This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/5bf2cf03-f9f9-4bca-8c2c-6073280dfea8/0/B392381083372148D0977D0066CFF38FD5A32CDB.mft File: B392381083372148D0977D0066CFF38FD5A32CDB.mft (raw, json) Hash identifier: PuGa1CoEIcPYZ9lYOu1odOcAUpBilt46m6xCuoCfoF0= Subject key identifier: B3:51:35:6E:CA:3D:51:68:FD:8D:30:D5:BF:B7:6E:CC:EE:99:A5:92 Authority key identifier: B3:92:38:10:83:37:21:48:D0:97:7D:00:66:CF:F3:8F:D5:A3:2C:DB Certificate issuer: /CN=B392381083372148D0977D0066CFF38FD5A32CDB Certificate serial: 44245A5FD95E19F379D5907B8C6675CC3470872F Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B392381083372148D0977D0066CFF38FD5A32CDB.cer Subject info access: rsync://repo-rpki.idnic.net/repo/5bf2cf03-f9f9-4bca-8c2c-6073280dfea8/0/B392381083372148D0977D0066CFF38FD5A32CDB.mft Manifest number: 025D Signing time: Wed 17 Dec 2025 11:42:08 +0000 Manifest this update: Wed 17 Dec 2025 11:37:08 +0000 Manifest next update: Sat 20 Dec 2025 20:17:08 +0000 Files and hashes: 1: 3130332e3138352e38322e302f32332d3234203d3e203538383230.roa (hash: KYSy/nRpWJvgJOx3JwwIgJ7/nxfWqKSbFEYRVqxBqWw=) 2: B392381083372148D0977D0066CFF38FD5A32CDB.crl (hash: msu2F8OmeIxCZjTPAdUjfNdjZMpZBlyNXkoAXkCZ+9c=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/5bf2cf03-f9f9-4bca-8c2c-6073280dfea8/0/B392381083372148D0977D0066CFF38FD5A32CDB.crl rsync://repo-rpki.idnic.net/repo/5bf2cf03-f9f9-4bca-8c2c-6073280dfea8/0/B392381083372148D0977D0066CFF38FD5A32CDB.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B392381083372148D0977D0066CFF38FD5A32CDB.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 20 Dec 2025 20:17:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 44:24:5a:5f:d9:5e:19:f3:79:d5:90:7b:8c:66:75:cc:34:70:87:2f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B392381083372148D0977D0066CFF38FD5A32CDB Validity Not Before: Dec 17 11:37:08 2025 GMT Not After : Dec 20 20:17:08 2025 GMT Subject: CN=B351356ECA3D5168FD8D30D5BFB76ECCEE99A592 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:6a:26:3c:34:4d:f4:7f:60:c0:78:4f:7e:2d: cf:a6:88:57:59:2a:d2:b9:e0:0e:38:e0:1f:f5:b7: db:af:f8:72:79:ad:76:3f:9f:6b:ee:2d:3e:1a:b5: 4f:fc:4c:2b:7a:a4:9a:21:7c:83:b6:a8:93:df:92: 0d:4c:dc:93:f3:5d:63:83:03:9e:32:5b:ce:7c:a6: 32:8b:e4:0c:69:29:99:2f:70:dd:e2:cf:12:7e:0d: 29:fa:5a:fd:2f:a7:6e:c7:b4:35:4d:5f:36:e2:72: 7c:e0:1d:47:61:f2:69:f7:ab:ec:7a:98:1d:75:9d: 9d:11:8b:1b:ab:26:3b:11:4d:e2:1b:72:0c:d7:5d: 48:57:80:94:2c:2b:d8:fb:17:ac:f0:4d:28:25:d7: 74:35:b2:24:60:db:8f:3c:5f:17:67:ac:3e:94:d2: 51:49:b8:bb:ed:2e:e9:4b:26:ea:40:dc:bd:ea:9d: 9d:39:b8:3f:ce:09:a3:be:92:cb:b5:bc:e7:13:2e: 20:d0:92:9b:cf:64:4c:6a:93:f5:26:13:bf:d6:6f: 16:70:23:1c:f5:48:b9:31:a6:c2:36:c3:68:59:d9: 76:71:3e:f7:4f:8d:47:2d:29:eb:f7:c6:f0:82:c3: 15:8c:de:23:f1:85:0c:e6:78:e4:54:f0:fd:40:f9: 1c:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B3:51:35:6E:CA:3D:51:68:FD:8D:30:D5:BF:B7:6E:CC:EE:99:A5:92 X509v3 Authority Key Identifier: keyid:B3:92:38:10:83:37:21:48:D0:97:7D:00:66:CF:F3:8F:D5:A3:2C:DB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/5bf2cf03-f9f9-4bca-8c2c-6073280dfea8/0/B392381083372148D0977D0066CFF38FD5A32CDB.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B392381083372148D0977D0066CFF38FD5A32CDB.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/5bf2cf03-f9f9-4bca-8c2c-6073280dfea8/0/B392381083372148D0977D0066CFF38FD5A32CDB.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7f:a2:b5:8a:bf:5f:4d:e5:86:23:9b:89:74:8a:3b:ec:78:06: 7c:10:2b:39:5e:37:9e:5a:41:90:1a:ca:bc:a2:c3:4f:82:f2: df:10:c5:ec:23:77:71:dc:1a:92:e4:69:c5:79:63:86:7f:6d: ce:cd:73:c6:ff:9d:4f:77:26:d5:4e:77:a6:3c:48:73:19:78: c1:05:07:7d:34:ee:f8:59:f9:e4:5f:c9:4c:25:b7:a9:17:58: 9c:ba:39:f9:7e:bb:66:df:b8:fc:03:45:7d:53:64:f3:ce:2d: 95:d4:b2:00:77:6e:f8:b6:bb:96:32:77:1e:b9:14:14:48:6c: 20:5e:67:f8:5a:82:6e:4b:89:46:65:cb:71:d1:dd:96:85:cf: da:8a:92:53:8d:92:6b:4d:f5:44:4b:f2:1c:51:b8:e0:fb:ce: 69:d1:a2:d0:d0:ce:13:43:95:e3:c4:15:09:e0:aa:ac:24:5b: da:84:f7:b2:75:f5:10:8f:75:aa:9a:b3:5a:87:9d:b2:29:dc: 69:98:59:a5:1d:89:18:47:4d:2b:77:73:f3:15:03:63:27:09: 6f:19:e7:76:2e:1d:95:9c:e4:c9:00:07:ef:c9:e5:f9:68:af: cd:b1:d5:0e:4f:a4:83:72:b6:d0:2b:ae:33:ef:bb:8c:cc:17: 09:55:2e:f0 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIURCRaX9leGfN51ZB7jGZ1zDRwhy8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjM5MjM4MTA4MzM3MjE0OEQwOTc3RDAwNjZDRkYzOEZE NUEzMkNEQjAeFw0yNTEyMTcxMTM3MDhaFw0yNTEyMjAyMDE3MDhaMDMxMTAvBgNV BAMTKEIzNTEzNTZFQ0EzRDUxNjhGRDhEMzBENUJGQjc2RUNDRUU5OUE1OTIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQChaiY8NE30f2DAeE9+Lc+miFdZ KtK54A444B/1t9uv+HJ5rXY/n2vuLT4atU/8TCt6pJohfIO2qJPfkg1M3JPzXWOD A54yW858pjKL5AxpKZkvcN3izxJ+DSn6Wv0vp27HtDVNXzbicnzgHUdh8mn3q+x6 mB11nZ0RixurJjsRTeIbcgzXXUhXgJQsK9j7F6zwTSgl13Q1siRg2488XxdnrD6U 0lFJuLvtLulLJupA3L3qnZ05uD/OCaO+ksu1vOcTLiDQkpvPZExqk/UmE7/WbxZw Ixz1SLkxpsI2w2hZ2XZxPvdPjUctKev3xvCCwxWM3iPxhQzmeORU8P1A+RwTAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUs1E1bso9UWj9jTDVv7duzO6ZpZIwHwYDVR0j BBgwFoAUs5I4EIM3IUjQl30AZs/zj9WjLNswDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 YmYyY2YwMy1mOWY5LTRiY2EtOGMyYy02MDczMjgwZGZlYTgvMC9CMzkyMzgxMDgz MzcyMTQ4RDA5NzdEMDA2NkNGRjM4RkQ1QTMyQ0RCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQjM5MjM4MTA4MzM3MjE0OEQwOTc3RDAwNjZDRkYzOEZENUEz MkNEQi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNWJmMmNmMDMtZjlmOS00YmNhLThj MmMtNjA3MzI4MGRmZWE4LzAvQjM5MjM4MTA4MzM3MjE0OEQwOTc3RDAwNjZDRkYz OEZENUEzMkNEQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAH+itYq/X03lhiObiXSKO+x4BnwQKzleN55a QZAayryiw0+C8t8Qxewjd3HcGpLkacV5Y4Z/bc7Nc8b/nU93JtVOd6Y8SHMZeMEF B3007vhZ+eRfyUwlt6kXWJy6Ofl+u2bfuPwDRX1TZPPOLZXUsgB3bvi2u5Yydx65 FBRIbCBeZ/hagm5LiUZly3HR3ZaFz9qKklONkmtN9URL8hxRuOD7zmnRotDQzhND lePEFQngqqwkW9qE97J19RCPdaqas1qHnbIp3GmYWaUdiRhHTSt3c/MVA2MnCW8Z 53YuHZWc5MkAB+/J5flor82x1Q5PpINyttArrjPvu4zMFwlVLvA= -----END CERTIFICATE-----Generated at Fri Dec 19 06:18:13 2025 by rpki-client