This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/70e6fd81-b877-4f7c-abc6-082fcbea189f/0/1BD753D8CEFFB0C4CBB19A2E15765EC32333A873.mft File: 1BD753D8CEFFB0C4CBB19A2E15765EC32333A873.mft (raw, json) Hash identifier: ZTdnXJY9rIrBT+dG+YljECDjIzMZn6eCqdEJXSVnoXg= Subject key identifier: BE:36:04:01:0C:82:D6:8A:A4:25:CE:6E:67:18:B3:E5:E4:04:E8:4C Authority key identifier: 1B:D7:53:D8:CE:FF:B0:C4:CB:B1:9A:2E:15:76:5E:C3:23:33:A8:73 Certificate issuer: /CN=1BD753D8CEFFB0C4CBB19A2E15765EC32333A873 Certificate serial: 3B9B97B8E5195B5D65D48885A9DA4B09C46E904B Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1BD753D8CEFFB0C4CBB19A2E15765EC32333A873.cer Subject info access: rsync://repo-rpki.idnic.net/repo/70e6fd81-b877-4f7c-abc6-082fcbea189f/0/1BD753D8CEFFB0C4CBB19A2E15765EC32333A873.mft Manifest number: 028B Signing time: Tue 02 Dec 2025 21:52:08 +0000 Manifest this update: Tue 02 Dec 2025 21:47:08 +0000 Manifest next update: Sat 06 Dec 2025 00:36:08 +0000 Files and hashes: 1: 3130332e3137362e3138322e302f32332d3234203d3e20313437313332.roa (hash: 3b02tyVyXZeMs6y0uPPq0P29J4NxhIV9FAqBTSQpOwg=) 2: 1BD753D8CEFFB0C4CBB19A2E15765EC32333A873.crl (hash: CF/Ep2rFcatRBJxyF4SOLTqq5gCvWTNzhUGDYunb1rc=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/70e6fd81-b877-4f7c-abc6-082fcbea189f/0/1BD753D8CEFFB0C4CBB19A2E15765EC32333A873.crl rsync://repo-rpki.idnic.net/repo/70e6fd81-b877-4f7c-abc6-082fcbea189f/0/1BD753D8CEFFB0C4CBB19A2E15765EC32333A873.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1BD753D8CEFFB0C4CBB19A2E15765EC32333A873.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 06 Dec 2025 00:36:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3b:9b:97:b8:e5:19:5b:5d:65:d4:88:85:a9:da:4b:09:c4:6e:90:4b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1BD753D8CEFFB0C4CBB19A2E15765EC32333A873 Validity Not Before: Dec 2 21:47:08 2025 GMT Not After : Dec 6 00:36:08 2025 GMT Subject: CN=BE3604010C82D68AA425CE6E6718B3E5E404E84C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:f1:67:19:e4:9e:a9:f0:a4:68:a7:80:24:2f: aa:9b:98:bb:d8:21:71:90:c0:10:5d:17:b3:d0:8c: 68:fc:18:7d:76:10:82:4c:1e:19:72:41:c4:a6:e9: c2:75:ac:71:33:70:e3:d0:00:8e:6c:50:78:75:13: 52:86:c6:e5:f9:b7:bc:4f:47:41:27:5e:58:8a:3e: 7e:8e:bd:1e:08:06:02:bb:c7:90:17:ba:2a:81:23: d7:84:dc:71:02:20:da:8d:2d:03:0b:cb:cf:67:ec: c7:ca:9c:06:43:22:a3:ca:65:6b:e1:5b:95:01:f2: ea:ef:8a:e0:2a:00:6b:19:8c:7b:1c:9b:12:16:13: 8a:1d:12:80:6b:e3:60:7d:87:11:f4:23:f5:d5:d1: 1e:08:1a:f4:c5:7f:9e:c0:5e:8c:df:fd:4d:e8:a1: bc:fb:10:ed:e8:df:7d:32:a6:85:ab:b7:ec:7c:b3: 2a:99:74:8a:74:21:ed:14:b0:35:43:64:91:60:54: e4:2e:60:6f:8b:d4:55:0f:24:30:61:b3:ec:8c:03: ca:46:3e:09:bd:22:82:e5:5a:33:d7:8b:8c:8e:ac: 24:c3:02:2f:cb:ec:80:29:7a:c5:e3:88:97:3c:d0: 53:0a:b2:af:53:e7:fe:4b:ac:f2:b4:67:89:c1:5f: d8:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BE:36:04:01:0C:82:D6:8A:A4:25:CE:6E:67:18:B3:E5:E4:04:E8:4C X509v3 Authority Key Identifier: keyid:1B:D7:53:D8:CE:FF:B0:C4:CB:B1:9A:2E:15:76:5E:C3:23:33:A8:73 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/70e6fd81-b877-4f7c-abc6-082fcbea189f/0/1BD753D8CEFFB0C4CBB19A2E15765EC32333A873.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1BD753D8CEFFB0C4CBB19A2E15765EC32333A873.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/70e6fd81-b877-4f7c-abc6-082fcbea189f/0/1BD753D8CEFFB0C4CBB19A2E15765EC32333A873.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption be:01:4e:c2:e3:25:fa:24:ac:12:6e:69:50:cb:bb:b1:1b:0d: 0b:1e:f2:7f:f0:83:5a:96:c5:9a:e0:8c:1e:9f:73:f4:86:e1: d2:0c:52:83:d1:b5:6a:e8:ed:c0:0b:60:a0:2d:d8:17:74:9d: 4a:4f:e4:2e:59:53:75:ad:43:77:9f:e3:3d:16:2e:4c:99:f4: 27:43:96:b8:e4:2a:30:fa:4a:a0:7a:77:14:d0:ad:cd:12:5e: 8e:39:ba:53:9a:2c:d9:22:7f:bb:98:26:3b:8b:f4:e7:1b:b1: 1a:26:48:19:e6:41:5d:a0:af:83:3d:fb:3f:04:ef:d2:f2:28: db:f8:5b:55:16:59:1c:ba:45:31:59:d2:85:d0:86:d2:e0:f8: ac:dd:56:b1:4a:d9:81:78:77:d1:a5:a5:7a:29:4b:51:5d:e1: b4:e8:26:f4:0e:df:d1:51:a3:b0:55:19:06:39:ec:39:8b:b4: 55:ec:5b:50:c9:64:2d:c3:07:7b:fa:31:53:d8:d7:84:a5:fa: 76:13:d8:0c:eb:ce:b5:60:60:ee:9a:5c:9f:ec:95:4e:9e:60: 25:1e:9d:68:b3:f0:f6:7b:c0:60:5b:82:0d:39:ce:99:da:ff: 3e:01:87:89:80:0f:c5:08:f5:54:a6:08:db:58:62:3c:c8:4b: f0:f0:3e:dd -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUO5uXuOUZW11l1IiFqdpLCcRukEswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUJENzUzRDhDRUZGQjBDNENCQjE5QTJFMTU3NjVFQzMy MzMzQTg3MzAeFw0yNTEyMDIyMTQ3MDhaFw0yNTEyMDYwMDM2MDhaMDMxMTAvBgNV BAMTKEJFMzYwNDAxMEM4MkQ2OEFBNDI1Q0U2RTY3MThCM0U1RTQwNEU4NEMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDO8WcZ5J6p8KRop4AkL6qbmLvY IXGQwBBdF7PQjGj8GH12EIJMHhlyQcSm6cJ1rHEzcOPQAI5sUHh1E1KGxuX5t7xP R0EnXliKPn6OvR4IBgK7x5AXuiqBI9eE3HECINqNLQMLy89n7MfKnAZDIqPKZWvh W5UB8urviuAqAGsZjHscmxIWE4odEoBr42B9hxH0I/XV0R4IGvTFf57AXozf/U3o obz7EO3o330ypoWrt+x8syqZdIp0Ie0UsDVDZJFgVOQuYG+L1FUPJDBhs+yMA8pG Pgm9IoLlWjPXi4yOrCTDAi/L7IApesXjiJc80FMKsq9T5/5LrPK0Z4nBX9hNAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUvjYEAQyC1oqkJc5uZxiz5eQE6EwwHwYDVR0j BBgwFoAUG9dT2M7/sMTLsZouFXZewyMzqHMwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 MGU2ZmQ4MS1iODc3LTRmN2MtYWJjNi0wODJmY2JlYTE4OWYvMC8xQkQ3NTNEOENF RkZCMEM0Q0JCMTlBMkUxNTc2NUVDMzIzMzNBODczLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMUJENzUzRDhDRUZGQjBDNENCQjE5QTJFMTU3NjVFQzMyMzMz QTg3My5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNzBlNmZkODEtYjg3Ny00ZjdjLWFi YzYtMDgyZmNiZWExODlmLzAvMUJENzUzRDhDRUZGQjBDNENCQjE5QTJFMTU3NjVF QzMyMzMzQTg3My5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAL4BTsLjJfokrBJuaVDLu7EbDQse8n/wg1qW xZrgjB6fc/SG4dIMUoPRtWro7cALYKAt2Bd0nUpP5C5ZU3WtQ3ef4z0WLkyZ9CdD lrjkKjD6SqB6dxTQrc0SXo45ulOaLNkif7uYJjuL9OcbsRomSBnmQV2gr4M9+z8E 79LyKNv4W1UWWRy6RTFZ0oXQhtLg+KzdVrFK2YF4d9GlpXopS1Fd4bToJvQO39FR o7BVGQY57DmLtFXsW1DJZC3DB3v6MVPY14Sl+nYT2AzrzrVgYO6aXJ/slU6eYCUe nWiz8PZ7wGBbgg05zpna/z4Bh4mAD8UI9VSmCNtYYjzIS/DwPt0= -----END CERTIFICATE-----Generated at Wed Dec 3 14:43:38 2025 by rpki-client