This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/1c04ded8-b0f5-4594-8e0e-911ecb77ee73/0/FA62D828544F70BEAD8B3C04A86175E4FB07C4B6.mft File: FA62D828544F70BEAD8B3C04A86175E4FB07C4B6.mft (raw, json) Hash identifier: s8bBKbFmmX0Q5hwyHTRreH0sSM+2uArfRj+7xuyUpOg= Subject key identifier: 2C:76:7D:B2:7B:D6:0C:CA:08:76:06:7E:AB:E7:04:3D:2C:C9:A1:6F Authority key identifier: FA:62:D8:28:54:4F:70:BE:AD:8B:3C:04:A8:61:75:E4:FB:07:C4:B6 Certificate issuer: /CN=FA62D828544F70BEAD8B3C04A86175E4FB07C4B6 Certificate serial: 69B688C1198381834FD2C316321AEAD41388D0FA Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/FA62D828544F70BEAD8B3C04A86175E4FB07C4B6.cer Subject info access: rsync://repo-rpki.idnic.net/repo/1c04ded8-b0f5-4594-8e0e-911ecb77ee73/0/FA62D828544F70BEAD8B3C04A86175E4FB07C4B6.mft Manifest number: F6 Signing time: Sat 27 Dec 2025 04:30:46 +0000 Manifest this update: Sat 27 Dec 2025 04:25:46 +0000 Manifest next update: Tue 30 Dec 2025 08:05:46 +0000 Files and hashes: 1: 3135372e36362e33372e302f32342d3234203d3e20313338383034.roa (hash: elAlykoINKnAZ1hNxzJ7Wy9Qz4JU3YMP6UNvlutp4wU=) 2: FA62D828544F70BEAD8B3C04A86175E4FB07C4B6.crl (hash: c714wv5xkAWNBGESfiUgCppVd5BrVgQWmX3ub33U+yg=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/1c04ded8-b0f5-4594-8e0e-911ecb77ee73/0/FA62D828544F70BEAD8B3C04A86175E4FB07C4B6.crl rsync://repo-rpki.idnic.net/repo/1c04ded8-b0f5-4594-8e0e-911ecb77ee73/0/FA62D828544F70BEAD8B3C04A86175E4FB07C4B6.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/FA62D828544F70BEAD8B3C04A86175E4FB07C4B6.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 30 Dec 2025 04:54:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 69:b6:88:c1:19:83:81:83:4f:d2:c3:16:32:1a:ea:d4:13:88:d0:fa Signature Algorithm: sha256WithRSAEncryption Issuer: CN=FA62D828544F70BEAD8B3C04A86175E4FB07C4B6 Validity Not Before: Dec 27 04:25:46 2025 GMT Not After : Dec 30 08:05:46 2025 GMT Subject: CN=2C767DB27BD60CCA0876067EABE7043D2CC9A16F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:17:ee:b9:7c:19:76:e7:d3:49:27:0b:df:84: 84:6c:c2:03:29:ae:e5:36:bb:b4:54:f8:4d:1f:ce: db:0b:cd:3d:b6:3b:6d:bd:a3:6f:a5:16:a0:14:c6: e4:04:3b:64:c3:04:59:9f:cd:f6:83:d0:a7:71:43: 4f:7d:c6:1a:3a:51:03:54:21:d1:34:ec:91:88:a0: 98:11:91:3a:fa:db:a9:54:d5:46:12:97:26:07:39: 14:f0:65:f8:21:a6:ac:cf:61:e2:8b:44:81:6b:25: f6:98:bd:4b:10:98:45:94:9c:d5:bf:0e:cb:93:30: a0:ee:3f:c5:55:2a:f8:c0:fe:80:20:f9:e8:90:1f: 31:b8:20:5e:f5:a8:f7:ce:6c:97:6c:db:e0:de:60: 21:d8:dc:29:d9:ec:79:8b:a6:d4:1c:10:cb:0f:f7: a7:94:b7:f9:41:f2:67:9b:82:19:5c:67:2b:fa:62: 29:2f:ec:7d:ba:86:6a:40:01:f5:09:ca:14:af:1c: 0d:4a:35:c7:b7:71:a2:cb:6f:de:45:1b:09:dc:14: f6:5e:76:9e:58:f3:67:3b:06:a0:bf:ff:58:41:79: 19:4c:86:4f:b0:db:51:62:8c:9e:cd:75:46:c3:9b: 43:11:ff:1c:3d:ae:64:c4:78:4c:c5:f8:3c:96:29: cb:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:76:7D:B2:7B:D6:0C:CA:08:76:06:7E:AB:E7:04:3D:2C:C9:A1:6F X509v3 Authority Key Identifier: keyid:FA:62:D8:28:54:4F:70:BE:AD:8B:3C:04:A8:61:75:E4:FB:07:C4:B6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/1c04ded8-b0f5-4594-8e0e-911ecb77ee73/0/FA62D828544F70BEAD8B3C04A86175E4FB07C4B6.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/FA62D828544F70BEAD8B3C04A86175E4FB07C4B6.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/1c04ded8-b0f5-4594-8e0e-911ecb77ee73/0/FA62D828544F70BEAD8B3C04A86175E4FB07C4B6.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4c:94:f1:17:a0:3e:14:e8:1b:c6:54:de:b5:be:23:a0:5e:95: a2:cc:42:9f:68:d8:ac:36:71:fa:f3:e2:4c:c9:7e:02:62:83: bc:32:63:c0:04:7d:03:e6:09:85:83:40:a0:8e:dc:c3:01:bc: 7d:25:90:6c:1b:09:f6:46:2e:27:a6:d5:c5:d2:1b:73:a0:ef: 8f:93:23:45:dd:e0:c2:f5:81:2a:3f:db:7f:a6:c5:fa:84:e1: d0:7c:5e:a6:29:2b:43:76:1f:56:be:4c:8f:f3:c1:36:b1:5a: 7c:e9:24:b3:5e:d1:d2:75:cc:65:3b:ae:70:4b:53:c5:45:f6: f2:3f:62:59:ca:26:d3:a0:d5:ee:42:72:6a:c6:bc:90:2d:c3: 6d:fc:bb:1a:b6:db:24:ea:00:21:b9:5c:93:f8:49:90:35:20: 3a:58:4c:39:54:cf:dc:f7:96:dd:8e:64:fb:09:b1:5f:a0:c1: c7:75:3f:b5:6f:ae:40:a6:21:3a:5f:b5:9a:1e:59:4b:7b:0e: 3d:a8:f9:49:b4:35:55:90:9b:18:39:1d:72:63:3b:ea:de:45: 79:97:93:39:0c:d8:d1:f6:16:1b:1a:d2:4b:01:6a:61:2d:10: 34:74:8a:bf:f8:80:43:1b:4b:09:24:f0:35:ec:b7:e0:1c:f4: a6:c3:6a:fb -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUabaIwRmDgYNP0sMWMhrq1BOI0PowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRkE2MkQ4Mjg1NDRGNzBCRUFEOEIzQzA0QTg2MTc1RTRG QjA3QzRCNjAeFw0yNTEyMjcwNDI1NDZaFw0yNTEyMzAwODA1NDZaMDMxMTAvBgNV BAMTKDJDNzY3REIyN0JENjBDQ0EwODc2MDY3RUFCRTcwNDNEMkNDOUExNkYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDZF+65fBl259NJJwvfhIRswgMp ruU2u7RU+E0fztsLzT22O229o2+lFqAUxuQEO2TDBFmfzfaD0KdxQ099xho6UQNU IdE07JGIoJgRkTr626lU1UYSlyYHORTwZfghpqzPYeKLRIFrJfaYvUsQmEWUnNW/ DsuTMKDuP8VVKvjA/oAg+eiQHzG4IF71qPfObJds2+DeYCHY3CnZ7HmLptQcEMsP 96eUt/lB8mebghlcZyv6Yikv7H26hmpAAfUJyhSvHA1KNce3caLLb95FGwncFPZe dp5Y82c7BqC//1hBeRlMhk+w21FijJ7NdUbDm0MR/xw9rmTEeEzF+DyWKcsDAgMB AAGjggI8MIICODAdBgNVHQ4EFgQULHZ9snvWDMoIdgZ+q+cEPSzJoW8wHwYDVR0j BBgwFoAU+mLYKFRPcL6tizwEqGF15PsHxLYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x YzA0ZGVkOC1iMGY1LTQ1OTQtOGUwZS05MTFlY2I3N2VlNzMvMC9GQTYyRDgyODU0 NEY3MEJFQUQ4QjNDMDRBODYxNzVFNEZCMDdDNEI2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvRkE2MkQ4Mjg1NDRGNzBCRUFEOEIzQzA0QTg2MTc1RTRGQjA3 QzRCNi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMWMwNGRlZDgtYjBmNS00NTk0LThl MGUtOTExZWNiNzdlZTczLzAvRkE2MkQ4Mjg1NDRGNzBCRUFEOEIzQzA0QTg2MTc1 RTRGQjA3QzRCNi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEyU8RegPhToG8ZU3rW+I6BelaLMQp9o2Kw2 cfrz4kzJfgJig7wyY8AEfQPmCYWDQKCO3MMBvH0lkGwbCfZGLiem1cXSG3Og74+T I0Xd4ML1gSo/23+mxfqE4dB8XqYpK0N2H1a+TI/zwTaxWnzpJLNe0dJ1zGU7rnBL U8VF9vI/YlnKJtOg1e5CcmrGvJAtw238uxq22yTqACG5XJP4SZA1IDpYTDlUz9z3 lt2OZPsJsV+gwcd1P7VvrkCmITpftZoeWUt7Dj2o+Um0NVWQmxg5HXJjO+reRXmX kzkM2NH2Fhsa0ksBamEtEDR0ir/4gEMbSwkk8DXst+Ac9KbDavs= -----END CERTIFICATE-----Generated at Sun Dec 28 08:02:10 2025 by rpki-client