This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/59b07a9e-62df-4808-9d2a-a6e6884bcbbb/1/FA479894B4849679EBB9029580F04B8BD74CE048.mft File: FA479894B4849679EBB9029580F04B8BD74CE048.mft (raw, json) Hash identifier: ZvNcBDc3VE5YL9DzOKuNgklVU9r0w9PzBczdFtWxrxU= Subject key identifier: B1:46:C5:43:A1:AB:0E:59:81:D0:14:69:C0:8C:7C:3B:CC:07:74:21 Authority key identifier: FA:47:98:94:B4:84:96:79:EB:B9:02:95:80:F0:4B:8B:D7:4C:E0:48 Certificate issuer: /CN=FA479894B4849679EBB9029580F04B8BD74CE048 Certificate serial: 5AB5747322E4DFBC972E5CE50B4ABCA2079402B3 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FA479894B4849679EBB9029580F04B8BD74CE048.cer Subject info access: rsync://repo-rpki.idnic.net/repo/59b07a9e-62df-4808-9d2a-a6e6884bcbbb/1/FA479894B4849679EBB9029580F04B8BD74CE048.mft Manifest number: C8 Signing time: Wed 17 Dec 2025 12:01:37 +0000 Manifest this update: Wed 17 Dec 2025 11:56:37 +0000 Manifest next update: Sat 20 Dec 2025 22:03:37 +0000 Files and hashes: 1: 323030313a6466343a343463303a3a2f34382d3438203d3e20313533313137.roa (hash: TN7coRRv7ozdQ4MBQjtVExbapiKpR2cs6McrqrVZTKc=) 2: FA479894B4849679EBB9029580F04B8BD74CE048.crl (hash: Er0olDF+3BtWKVyWjBobYisUNdcI96zAH8sX1Mp8B2I=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/59b07a9e-62df-4808-9d2a-a6e6884bcbbb/1/FA479894B4849679EBB9029580F04B8BD74CE048.crl rsync://repo-rpki.idnic.net/repo/59b07a9e-62df-4808-9d2a-a6e6884bcbbb/1/FA479894B4849679EBB9029580F04B8BD74CE048.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FA479894B4849679EBB9029580F04B8BD74CE048.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 20 Dec 2025 22:03:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5a:b5:74:73:22:e4:df:bc:97:2e:5c:e5:0b:4a:bc:a2:07:94:02:b3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=FA479894B4849679EBB9029580F04B8BD74CE048 Validity Not Before: Dec 17 11:56:37 2025 GMT Not After : Dec 20 22:03:37 2025 GMT Subject: CN=B146C543A1AB0E5981D01469C08C7C3BCC077421 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:63:f7:76:70:91:a4:6b:ac:33:b1:e2:fa:71: ab:8d:1a:7e:0c:7d:cf:82:3c:67:4f:a1:45:15:3d: ea:68:a3:70:66:06:f5:66:83:76:59:21:71:fa:5b: ae:ae:0b:5b:18:c6:e4:c4:ac:86:b8:61:62:fa:18: 1b:b5:d5:57:ad:1b:6c:4a:32:79:68:b0:8d:7c:91: 7e:ae:ed:6e:cd:39:db:e6:a8:6d:ba:47:13:f8:00: 0c:41:42:2c:03:c5:b9:30:6a:0e:7a:85:b7:bd:72: f2:49:e3:89:88:05:10:bc:62:16:00:fb:93:d6:ae: be:58:6e:e9:71:19:4c:83:53:1b:f8:49:be:3e:8e: 54:0b:0b:1c:e6:76:4f:20:c6:94:0c:6c:c5:41:14: ff:ab:da:11:03:98:68:bc:d2:de:ff:b5:07:1c:c6: de:6f:9f:46:23:c1:4a:e6:0e:66:28:70:c2:cc:c1: 85:56:09:f4:04:92:46:87:15:93:44:2d:c0:2e:48: 2d:6c:1b:4d:3b:db:92:82:f7:ce:c0:e6:e4:6f:15: ee:a6:2e:fc:b7:67:60:9a:98:ed:10:6b:f2:ac:de: a4:f2:14:89:56:8a:42:7f:9b:60:2f:14:8d:08:bf: 40:64:aa:2a:80:82:eb:3e:58:db:8e:41:68:aa:3c: d8:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:46:C5:43:A1:AB:0E:59:81:D0:14:69:C0:8C:7C:3B:CC:07:74:21 X509v3 Authority Key Identifier: keyid:FA:47:98:94:B4:84:96:79:EB:B9:02:95:80:F0:4B:8B:D7:4C:E0:48 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/59b07a9e-62df-4808-9d2a-a6e6884bcbbb/1/FA479894B4849679EBB9029580F04B8BD74CE048.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FA479894B4849679EBB9029580F04B8BD74CE048.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/59b07a9e-62df-4808-9d2a-a6e6884bcbbb/1/FA479894B4849679EBB9029580F04B8BD74CE048.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 33:cd:6d:56:37:7b:8f:cb:51:19:ff:1a:6f:5d:19:a3:ba:bf: 2c:c2:a2:d8:10:2b:3f:c9:e5:b6:d5:b8:0a:f4:7c:46:3c:fb: ca:dd:6e:eb:36:8e:fe:71:5a:0f:4f:ec:fc:98:01:43:b1:8b: c2:72:c3:c2:75:cf:c7:d4:a9:0f:8e:90:8c:98:e2:4f:35:9f: 2d:5e:73:08:43:ad:7e:f3:06:07:ac:73:e0:54:c4:f6:9b:c1: 7a:7c:fc:7d:38:07:93:8e:f3:55:fe:2e:f1:23:a1:44:79:1c: ea:17:45:e6:d8:ec:84:ee:0a:7c:5e:4b:25:ff:3f:99:f9:79: be:0b:e6:d6:27:70:a8:c7:f1:c0:dd:06:1f:df:b2:ff:8d:7f: 66:60:61:d8:31:9c:12:17:5b:ea:be:c5:ec:d5:51:b6:ba:c5: 30:de:d4:52:85:9b:f6:8d:85:de:df:ab:bb:ea:d9:73:85:09: 44:3c:5e:57:b6:de:6f:76:02:ff:f0:fa:79:17:3d:ca:6e:5d: 43:1a:48:71:dd:e9:2c:30:4a:c1:20:e1:51:e2:81:19:68:f0: ed:55:4f:49:8a:f7:a3:f0:c0:3b:18:7a:1a:42:d2:d9:50:0d: 2e:f7:dd:2d:4a:de:ab:00:7d:b8:c2:3a:25:1f:74:62:3e:86: cb:af:77:a0 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUWrV0cyLk37yXLlzlC0q8ogeUArMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRkE0Nzk4OTRCNDg0OTY3OUVCQjkwMjk1ODBGMDRCOEJE NzRDRTA0ODAeFw0yNTEyMTcxMTU2MzdaFw0yNTEyMjAyMjAzMzdaMDMxMTAvBgNV BAMTKEIxNDZDNTQzQTFBQjBFNTk4MUQwMTQ2OUMwOEM3QzNCQ0MwNzc0MjEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCqY/d2cJGka6wzseL6cauNGn4M fc+CPGdPoUUVPepoo3BmBvVmg3ZZIXH6W66uC1sYxuTErIa4YWL6GBu11VetG2xK MnlosI18kX6u7W7NOdvmqG26RxP4AAxBQiwDxbkwag56hbe9cvJJ44mIBRC8YhYA +5PWrr5YbulxGUyDUxv4Sb4+jlQLCxzmdk8gxpQMbMVBFP+r2hEDmGi80t7/tQcc xt5vn0YjwUrmDmYocMLMwYVWCfQEkkaHFZNELcAuSC1sG00725KC987A5uRvFe6m Lvy3Z2CamO0Qa/Ks3qTyFIlWikJ/m2AvFI0Iv0BkqiqAgus+WNuOQWiqPNgNAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUsUbFQ6GrDlmB0BRpwIx8O8wHdCEwHwYDVR0j BBgwFoAU+keYlLSElnnruQKVgPBLi9dM4EgwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 OWIwN2E5ZS02MmRmLTQ4MDgtOWQyYS1hNmU2ODg0YmNiYmIvMS9GQTQ3OTg5NEI0 ODQ5Njc5RUJCOTAyOTU4MEYwNEI4QkQ3NENFMDQ4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRkE0Nzk4OTRCNDg0OTY3OUVCQjkwMjk1ODBGMDRCOEJENzRD RTA0OC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNTliMDdhOWUtNjJkZi00ODA4LTlk MmEtYTZlNjg4NGJjYmJiLzEvRkE0Nzk4OTRCNDg0OTY3OUVCQjkwMjk1ODBGMDRC OEJENzRDRTA0OC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADPNbVY3e4/LURn/Gm9dGaO6vyzCotgQKz/J 5bbVuAr0fEY8+8rdbus2jv5xWg9P7PyYAUOxi8Jyw8J1z8fUqQ+OkIyY4k81ny1e cwhDrX7zBgesc+BUxPabwXp8/H04B5OO81X+LvEjoUR5HOoXRebY7ITuCnxeSyX/ P5n5eb4L5tYncKjH8cDdBh/fsv+Nf2ZgYdgxnBIXW+q+xezVUba6xTDe1FKFm/aN hd7fq7vq2XOFCUQ8Xle23m92Av/w+nkXPcpuXUMaSHHd6SwwSsEg4VHigRlo8O1V T0mK96PwwDsYehpC0tlQDS733S1K3qsAfbjCOiUfdGI+hsuvd6A= -----END CERTIFICATE-----Generated at Fri Dec 19 11:18:43 2025 by rpki-client