This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/349dc5eb-3260-428a-a6c0-dc0f636b3307/0/BD9D1FA2782F66A5D2247CCF76F98733944DDB1E.mft File: BD9D1FA2782F66A5D2247CCF76F98733944DDB1E.mft (raw, json) Hash identifier: tfXNZAlHVopG+a8sXaaw14C/X2DDCMYY+EAvPgWNlVk= Subject key identifier: E7:5D:9E:70:C2:09:1D:EF:32:62:73:C4:F7:EE:D9:23:AD:64:0C:CF Authority key identifier: BD:9D:1F:A2:78:2F:66:A5:D2:24:7C:CF:76:F9:87:33:94:4D:DB:1E Certificate issuer: /CN=BD9D1FA2782F66A5D2247CCF76F98733944DDB1E Certificate serial: 67495223F326B495690D46737717E3D97D5653F3 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BD9D1FA2782F66A5D2247CCF76F98733944DDB1E.cer Subject info access: rsync://repo-rpki.idnic.net/repo/349dc5eb-3260-428a-a6c0-dc0f636b3307/0/BD9D1FA2782F66A5D2247CCF76F98733944DDB1E.mft Manifest number: 037B Signing time: Tue 02 Dec 2025 22:21:49 +0000 Manifest this update: Tue 02 Dec 2025 22:16:49 +0000 Manifest next update: Sat 06 Dec 2025 03:28:49 +0000 Files and hashes: 1: 3130332e3136362e34342e302f32342d3234203d3e20313431393335.roa (hash: tqvVTypyRWoQ+BQk8RvmARihIc7baY47ONVcGpdS5No=) 2: 3130332e3136362e34352e302f32342d3234203d3e20313431393335.roa (hash: fj/lt2lCYjvk1PSbkoRTgwJqQIbOPA+L+ew0qDsvTdY=) 3: BD9D1FA2782F66A5D2247CCF76F98733944DDB1E.crl (hash: K+ElDHRjtRTdbN9Ou2chT2no+bRSoop3yzT3d93Hed0=) 4: 3130332e3136362e34342e302f32332d3233203d3e20313431393335.roa (hash: W++QyUnZGXcmnX3ztvQWtHhQHoQNTCnCPKCpApkxJ6c=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/349dc5eb-3260-428a-a6c0-dc0f636b3307/0/BD9D1FA2782F66A5D2247CCF76F98733944DDB1E.crl rsync://repo-rpki.idnic.net/repo/349dc5eb-3260-428a-a6c0-dc0f636b3307/0/BD9D1FA2782F66A5D2247CCF76F98733944DDB1E.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BD9D1FA2782F66A5D2247CCF76F98733944DDB1E.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 06 Dec 2025 03:28:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 67:49:52:23:f3:26:b4:95:69:0d:46:73:77:17:e3:d9:7d:56:53:f3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BD9D1FA2782F66A5D2247CCF76F98733944DDB1E Validity Not Before: Dec 2 22:16:49 2025 GMT Not After : Dec 6 03:28:49 2025 GMT Subject: CN=E75D9E70C2091DEF326273C4F7EED923AD640CCF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:07:ad:9e:e9:5d:e7:c4:a5:ce:c2:6d:db:c7: 86:e0:97:86:90:c8:39:1c:6b:14:5b:a3:8f:96:c7: a3:51:64:01:36:14:4c:32:44:09:5d:e6:f9:6a:89: e3:34:5a:0f:67:9a:c9:ca:58:02:01:8e:f0:43:86: c9:df:41:68:fb:dc:8f:4d:7d:bd:e0:46:36:99:0e: 5e:62:6d:a7:1c:5e:2e:9b:82:08:fa:46:7c:c3:78: 5e:bb:d4:4f:a2:df:62:b7:6f:a8:7a:3f:ff:a2:44: b6:69:8b:b7:2d:a4:29:f3:03:d5:78:2f:cc:a5:f7: 58:3b:7a:f6:74:39:81:80:78:a2:b4:4e:7d:4f:92: 9c:5b:f6:02:c0:4a:f9:c0:43:de:fe:e8:f3:6e:76: a1:94:79:90:6a:fc:6f:9e:7e:09:94:30:a6:89:0e: e5:d4:6e:d3:6f:e4:cf:67:5e:4b:90:e9:dc:c0:a4: 44:ad:a2:79:ee:89:c9:cf:ce:07:bc:1f:63:69:ff: 87:de:eb:43:22:3e:8c:2d:02:15:d1:f9:56:54:bb: 59:40:cb:58:2f:f1:22:a6:f7:d6:b7:19:db:0a:e3: 24:11:63:47:b5:d7:ec:1c:fd:5c:95:78:31:fb:fc: e5:21:84:78:ad:c7:73:47:fb:a0:77:7c:e9:c7:c9: 96:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E7:5D:9E:70:C2:09:1D:EF:32:62:73:C4:F7:EE:D9:23:AD:64:0C:CF X509v3 Authority Key Identifier: keyid:BD:9D:1F:A2:78:2F:66:A5:D2:24:7C:CF:76:F9:87:33:94:4D:DB:1E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/349dc5eb-3260-428a-a6c0-dc0f636b3307/0/BD9D1FA2782F66A5D2247CCF76F98733944DDB1E.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BD9D1FA2782F66A5D2247CCF76F98733944DDB1E.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/349dc5eb-3260-428a-a6c0-dc0f636b3307/0/BD9D1FA2782F66A5D2247CCF76F98733944DDB1E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 13:39:b6:4b:de:02:ab:2b:3e:b5:32:2a:31:57:5d:31:7b:ed: fe:06:54:c7:e7:06:4a:fd:d7:65:59:96:88:0e:ce:e2:f1:ba: 02:fa:53:6a:7d:42:87:e8:6b:e5:0e:5c:5e:24:8e:97:4f:73: a1:44:5d:05:14:c3:bc:1a:81:e2:19:6f:85:e5:2e:63:60:9f: 03:28:57:88:dc:76:b3:2d:2e:5b:ef:08:d1:28:f8:af:a8:c1: 1a:08:81:8b:6e:af:94:c4:c8:95:a9:f3:a0:5a:1d:13:03:9d: d4:d3:73:a2:6a:69:3e:bc:91:04:34:11:ee:6d:ec:6b:40:6a: 4b:79:3d:5d:6d:4e:75:36:80:06:0d:43:f7:94:9c:d9:31:b2: d4:9c:1d:6b:ce:9d:91:1f:5e:5c:68:c1:43:a7:ee:b9:f1:0d: cf:9a:85:b9:a7:35:68:af:c4:f3:78:20:29:34:8e:31:fa:f3: 34:76:e9:96:2f:ca:68:66:ea:24:37:c0:56:1a:69:33:27:41: 36:40:c7:75:e0:7c:3e:02:ef:01:48:c8:91:23:59:f2:30:f5: 9a:53:28:24:29:84:8b:c7:a1:ff:fd:9e:f5:57:4a:d1:69:29: 78:f3:61:5b:36:4b:d4:57:b0:bb:db:ab:ac:7e:46:53:41:c0: 63:f2:b7:ad -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUZ0lSI/MmtJVpDUZzdxfj2X1WU/MwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkQ5RDFGQTI3ODJGNjZBNUQyMjQ3Q0NGNzZGOTg3MzM5 NDREREIxRTAeFw0yNTEyMDIyMjE2NDlaFw0yNTEyMDYwMzI4NDlaMDMxMTAvBgNV BAMTKEU3NUQ5RTcwQzIwOTFERUYzMjYyNzNDNEY3RUVEOTIzQUQ2NDBDQ0YwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDRB62e6V3nxKXOwm3bx4bgl4aQ yDkcaxRbo4+Wx6NRZAE2FEwyRAld5vlqieM0Wg9nmsnKWAIBjvBDhsnfQWj73I9N fb3gRjaZDl5ibaccXi6bggj6RnzDeF671E+i32K3b6h6P/+iRLZpi7ctpCnzA9V4 L8yl91g7evZ0OYGAeKK0Tn1Pkpxb9gLASvnAQ97+6PNudqGUeZBq/G+efgmUMKaJ DuXUbtNv5M9nXkuQ6dzApEStonnuicnPzge8H2Np/4fe60MiPowtAhXR+VZUu1lA y1gv8SKm99a3GdsK4yQRY0e11+wc/VyVeDH7/OUhhHitx3NH+6B3fOnHyZYbAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU512ecMIJHe8yYnPE9+7ZI61kDM8wHwYDVR0j BBgwFoAUvZ0fongvZqXSJHzPdvmHM5RN2x4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z NDlkYzVlYi0zMjYwLTQyOGEtYTZjMC1kYzBmNjM2YjMzMDcvMC9CRDlEMUZBMjc4 MkY2NkE1RDIyNDdDQ0Y3NkY5ODczMzk0NEREQjFFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQkQ5RDFGQTI3ODJGNjZBNUQyMjQ3Q0NGNzZGOTg3MzM5NDRE REIxRS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMzQ5ZGM1ZWItMzI2MC00MjhhLWE2 YzAtZGMwZjYzNmIzMzA3LzAvQkQ5RDFGQTI3ODJGNjZBNUQyMjQ3Q0NGNzZGOTg3 MzM5NDREREIxRS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABM5tkveAqsrPrUyKjFXXTF77f4GVMfnBkr9 12VZlogOzuLxugL6U2p9Qofoa+UOXF4kjpdPc6FEXQUUw7wageIZb4XlLmNgnwMo V4jcdrMtLlvvCNEo+K+owRoIgYtur5TEyJWp86BaHRMDndTTc6JqaT68kQQ0Ee5t 7GtAakt5PV1tTnU2gAYNQ/eUnNkxstScHWvOnZEfXlxowUOn7rnxDc+ahbmnNWiv xPN4ICk0jjH68zR26ZYvymhm6iQ3wFYaaTMnQTZAx3XgfD4C7wFIyJEjWfIw9ZpT KCQphIvHof/9nvVXStFpKXjzYVs2S9RXsLvbq6x+RlNBwGPyt60= -----END CERTIFICATE-----Generated at Wed Dec 3 13:57:59 2025 by rpki-client