This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/d47026a9-0c9a-4d79-ad67-2c9dbd366d0b/0/FCD5B562FAED9B9D67F9DE5DB70578BFDB0057B3.mft File: FCD5B562FAED9B9D67F9DE5DB70578BFDB0057B3.mft (raw, json) Hash identifier: KxLhsW/rX2J/7nklrARflIkJkUq6pJqO8bH04cXhEJI= Subject key identifier: 81:3C:FA:86:9F:9F:3F:5D:30:6B:11:9B:CC:FB:BD:8A:8B:9B:6B:E2 Authority key identifier: FC:D5:B5:62:FA:ED:9B:9D:67:F9:DE:5D:B7:05:78:BF:DB:00:57:B3 Certificate issuer: /CN=FCD5B562FAED9B9D67F9DE5DB70578BFDB0057B3 Certificate serial: 2F48AD827D7CE4D7052BFE82CB602AF4D7F32A8A Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FCD5B562FAED9B9D67F9DE5DB70578BFDB0057B3.cer Subject info access: rsync://repo-rpki.idnic.net/repo/d47026a9-0c9a-4d79-ad67-2c9dbd366d0b/0/FCD5B562FAED9B9D67F9DE5DB70578BFDB0057B3.mft Manifest number: 035E Signing time: Thu 18 Dec 2025 18:31:46 +0000 Manifest this update: Thu 18 Dec 2025 18:26:46 +0000 Manifest next update: Mon 22 Dec 2025 01:51:46 +0000 Files and hashes: 1: 3130332e3135312e3134302e302f32332d3233203d3e20313430343137.roa (hash: 8NA8ztqKmdQKSo6VJIi8+Ky4DaNAGzE3fau0y6GTEzI=) 2: 3130332e3135312e3134302e302f32332d3234203d3e20313430343137.roa (hash: maLwNGdhj2YMExFHAn5+1Sop9522GuyaLGRVR2YiAsA=) 3: FCD5B562FAED9B9D67F9DE5DB70578BFDB0057B3.crl (hash: DOqvsWg7xAFIgV8+rE3D33Q87BQsxe1eTgwgjOIEHxg=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/d47026a9-0c9a-4d79-ad67-2c9dbd366d0b/0/FCD5B562FAED9B9D67F9DE5DB70578BFDB0057B3.crl rsync://repo-rpki.idnic.net/repo/d47026a9-0c9a-4d79-ad67-2c9dbd366d0b/0/FCD5B562FAED9B9D67F9DE5DB70578BFDB0057B3.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FCD5B562FAED9B9D67F9DE5DB70578BFDB0057B3.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 22 Dec 2025 01:51:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2f:48:ad:82:7d:7c:e4:d7:05:2b:fe:82:cb:60:2a:f4:d7:f3:2a:8a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=FCD5B562FAED9B9D67F9DE5DB70578BFDB0057B3 Validity Not Before: Dec 18 18:26:46 2025 GMT Not After : Dec 22 01:51:46 2025 GMT Subject: CN=813CFA869F9F3F5D306B119BCCFBBD8A8B9B6BE2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:13:72:c2:82:a9:4c:70:2a:27:0e:7e:57:f7: 23:0b:ba:ee:3e:2e:21:38:d2:fa:c5:d7:31:d8:46: 35:60:9f:17:98:d2:94:d7:a3:46:01:83:a5:d5:04: ca:bf:4b:2f:bd:07:8c:5d:5d:59:4e:6e:b9:08:d7: b2:23:6a:5f:71:26:be:20:e0:2a:0e:0a:48:da:c6: 54:a1:a6:32:ec:13:9d:75:20:bd:6f:a1:52:9f:21: 23:80:de:18:8f:b1:86:02:9d:83:1c:3e:cc:6d:16: a1:06:ea:10:3d:48:8b:d7:4e:95:a3:c6:5b:e4:28: a6:ed:34:78:db:dc:80:b2:b8:40:66:7b:ee:d0:15: 32:65:56:9e:25:cf:23:74:2d:a4:a9:52:0d:af:6a: c8:2d:3a:f7:90:6a:56:73:62:41:f0:99:c2:f4:35: bb:09:d3:01:af:fa:9d:73:b6:da:f6:16:2c:bb:4c: c1:1a:8a:a6:8f:7e:b8:7c:7c:f9:e5:fc:59:35:38: c7:ad:54:ed:54:7e:81:72:56:02:f4:82:7e:30:9b: c5:71:64:e0:8a:12:50:bb:78:11:8a:ff:3f:91:c1: 11:7f:18:6a:2d:42:5a:e5:a8:24:30:a1:ce:40:c5: dd:c7:df:59:d8:3b:9b:62:78:00:0f:8a:2a:95:db: 81:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 81:3C:FA:86:9F:9F:3F:5D:30:6B:11:9B:CC:FB:BD:8A:8B:9B:6B:E2 X509v3 Authority Key Identifier: keyid:FC:D5:B5:62:FA:ED:9B:9D:67:F9:DE:5D:B7:05:78:BF:DB:00:57:B3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/d47026a9-0c9a-4d79-ad67-2c9dbd366d0b/0/FCD5B562FAED9B9D67F9DE5DB70578BFDB0057B3.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FCD5B562FAED9B9D67F9DE5DB70578BFDB0057B3.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d47026a9-0c9a-4d79-ad67-2c9dbd366d0b/0/FCD5B562FAED9B9D67F9DE5DB70578BFDB0057B3.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2e:c0:ff:e6:c1:27:64:35:c4:71:63:60:b6:aa:3c:9d:f7:6a: d8:a3:05:d7:b5:6c:31:14:48:d7:97:8c:93:5f:67:2b:93:f2: 0e:8c:c1:fa:93:bb:fc:bd:46:ec:71:54:9e:5c:19:8d:ca:30: a7:3f:3d:87:d4:02:54:55:26:a9:8e:ab:f1:35:c2:aa:a5:a4: 1a:68:bc:4b:ba:f2:de:ce:a5:4e:d8:7f:2e:ee:6a:4a:bf:1c: ea:97:d7:6c:a2:50:cc:b4:22:86:77:a0:86:b7:fd:6d:65:8d: 57:6a:b1:30:d3:b7:70:85:0e:5e:c3:de:cf:71:cc:eb:7b:ad: b1:19:29:41:36:6f:b2:21:70:1f:ec:d0:65:75:15:94:51:cd: fd:d9:95:f6:20:ba:14:a2:c5:34:7d:0a:b5:26:3f:f4:f5:be: 6b:34:72:af:73:60:c7:dd:09:67:19:1e:da:f9:f5:97:ef:33: 6c:4e:fa:85:cc:33:26:67:8d:fb:05:15:6d:53:a7:55:70:3f: 3e:93:3f:13:64:0f:05:9f:da:eb:35:d8:74:b8:a1:8f:4a:d6: ce:17:b6:3a:63:e9:5f:3b:a4:a7:1b:d0:03:0e:d4:58:4e:66: 2d:4e:b7:10:92:9a:d5:38:d8:fe:af:f6:4f:eb:a5:2a:12:e2: 99:09:65:5d -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUL0itgn185NcFK/6Cy2Aq9NfzKoowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRkNENUI1NjJGQUVEOUI5RDY3RjlERTVEQjcwNTc4QkZE QjAwNTdCMzAeFw0yNTEyMTgxODI2NDZaFw0yNTEyMjIwMTUxNDZaMDMxMTAvBgNV BAMTKDgxM0NGQTg2OUY5RjNGNUQzMDZCMTE5QkNDRkJCRDhBOEI5QjZCRTIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDOE3LCgqlMcConDn5X9yMLuu4+ LiE40vrF1zHYRjVgnxeY0pTXo0YBg6XVBMq/Sy+9B4xdXVlObrkI17Ijal9xJr4g 4CoOCkjaxlShpjLsE511IL1voVKfISOA3hiPsYYCnYMcPsxtFqEG6hA9SIvXTpWj xlvkKKbtNHjb3ICyuEBme+7QFTJlVp4lzyN0LaSpUg2vasgtOveQalZzYkHwmcL0 NbsJ0wGv+p1zttr2Fiy7TMEaiqaPfrh8fPnl/Fk1OMetVO1UfoFyVgL0gn4wm8Vx ZOCKElC7eBGK/z+RwRF/GGotQlrlqCQwoc5Axd3H31nYO5tieAAPiiqV24HtAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUgTz6hp+fP10waxGbzPu9iouba+IwHwYDVR0j BBgwFoAU/NW1Yvrtm51n+d5dtwV4v9sAV7MwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k NDcwMjZhOS0wYzlhLTRkNzktYWQ2Ny0yYzlkYmQzNjZkMGIvMC9GQ0Q1QjU2MkZB RUQ5QjlENjdGOURFNURCNzA1NzhCRkRCMDA1N0IzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRkNENUI1NjJGQUVEOUI5RDY3RjlERTVEQjcwNTc4QkZEQjAw NTdCMy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZDQ3MDI2YTktMGM5YS00ZDc5LWFk NjctMmM5ZGJkMzY2ZDBiLzAvRkNENUI1NjJGQUVEOUI5RDY3RjlERTVEQjcwNTc4 QkZEQjAwNTdCMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAC7A/+bBJ2Q1xHFjYLaqPJ33atijBde1bDEU SNeXjJNfZyuT8g6MwfqTu/y9RuxxVJ5cGY3KMKc/PYfUAlRVJqmOq/E1wqqlpBpo vEu68t7OpU7Yfy7uakq/HOqX12yiUMy0IoZ3oIa3/W1ljVdqsTDTt3CFDl7D3s9x zOt7rbEZKUE2b7IhcB/s0GV1FZRRzf3ZlfYguhSixTR9CrUmP/T1vms0cq9zYMfd CWcZHtr59ZfvM2xO+oXMMyZnjfsFFW1Tp1VwPz6TPxNkDwWf2us12HS4oY9K1s4X tjpj6V87pKcb0AMO1FhOZi1OtxCSmtU42P6v9k/rpSoS4pkJZV0= -----END CERTIFICATE-----Generated at Fri Dec 19 11:17:33 2025 by rpki-client