This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/5a54a8ce-18f4-4988-a951-9664dd176cd9/0/BB27EAD4CC6FFF52F5BAAF4A875308D8CDE7CDAA.mft File: BB27EAD4CC6FFF52F5BAAF4A875308D8CDE7CDAA.mft (raw, json) Hash identifier: SiTsFET81xdmPOh9h9fikOpHT6n232atcIWtBv86efg= Subject key identifier: 5D:3D:D2:5A:AF:81:98:F9:E6:EB:04:0A:85:69:E7:A9:7C:92:E0:4B Authority key identifier: BB:27:EA:D4:CC:6F:FF:52:F5:BA:AF:4A:87:53:08:D8:CD:E7:CD:AA Certificate issuer: /CN=BB27EAD4CC6FFF52F5BAAF4A875308D8CDE7CDAA Certificate serial: 6A3CF2710F09623E6F8C868870FD4133539ED4D6 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BB27EAD4CC6FFF52F5BAAF4A875308D8CDE7CDAA.cer Subject info access: rsync://repo-rpki.idnic.net/repo/5a54a8ce-18f4-4988-a951-9664dd176cd9/0/BB27EAD4CC6FFF52F5BAAF4A875308D8CDE7CDAA.mft Manifest number: 030D Signing time: Wed 03 Dec 2025 12:02:03 +0000 Manifest this update: Wed 03 Dec 2025 11:57:03 +0000 Manifest next update: Sat 06 Dec 2025 18:03:03 +0000 Files and hashes: 1: BB27EAD4CC6FFF52F5BAAF4A875308D8CDE7CDAA.crl (hash: txxio6MpIqUfF1SBL2p8IlrR6tp6gA6lr205GZwO5UY=) 2: 3130332e3136392e3139392e302f32342d3234203d3e20313437313132.roa (hash: m681LM1ItdW4dx+wPJxInCtAMds6i/b/AFLjGDvuwL4=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/5a54a8ce-18f4-4988-a951-9664dd176cd9/0/BB27EAD4CC6FFF52F5BAAF4A875308D8CDE7CDAA.crl rsync://repo-rpki.idnic.net/repo/5a54a8ce-18f4-4988-a951-9664dd176cd9/0/BB27EAD4CC6FFF52F5BAAF4A875308D8CDE7CDAA.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BB27EAD4CC6FFF52F5BAAF4A875308D8CDE7CDAA.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 06 Dec 2025 18:03:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6a:3c:f2:71:0f:09:62:3e:6f:8c:86:88:70:fd:41:33:53:9e:d4:d6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BB27EAD4CC6FFF52F5BAAF4A875308D8CDE7CDAA Validity Not Before: Dec 3 11:57:03 2025 GMT Not After : Dec 6 18:03:03 2025 GMT Subject: CN=5D3DD25AAF8198F9E6EB040A8569E7A97C92E04B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:5a:aa:a4:80:ec:e5:a7:c5:a8:d4:f4:d0:78: d3:59:e3:d3:33:95:64:f1:1c:15:af:e8:1a:c9:fb: 5f:df:30:2b:68:72:d2:41:e4:70:19:f9:6b:78:49: f6:8a:b3:96:5d:c5:74:12:e2:25:bc:e7:c6:65:b7: cb:6f:4e:d5:15:28:58:b4:5b:8c:17:35:03:18:08: 6f:45:6a:4a:b7:97:ac:f0:fe:8a:a1:81:46:da:7a: 6f:f6:aa:c9:86:f3:ed:e7:39:c5:46:1a:46:09:f7: 54:f7:41:6c:69:dd:48:48:90:f3:48:15:c3:17:a5: a7:36:b0:63:d2:dd:20:8e:f8:45:de:02:d4:27:f8: fe:a0:8a:d0:d5:a4:5b:cc:51:3e:4f:64:59:a6:b7: 2a:ed:f2:0c:a6:04:11:58:c2:b0:24:c0:90:21:ba: c0:97:4b:38:18:ce:e7:0e:82:4f:68:2c:7e:e0:29: 56:f7:7d:26:c7:bd:16:97:c1:28:62:b6:71:a5:da: c3:44:62:25:e0:ff:0e:e2:42:5f:ce:88:48:9a:65: 1c:9d:c9:68:a2:82:f1:1f:6f:57:52:e8:98:e7:c4: 2a:15:fa:f1:97:3c:31:6d:da:8c:4a:91:4b:e6:70: 17:16:cb:a0:3d:e8:16:03:3c:af:82:a8:c0:db:66: a5:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5D:3D:D2:5A:AF:81:98:F9:E6:EB:04:0A:85:69:E7:A9:7C:92:E0:4B X509v3 Authority Key Identifier: keyid:BB:27:EA:D4:CC:6F:FF:52:F5:BA:AF:4A:87:53:08:D8:CD:E7:CD:AA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/5a54a8ce-18f4-4988-a951-9664dd176cd9/0/BB27EAD4CC6FFF52F5BAAF4A875308D8CDE7CDAA.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BB27EAD4CC6FFF52F5BAAF4A875308D8CDE7CDAA.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/5a54a8ce-18f4-4988-a951-9664dd176cd9/0/BB27EAD4CC6FFF52F5BAAF4A875308D8CDE7CDAA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c9:ef:76:e5:5d:f4:59:f4:bd:42:0d:e0:9b:8c:1d:76:da:c4: a7:b1:26:9d:2f:30:27:87:bd:96:88:27:85:e6:2d:99:07:22: d2:8b:b7:3c:54:58:39:92:85:8b:da:bc:09:5d:74:9d:7f:79: 1f:76:dc:a1:9d:35:54:cd:3d:7d:5b:e9:a8:f5:fd:22:8a:22: 78:45:d9:e3:89:fd:81:0e:16:c9:f7:66:ef:b6:7a:b7:72:46: e4:1d:75:3b:7a:31:ce:72:44:91:6c:c7:c9:54:a2:42:a0:6c: bb:ad:43:c6:85:a5:bc:93:ad:70:2b:56:0a:73:5f:a1:46:ae: 1c:73:4b:76:d9:c9:77:c2:49:d8:50:1c:78:79:bc:36:bb:d4: 33:96:7a:c6:4c:7e:25:2c:2b:0b:fc:37:d3:1f:5c:6b:b9:69: 57:0e:da:ee:0c:28:17:b9:ea:5d:d1:1e:98:62:07:45:ed:89: bc:e1:7c:d2:57:a4:1c:3e:62:f1:1c:25:61:68:20:79:df:1e: c0:c0:4e:c5:cb:89:74:76:cb:31:eb:4b:d9:55:58:90:26:30: b5:0e:de:fd:37:98:7e:56:67:a2:5c:e8:f8:ef:de:de:92:24: 0b:13:b5:9b:ac:b6:1b:2d:da:c7:f1:4a:1d:94:33:f2:16:ab: 10:87:e5:4f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUajzycQ8JYj5vjIaIcP1BM1Oe1NYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkIyN0VBRDRDQzZGRkY1MkY1QkFBRjRBODc1MzA4RDhD REU3Q0RBQTAeFw0yNTEyMDMxMTU3MDNaFw0yNTEyMDYxODAzMDNaMDMxMTAvBgNV BAMTKDVEM0REMjVBQUY4MTk4RjlFNkVCMDQwQTg1NjlFN0E5N0M5MkUwNEIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC0WqqkgOzlp8Wo1PTQeNNZ49Mz lWTxHBWv6BrJ+1/fMCtoctJB5HAZ+Wt4SfaKs5ZdxXQS4iW858Zlt8tvTtUVKFi0 W4wXNQMYCG9Fakq3l6zw/oqhgUbaem/2qsmG8+3nOcVGGkYJ91T3QWxp3UhIkPNI FcMXpac2sGPS3SCO+EXeAtQn+P6gitDVpFvMUT5PZFmmtyrt8gymBBFYwrAkwJAh usCXSzgYzucOgk9oLH7gKVb3fSbHvRaXwShitnGl2sNEYiXg/w7iQl/OiEiaZRyd yWiigvEfb1dS6JjnxCoV+vGXPDFt2oxKkUvmcBcWy6A96BYDPK+CqMDbZqVNAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUXT3SWq+BmPnm6wQKhWnnqXyS4EswHwYDVR0j BBgwFoAUuyfq1Mxv/1L1uq9Kh1MI2M3nzaowDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 YTU0YThjZS0xOGY0LTQ5ODgtYTk1MS05NjY0ZGQxNzZjZDkvMC9CQjI3RUFENEND NkZGRjUyRjVCQUFGNEE4NzUzMDhEOENERTdDREFBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQkIyN0VBRDRDQzZGRkY1MkY1QkFBRjRBODc1MzA4RDhDREU3 Q0RBQS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNWE1NGE4Y2UtMThmNC00OTg4LWE5 NTEtOTY2NGRkMTc2Y2Q5LzAvQkIyN0VBRDRDQzZGRkY1MkY1QkFBRjRBODc1MzA4 RDhDREU3Q0RBQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAMnvduVd9Fn0vUIN4JuMHXbaxKexJp0vMCeH vZaIJ4XmLZkHItKLtzxUWDmShYvavAlddJ1/eR923KGdNVTNPX1b6aj1/SKKInhF 2eOJ/YEOFsn3Zu+2erdyRuQddTt6Mc5yRJFsx8lUokKgbLutQ8aFpbyTrXArVgpz X6FGrhxzS3bZyXfCSdhQHHh5vDa71DOWesZMfiUsKwv8N9MfXGu5aVcO2u4MKBe5 6l3RHphiB0XtibzhfNJXpBw+YvEcJWFoIHnfHsDATsXLiXR2yzHrS9lVWJAmMLUO 3v03mH5WZ6Jc6Pjv3t6SJAsTtZusthst2sfxSh2UM/IWqxCH5U8= -----END CERTIFICATE-----Generated at Wed Dec 3 15:30:14 2025 by rpki-client