This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/38913893-5f64-4a5e-a8d2-5d51ebde473f/0/B1F0A7585ED1882783C6AF802B826607ABB92671.mft File: B1F0A7585ED1882783C6AF802B826607ABB92671.mft (raw, json) Hash identifier: Kc+07LpTPICkC03KclTuOSph8KqDKST2xqAiDXQvSrA= Subject key identifier: A8:71:0F:32:79:BC:AE:47:7D:15:CE:CC:6A:B0:C5:CB:14:82:61:2F Authority key identifier: B1:F0:A7:58:5E:D1:88:27:83:C6:AF:80:2B:82:66:07:AB:B9:26:71 Certificate issuer: /CN=B1F0A7585ED1882783C6AF802B826607ABB92671 Certificate serial: 7074C64EF492D76D04E3170F96C36879BFEB98FB Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/B1F0A7585ED1882783C6AF802B826607ABB92671.cer Subject info access: rsync://repo-rpki.idnic.net/repo/38913893-5f64-4a5e-a8d2-5d51ebde473f/0/B1F0A7585ED1882783C6AF802B826607ABB92671.mft Manifest number: C8 Signing time: Mon 01 Dec 2025 17:12:29 +0000 Manifest this update: Mon 01 Dec 2025 17:07:29 +0000 Manifest next update: Fri 05 Dec 2025 03:15:29 +0000 Files and hashes: 1: B1F0A7585ED1882783C6AF802B826607ABB92671.crl (hash: 7M7gu2Uw3WaoEF4WUvxc4DRxeM7axmg539OW+4CGkRY=) 2: 3136302e3138372e33362e302f32342d3234203d3e20313533333237.roa (hash: W6x4NYRtAG+Mf6fIyPCm/XsF8bO9fqqOCjC78Il5Kyw=) 3: 3136302e3138372e33372e302f32342d3234203d3e20313533333237.roa (hash: HwU0+K4pKIjqZ0rwzIAxU1cLuPfwooIJjDIs7VIOPKk=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/38913893-5f64-4a5e-a8d2-5d51ebde473f/0/B1F0A7585ED1882783C6AF802B826607ABB92671.crl rsync://repo-rpki.idnic.net/repo/38913893-5f64-4a5e-a8d2-5d51ebde473f/0/B1F0A7585ED1882783C6AF802B826607ABB92671.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/B1F0A7585ED1882783C6AF802B826607ABB92671.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 05 Dec 2025 03:15:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 70:74:c6:4e:f4:92:d7:6d:04:e3:17:0f:96:c3:68:79:bf:eb:98:fb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B1F0A7585ED1882783C6AF802B826607ABB92671 Validity Not Before: Dec 1 17:07:29 2025 GMT Not After : Dec 5 03:15:29 2025 GMT Subject: CN=A8710F3279BCAE477D15CECC6AB0C5CB1482612F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:a6:47:db:91:7f:49:2f:fc:ad:90:80:bd:6c: ec:2c:20:42:c1:4f:e7:5e:6a:2e:74:6c:c0:b7:cb: 32:c6:54:7a:88:b9:32:cb:43:b9:48:07:ae:50:2d: b5:ab:fc:c5:d0:57:a0:49:b4:f1:89:29:29:83:25: 77:79:ec:19:4b:07:56:a4:58:b7:bd:74:fd:9f:5b: 62:b0:45:b1:d1:21:bb:b1:e1:75:ad:12:e8:13:56: 8f:44:f2:74:d0:56:73:44:04:5b:27:41:9f:4c:e1: 7f:bb:e0:65:83:a5:6c:2a:1a:47:80:ed:33:0c:b0: 1d:d1:de:a2:ce:c3:1d:fa:e4:ce:63:98:54:74:e8: 23:64:93:1c:92:ac:e7:30:a2:b2:c0:5c:f4:f4:a3: 2a:70:03:ac:69:e2:68:9c:85:b8:78:c8:db:d2:fd: ce:cc:cd:ad:c2:e2:45:ca:c0:85:1f:ad:f1:85:3e: 06:2a:4d:ee:be:6d:af:16:9b:3d:72:b5:1e:ca:aa: a3:43:23:2a:9d:83:99:99:60:c8:0e:10:55:85:5f: 78:20:e4:1a:be:d8:d3:94:d1:0a:59:7a:02:af:02: 72:c3:d0:ec:25:fd:86:6b:6a:1c:45:c1:0e:d3:07: be:c3:15:cf:54:d1:8f:65:45:ed:d6:21:53:d5:4a: d5:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:71:0F:32:79:BC:AE:47:7D:15:CE:CC:6A:B0:C5:CB:14:82:61:2F X509v3 Authority Key Identifier: keyid:B1:F0:A7:58:5E:D1:88:27:83:C6:AF:80:2B:82:66:07:AB:B9:26:71 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/38913893-5f64-4a5e-a8d2-5d51ebde473f/0/B1F0A7585ED1882783C6AF802B826607ABB92671.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/B1F0A7585ED1882783C6AF802B826607ABB92671.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/38913893-5f64-4a5e-a8d2-5d51ebde473f/0/B1F0A7585ED1882783C6AF802B826607ABB92671.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 40:37:c3:07:97:67:ea:01:8f:3c:48:f2:76:b7:ed:f2:db:f5: 5c:ff:b9:04:c6:ed:27:ed:19:a1:e4:4e:2b:1c:f9:cb:7e:00: 9d:dc:e3:a7:c5:5f:f3:84:20:de:3a:83:b5:b9:d2:58:70:b9: ff:ae:f0:1b:a5:4d:26:1a:a5:4e:a9:e2:e8:84:74:dd:74:72: 3a:f7:fc:d6:88:71:87:92:4c:88:82:27:ce:78:e3:41:ed:56: 0b:36:e9:41:44:5b:f9:a8:a0:fe:eb:90:3f:d8:4a:0d:af:e1: d7:28:b1:9e:d1:59:fd:20:27:57:97:9a:5a:0e:dc:6a:05:0d: bc:0b:86:12:9a:6f:63:f8:29:cf:32:d9:e6:22:fe:69:8b:3f: e7:ef:30:5a:91:b7:e6:47:02:ae:7b:e7:0a:d6:0b:a5:07:bf: fd:62:60:2e:71:b0:f1:07:75:01:6d:22:fb:8d:4d:e2:22:89: 37:84:14:5b:a5:61:be:36:e0:f3:5f:66:4a:3f:90:b3:67:e0: a0:25:70:7a:1d:1a:37:e7:80:ff:57:59:71:9f:cf:c8:6b:05: 46:06:bb:96:88:d8:00:86:32:eb:00:a2:ee:4c:ec:a5:54:c0: c2:26:48:97:0d:44:28:15:61:05:ec:6e:60:f2:f6:0a:23:6b: f0:b2:58:61 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUcHTGTvSS120E4xcPlsNoeb/rmPswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjFGMEE3NTg1RUQxODgyNzgzQzZBRjgwMkI4MjY2MDdB QkI5MjY3MTAeFw0yNTEyMDExNzA3MjlaFw0yNTEyMDUwMzE1MjlaMDMxMTAvBgNV BAMTKEE4NzEwRjMyNzlCQ0FFNDc3RDE1Q0VDQzZBQjBDNUNCMTQ4MjYxMkYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCbpkfbkX9JL/ytkIC9bOwsIELB T+deai50bMC3yzLGVHqIuTLLQ7lIB65QLbWr/MXQV6BJtPGJKSmDJXd57BlLB1ak WLe9dP2fW2KwRbHRIbux4XWtEugTVo9E8nTQVnNEBFsnQZ9M4X+74GWDpWwqGkeA 7TMMsB3R3qLOwx365M5jmFR06CNkkxySrOcworLAXPT0oypwA6xp4michbh4yNvS /c7Mza3C4kXKwIUfrfGFPgYqTe6+ba8Wmz1ytR7KqqNDIyqdg5mZYMgOEFWFX3gg 5Bq+2NOU0QpZegKvAnLD0Owl/YZrahxFwQ7TB77DFc9U0Y9lRe3WIVPVStXDAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUqHEPMnm8rkd9Fc7MarDFyxSCYS8wHwYDVR0j BBgwFoAUsfCnWF7RiCeDxq+AK4JmB6u5JnEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z ODkxMzg5My01ZjY0LTRhNWUtYThkMi01ZDUxZWJkZTQ3M2YvMC9CMUYwQTc1ODVF RDE4ODI3ODNDNkFGODAyQjgyNjYwN0FCQjkyNjcxLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvQjFGMEE3NTg1RUQxODgyNzgzQzZBRjgwMkI4MjY2MDdBQkI5 MjY3MS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMzg5MTM4OTMtNWY2NC00YTVlLWE4 ZDItNWQ1MWViZGU0NzNmLzAvQjFGMEE3NTg1RUQxODgyNzgzQzZBRjgwMkI4MjY2 MDdBQkI5MjY3MS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEA3wweXZ+oBjzxI8na37fLb9Vz/uQTG7Sft GaHkTisc+ct+AJ3c46fFX/OEIN46g7W50lhwuf+u8BulTSYapU6p4uiEdN10cjr3 /NaIcYeSTIiCJ85440HtVgs26UFEW/mooP7rkD/YSg2v4dcosZ7RWf0gJ1eXmloO 3GoFDbwLhhKab2P4Kc8y2eYi/mmLP+fvMFqRt+ZHAq575wrWC6UHv/1iYC5xsPEH dQFtIvuNTeIiiTeEFFulYb424PNfZko/kLNn4KAlcHodGjfngP9XWXGfz8hrBUYG u5aI2ACGMusAou5M7KVUwMImSJcNRCgVYQXsbmDy9goja/CyWGE= -----END CERTIFICATE-----Generated at Wed Dec 3 16:45:14 2025 by rpki-client