This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/07deded1-d14e-4123-b5c9-c93a5997fc30/0/B6847B928C30800282D7BA8E337482DFF4DEC8A5.mft File: B6847B928C30800282D7BA8E337482DFF4DEC8A5.mft (raw, json) Hash identifier: bQs91V7mufza4wQ48uXGhU4mp8UZpd4lfVH6e89gNWw= Subject key identifier: CF:1A:11:C2:31:29:E6:50:84:6E:DF:50:7C:15:4E:E2:F2:26:B8:4F Authority key identifier: B6:84:7B:92:8C:30:80:02:82:D7:BA:8E:33:74:82:DF:F4:DE:C8:A5 Certificate issuer: /CN=B6847B928C30800282D7BA8E337482DFF4DEC8A5 Certificate serial: 2B56B26F4ED7643BD79DDE357BF33D4CE7752AB3 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B6847B928C30800282D7BA8E337482DFF4DEC8A5.cer Subject info access: rsync://repo-rpki.idnic.net/repo/07deded1-d14e-4123-b5c9-c93a5997fc30/0/B6847B928C30800282D7BA8E337482DFF4DEC8A5.mft Manifest number: 0533 Signing time: Wed 17 Dec 2025 10:21:27 +0000 Manifest this update: Wed 17 Dec 2025 10:16:27 +0000 Manifest next update: Sat 20 Dec 2025 10:24:27 +0000 Files and hashes: 1: B6847B928C30800282D7BA8E337482DFF4DEC8A5.crl (hash: oVK0lqSIZO+6mD2qdEt3S1UZWuCFNc8gQh3KDCjNc+s=) 2: 3130332e3132312e3132332e302f32342d3234203d3e20313338303539.roa (hash: Zl03XVx57nbxitWYw7MeSszUElsg5oZ5jVn5EskWk+g=) 3: 323030313a6466363a343530303a3a2f34382d3438203d3e20313338303539.roa (hash: IoCq5Fr7ucJSiJXgyl0hLajgLtZdo657+jXfL09lCzQ=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/07deded1-d14e-4123-b5c9-c93a5997fc30/0/B6847B928C30800282D7BA8E337482DFF4DEC8A5.crl rsync://repo-rpki.idnic.net/repo/07deded1-d14e-4123-b5c9-c93a5997fc30/0/B6847B928C30800282D7BA8E337482DFF4DEC8A5.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B6847B928C30800282D7BA8E337482DFF4DEC8A5.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 20 Dec 2025 10:24:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2b:56:b2:6f:4e:d7:64:3b:d7:9d:de:35:7b:f3:3d:4c:e7:75:2a:b3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B6847B928C30800282D7BA8E337482DFF4DEC8A5 Validity Not Before: Dec 17 10:16:27 2025 GMT Not After : Dec 20 10:24:27 2025 GMT Subject: CN=CF1A11C23129E650846EDF507C154EE2F226B84F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:44:bb:53:4d:e3:cd:7a:23:1f:1c:d5:6f:a0: 61:66:b7:73:8c:5d:31:e2:ad:6f:7d:e7:ba:12:3f: 1f:33:1c:0e:4d:a2:e6:16:73:d6:2c:fe:8c:0c:33: 4f:5d:97:11:4c:90:ec:6a:7a:21:b1:38:b4:6e:74: d3:c0:6e:6d:b6:06:b1:47:e6:5a:52:4f:f7:18:6d: 18:17:cb:88:ca:4c:66:1a:db:56:4a:cd:3a:33:36: 10:26:89:b5:a3:f3:84:31:9d:a8:aa:30:46:42:32: c0:ec:7d:08:b4:de:3e:f7:d1:b8:72:73:47:93:ed: c1:74:b2:4b:1c:5a:75:15:31:95:85:46:74:54:ac: 4e:63:83:05:ab:9a:50:18:39:59:57:35:23:36:12: 5b:66:7d:e4:3d:c8:11:3f:ab:76:13:f5:1d:de:96: 17:97:4a:52:50:33:35:b4:3d:9d:96:58:6e:57:f5: ee:25:e3:ca:01:d9:ee:7a:c4:be:fe:e9:86:ad:df: 66:fb:b7:fb:f9:75:6a:4f:9a:01:bf:67:64:f8:34: 10:56:55:7c:3c:a1:28:de:87:a9:17:52:33:0a:58: 78:d2:52:c7:0a:3e:30:aa:29:6b:fa:e3:7a:75:55: c2:cb:42:82:3e:70:a6:73:5d:1d:f9:b5:fd:58:5e: 0d:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:1A:11:C2:31:29:E6:50:84:6E:DF:50:7C:15:4E:E2:F2:26:B8:4F X509v3 Authority Key Identifier: keyid:B6:84:7B:92:8C:30:80:02:82:D7:BA:8E:33:74:82:DF:F4:DE:C8:A5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/07deded1-d14e-4123-b5c9-c93a5997fc30/0/B6847B928C30800282D7BA8E337482DFF4DEC8A5.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B6847B928C30800282D7BA8E337482DFF4DEC8A5.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/07deded1-d14e-4123-b5c9-c93a5997fc30/0/B6847B928C30800282D7BA8E337482DFF4DEC8A5.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 93:f5:1d:dc:cf:79:dd:27:ca:87:1e:51:2e:11:14:2b:1c:26: 74:34:e9:72:e5:8d:55:5f:fe:8e:70:b4:2e:c8:7a:5b:35:99: 32:4c:7f:2a:07:75:fc:e2:4b:68:d8:7c:e7:00:db:ac:af:e1: fc:ea:36:0e:c1:05:d6:a0:ba:1d:c8:dd:2c:1f:c5:92:c5:a0: 2a:86:a2:ed:ce:6d:bb:6f:08:6f:55:b5:3c:1d:f4:c2:15:3d: 61:ea:a5:91:22:ff:e9:e4:a4:08:c5:7e:7d:47:95:47:06:65: 9f:5a:68:62:e8:28:1e:3d:f2:7e:28:37:16:16:3d:83:22:a4: fd:29:e0:67:b3:3f:b1:e3:eb:7c:4e:3b:15:a9:f1:37:89:90: ae:2d:53:d1:ad:cd:82:91:a5:f8:62:e8:d4:d6:c5:95:91:30: f7:8f:28:fe:4b:27:5b:ba:58:6a:e9:1f:c5:eb:90:01:f9:a2: 38:ba:62:d3:a3:ee:00:71:c9:d9:d7:06:1e:e8:f1:66:bc:72: 4f:bf:27:bd:d7:b3:e2:64:a2:08:09:19:19:ad:5d:82:ba:b5: c8:a7:3b:52:5e:4b:99:64:85:46:63:c4:85:4b:1c:3c:ff:a6: 3f:67:9b:0e:fd:66:6b:5b:c8:53:15:1f:3a:3c:e0:07:fb:b2: 3b:4c:76:89 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUK1ayb07XZDvXnd41e/M9TOd1KrMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjY4NDdCOTI4QzMwODAwMjgyRDdCQThFMzM3NDgyREZG NERFQzhBNTAeFw0yNTEyMTcxMDE2MjdaFw0yNTEyMjAxMDI0MjdaMDMxMTAvBgNV BAMTKENGMUExMUMyMzEyOUU2NTA4NDZFREY1MDdDMTU0RUUyRjIyNkI4NEYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC3RLtTTePNeiMfHNVvoGFmt3OM XTHirW9957oSPx8zHA5NouYWc9Ys/owMM09dlxFMkOxqeiGxOLRudNPAbm22BrFH 5lpST/cYbRgXy4jKTGYa21ZKzTozNhAmibWj84QxnaiqMEZCMsDsfQi03j730bhy c0eT7cF0skscWnUVMZWFRnRUrE5jgwWrmlAYOVlXNSM2EltmfeQ9yBE/q3YT9R3e lheXSlJQMzW0PZ2WWG5X9e4l48oB2e56xL7+6Yat32b7t/v5dWpPmgG/Z2T4NBBW VXw8oSjeh6kXUjMKWHjSUscKPjCqKWv643p1VcLLQoI+cKZzXR35tf1YXg1FAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUzxoRwjEp5lCEbt9QfBVO4vImuE8wHwYDVR0j BBgwFoAUtoR7kowwgAKC17qOM3SC3/TeyKUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w N2RlZGVkMS1kMTRlLTQxMjMtYjVjOS1jOTNhNTk5N2ZjMzAvMC9CNjg0N0I5MjhD MzA4MDAyODJEN0JBOEUzMzc0ODJERkY0REVDOEE1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQjY4NDdCOTI4QzMwODAwMjgyRDdCQThFMzM3NDgyREZGNERF QzhBNS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMDdkZWRlZDEtZDE0ZS00MTIzLWI1 YzktYzkzYTU5OTdmYzMwLzAvQjY4NDdCOTI4QzMwODAwMjgyRDdCQThFMzM3NDgy REZGNERFQzhBNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJP1HdzPed0nyoceUS4RFCscJnQ06XLljVVf /o5wtC7Iels1mTJMfyoHdfziS2jYfOcA26yv4fzqNg7BBdaguh3I3SwfxZLFoCqG ou3ObbtvCG9VtTwd9MIVPWHqpZEi/+nkpAjFfn1HlUcGZZ9aaGLoKB498n4oNxYW PYMipP0p4GezP7Hj63xOOxWp8TeJkK4tU9GtzYKRpfhi6NTWxZWRMPePKP5LJ1u6 WGrpH8XrkAH5oji6YtOj7gBxydnXBh7o8Wa8ck+/J73Xs+JkoggJGRmtXYK6tcin O1JeS5lkhUZjxIVLHDz/pj9nmw79ZmtbyFMVHzo84Af7sjtMdok= -----END CERTIFICATE-----Generated at Fri Dec 19 09:45:10 2025 by rpki-client