This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/45dff9b3-9041-4dd6-b7ab-02060d65d09a/0/B605D71FEB5A1DBE5676CFACB394ABBA37C83A86.mft File: B605D71FEB5A1DBE5676CFACB394ABBA37C83A86.mft (raw, json) Hash identifier: 8y8WkrE/zWKozdbl+435r6JBM+7HxvN8LocBim8tu4w= Subject key identifier: FA:1E:DB:B5:1B:48:CC:25:02:AB:52:37:09:82:97:9B:80:15:7C:8E Authority key identifier: B6:05:D7:1F:EB:5A:1D:BE:56:76:CF:AC:B3:94:AB:BA:37:C8:3A:86 Certificate issuer: /CN=B605D71FEB5A1DBE5676CFACB394ABBA37C83A86 Certificate serial: 387F41526388C1859141978AFFF4F99B11D9ACBC Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B605D71FEB5A1DBE5676CFACB394ABBA37C83A86.cer Subject info access: rsync://repo-rpki.idnic.net/repo/45dff9b3-9041-4dd6-b7ab-02060d65d09a/0/B605D71FEB5A1DBE5676CFACB394ABBA37C83A86.mft Manifest number: 0532 Signing time: Fri 12 Dec 2025 23:02:11 +0000 Manifest this update: Fri 12 Dec 2025 22:57:11 +0000 Manifest next update: Tue 16 Dec 2025 09:39:11 +0000 Files and hashes: 1: 3130332e3132342e3139372e302f32342d3234203d3e20313338303936.roa (hash: nzLKnI/D3cwy5mjROOKEojLaE+IM3VD8CZS+m6prGYU=) 2: 3130332e3132342e3139362e302f32342d3234203d3e20313338303936.roa (hash: n0pHhF58CPylB9y5w46zbjaPBFWjrRvur8ZNb3WIRks=) 3: 3130332e3132342e3139382e302f32342d3234203d3e20313338303936.roa (hash: 6uaz9H2C0Zmi7+Kl7mXUqp61Tn9wAvtzejcx5d8BSvE=) 4: B605D71FEB5A1DBE5676CFACB394ABBA37C83A86.crl (hash: ImioDTyfNnCFuTth+JlH/DqUNcVMWQxxEyYBc9kKpk0=) 5: 323430333a653434303a3a2f33322d3332203d3e20313338303936.roa (hash: NFm2BuROSXEUux226kkrY22nGhWfXy6Nzi8qa9TvywQ=) 6: 3130332e3132342e3139392e302f32342d3234203d3e20313338303936.roa (hash: 9iKS8p7Xao18ldzefre+pP4jboQ9AAl4Hg0B9pQyQbE=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/45dff9b3-9041-4dd6-b7ab-02060d65d09a/0/B605D71FEB5A1DBE5676CFACB394ABBA37C83A86.crl rsync://repo-rpki.idnic.net/repo/45dff9b3-9041-4dd6-b7ab-02060d65d09a/0/B605D71FEB5A1DBE5676CFACB394ABBA37C83A86.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B605D71FEB5A1DBE5676CFACB394ABBA37C83A86.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 16 Dec 2025 09:39:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 38:7f:41:52:63:88:c1:85:91:41:97:8a:ff:f4:f9:9b:11:d9:ac:bc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B605D71FEB5A1DBE5676CFACB394ABBA37C83A86 Validity Not Before: Dec 12 22:57:11 2025 GMT Not After : Dec 16 09:39:11 2025 GMT Subject: CN=FA1EDBB51B48CC2502AB52370982979B80157C8E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:73:8d:e6:37:92:8d:2a:f9:f8:8b:13:49:dd: 3b:58:ee:a6:1c:9d:27:de:ca:f2:2c:8d:ee:a1:b6: d4:c1:ed:f6:ae:d5:1b:9b:73:a6:d1:c7:c5:46:5b: 34:24:db:7a:12:25:9e:46:3e:ad:ce:35:f8:e7:7e: 46:52:ce:80:92:ff:d1:27:42:29:bf:f4:c1:7b:4b: 79:c4:03:33:de:4a:e8:22:2a:af:88:09:ad:29:80: fe:c5:76:06:d8:8a:c6:66:50:3f:07:2a:42:e1:a8: 1c:1c:e3:75:f5:77:bf:6d:66:97:c0:4e:73:74:f1: 51:ee:0a:cf:82:aa:9f:d2:ed:d8:bb:59:5c:70:c4: fa:9c:25:3b:fa:b1:bf:c6:d4:6b:cc:60:eb:ed:b8: 4f:f4:78:8b:74:e0:15:2d:5f:90:fa:78:24:83:c1: 72:f5:e9:fe:14:40:b9:2c:63:b2:ca:38:37:63:4b: 3b:b4:9d:d6:a7:9d:00:2b:e2:7f:25:1c:e1:07:52: c2:88:e5:24:59:04:bd:d4:bc:88:0f:57:50:c2:32: 47:be:56:14:d5:ce:6b:9f:8f:74:d4:df:fa:c7:bc: c1:a0:0e:5c:53:73:39:70:11:0c:94:7e:a4:d3:ac: 75:9f:78:e8:ee:f2:33:8f:65:a4:b9:4d:36:22:dd: 29:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:1E:DB:B5:1B:48:CC:25:02:AB:52:37:09:82:97:9B:80:15:7C:8E X509v3 Authority Key Identifier: keyid:B6:05:D7:1F:EB:5A:1D:BE:56:76:CF:AC:B3:94:AB:BA:37:C8:3A:86 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/45dff9b3-9041-4dd6-b7ab-02060d65d09a/0/B605D71FEB5A1DBE5676CFACB394ABBA37C83A86.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B605D71FEB5A1DBE5676CFACB394ABBA37C83A86.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/45dff9b3-9041-4dd6-b7ab-02060d65d09a/0/B605D71FEB5A1DBE5676CFACB394ABBA37C83A86.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c1:a8:1d:9a:7e:0d:81:bf:88:92:84:8a:cf:7c:b7:99:cb:4e: dc:a9:39:ee:1e:e8:20:5e:2c:1e:75:8b:39:92:d3:70:5d:5a: 7e:34:26:a7:71:8b:4a:10:6e:be:a5:57:5e:3c:95:46:9d:89: 36:0c:ce:e0:48:f4:d1:dc:df:5d:7b:03:e8:2b:6e:0a:0d:5b: 0b:22:77:c1:2f:4c:92:77:8f:b5:5c:fa:5e:16:a4:08:d9:de: 4c:a1:4f:aa:1f:4f:ea:f6:ca:52:f3:68:4c:f2:01:c3:8a:3e: a0:1c:94:31:12:ee:3e:ef:22:cd:6a:6a:d0:7a:6b:52:5c:2a: 3b:fc:08:f6:a3:a8:2a:62:e5:6e:d0:17:45:0c:f8:68:5b:19: 9e:68:09:66:9a:01:f9:f1:69:bb:6b:5e:cc:09:b7:c2:14:63: 2d:30:41:79:56:36:59:26:1f:6c:f9:18:3f:d1:80:88:84:0f: 93:bc:be:3f:b8:fd:1a:e5:13:0c:38:f7:07:63:7f:72:75:2f: 1d:a0:14:a9:aa:ab:25:92:94:dd:77:e8:7e:a0:38:41:ba:72: 2b:0f:89:28:a1:16:20:6a:3e:22:a1:27:1e:a5:53:ea:f5:78: b7:ee:7e:62:3c:19:4e:be:34:18:8d:3a:6c:c5:89:07:ef:79: 2f:d4:75:72 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUOH9BUmOIwYWRQZeK//T5mxHZrLwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjYwNUQ3MUZFQjVBMURCRTU2NzZDRkFDQjM5NEFCQkEz N0M4M0E4NjAeFw0yNTEyMTIyMjU3MTFaFw0yNTEyMTYwOTM5MTFaMDMxMTAvBgNV BAMTKEZBMUVEQkI1MUI0OENDMjUwMkFCNTIzNzA5ODI5NzlCODAxNTdDOEUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDPc43mN5KNKvn4ixNJ3TtY7qYc nSfeyvIsje6httTB7fau1Rubc6bRx8VGWzQk23oSJZ5GPq3ONfjnfkZSzoCS/9En Qim/9MF7S3nEAzPeSugiKq+ICa0pgP7FdgbYisZmUD8HKkLhqBwc43X1d79tZpfA TnN08VHuCs+Cqp/S7di7WVxwxPqcJTv6sb/G1GvMYOvtuE/0eIt04BUtX5D6eCSD wXL16f4UQLksY7LKODdjSzu0ndannQAr4n8lHOEHUsKI5SRZBL3UvIgPV1DCMke+ VhTVzmufj3TU3/rHvMGgDlxTczlwEQyUfqTTrHWfeOju8jOPZaS5TTYi3Sk9AgMB AAGjggI8MIICODAdBgNVHQ4EFgQU+h7btRtIzCUCq1I3CYKXm4AVfI4wHwYDVR0j BBgwFoAUtgXXH+taHb5Wds+ss5SrujfIOoYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 NWRmZjliMy05MDQxLTRkZDYtYjdhYi0wMjA2MGQ2NWQwOWEvMC9CNjA1RDcxRkVC NUExREJFNTY3NkNGQUNCMzk0QUJCQTM3QzgzQTg2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQjYwNUQ3MUZFQjVBMURCRTU2NzZDRkFDQjM5NEFCQkEzN0M4 M0E4Ni5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNDVkZmY5YjMtOTA0MS00ZGQ2LWI3 YWItMDIwNjBkNjVkMDlhLzAvQjYwNUQ3MUZFQjVBMURCRTU2NzZDRkFDQjM5NEFC QkEzN0M4M0E4Ni5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAMGoHZp+DYG/iJKEis98t5nLTtypOe4e6CBe LB51izmS03BdWn40Jqdxi0oQbr6lV148lUadiTYMzuBI9NHc3117A+grbgoNWwsi d8EvTJJ3j7Vc+l4WpAjZ3kyhT6ofT+r2ylLzaEzyAcOKPqAclDES7j7vIs1qatB6 a1JcKjv8CPajqCpi5W7QF0UM+GhbGZ5oCWaaAfnxabtrXswJt8IUYy0wQXlWNlkm H2z5GD/RgIiED5O8vj+4/RrlEww49wdjf3J1Lx2gFKmqqyWSlN136H6gOEG6cisP iSihFiBqPiKhJx6lU+r1eLfufmI8GU6+NBiNOmzFiQfveS/UdXI= -----END CERTIFICATE-----Generated at Sun Dec 14 01:54:34 2025 by rpki-client