This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/5cc70f7d-33fe-4df2-81e5-dc0d55ac5170/0/FB1D4F9139A61DF4B91E31270F3D2A1C07B35CE1.mft File: FB1D4F9139A61DF4B91E31270F3D2A1C07B35CE1.mft (raw, json) Hash identifier: yNCZyvElJacf7e7QTneOn4NGUBvs96MI/46KmQzjTno= Subject key identifier: 50:F4:CF:B9:6A:1E:32:EA:C7:EE:41:41:E0:1D:A6:9D:AB:AD:47:B0 Authority key identifier: FB:1D:4F:91:39:A6:1D:F4:B9:1E:31:27:0F:3D:2A:1C:07:B3:5C:E1 Certificate issuer: /CN=FB1D4F9139A61DF4B91E31270F3D2A1C07B35CE1 Certificate serial: 675A74F9904C106239AA7EDC8A7A608F575C1383 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FB1D4F9139A61DF4B91E31270F3D2A1C07B35CE1.cer Subject info access: rsync://repo-rpki.idnic.net/repo/5cc70f7d-33fe-4df2-81e5-dc0d55ac5170/0/FB1D4F9139A61DF4B91E31270F3D2A1C07B35CE1.mft Manifest number: 01D2 Signing time: Sat 20 Dec 2025 22:02:47 +0000 Manifest this update: Sat 20 Dec 2025 21:57:47 +0000 Manifest next update: Wed 24 Dec 2025 03:34:47 +0000 Files and hashes: 1: 3130332e3134392e3131382e302f32332d3234203d3e20313431303535.roa (hash: IBRiB5ZmLj4+M80KfLmmLbAbFNEpKpmTUiD30MwcLOE=) 2: FB1D4F9139A61DF4B91E31270F3D2A1C07B35CE1.crl (hash: ckA8XIFU5BFnfLP7vjyh5zA7PQOjeSfRQXN5NZBgYXQ=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/5cc70f7d-33fe-4df2-81e5-dc0d55ac5170/0/FB1D4F9139A61DF4B91E31270F3D2A1C07B35CE1.crl rsync://repo-rpki.idnic.net/repo/5cc70f7d-33fe-4df2-81e5-dc0d55ac5170/0/FB1D4F9139A61DF4B91E31270F3D2A1C07B35CE1.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FB1D4F9139A61DF4B91E31270F3D2A1C07B35CE1.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 24 Dec 2025 03:34:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 67:5a:74:f9:90:4c:10:62:39:aa:7e:dc:8a:7a:60:8f:57:5c:13:83 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=FB1D4F9139A61DF4B91E31270F3D2A1C07B35CE1 Validity Not Before: Dec 20 21:57:47 2025 GMT Not After : Dec 24 03:34:47 2025 GMT Subject: CN=50F4CFB96A1E32EAC7EE4141E01DA69DABAD47B0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:6a:8e:3c:f4:9e:3c:b3:9b:f8:9e:60:65:c5: ba:2c:b4:85:cc:7e:b9:a6:33:a3:d9:2f:ef:69:74: f4:47:47:fc:07:dd:b5:f4:1a:9d:14:89:65:08:7c: 8a:21:a6:87:0c:15:1e:d0:a6:66:5d:d0:d1:37:f1: 40:82:aa:78:3e:92:bc:9d:92:c5:f1:b6:5d:22:36: 53:5d:92:9f:91:21:92:89:96:a0:34:5e:36:5a:7e: 95:9e:6b:e3:97:72:76:11:a1:2b:bd:c5:7e:e1:78: 6b:e9:91:8b:08:34:cd:72:aa:c9:7f:51:ee:12:63: 24:f3:bc:13:c3:ec:83:db:cf:6d:7d:f4:bb:b3:2c: c9:f3:f6:c0:26:72:38:ff:91:17:0e:d5:f9:b6:3a: 06:88:c1:a6:d2:d7:8e:5e:ed:13:1c:1c:c1:58:aa: b5:16:f5:de:a0:3f:37:c5:ea:50:9b:64:d6:c4:d9: f3:17:1c:d2:fe:58:eb:f4:54:56:00:ca:2e:c0:06: 53:9e:58:b4:09:5d:a8:42:6f:88:2c:04:63:0a:b9: 98:67:65:fb:af:63:86:11:5f:cd:1b:08:de:c2:26: 59:bb:be:e4:f2:28:28:14:9b:c0:60:1d:2d:23:3a: b4:f4:25:1d:6c:62:e7:68:dc:77:a6:e5:66:93:68: 0c:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 50:F4:CF:B9:6A:1E:32:EA:C7:EE:41:41:E0:1D:A6:9D:AB:AD:47:B0 X509v3 Authority Key Identifier: keyid:FB:1D:4F:91:39:A6:1D:F4:B9:1E:31:27:0F:3D:2A:1C:07:B3:5C:E1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/5cc70f7d-33fe-4df2-81e5-dc0d55ac5170/0/FB1D4F9139A61DF4B91E31270F3D2A1C07B35CE1.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FB1D4F9139A61DF4B91E31270F3D2A1C07B35CE1.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/5cc70f7d-33fe-4df2-81e5-dc0d55ac5170/0/FB1D4F9139A61DF4B91E31270F3D2A1C07B35CE1.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4c:ac:da:38:ae:11:f8:d3:de:d5:d7:3e:9b:09:61:25:eb:30: ab:7b:e3:c9:a6:1c:2d:37:f6:42:69:bb:54:a2:53:1c:3b:e1: e1:3c:dd:3e:93:6f:f5:03:70:3d:76:7f:8a:ee:54:79:7d:cf: c9:5f:fb:c3:d1:25:1d:de:47:2b:79:6b:17:25:19:ac:07:55: 3f:1d:1a:2b:46:49:9c:22:0f:97:b4:3f:63:e0:d4:83:be:f4: e6:e7:ae:c6:2c:f7:3b:e5:d5:23:59:81:1a:36:ad:49:0c:9e: ff:86:98:78:26:57:37:64:76:2c:ca:5a:fc:5f:5b:fa:57:2b: eb:bf:84:91:09:76:83:3d:93:10:c2:54:76:a1:15:15:f1:72: b0:fc:56:7f:4b:79:df:66:30:21:e3:d9:d1:f8:8d:d1:8d:b4: 08:7c:67:c6:e1:77:b2:6d:a2:ff:2a:17:b4:8b:37:0c:b6:38: 4f:32:09:43:9a:dd:ed:78:cc:e4:cf:96:1a:83:a5:a6:ed:f1: 07:bc:ab:34:53:79:67:93:50:b0:9f:aa:0d:1b:1a:94:3c:6e: 83:bd:91:bf:d2:fd:2d:b9:b4:93:97:f0:f3:0c:00:7e:b9:ea: 00:e7:2b:61:52:bd:cd:23:2d:37:1d:0a:34:f8:65:cd:40:65: d5:00:be:6d -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUZ1p0+ZBMEGI5qn7cinpgj1dcE4MwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRkIxRDRGOTEzOUE2MURGNEI5MUUzMTI3MEYzRDJBMUMw N0IzNUNFMTAeFw0yNTEyMjAyMTU3NDdaFw0yNTEyMjQwMzM0NDdaMDMxMTAvBgNV BAMTKDUwRjRDRkI5NkExRTMyRUFDN0VFNDE0MUUwMURBNjlEQUJBRDQ3QjAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCYao489J48s5v4nmBlxbostIXM frmmM6PZL+9pdPRHR/wH3bX0Gp0UiWUIfIohpocMFR7QpmZd0NE38UCCqng+kryd ksXxtl0iNlNdkp+RIZKJlqA0XjZafpWea+OXcnYRoSu9xX7heGvpkYsINM1yqsl/ Ue4SYyTzvBPD7IPbz2199LuzLMnz9sAmcjj/kRcO1fm2OgaIwabS145e7RMcHMFY qrUW9d6gPzfF6lCbZNbE2fMXHNL+WOv0VFYAyi7ABlOeWLQJXahCb4gsBGMKuZhn ZfuvY4YRX80bCN7CJlm7vuTyKCgUm8BgHS0jOrT0JR1sYudo3Hem5WaTaAx3AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUUPTPuWoeMurH7kFB4B2mnautR7AwHwYDVR0j BBgwFoAU+x1PkTmmHfS5HjEnDz0qHAezXOEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 Y2M3MGY3ZC0zM2ZlLTRkZjItODFlNS1kYzBkNTVhYzUxNzAvMC9GQjFENEY5MTM5 QTYxREY0QjkxRTMxMjcwRjNEMkExQzA3QjM1Q0UxLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRkIxRDRGOTEzOUE2MURGNEI5MUUzMTI3MEYzRDJBMUMwN0Iz NUNFMS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNWNjNzBmN2QtMzNmZS00ZGYyLTgx ZTUtZGMwZDU1YWM1MTcwLzAvRkIxRDRGOTEzOUE2MURGNEI5MUUzMTI3MEYzRDJB MUMwN0IzNUNFMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEys2jiuEfjT3tXXPpsJYSXrMKt748mmHC03 9kJpu1SiUxw74eE83T6Tb/UDcD12f4ruVHl9z8lf+8PRJR3eRyt5axclGawHVT8d GitGSZwiD5e0P2Pg1IO+9ObnrsYs9zvl1SNZgRo2rUkMnv+GmHgmVzdkdizKWvxf W/pXK+u/hJEJdoM9kxDCVHahFRXxcrD8Vn9Led9mMCHj2dH4jdGNtAh8Z8bhd7Jt ov8qF7SLNwy2OE8yCUOa3e14zOTPlhqDpabt8Qe8qzRTeWeTULCfqg0bGpQ8boO9 kb/S/S25tJOX8PMMAH656gDnK2FSvc0jLTcdCjT4Zc1AZdUAvm0= -----END CERTIFICATE-----Generated at Mon Dec 22 13:57:43 2025 by rpki-client