This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/690c9009-ad53-4fa6-a183-34b3457bea03/0/BF3B675AEBEE64D00B323056545D1F630F1C489E.mft File: BF3B675AEBEE64D00B323056545D1F630F1C489E.mft (raw, json) Hash identifier: f9+pn9n3MP3wKX7dRTejiBB0DIh1gfPXv3KH5qJu5Eg= Subject key identifier: BB:83:80:B5:B4:A1:CD:50:90:88:95:50:1F:30:F6:BA:1A:A3:17:3C Authority key identifier: BF:3B:67:5A:EB:EE:64:D0:0B:32:30:56:54:5D:1F:63:0F:1C:48:9E Certificate issuer: /CN=BF3B675AEBEE64D00B323056545D1F630F1C489E Certificate serial: 5E25942CF100812C42C01825655D655A17558614 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BF3B675AEBEE64D00B323056545D1F630F1C489E.cer Subject info access: rsync://repo-rpki.idnic.net/repo/690c9009-ad53-4fa6-a183-34b3457bea03/0/BF3B675AEBEE64D00B323056545D1F630F1C489E.mft Manifest number: 052D Signing time: Tue 02 Dec 2025 06:20:51 +0000 Manifest this update: Tue 02 Dec 2025 06:15:51 +0000 Manifest next update: Fri 05 Dec 2025 15:18:51 +0000 Files and hashes: 1: 3230322e36392e39362e302f32302d3234203d3e20313331363931.roa (hash: levW4fK5Av9j8+txVVV15SprxZ5Vl8IniN5F3a6MoCA=) 2: 3230322e36392e39362e302f32302d3234203d3e2039373835.roa (hash: 9zTx3s0a2rHUUwPutdrNSjBytv6Kk1GTM8S/civ+mWo=) 3: 3232332e3136342e302e302f31362d3234203d3e2039373835.roa (hash: GqlYotz76qpsvx0YbP1++o+soFVawkjmgw8JjYGM37s=) 4: 323430333a373230303a3a2f33322d3438203d3e2039373835.roa (hash: CtyzufwtsM1OsMWgnYCmXW6JoR/5zQKHjokkqsxGYYM=) 5: 3230322e3135312e382e302f32322d3234203d3e2039373835.roa (hash: J6bQJ2rdsim2ttJlJ/Bk72O/5PQxeXoEvre44CKnHWo=) 6: BF3B675AEBEE64D00B323056545D1F630F1C489E.crl (hash: g5ntMWXM/Joi5b4Il+iXROpaVB0xZZQxjDIVqEc0nfM=) 7: 3131362e3231332e34382e302f32302d3234203d3e20313331363931.roa (hash: GYZuxR+Zqxd6pxL2lTHKcyVNBpecVMAB2ZosCkKojM0=) 8: 3232302e3135372e39362e302f32302d3234203d3e2039373835.roa (hash: HNZfntXqIdjS6Oc1nk9EDrt/Ny6J1wp1N0wmznQcons=) 9: 3131362e3231332e34382e302f32302d3234203d3e2039373835.roa (hash: ILkXkfNJzfGzwTYNzRYQw2a7890NKmPmydyWQw+HB7E=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/690c9009-ad53-4fa6-a183-34b3457bea03/0/BF3B675AEBEE64D00B323056545D1F630F1C489E.crl rsync://repo-rpki.idnic.net/repo/690c9009-ad53-4fa6-a183-34b3457bea03/0/BF3B675AEBEE64D00B323056545D1F630F1C489E.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BF3B675AEBEE64D00B323056545D1F630F1C489E.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 05 Dec 2025 15:18:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5e:25:94:2c:f1:00:81:2c:42:c0:18:25:65:5d:65:5a:17:55:86:14 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BF3B675AEBEE64D00B323056545D1F630F1C489E Validity Not Before: Dec 2 06:15:51 2025 GMT Not After : Dec 5 15:18:51 2025 GMT Subject: CN=BB8380B5B4A1CD50908895501F30F6BA1AA3173C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:d3:1c:27:6e:c4:cf:ff:76:4a:5a:30:4e:f1: 39:fe:b4:58:43:7c:21:4c:14:38:05:13:fc:a4:26: 9d:ad:24:52:db:5c:d9:c5:cd:4f:91:1f:b4:b3:f1: b1:5d:ed:66:48:25:bc:44:23:b5:27:d6:bc:0a:cd: 82:7f:c6:6c:f8:5a:2d:3f:fd:d0:ab:33:45:41:9e: 2f:f9:0e:fe:f0:10:d3:83:09:23:db:a8:34:98:b4: 24:1c:67:81:89:87:8b:44:1a:c0:85:54:29:bd:e5: 85:de:fc:1f:5f:d7:39:4e:76:8c:07:57:35:e4:61: 90:1f:50:f2:b8:49:20:14:5e:3c:b8:9a:b3:5d:68: 9f:6e:3c:cc:7c:ea:7a:4c:9e:53:fb:83:2a:22:23: 76:99:3e:80:64:8d:1a:09:01:af:c5:76:32:5c:83: 16:fa:27:16:96:e0:e8:ba:59:fb:27:0d:b9:19:1f: 56:d0:eb:21:93:bd:c5:ea:3c:18:fa:42:cc:e2:03: 64:0d:db:84:d8:cf:3e:60:f9:61:c5:a2:31:38:b6: 9d:46:83:4a:ff:8b:cd:4e:2a:0c:af:fc:25:7e:57: a0:d9:a3:88:49:c3:cd:13:97:b7:83:19:15:3a:68: 45:62:12:27:d9:a8:10:e3:92:14:19:40:9c:b2:de: 2a:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:83:80:B5:B4:A1:CD:50:90:88:95:50:1F:30:F6:BA:1A:A3:17:3C X509v3 Authority Key Identifier: keyid:BF:3B:67:5A:EB:EE:64:D0:0B:32:30:56:54:5D:1F:63:0F:1C:48:9E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/690c9009-ad53-4fa6-a183-34b3457bea03/0/BF3B675AEBEE64D00B323056545D1F630F1C489E.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BF3B675AEBEE64D00B323056545D1F630F1C489E.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/690c9009-ad53-4fa6-a183-34b3457bea03/0/BF3B675AEBEE64D00B323056545D1F630F1C489E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1d:36:13:6d:99:7f:c1:5d:be:c9:58:dc:8c:84:81:fd:74:65: c4:de:e9:a7:2a:21:11:22:44:b8:5e:bd:c1:bb:59:bd:32:74: f7:cb:28:88:58:92:ce:1f:60:28:78:8c:45:d9:70:a7:2e:ef: a3:6a:50:72:c0:d1:67:25:ee:2a:78:23:6b:9f:09:99:eb:e5: aa:f5:86:b1:94:b4:24:8a:59:2d:39:ca:19:9c:7a:ea:c3:6e: 8f:14:8c:c4:de:41:ff:5d:84:14:66:df:5b:9e:4d:c0:12:a6: 19:62:e6:6c:99:e3:c2:77:dc:67:3b:c2:ea:68:37:1d:c8:cb: db:8d:f6:81:36:d9:37:84:0c:5e:81:94:8d:9c:a9:5e:0a:76: b5:ba:97:c1:bd:a4:2a:ab:83:d0:82:5f:88:d5:54:e8:46:8d: f3:c5:18:3e:c7:e2:8c:e7:49:29:5f:e5:94:49:66:f9:6c:40: bc:69:f6:50:3d:f0:a7:e4:39:92:e3:5c:61:ff:ae:3d:67:21: 53:1c:11:8e:b5:1a:99:61:b5:61:0c:05:d2:3c:db:37:e1:6e: f6:2f:dd:32:d3:a5:da:f8:1f:94:d7:4a:c9:b3:2d:48:40:2c: 76:1d:d6:24:35:9a:20:ed:7b:71:fc:6c:0d:5e:de:14:45:bb: f2:23:51:78 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUXiWULPEAgSxCwBglZV1lWhdVhhQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkYzQjY3NUFFQkVFNjREMDBCMzIzMDU2NTQ1RDFGNjMw RjFDNDg5RTAeFw0yNTEyMDIwNjE1NTFaFw0yNTEyMDUxNTE4NTFaMDMxMTAvBgNV BAMTKEJCODM4MEI1QjRBMUNENTA5MDg4OTU1MDFGMzBGNkJBMUFBMzE3M0MwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCx0xwnbsTP/3ZKWjBO8Tn+tFhD fCFMFDgFE/ykJp2tJFLbXNnFzU+RH7Sz8bFd7WZIJbxEI7Un1rwKzYJ/xmz4Wi0/ /dCrM0VBni/5Dv7wENODCSPbqDSYtCQcZ4GJh4tEGsCFVCm95YXe/B9f1zlOdowH VzXkYZAfUPK4SSAUXjy4mrNdaJ9uPMx86npMnlP7gyoiI3aZPoBkjRoJAa/FdjJc gxb6JxaW4Oi6WfsnDbkZH1bQ6yGTvcXqPBj6QsziA2QN24TYzz5g+WHFojE4tp1G g0r/i81OKgyv/CV+V6DZo4hJw80Tl7eDGRU6aEViEifZqBDjkhQZQJyy3ioDAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUu4OAtbShzVCQiJVQHzD2uhqjFzwwHwYDVR0j BBgwFoAUvztnWuvuZNALMjBWVF0fYw8cSJ4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 OTBjOTAwOS1hZDUzLTRmYTYtYTE4My0zNGIzNDU3YmVhMDMvMC9CRjNCNjc1QUVC RUU2NEQwMEIzMjMwNTY1NDVEMUY2MzBGMUM0ODlFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQkYzQjY3NUFFQkVFNjREMDBCMzIzMDU2NTQ1RDFGNjMwRjFD NDg5RS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNjkwYzkwMDktYWQ1My00ZmE2LWEx ODMtMzRiMzQ1N2JlYTAzLzAvQkYzQjY3NUFFQkVFNjREMDBCMzIzMDU2NTQ1RDFG NjMwRjFDNDg5RS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAB02E22Zf8FdvslY3IyEgf10ZcTe6acqIREi RLhevcG7Wb0ydPfLKIhYks4fYCh4jEXZcKcu76NqUHLA0Wcl7ip4I2ufCZnr5ar1 hrGUtCSKWS05yhmceurDbo8UjMTeQf9dhBRm31ueTcASphli5myZ48J33Gc7wupo Nx3Iy9uN9oE22TeEDF6BlI2cqV4KdrW6l8G9pCqrg9CCX4jVVOhGjfPFGD7H4ozn SSlf5ZRJZvlsQLxp9lA98KfkOZLjXGH/rj1nIVMcEY61GplhtWEMBdI82zfhbvYv 3TLTpdr4H5TXSsmzLUhALHYd1iQ1miDte3H8bA1e3hRFu/IjUXg= -----END CERTIFICATE-----Generated at Wed Dec 3 16:21:16 2025 by rpki-client