This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/ede4719a-ace4-41f2-a070-8de3192b7f49/0/FC31DB70F7B2F17F13E92A2E7BAE5554792EFBBF.mft File: FC31DB70F7B2F17F13E92A2E7BAE5554792EFBBF.mft (raw, json) Hash identifier: m42mtFErvqJdKC1PnQTjiyPzw5m4pf2AIBDaOOfAa8I= Subject key identifier: 04:C2:21:F4:5C:F2:7F:27:1C:71:BF:25:90:21:AC:48:86:D2:C8:E8 Authority key identifier: FC:31:DB:70:F7:B2:F1:7F:13:E9:2A:2E:7B:AE:55:54:79:2E:FB:BF Certificate issuer: /CN=FC31DB70F7B2F17F13E92A2E7BAE5554792EFBBF Certificate serial: 381BF99B907012F35771E83EEAE2F3EFDF766C25 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FC31DB70F7B2F17F13E92A2E7BAE5554792EFBBF.cer Subject info access: rsync://repo-rpki.idnic.net/repo/ede4719a-ace4-41f2-a070-8de3192b7f49/0/FC31DB70F7B2F17F13E92A2E7BAE5554792EFBBF.mft Manifest number: 052E Signing time: Wed 17 Dec 2025 09:30:45 +0000 Manifest this update: Wed 17 Dec 2025 09:25:45 +0000 Manifest next update: Sat 20 Dec 2025 12:15:45 +0000 Files and hashes: 1: 3230322e36312e39382e302f32332d3234203d3e203234353337.roa (hash: 7v+UWewpBXKuzE8AR/fYejkKyBNOrEBvR5vrqtJwA4s=) 2: FC31DB70F7B2F17F13E92A2E7BAE5554792EFBBF.crl (hash: 0qLAw1trXQVJYz82WP67OAs51CgtaKzG/RUHp9RXRR4=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/ede4719a-ace4-41f2-a070-8de3192b7f49/0/FC31DB70F7B2F17F13E92A2E7BAE5554792EFBBF.crl rsync://repo-rpki.idnic.net/repo/ede4719a-ace4-41f2-a070-8de3192b7f49/0/FC31DB70F7B2F17F13E92A2E7BAE5554792EFBBF.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FC31DB70F7B2F17F13E92A2E7BAE5554792EFBBF.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 20 Dec 2025 12:15:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 38:1b:f9:9b:90:70:12:f3:57:71:e8:3e:ea:e2:f3:ef:df:76:6c:25 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=FC31DB70F7B2F17F13E92A2E7BAE5554792EFBBF Validity Not Before: Dec 17 09:25:45 2025 GMT Not After : Dec 20 12:15:45 2025 GMT Subject: CN=04C221F45CF27F271C71BF259021AC4886D2C8E8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:0e:59:63:f7:bf:fd:1d:ac:12:b0:5d:cc:dd: ab:fd:15:61:7f:fb:95:54:6b:f9:1d:7a:3a:04:fb: c8:1b:7a:70:98:5e:a5:84:30:1a:bc:06:a7:f5:bd: d2:78:d4:1a:bb:f2:aa:5d:22:d8:9d:c0:55:d8:8c: 72:be:9b:72:de:85:f6:7d:4e:be:11:ca:39:8e:08: b3:55:0c:3d:f3:d0:79:f7:98:ad:89:72:d2:04:26: db:c5:28:b3:ec:5b:24:75:be:a7:1d:29:30:0a:7b: d0:bb:64:b9:bf:8c:c8:55:13:c6:fe:f7:ec:16:69: 76:04:93:fc:f7:ab:d4:12:4f:cb:15:54:00:15:bf: 38:58:cc:f7:9b:bf:44:c3:7a:6f:28:f5:01:28:6a: 21:af:aa:da:4d:59:b8:2a:16:d3:f6:a9:2d:83:06: ee:8b:92:e8:1d:57:61:b9:51:d6:ee:ba:1f:f2:ef: 2a:29:5c:89:bb:1e:e6:4e:e0:01:92:3a:6e:52:9e: 95:98:c0:61:86:5d:bd:b7:47:b4:1b:6d:12:75:9a: 83:f9:56:b4:f9:ac:85:06:e4:88:8e:af:26:fa:6d: 8a:31:ba:b8:e7:d4:95:7f:1a:55:1b:17:08:ec:6f: c4:22:56:08:cb:12:fc:70:0e:7e:59:2f:25:50:d6: 2c:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 04:C2:21:F4:5C:F2:7F:27:1C:71:BF:25:90:21:AC:48:86:D2:C8:E8 X509v3 Authority Key Identifier: keyid:FC:31:DB:70:F7:B2:F1:7F:13:E9:2A:2E:7B:AE:55:54:79:2E:FB:BF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/ede4719a-ace4-41f2-a070-8de3192b7f49/0/FC31DB70F7B2F17F13E92A2E7BAE5554792EFBBF.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FC31DB70F7B2F17F13E92A2E7BAE5554792EFBBF.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ede4719a-ace4-41f2-a070-8de3192b7f49/0/FC31DB70F7B2F17F13E92A2E7BAE5554792EFBBF.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a1:22:41:4f:06:f8:f0:15:a1:cf:7d:ba:cc:82:e6:32:3e:80: ba:86:00:3a:1d:81:88:7f:8a:88:c1:8e:71:c1:65:bf:9b:56: 6e:f0:05:92:1c:06:d4:f7:a8:ae:28:8a:4d:47:3c:40:03:bb: 86:3b:17:53:92:90:92:78:96:1c:61:61:ff:e0:29:9e:f6:60: 2f:c0:d9:20:5b:4a:28:49:ab:b2:e5:a3:3c:52:68:a3:f3:87: 16:35:34:f9:eb:71:68:71:3c:68:33:17:6f:4e:c0:4a:b3:b5: 8f:dd:4c:13:81:9d:43:92:44:41:11:da:df:10:d3:ed:c3:e6: 91:3b:c4:30:12:82:43:5f:73:04:da:4b:55:95:72:bd:37:0a: 40:a2:25:ba:74:5a:ec:f5:4f:25:6a:f4:31:16:e8:18:4d:5b: 2b:50:6a:ed:7a:69:6c:9e:61:b4:5c:1e:1e:34:34:33:27:ff: 8e:a8:a5:7a:b1:94:e6:41:c7:17:32:b5:9f:6d:b6:c1:ff:9e: 28:61:7a:38:e1:2b:38:51:0f:51:97:03:5d:55:05:f3:65:f4: 49:b0:f2:05:e1:98:da:39:73:16:b6:4b:50:dd:da:3f:39:1f: a5:09:41:db:3e:e1:de:09:bc:82:ed:80:c9:e3:cf:f9:68:e5: 4a:8b:e5:7b -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUOBv5m5BwEvNXceg+6uLz7992bCUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRkMzMURCNzBGN0IyRjE3RjEzRTkyQTJFN0JBRTU1NTQ3 OTJFRkJCRjAeFw0yNTEyMTcwOTI1NDVaFw0yNTEyMjAxMjE1NDVaMDMxMTAvBgNV BAMTKDA0QzIyMUY0NUNGMjdGMjcxQzcxQkYyNTkwMjFBQzQ4ODZEMkM4RTgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCzDllj97/9HawSsF3M3av9FWF/ +5VUa/kdejoE+8gbenCYXqWEMBq8Bqf1vdJ41Bq78qpdItidwFXYjHK+m3LehfZ9 Tr4RyjmOCLNVDD3z0Hn3mK2JctIEJtvFKLPsWyR1vqcdKTAKe9C7ZLm/jMhVE8b+ 9+wWaXYEk/z3q9QST8sVVAAVvzhYzPebv0TDem8o9QEoaiGvqtpNWbgqFtP2qS2D Bu6LkugdV2G5Udbuuh/y7yopXIm7HuZO4AGSOm5SnpWYwGGGXb23R7QbbRJ1moP5 VrT5rIUG5IiOryb6bYoxurjn1JV/GlUbFwjsb8QiVgjLEvxwDn5ZLyVQ1ixZAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUBMIh9Fzyfycccb8lkCGsSIbSyOgwHwYDVR0j BBgwFoAU/DHbcPey8X8T6Soue65VVHku+78wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l ZGU0NzE5YS1hY2U0LTQxZjItYTA3MC04ZGUzMTkyYjdmNDkvMC9GQzMxREI3MEY3 QjJGMTdGMTNFOTJBMkU3QkFFNTU1NDc5MkVGQkJGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRkMzMURCNzBGN0IyRjE3RjEzRTkyQTJFN0JBRTU1NTQ3OTJF RkJCRi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZWRlNDcxOWEtYWNlNC00MWYyLWEw NzAtOGRlMzE5MmI3ZjQ5LzAvRkMzMURCNzBGN0IyRjE3RjEzRTkyQTJFN0JBRTU1 NTQ3OTJFRkJCRi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKEiQU8G+PAVoc99usyC5jI+gLqGADodgYh/ iojBjnHBZb+bVm7wBZIcBtT3qK4oik1HPEADu4Y7F1OSkJJ4lhxhYf/gKZ72YC/A 2SBbSihJq7LlozxSaKPzhxY1NPnrcWhxPGgzF29OwEqztY/dTBOBnUOSREER2t8Q 0+3D5pE7xDASgkNfcwTaS1WVcr03CkCiJbp0Wuz1TyVq9DEW6BhNWytQau16aWye YbRcHh40NDMn/46opXqxlOZBxxcytZ9ttsH/nihhejjhKzhRD1GXA11VBfNl9Emw 8gXhmNo5cxa2S1Dd2j85H6UJQds+4d4JvILtgMnjz/lo5UqL5Xs= -----END CERTIFICATE-----Generated at Fri Dec 19 18:44:31 2025 by rpki-client