This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/1d07e3d8-9bfc-4483-a2dd-afa4593811e5/0/FABDB6E44451B7F0378AE92C2750EBFE5A3CFA38.mft File: FABDB6E44451B7F0378AE92C2750EBFE5A3CFA38.mft (raw, json) Hash identifier: PYJJh0q7vsJ1zYSUPBtGJ2bxhG+fUfj4boaGvnlrHas= Subject key identifier: 00:74:CC:CA:3E:15:00:F8:76:9C:CE:22:53:E2:AA:BF:41:0A:86:B9 Authority key identifier: FA:BD:B6:E4:44:51:B7:F0:37:8A:E9:2C:27:50:EB:FE:5A:3C:FA:38 Certificate issuer: /CN=FABDB6E44451B7F0378AE92C2750EBFE5A3CFA38 Certificate serial: 10F8CD2E0897E0EDFBE809869F5E6C836A18FBA5 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FABDB6E44451B7F0378AE92C2750EBFE5A3CFA38.cer Subject info access: rsync://repo-rpki.idnic.net/repo/1d07e3d8-9bfc-4483-a2dd-afa4593811e5/0/FABDB6E44451B7F0378AE92C2750EBFE5A3CFA38.mft Manifest number: 0518 Signing time: Mon 15 Dec 2025 01:02:38 +0000 Manifest this update: Mon 15 Dec 2025 00:57:38 +0000 Manifest next update: Thu 18 Dec 2025 12:11:38 +0000 Files and hashes: 1: FABDB6E44451B7F0378AE92C2750EBFE5A3CFA38.crl (hash: F4HbChQwZqCb0NHt3WsLgNE/2Dqutv3HVY7/aXntD3c=) 2: 323430363a613063303a3a2f33322d3332203d3e20313337333331.roa (hash: tFWtX8RfN2Vy0+tsRYH9QMC9vNTQT9OCKTZt0DbC3q4=) 3: 3130332e3135372e3131362e302f32332d3234203d3e20313337333331.roa (hash: gepyqAbuiPaUA1F4qNan63WSMqffSkJDQ7owW86Bv/s=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/1d07e3d8-9bfc-4483-a2dd-afa4593811e5/0/FABDB6E44451B7F0378AE92C2750EBFE5A3CFA38.crl rsync://repo-rpki.idnic.net/repo/1d07e3d8-9bfc-4483-a2dd-afa4593811e5/0/FABDB6E44451B7F0378AE92C2750EBFE5A3CFA38.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FABDB6E44451B7F0378AE92C2750EBFE5A3CFA38.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 18 Dec 2025 12:11:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10:f8:cd:2e:08:97:e0:ed:fb:e8:09:86:9f:5e:6c:83:6a:18:fb:a5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=FABDB6E44451B7F0378AE92C2750EBFE5A3CFA38 Validity Not Before: Dec 15 00:57:38 2025 GMT Not After : Dec 18 12:11:38 2025 GMT Subject: CN=0074CCCA3E1500F8769CCE2253E2AABF410A86B9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:ec:d4:54:20:d9:b5:48:6e:02:68:a2:11:48: 13:25:38:99:76:16:ee:83:86:d9:95:43:93:ad:09: 7b:0d:55:bf:3f:13:d3:56:ed:25:f1:9e:eb:4a:61: ea:e3:f3:6e:5e:67:3c:57:07:6a:88:a8:74:26:11: 80:3c:31:f4:79:f3:65:ba:1e:bf:b4:a4:2d:68:b1: 53:e1:c8:04:0f:be:4d:11:56:9c:97:5d:49:5d:29: f7:32:1c:83:88:81:3f:14:29:23:3c:af:7f:8e:b6: 46:0e:8e:26:48:88:9d:6d:36:b6:b1:a2:22:ba:5d: ac:58:46:4d:2d:48:6a:65:5a:a2:c4:71:1e:0d:2d: b7:8a:41:dc:fb:9a:60:54:c7:88:40:f3:67:e8:7f: 48:6b:e2:de:a6:a4:a0:92:f0:ff:0a:18:b4:f7:50: af:9c:8a:f4:60:d8:f6:79:96:66:f0:ce:8a:67:a1: 42:57:b6:91:66:07:51:98:2a:b6:2b:be:44:85:ad: 18:6a:dc:92:69:b1:c7:d7:96:f3:0a:5a:e6:94:c5: 54:ef:eb:cf:9e:88:1e:1d:82:8d:b0:c7:1d:79:e9: c6:3b:55:0c:a8:96:7b:a8:e3:22:03:81:ec:6c:3b: c9:ff:53:b9:4c:62:6d:cf:f0:18:da:09:fe:d2:18: 07:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:74:CC:CA:3E:15:00:F8:76:9C:CE:22:53:E2:AA:BF:41:0A:86:B9 X509v3 Authority Key Identifier: keyid:FA:BD:B6:E4:44:51:B7:F0:37:8A:E9:2C:27:50:EB:FE:5A:3C:FA:38 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/1d07e3d8-9bfc-4483-a2dd-afa4593811e5/0/FABDB6E44451B7F0378AE92C2750EBFE5A3CFA38.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FABDB6E44451B7F0378AE92C2750EBFE5A3CFA38.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/1d07e3d8-9bfc-4483-a2dd-afa4593811e5/0/FABDB6E44451B7F0378AE92C2750EBFE5A3CFA38.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5b:c1:59:a7:c4:59:6f:3e:72:5f:97:50:99:c0:0a:57:5e:31: 0f:a8:b0:3b:76:ac:a4:b1:d5:46:7c:96:6c:0f:62:a6:f9:59: 69:95:b2:a5:79:30:90:74:50:65:b1:70:5f:71:4d:81:9f:36: d7:51:21:46:60:f3:3f:04:aa:90:99:b6:04:ef:da:9d:ff:b7: a9:49:00:f8:8c:fc:97:82:4e:a3:06:77:87:46:f6:d5:20:26: 9b:11:e6:33:4a:d5:f4:80:fa:95:f7:38:7c:09:f6:25:71:e1: 9e:82:a5:a1:7d:6a:aa:00:04:be:49:8a:dc:f0:ce:c1:37:ff: c0:6b:3d:9f:5f:ba:81:ee:9b:19:49:12:9d:69:55:63:80:ac: 94:61:57:d9:a3:29:42:ab:fc:ea:cb:14:2a:4b:fd:80:f2:7e: df:fd:0b:df:ca:67:b1:f9:9b:94:9a:57:7b:cc:ed:50:0f:d0: 50:bb:aa:d0:80:14:79:7d:b4:31:54:cd:ea:05:8c:d7:2c:29: 25:39:7c:f2:21:fc:be:df:ef:fc:ce:30:ca:ee:e4:fb:ee:90: 2e:68:65:17:49:95:13:86:e3:b4:64:44:6d:4a:99:c2:14:2d: 02:59:9f:ba:a2:99:89:70:4c:d1:c5:29:13:2a:dd:37:03:0a: a2:98:a9:0a -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUEPjNLgiX4O376AmGn15sg2oY+6UwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRkFCREI2RTQ0NDUxQjdGMDM3OEFFOTJDMjc1MEVCRkU1 QTNDRkEzODAeFw0yNTEyMTUwMDU3MzhaFw0yNTEyMTgxMjExMzhaMDMxMTAvBgNV BAMTKDAwNzRDQ0NBM0UxNTAwRjg3NjlDQ0UyMjUzRTJBQUJGNDEwQTg2QjkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDD7NRUINm1SG4CaKIRSBMlOJl2 Fu6DhtmVQ5OtCXsNVb8/E9NW7SXxnutKYerj825eZzxXB2qIqHQmEYA8MfR582W6 Hr+0pC1osVPhyAQPvk0RVpyXXUldKfcyHIOIgT8UKSM8r3+OtkYOjiZIiJ1tNrax oiK6XaxYRk0tSGplWqLEcR4NLbeKQdz7mmBUx4hA82fof0hr4t6mpKCS8P8KGLT3 UK+civRg2PZ5lmbwzopnoUJXtpFmB1GYKrYrvkSFrRhq3JJpscfXlvMKWuaUxVTv 68+eiB4dgo2wxx156cY7VQyolnuo4yIDgexsO8n/U7lMYm3P8BjaCf7SGAfjAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUAHTMyj4VAPh2nM4iU+Kqv0EKhrkwHwYDVR0j BBgwFoAU+r225ERRt/A3iuksJ1Dr/lo8+jgwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x ZDA3ZTNkOC05YmZjLTQ0ODMtYTJkZC1hZmE0NTkzODExZTUvMC9GQUJEQjZFNDQ0 NTFCN0YwMzc4QUU5MkMyNzUwRUJGRTVBM0NGQTM4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRkFCREI2RTQ0NDUxQjdGMDM3OEFFOTJDMjc1MEVCRkU1QTND RkEzOC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMWQwN2UzZDgtOWJmYy00NDgzLWEy ZGQtYWZhNDU5MzgxMWU1LzAvRkFCREI2RTQ0NDUxQjdGMDM3OEFFOTJDMjc1MEVC RkU1QTNDRkEzOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFvBWafEWW8+cl+XUJnACldeMQ+osDt2rKSx 1UZ8lmwPYqb5WWmVsqV5MJB0UGWxcF9xTYGfNtdRIUZg8z8EqpCZtgTv2p3/t6lJ APiM/JeCTqMGd4dG9tUgJpsR5jNK1fSA+pX3OHwJ9iVx4Z6CpaF9aqoABL5Jitzw zsE3/8BrPZ9fuoHumxlJEp1pVWOArJRhV9mjKUKr/OrLFCpL/YDyft/9C9/KZ7H5 m5SaV3vM7VAP0FC7qtCAFHl9tDFUzeoFjNcsKSU5fPIh/L7f7/zOMMru5PvukC5o ZRdJlROG47RkRG1KmcIULQJZn7qimYlwTNHFKRMq3TcDCqKYqQo= -----END CERTIFICATE-----Generated at Mon Dec 15 20:16:59 2025 by rpki-client