This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/e504793c-c209-469a-8e3c-eb3f5a83863f/0/FA86E23853549D2EF1D9F9C9222147A550E36A38.mft File: FA86E23853549D2EF1D9F9C9222147A550E36A38.mft (raw, json) Hash identifier: 8ciRT6gMsgbl6Eh/x0YHNLg1+gGkPGX5R0GBvBgX020= Subject key identifier: ED:1D:31:62:B4:7C:B6:A0:59:24:05:83:93:21:C6:F1:73:57:2C:78 Authority key identifier: FA:86:E2:38:53:54:9D:2E:F1:D9:F9:C9:22:21:47:A5:50:E3:6A:38 Certificate issuer: /CN=FA86E23853549D2EF1D9F9C9222147A550E36A38 Certificate serial: 5AB29A3B61E06E9B02F41ECCA0B936B3E210D512 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FA86E23853549D2EF1D9F9C9222147A550E36A38.cer Subject info access: rsync://repo-rpki.idnic.net/repo/e504793c-c209-469a-8e3c-eb3f5a83863f/0/FA86E23853549D2EF1D9F9C9222147A550E36A38.mft Manifest number: 01F4 Signing time: Tue 02 Dec 2025 21:30:46 +0000 Manifest this update: Tue 02 Dec 2025 21:25:46 +0000 Manifest next update: Sat 06 Dec 2025 02:14:46 +0000 Files and hashes: 1: FA86E23853549D2EF1D9F9C9222147A550E36A38.crl (hash: 2KzFLbBSOQmDY51zd/a9LKmTJ+D75Fo6Qn9f4HEh8xI=) 2: 3130332e35352e32392e302f32342d3234203d3e20313530343837.roa (hash: Zcui17ZIB7y9MI9lypagYjRYe4mnYqSwkXUNcZtsFwo=) 3: 3130332e35352e32382e302f32332d3234203d3e20313530343837.roa (hash: 8iSBjCuogDhcUBYZIPXuvYllDkYyp+uiEvzE8S7/ER4=) 4: 3130332e35352e32382e302f32342d3234203d3e20313530343837.roa (hash: s4D3k54ePgFL3DJuO1+sPM7ighm+hIZ0dRBFdpACJIQ=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/e504793c-c209-469a-8e3c-eb3f5a83863f/0/FA86E23853549D2EF1D9F9C9222147A550E36A38.crl rsync://repo-rpki.idnic.net/repo/e504793c-c209-469a-8e3c-eb3f5a83863f/0/FA86E23853549D2EF1D9F9C9222147A550E36A38.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FA86E23853549D2EF1D9F9C9222147A550E36A38.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 06 Dec 2025 02:14:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5a:b2:9a:3b:61:e0:6e:9b:02:f4:1e:cc:a0:b9:36:b3:e2:10:d5:12 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=FA86E23853549D2EF1D9F9C9222147A550E36A38 Validity Not Before: Dec 2 21:25:46 2025 GMT Not After : Dec 6 02:14:46 2025 GMT Subject: CN=ED1D3162B47CB6A0592405839321C6F173572C78 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:e7:93:e2:67:ef:30:75:0a:ae:4d:67:95:c9: c9:ac:fb:2b:b4:02:75:be:c5:7e:be:62:f7:81:f8: 79:12:2f:d2:34:38:19:e6:98:c0:96:fc:7f:8b:f4: b6:d3:1b:cc:39:df:90:df:b1:59:f6:a4:ac:b9:ec: 58:c4:8d:80:e5:9b:d8:5e:88:ed:9d:e3:8b:c6:bb: 9a:25:2f:45:8a:4e:f2:1a:9a:17:98:c6:b4:59:fb: 23:f7:a8:ba:cb:95:88:2c:45:33:c2:e6:3d:73:73: 02:d9:ea:37:35:cc:5f:99:bc:cc:eb:70:67:2b:87: 54:f7:85:be:ec:a9:55:a5:84:ba:7e:de:06:3e:32: 79:7a:28:83:04:de:c3:3a:d6:fe:9f:21:62:3e:7b: 68:9d:b0:2c:6f:f8:e0:d8:57:7d:d7:4e:dd:39:62: 6d:0e:bb:e7:da:7d:9c:7c:58:94:da:3b:ce:25:08: 95:8e:08:96:4f:47:e3:f9:72:53:45:c9:2d:9f:86: be:e0:da:fc:46:f3:09:a8:7b:2c:3d:b1:cb:a1:4a: e2:4d:d1:34:8b:8f:a7:30:3f:70:fb:e0:dc:3d:e4: b9:7b:c9:bf:1a:e7:ec:72:54:fb:66:d9:a6:73:de: b3:0a:23:33:56:c2:30:dd:9f:be:cd:c5:64:40:26: ad:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: ED:1D:31:62:B4:7C:B6:A0:59:24:05:83:93:21:C6:F1:73:57:2C:78 X509v3 Authority Key Identifier: keyid:FA:86:E2:38:53:54:9D:2E:F1:D9:F9:C9:22:21:47:A5:50:E3:6A:38 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/e504793c-c209-469a-8e3c-eb3f5a83863f/0/FA86E23853549D2EF1D9F9C9222147A550E36A38.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FA86E23853549D2EF1D9F9C9222147A550E36A38.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e504793c-c209-469a-8e3c-eb3f5a83863f/0/FA86E23853549D2EF1D9F9C9222147A550E36A38.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 34:83:74:3e:fa:f3:eb:53:9e:a6:a6:f7:f8:30:91:8d:00:d8: c0:73:be:5e:63:31:03:1f:49:60:5b:2b:ee:ea:9b:3b:aa:7e: d1:7a:68:e7:76:9f:d6:08:c6:99:55:a5:4d:81:fc:55:11:f5: 2d:9a:54:9e:23:5a:4e:54:27:a9:5a:1d:5d:ee:77:ae:5b:d9: 84:e8:08:67:1e:b2:f4:4c:db:65:35:be:cb:db:44:f8:88:fe: a1:80:d5:f7:34:00:b2:a2:6b:16:ca:e8:ea:7d:7b:ac:2d:f1: a2:ce:b7:bc:50:cc:ad:65:97:bf:a0:b3:df:ef:dd:99:6b:d0: 3c:de:3d:0a:17:26:b2:8a:ef:81:e3:a8:ad:7d:0f:39:e7:e7: a4:f5:4a:a2:54:ad:2e:eb:d4:bf:5f:5a:c9:9c:f9:d0:18:12: 0d:3c:99:c5:60:11:ac:d8:62:d7:a1:85:14:97:cd:5a:be:00: 4e:b8:28:33:9f:ac:28:21:83:f6:5f:15:ff:7a:c6:d6:bf:24: e6:56:bd:d5:aa:44:f7:70:37:62:ce:dc:8d:78:44:00:86:97: d3:61:fd:b2:4e:40:ab:58:af:ed:43:f1:5a:2e:a9:76:09:fa: 74:57:af:02:c4:45:c6:d7:10:3a:73:30:de:10:b3:e7:62:b7: 61:af:d2:74 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUWrKaO2HgbpsC9B7MoLk2s+IQ1RIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRkE4NkUyMzg1MzU0OUQyRUYxRDlGOUM5MjIyMTQ3QTU1 MEUzNkEzODAeFw0yNTEyMDIyMTI1NDZaFw0yNTEyMDYwMjE0NDZaMDMxMTAvBgNV BAMTKEVEMUQzMTYyQjQ3Q0I2QTA1OTI0MDU4MzkzMjFDNkYxNzM1NzJDNzgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDX55PiZ+8wdQquTWeVycms+yu0 AnW+xX6+YveB+HkSL9I0OBnmmMCW/H+L9LbTG8w535DfsVn2pKy57FjEjYDlm9he iO2d44vGu5olL0WKTvIamheYxrRZ+yP3qLrLlYgsRTPC5j1zcwLZ6jc1zF+ZvMzr cGcrh1T3hb7sqVWlhLp+3gY+Mnl6KIME3sM61v6fIWI+e2idsCxv+ODYV33XTt05 Ym0Ou+fafZx8WJTaO84lCJWOCJZPR+P5clNFyS2fhr7g2vxG8wmoeyw9scuhSuJN 0TSLj6cwP3D74Nw95Ll7yb8a5+xyVPtm2aZz3rMKIzNWwjDdn77NxWRAJq13AgMB AAGjggI8MIICODAdBgNVHQ4EFgQU7R0xYrR8tqBZJAWDkyHG8XNXLHgwHwYDVR0j BBgwFoAU+obiOFNUnS7x2fnJIiFHpVDjajgwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l NTA0NzkzYy1jMjA5LTQ2OWEtOGUzYy1lYjNmNWE4Mzg2M2YvMC9GQTg2RTIzODUz NTQ5RDJFRjFEOUY5QzkyMjIxNDdBNTUwRTM2QTM4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRkE4NkUyMzg1MzU0OUQyRUYxRDlGOUM5MjIyMTQ3QTU1MEUz NkEzOC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZTUwNDc5M2MtYzIwOS00NjlhLThl M2MtZWIzZjVhODM4NjNmLzAvRkE4NkUyMzg1MzU0OUQyRUYxRDlGOUM5MjIyMTQ3 QTU1MEUzNkEzOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADSDdD768+tTnqam9/gwkY0A2MBzvl5jMQMf SWBbK+7qmzuqftF6aOd2n9YIxplVpU2B/FUR9S2aVJ4jWk5UJ6laHV3ud65b2YTo CGcesvRM22U1vsvbRPiI/qGA1fc0ALKiaxbK6Op9e6wt8aLOt7xQzK1ll7+gs9/v 3Zlr0DzePQoXJrKK74HjqK19Dznn56T1SqJUrS7r1L9fWsmc+dAYEg08mcVgEazY YtehhRSXzVq+AE64KDOfrCghg/ZfFf96xta/JOZWvdWqRPdwN2LO3I14RACGl9Nh /bJOQKtYr+1D8VouqXYJ+nRXrwLERcbXEDpzMN4Qs+dit2Gv0nQ= -----END CERTIFICATE-----Generated at Wed Dec 3 14:13:23 2025 by rpki-client