This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/50cb5c9b-f383-4e81-812c-0e227ad46b1b/0/BEB3B35BA1C3DACA59C6C525EA9823FF902AF998.mft File: BEB3B35BA1C3DACA59C6C525EA9823FF902AF998.mft (raw, json) Hash identifier: VB6YShOmDT6ukoyXfay1XHXLYenHxwi2pORUdbHKbfE= Subject key identifier: BE:DC:7B:64:27:02:2D:81:78:BB:5A:4F:C3:5B:FA:81:09:C6:52:2C Authority key identifier: BE:B3:B3:5B:A1:C3:DA:CA:59:C6:C5:25:EA:98:23:FF:90:2A:F9:98 Certificate issuer: /CN=BEB3B35BA1C3DACA59C6C525EA9823FF902AF998 Certificate serial: 0513BDCDAD4E9F74A75B0865BCAADA0EA30A0237 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BEB3B35BA1C3DACA59C6C525EA9823FF902AF998.cer Subject info access: rsync://repo-rpki.idnic.net/repo/50cb5c9b-f383-4e81-812c-0e227ad46b1b/0/BEB3B35BA1C3DACA59C6C525EA9823FF902AF998.mft Manifest number: 0529 Signing time: Tue 02 Dec 2025 03:51:13 +0000 Manifest this update: Tue 02 Dec 2025 03:46:13 +0000 Manifest next update: Fri 05 Dec 2025 13:22:13 +0000 Files and hashes: 1: 3130332e3135312e32322e302f32332d3233203d3e20313430343034.roa (hash: 7A1iTDrwk8kXb580V7UHZYGVNfXcQ2O63NbSELLsFpc=) 2: BEB3B35BA1C3DACA59C6C525EA9823FF902AF998.crl (hash: YNTrp+rUvAwjY254mMxhy+HJ3i5Ii/cxsiP6u7DU8R0=) 3: 3130332e3135312e32332e302f32342d3234203d3e20313430343034.roa (hash: bYtdH3bHM7U4F7bJ3T9zU9hXlE72l+eUu+9la3AGBTU=) 4: 3130332e3135312e32322e302f32342d3234203d3e20313430343034.roa (hash: 2DJXbY7xN8WlOd/aLrW1rEx9vxnt9jS/uQOEXM2RB4s=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/50cb5c9b-f383-4e81-812c-0e227ad46b1b/0/BEB3B35BA1C3DACA59C6C525EA9823FF902AF998.crl rsync://repo-rpki.idnic.net/repo/50cb5c9b-f383-4e81-812c-0e227ad46b1b/0/BEB3B35BA1C3DACA59C6C525EA9823FF902AF998.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BEB3B35BA1C3DACA59C6C525EA9823FF902AF998.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 05 Dec 2025 13:22:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 05:13:bd:cd:ad:4e:9f:74:a7:5b:08:65:bc:aa:da:0e:a3:0a:02:37 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BEB3B35BA1C3DACA59C6C525EA9823FF902AF998 Validity Not Before: Dec 2 03:46:13 2025 GMT Not After : Dec 5 13:22:13 2025 GMT Subject: CN=BEDC7B6427022D8178BB5A4FC35BFA8109C6522C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:5a:7c:05:0f:40:bd:7a:da:98:c7:9f:32:23: 4e:b4:14:2b:67:ca:20:69:0b:f8:68:be:70:75:8a: 1d:59:41:6c:9a:f9:8d:a8:58:f9:49:9e:30:51:46: 4c:1e:a0:11:cb:d5:4e:19:83:74:ba:61:f3:23:a5: cb:95:22:0c:6c:0e:0d:14:c5:b8:7c:17:af:09:63: 74:c2:74:5b:a7:99:bb:52:17:da:07:86:5a:e6:cc: 1e:5f:a3:76:a1:5b:03:a7:08:43:4f:ee:b7:ff:8a: 35:79:45:ad:bb:29:9b:17:50:22:ff:9a:52:d2:93: 12:73:c1:14:41:21:bc:17:53:fd:ce:a2:6a:0f:13: 22:32:f4:b2:89:e7:ac:df:ad:ba:53:76:ac:d9:3b: b7:2d:01:30:29:21:92:cc:b6:a1:40:c0:da:1b:2d: e5:e3:92:6c:38:bb:d2:d1:3a:99:1c:52:c8:20:26: ce:43:39:4e:83:96:13:5c:42:54:0d:1d:ca:ef:07: 29:47:15:ac:f9:74:0b:88:dd:cd:d5:06:a1:54:70: 4b:f1:e2:d0:cc:d6:33:e6:2a:26:20:bc:18:c2:81: 89:18:9f:79:40:b2:06:b0:a0:76:01:ef:f4:af:5b: 79:4b:98:4b:dd:81:1e:9d:da:e3:46:27:b8:a6:be: a8:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BE:DC:7B:64:27:02:2D:81:78:BB:5A:4F:C3:5B:FA:81:09:C6:52:2C X509v3 Authority Key Identifier: keyid:BE:B3:B3:5B:A1:C3:DA:CA:59:C6:C5:25:EA:98:23:FF:90:2A:F9:98 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/50cb5c9b-f383-4e81-812c-0e227ad46b1b/0/BEB3B35BA1C3DACA59C6C525EA9823FF902AF998.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BEB3B35BA1C3DACA59C6C525EA9823FF902AF998.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/50cb5c9b-f383-4e81-812c-0e227ad46b1b/0/BEB3B35BA1C3DACA59C6C525EA9823FF902AF998.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 82:97:64:32:c0:2e:dd:35:3b:7c:c4:dd:88:7b:74:c9:39:d9: bf:2e:e1:ce:b2:9b:a7:35:d6:bf:44:97:11:4b:c8:27:65:97: 9c:e7:f7:14:14:26:63:e6:95:f8:6f:3b:51:e6:66:33:1a:4d: ee:b1:6c:b0:39:e7:9b:e9:77:17:a1:89:bc:d8:bc:2c:14:90: ef:1e:0b:b4:e8:e5:30:bf:36:5d:f8:37:1b:1b:c1:0a:9d:42: b2:1c:02:61:c7:2f:b8:da:ca:c1:d2:00:60:68:6d:8a:2d:b1: ae:d6:75:17:da:8d:e7:e0:b9:08:ac:d6:56:d6:84:ce:db:8d: e6:1e:ff:da:f8:f6:82:11:6f:54:64:9b:38:f3:b1:ad:b2:2f: 6b:9a:1e:df:85:5e:27:27:8f:88:29:fd:71:21:7e:8e:6a:80: de:e6:51:07:14:41:23:3b:55:de:1a:54:02:0a:e5:52:19:13: 87:9e:3c:84:12:85:46:b4:38:03:a8:ac:3e:e2:7e:1f:16:e3: 63:94:2a:11:18:11:ed:c4:59:f2:bf:f1:87:33:b1:f5:0c:68: 7a:15:12:2d:bb:52:95:ca:75:af:95:61:be:1d:97:15:57:fe: 77:8e:ca:2a:23:71:a9:58:15:90:ed:a9:49:65:6d:ef:b4:07: 93:35:28:de -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUBRO9za1On3SnWwhlvKraDqMKAjcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkVCM0IzNUJBMUMzREFDQTU5QzZDNTI1RUE5ODIzRkY5 MDJBRjk5ODAeFw0yNTEyMDIwMzQ2MTNaFw0yNTEyMDUxMzIyMTNaMDMxMTAvBgNV BAMTKEJFREM3QjY0MjcwMjJEODE3OEJCNUE0RkMzNUJGQTgxMDlDNjUyMkMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC9WnwFD0C9etqYx58yI060FCtn yiBpC/hovnB1ih1ZQWya+Y2oWPlJnjBRRkweoBHL1U4Zg3S6YfMjpcuVIgxsDg0U xbh8F68JY3TCdFunmbtSF9oHhlrmzB5fo3ahWwOnCENP7rf/ijV5Ra27KZsXUCL/ mlLSkxJzwRRBIbwXU/3OomoPEyIy9LKJ56zfrbpTdqzZO7ctATApIZLMtqFAwNob LeXjkmw4u9LROpkcUsggJs5DOU6DlhNcQlQNHcrvBylHFaz5dAuI3c3VBqFUcEvx 4tDM1jPmKiYgvBjCgYkYn3lAsgawoHYB7/SvW3lLmEvdgR6d2uNGJ7imvqjHAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUvtx7ZCcCLYF4u1pPw1v6gQnGUiwwHwYDVR0j BBgwFoAUvrOzW6HD2spZxsUl6pgj/5Aq+ZgwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 MGNiNWM5Yi1mMzgzLTRlODEtODEyYy0wZTIyN2FkNDZiMWIvMC9CRUIzQjM1QkEx QzNEQUNBNTlDNkM1MjVFQTk4MjNGRjkwMkFGOTk4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQkVCM0IzNUJBMUMzREFDQTU5QzZDNTI1RUE5ODIzRkY5MDJB Rjk5OC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNTBjYjVjOWItZjM4My00ZTgxLTgx MmMtMGUyMjdhZDQ2YjFiLzAvQkVCM0IzNUJBMUMzREFDQTU5QzZDNTI1RUE5ODIz RkY5MDJBRjk5OC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIKXZDLALt01O3zE3Yh7dMk52b8u4c6ym6c1 1r9ElxFLyCdll5zn9xQUJmPmlfhvO1HmZjMaTe6xbLA555vpdxehibzYvCwUkO8e C7To5TC/Nl34NxsbwQqdQrIcAmHHL7jaysHSAGBobYotsa7WdRfajefguQis1lbW hM7bjeYe/9r49oIRb1Rkmzjzsa2yL2uaHt+FXicnj4gp/XEhfo5qgN7mUQcUQSM7 Vd4aVAIK5VIZE4eePIQShUa0OAOorD7ifh8W42OUKhEYEe3EWfK/8YczsfUMaHoV Ei27UpXKda+VYb4dlxVX/neOyiojcalYFZDtqUllbe+0B5M1KN4= -----END CERTIFICATE-----Generated at Wed Dec 3 14:13:36 2025 by rpki-client