This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repo-rpki.idnic.net/repo/5b9752f6-6066-4b38-87cc-9ba63d19e22c/0/FC1C6395AD65E53AB9BC4BBD451AE79234BF63D7.mft
File: FC1C6395AD65E53AB9BC4BBD451AE79234BF63D7.mft (raw, json)
Hash identifier: Andb3VNb1i3lBn1PudeAZ5Ycjbe22oV8P7Nb8a7D93I=
Subject key identifier: D0:A4:8D:9F:8E:B0:78:65:00:4A:20:F3:43:09:49:88:37:E9:03:7D
Authority key identifier: FC:1C:63:95:AD:65:E5:3A:B9:BC:4B:BD:45:1A:E7:92:34:BF:63:D7
Certificate issuer: /CN=FC1C6395AD65E53AB9BC4BBD451AE79234BF63D7
Certificate serial: 799CEA316BCF931CE5471A1AC7135C16F6E1BBFE
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FC1C6395AD65E53AB9BC4BBD451AE79234BF63D7.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/5b9752f6-6066-4b38-87cc-9ba63d19e22c/0/FC1C6395AD65E53AB9BC4BBD451AE79234BF63D7.mft
Manifest number: 04EB
Signing time: Fri 05 Dec 2025 18:12:16 +0000
Manifest this update: Fri 05 Dec 2025 18:07:16 +0000
Manifest next update: Tue 09 Dec 2025 01:33:16 +0000
Files and hashes: 1: FC1C6395AD65E53AB9BC4BBD451AE79234BF63D7.crl (hash: axmcPYGTPGdP0/xoQfF1F9yG1X/z1MfLyXLdcMbKakA=)
2: 3130332e33392e35322e302f32342d3234203d3e203633353033.roa (hash: Bw5xJfUWgUnZZKn8O2MlqxKM9AFTPxg86d/p/QbMwfs=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/5b9752f6-6066-4b38-87cc-9ba63d19e22c/0/FC1C6395AD65E53AB9BC4BBD451AE79234BF63D7.crl
rsync://repo-rpki.idnic.net/repo/5b9752f6-6066-4b38-87cc-9ba63d19e22c/0/FC1C6395AD65E53AB9BC4BBD451AE79234BF63D7.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FC1C6395AD65E53AB9BC4BBD451AE79234BF63D7.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 09 Dec 2025 01:33:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
79:9c:ea:31:6b:cf:93:1c:e5:47:1a:1a:c7:13:5c:16:f6:e1:bb:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=FC1C6395AD65E53AB9BC4BBD451AE79234BF63D7
Validity
Not Before: Dec 5 18:07:16 2025 GMT
Not After : Dec 9 01:33:16 2025 GMT
Subject: CN=D0A48D9F8EB07865004A20F34309498837E9037D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:ab:88:5f:a0:f3:35:49:e5:a3:28:59:5c:89:
df:59:79:81:9c:00:67:2a:76:08:3e:d8:8a:94:8a:
54:6c:cb:99:e6:f3:70:1c:b5:4a:e7:e1:d7:c7:75:
bd:27:9d:4b:2f:3c:65:fd:24:0a:9a:21:fb:ec:4c:
79:e3:52:e5:93:01:72:fa:34:3c:d1:fb:69:8a:48:
a8:3c:e8:5c:71:b6:de:4d:6b:5c:b7:02:17:ba:00:
ed:85:32:6c:40:43:e7:3d:cf:fb:f8:c5:88:5f:41:
d2:59:2e:10:ae:76:7f:28:21:7c:76:c9:39:b6:1e:
27:08:b3:3f:01:d6:4b:d5:4f:77:ab:e1:b4:66:fe:
18:de:fa:a8:8e:69:23:e1:c9:27:ea:aa:2a:21:c8:
28:3f:82:c9:ec:8b:f7:93:65:a3:52:94:00:a6:53:
38:6b:98:e4:66:d1:fb:ad:15:8c:74:c3:b6:ba:91:
ba:23:36:36:d4:ac:37:83:db:ea:e0:65:5a:cc:83:
36:88:dc:0c:f9:3d:a4:b8:48:d5:23:d0:30:52:77:
87:66:75:ed:ea:ef:42:19:09:25:a4:00:cf:80:23:
d2:06:c7:67:a8:1d:96:5a:95:a2:28:53:60:e6:c2:
9e:19:26:c7:e5:ae:9e:4d:0d:cc:9f:c0:05:59:31:
e8:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:A4:8D:9F:8E:B0:78:65:00:4A:20:F3:43:09:49:88:37:E9:03:7D
X509v3 Authority Key Identifier:
keyid:FC:1C:63:95:AD:65:E5:3A:B9:BC:4B:BD:45:1A:E7:92:34:BF:63:D7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/5b9752f6-6066-4b38-87cc-9ba63d19e22c/0/FC1C6395AD65E53AB9BC4BBD451AE79234BF63D7.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FC1C6395AD65E53AB9BC4BBD451AE79234BF63D7.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/5b9752f6-6066-4b38-87cc-9ba63d19e22c/0/FC1C6395AD65E53AB9BC4BBD451AE79234BF63D7.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b5:3f:32:01:47:10:0e:75:ff:bd:fe:09:a3:18:f3:55:5f:a8:
c5:21:a8:fe:b0:7c:bc:9e:75:2d:d9:51:36:5b:87:ad:cc:72:
8a:35:e4:a6:5c:76:67:01:a6:5c:7a:e3:43:9b:c9:a3:20:6a:
97:74:13:52:9c:79:5f:de:b6:4a:39:98:27:1d:a4:95:bc:d7:
24:b5:4b:ec:4b:19:3a:2b:e7:4b:b3:5a:5a:ad:20:a9:a3:2b:
13:cf:98:dc:12:86:d7:1f:a1:0c:29:73:18:83:c9:d2:07:0f:
93:c3:7f:9a:01:83:25:4c:f9:25:f3:7f:88:4e:ed:a2:78:c8:
be:71:35:64:a1:e9:e4:fd:0f:31:e8:d4:e7:d9:76:6d:fd:98:
c0:7b:75:3f:51:20:af:ae:93:ca:86:ac:ea:22:fe:12:fe:23:
84:72:e7:e3:46:13:42:33:38:0e:af:e6:b8:ef:a4:3b:dc:07:
9c:b0:0c:c9:b9:06:c5:54:62:f6:68:bf:58:fb:85:f7:52:0a:
64:6a:7a:93:91:a6:a2:fc:3b:28:04:be:61:de:f1:89:7a:14:
c7:bc:fc:de:16:81:0d:af:b8:44:75:b9:c2:8f:66:46:5b:5c:
0e:71:61:a3:32:7c:9f:25:cd:d9:db:00:f6:c3:80:91:11:7c:
4a:64:a5:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 02:07:46 2025 by rpki-client