This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repo-rpki.idnic.net/repo/2ee47bbf-ba84-448f-962b-2aaf5c7dd68d/0/FA5BCA984EEBAFFDCED84190C70756DBEB3BFF39.mft
File: FA5BCA984EEBAFFDCED84190C70756DBEB3BFF39.mft (raw, json)
Hash identifier: tcWJEDCexCNWP8RQFXujmMaMQyAS9o3Y4cLaEImk5HY=
Subject key identifier: C8:11:9F:1B:A6:47:8E:59:98:BD:30:CD:C8:30:11:71:F9:4A:93:BA
Authority key identifier: FA:5B:CA:98:4E:EB:AF:FD:CE:D8:41:90:C7:07:56:DB:EB:3B:FF:39
Certificate issuer: /CN=FA5BCA984EEBAFFDCED84190C70756DBEB3BFF39
Certificate serial: 456D7D43A979DC3660F6953617549CC6FADB7C35
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FA5BCA984EEBAFFDCED84190C70756DBEB3BFF39.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/2ee47bbf-ba84-448f-962b-2aaf5c7dd68d/0/FA5BCA984EEBAFFDCED84190C70756DBEB3BFF39.mft
Manifest number: 02F4
Signing time: Sat 06 Dec 2025 18:00:58 +0000
Manifest this update: Sat 06 Dec 2025 17:55:58 +0000
Manifest next update: Wed 10 Dec 2025 05:57:58 +0000
Files and hashes: 1: 3130332e3234372e32312e302f32342d3234203d3e203538343835.roa (hash: 34GAz6FSvQ986oiy73pgO3Nl806HiynZyDh81QhYAtI=)
2: 3130332e3234372e32302e302f32342d3234203d3e203538343835.roa (hash: Z1gDiN/X+uv2C5f6v1h8WInw2+lPzjHj0oFTtpIP6pA=)
3: 323430323a653130303a33383a3a2f34382d3438203d3e203538343835.roa (hash: ZcG33pBZTzSD/OyfUqiIR26pFQTz1ZHq/I2vKc5L2Lk=)
4: 323430323a653130303a38313a3a2f34382d3438203d3e203538343835.roa (hash: QYoY/WJkKnag3eKK6TqUfAN2/yGtdFRAxKAtoXHhjqo=)
5: 3130332e3234372e32322e302f32342d3234203d3e203538343835.roa (hash: saNY2uHlV/XnejqjSZTyfzI/prOYKq0PQeW13/pFt9k=)
6: 323430323a653130303a3a2f33322d3438203d3e203538343835.roa (hash: JJglB/VlfiSRwxyeiN2g4JH/b5q2RqTOfEL3QFxIRWk=)
7: 323430323a653130303a323030303a3a2f34382d3438203d3e203538343835.roa (hash: d1PRG5I24wLp0nZlSGZqsXMdn4LUKyh3+Rp9QJBPdWU=)
8: 323430323a653130303a32303a3a2f34382d3438203d3e203538343835.roa (hash: JQBV4LZ7vr6myTyNSsVnH8wkRJsd1to3z2hSNW0KGDU=)
9: 323430323a653130303a61633a3a2f34382d3438203d3e203538343835.roa (hash: PJK40q7WUwTW88oYuOeJRlP3deJscpLSdiVo4TnCchE=)
10: 323430323a653130303a3330353a3a2f34382d3438203d3e203538343835.roa (hash: jMXfHZ5G6a1+HMzwB17/q65yvup/Qxz3sZvzBsrsAlg=)
11: 323430323a653130303a37353a3a2f34382d3438203d3e203538343835.roa (hash: aHRt+E7BWGdjFLNGN2g9IGuN7mQDThteOWR07k+3Phs=)
12: 323430323a653130303a38303a3a2f34382d3438203d3e203538343835.roa (hash: f/URrW3I6+5vkW0D1aSS1Bkh+i2+LjuWyAbPuExcRpQ=)
13: 323430323a653130303a61653a3a2f34382d3438203d3e203538343835.roa (hash: jn8YvD6TNkp1LaERG+YoqpArjIVwe5+hvrSaozXb0+E=)
14: FA5BCA984EEBAFFDCED84190C70756DBEB3BFF39.crl (hash: tOI6RwAh2UwNxnyywRpyZ7+u9+KtdVoE6933hBkLog4=)
15: 3130332e3234372e32332e302f32342d3234203d3e203538343835.roa (hash: lzNm0/0IA9d3peGzozwFKwjutuLSs05RevbSqRZ75Wc=)
16: 3130332e3234372e32302e302f32322d3234203d3e203538343835.roa (hash: 0yw7rRpcNLCQkltZhjGJL1siB8HST2OMsTJXjD26O8w=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/2ee47bbf-ba84-448f-962b-2aaf5c7dd68d/0/FA5BCA984EEBAFFDCED84190C70756DBEB3BFF39.crl
rsync://repo-rpki.idnic.net/repo/2ee47bbf-ba84-448f-962b-2aaf5c7dd68d/0/FA5BCA984EEBAFFDCED84190C70756DBEB3BFF39.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FA5BCA984EEBAFFDCED84190C70756DBEB3BFF39.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 09 Dec 2025 15:57:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
45:6d:7d:43:a9:79:dc:36:60:f6:95:36:17:54:9c:c6:fa:db:7c:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=FA5BCA984EEBAFFDCED84190C70756DBEB3BFF39
Validity
Not Before: Dec 6 17:55:58 2025 GMT
Not After : Dec 10 05:57:58 2025 GMT
Subject: CN=C8119F1BA6478E5998BD30CDC8301171F94A93BA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:57:25:d7:d2:b9:7c:a9:e0:5e:f8:bb:e9:b4:
82:ab:68:5d:78:62:d8:fd:13:7e:de:e9:3a:34:cf:
02:ac:04:70:f6:e3:f0:92:40:cc:24:87:6f:fa:64:
34:c6:28:9b:5d:14:34:01:b1:76:81:8a:96:2b:41:
61:26:c8:02:2b:a5:dc:35:67:d2:9f:27:99:67:e7:
bc:73:50:13:5b:92:6a:7c:50:f1:80:7d:c9:12:d2:
40:cc:e7:e7:20:e7:f5:90:6d:93:94:e4:86:ff:19:
f5:d5:23:b5:0e:2c:b5:fc:0f:94:a3:c3:ce:af:7d:
6d:eb:3c:b7:6e:15:f0:4f:04:06:60:30:18:11:02:
bd:d6:67:1d:b6:cf:0a:66:fd:3f:d2:6a:3d:4f:72:
46:2e:3b:3a:8d:73:1a:5b:1e:8a:2e:45:9f:56:0b:
d3:7e:c3:de:35:35:15:21:d6:50:be:9f:1e:f0:e9:
dd:26:31:d7:81:42:1f:3f:f0:3a:f7:d3:77:99:e6:
56:b3:e6:37:95:9b:6a:7a:ad:b4:8c:30:c0:9c:82:
54:9a:4b:15:2a:1b:e9:6b:d1:53:0f:6b:ef:d4:7a:
8b:6c:0d:55:0a:74:b0:3d:52:1d:f9:27:96:d1:8d:
e0:34:92:dc:bb:9a:50:89:78:63:5f:ae:de:7c:0f:
24:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:11:9F:1B:A6:47:8E:59:98:BD:30:CD:C8:30:11:71:F9:4A:93:BA
X509v3 Authority Key Identifier:
keyid:FA:5B:CA:98:4E:EB:AF:FD:CE:D8:41:90:C7:07:56:DB:EB:3B:FF:39
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/2ee47bbf-ba84-448f-962b-2aaf5c7dd68d/0/FA5BCA984EEBAFFDCED84190C70756DBEB3BFF39.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FA5BCA984EEBAFFDCED84190C70756DBEB3BFF39.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/2ee47bbf-ba84-448f-962b-2aaf5c7dd68d/0/FA5BCA984EEBAFFDCED84190C70756DBEB3BFF39.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9e:32:8c:c0:c7:ef:31:4c:5e:7f:0b:ac:e1:fd:3e:9f:d4:d8:
6b:42:9a:23:12:96:b4:01:f0:bc:16:72:b5:ee:c1:a9:77:15:
2a:15:32:d0:9b:70:ab:5b:a2:ac:f9:6c:87:b6:d5:c9:ff:fe:
e9:6c:e6:8b:06:1d:36:da:8e:21:7f:f5:53:0e:11:28:f3:64:
94:67:34:76:99:a7:49:59:ad:9b:97:67:fc:be:8c:64:65:f5:
67:1c:f4:29:43:5c:3d:64:a7:81:7d:7f:c9:7b:6a:63:fb:f6:
0f:3c:2c:9b:25:26:fa:35:cd:c3:85:14:ef:c9:4b:e0:5d:eb:
bb:28:13:20:c8:2f:28:8d:c5:3b:64:2a:2b:b3:04:80:fd:d1:
a9:42:e0:d1:ee:df:7e:ef:e6:65:94:2c:1a:50:61:20:6c:b7:
3d:22:cf:93:c0:ef:20:ab:a0:8e:d4:5d:51:bc:b9:30:a0:00:
d6:2d:74:f8:4d:4a:35:fa:80:df:cc:d6:bf:00:56:13:97:74:
7a:9c:fa:fd:60:24:11:63:0b:5f:86:92:f5:3e:27:44:d3:34:
2f:b1:87:de:c2:c0:1a:9f:1d:cf:11:40:42:6b:ed:c8:22:79:
2a:61:42:92:52:52:cc:36:8d:d3:40:a0:79:fc:c3:34:cd:f3:
bc:dd:40:58
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIURW19Q6l53DZg9pU2F1ScxvrbfDUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRkE1QkNBOTg0RUVCQUZGRENFRDg0MTkwQzcwNzU2REJF
QjNCRkYzOTAeFw0yNTEyMDYxNzU1NThaFw0yNTEyMTAwNTU3NThaMDMxMTAvBgNV
BAMTKEM4MTE5RjFCQTY0NzhFNTk5OEJEMzBDREM4MzAxMTcxRjk0QTkzQkEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCnVyXX0rl8qeBe+LvptIKraF14
Ytj9E37e6To0zwKsBHD24/CSQMwkh2/6ZDTGKJtdFDQBsXaBipYrQWEmyAIrpdw1
Z9KfJ5ln57xzUBNbkmp8UPGAfckS0kDM5+cg5/WQbZOU5Ib/GfXVI7UOLLX8D5Sj
w86vfW3rPLduFfBPBAZgMBgRAr3WZx22zwpm/T/Saj1PckYuOzqNcxpbHoouRZ9W
C9N+w941NRUh1lC+nx7w6d0mMdeBQh8/8Dr303eZ5laz5jeVm2p6rbSMMMCcglSa
SxUqG+lr0VMPa+/UeotsDVUKdLA9Uh35J5bRjeA0kty7mlCJeGNfrt58DyQRAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQUyBGfG6ZHjlmYvTDNyDARcflKk7owHwYDVR0j
BBgwFoAU+lvKmE7rr/3O2EGQxwdW2+s7/zkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y
ZWU0N2JiZi1iYTg0LTQ0OGYtOTYyYi0yYWFmNWM3ZGQ2OGQvMC9GQTVCQ0E5ODRF
RUJBRkZEQ0VEODQxOTBDNzA3NTZEQkVCM0JGRjM5LmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvRkE1QkNBOTg0RUVCQUZGRENFRDg0MTkwQzcwNzU2REJFQjNC
RkYzOS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6
Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMmVlNDdiYmYtYmE4NC00NDhmLTk2
MmItMmFhZjVjN2RkNjhkLzAvRkE1QkNBOTg0RUVCQUZGRENFRDg0MTkwQzcwNzU2
REJFQjNCRkYzOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBAJ4yjMDH7zFMXn8LrOH9Pp/U2GtCmiMSlrQB
8LwWcrXuwal3FSoVMtCbcKtboqz5bIe21cn//uls5osGHTbajiF/9VMOESjzZJRn
NHaZp0lZrZuXZ/y+jGRl9Wcc9ClDXD1kp4F9f8l7amP79g88LJslJvo1zcOFFO/J
S+Bd67soEyDILyiNxTtkKiuzBID90alC4NHu337v5mWULBpQYSBstz0iz5PA7yCr
oI7UXVG8uTCgANYtdPhNSjX6gN/M1r8AVhOXdHqc+v1gJBFjC1+GkvU+J0TTNC+x
h97CwBqfHc8RQEJr7cgieSphQpJSUsw2jdNAoHn8wzTN87zdQFg=
-----END CERTIFICATE-----
Generated at Sun Dec 7 00:48:47 2025 by rpki-client