This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/5da4ef71-f0e0-4252-8160-505321fa5089/0/BB8E14FCAD3AF2EF30A8F5696339D6F7DF5D735B.mft File: BB8E14FCAD3AF2EF30A8F5696339D6F7DF5D735B.mft (raw, json) Hash identifier: iWPbbf+eUID+1vfJQMsLPuP1EBn4YylT9cmIJ03i+DE= Subject key identifier: B1:27:E7:EB:C2:FF:04:A6:4C:A1:CE:41:0F:46:4A:F0:3C:18:04:C4 Authority key identifier: BB:8E:14:FC:AD:3A:F2:EF:30:A8:F5:69:63:39:D6:F7:DF:5D:73:5B Certificate issuer: /CN=BB8E14FCAD3AF2EF30A8F5696339D6F7DF5D735B Certificate serial: 3AB960E444A7802ECE78F0076BC124034F1BD3B9 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BB8E14FCAD3AF2EF30A8F5696339D6F7DF5D735B.cer Subject info access: rsync://repo-rpki.idnic.net/repo/5da4ef71-f0e0-4252-8160-505321fa5089/0/BB8E14FCAD3AF2EF30A8F5696339D6F7DF5D735B.mft Manifest number: 0233 Signing time: Wed 24 Dec 2025 17:22:04 +0000 Manifest this update: Wed 24 Dec 2025 17:17:04 +0000 Manifest next update: Sat 27 Dec 2025 19:04:04 +0000 Files and hashes: 1: BB8E14FCAD3AF2EF30A8F5696339D6F7DF5D735B.crl (hash: VR/wtuEJm3d7fud+mBYO4F4wgTjeyNmjYHLyT31LY8g=) 2: 3130332e3133352e3135322e302f32322d3234203d3e203338333230.roa (hash: YAXBiP1Tn35BvKpuF6xhlnff/qb6fyDlzJRGhETAkV8=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/5da4ef71-f0e0-4252-8160-505321fa5089/0/BB8E14FCAD3AF2EF30A8F5696339D6F7DF5D735B.crl rsync://repo-rpki.idnic.net/repo/5da4ef71-f0e0-4252-8160-505321fa5089/0/BB8E14FCAD3AF2EF30A8F5696339D6F7DF5D735B.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BB8E14FCAD3AF2EF30A8F5696339D6F7DF5D735B.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 27 Dec 2025 19:04:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3a:b9:60:e4:44:a7:80:2e:ce:78:f0:07:6b:c1:24:03:4f:1b:d3:b9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BB8E14FCAD3AF2EF30A8F5696339D6F7DF5D735B Validity Not Before: Dec 24 17:17:04 2025 GMT Not After : Dec 27 19:04:04 2025 GMT Subject: CN=B127E7EBC2FF04A64CA1CE410F464AF03C1804C4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:2d:fe:a5:81:c1:14:79:12:62:0a:15:c2:0e: f4:c6:54:16:57:89:f2:e7:01:eb:25:e4:95:c5:37: 75:e2:8d:a5:b5:42:ae:e8:69:f8:a7:e8:47:3e:bf: 1f:49:0d:e9:9b:16:cb:d5:93:64:97:d4:ce:82:b0: 6b:12:5b:c3:b8:09:23:a1:03:c5:24:bf:41:84:9f: a3:19:84:44:44:cc:47:60:0d:c3:08:10:f7:8c:f7: eb:dc:33:d9:ec:79:4a:e0:e5:4c:b3:f3:19:f9:b2: 59:82:1e:18:8a:5f:87:58:8b:10:eb:ae:a4:09:6a: 4e:67:b4:4d:57:81:6e:0f:68:88:be:99:f4:7c:90: 45:91:ba:af:17:5b:a7:90:ae:87:f7:e5:eb:e3:f7: 6e:af:ba:68:ed:99:54:14:76:1a:e1:dc:40:ec:5c: 9c:ee:ee:ad:b8:15:fa:79:52:a9:7e:42:58:36:8e: 8c:43:16:6b:69:52:e2:16:62:b9:74:23:e6:ad:ba: c9:12:b6:93:42:ac:30:bd:2c:b5:53:b6:c9:b9:85: d7:54:9c:25:bf:3d:8d:cc:cd:89:dd:1e:9c:60:7d: 25:55:b7:55:82:91:6c:a7:dd:2f:e3:c5:44:ac:26: f2:f5:4b:21:5e:a7:ae:be:75:e8:96:57:e0:ee:39: 71:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:27:E7:EB:C2:FF:04:A6:4C:A1:CE:41:0F:46:4A:F0:3C:18:04:C4 X509v3 Authority Key Identifier: keyid:BB:8E:14:FC:AD:3A:F2:EF:30:A8:F5:69:63:39:D6:F7:DF:5D:73:5B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/5da4ef71-f0e0-4252-8160-505321fa5089/0/BB8E14FCAD3AF2EF30A8F5696339D6F7DF5D735B.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BB8E14FCAD3AF2EF30A8F5696339D6F7DF5D735B.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/5da4ef71-f0e0-4252-8160-505321fa5089/0/BB8E14FCAD3AF2EF30A8F5696339D6F7DF5D735B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1e:b5:b8:fe:ff:0a:56:e1:66:dd:91:f6:a0:70:37:25:2f:96: 74:f7:28:ec:54:68:cd:59:0e:ad:dc:dd:15:15:c7:d2:75:a9: 8c:68:75:df:a4:cb:bb:0d:bf:28:35:a5:47:00:f4:86:f9:e3: ab:73:21:d3:26:f4:de:4d:56:65:33:4d:94:82:44:0c:4f:c8: 92:6f:7d:4c:d2:ab:3e:40:e0:dc:bd:48:f2:9f:d8:70:4b:4a: cb:40:e7:1a:95:df:df:ba:fc:7d:6c:90:a8:5c:56:18:56:c0: 00:1d:aa:eb:e6:88:0a:fe:9b:c2:a8:0f:f8:f1:29:0b:71:f9: 65:e3:d2:07:08:46:78:ec:96:ca:02:0d:4a:2c:9e:3d:0c:42: a3:d2:27:4b:dd:ce:9b:32:4b:aa:b6:bd:3c:83:63:06:3e:ab: eb:12:ab:9e:37:80:d0:69:b0:e9:e2:9b:f7:47:da:f1:44:e6: fe:19:de:fd:69:bc:20:85:e5:f5:78:97:8f:6e:6d:81:b5:18: cc:d3:18:1b:2a:c8:52:e7:ea:8e:42:5f:ab:a0:46:b6:14:5e: 78:f3:cc:a9:a2:01:7d:00:0f:06:87:5c:7f:99:fd:98:b7:84: cd:32:52:b3:fb:b1:f4:be:30:69:f4:43:11:46:f5:a8:ec:08: 07:f8:b3:20 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUOrlg5ESngC7OePAHa8EkA08b07kwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkI4RTE0RkNBRDNBRjJFRjMwQThGNTY5NjMzOUQ2RjdE RjVENzM1QjAeFw0yNTEyMjQxNzE3MDRaFw0yNTEyMjcxOTA0MDRaMDMxMTAvBgNV BAMTKEIxMjdFN0VCQzJGRjA0QTY0Q0ExQ0U0MTBGNDY0QUYwM0MxODA0QzQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDSLf6lgcEUeRJiChXCDvTGVBZX ifLnAesl5JXFN3XijaW1Qq7oafin6Ec+vx9JDembFsvVk2SX1M6CsGsSW8O4CSOh A8Ukv0GEn6MZhEREzEdgDcMIEPeM9+vcM9nseUrg5Uyz8xn5slmCHhiKX4dYixDr rqQJak5ntE1XgW4PaIi+mfR8kEWRuq8XW6eQrof35evj926vumjtmVQUdhrh3EDs XJzu7q24Ffp5Uql+Qlg2joxDFmtpUuIWYrl0I+atuskStpNCrDC9LLVTtsm5hddU nCW/PY3MzYndHpxgfSVVt1WCkWyn3S/jxUSsJvL1SyFep66+deiWV+DuOXGNAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUsSfn68L/BKZMoc5BD0ZK8DwYBMQwHwYDVR0j BBgwFoAUu44U/K068u8wqPVpYznW999dc1swDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 ZGE0ZWY3MS1mMGUwLTQyNTItODE2MC01MDUzMjFmYTUwODkvMC9CQjhFMTRGQ0FE M0FGMkVGMzBBOEY1Njk2MzM5RDZGN0RGNUQ3MzVCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQkI4RTE0RkNBRDNBRjJFRjMwQThGNTY5NjMzOUQ2RjdERjVE NzM1Qi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNWRhNGVmNzEtZjBlMC00MjUyLTgx NjAtNTA1MzIxZmE1MDg5LzAvQkI4RTE0RkNBRDNBRjJFRjMwQThGNTY5NjMzOUQ2 RjdERjVENzM1Qi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAB61uP7/ClbhZt2R9qBwNyUvlnT3KOxUaM1Z Dq3c3RUVx9J1qYxodd+ky7sNvyg1pUcA9Ib546tzIdMm9N5NVmUzTZSCRAxPyJJv fUzSqz5A4Ny9SPKf2HBLSstA5xqV39+6/H1skKhcVhhWwAAdquvmiAr+m8KoD/jx KQtx+WXj0gcIRnjslsoCDUosnj0MQqPSJ0vdzpsyS6q2vTyDYwY+q+sSq543gNBp sOnim/dH2vFE5v4Z3v1pvCCF5fV4l49ubYG1GMzTGBsqyFLn6o5CX6ugRrYUXnjz zKmiAX0ADwaHXH+Z/Zi3hM0yUrP7sfS+MGn0QxFG9ajsCAf4syA= -----END CERTIFICATE-----Generated at Fri Dec 26 04:51:11 2025 by rpki-client