This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/a0f78bd4-c19b-4d40-aa54-ed8d7bc772ca/0/FD7C5A44A3CAAF7CD140CFD1C61622BA5EA2E623.mft File: FD7C5A44A3CAAF7CD140CFD1C61622BA5EA2E623.mft (raw, json) Hash identifier: iwe+z+epp1Ku+uE3lARkEi/Ta/jFl4HkA/iJnK8AYQM= Subject key identifier: B2:AA:82:EF:F7:C9:ED:0C:73:65:45:5A:9D:39:97:0B:20:6E:2B:3F Authority key identifier: FD:7C:5A:44:A3:CA:AF:7C:D1:40:CF:D1:C6:16:22:BA:5E:A2:E6:23 Certificate issuer: /CN=FD7C5A44A3CAAF7CD140CFD1C61622BA5EA2E623 Certificate serial: 6D98090006FBD8AB229C53AC04A44DE902A9F9F0 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/FD7C5A44A3CAAF7CD140CFD1C61622BA5EA2E623.cer Subject info access: rsync://repo-rpki.idnic.net/repo/a0f78bd4-c19b-4d40-aa54-ed8d7bc772ca/0/FD7C5A44A3CAAF7CD140CFD1C61622BA5EA2E623.mft Manifest number: 011C Signing time: Sat 20 Dec 2025 17:53:04 +0000 Manifest this update: Sat 20 Dec 2025 17:48:04 +0000 Manifest next update: Wed 24 Dec 2025 04:05:04 +0000 Files and hashes: 1: FD7C5A44A3CAAF7CD140CFD1C61622BA5EA2E623.crl (hash: Lmml/EkCmym2lb7jmugUitiZGalug6DNG6Ea1AYeDsk=) 2: 3135372e32302e3132362e302f32332d3234203d3e20313532343130.roa (hash: mIAtzNrfjeKiFzHKpCt4+yI3FhKtEfckYghfutbPb44=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/a0f78bd4-c19b-4d40-aa54-ed8d7bc772ca/0/FD7C5A44A3CAAF7CD140CFD1C61622BA5EA2E623.crl rsync://repo-rpki.idnic.net/repo/a0f78bd4-c19b-4d40-aa54-ed8d7bc772ca/0/FD7C5A44A3CAAF7CD140CFD1C61622BA5EA2E623.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/FD7C5A44A3CAAF7CD140CFD1C61622BA5EA2E623.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 23 Dec 2025 15:37:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6d:98:09:00:06:fb:d8:ab:22:9c:53:ac:04:a4:4d:e9:02:a9:f9:f0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=FD7C5A44A3CAAF7CD140CFD1C61622BA5EA2E623 Validity Not Before: Dec 20 17:48:04 2025 GMT Not After : Dec 24 04:05:04 2025 GMT Subject: CN=B2AA82EFF7C9ED0C7365455A9D39970B206E2B3F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:93:71:3e:da:4f:a5:37:fc:83:3c:23:80:28: 8e:b5:bf:92:58:ee:55:8a:7c:73:1b:86:59:2c:5a: 82:33:2e:cd:30:74:3f:38:6e:70:60:91:d4:63:da: 6a:36:5f:54:3d:e3:39:d8:5a:96:e1:2c:fe:59:0f: 43:16:d2:f5:fb:6f:dd:e5:d7:0a:48:c2:f4:45:01: 0e:e9:a7:bd:9a:4a:06:ae:dc:7f:29:66:f1:6a:a9: 43:1a:4d:81:c3:b5:a9:b6:1d:f3:ec:34:d4:89:01: ae:89:d3:7a:e1:a0:58:bc:14:a3:32:b5:4a:66:8a: ed:5d:51:04:b8:54:9f:f2:42:00:f0:b4:99:d9:0b: 99:65:9c:a2:4f:86:bf:9d:11:4f:ac:a7:7a:e1:9f: 50:be:e2:a8:46:39:3e:42:ba:31:6a:14:14:0a:5a: 29:0e:d2:0b:72:72:27:94:a4:2d:b9:f9:4a:57:4e: 22:b3:69:34:4e:b3:10:98:a1:b4:22:82:11:35:1b: a1:1e:7f:91:c9:48:98:6b:34:6e:70:fa:8e:31:6a: e5:b7:a6:61:3d:4b:b2:14:94:ce:ec:7d:41:9f:a6: 77:1d:e3:d0:44:fa:89:88:62:70:90:b1:e3:51:ce: 27:31:69:fb:96:46:e4:96:6e:58:a5:6c:42:44:c4: 22:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:AA:82:EF:F7:C9:ED:0C:73:65:45:5A:9D:39:97:0B:20:6E:2B:3F X509v3 Authority Key Identifier: keyid:FD:7C:5A:44:A3:CA:AF:7C:D1:40:CF:D1:C6:16:22:BA:5E:A2:E6:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/a0f78bd4-c19b-4d40-aa54-ed8d7bc772ca/0/FD7C5A44A3CAAF7CD140CFD1C61622BA5EA2E623.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/FD7C5A44A3CAAF7CD140CFD1C61622BA5EA2E623.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a0f78bd4-c19b-4d40-aa54-ed8d7bc772ca/0/FD7C5A44A3CAAF7CD140CFD1C61622BA5EA2E623.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5d:7f:bd:b6:83:14:cf:a2:33:d9:b6:89:c0:1a:d6:5e:eb:7e: 2d:3f:9d:46:8c:11:0e:86:1e:3b:07:b3:ee:2c:4a:2e:07:b5: 7c:3d:70:38:c8:b7:74:45:ab:2d:2e:06:87:7e:8f:21:f5:2f: d1:b1:bf:4f:88:dd:bc:19:e3:2b:60:1c:d8:fc:cf:92:58:4b: f7:4f:f9:9d:36:cb:dc:53:0c:aa:d4:0f:7c:4c:60:df:d4:1a: 3b:6e:30:01:ae:8d:59:af:f2:03:db:bb:3e:4d:6d:98:69:1e: 2c:8b:a5:1e:85:a4:81:03:aa:1e:ed:75:6b:48:8b:e4:a2:75: 20:87:43:80:20:7b:1e:d6:28:3c:bc:e7:a6:7c:5a:49:a5:0c: 2c:1f:b4:53:7f:4e:85:7d:e2:d8:d0:97:e5:2e:95:87:dd:15: 6b:11:d4:f8:ba:96:51:4d:e1:a2:3d:e9:11:70:94:5e:88:cf: 67:f4:ef:cc:45:7c:4a:b9:cb:bd:8c:e7:3b:9e:56:13:a3:6d: 17:91:0e:8e:d4:3f:39:e0:15:e1:54:99:03:d8:37:08:ba:e6: c5:b7:5d:d6:04:6e:dc:1c:4a:f7:7b:d4:b9:80:4c:07:e5:c4: 50:fc:6e:53:f9:06:06:bb:a4:1d:78:53:eb:4a:29:93:69:db: 22:df:2f:70 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUbZgJAAb72KsinFOsBKRN6QKp+fAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRkQ3QzVBNDRBM0NBQUY3Q0QxNDBDRkQxQzYxNjIyQkE1 RUEyRTYyMzAeFw0yNTEyMjAxNzQ4MDRaFw0yNTEyMjQwNDA1MDRaMDMxMTAvBgNV BAMTKEIyQUE4MkVGRjdDOUVEMEM3MzY1NDU1QTlEMzk5NzBCMjA2RTJCM0YwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDpk3E+2k+lN/yDPCOAKI61v5JY 7lWKfHMbhlksWoIzLs0wdD84bnBgkdRj2mo2X1Q94znYWpbhLP5ZD0MW0vX7b93l 1wpIwvRFAQ7pp72aSgau3H8pZvFqqUMaTYHDtam2HfPsNNSJAa6J03rhoFi8FKMy tUpmiu1dUQS4VJ/yQgDwtJnZC5llnKJPhr+dEU+sp3rhn1C+4qhGOT5CujFqFBQK WikO0gtycieUpC25+UpXTiKzaTROsxCYobQighE1G6Eef5HJSJhrNG5w+o4xauW3 pmE9S7IUlM7sfUGfpncd49BE+omIYnCQseNRzicxafuWRuSWblilbEJExCJrAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUsqqC7/fJ7QxzZUVanTmXCyBuKz8wHwYDVR0j BBgwFoAU/XxaRKPKr3zRQM/RxhYiul6i5iMwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h MGY3OGJkNC1jMTliLTRkNDAtYWE1NC1lZDhkN2JjNzcyY2EvMC9GRDdDNUE0NEEz Q0FBRjdDRDE0MENGRDFDNjE2MjJCQTVFQTJFNjIzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvRkQ3QzVBNDRBM0NBQUY3Q0QxNDBDRkQxQzYxNjIyQkE1RUEy RTYyMy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYTBmNzhiZDQtYzE5Yi00ZDQwLWFh NTQtZWQ4ZDdiYzc3MmNhLzAvRkQ3QzVBNDRBM0NBQUY3Q0QxNDBDRkQxQzYxNjIy QkE1RUEyRTYyMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAF1/vbaDFM+iM9m2icAa1l7rfi0/nUaMEQ6G HjsHs+4sSi4HtXw9cDjIt3RFqy0uBod+jyH1L9Gxv0+I3bwZ4ytgHNj8z5JYS/dP +Z02y9xTDKrUD3xMYN/UGjtuMAGujVmv8gPbuz5NbZhpHiyLpR6FpIEDqh7tdWtI i+SidSCHQ4Agex7WKDy856Z8WkmlDCwftFN/ToV94tjQl+UulYfdFWsR1Pi6llFN 4aI96RFwlF6Iz2f078xFfEq5y72M5zueVhOjbReRDo7UPzngFeFUmQPYNwi65sW3 XdYEbtwcSvd71LmATAflxFD8blP5Bga7pB14U+tKKZNp2yLfL3A= -----END CERTIFICATE-----Generated at Sun Dec 21 17:23:18 2025 by rpki-client