This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/6f2a8011-4c66-43d1-bbc5-fb11e89f91e0/0/B32E9EABD055A12FD3AA7A307C1DF6832A481AF8.mft File: B32E9EABD055A12FD3AA7A307C1DF6832A481AF8.mft (raw, json) Hash identifier: nycWKPU8jnM05t54SPz/m+uE2x3QI1MCI4TnIhX/nV0= Subject key identifier: 0D:6C:C7:0E:17:F5:CB:6F:19:EF:BF:68:E9:D6:00:60:7A:25:4C:C6 Authority key identifier: B3:2E:9E:AB:D0:55:A1:2F:D3:AA:7A:30:7C:1D:F6:83:2A:48:1A:F8 Certificate issuer: /CN=B32E9EABD055A12FD3AA7A307C1DF6832A481AF8 Certificate serial: 6B89F08058AA7F95CDB54F19EE04E531DCE92705 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B32E9EABD055A12FD3AA7A307C1DF6832A481AF8.cer Subject info access: rsync://repo-rpki.idnic.net/repo/6f2a8011-4c66-43d1-bbc5-fb11e89f91e0/0/B32E9EABD055A12FD3AA7A307C1DF6832A481AF8.mft Manifest number: 0149 Signing time: Tue 02 Dec 2025 14:11:38 +0000 Manifest this update: Tue 02 Dec 2025 14:06:38 +0000 Manifest next update: Fri 05 Dec 2025 22:41:38 +0000 Files and hashes: 1: B32E9EABD055A12FD3AA7A307C1DF6832A481AF8.crl (hash: TplJiLFjtyuMpEdEGUnkF2zm9QUFOykBsXzcf3J0p58=) 2: 32372e3132342e37362e302f32332d3234203d3e20313532303336.roa (hash: dEzIqEvBQoLb4jDZxATrGmBvt2RxQTfgU7Js5Mbni88=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/6f2a8011-4c66-43d1-bbc5-fb11e89f91e0/0/B32E9EABD055A12FD3AA7A307C1DF6832A481AF8.crl rsync://repo-rpki.idnic.net/repo/6f2a8011-4c66-43d1-bbc5-fb11e89f91e0/0/B32E9EABD055A12FD3AA7A307C1DF6832A481AF8.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B32E9EABD055A12FD3AA7A307C1DF6832A481AF8.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 05 Dec 2025 22:41:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6b:89:f0:80:58:aa:7f:95:cd:b5:4f:19:ee:04:e5:31:dc:e9:27:05 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B32E9EABD055A12FD3AA7A307C1DF6832A481AF8 Validity Not Before: Dec 2 14:06:38 2025 GMT Not After : Dec 5 22:41:38 2025 GMT Subject: CN=0D6CC70E17F5CB6F19EFBF68E9D600607A254CC6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:d7:91:de:61:66:9c:e2:e9:47:2e:59:76:20: 26:4e:27:e4:b6:ce:f2:db:1e:5c:e6:da:e3:d6:c5: f9:fb:01:8e:7f:b8:fb:ba:03:94:40:af:78:17:c5: 84:6d:12:aa:75:16:d6:75:89:da:7d:f3:3e:90:95: 7a:97:51:1e:89:4d:03:aa:86:81:2c:d7:e0:24:d2: 8f:d9:92:15:e2:7d:cb:c9:23:26:db:8e:8a:47:16: 1d:19:ba:35:22:aa:8a:53:a0:53:2b:48:8c:3b:04: c6:ca:ad:1e:b7:27:dc:b2:c3:36:5c:59:10:06:67: 81:7c:e5:36:51:43:5c:ea:44:e1:61:e9:d4:15:a0: 4b:95:89:b3:11:4f:f5:fb:69:0e:5c:88:6f:39:95: 87:b7:b4:08:5d:29:04:eb:a0:d6:11:bf:fd:70:25: 9b:ac:40:9d:bd:2a:d4:74:02:36:0d:68:2d:e2:ca: 97:9d:4b:83:9c:55:38:d9:00:12:cc:71:18:5e:47: 2d:81:04:49:07:1e:0b:8c:41:24:8c:c5:b7:b5:59: e3:42:80:71:11:7d:8d:0f:e8:56:1e:d6:ef:b5:25: 23:b3:3f:39:b4:16:20:88:57:49:4f:e3:d4:93:b7: 56:b7:47:4d:96:dd:b1:9d:32:79:c7:66:29:5d:79: 67:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0D:6C:C7:0E:17:F5:CB:6F:19:EF:BF:68:E9:D6:00:60:7A:25:4C:C6 X509v3 Authority Key Identifier: keyid:B3:2E:9E:AB:D0:55:A1:2F:D3:AA:7A:30:7C:1D:F6:83:2A:48:1A:F8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/6f2a8011-4c66-43d1-bbc5-fb11e89f91e0/0/B32E9EABD055A12FD3AA7A307C1DF6832A481AF8.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B32E9EABD055A12FD3AA7A307C1DF6832A481AF8.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/6f2a8011-4c66-43d1-bbc5-fb11e89f91e0/0/B32E9EABD055A12FD3AA7A307C1DF6832A481AF8.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 39:47:d5:6f:24:ea:21:94:af:61:0b:e4:d7:1c:9e:ac:09:bc: e1:4b:56:ef:68:5e:ea:a0:f5:80:ed:56:6c:c7:fc:0e:41:35: 08:77:5c:19:28:0f:e5:a2:fa:ed:08:a0:64:51:3f:d6:fe:44: e3:f5:6f:2d:ed:b6:f7:d3:a2:13:4a:f9:fc:45:9c:dc:c7:b3: e9:d2:0d:43:23:cc:1c:c6:bb:ce:39:97:02:51:43:9d:fd:da: 30:7c:04:cb:76:79:8f:90:a5:36:b8:d9:80:bc:7d:b2:d0:34: 69:9c:3e:6c:e3:cd:e7:c7:09:f3:57:ea:30:95:66:20:a9:78: 0a:41:09:6c:f7:71:3a:be:3b:67:25:fa:6a:59:ac:6e:bd:81: 5a:6c:75:5e:1a:4c:08:e8:42:7c:7d:59:b5:07:d0:d5:ea:41: 7d:41:33:71:0f:8a:e6:ef:4b:37:39:51:1b:fb:6f:1d:1c:2c: e9:5d:e6:f2:d4:5e:28:38:6b:e6:02:68:ed:dd:da:5d:15:e9: 7b:24:a3:f1:89:c4:f6:95:2a:70:12:0f:f7:f4:bb:bb:84:ac: 44:a1:67:ac:af:46:19:9d:82:cd:4c:92:44:d9:1d:13:d4:34: 74:75:9f:ab:27:af:30:93:73:68:5e:8b:fd:1e:d3:51:e4:1b: a3:d6:27:30 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUa4nwgFiqf5XNtU8Z7gTlMdzpJwUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjMyRTlFQUJEMDU1QTEyRkQzQUE3QTMwN0MxREY2ODMy QTQ4MUFGODAeFw0yNTEyMDIxNDA2MzhaFw0yNTEyMDUyMjQxMzhaMDMxMTAvBgNV BAMTKDBENkNDNzBFMTdGNUNCNkYxOUVGQkY2OEU5RDYwMDYwN0EyNTRDQzYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCv15HeYWac4ulHLll2ICZOJ+S2 zvLbHlzm2uPWxfn7AY5/uPu6A5RAr3gXxYRtEqp1FtZ1idp98z6QlXqXUR6JTQOq hoEs1+Ak0o/ZkhXifcvJIybbjopHFh0ZujUiqopToFMrSIw7BMbKrR63J9yywzZc WRAGZ4F85TZRQ1zqROFh6dQVoEuVibMRT/X7aQ5ciG85lYe3tAhdKQTroNYRv/1w JZusQJ29KtR0AjYNaC3iypedS4OcVTjZABLMcRheRy2BBEkHHguMQSSMxbe1WeNC gHERfY0P6FYe1u+1JSOzPzm0FiCIV0lP49STt1a3R02W3bGdMnnHZildeWfXAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUDWzHDhf1y28Z779o6dYAYHolTMYwHwYDVR0j BBgwFoAUsy6eq9BVoS/TqnowfB32gypIGvgwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 ZjJhODAxMS00YzY2LTQzZDEtYmJjNS1mYjExZTg5ZjkxZTAvMC9CMzJFOUVBQkQw NTVBMTJGRDNBQTdBMzA3QzFERjY4MzJBNDgxQUY4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQjMyRTlFQUJEMDU1QTEyRkQzQUE3QTMwN0MxREY2ODMyQTQ4 MUFGOC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNmYyYTgwMTEtNGM2Ni00M2QxLWJi YzUtZmIxMWU4OWY5MWUwLzAvQjMyRTlFQUJEMDU1QTEyRkQzQUE3QTMwN0MxREY2 ODMyQTQ4MUFGOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADlH1W8k6iGUr2EL5NccnqwJvOFLVu9oXuqg 9YDtVmzH/A5BNQh3XBkoD+Wi+u0IoGRRP9b+ROP1by3ttvfTohNK+fxFnNzHs+nS DUMjzBzGu845lwJRQ5392jB8BMt2eY+QpTa42YC8fbLQNGmcPmzjzefHCfNX6jCV ZiCpeApBCWz3cTq+O2cl+mpZrG69gVpsdV4aTAjoQnx9WbUH0NXqQX1BM3EPiubv Szc5URv7bx0cLOld5vLUXig4a+YCaO3d2l0V6Xsko/GJxPaVKnASD/f0u7uErESh Z6yvRhmdgs1MkkTZHRPUNHR1n6snrzCTc2hei/0e01HkG6PWJzA= -----END CERTIFICATE-----Generated at Wed Dec 3 14:14:29 2025 by rpki-client