This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/29b3be62-3597-4fe8-a795-fc9ba1202344/0/B4381C63674B5D9A9B8C44C13CF19E7DD321F7C0.mft File: B4381C63674B5D9A9B8C44C13CF19E7DD321F7C0.mft (raw, json) Hash identifier: JMNeGU/jcNJh6rgGyHCPTvPEQos+4wFwJ7Z9ylL7wrc= Subject key identifier: 8B:65:C6:0E:55:BD:AA:A8:32:2E:DF:1B:E9:C0:20:58:7D:33:E3:52 Authority key identifier: B4:38:1C:63:67:4B:5D:9A:9B:8C:44:C1:3C:F1:9E:7D:D3:21:F7:C0 Certificate issuer: /CN=B4381C63674B5D9A9B8C44C13CF19E7DD321F7C0 Certificate serial: 0222CFD586C8680F83516534100A18F1742B21BE Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B4381C63674B5D9A9B8C44C13CF19E7DD321F7C0.cer Subject info access: rsync://repo-rpki.idnic.net/repo/29b3be62-3597-4fe8-a795-fc9ba1202344/0/B4381C63674B5D9A9B8C44C13CF19E7DD321F7C0.mft Manifest number: 01C8 Signing time: Wed 03 Dec 2025 04:01:46 +0000 Manifest this update: Wed 03 Dec 2025 03:56:46 +0000 Manifest next update: Sat 06 Dec 2025 14:43:46 +0000 Files and hashes: 1: B4381C63674B5D9A9B8C44C13CF19E7DD321F7C0.crl (hash: lmRzfKj2xdN4oC5MsCWSf8hxDz5kRiGPnS9jsjjPyio=) 2: 3130332e32302e3231392e302f32342d3234203d3e20313439393638.roa (hash: Qxhmm+FrOJl9N2gO3uMNdKcckPxH2c3YLUPCuEz7Xsg=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/29b3be62-3597-4fe8-a795-fc9ba1202344/0/B4381C63674B5D9A9B8C44C13CF19E7DD321F7C0.crl rsync://repo-rpki.idnic.net/repo/29b3be62-3597-4fe8-a795-fc9ba1202344/0/B4381C63674B5D9A9B8C44C13CF19E7DD321F7C0.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B4381C63674B5D9A9B8C44C13CF19E7DD321F7C0.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 06 Dec 2025 12:07:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 02:22:cf:d5:86:c8:68:0f:83:51:65:34:10:0a:18:f1:74:2b:21:be Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B4381C63674B5D9A9B8C44C13CF19E7DD321F7C0 Validity Not Before: Dec 3 03:56:46 2025 GMT Not After : Dec 6 14:43:46 2025 GMT Subject: CN=8B65C60E55BDAAA8322EDF1BE9C020587D33E352 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:79:d5:0f:9c:31:2c:b4:e6:8b:a2:fc:ce:9a: 4f:09:c6:fc:d9:47:da:a1:9c:d0:ca:8b:46:39:03: f7:64:13:f3:fd:66:77:52:f2:93:8b:dc:8b:f8:24: 1f:5c:bb:53:cb:58:e9:11:60:2e:2d:46:2a:46:ce: 77:4a:8c:0d:49:24:af:c1:17:63:a0:23:26:26:f7: 15:10:64:88:04:e9:f9:73:62:f0:62:82:fd:86:9a: 2f:08:94:0c:90:46:09:95:6c:f2:ed:31:38:3c:02: 8b:18:d2:4b:b1:7d:ac:df:02:07:ef:fe:e4:2a:a4: c8:fc:9e:a7:f3:be:18:a0:12:2b:ba:cf:29:9f:0b: 68:a3:37:f8:78:33:e4:97:fb:bf:94:16:fe:cb:86: 0f:00:1a:bf:ff:bd:7b:0c:c3:c4:1b:83:ad:22:cb: d5:5c:e5:7b:40:c6:07:f7:d7:51:12:db:6d:49:07: 1a:d9:d7:79:7c:62:1b:e7:5e:a3:e9:ad:fc:30:75: 74:fd:1a:d9:a4:f9:19:ca:c4:26:18:64:43:7d:30: c6:61:d2:cd:a9:01:64:d6:c2:f1:43:52:c5:f1:41: 62:04:86:22:6c:0c:e6:50:6e:04:0b:ae:b8:de:c0: 82:4e:f7:56:72:81:8f:79:c6:39:58:9d:d8:1a:6d: a5:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8B:65:C6:0E:55:BD:AA:A8:32:2E:DF:1B:E9:C0:20:58:7D:33:E3:52 X509v3 Authority Key Identifier: keyid:B4:38:1C:63:67:4B:5D:9A:9B:8C:44:C1:3C:F1:9E:7D:D3:21:F7:C0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/29b3be62-3597-4fe8-a795-fc9ba1202344/0/B4381C63674B5D9A9B8C44C13CF19E7DD321F7C0.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B4381C63674B5D9A9B8C44C13CF19E7DD321F7C0.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/29b3be62-3597-4fe8-a795-fc9ba1202344/0/B4381C63674B5D9A9B8C44C13CF19E7DD321F7C0.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 13:46:17:c9:c1:13:0c:45:03:66:49:69:7c:12:9f:3c:92:ed: 77:a6:05:c0:b9:69:54:51:98:a2:56:73:69:f1:88:d1:f6:6b: 17:1e:8e:e6:32:aa:e3:0d:3b:b4:12:39:e9:47:f1:91:66:e5: dc:ae:3b:c6:06:c8:2b:a5:c6:4c:20:58:35:c3:42:b6:d2:a6: 8e:14:8d:a6:4a:3e:cb:2f:8b:31:4c:0c:1c:70:23:a4:67:1f: 69:52:be:d2:a3:15:80:5d:07:f7:e8:10:66:ea:4d:dc:c8:4f: 7b:b2:27:d1:c9:20:d4:dc:b3:18:4d:d6:a3:b7:67:03:b5:f5: 9a:cc:8e:4c:ed:51:5a:cb:f6:53:62:8a:46:fa:91:f8:74:cb: 9d:1e:f8:70:ea:24:35:33:32:1d:de:a0:1f:03:d3:bb:f0:b3: 2a:77:1e:3d:15:27:2c:b6:d1:fa:20:42:05:78:4b:df:b4:19: 64:bf:a8:ae:23:cc:a0:03:b4:45:0a:43:ed:85:70:ce:a3:8b: 7e:6c:f4:44:d6:13:25:b1:34:e7:67:68:30:8e:e4:ff:38:8b: b5:22:98:6b:ee:ca:32:bb:52:72:b4:b9:46:7d:b5:6a:b0:5c: df:ec:8d:fe:a7:b5:24:4b:5b:86:d3:cb:a1:ab:52:b6:f8:21: 4b:6d:97:c0 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUAiLP1YbIaA+DUWU0EAoY8XQrIb4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjQzODFDNjM2NzRCNUQ5QTlCOEM0NEMxM0NGMTlFN0RE MzIxRjdDMDAeFw0yNTEyMDMwMzU2NDZaFw0yNTEyMDYxNDQzNDZaMDMxMTAvBgNV BAMTKDhCNjVDNjBFNTVCREFBQTgzMjJFREYxQkU5QzAyMDU4N0QzM0UzNTIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC0edUPnDEstOaLovzOmk8JxvzZ R9qhnNDKi0Y5A/dkE/P9ZndS8pOL3Iv4JB9cu1PLWOkRYC4tRipGzndKjA1JJK/B F2OgIyYm9xUQZIgE6flzYvBigv2Gmi8IlAyQRgmVbPLtMTg8AosY0kuxfazfAgfv /uQqpMj8nqfzvhigEiu6zymfC2ijN/h4M+SX+7+UFv7Lhg8AGr//vXsMw8Qbg60i y9Vc5XtAxgf311ES221JBxrZ13l8YhvnXqPprfwwdXT9Gtmk+RnKxCYYZEN9MMZh 0s2pAWTWwvFDUsXxQWIEhiJsDOZQbgQLrrjewIJO91ZygY95xjlYndgabaXbAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUi2XGDlW9qqgyLt8b6cAgWH0z41IwHwYDVR0j BBgwFoAUtDgcY2dLXZqbjETBPPGefdMh98AwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y OWIzYmU2Mi0zNTk3LTRmZTgtYTc5NS1mYzliYTEyMDIzNDQvMC9CNDM4MUM2MzY3 NEI1RDlBOUI4QzQ0QzEzQ0YxOUU3REQzMjFGN0MwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQjQzODFDNjM2NzRCNUQ5QTlCOEM0NEMxM0NGMTlFN0REMzIx RjdDMC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMjliM2JlNjItMzU5Ny00ZmU4LWE3 OTUtZmM5YmExMjAyMzQ0LzAvQjQzODFDNjM2NzRCNUQ5QTlCOEM0NEMxM0NGMTlF N0REMzIxRjdDMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABNGF8nBEwxFA2ZJaXwSnzyS7XemBcC5aVRR mKJWc2nxiNH2axcejuYyquMNO7QSOelH8ZFm5dyuO8YGyCulxkwgWDXDQrbSpo4U jaZKPssvizFMDBxwI6RnH2lSvtKjFYBdB/foEGbqTdzIT3uyJ9HJINTcsxhN1qO3 ZwO19ZrMjkztUVrL9lNiikb6kfh0y50e+HDqJDUzMh3eoB8D07vwsyp3Hj0VJyy2 0fogQgV4S9+0GWS/qK4jzKADtEUKQ+2FcM6ji35s9ETWEyWxNOdnaDCO5P84i7Ui mGvuyjK7UnK0uUZ9tWqwXN/sjf6ntSRLW4bTy6GrUrb4IUttl8A= -----END CERTIFICATE-----Generated at Wed Dec 3 13:57:15 2025 by rpki-client