This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/1bdce391-a5d3-411b-a97b-e862fbf5631c/0/BE41FE7DC77148079EA1CAC4C9005DEB6884BB8C.mft File: BE41FE7DC77148079EA1CAC4C9005DEB6884BB8C.mft (raw, json) Hash identifier: jlujRggSywFvyxmdDTSmkP89JHAa2Zqa9JLxgPkUCdI= Subject key identifier: A1:41:C7:1E:E3:7A:86:07:E9:5F:15:D3:7F:DE:56:A3:E5:D9:50:DF Authority key identifier: BE:41:FE:7D:C7:71:48:07:9E:A1:CA:C4:C9:00:5D:EB:68:84:BB:8C Certificate issuer: /CN=BE41FE7DC77148079EA1CAC4C9005DEB6884BB8C Certificate serial: 0F56D8D0CCDA37F8A49ADFF7E95ADA7834168098 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/BE41FE7DC77148079EA1CAC4C9005DEB6884BB8C.cer Subject info access: rsync://repo-rpki.idnic.net/repo/1bdce391-a5d3-411b-a97b-e862fbf5631c/0/BE41FE7DC77148079EA1CAC4C9005DEB6884BB8C.mft Manifest number: F5 Signing time: Tue 02 Dec 2025 20:22:12 +0000 Manifest this update: Tue 02 Dec 2025 20:17:12 +0000 Manifest next update: Sat 06 Dec 2025 01:18:12 +0000 Files and hashes: 1: 3136302e32322e32362e302f32332d3233203d3e20313532383036.roa (hash: Kzrvc50VZVqxvNyylv+S6nQsNORPDp45F0+BBKuP5OE=) 2: 3136302e32322e32372e302f32342d3234203d3e20313532383036.roa (hash: 0OeYR75ixQZTlrIcMsAEVIAMsFHHHRmOANT+VjAQdGg=) 3: BE41FE7DC77148079EA1CAC4C9005DEB6884BB8C.crl (hash: Kcn8o2SrKF7PvX2F3ItooQ1AGRowgdD9KhP75pnTMZ0=) 4: 3136302e32322e32362e302f32342d3234203d3e20313532383036.roa (hash: 9EHkZCz3jJLHmIc/2dkH9Ib/3pIoSydcnX/ESKF5C0o=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/1bdce391-a5d3-411b-a97b-e862fbf5631c/0/BE41FE7DC77148079EA1CAC4C9005DEB6884BB8C.crl rsync://repo-rpki.idnic.net/repo/1bdce391-a5d3-411b-a97b-e862fbf5631c/0/BE41FE7DC77148079EA1CAC4C9005DEB6884BB8C.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/BE41FE7DC77148079EA1CAC4C9005DEB6884BB8C.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 06 Dec 2025 01:18:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0f:56:d8:d0:cc:da:37:f8:a4:9a:df:f7:e9:5a:da:78:34:16:80:98 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BE41FE7DC77148079EA1CAC4C9005DEB6884BB8C Validity Not Before: Dec 2 20:17:12 2025 GMT Not After : Dec 6 01:18:12 2025 GMT Subject: CN=A141C71EE37A8607E95F15D37FDE56A3E5D950DF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:17:1f:5b:e1:a8:a2:52:9d:14:e6:23:42:14: f9:37:9f:b0:64:1e:74:65:5c:30:7b:85:8f:20:5f: 76:6b:b1:f3:e0:96:b2:9f:6c:1a:71:6d:43:c3:dd: 78:84:d8:e5:e7:73:e1:fd:8d:f0:76:10:1b:98:bb: d7:50:58:25:ec:95:cf:16:61:12:f1:9a:ca:ff:38: f9:d8:f5:18:bb:38:99:2f:3d:28:95:a8:0b:f2:f7: cd:e8:9a:5b:f3:84:fe:33:f4:df:5e:43:f3:a4:36: b7:92:de:a3:fd:b1:b3:a0:75:40:7b:8f:f9:07:88: 7c:ed:88:8e:01:f1:83:c5:71:0a:6f:d8:a2:72:9e: 6d:64:45:82:67:ad:42:29:20:84:fa:99:8d:d6:50: 8e:38:c3:47:e5:77:f8:e7:82:25:ad:61:a3:8c:e8: 1e:bf:0e:96:f8:a2:a6:96:69:8c:4b:6f:67:c2:bd: ab:49:1c:d2:15:55:11:4c:07:d2:5d:7d:72:3e:ae: be:4e:fe:d7:8e:dd:9d:e8:74:a1:2e:01:5e:3d:b9: cd:4e:25:ee:6d:51:cf:83:4b:a3:5c:0d:b1:56:9c: 47:84:53:2f:31:c9:44:9d:8f:61:7d:4b:9f:cc:22: 73:c3:0a:c6:4c:bd:22:4d:d2:8e:2c:e0:e5:d3:3e: 8b:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:41:C7:1E:E3:7A:86:07:E9:5F:15:D3:7F:DE:56:A3:E5:D9:50:DF X509v3 Authority Key Identifier: keyid:BE:41:FE:7D:C7:71:48:07:9E:A1:CA:C4:C9:00:5D:EB:68:84:BB:8C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/1bdce391-a5d3-411b-a97b-e862fbf5631c/0/BE41FE7DC77148079EA1CAC4C9005DEB6884BB8C.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/BE41FE7DC77148079EA1CAC4C9005DEB6884BB8C.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/1bdce391-a5d3-411b-a97b-e862fbf5631c/0/BE41FE7DC77148079EA1CAC4C9005DEB6884BB8C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a7:88:8a:17:da:d0:53:87:c7:ff:00:8e:8c:db:26:38:fa:65: 25:fc:3d:53:70:e2:56:94:6d:b5:c9:21:78:43:e0:fe:2f:ad: 7f:61:01:26:01:dc:b3:74:4f:5c:ae:1a:f9:8a:76:eb:fc:cb: d3:bf:c5:8e:3b:1d:68:cc:8e:f3:40:87:34:26:66:08:84:fb: a9:c6:85:b0:01:76:a4:ce:d9:4f:f1:f2:2b:0b:6d:23:62:72: 00:ba:0a:b3:8c:b4:8a:b3:69:7e:05:0b:8c:c1:91:5e:8b:0a: e8:9a:32:f3:7d:b6:f2:97:67:26:0c:ee:e5:f7:f0:e0:a6:c0: ff:2b:38:31:c8:91:45:4d:2a:7d:02:55:75:83:67:08:03:06: 50:a2:a5:65:a2:e8:44:0b:96:54:10:4a:52:e3:40:f7:0f:c9: a0:d5:d9:cb:b4:3b:03:c5:1e:3e:d8:1f:61:63:1b:07:93:ef: 94:b3:be:22:c0:7a:2b:26:63:ac:d5:3c:9e:66:1b:98:48:9c: e1:02:5b:05:06:e2:1b:c5:d3:5c:c2:3a:01:05:04:ac:d2:52: b5:34:36:33:21:2d:bb:c5:c6:cf:87:5b:ee:f1:22:d5:80:44: 2d:74:ed:bf:01:a7:08:4e:82:44:9d:d0:bd:45:2c:08:58:f6: 46:10:55:c0 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUD1bY0MzaN/ikmt/36VraeDQWgJgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkU0MUZFN0RDNzcxNDgwNzlFQTFDQUM0QzkwMDVERUI2 ODg0QkI4QzAeFw0yNTEyMDIyMDE3MTJaFw0yNTEyMDYwMTE4MTJaMDMxMTAvBgNV BAMTKEExNDFDNzFFRTM3QTg2MDdFOTVGMTVEMzdGREU1NkEzRTVEOTUwREYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+Fx9b4aiiUp0U5iNCFPk3n7Bk HnRlXDB7hY8gX3ZrsfPglrKfbBpxbUPD3XiE2OXnc+H9jfB2EBuYu9dQWCXslc8W YRLxmsr/OPnY9Ri7OJkvPSiVqAvy983omlvzhP4z9N9eQ/OkNreS3qP9sbOgdUB7 j/kHiHztiI4B8YPFcQpv2KJynm1kRYJnrUIpIIT6mY3WUI44w0fld/jngiWtYaOM 6B6/Dpb4oqaWaYxLb2fCvatJHNIVVRFMB9JdfXI+rr5O/teO3Z3odKEuAV49uc1O Je5tUc+DS6NcDbFWnEeEUy8xyUSdj2F9S5/MInPDCsZMvSJN0o4s4OXTPotlAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUoUHHHuN6hgfpXxXTf95Wo+XZUN8wHwYDVR0j BBgwFoAUvkH+fcdxSAeeocrEyQBd62iEu4wwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x YmRjZTM5MS1hNWQzLTQxMWItYTk3Yi1lODYyZmJmNTYzMWMvMC9CRTQxRkU3REM3 NzE0ODA3OUVBMUNBQzRDOTAwNURFQjY4ODRCQjhDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvQkU0MUZFN0RDNzcxNDgwNzlFQTFDQUM0QzkwMDVERUI2ODg0 QkI4Qy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMWJkY2UzOTEtYTVkMy00MTFiLWE5 N2ItZTg2MmZiZjU2MzFjLzAvQkU0MUZFN0RDNzcxNDgwNzlFQTFDQUM0QzkwMDVE RUI2ODg0QkI4Qy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKeIihfa0FOHx/8AjozbJjj6ZSX8PVNw4laU bbXJIXhD4P4vrX9hASYB3LN0T1yuGvmKduv8y9O/xY47HWjMjvNAhzQmZgiE+6nG hbABdqTO2U/x8isLbSNicgC6CrOMtIqzaX4FC4zBkV6LCuiaMvN9tvKXZyYM7uX3 8OCmwP8rODHIkUVNKn0CVXWDZwgDBlCipWWi6EQLllQQSlLjQPcPyaDV2cu0OwPF Hj7YH2FjGweT75SzviLAeismY6zVPJ5mG5hInOECWwUG4hvF01zCOgEFBKzSUrU0 NjMhLbvFxs+HW+7xItWARC107b8BpwhOgkSd0L1FLAhY9kYQVcA= -----END CERTIFICATE-----Generated at Wed Dec 3 17:39:58 2025 by rpki-client