This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/51e94243-87f0-426f-a9ca-4c19edb06b42/0/FBACFC63658425B36399C4B9D0322622B8C5B7F0.mft File: FBACFC63658425B36399C4B9D0322622B8C5B7F0.mft (raw, json) Hash identifier: vJaEEQepzBFguYTSr2R2RzP8qB/BAUcg4OBn45DTNmk= Subject key identifier: 01:EC:AF:4F:0F:AE:6A:6D:90:86:97:46:61:29:5A:3F:FB:8A:BF:D7 Authority key identifier: FB:AC:FC:63:65:84:25:B3:63:99:C4:B9:D0:32:26:22:B8:C5:B7:F0 Certificate issuer: /CN=FBACFC63658425B36399C4B9D0322622B8C5B7F0 Certificate serial: 631B04B15EC243AF4EE0D2AC54B73A091925E93F Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FBACFC63658425B36399C4B9D0322622B8C5B7F0.cer Subject info access: rsync://repo-rpki.idnic.net/repo/51e94243-87f0-426f-a9ca-4c19edb06b42/0/FBACFC63658425B36399C4B9D0322622B8C5B7F0.mft Manifest number: 0538 Signing time: Fri 12 Dec 2025 17:12:06 +0000 Manifest this update: Fri 12 Dec 2025 17:07:06 +0000 Manifest next update: Mon 15 Dec 2025 20:05:06 +0000 Files and hashes: 1: FBACFC63658425B36399C4B9D0322622B8C5B7F0.crl (hash: 1tMfYhxP3EohTHtd81buL7vDJtpfRxPehFHKDNFF2g4=) 2: 323430373a336538303a363a3a2f34382d3438203d3e203338343936.roa (hash: 4k+7oiIZgf8A+xoNtWkGh4r/bBNQQHgBlobDBAPY3jY=) 3: 323430373a336538303a3a2f33322d3438203d3e203338373638.roa (hash: jCqzfoNt2x+8bcJ6fatZirQ8CiZyxgl3URZLZEZ3szo=) 4: 3130332e3233342e3231382e302f32342d3234203d3e203338373638.roa (hash: vWQKx1TT5Vb7zbmKfpDwSS1ZiebEmEmR3LksZYKeYp8=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/51e94243-87f0-426f-a9ca-4c19edb06b42/0/FBACFC63658425B36399C4B9D0322622B8C5B7F0.crl rsync://repo-rpki.idnic.net/repo/51e94243-87f0-426f-a9ca-4c19edb06b42/0/FBACFC63658425B36399C4B9D0322622B8C5B7F0.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FBACFC63658425B36399C4B9D0322622B8C5B7F0.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 15 Dec 2025 20:05:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 63:1b:04:b1:5e:c2:43:af:4e:e0:d2:ac:54:b7:3a:09:19:25:e9:3f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=FBACFC63658425B36399C4B9D0322622B8C5B7F0 Validity Not Before: Dec 12 17:07:06 2025 GMT Not After : Dec 15 20:05:06 2025 GMT Subject: CN=01ECAF4F0FAE6A6D9086974661295A3FFB8ABFD7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:fa:e4:3e:d2:f6:c0:4e:74:d5:d1:61:cc:08: 0e:ec:9e:0f:43:0b:7b:5e:f8:9e:da:cd:54:51:69: 08:1d:af:ea:da:7f:06:93:d6:07:3b:c5:98:60:6c: a0:20:81:7e:87:42:87:e0:20:8d:06:1b:28:6e:80: 8f:f1:91:65:ed:63:75:59:c6:54:8d:51:c6:51:22: 78:ff:b0:f9:e6:bc:ed:1e:df:2b:2c:0e:d1:eb:c1: 72:bf:82:06:91:bd:66:ca:45:f1:2f:ab:c3:fd:9a: 82:70:fa:70:a7:33:e3:5f:56:b7:c6:bd:51:07:c0: 9a:c5:35:ae:31:d5:e8:99:90:42:fe:bc:ea:5b:42: f2:57:0e:83:ab:56:ce:d4:eb:db:77:ca:04:d2:d7: 19:62:35:74:4a:96:83:cb:a6:c1:11:e5:a1:58:74: f8:59:03:c8:de:41:9d:84:3a:bc:be:09:a1:11:16: 67:1b:b8:91:6f:d7:7c:de:24:ad:87:a5:1b:ca:aa: c1:9a:9d:aa:c2:c2:f2:bf:ed:2e:6a:56:f1:9c:bc: 83:bf:29:fd:ca:9d:71:c0:d1:f3:9d:b4:ab:f3:fd: d7:64:65:8c:7c:e9:72:15:ec:62:16:9e:ee:40:78: 6a:c0:a0:42:d1:86:c3:d4:b3:d3:b3:4c:20:10:df: 16:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 01:EC:AF:4F:0F:AE:6A:6D:90:86:97:46:61:29:5A:3F:FB:8A:BF:D7 X509v3 Authority Key Identifier: keyid:FB:AC:FC:63:65:84:25:B3:63:99:C4:B9:D0:32:26:22:B8:C5:B7:F0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/51e94243-87f0-426f-a9ca-4c19edb06b42/0/FBACFC63658425B36399C4B9D0322622B8C5B7F0.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FBACFC63658425B36399C4B9D0322622B8C5B7F0.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/51e94243-87f0-426f-a9ca-4c19edb06b42/0/FBACFC63658425B36399C4B9D0322622B8C5B7F0.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9a:e6:4a:7d:ce:a9:b6:10:46:1c:42:48:25:26:a0:5c:1a:ea: 2a:97:da:01:94:d7:98:20:a7:8d:ac:bf:29:ba:59:a1:43:6e: 00:74:43:3b:09:99:f9:7a:ff:f3:4c:3e:a7:fd:7d:b6:20:68: 4b:9c:53:b5:57:b5:22:93:08:f3:46:ce:64:fc:cd:db:ba:a9: b3:52:58:61:56:4c:94:81:d8:0e:50:7c:76:6d:87:ce:8d:b6: d4:d1:ed:b2:a5:5a:c2:10:91:d2:c1:de:33:f9:b0:e8:0a:f8: 66:7c:9c:76:67:db:62:6d:a7:97:80:f8:4b:63:ab:ae:0d:87: e3:54:ff:97:af:27:99:9e:c2:fc:6a:43:b0:9a:29:e9:1d:57: 63:c7:bc:21:93:78:5a:44:57:94:e9:98:a2:75:9a:99:4f:65: 5b:51:c2:b9:04:9f:8c:2c:83:08:09:de:71:cc:42:2f:8b:1a: 58:0b:bf:fa:a4:c1:d2:6d:32:ba:b1:90:76:75:b6:7b:28:72: d2:7d:58:d1:13:2e:b8:43:28:84:e3:c0:0e:22:c9:84:7c:03: f7:cf:d8:e6:fe:55:e0:e2:8e:21:ca:b7:24:a4:99:d7:7b:70: 8f:44:5d:a5:a7:64:4e:72:1e:ae:8a:5d:9c:e9:37:ea:f2:aa: a4:d3:d1:16 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUYxsEsV7CQ69O4NKsVLc6CRkl6T8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRkJBQ0ZDNjM2NTg0MjVCMzYzOTlDNEI5RDAzMjI2MjJC OEM1QjdGMDAeFw0yNTEyMTIxNzA3MDZaFw0yNTEyMTUyMDA1MDZaMDMxMTAvBgNV BAMTKDAxRUNBRjRGMEZBRTZBNkQ5MDg2OTc0NjYxMjk1QTNGRkI4QUJGRDcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDN+uQ+0vbATnTV0WHMCA7sng9D C3te+J7azVRRaQgdr+rafwaT1gc7xZhgbKAggX6HQofgII0GGyhugI/xkWXtY3VZ xlSNUcZRInj/sPnmvO0e3yssDtHrwXK/ggaRvWbKRfEvq8P9moJw+nCnM+NfVrfG vVEHwJrFNa4x1eiZkEL+vOpbQvJXDoOrVs7U69t3ygTS1xliNXRKloPLpsER5aFY dPhZA8jeQZ2EOry+CaERFmcbuJFv13zeJK2HpRvKqsGanarCwvK/7S5qVvGcvIO/ Kf3KnXHA0fOdtKvz/ddkZYx86XIV7GIWnu5AeGrAoELRhsPUs9OzTCAQ3xZZAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUAeyvTw+uam2QhpdGYSlaP/uKv9cwHwYDVR0j BBgwFoAU+6z8Y2WEJbNjmcS50DImIrjFt/AwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 MWU5NDI0My04N2YwLTQyNmYtYTljYS00YzE5ZWRiMDZiNDIvMC9GQkFDRkM2MzY1 ODQyNUIzNjM5OUM0QjlEMDMyMjYyMkI4QzVCN0YwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRkJBQ0ZDNjM2NTg0MjVCMzYzOTlDNEI5RDAzMjI2MjJCOEM1 QjdGMC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNTFlOTQyNDMtODdmMC00MjZmLWE5 Y2EtNGMxOWVkYjA2YjQyLzAvRkJBQ0ZDNjM2NTg0MjVCMzYzOTlDNEI5RDAzMjI2 MjJCOEM1QjdGMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJrmSn3OqbYQRhxCSCUmoFwa6iqX2gGU15gg p42svym6WaFDbgB0QzsJmfl6//NMPqf9fbYgaEucU7VXtSKTCPNGzmT8zdu6qbNS WGFWTJSB2A5QfHZth86NttTR7bKlWsIQkdLB3jP5sOgK+GZ8nHZn22Jtp5eA+Etj q64Nh+NU/5evJ5mewvxqQ7CaKekdV2PHvCGTeFpEV5TpmKJ1mplPZVtRwrkEn4ws gwgJ3nHMQi+LGlgLv/qkwdJtMrqxkHZ1tnsoctJ9WNETLrhDKITjwA4iyYR8A/fP 2Ob+VeDijiHKtySkmdd7cI9EXaWnZE5yHq6KXZzpN+ryqqTT0RY= -----END CERTIFICATE-----Generated at Sun Dec 14 15:10:56 2025 by rpki-client