This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/16da0e82-0764-45d3-aed9-fd258e72b6e2/0/FA30FF8566753253FBBD8786797FE93FB0CF62AD.mft File: FA30FF8566753253FBBD8786797FE93FB0CF62AD.mft (raw, json) Hash identifier: TVZ4931lJEnxpRvFg1PKRYFeK+UX8Dd+feED9f7/ehA= Subject key identifier: FD:8C:0A:94:8E:25:91:30:F7:EE:50:83:BA:81:BB:09:58:EC:CE:85 Authority key identifier: FA:30:FF:85:66:75:32:53:FB:BD:87:86:79:7F:E9:3F:B0:CF:62:AD Certificate issuer: /CN=FA30FF8566753253FBBD8786797FE93FB0CF62AD Certificate serial: 393F7814B3668CD03705187F83CC6171E238FC61 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/FA30FF8566753253FBBD8786797FE93FB0CF62AD.cer Subject info access: rsync://repo-rpki.idnic.net/repo/16da0e82-0764-45d3-aed9-fd258e72b6e2/0/FA30FF8566753253FBBD8786797FE93FB0CF62AD.mft Manifest number: F0 Signing time: Sat 06 Dec 2025 01:23:29 +0000 Manifest this update: Sat 06 Dec 2025 01:18:29 +0000 Manifest next update: Tue 09 Dec 2025 07:30:29 +0000 Files and hashes: 1: FA30FF8566753253FBBD8786797FE93FB0CF62AD.crl (hash: Cid4SbBstgfy+Po0S43ui61yPSVPp2lyoK5sahGvVhs=) 2: 3136302e32322e32342e302f32332d3233203d3e20313532383030.roa (hash: 5RtTk3d772ssj1lManzV/eOyzfika2Q0NRT1wkf3Jmc=) 3: 3136302e32322e32342e302f32342d3234203d3e20313532383030.roa (hash: WQbsLa/WI6fTYVHN1f/acG1CHu2vwbKzJ6P9lpc4ums=) 4: 3136302e32322e32352e302f32342d3234203d3e20313532383030.roa (hash: 8MA2foEnZoWONyFnZ8JDy90VgYdcSiLJ0qYGxKq2+wY=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/16da0e82-0764-45d3-aed9-fd258e72b6e2/0/FA30FF8566753253FBBD8786797FE93FB0CF62AD.crl rsync://repo-rpki.idnic.net/repo/16da0e82-0764-45d3-aed9-fd258e72b6e2/0/FA30FF8566753253FBBD8786797FE93FB0CF62AD.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/FA30FF8566753253FBBD8786797FE93FB0CF62AD.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 09 Dec 2025 06:55:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 39:3f:78:14:b3:66:8c:d0:37:05:18:7f:83:cc:61:71:e2:38:fc:61 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=FA30FF8566753253FBBD8786797FE93FB0CF62AD Validity Not Before: Dec 6 01:18:29 2025 GMT Not After : Dec 9 07:30:29 2025 GMT Subject: CN=FD8C0A948E259130F7EE5083BA81BB0958ECCE85 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:eb:59:40:18:4f:bd:e8:df:70:42:2e:3e:06:ad: 37:9b:07:d8:a3:63:d8:b7:5f:ea:25:0d:26:47:c1: b1:40:67:a1:c8:65:fb:e5:1b:6d:10:7d:89:08:a6: 77:0e:e5:36:40:ed:d3:e1:a3:54:5d:e7:c5:f0:6d: 4d:ae:7e:5b:e6:2a:19:b9:e4:7a:6e:db:ef:5d:64: b5:5d:f7:49:0d:b0:7b:b6:b6:d7:5a:4d:9e:4e:0f: 43:0b:94:e0:24:53:ba:01:fa:b4:b2:80:e4:1d:f7: f0:9b:36:f2:ca:d4:0a:b0:f4:c5:4f:ee:3b:9a:4e: ef:aa:f0:7d:46:a9:4b:54:f4:7f:33:08:89:5d:c5: 06:9e:c7:90:ca:65:82:74:2a:d5:75:4a:a7:6a:10: df:9c:3f:e4:7c:2d:49:38:0f:6a:3b:f6:2f:4b:63: a4:0d:48:a1:b2:a5:47:a3:b2:b6:a8:23:2b:dd:9f: 04:ef:1e:64:41:ee:c2:da:8e:d8:76:9b:f7:49:e3: 41:eb:e3:0e:c7:9c:65:59:61:f0:87:cf:fc:f8:81: b5:60:35:e2:fb:06:75:2b:31:89:e6:be:c2:af:7f: 1c:ee:98:f0:80:a1:bb:d6:3b:f6:63:72:6a:53:b6: 00:08:54:57:83:d3:88:68:3c:c4:a9:c2:db:7c:fb: df:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FD:8C:0A:94:8E:25:91:30:F7:EE:50:83:BA:81:BB:09:58:EC:CE:85 X509v3 Authority Key Identifier: keyid:FA:30:FF:85:66:75:32:53:FB:BD:87:86:79:7F:E9:3F:B0:CF:62:AD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/16da0e82-0764-45d3-aed9-fd258e72b6e2/0/FA30FF8566753253FBBD8786797FE93FB0CF62AD.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/FA30FF8566753253FBBD8786797FE93FB0CF62AD.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/16da0e82-0764-45d3-aed9-fd258e72b6e2/0/FA30FF8566753253FBBD8786797FE93FB0CF62AD.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1e:fc:6d:06:73:cd:86:a2:05:14:d6:b1:a3:15:8e:c4:7b:d8: 2a:d5:6e:1a:00:b0:58:39:96:40:a3:fd:56:f6:a2:2c:04:c2: f8:d6:8a:7d:f9:3b:c5:0a:29:20:84:2c:54:eb:96:9b:2f:79: 71:d2:9f:88:e2:8d:c6:88:9e:07:69:d6:1b:cd:6d:d9:9f:f0: 22:08:be:5a:d5:25:4d:bb:6d:af:b2:88:c7:81:ce:60:0a:27: 14:98:c2:6c:d3:21:0a:fc:7b:08:11:b7:73:61:9a:96:e6:a1: cb:13:e0:af:f7:c3:8f:3f:d3:10:c3:03:f1:f1:18:17:8c:54: b2:bb:71:d8:4a:e2:86:67:96:0f:d6:e4:af:23:e1:ea:7d:aa: 51:55:15:63:85:03:cc:a4:61:d2:7e:ef:95:6c:c9:47:32:59: 1e:7f:1d:40:f2:b3:c9:9d:11:5b:d4:8e:6f:50:b9:15:bf:a4: 15:a3:4e:18:99:3f:30:04:98:a0:5a:1f:10:57:95:c4:f3:03: 63:6e:04:87:db:0f:c7:58:ed:a3:10:90:ca:9c:08:de:b5:ce: 42:fe:6c:66:39:c5:a2:7b:27:a6:8b:3e:7c:b4:7d:ec:1f:3e: 26:bb:3e:f9:c1:ba:13:81:a4:c2:c0:d0:27:41:06:44:52:83: ce:e0:11:60 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUOT94FLNmjNA3BRh/g8xhceI4/GEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRkEzMEZGODU2Njc1MzI1M0ZCQkQ4Nzg2Nzk3RkU5M0ZC MENGNjJBRDAeFw0yNTEyMDYwMTE4MjlaFw0yNTEyMDkwNzMwMjlaMDMxMTAvBgNV BAMTKEZEOEMwQTk0OEUyNTkxMzBGN0VFNTA4M0JBODFCQjA5NThFQ0NFODUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDrWUAYT73o33BCLj4GrTebB9ij Y9i3X+olDSZHwbFAZ6HIZfvlG20QfYkIpncO5TZA7dPho1Rd58XwbU2uflvmKhm5 5Hpu2+9dZLVd90kNsHu2ttdaTZ5OD0MLlOAkU7oB+rSygOQd9/CbNvLK1Aqw9MVP 7juaTu+q8H1GqUtU9H8zCIldxQaex5DKZYJ0KtV1SqdqEN+cP+R8LUk4D2o79i9L Y6QNSKGypUejsraoIyvdnwTvHmRB7sLajth2m/dJ40Hr4w7HnGVZYfCHz/z4gbVg NeL7BnUrMYnmvsKvfxzumPCAobvWO/ZjcmpTtgAIVFeD04hoPMSpwtt8+9+3AgMB AAGjggI8MIICODAdBgNVHQ4EFgQU/YwKlI4lkTD37lCDuoG7CVjszoUwHwYDVR0j BBgwFoAU+jD/hWZ1MlP7vYeGeX/pP7DPYq0wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x NmRhMGU4Mi0wNzY0LTQ1ZDMtYWVkOS1mZDI1OGU3MmI2ZTIvMC9GQTMwRkY4NTY2 NzUzMjUzRkJCRDg3ODY3OTdGRTkzRkIwQ0Y2MkFELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvRkEzMEZGODU2Njc1MzI1M0ZCQkQ4Nzg2Nzk3RkU5M0ZCMENG NjJBRC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMTZkYTBlODItMDc2NC00NWQzLWFl ZDktZmQyNThlNzJiNmUyLzAvRkEzMEZGODU2Njc1MzI1M0ZCQkQ4Nzg2Nzk3RkU5 M0ZCMENGNjJBRC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAB78bQZzzYaiBRTWsaMVjsR72CrVbhoAsFg5 lkCj/Vb2oiwEwvjWin35O8UKKSCELFTrlpsveXHSn4jijcaIngdp1hvNbdmf8CII vlrVJU27ba+yiMeBzmAKJxSYwmzTIQr8ewgRt3NhmpbmocsT4K/3w48/0xDDA/Hx GBeMVLK7cdhK4oZnlg/W5K8j4ep9qlFVFWOFA8ykYdJ+75VsyUcyWR5/HUDys8md EVvUjm9QuRW/pBWjThiZPzAEmKBaHxBXlcTzA2NuBIfbD8dY7aMQkMqcCN61zkL+ bGY5xaJ7J6aLPny0fewfPia7PvnBuhOBpMLA0CdBBkRSg87gEWA= -----END CERTIFICATE-----Generated at Sat Dec 6 20:16:39 2025 by rpki-client