This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/060ce733-77f4-4e1d-b5ec-61ede4da074d/0/BE2A9EDC8C556D4DD7846892612E0BED3FFFB52B.mft File: BE2A9EDC8C556D4DD7846892612E0BED3FFFB52B.mft (raw, json) Hash identifier: LWWEmZXek6C67jmA9u3FBbt2INvNM74IEYnjnfSGfP0= Subject key identifier: F7:02:66:0B:0B:63:05:56:D3:E4:43:AA:1B:CB:A8:27:AF:51:7B:75 Authority key identifier: BE:2A:9E:DC:8C:55:6D:4D:D7:84:68:92:61:2E:0B:ED:3F:FF:B5:2B Certificate issuer: /CN=BE2A9EDC8C556D4DD7846892612E0BED3FFFB52B Certificate serial: 525995832D69A35E7DE164D974B7AF45F4133EDC Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BE2A9EDC8C556D4DD7846892612E0BED3FFFB52B.cer Subject info access: rsync://repo-rpki.idnic.net/repo/060ce733-77f4-4e1d-b5ec-61ede4da074d/0/BE2A9EDC8C556D4DD7846892612E0BED3FFFB52B.mft Manifest number: 034F Signing time: Tue 02 Dec 2025 21:41:43 +0000 Manifest this update: Tue 02 Dec 2025 21:36:43 +0000 Manifest next update: Sat 06 Dec 2025 09:07:43 +0000 Files and hashes: 1: 3130332e3232362e35302e302f32342d3234203d3e203539323733.roa (hash: ImyXAYYU6gxFlWNkFMZjYF3LgN4oXFfG1+SCVAdQsYE=) 2: 3130332e3232362e35312e302f32342d3234203d3e203539323733.roa (hash: vEMXCI3M8VvAH47LiF9RDbq7pXkdLmDpmzWuC+Jv+wQ=) 3: 3130332e3232362e34382e302f32322d3232203d3e203539323733.roa (hash: NVnL3gu/ETV/ZZkGXx0LBYWbHfOXol4OHsqTQpLumLs=) 4: BE2A9EDC8C556D4DD7846892612E0BED3FFFB52B.crl (hash: kjTzh+OSwabrGfNuRMx8i5qXqvtW8lBEbP4w1jXTNiI=) 5: 3130332e3232362e34382e302f32342d3234203d3e203539323733.roa (hash: 2RhwyxU2ZZMzvcv7V8AkytYIscjSPeyUgoz7RilYeSY=) 6: 3130332e3232362e34392e302f32342d3234203d3e203539323733.roa (hash: Cv0EMC5062htKdHyxcMyy6exUpE5aD8gtMnGLSz9Wog=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/060ce733-77f4-4e1d-b5ec-61ede4da074d/0/BE2A9EDC8C556D4DD7846892612E0BED3FFFB52B.crl rsync://repo-rpki.idnic.net/repo/060ce733-77f4-4e1d-b5ec-61ede4da074d/0/BE2A9EDC8C556D4DD7846892612E0BED3FFFB52B.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BE2A9EDC8C556D4DD7846892612E0BED3FFFB52B.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 06 Dec 2025 09:07:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 52:59:95:83:2d:69:a3:5e:7d:e1:64:d9:74:b7:af:45:f4:13:3e:dc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BE2A9EDC8C556D4DD7846892612E0BED3FFFB52B Validity Not Before: Dec 2 21:36:43 2025 GMT Not After : Dec 6 09:07:43 2025 GMT Subject: CN=F702660B0B630556D3E443AA1BCBA827AF517B75 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:91:76:e3:05:95:9c:0b:c9:51:fd:0e:a3:63: 50:b4:29:48:e6:fe:7a:60:cf:31:e0:1f:a4:2a:98: 95:bb:36:31:c5:b0:e5:ad:a0:89:de:cf:0e:27:12: 22:97:90:64:59:cc:e6:00:61:55:b4:71:4c:52:4f: 86:be:eb:08:93:35:b3:61:9a:07:b8:67:df:43:6f: 9f:76:5f:81:64:29:3e:52:ed:37:05:0e:a3:91:15: 95:3c:67:79:8f:71:dc:f5:b6:9d:df:90:67:62:77: 1f:28:69:43:7f:08:da:79:b3:e4:58:4a:ff:53:4f: da:1e:18:53:55:62:fc:a1:0d:40:1b:58:07:72:58: bc:3e:0d:e5:9c:4f:eb:b1:5c:1e:90:96:21:1d:b1: db:d9:fb:b6:a0:7f:1b:52:dd:2e:62:f0:a1:57:e6: ce:7c:85:12:91:55:f3:6f:7e:e2:c2:d9:08:68:fc: e2:7e:e3:e1:d9:29:ee:a1:b7:e2:26:20:d2:bc:59: ee:27:42:fb:84:f9:a5:9b:91:9f:96:6c:1f:56:51: ac:1f:43:c2:de:b3:2f:1c:e1:1b:99:14:d7:77:0e: 92:cf:18:5a:2a:16:ce:d6:e1:4b:a5:9f:05:cc:1e: c7:fb:c3:b0:c4:89:15:6d:49:44:7a:cb:f0:8d:c8: 6e:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F7:02:66:0B:0B:63:05:56:D3:E4:43:AA:1B:CB:A8:27:AF:51:7B:75 X509v3 Authority Key Identifier: keyid:BE:2A:9E:DC:8C:55:6D:4D:D7:84:68:92:61:2E:0B:ED:3F:FF:B5:2B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/060ce733-77f4-4e1d-b5ec-61ede4da074d/0/BE2A9EDC8C556D4DD7846892612E0BED3FFFB52B.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BE2A9EDC8C556D4DD7846892612E0BED3FFFB52B.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/060ce733-77f4-4e1d-b5ec-61ede4da074d/0/BE2A9EDC8C556D4DD7846892612E0BED3FFFB52B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4f:03:74:f8:ee:e5:1c:aa:0b:30:cd:cf:13:81:e3:12:a3:f1: d2:46:00:c8:95:04:db:05:5b:ed:cf:d8:5e:d5:91:a7:b8:5b: 88:d2:16:4c:d9:f6:a0:80:f8:65:6e:ff:13:17:68:e4:bf:2f: 07:f5:ae:36:9f:0e:09:8b:26:66:65:a5:6e:e9:7a:5f:16:21: e1:84:5b:1d:7b:b0:c5:c3:35:e0:e3:a6:08:a1:69:12:db:4a: 8f:9f:5d:6e:96:2a:7b:22:b9:2e:f0:39:c8:09:7c:05:14:ec: da:8d:d5:0e:b1:14:8a:54:85:20:aa:b9:1b:76:38:18:84:cc: 4d:db:1a:a4:96:ee:44:12:97:51:24:23:1e:6b:c3:e0:59:c7: 6a:ae:e2:04:a2:d2:ce:52:16:49:9f:3a:01:46:b8:54:01:c2: 6f:20:f5:6f:07:cb:38:22:16:bf:db:84:10:8c:35:6b:37:73: 3a:43:b2:3f:e9:6a:f3:11:aa:8f:c6:f6:6d:e8:19:e2:91:6e: 6f:50:cc:01:d0:f5:58:4d:b3:7e:58:f5:c4:0d:b0:1a:c9:d1: ef:07:27:aa:57:18:c8:0d:45:93:66:5f:95:7a:5e:cb:84:17: fc:2d:ac:e9:14:2d:df:4b:a6:a5:28:5a:28:1e:24:ab:19:49: 59:f6:88:ed -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUUlmVgy1po1594WTZdLevRfQTPtwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkUyQTlFREM4QzU1NkQ0REQ3ODQ2ODkyNjEyRTBCRUQz RkZGQjUyQjAeFw0yNTEyMDIyMTM2NDNaFw0yNTEyMDYwOTA3NDNaMDMxMTAvBgNV BAMTKEY3MDI2NjBCMEI2MzA1NTZEM0U0NDNBQTFCQ0JBODI3QUY1MTdCNzUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCwkXbjBZWcC8lR/Q6jY1C0KUjm /npgzzHgH6QqmJW7NjHFsOWtoInezw4nEiKXkGRZzOYAYVW0cUxST4a+6wiTNbNh mge4Z99Db592X4FkKT5S7TcFDqORFZU8Z3mPcdz1tp3fkGdidx8oaUN/CNp5s+RY Sv9TT9oeGFNVYvyhDUAbWAdyWLw+DeWcT+uxXB6QliEdsdvZ+7agfxtS3S5i8KFX 5s58hRKRVfNvfuLC2Qho/OJ+4+HZKe6ht+ImINK8We4nQvuE+aWbkZ+WbB9WUawf Q8Lesy8c4RuZFNd3DpLPGFoqFs7W4UulnwXMHsf7w7DEiRVtSUR6y/CNyG4lAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU9wJmCwtjBVbT5EOqG8uoJ69Re3UwHwYDVR0j BBgwFoAUviqe3IxVbU3XhGiSYS4L7T//tSswDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w NjBjZTczMy03N2Y0LTRlMWQtYjVlYy02MWVkZTRkYTA3NGQvMC9CRTJBOUVEQzhD NTU2RDRERDc4NDY4OTI2MTJFMEJFRDNGRkZCNTJCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQkUyQTlFREM4QzU1NkQ0REQ3ODQ2ODkyNjEyRTBCRUQzRkZG QjUyQi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMDYwY2U3MzMtNzdmNC00ZTFkLWI1 ZWMtNjFlZGU0ZGEwNzRkLzAvQkUyQTlFREM4QzU1NkQ0REQ3ODQ2ODkyNjEyRTBC RUQzRkZGQjUyQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAE8DdPju5RyqCzDNzxOB4xKj8dJGAMiVBNsF W+3P2F7Vkae4W4jSFkzZ9qCA+GVu/xMXaOS/Lwf1rjafDgmLJmZlpW7pel8WIeGE Wx17sMXDNeDjpgihaRLbSo+fXW6WKnsiuS7wOcgJfAUU7NqN1Q6xFIpUhSCquRt2 OBiEzE3bGqSW7kQSl1EkIx5rw+BZx2qu4gSi0s5SFkmfOgFGuFQBwm8g9W8Hyzgi Fr/bhBCMNWs3czpDsj/pavMRqo/G9m3oGeKRbm9QzAHQ9VhNs35Y9cQNsBrJ0e8H J6pXGMgNRZNmX5V6XsuEF/wtrOkULd9LpqUoWigeJKsZSVn2iO0= -----END CERTIFICATE-----Generated at Wed Dec 3 13:59:45 2025 by rpki-client