This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/16da0e82-0764-45d3-aed9-fd258e72b6e2/0/FA30FF8566753253FBBD8786797FE93FB0CF62AD.mft File: FA30FF8566753253FBBD8786797FE93FB0CF62AD.mft (raw, json) Hash identifier: uX+YsPkCYQwzj1XIuf32jwnlG3tInWKtCt3FVLMyhRg= Subject key identifier: 38:7A:0E:25:89:A1:CE:69:5E:32:B5:3D:11:E1:21:53:B9:22:A4:9F Authority key identifier: FA:30:FF:85:66:75:32:53:FB:BD:87:86:79:7F:E9:3F:B0:CF:62:AD Certificate issuer: /CN=FA30FF8566753253FBBD8786797FE93FB0CF62AD Certificate serial: 7665E5027493D4A1F8FB71764C8A46D6A0D16811 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/FA30FF8566753253FBBD8786797FE93FB0CF62AD.cer Subject info access: rsync://repo-rpki.idnic.net/repo/16da0e82-0764-45d3-aed9-fd258e72b6e2/0/FA30FF8566753253FBBD8786797FE93FB0CF62AD.mft Manifest number: F6 Signing time: Thu 18 Dec 2025 17:22:28 +0000 Manifest this update: Thu 18 Dec 2025 17:17:28 +0000 Manifest next update: Mon 22 Dec 2025 00:08:28 +0000 Files and hashes: 1: 3136302e32322e32342e302f32342d3234203d3e20313532383030.roa (hash: WQbsLa/WI6fTYVHN1f/acG1CHu2vwbKzJ6P9lpc4ums=) 2: 3136302e32322e32342e302f32332d3233203d3e20313532383030.roa (hash: 5RtTk3d772ssj1lManzV/eOyzfika2Q0NRT1wkf3Jmc=) 3: FA30FF8566753253FBBD8786797FE93FB0CF62AD.crl (hash: YjjhjRk+U6HndirvW6/5E6dPSKhyI5OYeRx7Yiy3XbI=) 4: 3136302e32322e32352e302f32342d3234203d3e20313532383030.roa (hash: 8MA2foEnZoWONyFnZ8JDy90VgYdcSiLJ0qYGxKq2+wY=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/16da0e82-0764-45d3-aed9-fd258e72b6e2/0/FA30FF8566753253FBBD8786797FE93FB0CF62AD.crl rsync://repo-rpki.idnic.net/repo/16da0e82-0764-45d3-aed9-fd258e72b6e2/0/FA30FF8566753253FBBD8786797FE93FB0CF62AD.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/FA30FF8566753253FBBD8786797FE93FB0CF62AD.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 22 Dec 2025 00:08:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 76:65:e5:02:74:93:d4:a1:f8:fb:71:76:4c:8a:46:d6:a0:d1:68:11 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=FA30FF8566753253FBBD8786797FE93FB0CF62AD Validity Not Before: Dec 18 17:17:28 2025 GMT Not After : Dec 22 00:08:28 2025 GMT Subject: CN=387A0E2589A1CE695E32B53D11E12153B922A49F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:d8:97:09:63:c4:55:c0:ce:3b:68:05:62:23: 8e:b6:35:6d:f5:ad:38:6d:61:a8:d8:24:27:77:78: 76:b1:ba:65:4f:25:93:0f:47:58:bf:0b:be:ef:e6: 9d:f1:e6:67:3f:6d:3a:36:3a:b4:39:eb:82:11:7f: 76:c1:ca:2b:55:10:79:19:37:e1:fe:3c:35:9b:a6: 41:09:36:e7:b9:15:20:1a:7a:35:96:0e:8a:ea:c9: e4:5c:56:2a:7c:b3:c4:ee:6f:0f:bd:85:12:9e:2a: 03:1a:b6:e0:eb:e4:8e:b2:98:4b:1d:53:1b:e7:96: 31:51:25:ea:ab:4a:f2:a2:3d:ef:df:91:b6:34:bf: e0:5d:88:30:60:d6:18:a2:c0:82:f3:9b:98:03:b8: 04:8b:6a:0e:77:8d:d0:98:ee:28:f1:46:9f:bb:32: e3:a0:42:a4:a8:95:af:64:32:b8:7f:8b:ef:6f:58: f1:ec:8d:e3:3e:58:a0:50:24:21:10:69:11:2c:49: 98:64:3d:a5:c5:b2:bf:a8:b0:b5:6f:5a:31:5c:08: 47:19:25:e5:5b:62:1b:b0:10:9b:aa:02:f1:29:5e: c2:b2:eb:04:f3:7a:95:5c:eb:42:e9:dc:7b:22:2d: 46:47:80:69:a1:41:ad:d3:64:12:20:3c:5e:c9:ec: 08:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:7A:0E:25:89:A1:CE:69:5E:32:B5:3D:11:E1:21:53:B9:22:A4:9F X509v3 Authority Key Identifier: keyid:FA:30:FF:85:66:75:32:53:FB:BD:87:86:79:7F:E9:3F:B0:CF:62:AD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/16da0e82-0764-45d3-aed9-fd258e72b6e2/0/FA30FF8566753253FBBD8786797FE93FB0CF62AD.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/FA30FF8566753253FBBD8786797FE93FB0CF62AD.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/16da0e82-0764-45d3-aed9-fd258e72b6e2/0/FA30FF8566753253FBBD8786797FE93FB0CF62AD.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 09:b0:da:de:eb:63:84:dd:af:f4:79:18:91:17:cf:f4:99:d9: 48:1e:07:bc:84:08:9a:cd:ef:31:02:80:ea:c5:76:29:e2:d5: 79:c3:e3:54:a8:5f:84:76:63:91:28:b2:f2:08:7f:c4:f2:e8: 1d:4a:b7:50:33:80:6f:fc:f3:00:4b:0a:59:82:26:19:d0:c1: 80:c0:f6:ea:9f:10:6c:c2:69:1a:f8:92:6a:05:93:d8:95:9a: 40:11:f7:41:3d:68:f5:c1:fc:ce:ef:b5:b9:61:29:54:e1:d5: b8:fc:9a:9d:37:42:ed:8a:d6:0b:ae:95:c2:ff:2c:2f:51:19: 06:37:55:ec:ac:99:27:2b:52:19:09:f9:b7:af:e7:d5:c9:6d: 9f:47:fd:32:36:f2:55:6e:9b:c0:7b:21:11:3e:a7:07:02:e1: 36:84:78:8a:b6:50:60:c2:4a:c1:b5:05:09:83:1f:54:84:c6: 23:37:0f:64:1d:d5:7e:e7:a0:4c:57:26:6f:84:51:65:cd:ad: 46:d8:0b:7b:fa:f8:a5:40:fe:18:05:3f:e9:d1:0d:5d:5b:05: 4a:2d:14:68:ad:c1:99:c7:21:61:f2:a1:0e:98:c7:39:bb:70: 1d:f1:de:01:be:13:87:b2:1f:c2:e0:8e:5b:29:6a:c6:cb:f9: 17:5b:8a:76 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUdmXlAnST1KH4+3F2TIpG1qDRaBEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRkEzMEZGODU2Njc1MzI1M0ZCQkQ4Nzg2Nzk3RkU5M0ZC MENGNjJBRDAeFw0yNTEyMTgxNzE3MjhaFw0yNTEyMjIwMDA4MjhaMDMxMTAvBgNV BAMTKDM4N0EwRTI1ODlBMUNFNjk1RTMyQjUzRDExRTEyMTUzQjkyMkE0OUYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDR2JcJY8RVwM47aAViI462NW31 rThtYajYJCd3eHaxumVPJZMPR1i/C77v5p3x5mc/bTo2OrQ564IRf3bByitVEHkZ N+H+PDWbpkEJNue5FSAaejWWDorqyeRcVip8s8Tubw+9hRKeKgMatuDr5I6ymEsd UxvnljFRJeqrSvKiPe/fkbY0v+BdiDBg1hiiwILzm5gDuASLag53jdCY7ijxRp+7 MuOgQqSola9kMrh/i+9vWPHsjeM+WKBQJCEQaREsSZhkPaXFsr+osLVvWjFcCEcZ JeVbYhuwEJuqAvEpXsKy6wTzepVc60Lp3HsiLUZHgGmhQa3TZBIgPF7J7Ah7AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUOHoOJYmhzmleMrU9EeEhU7kipJ8wHwYDVR0j BBgwFoAU+jD/hWZ1MlP7vYeGeX/pP7DPYq0wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x NmRhMGU4Mi0wNzY0LTQ1ZDMtYWVkOS1mZDI1OGU3MmI2ZTIvMC9GQTMwRkY4NTY2 NzUzMjUzRkJCRDg3ODY3OTdGRTkzRkIwQ0Y2MkFELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvRkEzMEZGODU2Njc1MzI1M0ZCQkQ4Nzg2Nzk3RkU5M0ZCMENG NjJBRC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMTZkYTBlODItMDc2NC00NWQzLWFl ZDktZmQyNThlNzJiNmUyLzAvRkEzMEZGODU2Njc1MzI1M0ZCQkQ4Nzg2Nzk3RkU5 M0ZCMENGNjJBRC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAmw2t7rY4Tdr/R5GJEXz/SZ2UgeB7yECJrN 7zECgOrFdini1XnD41SoX4R2Y5EosvIIf8Ty6B1Kt1AzgG/88wBLClmCJhnQwYDA 9uqfEGzCaRr4kmoFk9iVmkAR90E9aPXB/M7vtblhKVTh1bj8mp03Qu2K1guulcL/ LC9RGQY3VeysmScrUhkJ+bev59XJbZ9H/TI28lVum8B7IRE+pwcC4TaEeIq2UGDC SsG1BQmDH1SExiM3D2Qd1X7noExXJm+EUWXNrUbYC3v6+KVA/hgFP+nRDV1bBUot FGitwZnHIWHyoQ6Yxzm7cB3x3gG+E4eyH8LgjlspasbL+RdbinY= -----END CERTIFICATE-----Generated at Sat Dec 20 20:47:14 2025 by rpki-client