This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/5cc70f7d-33fe-4df2-81e5-dc0d55ac5170/0/FB1D4F9139A61DF4B91E31270F3D2A1C07B35CE1.mft File: FB1D4F9139A61DF4B91E31270F3D2A1C07B35CE1.mft (raw, json) Hash identifier: CRE0Mlc9AVmf1K+gOihegUt9g561C8S4uVvfePC3h9E= Subject key identifier: 28:F9:55:8F:B5:BE:CE:BE:6C:A1:43:FE:AA:4F:05:50:A1:8C:81:27 Authority key identifier: FB:1D:4F:91:39:A6:1D:F4:B9:1E:31:27:0F:3D:2A:1C:07:B3:5C:E1 Certificate issuer: /CN=FB1D4F9139A61DF4B91E31270F3D2A1C07B35CE1 Certificate serial: 446128B3AF444A8615087D3B0DA9621CD24E20D5 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FB1D4F9139A61DF4B91E31270F3D2A1C07B35CE1.cer Subject info access: rsync://repo-rpki.idnic.net/repo/5cc70f7d-33fe-4df2-81e5-dc0d55ac5170/0/FB1D4F9139A61DF4B91E31270F3D2A1C07B35CE1.mft Manifest number: 01CA Signing time: Tue 02 Dec 2025 14:22:12 +0000 Manifest this update: Tue 02 Dec 2025 14:17:12 +0000 Manifest next update: Fri 05 Dec 2025 15:26:12 +0000 Files and hashes: 1: 3130332e3134392e3131382e302f32332d3234203d3e20313431303535.roa (hash: IBRiB5ZmLj4+M80KfLmmLbAbFNEpKpmTUiD30MwcLOE=) 2: FB1D4F9139A61DF4B91E31270F3D2A1C07B35CE1.crl (hash: qHuWlQC4siDl5Bek8gYECQ2S0vIz3yAIIjrncbSxh9k=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/5cc70f7d-33fe-4df2-81e5-dc0d55ac5170/0/FB1D4F9139A61DF4B91E31270F3D2A1C07B35CE1.crl rsync://repo-rpki.idnic.net/repo/5cc70f7d-33fe-4df2-81e5-dc0d55ac5170/0/FB1D4F9139A61DF4B91E31270F3D2A1C07B35CE1.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FB1D4F9139A61DF4B91E31270F3D2A1C07B35CE1.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 05 Dec 2025 15:26:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 44:61:28:b3:af:44:4a:86:15:08:7d:3b:0d:a9:62:1c:d2:4e:20:d5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=FB1D4F9139A61DF4B91E31270F3D2A1C07B35CE1 Validity Not Before: Dec 2 14:17:12 2025 GMT Not After : Dec 5 15:26:12 2025 GMT Subject: CN=28F9558FB5BECEBE6CA143FEAA4F0550A18C8127 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:ff:39:d2:a7:b8:e9:13:7a:2a:28:a1:aa:ee: 22:96:a6:fb:cc:87:09:9b:d4:a5:94:d8:d3:70:6c: 2d:6f:4b:f0:9f:99:e2:9a:cd:78:9d:9c:dd:ed:0d: 7a:65:7d:7c:5a:a0:e9:23:e0:0b:b1:3c:59:fd:b0: 35:47:f7:b6:e2:66:c5:c9:66:8d:ab:bc:31:d6:41: 64:5a:bf:cf:86:fe:64:7f:47:dd:df:1a:eb:fd:8b: dd:37:d6:aa:5c:50:32:44:3d:0c:ba:bc:d9:28:08: d0:54:89:26:ab:dc:3f:56:21:80:79:7e:5f:f7:e2: eb:ff:4f:d3:eb:f2:e7:2c:4d:27:d4:db:56:59:df: e7:a1:97:8c:75:ab:a2:a9:ef:60:59:85:45:34:00: 1e:a1:5f:f5:43:10:39:72:c5:aa:90:1c:80:e3:a2: 9e:c5:25:d1:83:c6:55:32:a9:c8:c6:2c:37:f6:21: 06:2a:cc:42:2e:a3:f7:bb:d5:ef:bd:06:57:4b:f1: 3a:70:c6:55:a2:a3:b6:f1:98:02:06:29:75:a8:bc: 35:5c:f9:9a:00:ff:de:ea:2f:5e:c8:b6:e1:60:9d: 0e:dd:98:e2:7b:0f:85:41:57:71:b0:54:30:69:d9: 8a:fd:6b:51:53:4b:b1:c9:89:ad:26:9a:9e:ca:95: 85:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:F9:55:8F:B5:BE:CE:BE:6C:A1:43:FE:AA:4F:05:50:A1:8C:81:27 X509v3 Authority Key Identifier: keyid:FB:1D:4F:91:39:A6:1D:F4:B9:1E:31:27:0F:3D:2A:1C:07:B3:5C:E1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/5cc70f7d-33fe-4df2-81e5-dc0d55ac5170/0/FB1D4F9139A61DF4B91E31270F3D2A1C07B35CE1.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FB1D4F9139A61DF4B91E31270F3D2A1C07B35CE1.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/5cc70f7d-33fe-4df2-81e5-dc0d55ac5170/0/FB1D4F9139A61DF4B91E31270F3D2A1C07B35CE1.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6b:bc:e3:98:ea:e9:e3:53:65:ee:b9:09:5b:9b:2b:f2:8c:19: 97:0d:b4:bb:40:41:2e:3f:b7:52:af:98:05:98:9f:f0:7f:c3: 1a:b7:6b:d9:34:67:1d:23:93:e8:90:36:81:e9:e2:a9:a4:12: 3d:8d:1e:04:1a:81:9a:e0:83:75:fb:58:c7:0b:16:c2:20:51: 13:83:c0:18:a2:e9:c5:6e:85:5b:4d:ec:2a:8f:87:c3:4a:47: f0:3e:6b:3f:11:11:9d:8b:57:8c:f5:91:d2:ed:ba:da:86:51: 22:68:d1:c5:e9:4f:df:6f:09:de:c9:1c:12:48:da:c1:c5:37: c0:f9:5c:8f:e5:45:06:0a:a0:86:a0:d0:f0:8d:55:fb:45:f0: 4c:fd:a0:c5:f7:8e:d4:ac:0d:75:a4:0e:74:ee:7e:f5:da:55: ea:ab:1e:ff:5d:3d:d1:c4:28:c9:85:a3:2a:5a:d8:68:50:25: a7:2f:84:ce:00:22:ee:93:a3:47:81:4f:bb:8d:49:50:e5:4d: 08:e8:e0:2e:b7:24:7f:45:ea:25:b1:3f:2c:72:85:51:e6:ac: bb:33:1c:84:31:60:0d:44:20:a4:75:00:cd:87:db:ea:71:50: 64:99:50:90:df:89:09:32:a8:f3:8b:62:bb:1f:58:d0:c9:03: e3:12:b7:f0 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIURGEos69ESoYVCH07DaliHNJOINUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRkIxRDRGOTEzOUE2MURGNEI5MUUzMTI3MEYzRDJBMUMw N0IzNUNFMTAeFw0yNTEyMDIxNDE3MTJaFw0yNTEyMDUxNTI2MTJaMDMxMTAvBgNV BAMTKDI4Rjk1NThGQjVCRUNFQkU2Q0ExNDNGRUFBNEYwNTUwQTE4QzgxMjcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCv/znSp7jpE3oqKKGq7iKWpvvM hwmb1KWU2NNwbC1vS/CfmeKazXidnN3tDXplfXxaoOkj4AuxPFn9sDVH97biZsXJ Zo2rvDHWQWRav8+G/mR/R93fGuv9i9031qpcUDJEPQy6vNkoCNBUiSar3D9WIYB5 fl/34uv/T9Pr8ucsTSfU21ZZ3+ehl4x1q6Kp72BZhUU0AB6hX/VDEDlyxaqQHIDj op7FJdGDxlUyqcjGLDf2IQYqzEIuo/e71e+9BldL8TpwxlWio7bxmAIGKXWovDVc +ZoA/97qL17ItuFgnQ7dmOJ7D4VBV3GwVDBp2Yr9a1FTS7HJia0mmp7KlYXLAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUKPlVj7W+zr5soUP+qk8FUKGMgScwHwYDVR0j BBgwFoAU+x1PkTmmHfS5HjEnDz0qHAezXOEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 Y2M3MGY3ZC0zM2ZlLTRkZjItODFlNS1kYzBkNTVhYzUxNzAvMC9GQjFENEY5MTM5 QTYxREY0QjkxRTMxMjcwRjNEMkExQzA3QjM1Q0UxLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRkIxRDRGOTEzOUE2MURGNEI5MUUzMTI3MEYzRDJBMUMwN0Iz NUNFMS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNWNjNzBmN2QtMzNmZS00ZGYyLTgx ZTUtZGMwZDU1YWM1MTcwLzAvRkIxRDRGOTEzOUE2MURGNEI5MUUzMTI3MEYzRDJB MUMwN0IzNUNFMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGu845jq6eNTZe65CVubK/KMGZcNtLtAQS4/ t1KvmAWYn/B/wxq3a9k0Zx0jk+iQNoHp4qmkEj2NHgQagZrgg3X7WMcLFsIgUROD wBii6cVuhVtN7CqPh8NKR/A+az8REZ2LV4z1kdLtutqGUSJo0cXpT99vCd7JHBJI 2sHFN8D5XI/lRQYKoIag0PCNVftF8Ez9oMX3jtSsDXWkDnTufvXaVeqrHv9dPdHE KMmFoypa2GhQJacvhM4AIu6To0eBT7uNSVDlTQjo4C63JH9F6iWxPyxyhVHmrLsz HIQxYA1EIKR1AM2H2+pxUGSZUJDfiQkyqPOLYrsfWNDJA+MSt/A= -----END CERTIFICATE-----Generated at Wed Dec 3 14:55:47 2025 by rpki-client