This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/3b905766-440e-4bcb-ae72-3e78831ce9dc/0/B2650BD2D997B6C198A4B362B7395AC364683312.mft File: B2650BD2D997B6C198A4B362B7395AC364683312.mft (raw, json) Hash identifier: dztAxWos6B4d/0F8dttocNKtWeB/RH9VbYnV3QGi5hs= Subject key identifier: 03:31:E5:C3:12:30:8B:78:B5:53:B4:90:61:40:86:A3:4E:57:39:32 Authority key identifier: B2:65:0B:D2:D9:97:B6:C1:98:A4:B3:62:B7:39:5A:C3:64:68:33:12 Certificate issuer: /CN=B2650BD2D997B6C198A4B362B7395AC364683312 Certificate serial: 513D649480BE13B2575B5E740DF9B5BA5D1D00D2 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B2650BD2D997B6C198A4B362B7395AC364683312.cer Subject info access: rsync://repo-rpki.idnic.net/repo/3b905766-440e-4bcb-ae72-3e78831ce9dc/0/B2650BD2D997B6C198A4B362B7395AC364683312.mft Manifest number: 0209 Signing time: Fri 12 Dec 2025 10:11:00 +0000 Manifest this update: Fri 12 Dec 2025 10:06:00 +0000 Manifest next update: Mon 15 Dec 2025 22:03:00 +0000 Files and hashes: 1: B2650BD2D997B6C198A4B362B7395AC364683312.crl (hash: wuo2hidpcCJ0cSdP/AjorOxbKuCsr1Q8Rm59OCVRcqs=) 2: 3130332e31372e33322e302f32342d3234203d3e20313530323238.roa (hash: IFrFNgL9nGnkBy6pVhjob4v5DLOWZyxcdQ+rkKOm7OM=) 3: 3130332e31372e33332e302f32342d3234203d3e20313530323238.roa (hash: Din5W7YK7LMJbRJUi9wsZasS4GJU6jj09R0J09VzjXg=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/3b905766-440e-4bcb-ae72-3e78831ce9dc/0/B2650BD2D997B6C198A4B362B7395AC364683312.crl rsync://repo-rpki.idnic.net/repo/3b905766-440e-4bcb-ae72-3e78831ce9dc/0/B2650BD2D997B6C198A4B362B7395AC364683312.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B2650BD2D997B6C198A4B362B7395AC364683312.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 15 Dec 2025 22:03:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 51:3d:64:94:80:be:13:b2:57:5b:5e:74:0d:f9:b5:ba:5d:1d:00:d2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B2650BD2D997B6C198A4B362B7395AC364683312 Validity Not Before: Dec 12 10:06:00 2025 GMT Not After : Dec 15 22:03:00 2025 GMT Subject: CN=0331E5C312308B78B553B490614086A34E573932 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:ff:f6:67:d0:b4:59:c9:fd:48:a4:c9:79:bb: dc:82:b2:ba:3c:90:b1:dc:75:d8:fe:6f:7c:28:32: b6:bb:da:45:60:b0:52:f7:8e:c1:65:7a:7b:2d:e0: c3:cd:47:49:7c:0d:82:dc:a5:51:22:37:b6:bf:61: ab:20:b8:17:05:ab:7c:1e:a4:73:18:0f:ee:10:b5: 38:d9:90:ca:ed:6a:02:db:a4:f0:d7:fe:25:6a:83: d1:a5:7f:29:45:f0:87:97:cd:ad:e4:f2:17:4f:72: e8:79:13:e4:eb:ff:8f:b6:75:e4:bb:24:c9:21:0c: 4e:24:60:d8:55:2a:69:65:79:16:5c:9e:fb:33:c3: 74:70:70:b9:76:e1:e0:dc:b2:25:a7:af:ca:b9:f5: 1d:14:12:67:5c:44:d5:04:c1:c5:6e:53:5c:95:be: 12:12:6e:33:06:9f:29:64:3a:0e:48:56:ba:e0:0a: 96:70:20:68:b2:53:cd:8b:a0:be:ff:96:29:d9:aa: 18:ec:0f:66:b9:da:4a:6d:a5:16:cb:35:38:a1:1c: 3f:3a:98:52:9b:18:80:47:b7:e7:9e:69:f8:43:2b: 6a:33:c2:ee:06:bf:7e:ee:c9:e4:a6:34:59:a9:e2: 75:8e:2a:c2:bf:36:b3:31:a7:32:96:72:c4:a3:e0: 4e:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 03:31:E5:C3:12:30:8B:78:B5:53:B4:90:61:40:86:A3:4E:57:39:32 X509v3 Authority Key Identifier: keyid:B2:65:0B:D2:D9:97:B6:C1:98:A4:B3:62:B7:39:5A:C3:64:68:33:12 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/3b905766-440e-4bcb-ae72-3e78831ce9dc/0/B2650BD2D997B6C198A4B362B7395AC364683312.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B2650BD2D997B6C198A4B362B7395AC364683312.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3b905766-440e-4bcb-ae72-3e78831ce9dc/0/B2650BD2D997B6C198A4B362B7395AC364683312.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5a:aa:04:fe:ca:6a:d9:83:96:0b:50:e2:e4:3c:6c:da:06:ad: 4c:c1:34:6b:da:9c:18:9a:99:5d:a6:87:dd:ac:50:ba:b9:54: 4d:87:20:87:ad:c8:76:98:fa:c0:f7:03:69:81:e5:3d:e7:e5: 2c:76:9f:2e:fa:1e:01:b9:2b:91:ce:41:60:2e:0b:4d:06:ad: ea:ef:04:5a:e2:3e:c2:89:04:cb:65:42:74:41:b5:3e:e8:40: 45:0a:30:5d:1d:92:6a:64:80:ee:85:7b:c6:33:22:eb:f8:2e: 1f:d9:b3:75:69:e8:02:4d:35:8c:60:34:ee:f9:f9:ce:de:aa: ed:db:ed:cb:c6:91:f3:0a:e3:8e:13:78:a1:68:ef:f1:18:2c: ec:0c:41:1a:f6:e5:98:07:16:3c:d6:2d:36:b9:2b:94:57:3f: 27:19:1a:c2:e6:7b:28:71:e2:ee:f6:d1:4e:9c:8b:04:e3:10: a4:60:54:8c:8a:25:64:c9:11:81:18:2d:a7:1d:97:23:97:d8: 16:52:66:46:dd:31:35:73:38:19:9e:cd:17:8c:45:98:02:da: 87:b8:df:c1:6c:e1:64:bf:ac:5a:b1:25:3d:76:e0:84:7d:96: 29:0e:ec:5d:bd:c6:b8:f2:97:d6:da:ee:1f:00:f3:5c:b6:7f: 23:ae:f7:8b -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUUT1klIC+E7JXW150Dfm1ul0dANIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjI2NTBCRDJEOTk3QjZDMTk4QTRCMzYyQjczOTVBQzM2 NDY4MzMxMjAeFw0yNTEyMTIxMDA2MDBaFw0yNTEyMTUyMjAzMDBaMDMxMTAvBgNV BAMTKDAzMzFFNUMzMTIzMDhCNzhCNTUzQjQ5MDYxNDA4NkEzNEU1NzM5MzIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDb//Zn0LRZyf1IpMl5u9yCsro8 kLHcddj+b3woMra72kVgsFL3jsFlenst4MPNR0l8DYLcpVEiN7a/YasguBcFq3we pHMYD+4QtTjZkMrtagLbpPDX/iVqg9GlfylF8IeXza3k8hdPcuh5E+Tr/4+2deS7 JMkhDE4kYNhVKmlleRZcnvszw3RwcLl24eDcsiWnr8q59R0UEmdcRNUEwcVuU1yV vhISbjMGnylkOg5IVrrgCpZwIGiyU82LoL7/linZqhjsD2a52kptpRbLNTihHD86 mFKbGIBHt+eeafhDK2ozwu4Gv37uyeSmNFmp4nWOKsK/NrMxpzKWcsSj4E5tAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUAzHlwxIwi3i1U7SQYUCGo05XOTIwHwYDVR0j BBgwFoAUsmUL0tmXtsGYpLNitzlaw2RoMxIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z YjkwNTc2Ni00NDBlLTRiY2ItYWU3Mi0zZTc4ODMxY2U5ZGMvMC9CMjY1MEJEMkQ5 OTdCNkMxOThBNEIzNjJCNzM5NUFDMzY0NjgzMzEyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQjI2NTBCRDJEOTk3QjZDMTk4QTRCMzYyQjczOTVBQzM2NDY4 MzMxMi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vM2I5MDU3NjYtNDQwZS00YmNiLWFl NzItM2U3ODgzMWNlOWRjLzAvQjI2NTBCRDJEOTk3QjZDMTk4QTRCMzYyQjczOTVB QzM2NDY4MzMxMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFqqBP7KatmDlgtQ4uQ8bNoGrUzBNGvanBia mV2mh92sULq5VE2HIIetyHaY+sD3A2mB5T3n5Sx2ny76HgG5K5HOQWAuC00Grerv BFriPsKJBMtlQnRBtT7oQEUKMF0dkmpkgO6Fe8YzIuv4Lh/Zs3Vp6AJNNYxgNO75 +c7equ3b7cvGkfMK444TeKFo7/EYLOwMQRr25ZgHFjzWLTa5K5RXPycZGsLmeyhx 4u720U6ciwTjEKRgVIyKJWTJEYEYLacdlyOX2BZSZkbdMTVzOBmezReMRZgC2oe4 38Fs4WS/rFqxJT124IR9likO7F29xrjyl9ba7h8A81y2fyOu94s= -----END CERTIFICATE-----Generated at Sun Dec 14 19:13:56 2025 by rpki-client