This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/59b07a9e-62df-4808-9d2a-a6e6884bcbbb/1/FA479894B4849679EBB9029580F04B8BD74CE048.mft File: FA479894B4849679EBB9029580F04B8BD74CE048.mft (raw, json) Hash identifier: 5Z3R7tXMBr6kWddjX2QxqC2GeadXQIFOgqOuxTGaOVU= Subject key identifier: 3A:FC:3C:FE:92:7A:78:3C:D5:08:04:E2:26:44:88:87:B5:6A:2F:12 Authority key identifier: FA:47:98:94:B4:84:96:79:EB:B9:02:95:80:F0:4B:8B:D7:4C:E0:48 Certificate issuer: /CN=FA479894B4849679EBB9029580F04B8BD74CE048 Certificate serial: 33073FA8FA418CC0C2926365BD3F74177A40D78E Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FA479894B4849679EBB9029580F04B8BD74CE048.cer Subject info access: rsync://repo-rpki.idnic.net/repo/59b07a9e-62df-4808-9d2a-a6e6884bcbbb/1/FA479894B4849679EBB9029580F04B8BD74CE048.mft Manifest number: C1 Signing time: Mon 01 Dec 2025 08:15:48 +0000 Manifest this update: Mon 01 Dec 2025 08:10:48 +0000 Manifest next update: Thu 04 Dec 2025 19:48:48 +0000 Files and hashes: 1: FA479894B4849679EBB9029580F04B8BD74CE048.crl (hash: WYuQ8qHNsPLxTO52Gw62/xR104ti7cE/oPt4UWvQcng=) 2: 323030313a6466343a343463303a3a2f34382d3438203d3e20313533313137.roa (hash: TN7coRRv7ozdQ4MBQjtVExbapiKpR2cs6McrqrVZTKc=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/59b07a9e-62df-4808-9d2a-a6e6884bcbbb/1/FA479894B4849679EBB9029580F04B8BD74CE048.crl rsync://repo-rpki.idnic.net/repo/59b07a9e-62df-4808-9d2a-a6e6884bcbbb/1/FA479894B4849679EBB9029580F04B8BD74CE048.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FA479894B4849679EBB9029580F04B8BD74CE048.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 04 Dec 2025 19:48:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 33:07:3f:a8:fa:41:8c:c0:c2:92:63:65:bd:3f:74:17:7a:40:d7:8e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=FA479894B4849679EBB9029580F04B8BD74CE048 Validity Not Before: Dec 1 08:10:48 2025 GMT Not After : Dec 4 19:48:48 2025 GMT Subject: CN=3AFC3CFE927A783CD50804E226448887B56A2F12 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:22:0a:43:45:94:a4:43:c3:e5:c6:49:2f:74: 12:e2:94:6d:a9:91:85:6c:52:75:26:0e:f6:41:f4: a1:f0:69:e3:29:c8:dc:88:cd:17:cd:e9:35:69:b6: 91:ae:a1:dc:95:03:6f:da:f1:73:be:93:da:f2:b6: 57:ed:0b:7b:fc:b2:21:29:a7:6a:b7:c0:fe:0f:e8: 49:cb:ae:10:a7:7b:dc:50:6f:04:50:69:aa:ea:e1: 85:b1:30:58:19:4d:4d:cb:5f:eb:ca:0b:ae:1e:af: f4:46:99:0c:fa:07:70:d1:a9:b2:5e:a9:49:27:4e: 63:76:06:37:27:1e:ed:cf:6d:d9:1f:6f:f9:dd:59: b8:c9:6a:ef:3c:79:84:cf:ad:35:e3:e8:73:4b:47: 12:54:7f:4c:fa:dd:3c:c4:14:78:9e:e5:0c:31:2b: 23:a2:a1:b1:54:06:1c:1c:d9:ee:49:19:7d:67:2f: 3b:31:b6:44:5b:76:55:7c:1b:7b:61:ff:1b:a2:cb: 78:bd:22:55:10:f0:4f:1d:aa:5a:89:a7:4f:3d:d8: 06:5a:69:c9:50:ce:eb:22:be:01:98:84:65:d2:7e: 81:ab:5b:4c:ff:d6:dd:18:0a:d5:04:b5:a1:98:ff: 1e:ca:7e:a1:04:40:ef:79:56:d7:4e:20:14:9e:ba: 90:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:FC:3C:FE:92:7A:78:3C:D5:08:04:E2:26:44:88:87:B5:6A:2F:12 X509v3 Authority Key Identifier: keyid:FA:47:98:94:B4:84:96:79:EB:B9:02:95:80:F0:4B:8B:D7:4C:E0:48 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/59b07a9e-62df-4808-9d2a-a6e6884bcbbb/1/FA479894B4849679EBB9029580F04B8BD74CE048.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FA479894B4849679EBB9029580F04B8BD74CE048.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/59b07a9e-62df-4808-9d2a-a6e6884bcbbb/1/FA479894B4849679EBB9029580F04B8BD74CE048.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 77:b4:71:60:59:f9:69:1a:e5:7c:14:5f:ea:f3:bc:3c:77:ff: a3:9f:a8:9e:8b:85:3e:63:27:ee:f1:f3:a7:e2:25:b1:ff:94: 05:87:64:85:37:6f:b7:6c:ba:f8:91:a3:ed:6b:a9:ac:0d:4f: 4a:c0:c3:5b:97:9f:4b:52:f0:7d:f2:29:7d:07:7d:a2:b3:9a: c1:85:79:73:11:0c:1d:03:92:35:f9:29:9d:26:73:84:85:4c: f2:09:ec:82:a7:e4:d2:75:99:37:74:84:80:0a:55:39:81:39: d5:69:61:92:58:6d:50:dd:57:a5:fe:46:88:41:3d:b9:e6:e2: a7:4b:29:0e:e5:75:9d:07:ec:30:3b:96:6e:49:d0:fb:ee:d7: 5d:3c:88:60:ca:f8:6a:6c:61:00:41:7a:f8:3a:eb:2c:cb:08: 8e:dc:06:87:59:ba:09:2b:29:11:bb:a0:74:97:53:75:41:d6: c4:fb:f0:8c:d0:5a:ef:b9:f3:6d:cd:54:80:0c:52:63:a3:39: d0:a1:6f:7a:58:83:ea:36:6e:72:2f:7a:b1:41:2f:e6:f5:6f: 91:f1:2e:ea:3d:e1:4f:22:50:25:de:63:f3:93:d5:c0:97:c8: 7f:55:c9:93:2c:2e:29:46:d6:84:01:bd:72:c3:40:36:45:f6: 54:4f:be:fd -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUMwc/qPpBjMDCkmNlvT90F3pA144wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRkE0Nzk4OTRCNDg0OTY3OUVCQjkwMjk1ODBGMDRCOEJE NzRDRTA0ODAeFw0yNTEyMDEwODEwNDhaFw0yNTEyMDQxOTQ4NDhaMDMxMTAvBgNV BAMTKDNBRkMzQ0ZFOTI3QTc4M0NENTA4MDRFMjI2NDQ4ODg3QjU2QTJGMTIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC5IgpDRZSkQ8PlxkkvdBLilG2p kYVsUnUmDvZB9KHwaeMpyNyIzRfN6TVptpGuodyVA2/a8XO+k9rytlftC3v8siEp p2q3wP4P6EnLrhCne9xQbwRQaarq4YWxMFgZTU3LX+vKC64er/RGmQz6B3DRqbJe qUknTmN2BjcnHu3Pbdkfb/ndWbjJau88eYTPrTXj6HNLRxJUf0z63TzEFHie5Qwx KyOiobFUBhwc2e5JGX1nLzsxtkRbdlV8G3th/xuiy3i9IlUQ8E8dqlqJp0892AZa aclQzusivgGYhGXSfoGrW0z/1t0YCtUEtaGY/x7KfqEEQO95VtdOIBSeupAhAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUOvw8/pJ6eDzVCATiJkSIh7VqLxIwHwYDVR0j BBgwFoAU+keYlLSElnnruQKVgPBLi9dM4EgwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 OWIwN2E5ZS02MmRmLTQ4MDgtOWQyYS1hNmU2ODg0YmNiYmIvMS9GQTQ3OTg5NEI0 ODQ5Njc5RUJCOTAyOTU4MEYwNEI4QkQ3NENFMDQ4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRkE0Nzk4OTRCNDg0OTY3OUVCQjkwMjk1ODBGMDRCOEJENzRD RTA0OC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNTliMDdhOWUtNjJkZi00ODA4LTlk MmEtYTZlNjg4NGJjYmJiLzEvRkE0Nzk4OTRCNDg0OTY3OUVCQjkwMjk1ODBGMDRC OEJENzRDRTA0OC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHe0cWBZ+Wka5XwUX+rzvDx3/6OfqJ6LhT5j J+7x86fiJbH/lAWHZIU3b7dsuviRo+1rqawNT0rAw1uXn0tS8H3yKX0HfaKzmsGF eXMRDB0DkjX5KZ0mc4SFTPIJ7IKn5NJ1mTd0hIAKVTmBOdVpYZJYbVDdV6X+RohB Pbnm4qdLKQ7ldZ0H7DA7lm5J0Pvu1108iGDK+GpsYQBBevg66yzLCI7cBodZugkr KRG7oHSXU3VB1sT78IzQWu+5823NVIAMUmOjOdChb3pYg+o2bnIverFBL+b1b5Hx Luo94U8iUCXeY/OT1cCXyH9VyZMsLilG1oQBvXLDQDZF9lRPvv0= -----END CERTIFICATE-----Generated at Wed Dec 3 16:07:15 2025 by rpki-client