This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/57cd511f-afff-4fec-8724-d4119f891df2/0/B0B4D0A5FD4E58D80534977B027C8BC68222070F.mft File: B0B4D0A5FD4E58D80534977B027C8BC68222070F.mft (raw, json) Hash identifier: ahcp74Q4uvwDUo3Ny/YAKoawJRYk+hP671kWor7mHZM= Subject key identifier: 25:15:41:9C:21:7A:0D:E6:59:88:B0:02:54:69:9B:1F:6D:E0:CD:0F Authority key identifier: B0:B4:D0:A5:FD:4E:58:D8:05:34:97:7B:02:7C:8B:C6:82:22:07:0F Certificate issuer: /CN=B0B4D0A5FD4E58D80534977B027C8BC68222070F Certificate serial: 2DA60EFAC8E745B8C7A12E15BD16F5D21B24373A Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B0B4D0A5FD4E58D80534977B027C8BC68222070F.cer Subject info access: rsync://repo-rpki.idnic.net/repo/57cd511f-afff-4fec-8724-d4119f891df2/0/B0B4D0A5FD4E58D80534977B027C8BC68222070F.mft Manifest number: 03A7 Signing time: Tue 02 Dec 2025 01:51:26 +0000 Manifest this update: Tue 02 Dec 2025 01:46:26 +0000 Manifest next update: Fri 05 Dec 2025 06:23:26 +0000 Files and hashes: 1: 3130332e3136342e35362e302f32342d3234203d3e20313431393033.roa (hash: BZ7IxyZHQ1xzeEJa2EscxaRyrE0WSeLJOeD3hu5iHH8=) 2: 3130332e3136342e35362e302f32332d3233203d3e20313431393033.roa (hash: lmDaoh03D9rTDqDSAuHtSlsBls3g0dB3bSo5aCMqbVU=) 3: B0B4D0A5FD4E58D80534977B027C8BC68222070F.crl (hash: NJohUtfc4Y2vNZ6xAPPunKmmkmzY8svYKGTWG50enTw=) 4: 3130332e3136342e35372e302f32342d3234203d3e20313431393033.roa (hash: QHTzNtrA62lCbap5pnLy6Afc1/3RNfZE7wu74tOUQBg=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/57cd511f-afff-4fec-8724-d4119f891df2/0/B0B4D0A5FD4E58D80534977B027C8BC68222070F.crl rsync://repo-rpki.idnic.net/repo/57cd511f-afff-4fec-8724-d4119f891df2/0/B0B4D0A5FD4E58D80534977B027C8BC68222070F.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B0B4D0A5FD4E58D80534977B027C8BC68222070F.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 05 Dec 2025 06:23:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2d:a6:0e:fa:c8:e7:45:b8:c7:a1:2e:15:bd:16:f5:d2:1b:24:37:3a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B0B4D0A5FD4E58D80534977B027C8BC68222070F Validity Not Before: Dec 2 01:46:26 2025 GMT Not After : Dec 5 06:23:26 2025 GMT Subject: CN=2515419C217A0DE65988B00254699B1F6DE0CD0F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:4d:c3:5d:32:cb:27:7f:7f:86:4d:cb:78:ed: da:b7:06:8c:c7:76:57:4d:de:11:e8:e0:ae:06:17: 22:22:77:03:29:7b:f3:91:66:54:71:88:0d:91:ec: bb:7e:13:a5:4c:9a:75:e0:d4:98:ab:18:6e:f3:33: cb:89:51:cb:6c:60:33:12:3b:46:4d:3d:e2:03:40: 46:16:1e:0a:e4:3d:7c:58:49:de:e8:1f:17:b3:e7: 18:36:82:90:81:5e:07:44:e6:78:bd:9b:f1:b2:87: 05:34:a7:03:52:19:2c:3e:76:7e:0f:30:25:5d:a8: 7a:56:49:c2:c0:40:7f:b5:a8:29:c9:25:83:36:88: d4:4c:30:5d:ed:72:67:8a:85:03:8c:31:7b:15:8d: c6:cb:51:0d:a2:79:1b:39:f8:6d:ef:d6:f4:af:cc: 94:5d:0c:1d:f2:dd:35:b5:53:7a:a1:6c:27:d2:51: 46:25:0b:46:7c:25:95:72:61:9c:5d:ae:4c:ba:a3: b6:be:05:3f:f0:a8:8c:02:f9:3a:dc:91:8a:11:03: 5d:30:8a:6a:82:82:af:48:ac:09:cd:25:0d:bd:4e: 6c:70:1b:28:d4:4b:a5:76:5e:7d:0a:b8:0d:c6:1c: 04:1a:06:97:61:0e:2d:69:c5:eb:b1:ac:61:17:23: f9:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:15:41:9C:21:7A:0D:E6:59:88:B0:02:54:69:9B:1F:6D:E0:CD:0F X509v3 Authority Key Identifier: keyid:B0:B4:D0:A5:FD:4E:58:D8:05:34:97:7B:02:7C:8B:C6:82:22:07:0F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/57cd511f-afff-4fec-8724-d4119f891df2/0/B0B4D0A5FD4E58D80534977B027C8BC68222070F.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B0B4D0A5FD4E58D80534977B027C8BC68222070F.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/57cd511f-afff-4fec-8724-d4119f891df2/0/B0B4D0A5FD4E58D80534977B027C8BC68222070F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 02:3b:24:db:76:08:27:1e:6f:88:bb:de:83:86:df:b5:cc:0b: 98:fb:f6:a8:c4:22:e0:37:95:11:e4:3c:c8:f0:b2:bd:f8:03: 12:0d:f0:af:6e:fb:99:0b:22:4a:2a:71:62:d1:48:a7:ed:38: 41:d6:21:aa:ba:17:7b:a8:a1:ff:7b:24:7c:a0:0f:3f:43:ab: d6:f6:aa:3a:21:bf:62:6c:be:13:8b:62:7f:7b:7c:27:1b:5d: 05:93:00:f7:5d:58:84:63:44:08:c2:30:d3:26:ac:bd:22:8b: 20:24:c4:ba:dd:46:e6:07:29:40:57:c9:18:b0:58:5e:ab:e2: 0d:4e:57:9d:23:cb:81:2e:39:38:3c:27:b8:03:86:e1:11:89: b7:54:6d:71:6c:d7:dc:9c:e6:40:d0:56:0f:6e:6e:b8:d7:50: d7:57:ff:43:8f:88:fc:41:bd:f6:d6:34:46:12:9c:7e:5b:83: 6f:92:ad:4c:78:2c:82:19:a3:a1:92:e2:a3:02:6a:ad:91:69: 1d:4b:5e:2f:64:e1:9b:ee:e1:a1:8c:e1:45:c5:26:49:b8:cf: 2e:5d:ff:d8:a1:53:e3:c9:17:db:11:12:a9:b4:c0:70:d6:6f: 15:2b:e5:ba:ca:de:f2:4a:b5:ee:06:bd:c7:b4:58:a2:1c:c4: 3b:7a:f0:f9 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIULaYO+sjnRbjHoS4VvRb10hskNzowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjBCNEQwQTVGRDRFNThEODA1MzQ5NzdCMDI3QzhCQzY4 MjIyMDcwRjAeFw0yNTEyMDIwMTQ2MjZaFw0yNTEyMDUwNjIzMjZaMDMxMTAvBgNV BAMTKDI1MTU0MTlDMjE3QTBERTY1OTg4QjAwMjU0Njk5QjFGNkRFMENEMEYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCxTcNdMssnf3+GTct47dq3BozH dldN3hHo4K4GFyIidwMpe/ORZlRxiA2R7Lt+E6VMmnXg1JirGG7zM8uJUctsYDMS O0ZNPeIDQEYWHgrkPXxYSd7oHxez5xg2gpCBXgdE5ni9m/GyhwU0pwNSGSw+dn4P MCVdqHpWScLAQH+1qCnJJYM2iNRMMF3tcmeKhQOMMXsVjcbLUQ2ieRs5+G3v1vSv zJRdDB3y3TW1U3qhbCfSUUYlC0Z8JZVyYZxdrky6o7a+BT/wqIwC+TrckYoRA10w imqCgq9IrAnNJQ29TmxwGyjUS6V2Xn0KuA3GHAQaBpdhDi1pxeuxrGEXI/mHAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUJRVBnCF6DeZZiLACVGmbH23gzQ8wHwYDVR0j BBgwFoAUsLTQpf1OWNgFNJd7AnyLxoIiBw8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 N2NkNTExZi1hZmZmLTRmZWMtODcyNC1kNDExOWY4OTFkZjIvMC9CMEI0RDBBNUZE NEU1OEQ4MDUzNDk3N0IwMjdDOEJDNjgyMjIwNzBGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQjBCNEQwQTVGRDRFNThEODA1MzQ5NzdCMDI3QzhCQzY4MjIy MDcwRi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNTdjZDUxMWYtYWZmZi00ZmVjLTg3 MjQtZDQxMTlmODkxZGYyLzAvQjBCNEQwQTVGRDRFNThEODA1MzQ5NzdCMDI3QzhC QzY4MjIyMDcwRi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAI7JNt2CCceb4i73oOG37XMC5j79qjEIuA3 lRHkPMjwsr34AxIN8K9u+5kLIkoqcWLRSKftOEHWIaq6F3uoof97JHygDz9Dq9b2 qjohv2JsvhOLYn97fCcbXQWTAPddWIRjRAjCMNMmrL0iiyAkxLrdRuYHKUBXyRiw WF6r4g1OV50jy4EuOTg8J7gDhuERibdUbXFs19yc5kDQVg9ubrjXUNdX/0OPiPxB vfbWNEYSnH5bg2+SrUx4LIIZo6GS4qMCaq2RaR1LXi9k4Zvu4aGM4UXFJkm4zy5d /9ihU+PJF9sREqm0wHDWbxUr5brK3vJKte4Gvce0WKIcxDt68Pk= -----END CERTIFICATE-----Generated at Wed Dec 3 14:55:47 2025 by rpki-client