This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/42dab46a-085e-4432-9833-71b8db144d94/0/B0D726419FBF35E7C6EB437E238F3D2A3F063B4C.mft File: B0D726419FBF35E7C6EB437E238F3D2A3F063B4C.mft (raw, json) Hash identifier: BlomXOzNyDWNg3EOWz5uHG8e6Y0dwUcJAb0Cz2I03D0= Subject key identifier: B9:EA:72:41:F1:0C:06:5B:06:4E:92:DE:8F:7D:F1:5F:66:D7:87:97 Authority key identifier: B0:D7:26:41:9F:BF:35:E7:C6:EB:43:7E:23:8F:3D:2A:3F:06:3B:4C Certificate issuer: /CN=B0D726419FBF35E7C6EB437E238F3D2A3F063B4C Certificate serial: 506932B6CC35F1BD021758E673471ED07FD6C01F Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/B0D726419FBF35E7C6EB437E238F3D2A3F063B4C.cer Subject info access: rsync://repo-rpki.idnic.net/repo/42dab46a-085e-4432-9833-71b8db144d94/0/B0D726419FBF35E7C6EB437E238F3D2A3F063B4C.mft Manifest number: E2 Signing time: Fri 05 Dec 2025 13:10:06 +0000 Manifest this update: Fri 05 Dec 2025 13:05:06 +0000 Manifest next update: Mon 08 Dec 2025 21:32:06 +0000 Files and hashes: 1: B0D726419FBF35E7C6EB437E238F3D2A3F063B4C.crl (hash: 5lxfHXKmRzjv4cFZaXHGvWtYRD1ih4pfHdP7uNTxTgE=) 2: 3136302e32352e35382e302f32332d3234203d3e20313532383333.roa (hash: 7IuV0NhxXlp455EXe3FaAoXVfJrAOl6E2yru0xUglkI=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/42dab46a-085e-4432-9833-71b8db144d94/0/B0D726419FBF35E7C6EB437E238F3D2A3F063B4C.crl rsync://repo-rpki.idnic.net/repo/42dab46a-085e-4432-9833-71b8db144d94/0/B0D726419FBF35E7C6EB437E238F3D2A3F063B4C.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/B0D726419FBF35E7C6EB437E238F3D2A3F063B4C.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 08 Dec 2025 21:32:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 50:69:32:b6:cc:35:f1:bd:02:17:58:e6:73:47:1e:d0:7f:d6:c0:1f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B0D726419FBF35E7C6EB437E238F3D2A3F063B4C Validity Not Before: Dec 5 13:05:06 2025 GMT Not After : Dec 8 21:32:06 2025 GMT Subject: CN=B9EA7241F10C065B064E92DE8F7DF15F66D78797 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:26:ab:a4:a7:24:da:97:7d:e9:06:ed:dd:ef: d2:0d:1e:81:d5:e3:45:36:e3:c6:86:31:31:5a:61: a6:ba:d1:6a:18:89:f5:c3:7c:6a:7b:ae:f5:a1:19: d0:99:b9:eb:51:79:3f:81:9f:12:0a:9e:0d:fe:7a: 95:d4:5e:d7:cd:49:ea:87:2e:c7:5b:0b:77:38:4d: 3a:2a:84:3d:c0:bd:1d:b5:81:cd:60:79:66:6c:7d: f1:d3:cd:fe:5b:9e:1e:f0:3b:4e:4d:d8:d9:e8:a9: 23:eb:41:00:0c:fb:ab:4d:d0:11:98:c4:f1:64:ad: fe:7a:22:93:bd:78:4f:38:9d:42:14:38:96:ba:60: 12:60:7e:2a:32:34:44:a9:4b:3d:cd:cb:71:ba:c5: 77:bf:8b:fc:2c:70:fd:41:c6:bc:88:37:af:84:ae: b0:41:69:d4:06:15:f0:9f:8e:f5:67:a1:e1:7f:54: 8a:22:48:fb:4d:1c:b2:5b:6f:fe:b6:16:28:2e:55: 5f:ef:54:ea:47:a7:2f:5a:60:ef:4a:cd:28:a9:bb: 1a:7a:2e:8f:dc:0c:18:76:59:82:d2:67:b2:94:33: 25:04:48:73:48:63:4c:43:3c:ff:07:fb:98:0e:f9: 21:c8:d6:62:2a:23:be:5e:e8:e6:d2:c1:7c:15:b3: 20:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:EA:72:41:F1:0C:06:5B:06:4E:92:DE:8F:7D:F1:5F:66:D7:87:97 X509v3 Authority Key Identifier: keyid:B0:D7:26:41:9F:BF:35:E7:C6:EB:43:7E:23:8F:3D:2A:3F:06:3B:4C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/42dab46a-085e-4432-9833-71b8db144d94/0/B0D726419FBF35E7C6EB437E238F3D2A3F063B4C.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/B0D726419FBF35E7C6EB437E238F3D2A3F063B4C.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/42dab46a-085e-4432-9833-71b8db144d94/0/B0D726419FBF35E7C6EB437E238F3D2A3F063B4C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a2:af:b5:ab:df:77:04:e9:2b:1c:02:36:25:b0:35:9f:2a:2f: 8e:5b:c7:d5:0d:f3:11:7c:ac:e5:de:9c:07:05:c7:bd:90:aa: 63:d8:fc:56:3e:aa:49:fe:85:7e:77:95:99:4a:76:52:e6:10: d0:69:49:aa:1a:4b:39:0e:20:8b:17:95:c7:39:42:b9:c1:40: b1:cf:37:2c:e2:f9:7f:93:5b:d1:ee:eb:36:b1:ae:6f:f3:e7: b3:8d:ca:76:61:b6:77:f8:9f:29:e2:b8:4b:89:90:3f:13:bb: d4:05:7e:a0:fa:88:7c:eb:bd:8e:7e:56:47:a3:c4:5a:98:d1: 64:b9:f8:eb:fd:cb:65:71:6a:12:3c:ce:a0:40:ca:fc:95:c5: ab:31:42:56:90:90:ad:c8:ed:08:7a:eb:2c:a0:32:e5:69:2a: 0f:24:53:09:88:5c:7a:07:61:15:1f:2e:ee:b5:8f:4a:cc:49: f7:59:75:fb:92:e9:83:5f:a1:c7:8b:c0:5b:cb:c6:84:81:3f: a4:be:2d:70:70:e2:18:7a:d9:c6:44:7e:f2:3b:71:75:73:7b: ee:d4:27:e8:7e:04:e4:22:a2:f5:51:c0:b0:11:d7:6b:92:f7: 50:6b:a7:28:e2:f2:de:4a:9c:6f:26:9f:6a:9e:79:c9:84:61: 5a:46:c2:e3 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUUGkytsw18b0CF1jmc0ce0H/WwB8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjBENzI2NDE5RkJGMzVFN0M2RUI0MzdFMjM4RjNEMkEz RjA2M0I0QzAeFw0yNTEyMDUxMzA1MDZaFw0yNTEyMDgyMTMyMDZaMDMxMTAvBgNV BAMTKEI5RUE3MjQxRjEwQzA2NUIwNjRFOTJERThGN0RGMTVGNjZENzg3OTcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDFJqukpyTal33pBu3d79INHoHV 40U248aGMTFaYaa60WoYifXDfGp7rvWhGdCZuetReT+BnxIKng3+epXUXtfNSeqH LsdbC3c4TToqhD3AvR21gc1geWZsffHTzf5bnh7wO05N2NnoqSPrQQAM+6tN0BGY xPFkrf56IpO9eE84nUIUOJa6YBJgfioyNESpSz3Ny3G6xXe/i/wscP1BxryIN6+E rrBBadQGFfCfjvVnoeF/VIoiSPtNHLJbb/62FiguVV/vVOpHpy9aYO9KzSipuxp6 Lo/cDBh2WYLSZ7KUMyUESHNIY0xDPP8H+5gO+SHI1mIqI75e6ObSwXwVsyAHAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUuepyQfEMBlsGTpLej33xX2bXh5cwHwYDVR0j BBgwFoAUsNcmQZ+/NefG60N+I489Kj8GO0wwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 MmRhYjQ2YS0wODVlLTQ0MzItOTgzMy03MWI4ZGIxNDRkOTQvMC9CMEQ3MjY0MTlG QkYzNUU3QzZFQjQzN0UyMzhGM0QyQTNGMDYzQjRDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvQjBENzI2NDE5RkJGMzVFN0M2RUI0MzdFMjM4RjNEMkEzRjA2 M0I0Qy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNDJkYWI0NmEtMDg1ZS00NDMyLTk4 MzMtNzFiOGRiMTQ0ZDk0LzAvQjBENzI2NDE5RkJGMzVFN0M2RUI0MzdFMjM4RjNE MkEzRjA2M0I0Qy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKKvtavfdwTpKxwCNiWwNZ8qL45bx9UN8xF8 rOXenAcFx72QqmPY/FY+qkn+hX53lZlKdlLmENBpSaoaSzkOIIsXlcc5QrnBQLHP Nyzi+X+TW9Hu6zaxrm/z57ONynZhtnf4nyniuEuJkD8Tu9QFfqD6iHzrvY5+Vkej xFqY0WS5+Ov9y2VxahI8zqBAyvyVxasxQlaQkK3I7Qh66yygMuVpKg8kUwmIXHoH YRUfLu61j0rMSfdZdfuS6YNfoceLwFvLxoSBP6S+LXBw4hh62cZEfvI7cXVze+7U J+h+BOQiovVRwLAR12uS91Brpyji8t5KnG8mn2qeecmEYVpGwuM= -----END CERTIFICATE-----Generated at Sun Dec 7 18:55:12 2025 by rpki-client