This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/1592c274-11db-4127-babb-aeae99284b00/0/B921DAABB84949DDC2500D4F0A6D93FA0EB384E1.mft File: B921DAABB84949DDC2500D4F0A6D93FA0EB384E1.mft (raw, json) Hash identifier: YGXCPhqh0NuuNhHYVs3K2QCxbUh3vPPfxYQkbwCIPX0= Subject key identifier: 5D:0D:EA:4B:EC:CA:DD:67:71:48:DE:41:38:C9:96:60:22:C1:9F:0B Authority key identifier: B9:21:DA:AB:B8:49:49:DD:C2:50:0D:4F:0A:6D:93:FA:0E:B3:84:E1 Certificate issuer: /CN=B921DAABB84949DDC2500D4F0A6D93FA0EB384E1 Certificate serial: 56439090B919036F719C87B113F79C61E7526BED Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B921DAABB84949DDC2500D4F0A6D93FA0EB384E1.cer Subject info access: rsync://repo-rpki.idnic.net/repo/1592c274-11db-4127-babb-aeae99284b00/0/B921DAABB84949DDC2500D4F0A6D93FA0EB384E1.mft Manifest number: 02C0 Signing time: Tue 02 Dec 2025 10:21:58 +0000 Manifest this update: Tue 02 Dec 2025 10:16:58 +0000 Manifest next update: Fri 05 Dec 2025 17:22:58 +0000 Files and hashes: 1: B921DAABB84949DDC2500D4F0A6D93FA0EB384E1.crl (hash: LBo6ZEKlls4xae5RPIrgKWUKu7KK2nmx+HECLJC5F3g=) 2: 3130332e33302e3232332e302f32342d3234203d3e203338313438.roa (hash: Oz3xD+pukxgYWpnFQL+j6A86Gc4jUZiZu2sP1l7btM0=) 3: 3130332e33302e3232302e302f32322d3233203d3e203338313438.roa (hash: dip5cfpPOxv7j5avMlkj27CtA1ffgVlncphql09alQk=) 4: 323430313a396230303a3a2f33322d3438203d3e203338313438.roa (hash: KdtiKUAOdh5Pdj0OkOpsBFHlVClUvcCXmF1ngZraMiI=) 5: 3132322e3230302e3134342e302f32312d3234203d3e203338313438.roa (hash: q36ZaNZnng4e3YSesfRm7Xhg/e4wHbxv2r58SbE/Hyw=) 6: 3130332e33302e3232302e302f32342d3234203d3e203338313438.roa (hash: o3fKHuVWFD6jkUIoyhNcY5O2uYQKepNEkJqsRTcT0Zs=) 7: 3130332e33302e3232322e302f32342d3234203d3e203338313438.roa (hash: +SJaFJQyqBdRsoSnVqf1c6YDNbR+iItpuCQMYo/GJwM=) 8: 3130332e33302e3232312e302f32342d3234203d3e203338313438.roa (hash: 7jwgwmu5p9Vx0nJtBBICc1jR6TLu2T+YBURAKlHLhFY=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/1592c274-11db-4127-babb-aeae99284b00/0/B921DAABB84949DDC2500D4F0A6D93FA0EB384E1.crl rsync://repo-rpki.idnic.net/repo/1592c274-11db-4127-babb-aeae99284b00/0/B921DAABB84949DDC2500D4F0A6D93FA0EB384E1.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B921DAABB84949DDC2500D4F0A6D93FA0EB384E1.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 05 Dec 2025 17:22:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 56:43:90:90:b9:19:03:6f:71:9c:87:b1:13:f7:9c:61:e7:52:6b:ed Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B921DAABB84949DDC2500D4F0A6D93FA0EB384E1 Validity Not Before: Dec 2 10:16:58 2025 GMT Not After : Dec 5 17:22:58 2025 GMT Subject: CN=5D0DEA4BECCADD677148DE4138C9966022C19F0B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:3d:d4:a0:44:38:bf:6c:e7:36:8b:7c:aa:f0: 1c:e5:10:4c:71:47:56:51:1e:f2:4f:47:d2:9b:cd: 35:09:a3:33:05:2e:19:90:2e:3f:ee:5c:83:3c:7d: ff:19:95:03:49:70:db:4e:b4:db:d6:75:b9:21:55: aa:1e:17:15:ae:86:47:a0:58:b7:ca:a7:7a:6b:60: e5:20:ff:42:fb:96:c9:89:9a:ad:98:91:82:90:24: 9a:0e:2d:dc:76:0b:46:8e:64:be:c5:90:2c:84:01: 37:1f:49:39:6b:01:82:a1:35:ff:c4:e6:d4:32:37: e3:f6:4f:f9:a8:11:7f:5e:d1:04:07:9b:86:0c:2f: 63:59:3c:73:e7:c8:4b:7b:9e:b4:20:37:77:03:a7: 60:ed:b5:65:3a:b6:2e:c9:92:37:56:79:24:f3:50: 9a:1d:f2:d3:8d:11:02:e0:a2:c3:26:b9:82:49:04: c7:3f:49:1f:15:20:f1:da:66:94:65:49:38:e0:dc: 26:bd:62:68:fd:e9:24:3b:ce:ff:2f:f1:f0:a1:e6: 28:46:99:2c:92:62:26:63:d1:70:64:a8:f7:fc:6e: 0d:97:21:b2:94:e3:0a:3d:f3:79:66:04:dd:46:cc: ae:5b:bc:78:17:4c:d0:6e:64:fa:c9:c7:e6:f0:92: 27:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5D:0D:EA:4B:EC:CA:DD:67:71:48:DE:41:38:C9:96:60:22:C1:9F:0B X509v3 Authority Key Identifier: keyid:B9:21:DA:AB:B8:49:49:DD:C2:50:0D:4F:0A:6D:93:FA:0E:B3:84:E1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/1592c274-11db-4127-babb-aeae99284b00/0/B921DAABB84949DDC2500D4F0A6D93FA0EB384E1.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B921DAABB84949DDC2500D4F0A6D93FA0EB384E1.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/1592c274-11db-4127-babb-aeae99284b00/0/B921DAABB84949DDC2500D4F0A6D93FA0EB384E1.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 30:b8:53:16:fa:34:08:53:4f:3e:a8:24:bf:0b:7c:26:e2:e7: bc:49:ad:a4:2d:88:0e:b8:f2:d6:13:59:d8:f1:64:67:9c:9c: eb:02:e2:3b:7f:49:24:65:e9:8b:56:35:bb:d6:b8:80:5d:be: 83:ab:1e:d2:dc:13:f6:f5:1e:3b:c7:5c:96:e9:b9:78:18:68: 17:d4:82:d7:70:d1:4c:6d:c2:5f:ee:03:fa:44:ef:ae:1e:fa: e2:09:2a:ac:a8:b2:50:20:21:0e:fe:39:5c:05:d0:89:74:c5: fa:94:df:40:c9:17:59:be:d9:2f:d2:e4:d9:a6:56:b2:85:d0: 82:59:60:71:73:26:55:83:bf:9b:b2:60:a9:a6:0f:40:4c:b4: 35:16:a4:34:5f:1b:82:ef:38:1e:93:ff:c1:95:11:3a:f6:2d: 00:f2:c1:47:7d:4e:b0:dc:2f:2a:de:d4:0c:08:e7:3b:85:ca: 0a:e5:c6:4f:a8:5e:cc:cc:ae:df:cb:75:0e:53:db:26:af:c0: 5b:e1:26:54:9f:09:a8:dc:51:4d:e3:c8:66:e0:0a:04:d5:b2: 24:21:6d:7f:51:d8:a0:b6:b6:35:91:54:30:b5:6f:a4:da:f7: 06:eb:b1:f2:fc:46:38:f3:c2:eb:f3:01:af:25:d3:92:7d:d1: f4:c8:8f:62 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUVkOQkLkZA29xnIexE/ecYedSa+0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjkyMURBQUJCODQ5NDlEREMyNTAwRDRGMEE2RDkzRkEw RUIzODRFMTAeFw0yNTEyMDIxMDE2NThaFw0yNTEyMDUxNzIyNThaMDMxMTAvBgNV BAMTKDVEMERFQTRCRUNDQURENjc3MTQ4REU0MTM4Qzk5NjYwMjJDMTlGMEIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDDPdSgRDi/bOc2i3yq8BzlEExx R1ZRHvJPR9KbzTUJozMFLhmQLj/uXIM8ff8ZlQNJcNtOtNvWdbkhVaoeFxWuhkeg WLfKp3prYOUg/0L7lsmJmq2YkYKQJJoOLdx2C0aOZL7FkCyEATcfSTlrAYKhNf/E 5tQyN+P2T/moEX9e0QQHm4YML2NZPHPnyEt7nrQgN3cDp2DttWU6ti7JkjdWeSTz UJod8tONEQLgosMmuYJJBMc/SR8VIPHaZpRlSTjg3Ca9Ymj96SQ7zv8v8fCh5ihG mSySYiZj0XBkqPf8bg2XIbKU4wo983lmBN1GzK5bvHgXTNBuZPrJx+bwkieXAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUXQ3qS+zK3WdxSN5BOMmWYCLBnwswHwYDVR0j BBgwFoAUuSHaq7hJSd3CUA1PCm2T+g6zhOEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x NTkyYzI3NC0xMWRiLTQxMjctYmFiYi1hZWFlOTkyODRiMDAvMC9COTIxREFBQkI4 NDk0OUREQzI1MDBENEYwQTZEOTNGQTBFQjM4NEUxLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQjkyMURBQUJCODQ5NDlEREMyNTAwRDRGMEE2RDkzRkEwRUIz ODRFMS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMTU5MmMyNzQtMTFkYi00MTI3LWJh YmItYWVhZTk5Mjg0YjAwLzAvQjkyMURBQUJCODQ5NDlEREMyNTAwRDRGMEE2RDkz RkEwRUIzODRFMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADC4Uxb6NAhTTz6oJL8LfCbi57xJraQtiA64 8tYTWdjxZGecnOsC4jt/SSRl6YtWNbvWuIBdvoOrHtLcE/b1HjvHXJbpuXgYaBfU gtdw0Uxtwl/uA/pE764e+uIJKqyoslAgIQ7+OVwF0Il0xfqU30DJF1m+2S/S5Nmm VrKF0IJZYHFzJlWDv5uyYKmmD0BMtDUWpDRfG4LvOB6T/8GVETr2LQDywUd9TrDc Lyre1AwI5zuFygrlxk+oXszMrt/LdQ5T2yavwFvhJlSfCajcUU3jyGbgCgTVsiQh bX9R2KC2tjWRVDC1b6Ta9wbrsfL8RjjzwuvzAa8l05J90fTIj2I= -----END CERTIFICATE-----Generated at Wed Dec 3 16:06:58 2025 by rpki-client