This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/b32d7627-47d7-4fd0-ae0f-63b873fe2c88/0/FBF979FD5B6D1AF690338C406BB657208D98F3DE.mft File: FBF979FD5B6D1AF690338C406BB657208D98F3DE.mft (raw, json) Hash identifier: GqA3MaSO1ZYGk2aUtRPIOrtKou0KdGzj5ddEsrGyNoU= Subject key identifier: 3E:94:A6:29:B5:25:06:74:B9:AC:D7:E4:03:A4:8D:D5:0F:78:86:09 Authority key identifier: FB:F9:79:FD:5B:6D:1A:F6:90:33:8C:40:6B:B6:57:20:8D:98:F3:DE Certificate issuer: /CN=FBF979FD5B6D1AF690338C406BB657208D98F3DE Certificate serial: 7CB303C0318DCF80C4FDADCDAF53B48A1DE7A0E4 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FBF979FD5B6D1AF690338C406BB657208D98F3DE.cer Subject info access: rsync://repo-rpki.idnic.net/repo/b32d7627-47d7-4fd0-ae0f-63b873fe2c88/0/FBF979FD5B6D1AF690338C406BB657208D98F3DE.mft Manifest number: 052C Signing time: Tue 02 Dec 2025 00:22:25 +0000 Manifest this update: Tue 02 Dec 2025 00:17:25 +0000 Manifest next update: Fri 05 Dec 2025 04:21:25 +0000 Files and hashes: 1: 3130332e3134392e3131362e302f32342d3234203d3e20313430303139.roa (hash: VXJZTzf1N9bLnOE34wm7TG6tn0+JbHJPrkKyWsVcPXk=) 2: FBF979FD5B6D1AF690338C406BB657208D98F3DE.crl (hash: gDdURqoD7bQ3WP0NFSwoGqkJ0r0jU8/oSEtFjImicUk=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/b32d7627-47d7-4fd0-ae0f-63b873fe2c88/0/FBF979FD5B6D1AF690338C406BB657208D98F3DE.crl rsync://repo-rpki.idnic.net/repo/b32d7627-47d7-4fd0-ae0f-63b873fe2c88/0/FBF979FD5B6D1AF690338C406BB657208D98F3DE.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FBF979FD5B6D1AF690338C406BB657208D98F3DE.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 05 Dec 2025 04:21:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7c:b3:03:c0:31:8d:cf:80:c4:fd:ad:cd:af:53:b4:8a:1d:e7:a0:e4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=FBF979FD5B6D1AF690338C406BB657208D98F3DE Validity Not Before: Dec 2 00:17:25 2025 GMT Not After : Dec 5 04:21:25 2025 GMT Subject: CN=3E94A629B5250674B9ACD7E403A48DD50F788609 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:b7:13:e8:09:a9:5e:94:eb:4f:f0:d8:2f:7d: b8:a9:63:bd:f9:04:63:68:d2:a4:5b:30:60:11:a0: 3b:d8:ff:0a:71:32:5d:99:77:47:7f:31:a8:43:13: e8:77:09:8c:a2:b6:1a:6e:84:5d:e2:d7:fb:49:b0: 8c:a6:ed:2b:92:8f:8f:37:a8:e3:f5:b0:3e:f0:c3: 83:20:77:8a:85:c6:8f:73:9f:a0:dd:dd:f4:bb:f8: 5b:5f:9c:cd:2c:5e:02:7f:14:cd:e5:b4:6c:5a:7d: ef:dc:da:b8:ef:16:dc:cb:5f:45:46:09:ba:5b:f8: 7a:f8:6f:b0:68:26:a9:06:02:e8:f9:a0:4e:88:17: 42:1c:a2:3f:22:46:63:44:e0:08:23:5f:a5:46:44: 45:1b:2c:e6:a0:0f:56:f5:ca:7d:2e:8b:9f:5f:ad: 0e:c1:3b:ba:2b:f1:23:66:ce:a7:2a:29:3b:46:32: 3a:ce:fb:3c:99:63:2e:cf:3b:5e:b8:71:9d:ff:20: 80:60:34:e3:23:a5:52:8c:e0:87:08:57:cd:28:74: 0c:92:7f:8e:dd:d4:8e:9a:3c:4d:bf:77:46:de:d4: 08:66:a8:5e:74:fb:54:8f:d7:ba:fa:f3:78:98:45: 7b:ac:29:67:cd:e8:d1:65:90:9e:f2:b8:a1:09:f5: 1c:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:94:A6:29:B5:25:06:74:B9:AC:D7:E4:03:A4:8D:D5:0F:78:86:09 X509v3 Authority Key Identifier: keyid:FB:F9:79:FD:5B:6D:1A:F6:90:33:8C:40:6B:B6:57:20:8D:98:F3:DE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/b32d7627-47d7-4fd0-ae0f-63b873fe2c88/0/FBF979FD5B6D1AF690338C406BB657208D98F3DE.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FBF979FD5B6D1AF690338C406BB657208D98F3DE.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/b32d7627-47d7-4fd0-ae0f-63b873fe2c88/0/FBF979FD5B6D1AF690338C406BB657208D98F3DE.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 58:fb:be:b9:71:d8:f8:ab:36:ca:ca:a5:b7:8c:4a:75:57:a5: 4d:5e:56:4b:12:e9:92:d8:af:a4:06:c4:1a:0d:41:3a:5e:de: d7:a1:73:97:21:2d:26:b6:2c:91:2f:b3:a2:eb:fd:13:58:e5: 7f:db:8a:24:d6:7a:98:e9:1f:b2:be:0d:51:6d:50:0b:28:df: 20:4d:cf:02:f8:0f:bd:8c:8c:54:c5:eb:64:5c:a8:61:01:ba: 4c:f2:61:c3:af:f4:af:66:6b:e0:d9:e7:76:73:95:51:40:05: 96:1a:e2:5a:25:a9:70:52:c4:09:2f:75:fc:4b:ec:21:bc:99: 17:ca:07:91:1d:a3:5f:ec:82:b6:78:ed:4b:0a:88:91:d4:2e: 00:60:03:2c:63:30:d2:66:75:94:be:86:f1:52:ea:e5:b0:62: 08:27:f6:f7:bf:9d:85:30:3a:e9:19:a4:33:0d:9a:ea:29:fd: c2:af:e6:52:00:1a:dd:25:82:1a:19:73:97:30:0a:56:e5:c2: 15:5c:fc:ea:87:e5:06:ac:1c:31:68:07:69:cd:52:fd:e5:8a: 35:ce:e6:39:f3:8e:a2:4b:0b:0b:c3:8b:8c:c8:f5:d9:32:db: 9c:3f:e5:e6:90:28:94:63:1c:2c:1b:25:c4:5c:cd:ed:2f:48: 1c:31:42:94 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUfLMDwDGNz4DE/a3Nr1O0ih3noOQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRkJGOTc5RkQ1QjZEMUFGNjkwMzM4QzQwNkJCNjU3MjA4 RDk4RjNERTAeFw0yNTEyMDIwMDE3MjVaFw0yNTEyMDUwNDIxMjVaMDMxMTAvBgNV BAMTKDNFOTRBNjI5QjUyNTA2NzRCOUFDRDdFNDAzQTQ4REQ1MEY3ODg2MDkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDFtxPoCalelOtP8NgvfbipY735 BGNo0qRbMGARoDvY/wpxMl2Zd0d/MahDE+h3CYyithpuhF3i1/tJsIym7SuSj483 qOP1sD7ww4Mgd4qFxo9zn6Dd3fS7+FtfnM0sXgJ/FM3ltGxafe/c2rjvFtzLX0VG Cbpb+Hr4b7BoJqkGAuj5oE6IF0Icoj8iRmNE4AgjX6VGREUbLOagD1b1yn0ui59f rQ7BO7or8SNmzqcqKTtGMjrO+zyZYy7PO164cZ3/IIBgNOMjpVKM4IcIV80odAyS f47d1I6aPE2/d0be1AhmqF50+1SP17r683iYRXusKWfN6NFlkJ7yuKEJ9RxhAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUPpSmKbUlBnS5rNfkA6SN1Q94hgkwHwYDVR0j BBgwFoAU+/l5/VttGvaQM4xAa7ZXII2Y894wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i MzJkNzYyNy00N2Q3LTRmZDAtYWUwZi02M2I4NzNmZTJjODgvMC9GQkY5NzlGRDVC NkQxQUY2OTAzMzhDNDA2QkI2NTcyMDhEOThGM0RFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRkJGOTc5RkQ1QjZEMUFGNjkwMzM4QzQwNkJCNjU3MjA4RDk4 RjNERS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYjMyZDc2MjctNDdkNy00ZmQwLWFl MGYtNjNiODczZmUyYzg4LzAvRkJGOTc5RkQ1QjZEMUFGNjkwMzM4QzQwNkJCNjU3 MjA4RDk4RjNERS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFj7vrlx2PirNsrKpbeMSnVXpU1eVksS6ZLY r6QGxBoNQTpe3tehc5chLSa2LJEvs6Lr/RNY5X/biiTWepjpH7K+DVFtUAso3yBN zwL4D72MjFTF62RcqGEBukzyYcOv9K9ma+DZ53ZzlVFABZYa4lolqXBSxAkvdfxL 7CG8mRfKB5Edo1/sgrZ47UsKiJHULgBgAyxjMNJmdZS+hvFS6uWwYggn9ve/nYUw OukZpDMNmuop/cKv5lIAGt0lghoZc5cwClblwhVc/OqH5QasHDFoB2nNUv3lijXO 5jnzjqJLCwvDi4zI9dky25w/5eaQKJRjHCwbJcRcze0vSBwxQpQ= -----END CERTIFICATE-----Generated at Wed Dec 3 14:13:37 2025 by rpki-client