This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/17216425-6aa3-4429-b175-86901bb0cb1f/0/B247FB55BE5739FCE4EBBD20B84542267C15D192.mft File: B247FB55BE5739FCE4EBBD20B84542267C15D192.mft (raw, json) Hash identifier: r6bciP5/VLsuFRrzEPN3qi578WyeBBoy9+g829j1jPk= Subject key identifier: CF:4F:2B:97:DC:49:66:1B:14:DA:FF:33:D0:F0:05:7A:D5:E5:B2:D8 Authority key identifier: B2:47:FB:55:BE:57:39:FC:E4:EB:BD:20:B8:45:42:26:7C:15:D1:92 Certificate issuer: /CN=B247FB55BE5739FCE4EBBD20B84542267C15D192 Certificate serial: 2329A13358E39421E343509FD138216E3F8DF10E Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B247FB55BE5739FCE4EBBD20B84542267C15D192.cer Subject info access: rsync://repo-rpki.idnic.net/repo/17216425-6aa3-4429-b175-86901bb0cb1f/0/B247FB55BE5739FCE4EBBD20B84542267C15D192.mft Manifest number: 02B7 Signing time: Sat 20 Dec 2025 04:32:30 +0000 Manifest this update: Sat 20 Dec 2025 04:27:30 +0000 Manifest next update: Tue 23 Dec 2025 05:31:30 +0000 Files and hashes: 1: 3130332e3137362e39382e302f32342d3234203d3e20313439333434.roa (hash: EI6CAFKMozCEfiPKGQcvscTjTfj7/nkyBcwcx/XBDg8=) 2: 3130332e3137362e39392e302f32342d3234203d3e20313439333434.roa (hash: 1SXRbeE4Zo2BpgZYkA81FPjpBzqJO4ahWylO9ct7G/4=) 3: B247FB55BE5739FCE4EBBD20B84542267C15D192.crl (hash: 0SmForlmC7q8JHAmLCXT8KQJONockQRIybHVkW3gl+M=) 4: 3130332e3137362e39382e302f32332d3234203d3e20313439333434.roa (hash: 9BKuqPMpOCYVLDkVIwaFy+U4SgMn8wYu59t+XyUcQfg=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/17216425-6aa3-4429-b175-86901bb0cb1f/0/B247FB55BE5739FCE4EBBD20B84542267C15D192.crl rsync://repo-rpki.idnic.net/repo/17216425-6aa3-4429-b175-86901bb0cb1f/0/B247FB55BE5739FCE4EBBD20B84542267C15D192.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B247FB55BE5739FCE4EBBD20B84542267C15D192.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 23 Dec 2025 05:31:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 23:29:a1:33:58:e3:94:21:e3:43:50:9f:d1:38:21:6e:3f:8d:f1:0e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B247FB55BE5739FCE4EBBD20B84542267C15D192 Validity Not Before: Dec 20 04:27:30 2025 GMT Not After : Dec 23 05:31:30 2025 GMT Subject: CN=CF4F2B97DC49661B14DAFF33D0F0057AD5E5B2D8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:c9:c0:fe:d9:5f:dc:d6:e2:4c:95:88:41:cb: a1:0e:5b:69:0e:9c:32:1d:64:e9:ee:ca:0d:c2:f3: e5:68:35:e7:60:ed:a0:1e:04:4b:97:a5:c2:ed:c6: 25:f8:b6:0c:b5:d8:27:87:de:37:6f:02:ae:47:e9: 0f:54:cc:65:4e:4c:a7:e8:3a:14:ba:77:f2:50:7b: 71:ed:50:b8:01:ec:6e:9e:3a:17:59:29:e7:c5:65: 44:ae:9a:96:86:a5:d8:61:79:1e:0a:a9:80:aa:09: 5d:e7:e8:f7:af:1c:52:b5:35:24:8e:31:c1:31:dd: 8d:e9:8a:83:8b:62:26:b2:6b:6c:ff:55:7b:99:49: be:e2:e6:cb:f1:17:96:46:16:58:7c:2a:dc:86:03: fb:bf:eb:8e:14:52:1a:c0:09:b4:2f:c7:fd:5a:5c: 9a:8d:56:10:c2:7a:13:e5:18:20:d9:c9:d2:eb:f5: 3c:98:34:21:7b:60:3b:da:fc:09:ee:1c:ad:70:15: 54:10:db:b7:69:91:49:6c:b0:40:67:4a:8c:9a:60: 07:15:91:ce:03:c6:44:11:d8:86:b0:c8:65:d3:e6: d9:7b:ef:36:c1:e5:1f:c4:0e:38:10:af:20:6e:09: 0a:d9:1c:53:d1:a0:b3:18:fc:55:15:63:05:1a:a2: eb:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:4F:2B:97:DC:49:66:1B:14:DA:FF:33:D0:F0:05:7A:D5:E5:B2:D8 X509v3 Authority Key Identifier: keyid:B2:47:FB:55:BE:57:39:FC:E4:EB:BD:20:B8:45:42:26:7C:15:D1:92 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/17216425-6aa3-4429-b175-86901bb0cb1f/0/B247FB55BE5739FCE4EBBD20B84542267C15D192.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B247FB55BE5739FCE4EBBD20B84542267C15D192.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/17216425-6aa3-4429-b175-86901bb0cb1f/0/B247FB55BE5739FCE4EBBD20B84542267C15D192.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a2:43:ce:1c:b7:6d:2e:89:0e:da:a4:fa:22:93:d0:6d:dd:5c: 38:ee:16:81:c0:bf:0f:3f:16:9b:b0:d8:82:45:cb:35:cc:e8: 55:47:05:5b:43:68:e3:f0:88:a0:5c:ff:54:e3:78:d9:3d:c2: e8:ab:b3:a9:23:3d:8b:30:fc:95:52:c4:39:78:12:93:15:2c: 49:63:d3:50:89:07:66:e1:5a:82:2d:d6:12:92:b2:75:af:85: 16:66:35:29:45:49:8e:0b:37:3c:00:9b:72:63:e6:f5:4c:30: 1d:df:02:a9:61:f7:f9:e3:05:1c:b8:e9:3b:55:eb:9e:a9:7f: 14:d0:b7:9d:0c:9d:c3:1c:a2:39:10:ab:0b:b5:eb:a8:19:c3: 59:6e:01:c7:ee:b6:0f:c8:db:7a:28:fb:c0:9a:5d:e8:6f:e5: 0b:c9:54:4f:44:ef:a8:aa:4c:ac:cd:e7:05:a1:e4:3b:ca:54: 7c:ee:d7:b3:a5:51:66:13:be:46:d0:4b:fc:44:3e:48:ae:eb: 4c:a8:67:e3:70:e7:4e:02:68:d5:d5:f7:fd:6c:9c:59:2d:a2: 47:f1:aa:47:6a:7e:ee:71:7f:73:5a:b7:cf:bb:73:10:16:38: 9e:79:d4:1f:08:3a:e1:ce:53:a1:71:e8:37:55:15:5d:e5:3c: f0:22:3e:21 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUIymhM1jjlCHjQ1Cf0Tghbj+N8Q4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjI0N0ZCNTVCRTU3MzlGQ0U0RUJCRDIwQjg0NTQyMjY3 QzE1RDE5MjAeFw0yNTEyMjAwNDI3MzBaFw0yNTEyMjMwNTMxMzBaMDMxMTAvBgNV BAMTKENGNEYyQjk3REM0OTY2MUIxNERBRkYzM0QwRjAwNTdBRDVFNUIyRDgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+ycD+2V/c1uJMlYhBy6EOW2kO nDIdZOnuyg3C8+VoNedg7aAeBEuXpcLtxiX4tgy12CeH3jdvAq5H6Q9UzGVOTKfo OhS6d/JQe3HtULgB7G6eOhdZKefFZUSumpaGpdhheR4KqYCqCV3n6PevHFK1NSSO McEx3Y3pioOLYiaya2z/VXuZSb7i5svxF5ZGFlh8KtyGA/u/644UUhrACbQvx/1a XJqNVhDCehPlGCDZydLr9TyYNCF7YDva/AnuHK1wFVQQ27dpkUlssEBnSoyaYAcV kc4DxkQR2IawyGXT5tl77zbB5R/EDjgQryBuCQrZHFPRoLMY/FUVYwUaouuVAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUz08rl9xJZhsU2v8z0PAFetXlstgwHwYDVR0j BBgwFoAUskf7Vb5XOfzk670guEVCJnwV0ZIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x NzIxNjQyNS02YWEzLTQ0MjktYjE3NS04NjkwMWJiMGNiMWYvMC9CMjQ3RkI1NUJF NTczOUZDRTRFQkJEMjBCODQ1NDIyNjdDMTVEMTkyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQjI0N0ZCNTVCRTU3MzlGQ0U0RUJCRDIwQjg0NTQyMjY3QzE1 RDE5Mi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMTcyMTY0MjUtNmFhMy00NDI5LWIx NzUtODY5MDFiYjBjYjFmLzAvQjI0N0ZCNTVCRTU3MzlGQ0U0RUJCRDIwQjg0NTQy MjY3QzE1RDE5Mi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKJDzhy3bS6JDtqk+iKT0G3dXDjuFoHAvw8/ Fpuw2IJFyzXM6FVHBVtDaOPwiKBc/1TjeNk9wuirs6kjPYsw/JVSxDl4EpMVLElj 01CJB2bhWoIt1hKSsnWvhRZmNSlFSY4LNzwAm3Jj5vVMMB3fAqlh9/njBRy46TtV 656pfxTQt50MncMcojkQqwu166gZw1luAcfutg/I23oo+8CaXehv5QvJVE9E76iq TKzN5wWh5DvKVHzu17OlUWYTvkbQS/xEPkiu60yoZ+Nw504CaNXV9/1snFktokfx qkdqfu5xf3Nat8+7cxAWOJ551B8IOuHOU6Fx6DdVFV3lPPAiPiE= -----END CERTIFICATE-----Generated at Mon Dec 22 20:44:28 2025 by rpki-client