This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/994d1f62-8488-4086-8d4c-f2de5c76da3d/0/FAB081FCD86AB0F81D41C9E5FB9C3D32220F48CD.mft File: FAB081FCD86AB0F81D41C9E5FB9C3D32220F48CD.mft (raw, json) Hash identifier: cSNKmBoLenKfmGFxTuTmRoJkxUAxrfb8U2poHswp7Hc= Subject key identifier: 85:19:D2:E7:2F:F3:AD:31:BC:00:11:16:49:0A:63:FF:E8:B3:A4:97 Authority key identifier: FA:B0:81:FC:D8:6A:B0:F8:1D:41:C9:E5:FB:9C:3D:32:22:0F:48:CD Certificate issuer: /CN=FAB081FCD86AB0F81D41C9E5FB9C3D32220F48CD Certificate serial: 0D5F3A73C1F190C6C434862954F57FE209B6B7E5 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/FAB081FCD86AB0F81D41C9E5FB9C3D32220F48CD.cer Subject info access: rsync://repo-rpki.idnic.net/repo/994d1f62-8488-4086-8d4c-f2de5c76da3d/0/FAB081FCD86AB0F81D41C9E5FB9C3D32220F48CD.mft Manifest number: 0123 Signing time: Sat 06 Dec 2025 08:21:24 +0000 Manifest this update: Sat 06 Dec 2025 08:16:24 +0000 Manifest next update: Tue 09 Dec 2025 10:35:24 +0000 Files and hashes: 1: 3135372e31302e312e302f32342d3234203d3e20313532303739.roa (hash: 8mKHP2haWx9nDqWVpffr2HLwx0PW3MsCMnqlWHBgH8s=) 2: 3135372e31302e302e302f32332d3233203d3e20313532303739.roa (hash: LI/HMaoSlImx3bWiKBUR5SBmy9IHEOgEnYbWctfALp8=) 3: 3135372e31302e302e302f32342d3234203d3e20313532303739.roa (hash: /rLqhw2hFwRMsfI5zGP3QkMBxOWlLSkauOe3xFxChRo=) 4: FAB081FCD86AB0F81D41C9E5FB9C3D32220F48CD.crl (hash: kHTzB91/c9E9jQGrNhspEAyAt3ZRoI/fR93xUIFjDeQ=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/994d1f62-8488-4086-8d4c-f2de5c76da3d/0/FAB081FCD86AB0F81D41C9E5FB9C3D32220F48CD.crl rsync://repo-rpki.idnic.net/repo/994d1f62-8488-4086-8d4c-f2de5c76da3d/0/FAB081FCD86AB0F81D41C9E5FB9C3D32220F48CD.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/FAB081FCD86AB0F81D41C9E5FB9C3D32220F48CD.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 09 Dec 2025 06:55:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0d:5f:3a:73:c1:f1:90:c6:c4:34:86:29:54:f5:7f:e2:09:b6:b7:e5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=FAB081FCD86AB0F81D41C9E5FB9C3D32220F48CD Validity Not Before: Dec 6 08:16:24 2025 GMT Not After : Dec 9 10:35:24 2025 GMT Subject: CN=8519D2E72FF3AD31BC001116490A63FFE8B3A497 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:55:2a:bd:e6:2c:42:94:05:d3:98:cf:e6:dc: ae:30:e2:31:82:82:74:5d:21:0c:14:af:41:22:71: 71:ce:0c:6a:dc:a6:c8:a5:d8:45:d9:85:2e:4f:b9: ef:26:92:17:76:7d:d7:46:3a:e6:12:37:09:74:51: 9b:19:b4:fa:19:fa:00:bc:86:b4:b2:b6:68:20:da: 78:4c:64:18:25:08:8c:19:e9:6d:90:39:d4:07:60: f2:27:a9:28:1e:44:fb:7e:78:f9:18:93:66:e0:4e: 48:50:1a:e8:e8:a4:a7:30:58:af:7c:28:d6:bc:65: b6:ca:e5:68:9a:dc:ac:6f:55:ee:27:df:56:b1:26: 9d:27:11:93:84:43:45:36:80:e0:18:64:4c:3f:07: 4f:81:ae:80:35:44:4b:91:2b:31:fb:e8:bb:be:ac: af:a1:c6:a2:77:f3:96:3d:3b:04:a3:a5:8d:48:f6: bc:ec:38:d5:01:1a:cb:dc:d7:86:83:0a:c1:0c:34: 76:f0:c6:87:78:96:1d:55:de:e8:66:69:fe:35:7d: 5a:96:eb:b1:61:16:77:28:97:67:02:64:32:4a:7a: 4f:75:c9:77:57:27:75:33:8f:5b:66:ab:15:d7:27: e7:be:6c:4c:f4:a5:01:2d:da:1a:0e:9b:fa:e6:85: 0c:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:19:D2:E7:2F:F3:AD:31:BC:00:11:16:49:0A:63:FF:E8:B3:A4:97 X509v3 Authority Key Identifier: keyid:FA:B0:81:FC:D8:6A:B0:F8:1D:41:C9:E5:FB:9C:3D:32:22:0F:48:CD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/994d1f62-8488-4086-8d4c-f2de5c76da3d/0/FAB081FCD86AB0F81D41C9E5FB9C3D32220F48CD.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/FAB081FCD86AB0F81D41C9E5FB9C3D32220F48CD.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/994d1f62-8488-4086-8d4c-f2de5c76da3d/0/FAB081FCD86AB0F81D41C9E5FB9C3D32220F48CD.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 65:f2:89:22:81:bd:3f:5b:a3:50:03:0c:f6:60:a3:9c:f8:62: 4a:47:ed:b6:cc:1a:ea:e0:07:c0:f9:36:e5:4d:32:2c:64:a6: 8f:1f:d6:47:e9:6b:fd:fb:0e:2c:3c:9c:07:fc:c4:af:68:22: a2:51:90:85:bf:4a:0e:9d:b1:a1:cf:2b:43:38:00:21:5e:a5: 7e:45:63:78:c3:19:07:4f:2d:9d:fe:d3:bd:10:27:f0:6c:6d: 93:f5:37:2c:37:42:75:aa:49:28:d6:3e:51:68:f0:a4:cc:3c: fc:65:a4:e3:86:13:06:15:0f:6b:58:26:2a:82:04:29:e3:02: 37:ec:9a:1a:91:8d:62:cd:03:2e:c0:38:07:04:8d:96:fd:53: 30:36:63:1d:86:ec:74:01:02:af:86:13:6a:70:da:4f:64:d3: a7:d3:4a:6a:8a:45:8d:a2:f5:4d:b5:d1:cb:bb:8e:f1:32:5a: a9:ad:66:93:74:4c:6f:70:8f:57:c1:cd:d7:99:b2:38:bd:13: b2:9c:5b:0b:0b:42:9d:fa:1d:7c:27:16:50:7b:dd:a5:79:1b: ad:ef:fe:26:35:33:dd:d8:58:5c:10:54:1b:d5:05:04:c3:1f: 19:35:20:9d:14:56:4c:e6:ac:b3:f5:e6:88:1c:b0:a3:2c:97: b7:0a:0f:a6 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUDV86c8HxkMbENIYpVPV/4gm2t+UwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRkFCMDgxRkNEODZBQjBGODFENDFDOUU1RkI5QzNEMzIy MjBGNDhDRDAeFw0yNTEyMDYwODE2MjRaFw0yNTEyMDkxMDM1MjRaMDMxMTAvBgNV BAMTKDg1MTlEMkU3MkZGM0FEMzFCQzAwMTExNjQ5MEE2M0ZGRThCM0E0OTcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDDVSq95ixClAXTmM/m3K4w4jGC gnRdIQwUr0EicXHODGrcpsil2EXZhS5Pue8mkhd2fddGOuYSNwl0UZsZtPoZ+gC8 hrSytmgg2nhMZBglCIwZ6W2QOdQHYPInqSgeRPt+ePkYk2bgTkhQGujopKcwWK98 KNa8ZbbK5Wia3KxvVe4n31axJp0nEZOEQ0U2gOAYZEw/B0+BroA1REuRKzH76Lu+ rK+hxqJ385Y9OwSjpY1I9rzsONUBGsvc14aDCsEMNHbwxod4lh1V3uhmaf41fVqW 67FhFncol2cCZDJKek91yXdXJ3Uzj1tmqxXXJ+e+bEz0pQEt2hoOm/rmhQwLAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUhRnS5y/zrTG8ABEWSQpj/+izpJcwHwYDVR0j BBgwFoAU+rCB/NhqsPgdQcnl+5w9MiIPSM0wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 OTRkMWY2Mi04NDg4LTQwODYtOGQ0Yy1mMmRlNWM3NmRhM2QvMC9GQUIwODFGQ0Q4 NkFCMEY4MUQ0MUM5RTVGQjlDM0QzMjIyMEY0OENELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvRkFCMDgxRkNEODZBQjBGODFENDFDOUU1RkI5QzNEMzIyMjBG NDhDRC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOTk0ZDFmNjItODQ4OC00MDg2LThk NGMtZjJkZTVjNzZkYTNkLzAvRkFCMDgxRkNEODZBQjBGODFENDFDOUU1RkI5QzNE MzIyMjBGNDhDRC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGXyiSKBvT9bo1ADDPZgo5z4YkpH7bbMGurg B8D5NuVNMixkpo8f1kfpa/37Diw8nAf8xK9oIqJRkIW/Sg6dsaHPK0M4ACFepX5F Y3jDGQdPLZ3+070QJ/BsbZP1Nyw3QnWqSSjWPlFo8KTMPPxlpOOGEwYVD2tYJiqC BCnjAjfsmhqRjWLNAy7AOAcEjZb9UzA2Yx2G7HQBAq+GE2pw2k9k06fTSmqKRY2i 9U210cu7jvEyWqmtZpN0TG9wj1fBzdeZsji9E7KcWwsLQp36HXwnFlB73aV5G63v /iY1M93YWFwQVBvVBQTDHxk1IJ0UVkzmrLP15ogcsKMsl7cKD6Y= -----END CERTIFICATE-----Generated at Sun Dec 7 18:56:15 2025 by rpki-client