f1:f8:6a:f7:45:cd:1c:ca: 8b:16:d8:4b:d9:ac:37:9d:ae:9d:f6:45:30:d7:35: 9d:6a:f3:94:5e:84:b0:a1:b4:bd:5c:f2:b5:f0:f2: a0:ab:44:1a:07:21:49:1a:d0:75:38:ce:e0:27:bd: 75:9b:ef:c4:39:6c:cb:47:2a:b7:4f:1f:2a:a6:42: b9:82:20:d0:5b:38:67:1d:60:de:52:a9:cf:cb:d8: ac:66:69:50:3b:a4:61:3c:99:8d:87:06:08:d4:a8: 6c:df:01:a7:4b:ce:22:2e:ac:3e:42:70:04:c7:2e: 27:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:01:EC:CB:92:6A:07:15:AD:D5:D4:70:1C:A8:EB:26:DD:D0:42:AB X509v3 Authority Key Identifier: keyid:FE:D4:9A:BC:DA:1C:9D:09:7F:52:AD:26:D8:00:1C:0C:36:63:2C:89 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/73f75088-088e-41c0-bfce-edc69beafd4a/0/FED49ABCDA1C9D097F52AD26D8001C0C36632C89.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FED49ABCDA1C9D097F52AD26D8001C0C36632C89.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/73f75088-088e-41c0-bfce-edc69beafd4a/0/FED49ABCDA1C9D097F52AD26D8001C0C36632C89.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1d:a1:15:43:73:c3:b4:7e:55:09:b1:6b:c4:15:e5:24:97:05: 51:5a:7d:6b:55:48:1a:4b:c4:5a:82:ee:e3:c7:bc:4b:7c:4c: 5a:5d:c2:50:f6:81:82:77:37:3e:b5:af:86:c9:08:81:a5:73: 00:83:fe:a9:da:6b:92:8d:c9:05:ef:53:fb:d8:ab:57:3c:6b: f5:2a:09:c4:16:36:53:40:90:1e:0e:e4:d0:66:22:c3:2d:ae: 77:d7:36:bd:e2:2c:2b:d0:ac:70:58:f5:fd:d7:0e:cc:e5:f7: 2b:e8:16:a4:4e:84:c9:98:24:c9:59:19:c5:9e:18:36:3e:2f: c8:a3:f1:4d:a4:09:b3:5d:9c:8a:65:49:71:07:08:d4:cf:6e: f7:66:fa:f4:64:2b:06:bb:9e:1a:6c:64:0f:8d:36:c2:97:1c: f6:48:49:83:b8:4c:d9:86:85:53:22:2d:f2:90:1e:53:77:ea: 84:3c:5f:b2:49:98:4e:25:2f:f4:31:c9:00:cf:a9:fd:1c:11: f7:64:b0:30:61:48:b8:57:1a:96:13:ef:42:a1:19:73:07:d6: 40:21:20:fb:53:8a:be:50:54:80:17:3c:fd:44:7d:01:93:d4: 66:4f:f5:7d:5e:e2:43:7f:0c:62:de:f0:b3:15:48:4c:c3:ca: 7f:a5:b6:33 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIULnmhtpnRgV5477FrYQXPEJwIOC0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRkVENDlBQkNEQTFDOUQwOTdGNTJBRDI2RDgwMDFDMEMz NjYzMkM4OTAeFw0yNTEyMTgxNDA1NDdaFw0yNTEyMjExODM5NDdaMDMxMTAvBgNV BAMTKEFGMDFFQ0NCOTI2QTA3MTVBREQ1RDQ3MDFDQThFQjI2REREMDQyQUIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDdrnJvBN94oLNYg0gAwrO+oGM9 x8+kkf8uqaROXr+BoXsRxpyqHcM6wneG61EhwOshOBrZUX6pTvBkAGyESYFczPys jWLIyiVonIVN5JLsIWuAwk9LglwcbiSnrYuqrv8v7ThPjmY8RxO871KY64TIbJda Moko9WFmInlkAnNQwzGe0wvzeRIsWKMaEsnx+Gr3Rc0cyosW2EvZrDedrp32RTDX NZ1q85RehLChtL1c8rXw8qCrRBoHIUka0HU4zuAnvXWb78Q5bMtHKrdPHyqmQrmC INBbOGcdYN5Sqc/L2KxmaVA7pGE8mY2HBgjUqGzfAadLziIurD5CcATHLicvAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUrwHsy5JqBxWt1dRwHKjrJt3QQqswHwYDVR0j BBgwFoAU/tSavNocnQl/Uq0m2AAcDDZjLIkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 M2Y3NTA4OC0wODhlLTQxYzAtYmZjZS1lZGM2OWJlYWZkNGEvMC9GRUQ0OUFCQ0RB MUM5RDA5N0Y1MkFEMjZEODAwMUMwQzM2NjMyQzg5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRkVENDlBQkNEQTFDOUQwOTdGNTJBRDI2RDgwMDFDMEMzNjYz MkM4OS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNzNmNzUwODgtMDg4ZS00MWMwLWJm Y2UtZWRjNjliZWFmZDRhLzAvRkVENDlBQkNEQTFDOUQwOTdGNTJBRDI2RDgwMDFD MEMzNjYzMkM4OS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAB2hFUNzw7R+VQmxa8QV5SSXBVFafWtVSBpL xFqC7uPHvEt8TFpdwlD2gYJ3Nz61r4bJCIGlcwCD/qnaa5KNyQXvU/vYq1c8a/Uq CcQWNlNAkB4O5NBmIsMtrnfXNr3iLCvQrHBY9f3XDszl9yvoFqROhMmYJMlZGcWe GDY+L8ij8U2kCbNdnIplSXEHCNTPbvdm+vRkKwa7nhpsZA+NNsKXHPZISYO4TNmG hVMiLfKQHlN36oQ8X7JJmE4lL/QxyQDPqf0cEfdksDBhSLhXGpYT70KhGXMH1kAh IPtTir5QVIAXPP1EfQGT1GZP9X1e4kN/DGLe8LMVSEzDyn+ltjM= -----END CERTIFICATE-----Generated at Fri Dec 19 10:53:43 2025 by rpki-client