This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/994d1f62-8488-4086-8d4c-f2de5c76da3d/0/FAB081FCD86AB0F81D41C9E5FB9C3D32220F48CD.mft File: FAB081FCD86AB0F81D41C9E5FB9C3D32220F48CD.mft (raw, json) Hash identifier: jb0YvV2pvIQ2Sr+adSs1h6vx/75w4+qhi15obSQflrA= Subject key identifier: AC:47:EC:11:27:73:A9:E3:68:2C:62:EB:BF:E4:AA:56:0C:6A:FC:D7 Authority key identifier: FA:B0:81:FC:D8:6A:B0:F8:1D:41:C9:E5:FB:9C:3D:32:22:0F:48:CD Certificate issuer: /CN=FAB081FCD86AB0F81D41C9E5FB9C3D32220F48CD Certificate serial: 49DCD14E0C461290121023242A2B513F51B507BE Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/FAB081FCD86AB0F81D41C9E5FB9C3D32220F48CD.cer Subject info access: rsync://repo-rpki.idnic.net/repo/994d1f62-8488-4086-8d4c-f2de5c76da3d/0/FAB081FCD86AB0F81D41C9E5FB9C3D32220F48CD.mft Manifest number: 012C Signing time: Fri 26 Dec 2025 13:51:28 +0000 Manifest this update: Fri 26 Dec 2025 13:46:28 +0000 Manifest next update: Mon 29 Dec 2025 21:56:28 +0000 Files and hashes: 1: 3135372e31302e302e302f32342d3234203d3e20313532303739.roa (hash: /rLqhw2hFwRMsfI5zGP3QkMBxOWlLSkauOe3xFxChRo=) 2: FAB081FCD86AB0F81D41C9E5FB9C3D32220F48CD.crl (hash: /r29OKrkMeauQDUmEitw6KWmuR2k3dG2Nhl7I0tCHRM=) 3: 3135372e31302e312e302f32342d3234203d3e20313532303739.roa (hash: 8mKHP2haWx9nDqWVpffr2HLwx0PW3MsCMnqlWHBgH8s=) 4: 3135372e31302e302e302f32332d3233203d3e20313532303739.roa (hash: LI/HMaoSlImx3bWiKBUR5SBmy9IHEOgEnYbWctfALp8=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/994d1f62-8488-4086-8d4c-f2de5c76da3d/0/FAB081FCD86AB0F81D41C9E5FB9C3D32220F48CD.crl rsync://repo-rpki.idnic.net/repo/994d1f62-8488-4086-8d4c-f2de5c76da3d/0/FAB081FCD86AB0F81D41C9E5FB9C3D32220F48CD.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/FAB081FCD86AB0F81D41C9E5FB9C3D32220F48CD.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 29 Dec 2025 21:56:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 49:dc:d1:4e:0c:46:12:90:12:10:23:24:2a:2b:51:3f:51:b5:07:be Signature Algorithm: sha256WithRSAEncryption Issuer: CN=FAB081FCD86AB0F81D41C9E5FB9C3D32220F48CD Validity Not Before: Dec 26 13:46:28 2025 GMT Not After : Dec 29 21:56:28 2025 GMT Subject: CN=AC47EC112773A9E3682C62EBBFE4AA560C6AFCD7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:14:62:7b:c0:c5:5b:4b:b7:5b:b9:fe:81:48: 99:ed:63:ae:40:8b:d4:c5:e2:5e:5d:c3:e2:d5:33: 6d:f8:31:c1:4b:af:87:ec:d9:4a:18:f9:6b:e9:00: 8c:5c:c8:7f:e4:a5:76:0f:a7:83:04:97:09:38:c6: df:6b:f6:00:07:3f:b0:ca:a7:cc:46:c0:4f:4c:a7: bd:27:45:99:bb:d0:27:e8:21:f9:53:92:39:2f:22: 6b:bf:c8:ac:c6:36:fc:21:c7:1e:f2:d2:81:33:9c: 60:ea:99:ad:f4:b4:e5:27:dc:02:71:8b:79:7e:ff: 8a:77:f3:54:8f:4e:fe:67:f8:06:3b:c8:9f:e0:7e: 7b:18:6d:7b:3a:6d:4c:78:46:64:f4:24:15:e3:6e: 3e:76:e1:f8:ee:e7:53:0d:fc:6c:f6:d2:a4:57:58: 98:72:a3:ce:b6:59:16:a1:57:2b:23:d1:f2:16:51: 5e:4b:ae:89:1a:43:26:66:b5:85:d8:d0:5f:d8:50: 97:a6:a9:ad:02:d1:77:c0:6a:df:83:2f:10:ca:d3: d6:da:bc:0b:a8:12:12:a7:d1:79:31:33:a2:c1:f0: 60:97:41:dd:f1:6c:fa:21:f2:33:33:7e:34:50:ed: eb:4e:05:89:72:c1:6e:58:63:84:4e:3c:fa:95:2b: bb:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AC:47:EC:11:27:73:A9:E3:68:2C:62:EB:BF:E4:AA:56:0C:6A:FC:D7 X509v3 Authority Key Identifier: keyid:FA:B0:81:FC:D8:6A:B0:F8:1D:41:C9:E5:FB:9C:3D:32:22:0F:48:CD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/994d1f62-8488-4086-8d4c-f2de5c76da3d/0/FAB081FCD86AB0F81D41C9E5FB9C3D32220F48CD.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/FAB081FCD86AB0F81D41C9E5FB9C3D32220F48CD.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/994d1f62-8488-4086-8d4c-f2de5c76da3d/0/FAB081FCD86AB0F81D41C9E5FB9C3D32220F48CD.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9c:a2:60:74:52:83:7c:05:37:9f:0d:84:89:ed:5b:d9:37:65: 46:68:94:c6:8c:eb:c1:df:96:76:da:b8:b4:1f:eb:2e:c1:c7: ce:b0:35:f4:a5:be:be:6b:d8:82:cb:a2:b1:62:a7:01:39:b9: e5:7f:b8:60:34:f5:0a:c2:dd:a1:e0:46:30:46:c3:41:be:4e: e6:ca:08:0d:31:76:2d:46:58:f7:35:38:b3:3e:97:e8:de:79: db:00:d4:5e:97:96:b5:54:97:71:39:3c:a4:ed:9d:03:8f:c6: 94:0c:ec:89:0a:bc:86:69:f4:e5:41:d3:5f:44:07:0e:60:ed: fd:9d:ac:fe:af:86:8c:66:44:0c:28:be:9f:2c:a3:41:02:70: 7d:1f:0b:47:07:85:0b:f0:2c:a8:28:a1:92:f1:09:fe:88:f7: c5:e5:13:95:ea:9f:ba:de:0a:7d:73:36:67:59:8a:e2:18:37: 45:46:8f:76:5d:c0:60:64:16:58:4c:41:3e:80:34:6e:ea:20: 22:fe:fd:f8:89:d9:df:4d:32:aa:d4:bb:06:72:95:0d:b4:83: 49:41:74:54:ab:bd:c4:09:3f:23:6f:1e:e0:7c:3a:80:4b:7d: b2:fc:9a:b6:8a:25:5c:e9:0b:7b:cf:bc:db:8f:ab:e7:20:1b: ea:d4:61:ca -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUSdzRTgxGEpASECMkKitRP1G1B74wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRkFCMDgxRkNEODZBQjBGODFENDFDOUU1RkI5QzNEMzIy MjBGNDhDRDAeFw0yNTEyMjYxMzQ2MjhaFw0yNTEyMjkyMTU2MjhaMDMxMTAvBgNV BAMTKEFDNDdFQzExMjc3M0E5RTM2ODJDNjJFQkJGRTRBQTU2MEM2QUZDRDcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDdFGJ7wMVbS7dbuf6BSJntY65A i9TF4l5dw+LVM234McFLr4fs2UoY+WvpAIxcyH/kpXYPp4MElwk4xt9r9gAHP7DK p8xGwE9Mp70nRZm70CfoIflTkjkvImu/yKzGNvwhxx7y0oEznGDqma30tOUn3AJx i3l+/4p381SPTv5n+AY7yJ/gfnsYbXs6bUx4RmT0JBXjbj524fju51MN/Gz20qRX WJhyo862WRahVysj0fIWUV5LrokaQyZmtYXY0F/YUJemqa0C0XfAat+DLxDK09ba vAuoEhKn0XkxM6LB8GCXQd3xbPoh8jMzfjRQ7etOBYlywW5YY4ROPPqVK7vPAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUrEfsESdzqeNoLGLrv+SqVgxq/NcwHwYDVR0j BBgwFoAU+rCB/NhqsPgdQcnl+5w9MiIPSM0wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 OTRkMWY2Mi04NDg4LTQwODYtOGQ0Yy1mMmRlNWM3NmRhM2QvMC9GQUIwODFGQ0Q4 NkFCMEY4MUQ0MUM5RTVGQjlDM0QzMjIyMEY0OENELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvRkFCMDgxRkNEODZBQjBGODFENDFDOUU1RkI5QzNEMzIyMjBG NDhDRC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOTk0ZDFmNjItODQ4OC00MDg2LThk NGMtZjJkZTVjNzZkYTNkLzAvRkFCMDgxRkNEODZBQjBGODFENDFDOUU1RkI5QzNE MzIyMjBGNDhDRC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJyiYHRSg3wFN58NhIntW9k3ZUZolMaM68Hf lnbauLQf6y7Bx86wNfSlvr5r2ILLorFipwE5ueV/uGA09QrC3aHgRjBGw0G+TubK CA0xdi1GWPc1OLM+l+jeedsA1F6XlrVUl3E5PKTtnQOPxpQM7IkKvIZp9OVB019E Bw5g7f2drP6vhoxmRAwovp8so0ECcH0fC0cHhQvwLKgooZLxCf6I98XlE5Xqn7re Cn1zNmdZiuIYN0VGj3ZdwGBkFlhMQT6ANG7qICL+/fiJ2d9NMqrUuwZylQ20g0lB dFSrvcQJPyNvHuB8OoBLfbL8mraKJVzpC3vPvNuPq+cgG+rUYco= -----END CERTIFICATE-----Generated at Sat Dec 27 07:24:38 2025 by rpki-client