This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/b32d7627-47d7-4fd0-ae0f-63b873fe2c88/0/FBF979FD5B6D1AF690338C406BB657208D98F3DE.mft File: FBF979FD5B6D1AF690338C406BB657208D98F3DE.mft (raw, json) Hash identifier: XfE/VagF06QQHE+ZK2XsN1+FF7otp/Z5wS+v4cQGsWQ= Subject key identifier: 36:5F:86:23:2B:8A:9C:06:97:1D:12:CE:27:89:CB:2D:E6:E3:37:A8 Authority key identifier: FB:F9:79:FD:5B:6D:1A:F6:90:33:8C:40:6B:B6:57:20:8D:98:F3:DE Certificate issuer: /CN=FBF979FD5B6D1AF690338C406BB657208D98F3DE Certificate serial: 5A53B0BF79BF19D446EAFD10859B949479D506D1 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FBF979FD5B6D1AF690338C406BB657208D98F3DE.cer Subject info access: rsync://repo-rpki.idnic.net/repo/b32d7627-47d7-4fd0-ae0f-63b873fe2c88/0/FBF979FD5B6D1AF690338C406BB657208D98F3DE.mft Manifest number: 0532 Signing time: Mon 15 Dec 2025 22:52:22 +0000 Manifest this update: Mon 15 Dec 2025 22:47:22 +0000 Manifest next update: Fri 19 Dec 2025 02:24:22 +0000 Files and hashes: 1: 3130332e3134392e3131362e302f32342d3234203d3e20313430303139.roa (hash: VXJZTzf1N9bLnOE34wm7TG6tn0+JbHJPrkKyWsVcPXk=) 2: FBF979FD5B6D1AF690338C406BB657208D98F3DE.crl (hash: gX7yt4wZz25T8ODfnTfvgTQ8fpzM2wmFCmyCXLsMp7U=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/b32d7627-47d7-4fd0-ae0f-63b873fe2c88/0/FBF979FD5B6D1AF690338C406BB657208D98F3DE.crl rsync://repo-rpki.idnic.net/repo/b32d7627-47d7-4fd0-ae0f-63b873fe2c88/0/FBF979FD5B6D1AF690338C406BB657208D98F3DE.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FBF979FD5B6D1AF690338C406BB657208D98F3DE.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 19 Dec 2025 02:24:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5a:53:b0:bf:79:bf:19:d4:46:ea:fd:10:85:9b:94:94:79:d5:06:d1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=FBF979FD5B6D1AF690338C406BB657208D98F3DE Validity Not Before: Dec 15 22:47:22 2025 GMT Not After : Dec 19 02:24:22 2025 GMT Subject: CN=365F86232B8A9C06971D12CE2789CB2DE6E337A8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:84:08:b7:f5:2a:39:11:dd:3d:4e:d6:18:85: 80:17:41:a0:84:bc:ef:54:4d:52:37:4a:fc:e0:c1: a3:87:cb:74:63:3b:95:be:16:9f:5d:29:e6:91:cc: f6:7d:34:03:4d:47:3e:da:81:c9:60:a1:58:b2:e0: c9:f3:2f:b1:4a:0f:c5:9c:02:bb:79:4a:69:fd:44: 76:8d:86:55:77:a5:ab:bd:ee:b1:3c:b2:28:a4:38: a2:b3:e5:ce:b3:46:d4:9e:12:43:4c:96:3e:fe:a0: f6:cd:1c:38:93:1f:61:42:a3:f2:b6:f8:db:c2:3a: df:d1:b1:17:5f:68:ad:e6:f6:84:e5:a4:5c:eb:6f: 6c:d6:4e:67:d4:ee:9e:0b:b1:66:58:33:2a:3d:0e: 6d:72:73:f2:53:9b:7a:6b:ef:4a:dc:ff:e6:ae:13: 78:0a:f7:cb:de:5c:cc:b0:6b:dc:85:0c:61:bb:15: a8:15:73:ee:52:17:83:4c:96:a7:d2:06:c6:31:6e: 8d:56:3d:9b:e2:55:3a:ef:ce:03:5b:d0:48:03:17: 14:12:bf:13:ed:54:a1:35:52:dd:d3:49:ec:25:7d: 48:d4:d0:dc:b6:6b:5f:60:95:d4:d7:6f:a5:5d:b4: ee:b1:69:53:28:16:b3:68:ff:55:4a:75:df:e6:a3: 9f:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 36:5F:86:23:2B:8A:9C:06:97:1D:12:CE:27:89:CB:2D:E6:E3:37:A8 X509v3 Authority Key Identifier: keyid:FB:F9:79:FD:5B:6D:1A:F6:90:33:8C:40:6B:B6:57:20:8D:98:F3:DE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/b32d7627-47d7-4fd0-ae0f-63b873fe2c88/0/FBF979FD5B6D1AF690338C406BB657208D98F3DE.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FBF979FD5B6D1AF690338C406BB657208D98F3DE.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/b32d7627-47d7-4fd0-ae0f-63b873fe2c88/0/FBF979FD5B6D1AF690338C406BB657208D98F3DE.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b9:5d:55:9f:cd:b8:31:bf:98:db:26:40:42:71:b4:8e:ed:bd: 01:ce:ef:b2:1c:b2:2f:e5:4c:ce:e1:c6:87:2e:a1:c5:91:78: a1:94:48:89:6b:dc:d5:be:e5:8a:da:b2:c8:76:e2:14:ce:e8: 6d:5a:be:3d:97:a9:2e:ba:1e:c3:09:0f:68:b8:30:dc:f8:8e: db:f3:d6:45:9f:43:2b:ff:33:7b:7a:88:89:bc:a2:76:a5:32: 68:f2:ed:78:be:04:3d:b5:5d:f5:77:a2:87:8f:64:a2:da:53: de:77:54:81:44:e1:ef:01:94:4e:da:3e:66:2c:73:24:99:15: b4:9d:2d:55:d5:da:cb:14:9b:1c:96:8d:75:45:c0:7d:7b:f9: 89:9c:40:13:b3:fe:a9:43:29:b9:41:65:75:29:9b:43:20:e6: cf:b2:c3:34:5b:84:63:c8:da:96:27:0a:ef:31:47:e2:61:a2: 3f:b9:12:6d:14:01:a3:ac:ef:94:19:5b:ea:c9:4b:02:b8:ea: 59:3d:cf:10:e2:5f:29:1c:54:52:0d:82:c3:be:ff:d2:8f:ec: d3:7e:3e:56:62:54:3b:b2:ef:c2:f1:b7:ea:45:50:24:c3:f8: a3:c5:e9:d7:ba:6a:8f:5f:31:ce:08:d6:41:e9:b1:14:43:14: 2a:6a:ff:46 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUWlOwv3m/GdRG6v0QhZuUlHnVBtEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRkJGOTc5RkQ1QjZEMUFGNjkwMzM4QzQwNkJCNjU3MjA4 RDk4RjNERTAeFw0yNTEyMTUyMjQ3MjJaFw0yNTEyMTkwMjI0MjJaMDMxMTAvBgNV BAMTKDM2NUY4NjIzMkI4QTlDMDY5NzFEMTJDRTI3ODlDQjJERTZFMzM3QTgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDGhAi39So5Ed09TtYYhYAXQaCE vO9UTVI3SvzgwaOHy3RjO5W+Fp9dKeaRzPZ9NANNRz7agclgoViy4MnzL7FKD8Wc Art5Smn9RHaNhlV3pau97rE8siikOKKz5c6zRtSeEkNMlj7+oPbNHDiTH2FCo/K2 +NvCOt/RsRdfaK3m9oTlpFzrb2zWTmfU7p4LsWZYMyo9Dm1yc/JTm3pr70rc/+au E3gK98veXMywa9yFDGG7FagVc+5SF4NMlqfSBsYxbo1WPZviVTrvzgNb0EgDFxQS vxPtVKE1Ut3TSewlfUjU0Ny2a19gldTXb6VdtO6xaVMoFrNo/1VKdd/mo5/ZAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUNl+GIyuKnAaXHRLOJ4nLLebjN6gwHwYDVR0j BBgwFoAU+/l5/VttGvaQM4xAa7ZXII2Y894wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i MzJkNzYyNy00N2Q3LTRmZDAtYWUwZi02M2I4NzNmZTJjODgvMC9GQkY5NzlGRDVC NkQxQUY2OTAzMzhDNDA2QkI2NTcyMDhEOThGM0RFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRkJGOTc5RkQ1QjZEMUFGNjkwMzM4QzQwNkJCNjU3MjA4RDk4 RjNERS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYjMyZDc2MjctNDdkNy00ZmQwLWFl MGYtNjNiODczZmUyYzg4LzAvRkJGOTc5RkQ1QjZEMUFGNjkwMzM4QzQwNkJCNjU3 MjA4RDk4RjNERS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALldVZ/NuDG/mNsmQEJxtI7tvQHO77Icsi/l TM7hxocuocWReKGUSIlr3NW+5Yrassh24hTO6G1avj2XqS66HsMJD2i4MNz4jtvz 1kWfQyv/M3t6iIm8onalMmjy7Xi+BD21XfV3ooePZKLaU953VIFE4e8BlE7aPmYs cySZFbSdLVXV2ssUmxyWjXVFwH17+YmcQBOz/qlDKblBZXUpm0Mg5s+ywzRbhGPI 2pYnCu8xR+Jhoj+5Em0UAaOs75QZW+rJSwK46lk9zxDiXykcVFINgsO+/9KP7NN+ PlZiVDuy78Lxt+pFUCTD+KPF6de6ao9fMc4I1kHpsRRDFCpq/0Y= -----END CERTIFICATE-----Generated at Tue Dec 16 06:41:19 2025 by rpki-client