This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/8165e481-5a79-4868-a4e4-facfd922d813/0/FB3AAFE074610C85854BE75082EC16E60A126879.mft File: FB3AAFE074610C85854BE75082EC16E60A126879.mft (raw, json) Hash identifier: sdVd/nnxtde7Wkry5XCISJlx55d1+Gc3oYZ6xYwSRgo= Subject key identifier: CB:A2:67:32:85:C9:AD:68:57:1B:D1:47:BE:D9:D7:B8:9F:15:0C:D5 Authority key identifier: FB:3A:AF:E0:74:61:0C:85:85:4B:E7:50:82:EC:16:E6:0A:12:68:79 Certificate issuer: /CN=FB3AAFE074610C85854BE75082EC16E60A126879 Certificate serial: 67B90F203419AB9D13F5A55B7C3A565301B1C08F Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FB3AAFE074610C85854BE75082EC16E60A126879.cer Subject info access: rsync://repo-rpki.idnic.net/repo/8165e481-5a79-4868-a4e4-facfd922d813/0/FB3AAFE074610C85854BE75082EC16E60A126879.mft Manifest number: 0112 Signing time: Fri 05 Dec 2025 15:00:45 +0000 Manifest this update: Fri 05 Dec 2025 14:55:45 +0000 Manifest next update: Tue 09 Dec 2025 01:31:45 +0000 Files and hashes: 1: FB3AAFE074610C85854BE75082EC16E60A126879.crl (hash: IP656YU0yejBQiWytqAol7BlMIUST/vZaBoiDQymbbY=) 2: 3130332e3135302e3135392e302f32342d3234203d3e20313430343331.roa (hash: e3s751+uHuq2vHbykLAhhBQ6L17VHuRd5Etg83ChrxA=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/8165e481-5a79-4868-a4e4-facfd922d813/0/FB3AAFE074610C85854BE75082EC16E60A126879.crl rsync://repo-rpki.idnic.net/repo/8165e481-5a79-4868-a4e4-facfd922d813/0/FB3AAFE074610C85854BE75082EC16E60A126879.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FB3AAFE074610C85854BE75082EC16E60A126879.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 09 Dec 2025 01:31:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 67:b9:0f:20:34:19:ab:9d:13:f5:a5:5b:7c:3a:56:53:01:b1:c0:8f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=FB3AAFE074610C85854BE75082EC16E60A126879 Validity Not Before: Dec 5 14:55:45 2025 GMT Not After : Dec 9 01:31:45 2025 GMT Subject: CN=CBA2673285C9AD68571BD147BED9D7B89F150CD5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:62:3f:65:1a:b0:51:75:a7:a3:6c:03:a4:c1: 18:3a:02:a5:82:98:48:48:78:58:df:57:71:53:21: 58:0b:81:42:1c:79:d0:eb:4f:ee:0a:38:f3:70:b2: 4d:d6:ab:2a:ad:f2:d6:43:86:6e:ed:96:70:d7:a1: a7:76:26:2b:3b:44:cc:3c:9f:fe:96:dd:23:05:fc: 1a:c5:e2:17:5b:ef:d5:7f:eb:fc:63:8f:2c:84:bb: 0d:22:53:cd:fa:42:26:99:51:e4:08:f9:4c:29:29: 5e:2e:a2:d1:f4:d8:89:ff:59:03:41:42:29:ca:3e: 0c:e1:99:9b:8e:9a:1f:f1:8e:d4:25:3e:09:6e:8d: 8a:7f:33:82:2c:fa:a4:1d:2e:1e:ef:61:6d:6b:6f: 48:23:54:0d:05:0d:05:0c:39:82:82:23:02:f2:e6: 91:f5:7b:87:44:78:59:84:56:b3:65:7b:95:bb:70: a3:e1:44:d8:38:10:99:91:e5:f4:11:a7:d0:02:46: ec:a3:d8:26:ee:7b:00:0f:74:2f:18:7e:64:f9:de: ff:1b:95:84:40:f2:64:90:e7:40:e9:7d:5b:0d:6c: 90:a9:9c:48:39:7f:af:17:33:e4:68:69:28:24:49: fc:46:08:ef:a8:4a:d0:f2:d4:92:bb:b7:19:2e:8a: 9e:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CB:A2:67:32:85:C9:AD:68:57:1B:D1:47:BE:D9:D7:B8:9F:15:0C:D5 X509v3 Authority Key Identifier: keyid:FB:3A:AF:E0:74:61:0C:85:85:4B:E7:50:82:EC:16:E6:0A:12:68:79 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/8165e481-5a79-4868-a4e4-facfd922d813/0/FB3AAFE074610C85854BE75082EC16E60A126879.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FB3AAFE074610C85854BE75082EC16E60A126879.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/8165e481-5a79-4868-a4e4-facfd922d813/0/FB3AAFE074610C85854BE75082EC16E60A126879.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0b:6f:46:bd:7a:e3:28:0d:3f:dd:9b:28:5e:88:6a:62:cc:9b: 50:83:44:1f:6b:8b:6e:e7:be:d5:0e:ef:a0:39:1b:83:09:9a: a6:20:72:02:7c:e9:f7:5c:9e:44:de:58:b1:09:d9:55:13:30: 6e:d5:95:b7:26:45:56:18:1e:44:25:5a:f1:06:94:8a:af:a8: 20:5a:c3:74:ee:23:7a:68:72:a0:3b:bd:13:3d:11:5a:5d:87: 6a:29:ed:df:32:97:4d:ac:4c:27:f0:d2:f5:bb:f9:a2:98:58: a0:5a:5a:20:e3:5c:01:3b:86:57:85:ba:a3:ac:1e:23:85:94: 6e:73:ab:01:46:56:16:1d:38:10:4e:74:52:56:00:c0:4d:da: 4d:72:8a:b8:d2:a0:7b:3f:67:f0:a9:35:3c:63:b8:c7:de:2e: 4c:2b:11:10:b6:21:bf:61:17:9b:85:f4:e4:7c:8f:10:a2:a4: 06:a0:97:9d:6a:c5:b2:0b:1d:29:09:02:e9:c3:da:0c:bc:df: 9b:9b:d6:b0:1f:17:43:94:58:01:ce:fa:74:df:7c:31:5a:01: ea:b0:4d:e6:f2:a2:d3:35:b1:75:99:61:03:12:16:03:22:db: 9b:df:09:10:27:9c:2e:ae:95:cd:3b:5c:e4:2f:4b:08:14:65: d4:35:18:e7 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUZ7kPIDQZq50T9aVbfDpWUwGxwI8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRkIzQUFGRTA3NDYxMEM4NTg1NEJFNzUwODJFQzE2RTYw QTEyNjg3OTAeFw0yNTEyMDUxNDU1NDVaFw0yNTEyMDkwMTMxNDVaMDMxMTAvBgNV BAMTKENCQTI2NzMyODVDOUFENjg1NzFCRDE0N0JFRDlEN0I4OUYxNTBDRDUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/Yj9lGrBRdaejbAOkwRg6AqWC mEhIeFjfV3FTIVgLgUIcedDrT+4KOPNwsk3Wqyqt8tZDhm7tlnDXoad2Jis7RMw8 n/6W3SMF/BrF4hdb79V/6/xjjyyEuw0iU836QiaZUeQI+UwpKV4uotH02In/WQNB QinKPgzhmZuOmh/xjtQlPglujYp/M4Is+qQdLh7vYW1rb0gjVA0FDQUMOYKCIwLy 5pH1e4dEeFmEVrNle5W7cKPhRNg4EJmR5fQRp9ACRuyj2CbuewAPdC8YfmT53v8b lYRA8mSQ50DpfVsNbJCpnEg5f68XM+RoaSgkSfxGCO+oStDy1JK7txkuip4FAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUy6JnMoXJrWhXG9FHvtnXuJ8VDNUwHwYDVR0j BBgwFoAU+zqv4HRhDIWFS+dQguwW5goSaHkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 MTY1ZTQ4MS01YTc5LTQ4NjgtYTRlNC1mYWNmZDkyMmQ4MTMvMC9GQjNBQUZFMDc0 NjEwQzg1ODU0QkU3NTA4MkVDMTZFNjBBMTI2ODc5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRkIzQUFGRTA3NDYxMEM4NTg1NEJFNzUwODJFQzE2RTYwQTEy Njg3OS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vODE2NWU0ODEtNWE3OS00ODY4LWE0 ZTQtZmFjZmQ5MjJkODEzLzAvRkIzQUFGRTA3NDYxMEM4NTg1NEJFNzUwODJFQzE2 RTYwQTEyNjg3OS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAtvRr164ygNP92bKF6IamLMm1CDRB9ri27n vtUO76A5G4MJmqYgcgJ86fdcnkTeWLEJ2VUTMG7VlbcmRVYYHkQlWvEGlIqvqCBa w3TuI3pocqA7vRM9EVpdh2op7d8yl02sTCfw0vW7+aKYWKBaWiDjXAE7hleFuqOs HiOFlG5zqwFGVhYdOBBOdFJWAMBN2k1yirjSoHs/Z/CpNTxjuMfeLkwrERC2Ib9h F5uF9OR8jxCipAagl51qxbILHSkJAunD2gy835ub1rAfF0OUWAHO+nTffDFaAeqw TebyotM1sXWZYQMSFgMi25vfCRAnnC6ulc07XOQvSwgUZdQ1GOc= -----END CERTIFICATE-----Generated at Sun Dec 7 03:56:25 2025 by rpki-client