This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repo-rpki.idnic.net/repo/51e94243-87f0-426f-a9ca-4c19edb06b42/0/FBACFC63658425B36399C4B9D0322622B8C5B7F0.mft
File: FBACFC63658425B36399C4B9D0322622B8C5B7F0.mft (raw, json)
Hash identifier: JcpidcVm0In5rANJpq9mSc5afJTPm7amXgjpRSJb8T4=
Subject key identifier: 6F:74:55:EB:46:C1:69:09:CA:6A:5C:D1:71:C6:5E:6C:16:CF:14:60
Authority key identifier: FB:AC:FC:63:65:84:25:B3:63:99:C4:B9:D0:32:26:22:B8:C5:B7:F0
Certificate issuer: /CN=FBACFC63658425B36399C4B9D0322622B8C5B7F0
Certificate serial: 034B5218BF730307A9FCC670A875690DE3C1C9E7
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FBACFC63658425B36399C4B9D0322622B8C5B7F0.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/51e94243-87f0-426f-a9ca-4c19edb06b42/0/FBACFC63658425B36399C4B9D0322622B8C5B7F0.mft
Manifest number: 054B
Signing time: Fri 23 Jan 2026 21:52:06 +0000
Manifest this update: Fri 23 Jan 2026 21:47:06 +0000
Manifest next update: Tue 27 Jan 2026 00:51:06 +0000
Files and hashes: 1: 3130332e3233342e3231382e302f32342d3234203d3e203338373638.roa (hash: vWQKx1TT5Vb7zbmKfpDwSS1ZiebEmEmR3LksZYKeYp8=)
2: 323430373a336538303a3a2f33322d3438203d3e203338373638.roa (hash: jCqzfoNt2x+8bcJ6fatZirQ8CiZyxgl3URZLZEZ3szo=)
3: FBACFC63658425B36399C4B9D0322622B8C5B7F0.crl (hash: nLEH65Dnhe27K5bLoWjhYa8kHIKVZ4ianrqnisI56OQ=)
4: 323430373a336538303a363a3a2f34382d3438203d3e203338343936.roa (hash: 4k+7oiIZgf8A+xoNtWkGh4r/bBNQQHgBlobDBAPY3jY=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/51e94243-87f0-426f-a9ca-4c19edb06b42/0/FBACFC63658425B36399C4B9D0322622B8C5B7F0.crl
rsync://repo-rpki.idnic.net/repo/51e94243-87f0-426f-a9ca-4c19edb06b42/0/FBACFC63658425B36399C4B9D0322622B8C5B7F0.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FBACFC63658425B36399C4B9D0322622B8C5B7F0.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 27 Jan 2026 00:51:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
03:4b:52:18:bf:73:03:07:a9:fc:c6:70:a8:75:69:0d:e3:c1:c9:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=FBACFC63658425B36399C4B9D0322622B8C5B7F0
Validity
Not Before: Jan 23 21:47:06 2026 GMT
Not After : Jan 27 00:51:06 2026 GMT
Subject: CN=6F7455EB46C16909CA6A5CD171C65E6C16CF1460
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:8d:59:3d:22:83:d1:62:37:a2:bd:8c:11:80:
80:3c:42:f8:98:5d:9d:82:ac:2f:3f:14:47:b5:22:
47:a3:08:f0:89:fe:27:5a:a7:3b:53:83:37:fe:3c:
a9:66:f5:77:1d:52:69:89:c8:d3:20:31:2b:d0:ad:
9f:4a:31:55:86:82:9f:79:c3:0d:0a:72:14:79:03:
0c:86:51:3e:6a:5a:cb:58:c9:98:60:29:30:7f:2d:
0b:75:97:38:21:7a:00:9b:33:75:76:45:58:cf:f9:
88:42:92:5e:70:32:1b:35:50:5c:07:de:84:93:f1:
83:5f:bd:a4:12:99:63:7c:1d:45:18:f1:0c:53:fb:
f8:be:f8:7a:f6:24:04:80:65:d4:0c:24:15:5a:6d:
6c:3a:b0:15:64:8b:52:57:d4:49:99:24:64:db:ab:
60:e6:2e:ad:be:88:de:d1:d0:8a:c9:5e:0a:87:8d:
82:92:db:88:8a:a2:37:29:6b:af:66:63:df:40:a8:
b6:91:0f:31:21:7e:c3:78:0d:e3:1a:cc:d8:9e:34:
ac:77:80:03:7c:e8:09:c6:6d:62:82:06:96:ba:f1:
32:bd:2c:5c:a7:61:4b:34:9f:5e:9e:c9:da:e4:16:
88:05:cc:a4:58:50:23:58:41:b7:0d:71:4f:f0:12:
89:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:74:55:EB:46:C1:69:09:CA:6A:5C:D1:71:C6:5E:6C:16:CF:14:60
X509v3 Authority Key Identifier:
keyid:FB:AC:FC:63:65:84:25:B3:63:99:C4:B9:D0:32:26:22:B8:C5:B7:F0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/51e94243-87f0-426f-a9ca-4c19edb06b42/0/FBACFC63658425B36399C4B9D0322622B8C5B7F0.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FBACFC63658425B36399C4B9D0322622B8C5B7F0.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/51e94243-87f0-426f-a9ca-4c19edb06b42/0/FBACFC63658425B36399C4B9D0322622B8C5B7F0.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
62:bb:92:ba:a0:54:72:63:71:75:ff:f0:53:9a:68:56:1f:5a:
02:2b:4d:b1:8b:2b:62:8c:fa:97:60:bf:91:ff:f8:70:03:22:
6b:3e:b7:30:55:1a:b6:1c:8b:d8:f2:16:40:dd:f2:6f:b0:b8:
a8:e7:8e:a3:cf:8d:6c:8d:fa:8e:26:2f:f7:e1:8c:82:d0:92:
56:cf:af:a6:14:cd:a4:1b:48:ce:95:b2:53:22:88:e4:7b:db:
6d:1a:d2:c1:7a:45:e3:87:e9:88:5e:18:70:2d:f0:0f:84:81:
de:63:0a:1b:62:f8:81:9b:8b:2a:f1:b2:e0:02:95:a6:e5:fb:
cf:6c:39:20:db:c7:bb:3b:59:a5:69:fa:d2:24:68:5a:55:47:
0e:63:42:c3:48:2b:98:1e:57:6f:ac:f7:8f:f9:22:42:1a:56:
fc:39:0e:71:20:45:16:d4:a4:ce:59:84:76:ab:b9:c6:63:b9:
42:4d:26:1b:60:64:69:90:72:23:79:83:99:5f:49:f5:a4:00:
ff:72:48:dc:be:fd:cc:2c:82:a9:22:78:3a:cc:58:f2:2f:15:
e3:d9:86:bc:2f:e9:01:6b:94:13:bb:79:7d:89:1e:1e:05:50:
80:c2:ba:6a:5f:1f:73:f8:e3:a7:b4:89:68:bd:b5:88:91:f1:
ea:ed:e1:82
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUA0tSGL9zAwep/MZwqHVpDePByecwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRkJBQ0ZDNjM2NTg0MjVCMzYzOTlDNEI5RDAzMjI2MjJC
OEM1QjdGMDAeFw0yNjAxMjMyMTQ3MDZaFw0yNjAxMjcwMDUxMDZaMDMxMTAvBgNV
BAMTKDZGNzQ1NUVCNDZDMTY5MDlDQTZBNUNEMTcxQzY1RTZDMTZDRjE0NjAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/jVk9IoPRYjeivYwRgIA8QviY
XZ2CrC8/FEe1IkejCPCJ/idapztTgzf+PKlm9XcdUmmJyNMgMSvQrZ9KMVWGgp95
ww0KchR5AwyGUT5qWstYyZhgKTB/LQt1lzghegCbM3V2RVjP+YhCkl5wMhs1UFwH
3oST8YNfvaQSmWN8HUUY8QxT+/i++Hr2JASAZdQMJBVabWw6sBVki1JX1EmZJGTb
q2DmLq2+iN7R0IrJXgqHjYKS24iKojcpa69mY99AqLaRDzEhfsN4DeMazNieNKx3
gAN86AnGbWKCBpa68TK9LFynYUs0n16eydrkFogFzKRYUCNYQbcNcU/wEokVAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQUb3RV60bBaQnKalzRccZebBbPFGAwHwYDVR0j
BBgwFoAU+6z8Y2WEJbNjmcS50DImIrjFt/AwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81
MWU5NDI0My04N2YwLTQyNmYtYTljYS00YzE5ZWRiMDZiNDIvMC9GQkFDRkM2MzY1
ODQyNUIzNjM5OUM0QjlEMDMyMjYyMkI4QzVCN0YwLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvRkJBQ0ZDNjM2NTg0MjVCMzYzOTlDNEI5RDAzMjI2MjJCOEM1
QjdGMC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6
Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNTFlOTQyNDMtODdmMC00MjZmLWE5
Y2EtNGMxOWVkYjA2YjQyLzAvRkJBQ0ZDNjM2NTg0MjVCMzYzOTlDNEI5RDAzMjI2
MjJCOEM1QjdGMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBAGK7krqgVHJjcXX/8FOaaFYfWgIrTbGLK2KM
+pdgv5H/+HADIms+tzBVGrYci9jyFkDd8m+wuKjnjqPPjWyN+o4mL/fhjILQklbP
r6YUzaQbSM6VslMiiOR7220a0sF6ReOH6YheGHAt8A+Egd5jChti+IGbiyrxsuAC
labl+89sOSDbx7s7WaVp+tIkaFpVRw5jQsNIK5geV2+s94/5IkIaVvw5DnEgRRbU
pM5ZhHarucZjuUJNJhtgZGmQciN5g5lfSfWkAP9ySNy+/cwsgqkieDrMWPIvFePZ
hrwv6QFrlBO7eX2JHh4FUIDCumpfH3P446e0iWi9tYiR8ert4YI=
-----END CERTIFICATE-----
Generated at Sun Jan 25 18:44:10 2026 by rpki-client