This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/ad87beed-6330-4f33-9105-87722cdf2dd0/0/FB3FCC1A69B1BD92D6A319D7FD820EEECE674245.mft File: FB3FCC1A69B1BD92D6A319D7FD820EEECE674245.mft (raw, json) Hash identifier: mxiAy411tF9t4m6IAmZvhBN1tYUXnvGaZbr8jPRpgSk= Subject key identifier: 55:9D:69:AC:EC:30:7B:40:27:1C:6E:D2:91:C8:91:D7:35:27:2A:47 Authority key identifier: FB:3F:CC:1A:69:B1:BD:92:D6:A3:19:D7:FD:82:0E:EE:CE:67:42:45 Certificate issuer: /CN=FB3FCC1A69B1BD92D6A319D7FD820EEECE674245 Certificate serial: 0B9E8D0A034EB73AB042716CE4731FCE0FF89313 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FB3FCC1A69B1BD92D6A319D7FD820EEECE674245.cer Subject info access: rsync://repo-rpki.idnic.net/repo/ad87beed-6330-4f33-9105-87722cdf2dd0/0/FB3FCC1A69B1BD92D6A319D7FD820EEECE674245.mft Manifest number: 03AA Signing time: Tue 02 Dec 2025 15:11:30 +0000 Manifest this update: Tue 02 Dec 2025 15:06:30 +0000 Manifest next update: Fri 05 Dec 2025 21:46:30 +0000 Files and hashes: 1: FB3FCC1A69B1BD92D6A319D7FD820EEECE674245.crl (hash: cbxTNhM2EH18ZNL1PvWYRdRgcni6DY7oD8KGR/7FNA4=) 2: 3130332e3136342e3137302e302f32332d3234203d3e203137393935.roa (hash: KS9w1B5P8a3jbKsmFzr3W5flDVbhE11L0B9cjjDxpnE=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/ad87beed-6330-4f33-9105-87722cdf2dd0/0/FB3FCC1A69B1BD92D6A319D7FD820EEECE674245.crl rsync://repo-rpki.idnic.net/repo/ad87beed-6330-4f33-9105-87722cdf2dd0/0/FB3FCC1A69B1BD92D6A319D7FD820EEECE674245.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FB3FCC1A69B1BD92D6A319D7FD820EEECE674245.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 05 Dec 2025 21:46:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0b:9e:8d:0a:03:4e:b7:3a:b0:42:71:6c:e4:73:1f:ce:0f:f8:93:13 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=FB3FCC1A69B1BD92D6A319D7FD820EEECE674245 Validity Not Before: Dec 2 15:06:30 2025 GMT Not After : Dec 5 21:46:30 2025 GMT Subject: CN=559D69ACEC307B40271C6ED291C891D735272A47 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:81:9a:8b:f9:db:a3:24:42:44:c5:fd:be:3e: 98:44:f3:54:d1:44:11:d7:23:e5:c8:cc:f4:3d:69: ef:25:ef:56:f7:e9:51:0e:cb:c7:e7:94:36:e4:0c: 28:a5:a0:ee:9a:c9:a2:3a:fc:b1:ba:90:07:16:4e: 44:55:25:c7:7d:00:5b:53:59:84:50:0e:4c:7b:5e: 9e:7f:85:76:25:43:81:19:12:9d:7d:08:e0:15:3b: 91:d1:9e:86:22:7f:06:76:aa:22:ab:fb:7c:8a:df: 75:95:7d:20:40:87:87:c0:e5:f3:76:d6:91:a9:8d: f2:42:89:84:40:c0:4c:b5:a5:80:c6:90:9b:18:1f: 9b:26:d5:88:5c:12:03:36:0a:78:e9:ba:cf:57:cf: bb:dd:0b:f4:81:16:53:f6:e9:c9:e9:f5:02:f7:a7: f0:a6:73:59:d4:70:9c:a5:7b:e6:65:85:f8:87:0a: f6:da:55:e9:bc:51:06:8d:6a:ad:0a:07:09:83:fd: 05:06:c8:37:61:b0:08:86:86:59:9a:f5:86:42:64: 73:ac:56:b3:60:b8:12:f8:11:81:57:34:24:bd:07: 29:5c:66:fe:cb:54:68:56:c5:b9:7a:59:e6:6d:60: 81:7b:e6:74:9a:60:15:fa:e2:10:a9:ed:2b:eb:5a: 25:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 55:9D:69:AC:EC:30:7B:40:27:1C:6E:D2:91:C8:91:D7:35:27:2A:47 X509v3 Authority Key Identifier: keyid:FB:3F:CC:1A:69:B1:BD:92:D6:A3:19:D7:FD:82:0E:EE:CE:67:42:45 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/ad87beed-6330-4f33-9105-87722cdf2dd0/0/FB3FCC1A69B1BD92D6A319D7FD820EEECE674245.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FB3FCC1A69B1BD92D6A319D7FD820EEECE674245.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ad87beed-6330-4f33-9105-87722cdf2dd0/0/FB3FCC1A69B1BD92D6A319D7FD820EEECE674245.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a4:da:12:42:66:38:d8:47:2d:4d:b3:de:bc:a9:57:8a:95:2b: 92:44:6b:ab:df:37:77:04:3b:75:a2:28:ac:a4:bc:04:8a:d0: 26:51:0c:cd:de:f8:db:8a:e1:4f:d9:23:8e:e4:84:7f:17:3d: 5e:c7:55:38:8a:60:09:a5:4c:db:4c:ae:a9:65:7c:64:72:90: b1:81:ba:33:4c:b5:09:ce:ca:95:34:d2:f3:78:00:3c:d3:fc: 41:d0:e8:59:dd:df:60:70:81:f2:4a:1a:83:55:3b:b2:8c:85: 0b:43:36:24:db:e4:83:f8:f8:0f:8a:fd:10:e7:30:7d:65:af: 77:4d:c2:79:44:11:a8:3b:c0:80:8c:75:6d:51:31:d4:09:75: 1b:63:ba:f0:c4:70:85:4a:3a:b5:ff:3d:10:68:eb:cb:aa:ea: 8c:d0:34:59:2b:fe:dd:a9:40:02:36:09:bd:3a:11:bc:fb:29: 55:55:c0:c1:87:ac:a7:b1:54:4d:ca:f9:36:d0:5b:71:a9:0f: 67:6b:9f:02:68:6e:a2:f8:fc:44:f7:4b:09:0c:2c:83:eb:1b: a5:f4:f5:ae:71:6f:e8:98:93:db:6a:53:ed:9f:69:4c:8d:78: 33:67:0a:d5:68:0a:5a:4d:cb:8b:c3:10:5e:bb:f0:30:10:df: 4a:5a:b9:db -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUC56NCgNOtzqwQnFs5HMfzg/4kxMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRkIzRkNDMUE2OUIxQkQ5MkQ2QTMxOUQ3RkQ4MjBFRUVD RTY3NDI0NTAeFw0yNTEyMDIxNTA2MzBaFw0yNTEyMDUyMTQ2MzBaMDMxMTAvBgNV BAMTKDU1OUQ2OUFDRUMzMDdCNDAyNzFDNkVEMjkxQzg5MUQ3MzUyNzJBNDcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDjgZqL+dujJEJExf2+PphE81TR RBHXI+XIzPQ9ae8l71b36VEOy8fnlDbkDCiloO6ayaI6/LG6kAcWTkRVJcd9AFtT WYRQDkx7Xp5/hXYlQ4EZEp19COAVO5HRnoYifwZ2qiKr+3yK33WVfSBAh4fA5fN2 1pGpjfJCiYRAwEy1pYDGkJsYH5sm1YhcEgM2Cnjpus9Xz7vdC/SBFlP26cnp9QL3 p/Cmc1nUcJyle+ZlhfiHCvbaVem8UQaNaq0KBwmD/QUGyDdhsAiGhlma9YZCZHOs VrNguBL4EYFXNCS9BylcZv7LVGhWxbl6WeZtYIF75nSaYBX64hCp7SvrWiV/AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUVZ1prOwwe0AnHG7SkciR1zUnKkcwHwYDVR0j BBgwFoAU+z/MGmmxvZLWoxnX/YIO7s5nQkUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h ZDg3YmVlZC02MzMwLTRmMzMtOTEwNS04NzcyMmNkZjJkZDAvMC9GQjNGQ0MxQTY5 QjFCRDkyRDZBMzE5RDdGRDgyMEVFRUNFNjc0MjQ1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRkIzRkNDMUE2OUIxQkQ5MkQ2QTMxOUQ3RkQ4MjBFRUVDRTY3 NDI0NS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYWQ4N2JlZWQtNjMzMC00ZjMzLTkx MDUtODc3MjJjZGYyZGQwLzAvRkIzRkNDMUE2OUIxQkQ5MkQ2QTMxOUQ3RkQ4MjBF RUVDRTY3NDI0NS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKTaEkJmONhHLU2z3rypV4qVK5JEa6vfN3cE O3WiKKykvASK0CZRDM3e+NuK4U/ZI47khH8XPV7HVTiKYAmlTNtMrqllfGRykLGB ujNMtQnOypU00vN4ADzT/EHQ6Fnd32BwgfJKGoNVO7KMhQtDNiTb5IP4+A+K/RDn MH1lr3dNwnlEEag7wICMdW1RMdQJdRtjuvDEcIVKOrX/PRBo68uq6ozQNFkr/t2p QAI2Cb06Ebz7KVVVwMGHrKexVE3K+TbQW3GpD2drnwJobqL4/ET3SwkMLIPrG6X0 9a5xb+iYk9tqU+2faUyNeDNnCtVoClpNy4vDEF678DAQ30pauds= -----END CERTIFICATE-----Generated at Wed Dec 3 14:48:48 2025 by rpki-client