This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repo-rpki.idnic.net/repo/5cc70f7d-33fe-4df2-81e5-dc0d55ac5170/0/FB1D4F9139A61DF4B91E31270F3D2A1C07B35CE1.mft
File: FB1D4F9139A61DF4B91E31270F3D2A1C07B35CE1.mft (raw, json)
Hash identifier: UfUFOMneR5qDBOP63sZ7ZVFmoP1VvBkAU2UB4ldaqcc=
Subject key identifier: C1:C2:D2:13:7D:66:5E:3F:87:07:D9:CA:2F:76:FB:75:3D:AD:CB:3F
Authority key identifier: FB:1D:4F:91:39:A6:1D:F4:B9:1E:31:27:0F:3D:2A:1C:07:B3:5C:E1
Certificate issuer: /CN=FB1D4F9139A61DF4B91E31270F3D2A1C07B35CE1
Certificate serial: 5DE835176E49A57D424A7F2DC3C3A709A2336432
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FB1D4F9139A61DF4B91E31270F3D2A1C07B35CE1.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/5cc70f7d-33fe-4df2-81e5-dc0d55ac5170/0/FB1D4F9139A61DF4B91E31270F3D2A1C07B35CE1.mft
Manifest number: 01CC
Signing time: Sun 07 Dec 2025 01:32:12 +0000
Manifest this update: Sun 07 Dec 2025 01:27:12 +0000
Manifest next update: Wed 10 Dec 2025 08:53:12 +0000
Files and hashes: 1: 3130332e3134392e3131382e302f32332d3234203d3e20313431303535.roa (hash: IBRiB5ZmLj4+M80KfLmmLbAbFNEpKpmTUiD30MwcLOE=)
2: FB1D4F9139A61DF4B91E31270F3D2A1C07B35CE1.crl (hash: N3AXbanb2n4M6CVXqRS1z6IlrH5ghQ4e36ty3dBicig=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/5cc70f7d-33fe-4df2-81e5-dc0d55ac5170/0/FB1D4F9139A61DF4B91E31270F3D2A1C07B35CE1.crl
rsync://repo-rpki.idnic.net/repo/5cc70f7d-33fe-4df2-81e5-dc0d55ac5170/0/FB1D4F9139A61DF4B91E31270F3D2A1C07B35CE1.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FB1D4F9139A61DF4B91E31270F3D2A1C07B35CE1.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 09 Dec 2025 15:57:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5d:e8:35:17:6e:49:a5:7d:42:4a:7f:2d:c3:c3:a7:09:a2:33:64:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=FB1D4F9139A61DF4B91E31270F3D2A1C07B35CE1
Validity
Not Before: Dec 7 01:27:12 2025 GMT
Not After : Dec 10 08:53:12 2025 GMT
Subject: CN=C1C2D2137D665E3F8707D9CA2F76FB753DADCB3F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:81:83:4e:3e:95:00:b1:74:4f:df:cf:29:93:
7b:ed:f3:bb:e9:26:09:03:b8:3a:f1:b4:8f:aa:9c:
74:db:2b:a3:5d:70:87:1c:15:a5:12:50:35:17:33:
89:49:be:1c:a9:b1:6f:b8:41:6c:bb:a8:83:17:b9:
31:7f:69:d6:2b:82:ee:64:4a:97:6d:15:29:e7:60:
9b:71:9e:a8:85:0b:81:e4:37:65:6f:df:ff:da:92:
2e:0d:e7:e9:a4:00:3c:c3:0d:9a:58:3f:93:4d:d4:
25:9e:a1:69:67:d0:42:f2:96:f0:f8:7f:b5:b9:26:
07:2e:65:f5:64:d5:db:11:43:e3:91:df:91:d6:af:
13:b4:40:2f:3f:4f:86:2a:09:33:ff:26:68:37:f6:
36:1c:53:af:48:93:98:cc:86:55:7d:4c:e3:d2:36:
b2:b2:92:82:e6:36:f6:6b:1b:6f:66:e2:a9:a2:db:
80:1c:76:af:76:e1:45:a5:81:46:0b:f7:8f:6c:b9:
f8:f2:ac:fd:f9:53:4f:ad:5d:f0:b7:46:33:29:cb:
d4:09:91:38:b6:c5:b4:43:3d:fa:fb:91:72:c7:fe:
b2:7e:5e:7f:4d:30:9e:11:c1:cc:b1:ec:47:ff:bf:
8c:26:e2:ce:07:b2:c3:ea:77:06:6e:21:4e:5f:66:
6a:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:C2:D2:13:7D:66:5E:3F:87:07:D9:CA:2F:76:FB:75:3D:AD:CB:3F
X509v3 Authority Key Identifier:
keyid:FB:1D:4F:91:39:A6:1D:F4:B9:1E:31:27:0F:3D:2A:1C:07:B3:5C:E1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/5cc70f7d-33fe-4df2-81e5-dc0d55ac5170/0/FB1D4F9139A61DF4B91E31270F3D2A1C07B35CE1.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FB1D4F9139A61DF4B91E31270F3D2A1C07B35CE1.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/5cc70f7d-33fe-4df2-81e5-dc0d55ac5170/0/FB1D4F9139A61DF4B91E31270F3D2A1C07B35CE1.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
08:89:2d:60:27:f2:c4:97:99:b7:9e:df:48:9f:b7:3f:b9:25:
56:54:14:fe:1c:6e:c3:29:1b:3d:ad:af:26:14:06:21:f8:a4:
01:13:91:a4:e2:7f:ed:29:d4:6b:ee:0d:50:6a:a5:a9:a7:9f:
f9:0f:58:49:d2:c8:0c:f3:f0:39:89:7c:41:f1:90:7d:d7:c5:
f9:97:70:75:f7:16:03:c3:71:19:d6:08:a3:10:34:00:e9:44:
29:b7:09:47:39:ff:2c:79:2f:4c:9d:e5:0e:59:2e:78:ca:f9:
41:ae:c2:e5:2a:f9:69:85:42:fd:d2:ea:96:2b:ac:d5:fb:be:
57:26:19:1f:87:19:79:6d:0c:c0:e9:3a:b4:b9:27:b8:6e:a2:
90:e2:82:f2:b4:72:bd:1f:10:d6:ef:57:da:5e:5e:bc:42:6c:
77:ce:45:7c:a3:ca:01:35:2f:ea:b5:a2:7b:74:8e:e0:97:91:
6d:1a:da:0d:8a:3f:80:e7:31:5c:9d:7f:8c:1f:48:c0:ef:e7:
0a:1a:97:e5:8e:76:7a:aa:04:df:f0:3c:33:e1:5b:1c:1d:4f:
ca:af:c0:ab:c3:43:99:70:46:08:90:56:57:9b:b8:b2:17:34:
d0:4c:b9:d1:ba:bb:5e:07:5f:b5:ed:79:ee:41:18:e6:66:f7:
8c:5c:43:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 04:57:42 2025 by rpki-client