This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/5124b4b5-7813-46cd-9db4-a3cd585e0ed4/0/BEE36AB8351AFE80F1B0CE8F12AA40089829BB6F.mft File: BEE36AB8351AFE80F1B0CE8F12AA40089829BB6F.mft (raw, json) Hash identifier: an2/UpTnMdSBBMgv491wAdYi+QlnZSV4N2XFoXqbCTk= Subject key identifier: 68:8D:C2:31:F1:2B:D5:C1:25:AB:57:90:01:F5:B1:9C:C3:93:32:D6 Authority key identifier: BE:E3:6A:B8:35:1A:FE:80:F1:B0:CE:8F:12:AA:40:08:98:29:BB:6F Certificate issuer: /CN=BEE36AB8351AFE80F1B0CE8F12AA40089829BB6F Certificate serial: 11DFC513EA4F896D9F5AE11EACD92E6F9D778F02 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BEE36AB8351AFE80F1B0CE8F12AA40089829BB6F.cer Subject info access: rsync://repo-rpki.idnic.net/repo/5124b4b5-7813-46cd-9db4-a3cd585e0ed4/0/BEE36AB8351AFE80F1B0CE8F12AA40089829BB6F.mft Manifest number: 01E2 Signing time: Tue 02 Dec 2025 11:32:01 +0000 Manifest this update: Tue 02 Dec 2025 11:27:01 +0000 Manifest next update: Fri 05 Dec 2025 11:40:01 +0000 Files and hashes: 1: BEE36AB8351AFE80F1B0CE8F12AA40089829BB6F.crl (hash: b13rbc0B0x9quj0AihpTgZNsQBhN86jMYQzow95j8yg=) 2: 3130332e34332e32362e302f32332d3233203d3e20313530323832.roa (hash: ex+21fBaSyiItm2OS+YOTqm89deCqSKEYL8AQYAgtY0=) 3: 3130332e34332e32372e302f32342d3234203d3e20313530323832.roa (hash: BlULhi+TctVeKV8dE0CflZMYmvk41Sd1spCHrO2rX3k=) 4: 3130332e34332e32362e302f32342d3234203d3e20313530323832.roa (hash: 8mtJt2S7FnH2XqMpaERqdd8mg9cEUzD1SQhfJKt7rjM=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/5124b4b5-7813-46cd-9db4-a3cd585e0ed4/0/BEE36AB8351AFE80F1B0CE8F12AA40089829BB6F.crl rsync://repo-rpki.idnic.net/repo/5124b4b5-7813-46cd-9db4-a3cd585e0ed4/0/BEE36AB8351AFE80F1B0CE8F12AA40089829BB6F.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BEE36AB8351AFE80F1B0CE8F12AA40089829BB6F.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 05 Dec 2025 11:40:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 11:df:c5:13:ea:4f:89:6d:9f:5a:e1:1e:ac:d9:2e:6f:9d:77:8f:02 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BEE36AB8351AFE80F1B0CE8F12AA40089829BB6F Validity Not Before: Dec 2 11:27:01 2025 GMT Not After : Dec 5 11:40:01 2025 GMT Subject: CN=688DC231F12BD5C125AB579001F5B19CC39332D6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:c4:7b:c3:10:71:83:bd:2d:0a:fe:37:47:59: 9b:6b:73:95:b6:ef:67:64:2d:1c:83:aa:33:e0:10: d0:5e:15:7e:44:6d:2d:d4:27:f5:60:f6:52:0d:0d: 7b:03:1c:7e:48:d7:6c:44:38:14:ca:53:b9:57:70: 30:78:2b:b6:62:48:40:1b:a3:5c:81:39:1a:ad:de: 4e:20:6e:42:73:73:17:da:cb:55:34:e2:6b:a2:4e: a8:f8:6d:50:e4:54:47:02:2f:d6:49:e0:e2:84:51: a3:04:25:14:ad:22:40:b1:40:1d:7b:63:bc:d2:36: de:20:bb:b7:8d:bb:e8:a7:1c:c7:3d:8a:57:26:fb: 9f:b2:be:cd:c5:2c:a5:13:9e:c5:c2:03:1e:06:87: 38:69:8f:76:52:95:a6:7a:09:7b:ef:4e:a0:65:55: 41:6a:d4:11:9a:45:9b:99:b1:65:e5:e8:d8:10:99: 9a:92:b6:31:c9:54:bd:2f:e7:cf:f3:3c:ab:dd:58: a4:7e:5a:6d:eb:ae:f0:af:bf:8d:44:93:59:0b:a4: 87:0f:a0:a6:9c:1a:eb:20:5e:37:9e:bf:ed:7a:6b: e8:d7:7e:f9:45:98:84:0e:ed:96:b0:a8:85:d3:7a: 7e:bf:42:50:a3:44:11:9b:b3:13:44:2f:06:d1:25: 8b:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:8D:C2:31:F1:2B:D5:C1:25:AB:57:90:01:F5:B1:9C:C3:93:32:D6 X509v3 Authority Key Identifier: keyid:BE:E3:6A:B8:35:1A:FE:80:F1:B0:CE:8F:12:AA:40:08:98:29:BB:6F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/5124b4b5-7813-46cd-9db4-a3cd585e0ed4/0/BEE36AB8351AFE80F1B0CE8F12AA40089829BB6F.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BEE36AB8351AFE80F1B0CE8F12AA40089829BB6F.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/5124b4b5-7813-46cd-9db4-a3cd585e0ed4/0/BEE36AB8351AFE80F1B0CE8F12AA40089829BB6F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ac:27:e8:4a:99:a7:5c:2d:dc:f9:e9:fe:a4:ad:f9:2b:ee:25: ea:f6:25:c1:69:0c:29:59:2b:99:c1:84:a5:96:75:89:88:1d: 54:b7:6b:d1:5c:d1:b2:77:c7:21:09:1f:1f:98:fa:d8:89:b3: 16:80:14:1a:43:1b:4a:41:ee:c8:4f:b7:26:8a:56:98:2f:4d: 8e:dd:b3:1d:14:59:9d:c6:a0:8d:08:0e:8a:74:21:e1:a6:ea: e0:f7:08:3a:4c:ea:cd:18:76:5b:ca:82:9d:0a:bc:a2:12:90: b7:e8:6d:30:5d:4e:09:2d:f6:62:ee:01:e3:08:c1:38:67:cd: 56:c5:af:29:43:dd:14:a9:1b:4e:10:dd:49:3a:1f:7a:a7:9f: 98:4f:81:d4:30:ed:8b:8e:5d:2c:e5:68:a7:d1:8d:06:11:57: bc:dd:a0:69:5b:8d:0a:26:22:4e:fd:d1:fa:1a:4a:ca:7e:82: 53:03:ba:20:ba:2c:80:b3:bf:06:5c:a3:f5:3e:94:e5:e4:02: dd:35:ae:cd:41:5d:f2:ea:46:7e:d1:03:ff:52:18:18:ac:de: c9:60:9a:50:7c:c3:ce:a0:48:02:48:e6:89:3a:53:4d:d1:19: 34:3f:ec:de:a0:a8:4c:d9:dd:0c:a6:28:dd:b3:b1:62:1e:97: c6:50:3d:39 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUEd/FE+pPiW2fWuEerNkub513jwIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkVFMzZBQjgzNTFBRkU4MEYxQjBDRThGMTJBQTQwMDg5 ODI5QkI2RjAeFw0yNTEyMDIxMTI3MDFaFw0yNTEyMDUxMTQwMDFaMDMxMTAvBgNV BAMTKDY4OERDMjMxRjEyQkQ1QzEyNUFCNTc5MDAxRjVCMTlDQzM5MzMyRDYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC5xHvDEHGDvS0K/jdHWZtrc5W2 72dkLRyDqjPgENBeFX5EbS3UJ/Vg9lINDXsDHH5I12xEOBTKU7lXcDB4K7ZiSEAb o1yBORqt3k4gbkJzcxfay1U04muiTqj4bVDkVEcCL9ZJ4OKEUaMEJRStIkCxQB17 Y7zSNt4gu7eNu+inHMc9ilcm+5+yvs3FLKUTnsXCAx4Ghzhpj3ZSlaZ6CXvvTqBl VUFq1BGaRZuZsWXl6NgQmZqStjHJVL0v58/zPKvdWKR+Wm3rrvCvv41Ek1kLpIcP oKacGusgXjeev+16a+jXfvlFmIQO7ZawqIXTen6/QlCjRBGbsxNELwbRJYvbAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUaI3CMfEr1cElq1eQAfWxnMOTMtYwHwYDVR0j BBgwFoAUvuNquDUa/oDxsM6PEqpACJgpu28wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 MTI0YjRiNS03ODEzLTQ2Y2QtOWRiNC1hM2NkNTg1ZTBlZDQvMC9CRUUzNkFCODM1 MUFGRTgwRjFCMENFOEYxMkFBNDAwODk4MjlCQjZGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQkVFMzZBQjgzNTFBRkU4MEYxQjBDRThGMTJBQTQwMDg5ODI5 QkI2Ri5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNTEyNGI0YjUtNzgxMy00NmNkLTlk YjQtYTNjZDU4NWUwZWQ0LzAvQkVFMzZBQjgzNTFBRkU4MEYxQjBDRThGMTJBQTQw MDg5ODI5QkI2Ri5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKwn6EqZp1wt3Pnp/qSt+SvuJer2JcFpDClZ K5nBhKWWdYmIHVS3a9Fc0bJ3xyEJHx+Y+tiJsxaAFBpDG0pB7shPtyaKVpgvTY7d sx0UWZ3GoI0IDop0IeGm6uD3CDpM6s0YdlvKgp0KvKISkLfobTBdTgkt9mLuAeMI wThnzVbFrylD3RSpG04Q3Uk6H3qnn5hPgdQw7YuOXSzlaKfRjQYRV7zdoGlbjQom Ik790foaSsp+glMDuiC6LICzvwZco/U+lOXkAt01rs1BXfLqRn7RA/9SGBis3slg mlB8w86gSAJI5ok6U03RGTQ/7N6gqEzZ3QymKN2zsWIel8ZQPTk= -----END CERTIFICATE-----Generated at Wed Dec 3 13:57:10 2025 by rpki-client