This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/51e94243-87f0-426f-a9ca-4c19edb06b42/0/FBACFC63658425B36399C4B9D0322622B8C5B7F0.mft File: FBACFC63658425B36399C4B9D0322622B8C5B7F0.mft (raw, json) Hash identifier: jArnUj8qDsC4CFObcf5zkF2zvVLJNjTVilUpx3i3+Co= Subject key identifier: 3E:0E:B8:5B:E4:24:BF:1F:0C:8B:FF:4D:35:AF:01:8B:92:2C:4B:3B Authority key identifier: FB:AC:FC:63:65:84:25:B3:63:99:C4:B9:D0:32:26:22:B8:C5:B7:F0 Certificate issuer: /CN=FBACFC63658425B36399C4B9D0322622B8C5B7F0 Certificate serial: 77866714E69F4C461F57B2BDD98578259238F5 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FBACFC63658425B36399C4B9D0322622B8C5B7F0.cer Subject info access: rsync://repo-rpki.idnic.net/repo/51e94243-87f0-426f-a9ca-4c19edb06b42/0/FBACFC63658425B36399C4B9D0322622B8C5B7F0.mft Manifest number: 0535 Signing time: Fri 05 Dec 2025 18:52:05 +0000 Manifest this update: Fri 05 Dec 2025 18:47:05 +0000 Manifest next update: Mon 08 Dec 2025 22:33:05 +0000 Files and hashes: 1: 3130332e3233342e3231382e302f32342d3234203d3e203338373638.roa (hash: vWQKx1TT5Vb7zbmKfpDwSS1ZiebEmEmR3LksZYKeYp8=) 2: FBACFC63658425B36399C4B9D0322622B8C5B7F0.crl (hash: cZMnhCl4Y5bpgx3afcghkq6+lLdKjQX6jp/O/Zn030A=) 3: 323430373a336538303a3a2f33322d3438203d3e203338373638.roa (hash: jCqzfoNt2x+8bcJ6fatZirQ8CiZyxgl3URZLZEZ3szo=) 4: 323430373a336538303a363a3a2f34382d3438203d3e203338343936.roa (hash: 4k+7oiIZgf8A+xoNtWkGh4r/bBNQQHgBlobDBAPY3jY=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/51e94243-87f0-426f-a9ca-4c19edb06b42/0/FBACFC63658425B36399C4B9D0322622B8C5B7F0.crl rsync://repo-rpki.idnic.net/repo/51e94243-87f0-426f-a9ca-4c19edb06b42/0/FBACFC63658425B36399C4B9D0322622B8C5B7F0.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FBACFC63658425B36399C4B9D0322622B8C5B7F0.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 08 Dec 2025 22:33:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 77:86:67:14:e6:9f:4c:46:1f:57:b2:bd:d9:85:78:25:92:38:f5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=FBACFC63658425B36399C4B9D0322622B8C5B7F0 Validity Not Before: Dec 5 18:47:05 2025 GMT Not After : Dec 8 22:33:05 2025 GMT Subject: CN=3E0EB85BE424BF1F0C8BFF4D35AF018B922C4B3B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:7d:48:8c:64:62:cf:f7:f4:ad:14:98:30:f2: 5c:c4:43:ff:40:d5:75:0e:ed:95:46:7e:1c:0a:03: 06:0c:68:83:b0:39:6e:1f:c4:48:33:fd:e7:aa:ea: c4:3f:c6:0d:96:3d:c5:06:fa:87:ff:62:36:db:bc: 0d:5d:44:9c:44:03:a3:f3:9c:99:2d:f6:b6:df:70: bc:a2:86:92:c6:cd:83:11:df:a4:54:7a:78:ae:67: b5:5a:99:95:2b:d9:4e:fc:ce:59:f6:bf:9d:ad:4a: 78:1d:b9:95:db:2e:97:a1:7a:af:ea:df:20:93:83: 96:01:83:3d:15:f9:bf:dc:07:f8:fa:89:04:60:48: 5b:c5:8a:ce:17:f1:fd:c5:63:6c:6d:75:60:cc:39: 41:45:56:7e:89:43:a7:06:bc:b9:fc:f0:20:65:83: 3e:b3:b3:62:54:2c:e2:11:da:c7:e0:26:ac:9f:3e: fe:c3:f2:8d:dc:d2:ee:fb:84:b7:e2:2f:2a:03:ad: d8:dc:a2:ae:7d:a0:52:b2:e9:00:c1:32:67:e3:58: 62:6b:ff:9d:e0:5d:b6:3d:38:60:93:97:86:78:d8: ea:fc:ff:7c:43:8f:bc:ba:6c:2f:02:c5:64:99:a5: 4f:43:c5:54:ad:c4:8e:d0:8f:a2:42:0f:d5:ee:03: 3b:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:0E:B8:5B:E4:24:BF:1F:0C:8B:FF:4D:35:AF:01:8B:92:2C:4B:3B X509v3 Authority Key Identifier: keyid:FB:AC:FC:63:65:84:25:B3:63:99:C4:B9:D0:32:26:22:B8:C5:B7:F0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/51e94243-87f0-426f-a9ca-4c19edb06b42/0/FBACFC63658425B36399C4B9D0322622B8C5B7F0.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FBACFC63658425B36399C4B9D0322622B8C5B7F0.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/51e94243-87f0-426f-a9ca-4c19edb06b42/0/FBACFC63658425B36399C4B9D0322622B8C5B7F0.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c6:9d:f8:ce:68:52:c8:ff:5a:b2:4b:8f:d2:63:94:22:7d:db: 33:c3:09:23:7b:27:69:e6:34:6f:1f:d2:3e:fc:1b:95:8b:bd: 19:88:a5:06:85:45:57:2a:d3:41:f9:1f:74:bd:07:fb:14:05: b3:64:86:39:fc:88:c6:4c:76:20:ae:46:b8:6c:9d:1b:0a:83: 01:9a:0a:da:91:e1:be:34:11:f0:b9:4d:97:2c:76:3b:06:6f: fa:6f:01:48:ca:37:2e:85:83:5a:a0:f6:c5:9a:43:73:b3:09: 4c:72:2c:8e:0e:55:d3:f3:ad:4a:4c:e5:70:2d:04:be:0c:e3: f9:df:e7:b9:a4:42:09:26:aa:bb:01:12:8d:5d:6e:0b:ad:3b: 6c:88:ab:8b:08:b1:9a:03:74:83:be:bd:f3:e0:18:67:c3:d0: 37:45:19:69:ff:b1:84:4c:8c:6d:e3:3c:39:02:6b:3c:6e:49: 36:77:a3:e2:31:4c:75:69:4b:c7:f3:62:a8:98:44:43:51:95: c3:7e:d0:a8:ca:43:7e:33:25:40:a6:97:c8:2a:02:6b:aa:be: f8:23:19:35:64:43:be:08:9d:a2:4e:7b:70:ec:d6:88:22:9d: 71:4f:64:36:a1:70:ac:9f:ce:85:4a:02:e8:b6:69:f7:e0:18: c9:81:97:fe -----BEGIN CERTIFICATE----- MIIFMTCCBBmgAwIBAgITd4ZnFOafTEYfV7K92YV4JZI49TANBgkqhkiG9w0BAQsF ADAzMTEwLwYDVQQDEyhGQkFDRkM2MzY1ODQyNUIzNjM5OUM0QjlEMDMyMjYyMkI4 QzVCN0YwMB4XDTI1MTIwNTE4NDcwNVoXDTI1MTIwODIyMzMwNVowMzExMC8GA1UE AxMoM0UwRUI4NUJFNDI0QkYxRjBDOEJGRjREMzVBRjAxOEI5MjJDNEIzQjCCASIw DQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAOB9SIxkYs/39K0UmDDyXMRD/0DV dQ7tlUZ+HAoDBgxog7A5bh/ESDP956rqxD/GDZY9xQb6h/9iNtu8DV1EnEQDo/Oc mS32tt9wvKKGksbNgxHfpFR6eK5ntVqZlSvZTvzOWfa/na1KeB25ldsul6F6r+rf IJODlgGDPRX5v9wH+PqJBGBIW8WKzhfx/cVjbG11YMw5QUVWfolDpwa8ufzwIGWD PrOzYlQs4hHax+AmrJ8+/sPyjdzS7vuEt+IvKgOt2Nyirn2gUrLpAMEyZ+NYYmv/ neBdtj04YJOXhnjY6vz/fEOPvLpsLwLFZJmlT0PFVK3EjtCPokIP1e4DO0sCAwEA AaOCAjwwggI4MB0GA1UdDgQWBBQ+Drhb5CS/HwyL/001rwGLkixLOzAfBgNVHSME GDAWgBT7rPxjZYQls2OZxLnQMiYiuMW38DAOBgNVHQ8BAf8EBAMCB4AwgYUGA1Ud HwR+MHwweqB4oHaGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzUx ZTk0MjQzLTg3ZjAtNDI2Zi1hOWNhLTRjMTllZGIwNmI0Mi8wL0ZCQUNGQzYzNjU4 NDI1QjM2Mzk5QzRCOUQwMzIyNjIyQjhDNUI3RjAuY3JsMHQGCCsGAQUFBwEBBGgw ZjBkBggrBgEFBQcwAoZYcnN5bmM6Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8v SUROSUMtSUQvMi9GQkFDRkM2MzY1ODQyNUIzNjM5OUM0QjlEMDMyMjYyMkI4QzVC N0YwLmNlcjCBkwYIKwYBBQUHAQsEgYYwgYMwgYAGCCsGAQUFBzALhnRyc3luYzov L3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81MWU5NDI0My04N2YwLTQyNmYtYTlj YS00YzE5ZWRiMDZiNDIvMC9GQkFDRkM2MzY1ODQyNUIzNjM5OUM0QjlEMDMyMjYy MkI4QzVCN0YwLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUF BwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADANBgkqhkiG9w0BAQsFAAOCAQEAxp34zmhSyP9askuP0mOUIn3bM8MJI3snaeY0 bx/SPvwblYu9GYilBoVFVyrTQfkfdL0H+xQFs2SGOfyIxkx2IK5GuGydGwqDAZoK 2pHhvjQR8LlNlyx2OwZv+m8BSMo3LoWDWqD2xZpDc7MJTHIsjg5V0/OtSkzlcC0E vgzj+d/nuaRCCSaquwESjV1uC607bIiriwixmgN0g7698+AYZ8PQN0UZaf+xhEyM beM8OQJrPG5JNnej4jFMdWlLx/NiqJhEQ1GVw37QqMpDfjMlQKaXyCoCa6q++CMZ NWRDvgidok57cOzWiCKdcU9kNqFwrJ/OhUoC6LZp9+AYyYGX/g== -----END CERTIFICATE-----Generated at Sun Dec 7 00:51:30 2025 by rpki-client