This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repo-rpki.idnic.net/repo/ec5f2e4f-45d4-4d62-92cf-d78b5c541a1c/0/FB138C203D8A14318A87CA5B1BC5A19CA221F056.mft
File: FB138C203D8A14318A87CA5B1BC5A19CA221F056.mft (raw, json)
Hash identifier: 6ps1H2Dpb4AB8lmwZj4FcxEot92U4BqklYGglngVYrs=
Subject key identifier: 82:D3:64:1C:44:DA:68:5A:19:0B:89:CB:1B:02:51:41:36:D1:F3:E5
Authority key identifier: FB:13:8C:20:3D:8A:14:31:8A:87:CA:5B:1B:C5:A1:9C:A2:21:F0:56
Certificate issuer: /CN=FB138C203D8A14318A87CA5B1BC5A19CA221F056
Certificate serial: 6882DCE52FB25D8DD225913C2A7C262D5E7A68F6
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FB138C203D8A14318A87CA5B1BC5A19CA221F056.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/ec5f2e4f-45d4-4d62-92cf-d78b5c541a1c/0/FB138C203D8A14318A87CA5B1BC5A19CA221F056.mft
Manifest number: 025F
Signing time: Wed 17 Dec 2025 18:32:12 +0000
Manifest this update: Wed 17 Dec 2025 18:27:12 +0000
Manifest next update: Sun 21 Dec 2025 04:14:12 +0000
Files and hashes: 1: FB138C203D8A14318A87CA5B1BC5A19CA221F056.crl (hash: 5XQAK9rKQ434I38BBk4RenkhmvQeUI3NGbjTlj7qH3A=)
2: 3130332e3138352e34342e302f32332d3234203d3e20313339343536.roa (hash: SWq4la0YFhRphZlV1lpO+Gl0xrKKhaB1W5v4eWGzgWI=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/ec5f2e4f-45d4-4d62-92cf-d78b5c541a1c/0/FB138C203D8A14318A87CA5B1BC5A19CA221F056.crl
rsync://repo-rpki.idnic.net/repo/ec5f2e4f-45d4-4d62-92cf-d78b5c541a1c/0/FB138C203D8A14318A87CA5B1BC5A19CA221F056.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FB138C203D8A14318A87CA5B1BC5A19CA221F056.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 21 Dec 2025 04:14:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
68:82:dc:e5:2f:b2:5d:8d:d2:25:91:3c:2a:7c:26:2d:5e:7a:68:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=FB138C203D8A14318A87CA5B1BC5A19CA221F056
Validity
Not Before: Dec 17 18:27:12 2025 GMT
Not After : Dec 21 04:14:12 2025 GMT
Subject: CN=82D3641C44DA685A190B89CB1B02514136D1F3E5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:dc:e2:d9:f4:8a:d2:da:17:62:ba:b7:67:e5:
99:5f:57:0f:7c:73:98:3e:72:45:27:c6:97:51:07:
6b:f6:69:a2:e4:d4:b4:54:c3:5a:b5:58:c3:ce:26:
43:34:b9:45:80:6f:e7:08:98:69:c2:55:51:bc:29:
ef:0f:13:18:5f:12:d3:38:7a:be:76:e0:bb:87:d8:
3e:15:45:de:55:e0:18:8f:34:3b:98:84:df:fc:13:
a7:14:54:b9:b2:4d:ca:6f:13:c6:59:9f:e0:8c:16:
18:e5:ca:d3:aa:68:51:e2:41:c5:9e:88:cc:90:9d:
d5:56:32:d0:ac:74:a1:b8:2b:99:c5:19:12:22:fe:
e6:39:21:1b:ed:ca:fe:40:a9:97:fc:a7:54:4f:c3:
44:45:2a:8d:1e:ce:ea:29:a1:a1:f2:b7:3a:be:6d:
98:27:4a:77:a7:5a:e0:7b:30:7f:05:a4:5f:30:65:
c6:e4:0e:b5:9b:dd:4d:7a:3a:15:b6:bb:c2:2b:2b:
46:80:5f:1a:0c:a2:51:ab:90:9d:e4:94:1c:30:ec:
12:7e:dc:19:60:7f:c1:61:c9:c0:15:48:92:3c:4b:
f0:6d:37:70:8c:9d:ac:7a:ea:bb:84:a5:ef:79:f7:
34:d5:a3:75:dd:86:33:2e:1e:2a:a5:68:e1:84:2b:
3a:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:D3:64:1C:44:DA:68:5A:19:0B:89:CB:1B:02:51:41:36:D1:F3:E5
X509v3 Authority Key Identifier:
keyid:FB:13:8C:20:3D:8A:14:31:8A:87:CA:5B:1B:C5:A1:9C:A2:21:F0:56
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/ec5f2e4f-45d4-4d62-92cf-d78b5c541a1c/0/FB138C203D8A14318A87CA5B1BC5A19CA221F056.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FB138C203D8A14318A87CA5B1BC5A19CA221F056.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ec5f2e4f-45d4-4d62-92cf-d78b5c541a1c/0/FB138C203D8A14318A87CA5B1BC5A19CA221F056.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5b:c0:45:b4:79:b1:d8:5e:93:57:a0:87:22:8d:da:54:e9:b2:
a1:86:47:e8:c9:d5:f3:48:15:ce:a4:cb:34:57:a5:81:b5:f1:
b7:ef:34:7f:05:7d:b5:7a:8f:01:09:53:e1:49:fe:92:ae:a7:
61:c9:00:f3:04:df:99:52:8e:8e:9f:cd:47:73:8a:16:1d:bf:
fa:74:00:9b:1e:98:64:9c:84:73:50:4d:c9:05:65:a2:7e:8e:
85:da:6b:1e:ad:2b:d5:f3:d4:07:e1:7a:34:39:9d:ff:d0:c2:
8b:da:6b:50:f7:4e:84:73:07:72:92:69:01:37:15:47:45:c8:
a6:5d:f5:ed:7d:c8:11:6d:b6:ba:7b:cd:87:b0:c4:e3:a3:ab:
59:4b:1d:46:d8:ba:87:ef:e1:f7:b9:d8:fd:00:0a:50:d9:10:
2b:38:d8:0c:98:2d:fc:5c:3a:35:a5:83:8b:79:97:7a:a8:7f:
72:cd:5c:35:f4:50:7f:97:d3:d9:14:0a:a8:41:18:6e:b4:6d:
eb:2a:05:65:2f:90:03:29:03:b4:1b:88:c6:83:55:c0:8c:d2:
c0:2a:31:ba:59:57:c2:8f:88:ae:6b:19:8e:35:2d:7c:bc:7a:
1c:46:58:ab:2a:a5:2a:40:9d:35:fd:58:5c:5a:cd:b5:13:68:
49:e7:b4:3c
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUaILc5S+yXY3SJZE8KnwmLV56aPYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRkIxMzhDMjAzRDhBMTQzMThBODdDQTVCMUJDNUExOUNB
MjIxRjA1NjAeFw0yNTEyMTcxODI3MTJaFw0yNTEyMjEwNDE0MTJaMDMxMTAvBgNV
BAMTKDgyRDM2NDFDNDREQTY4NUExOTBCODlDQjFCMDI1MTQxMzZEMUYzRTUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDX3OLZ9IrS2hdiurdn5ZlfVw98
c5g+ckUnxpdRB2v2aaLk1LRUw1q1WMPOJkM0uUWAb+cImGnCVVG8Ke8PExhfEtM4
er524LuH2D4VRd5V4BiPNDuYhN/8E6cUVLmyTcpvE8ZZn+CMFhjlytOqaFHiQcWe
iMyQndVWMtCsdKG4K5nFGRIi/uY5IRvtyv5AqZf8p1RPw0RFKo0ezuopoaHytzq+
bZgnSnenWuB7MH8FpF8wZcbkDrWb3U16OhW2u8IrK0aAXxoMolGrkJ3klBww7BJ+
3Blgf8FhycAVSJI8S/BtN3CMnax66ruEpe959zTVo3XdhjMuHiqlaOGEKzoxAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQUgtNkHETaaFoZC4nLGwJRQTbR8+UwHwYDVR0j
BBgwFoAU+xOMID2KFDGKh8pbG8WhnKIh8FYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l
YzVmMmU0Zi00NWQ0LTRkNjItOTJjZi1kNzhiNWM1NDFhMWMvMC9GQjEzOEMyMDNE
OEExNDMxOEE4N0NBNUIxQkM1QTE5Q0EyMjFGMDU2LmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvRkIxMzhDMjAzRDhBMTQzMThBODdDQTVCMUJDNUExOUNBMjIx
RjA1Ni5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6
Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZWM1ZjJlNGYtNDVkNC00ZDYyLTky
Y2YtZDc4YjVjNTQxYTFjLzAvRkIxMzhDMjAzRDhBMTQzMThBODdDQTVCMUJDNUEx
OUNBMjIxRjA1Ni5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBAFvARbR5sdhek1eghyKN2lTpsqGGR+jJ1fNI
Fc6kyzRXpYG18bfvNH8FfbV6jwEJU+FJ/pKup2HJAPME35lSjo6fzUdzihYdv/p0
AJsemGSchHNQTckFZaJ+joXaax6tK9Xz1AfhejQ5nf/Qwovaa1D3ToRzB3KSaQE3
FUdFyKZd9e19yBFttrp7zYewxOOjq1lLHUbYuofv4fe52P0AClDZECs42AyYLfxc
OjWlg4t5l3qof3LNXDX0UH+X09kUCqhBGG60besqBWUvkAMpA7QbiMaDVcCM0sAq
MbpZV8KPiK5rGY41LXy8ehxGWKsqpSpAnTX9WFxazbUTaEnntDw=
-----END CERTIFICATE-----
Generated at Fri Dec 19 09:45:01 2025 by rpki-client