This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/85dd4f16-570e-4c8c-a992-db89ea3bad36/0/B2077B9BAF0BF3E5FCB84513B1D7445E30CE6582.mft File: B2077B9BAF0BF3E5FCB84513B1D7445E30CE6582.mft (raw, json) Hash identifier: Wz20+wpD7eiAdNTrm7WNqLvMhCQ6K8rbcXW376TVysg= Subject key identifier: 15:4A:05:13:5F:A7:86:4A:34:5F:A3:3C:00:4F:5C:78:3B:47:89:56 Authority key identifier: B2:07:7B:9B:AF:0B:F3:E5:FC:B8:45:13:B1:D7:44:5E:30:CE:65:82 Certificate issuer: /CN=B2077B9BAF0BF3E5FCB84513B1D7445E30CE6582 Certificate serial: 268704EBA39F2F4882F3A1BF8D6AB26F42202BA0 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B2077B9BAF0BF3E5FCB84513B1D7445E30CE6582.cer Subject info access: rsync://repo-rpki.idnic.net/repo/85dd4f16-570e-4c8c-a992-db89ea3bad36/0/B2077B9BAF0BF3E5FCB84513B1D7445E30CE6582.mft Manifest number: 04A2 Signing time: Mon 01 Dec 2025 20:12:16 +0000 Manifest this update: Mon 01 Dec 2025 20:07:16 +0000 Manifest next update: Fri 05 Dec 2025 07:30:16 +0000 Files and hashes: 1: 3130332e3135372e362e302f32342d3234203d3e20313431313036.roa (hash: 2XQOc628Et0oqO8CO0VRKDq3/7F6VNJ+Q07NK/QPZuc=) 2: B2077B9BAF0BF3E5FCB84513B1D7445E30CE6582.crl (hash: dh4MCh/Sm1Lkvdx8tFEP79k6C93ju0ixuMm/UWxEslE=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/85dd4f16-570e-4c8c-a992-db89ea3bad36/0/B2077B9BAF0BF3E5FCB84513B1D7445E30CE6582.crl rsync://repo-rpki.idnic.net/repo/85dd4f16-570e-4c8c-a992-db89ea3bad36/0/B2077B9BAF0BF3E5FCB84513B1D7445E30CE6582.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B2077B9BAF0BF3E5FCB84513B1D7445E30CE6582.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 05 Dec 2025 07:30:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 26:87:04:eb:a3:9f:2f:48:82:f3:a1:bf:8d:6a:b2:6f:42:20:2b:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B2077B9BAF0BF3E5FCB84513B1D7445E30CE6582 Validity Not Before: Dec 1 20:07:16 2025 GMT Not After : Dec 5 07:30:16 2025 GMT Subject: CN=154A05135FA7864A345FA33C004F5C783B478956 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:44:39:db:8f:ca:32:b5:d8:06:21:6b:3e:cc: 80:67:51:a2:af:83:9a:f0:18:ec:4c:38:3d:5d:50: 85:33:2b:60:70:ae:5a:8c:33:f9:74:f7:51:63:72: 36:8e:94:93:91:b8:52:c5:ad:3e:1c:4b:c8:ab:5c: 8c:6a:0f:71:5f:df:a3:1d:e9:38:cd:1e:48:a9:56: 73:54:53:b3:33:f4:3e:88:73:a1:98:c8:ef:28:ba: 8b:f8:dc:c9:f5:51:93:2e:37:cb:a6:47:8f:88:e5: 33:bb:cd:9f:33:dd:72:2b:ec:6a:94:b5:69:c3:d8: de:55:e4:18:00:c6:bf:84:f5:76:b5:12:bf:29:6d: a5:e1:71:87:ca:6c:ba:78:5d:3c:60:ba:3c:ee:ec: 40:12:b1:60:7a:82:48:b1:82:ed:4c:1a:0c:3c:3c: 0a:fb:1e:92:66:af:15:da:1d:90:37:6a:aa:6c:55: b1:2a:39:f6:84:51:55:1e:6e:92:c9:82:87:b2:05: 34:67:7e:cd:a6:6c:51:56:6f:81:fe:1b:b0:82:96: 54:48:92:b5:ff:35:bc:ae:89:b5:f3:8f:9e:82:34: 2e:69:9a:25:80:7e:9d:85:f7:bf:82:3e:ab:ec:c4: 63:0a:82:ac:3d:22:0b:a5:e1:0b:0c:8b:fd:c3:d6: bd:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 15:4A:05:13:5F:A7:86:4A:34:5F:A3:3C:00:4F:5C:78:3B:47:89:56 X509v3 Authority Key Identifier: keyid:B2:07:7B:9B:AF:0B:F3:E5:FC:B8:45:13:B1:D7:44:5E:30:CE:65:82 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/85dd4f16-570e-4c8c-a992-db89ea3bad36/0/B2077B9BAF0BF3E5FCB84513B1D7445E30CE6582.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B2077B9BAF0BF3E5FCB84513B1D7445E30CE6582.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/85dd4f16-570e-4c8c-a992-db89ea3bad36/0/B2077B9BAF0BF3E5FCB84513B1D7445E30CE6582.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 82:c8:ef:7b:da:01:32:a7:0e:a2:c0:a6:cb:46:be:4d:17:ef: 80:63:80:f4:db:8e:9c:5e:c9:44:c7:d0:7d:08:3f:05:27:c7: 66:bb:47:e5:25:12:0f:b3:46:9b:8f:ac:2b:93:5c:7c:85:f6: 5c:eb:c4:24:a0:94:4c:c2:5a:c0:de:96:b7:a5:ef:0d:5b:b5: 9f:d1:9b:dc:fe:73:e3:fd:68:1d:0a:4e:20:93:1e:95:5a:dc: 6f:16:e0:0d:c1:4b:f2:18:b2:63:f7:ce:39:58:49:e6:c7:bb: e2:a6:54:b7:04:46:dc:33:57:b6:c7:90:22:da:9a:8a:d3:80: c7:e2:fa:56:ae:94:b7:83:b4:39:fe:fe:8a:d6:ff:c2:21:56: 78:d3:ce:04:10:29:e8:49:5d:9f:8c:ea:ff:4e:5a:5d:cd:23: c5:db:60:31:e6:a0:22:bd:21:50:9b:52:15:8b:c8:b5:76:b8: 34:16:f9:76:e6:d0:be:ce:df:e8:6b:79:2b:a2:66:80:c7:74: 9f:39:df:9d:88:00:22:07:63:7b:81:58:82:6f:3d:e1:da:1a: 57:8c:50:4a:25:57:e9:f6:e2:c3:e1:5f:b6:46:67:92:e8:e4: b3:0e:00:d2:f2:41:8c:5d:d3:48:0f:48:57:33:17:1f:a1:d3: e5:96:27:14 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUJocE66OfL0iC86G/jWqyb0IgK6AwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjIwNzdCOUJBRjBCRjNFNUZDQjg0NTEzQjFENzQ0NUUz MENFNjU4MjAeFw0yNTEyMDEyMDA3MTZaFw0yNTEyMDUwNzMwMTZaMDMxMTAvBgNV BAMTKDE1NEEwNTEzNUZBNzg2NEEzNDVGQTMzQzAwNEY1Qzc4M0I0Nzg5NTYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCqRDnbj8oytdgGIWs+zIBnUaKv g5rwGOxMOD1dUIUzK2BwrlqMM/l091FjcjaOlJORuFLFrT4cS8irXIxqD3Ff36Md 6TjNHkipVnNUU7Mz9D6Ic6GYyO8ouov43Mn1UZMuN8umR4+I5TO7zZ8z3XIr7GqU tWnD2N5V5BgAxr+E9Xa1Er8pbaXhcYfKbLp4XTxgujzu7EASsWB6gkixgu1MGgw8 PAr7HpJmrxXaHZA3aqpsVbEqOfaEUVUebpLJgoeyBTRnfs2mbFFWb4H+G7CCllRI krX/NbyuibXzj56CNC5pmiWAfp2F97+CPqvsxGMKgqw9Igul4QsMi/3D1r2HAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUFUoFE1+nhko0X6M8AE9ceDtHiVYwHwYDVR0j BBgwFoAUsgd7m68L8+X8uEUTsddEXjDOZYIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 NWRkNGYxNi01NzBlLTRjOGMtYTk5Mi1kYjg5ZWEzYmFkMzYvMC9CMjA3N0I5QkFG MEJGM0U1RkNCODQ1MTNCMUQ3NDQ1RTMwQ0U2NTgyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQjIwNzdCOUJBRjBCRjNFNUZDQjg0NTEzQjFENzQ0NUUzMENF NjU4Mi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vODVkZDRmMTYtNTcwZS00YzhjLWE5 OTItZGI4OWVhM2JhZDM2LzAvQjIwNzdCOUJBRjBCRjNFNUZDQjg0NTEzQjFENzQ0 NUUzMENFNjU4Mi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAILI73vaATKnDqLApstGvk0X74BjgPTbjpxe yUTH0H0IPwUnx2a7R+UlEg+zRpuPrCuTXHyF9lzrxCSglEzCWsDelrel7w1btZ/R m9z+c+P9aB0KTiCTHpVa3G8W4A3BS/IYsmP3zjlYSebHu+KmVLcERtwzV7bHkCLa morTgMfi+laulLeDtDn+/orW/8IhVnjTzgQQKehJXZ+M6v9OWl3NI8XbYDHmoCK9 IVCbUhWLyLV2uDQW+Xbm0L7O3+hreSuiZoDHdJ85352IACIHY3uBWIJvPeHaGleM UEolV+n24sPhX7ZGZ5Lo5LMOANLyQYxd00gPSFczFx+h0+WWJxQ= -----END CERTIFICATE-----Generated at Wed Dec 3 14:41:36 2025 by rpki-client