This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/93dc1b05-2a69-45b0-8c44-626772276bd9/0/B2C18E11C8530BDF4EE333F5DEBD0B055F9DA416.mft File: B2C18E11C8530BDF4EE333F5DEBD0B055F9DA416.mft (raw, json) Hash identifier: H9WAk/PmvT3cIh4IeU+VAQ/CWbVM9vOUF00RrW1X3y4= Subject key identifier: 00:AD:92:CC:1B:DF:5C:9D:BB:02:89:17:26:45:56:BE:4A:DC:C9:0A Authority key identifier: B2:C1:8E:11:C8:53:0B:DF:4E:E3:33:F5:DE:BD:0B:05:5F:9D:A4:16 Certificate issuer: /CN=B2C18E11C8530BDF4EE333F5DEBD0B055F9DA416 Certificate serial: 44186E5500E542E3A848E8F8D4A80D8C4E84EB99 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B2C18E11C8530BDF4EE333F5DEBD0B055F9DA416.cer Subject info access: rsync://repo-rpki.idnic.net/repo/93dc1b05-2a69-45b0-8c44-626772276bd9/0/B2C18E11C8530BDF4EE333F5DEBD0B055F9DA416.mft Manifest number: 0242 Signing time: Sun 14 Dec 2025 08:40:51 +0000 Manifest this update: Sun 14 Dec 2025 08:35:51 +0000 Manifest next update: Wed 17 Dec 2025 17:15:51 +0000 Files and hashes: 1: 3130332e36382e3133372e302f32342d3234203d3e20313335343535.roa (hash: B/Oe9y1prQPdwN9dHWS523CLyIs4euOM6VNMTv5PS6I=) 2: 3130332e36382e3133362e302f32342d3234203d3e203338353131.roa (hash: ef8K/s+loJfcDNcQd9jMxXM6ibzQu1hDbe8Y7AKrwdI=) 3: B2C18E11C8530BDF4EE333F5DEBD0B055F9DA416.crl (hash: QTKGJ9SbbtwZ8omHMDZU7hHPBczW1CG1rV3aib0QHXs=) 4: 323030313a6466333a313230303a3a2f34382d3438203d3e20313335343535.roa (hash: PbwEzJXRFcDlg8qq7i8GVSnaGAPkcyZUmZy35AgEFf0=) 5: 3130332e36382e3133362e302f32332d3233203d3e203338353131.roa (hash: Xfgb/bosimr9cD6CvubfYOrFF8ltCqJCXBNQnnNDr+E=) 6: 3130332e36382e3133362e302f32342d3234203d3e20313335343535.roa (hash: Vqh39P+3nWLH6GpYM+8FhU68z1hzASxU3wAlgsuT274=) 7: 3130332e36382e3133372e302f32342d3234203d3e203338353131.roa (hash: kW0dkbVl3axDrA3JYmOP/J+VOWaOXAqel6hQB21C0fo=) 8: 3130332e36382e3133362e302f32332d3234203d3e20313335343535.roa (hash: 3shwJ2AKcESaufbVwJ1tBPOkyd6LqDrGvkFRzpot0c8=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/93dc1b05-2a69-45b0-8c44-626772276bd9/0/B2C18E11C8530BDF4EE333F5DEBD0B055F9DA416.crl rsync://repo-rpki.idnic.net/repo/93dc1b05-2a69-45b0-8c44-626772276bd9/0/B2C18E11C8530BDF4EE333F5DEBD0B055F9DA416.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B2C18E11C8530BDF4EE333F5DEBD0B055F9DA416.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 17 Dec 2025 17:15:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 44:18:6e:55:00:e5:42:e3:a8:48:e8:f8:d4:a8:0d:8c:4e:84:eb:99 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B2C18E11C8530BDF4EE333F5DEBD0B055F9DA416 Validity Not Before: Dec 14 08:35:51 2025 GMT Not After : Dec 17 17:15:51 2025 GMT Subject: CN=00AD92CC1BDF5C9DBB028917264556BE4ADCC90A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:f1:92:56:84:30:55:95:17:80:ef:96:8b:27: 91:e3:87:57:a6:ea:9e:58:36:27:03:ec:2c:18:44: 24:6c:2e:e3:32:5d:44:ef:53:5d:b2:43:27:02:c9: 2f:bc:2b:39:bb:9e:ff:cf:19:42:6e:80:06:96:c6: bd:26:6b:3d:c2:b3:ae:9a:24:31:21:db:c4:0e:ce: f0:16:50:c7:bc:1d:b2:b5:ec:84:04:64:0d:3a:51: 6d:8e:e5:75:3f:65:1c:2e:99:78:09:0e:0f:0a:2c: ae:fb:c0:3a:13:a7:42:d7:25:e7:3b:f9:5d:51:12: 44:ce:af:ba:c4:3f:70:c9:7e:e2:a3:e2:99:64:e8: 25:d7:ab:ae:f0:10:c9:af:5e:29:f0:c4:bf:81:21: 5b:9c:4f:80:6f:f2:df:ac:c5:b2:8c:e9:44:25:32: 6c:6f:a5:67:a6:59:1e:aa:85:b5:10:95:7e:dc:04: 33:df:1e:4d:b6:f4:28:85:53:72:c8:14:9a:a6:af: e8:e5:9b:44:89:57:78:2f:26:b4:4d:09:53:1b:c6: 30:f1:e2:02:9c:5e:a0:f7:7d:c7:49:35:cf:ff:e7: 65:f9:46:81:7b:90:0c:6b:fa:f8:49:5a:8d:24:78: 78:d0:6f:95:af:a9:f8:9f:0a:9d:f1:80:6c:c0:3e: ef:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:AD:92:CC:1B:DF:5C:9D:BB:02:89:17:26:45:56:BE:4A:DC:C9:0A X509v3 Authority Key Identifier: keyid:B2:C1:8E:11:C8:53:0B:DF:4E:E3:33:F5:DE:BD:0B:05:5F:9D:A4:16 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/93dc1b05-2a69-45b0-8c44-626772276bd9/0/B2C18E11C8530BDF4EE333F5DEBD0B055F9DA416.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B2C18E11C8530BDF4EE333F5DEBD0B055F9DA416.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/93dc1b05-2a69-45b0-8c44-626772276bd9/0/B2C18E11C8530BDF4EE333F5DEBD0B055F9DA416.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b2:01:87:7c:67:d5:68:eb:b2:bf:34:3b:67:e9:dd:23:a2:ee: d5:bd:ec:be:f9:39:e2:34:89:52:e6:b3:35:52:88:78:77:1f: 6e:64:ff:f1:df:5a:cc:f8:c4:ff:38:ce:0d:cc:41:5a:11:e9: 53:83:ed:a9:18:db:24:56:a4:9d:b8:cb:75:5e:76:97:16:ae: 4d:c8:02:58:c9:ff:69:a9:fe:f8:df:2e:23:eb:4c:a2:48:c7: 80:58:6f:b6:5e:a0:eb:c0:c2:64:a2:52:59:36:34:db:16:f0: a5:99:7b:1c:10:39:0e:c2:4a:07:c6:06:ac:81:f5:d9:96:76: 9e:95:34:10:9f:97:af:c9:f6:e7:63:01:30:13:48:69:d7:8b: 98:3e:a3:85:32:20:e5:33:39:bc:0c:e7:cb:dc:12:39:e4:ea: 8c:d2:f5:1d:a4:c4:05:ad:38:11:8c:8c:9a:d5:3d:90:aa:27: ed:ee:88:f8:74:93:4a:5c:20:f2:4c:a3:61:1f:dc:19:8f:e5: de:da:a7:ea:90:15:ed:fb:ff:50:2c:d1:9d:08:c1:56:9d:43: 33:20:18:d2:ec:f3:53:8b:df:f8:67:3d:48:d6:1b:68:f5:ae: 0c:c1:de:1f:34:5b:e6:4b:61:df:2f:fb:71:1c:39:31:88:57: 2d:ab:30:3c -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIURBhuVQDlQuOoSOj41KgNjE6E65kwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjJDMThFMTFDODUzMEJERjRFRTMzM0Y1REVCRDBCMDU1 RjlEQTQxNjAeFw0yNTEyMTQwODM1NTFaFw0yNTEyMTcxNzE1NTFaMDMxMTAvBgNV BAMTKDAwQUQ5MkNDMUJERjVDOURCQjAyODkxNzI2NDU1NkJFNEFEQ0M5MEEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCe8ZJWhDBVlReA75aLJ5Hjh1em 6p5YNicD7CwYRCRsLuMyXUTvU12yQycCyS+8Kzm7nv/PGUJugAaWxr0maz3Cs66a JDEh28QOzvAWUMe8HbK17IQEZA06UW2O5XU/ZRwumXgJDg8KLK77wDoTp0LXJec7 +V1REkTOr7rEP3DJfuKj4plk6CXXq67wEMmvXinwxL+BIVucT4Bv8t+sxbKM6UQl MmxvpWemWR6qhbUQlX7cBDPfHk229CiFU3LIFJqmr+jlm0SJV3gvJrRNCVMbxjDx 4gKcXqD3fcdJNc//52X5RoF7kAxr+vhJWo0keHjQb5WvqfifCp3xgGzAPu95AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUAK2SzBvfXJ27AokXJkVWvkrcyQowHwYDVR0j BBgwFoAUssGOEchTC99O4zP13r0LBV+dpBYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 M2RjMWIwNS0yYTY5LTQ1YjAtOGM0NC02MjY3NzIyNzZiZDkvMC9CMkMxOEUxMUM4 NTMwQkRGNEVFMzMzRjVERUJEMEIwNTVGOURBNDE2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQjJDMThFMTFDODUzMEJERjRFRTMzM0Y1REVCRDBCMDU1RjlE QTQxNi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOTNkYzFiMDUtMmE2OS00NWIwLThj NDQtNjI2NzcyMjc2YmQ5LzAvQjJDMThFMTFDODUzMEJERjRFRTMzM0Y1REVCRDBC MDU1RjlEQTQxNi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALIBh3xn1Wjrsr80O2fp3SOi7tW97L75OeI0 iVLmszVSiHh3H25k//HfWsz4xP84zg3MQVoR6VOD7akY2yRWpJ24y3VedpcWrk3I AljJ/2mp/vjfLiPrTKJIx4BYb7ZeoOvAwmSiUlk2NNsW8KWZexwQOQ7CSgfGBqyB 9dmWdp6VNBCfl6/J9udjATATSGnXi5g+o4UyIOUzObwM58vcEjnk6ozS9R2kxAWt OBGMjJrVPZCqJ+3uiPh0k0pcIPJMo2Ef3BmP5d7ap+qQFe37/1As0Z0IwVadQzMg GNLs81OL3/hnPUjWG2j1rgzB3h80W+ZLYd8v+3EcOTGIVy2rMDw= -----END CERTIFICATE-----Generated at Mon Dec 15 22:24:43 2025 by rpki-client