This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/47ad0a3a-26b8-449a-88ec-bf0398ea53a6/0/FBC39A6E177F8DD7BA5E257D4489C57574C07E81.mft File: FBC39A6E177F8DD7BA5E257D4489C57574C07E81.mft (raw, json) Hash identifier: ofYCnSsJlhtg3gXdyi5m5UV0ckN7oSAHdwifvqmveXs= Subject key identifier: 95:03:11:20:CA:40:2F:D6:AB:97:DA:94:87:7A:DE:FD:A9:65:6C:9A Authority key identifier: FB:C3:9A:6E:17:7F:8D:D7:BA:5E:25:7D:44:89:C5:75:74:C0:7E:81 Certificate issuer: /CN=FBC39A6E177F8DD7BA5E257D4489C57574C07E81 Certificate serial: 267171CE7546AEB86AC3843E3C99926C515B5940 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/FBC39A6E177F8DD7BA5E257D4489C57574C07E81.cer Subject info access: rsync://repo-rpki.idnic.net/repo/47ad0a3a-26b8-449a-88ec-bf0398ea53a6/0/FBC39A6E177F8DD7BA5E257D4489C57574C07E81.mft Manifest number: D5 Signing time: Thu 18 Dec 2025 17:12:23 +0000 Manifest this update: Thu 18 Dec 2025 17:07:23 +0000 Manifest next update: Mon 22 Dec 2025 03:50:23 +0000 Files and hashes: 1: FBC39A6E177F8DD7BA5E257D4489C57574C07E81.crl (hash: ZJv9Igye2LWkfR01bnTjiJrQWhLsFYs0nH+2XrLgEJo=) 2: 3136302e32352e3235312e302f32342d3234203d3e20313533303938.roa (hash: +X50gpeSdWT/Y5d22C2/uBOgo8Xzo2+UIRSSAuVLkyI=) 3: 3136302e32352e3235302e302f32342d3234203d3e20313533303938.roa (hash: MrtKeNjFNhl14mhfxKI/GhEb/0ohG0B8bmQ7SLXWttE=) 4: 3136302e32352e3235302e302f32332d3233203d3e20313533303938.roa (hash: eL66HCHXLPzvvpIp6yZbwohxEw2vNNGKLUjoRHRX4l0=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/47ad0a3a-26b8-449a-88ec-bf0398ea53a6/0/FBC39A6E177F8DD7BA5E257D4489C57574C07E81.crl rsync://repo-rpki.idnic.net/repo/47ad0a3a-26b8-449a-88ec-bf0398ea53a6/0/FBC39A6E177F8DD7BA5E257D4489C57574C07E81.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/FBC39A6E177F8DD7BA5E257D4489C57574C07E81.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 22 Dec 2025 03:50:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 26:71:71:ce:75:46:ae:b8:6a:c3:84:3e:3c:99:92:6c:51:5b:59:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=FBC39A6E177F8DD7BA5E257D4489C57574C07E81 Validity Not Before: Dec 18 17:07:23 2025 GMT Not After : Dec 22 03:50:23 2025 GMT Subject: CN=95031120CA402FD6AB97DA94877ADEFDA9656C9A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:62:22:8f:c4:b3:05:06:0c:5d:23:74:7d:64: de:de:73:b4:e3:e4:57:1d:ff:09:94:a5:8d:e0:f7: f7:43:19:a9:ed:8e:23:c3:cc:34:cf:e5:9a:f2:f1: 96:7b:37:9f:ab:3e:0f:7a:46:d3:1f:35:32:be:db: aa:06:d7:67:fb:b2:6d:2f:4d:b4:50:27:0c:81:a9: d3:e2:18:89:42:0c:fe:69:c5:bc:a8:c2:30:c3:74: e9:3f:c8:b7:d6:40:bc:dc:ad:e7:ea:a6:11:bb:ea: c5:9c:f2:58:c4:9a:ad:0d:ab:5e:ea:76:96:55:01: 71:e1:60:60:1b:9f:7c:70:cb:0f:63:9a:1b:19:51: 53:97:8a:3b:fb:2e:43:9b:5e:65:16:ac:39:fa:86: 0c:88:27:9e:d3:d4:52:35:83:16:26:42:41:cc:0f: 12:ca:a9:f1:30:7c:c9:49:68:aa:42:2d:58:3d:8b: 7b:a0:e6:d1:29:67:d8:27:19:4b:ca:14:37:6d:1f: 00:b9:83:a4:26:5a:53:00:da:54:9b:4f:bd:17:1d: 5b:79:aa:43:56:ee:20:19:f8:e2:04:09:3e:81:0c: 10:19:c3:b3:9d:fd:f3:c4:61:8e:b7:39:4b:c2:26: 97:e6:a2:d5:85:1d:9d:09:78:b4:45:bf:69:48:1c: 82:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:03:11:20:CA:40:2F:D6:AB:97:DA:94:87:7A:DE:FD:A9:65:6C:9A X509v3 Authority Key Identifier: keyid:FB:C3:9A:6E:17:7F:8D:D7:BA:5E:25:7D:44:89:C5:75:74:C0:7E:81 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/47ad0a3a-26b8-449a-88ec-bf0398ea53a6/0/FBC39A6E177F8DD7BA5E257D4489C57574C07E81.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/FBC39A6E177F8DD7BA5E257D4489C57574C07E81.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/47ad0a3a-26b8-449a-88ec-bf0398ea53a6/0/FBC39A6E177F8DD7BA5E257D4489C57574C07E81.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 11:fc:e5:35:52:43:7c:4b:69:e3:18:c4:70:f1:c4:1d:84:4b: 14:dc:b3:e9:7a:1e:63:2e:aa:d7:79:30:a0:1d:d9:48:86:7a: e7:d3:99:e3:65:f2:71:4c:5c:36:c6:bd:35:46:f4:a6:65:d7: 44:af:0d:3b:89:0f:cc:e8:33:ff:07:04:b1:3f:de:6b:56:c3: 21:3d:32:be:1c:18:ef:70:45:57:89:82:02:c5:8f:b6:c4:35: 36:6a:e3:6b:e4:ff:b7:0a:64:b0:8e:44:b8:8b:fd:aa:f7:5c: 5c:bf:27:3a:3c:7d:e7:05:e3:7a:f6:e0:5d:86:d7:4e:4f:04: fc:6c:00:e7:d4:0e:4d:27:55:b6:3b:ee:9e:01:9b:c9:80:5a: 1a:d8:2f:c9:66:cb:0e:99:e1:bc:a5:83:29:4d:47:97:28:ff: 31:e3:14:36:33:24:00:5a:56:c8:3f:96:a3:7b:59:63:5e:eb: 81:a3:14:47:ea:d4:b3:ab:27:80:8e:dc:7b:2d:59:6b:9d:15: 66:d9:d2:79:e1:c2:32:f9:7b:ef:38:38:4b:5d:57:00:f2:43: 16:e2:e1:7e:51:2a:ec:5b:04:e5:91:0c:51:9b:17:60:75:ae: cd:45:22:44:7a:e3:27:56:61:9f:d0:af:31:97:e1:a5:48:d3: 09:fe:e2:89 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUJnFxznVGrrhqw4Q+PJmSbFFbWUAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRkJDMzlBNkUxNzdGOEREN0JBNUUyNTdENDQ4OUM1NzU3 NEMwN0U4MTAeFw0yNTEyMTgxNzA3MjNaFw0yNTEyMjIwMzUwMjNaMDMxMTAvBgNV BAMTKDk1MDMxMTIwQ0E0MDJGRDZBQjk3REE5NDg3N0FERUZEQTk2NTZDOUEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDVYiKPxLMFBgxdI3R9ZN7ec7Tj 5Fcd/wmUpY3g9/dDGantjiPDzDTP5Zry8ZZ7N5+rPg96RtMfNTK+26oG12f7sm0v TbRQJwyBqdPiGIlCDP5pxbyowjDDdOk/yLfWQLzcrefqphG76sWc8ljEmq0Nq17q dpZVAXHhYGAbn3xwyw9jmhsZUVOXijv7LkObXmUWrDn6hgyIJ57T1FI1gxYmQkHM DxLKqfEwfMlJaKpCLVg9i3ug5tEpZ9gnGUvKFDdtHwC5g6QmWlMA2lSbT70XHVt5 qkNW7iAZ+OIECT6BDBAZw7Od/fPEYY63OUvCJpfmotWFHZ0JeLRFv2lIHILJAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUlQMRIMpAL9arl9qUh3re/allbJowHwYDVR0j BBgwFoAU+8Oabhd/jde6XiV9RInFdXTAfoEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 N2FkMGEzYS0yNmI4LTQ0OWEtODhlYy1iZjAzOThlYTUzYTYvMC9GQkMzOUE2RTE3 N0Y4REQ3QkE1RTI1N0Q0NDg5QzU3NTc0QzA3RTgxLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvRkJDMzlBNkUxNzdGOEREN0JBNUUyNTdENDQ4OUM1NzU3NEMw N0U4MS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNDdhZDBhM2EtMjZiOC00NDlhLTg4 ZWMtYmYwMzk4ZWE1M2E2LzAvRkJDMzlBNkUxNzdGOEREN0JBNUUyNTdENDQ4OUM1 NzU3NEMwN0U4MS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABH85TVSQ3xLaeMYxHDxxB2ESxTcs+l6HmMu qtd5MKAd2UiGeufTmeNl8nFMXDbGvTVG9KZl10SvDTuJD8zoM/8HBLE/3mtWwyE9 Mr4cGO9wRVeJggLFj7bENTZq42vk/7cKZLCORLiL/ar3XFy/Jzo8fecF43r24F2G 105PBPxsAOfUDk0nVbY77p4Bm8mAWhrYL8lmyw6Z4bylgylNR5co/zHjFDYzJABa Vsg/lqN7WWNe64GjFEfq1LOrJ4CO3HstWWudFWbZ0nnhwjL5e+84OEtdVwDyQxbi 4X5RKuxbBOWRDFGbF2B1rs1FIkR64ydWYZ/QrzGX4aVI0wn+4ok= -----END CERTIFICATE-----Generated at Sat Dec 20 10:21:58 2025 by rpki-client