This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/b4a02d37-3b9d-453a-8c81-328e540141fd/0/BB64FDB64281947C3567104C08735A011C6210F4.mft File: BB64FDB64281947C3567104C08735A011C6210F4.mft (raw, json) Hash identifier: b9Z4FbZlnsLFEhMiVpafJepIDwb3r1//7RWGgRvpJeo= Subject key identifier: 3D:41:69:07:02:1A:03:0B:6E:24:B1:A6:B7:52:0C:5B:6C:5B:E3:F6 Authority key identifier: BB:64:FD:B6:42:81:94:7C:35:67:10:4C:08:73:5A:01:1C:62:10:F4 Certificate issuer: /CN=BB64FDB64281947C3567104C08735A011C6210F4 Certificate serial: 577E5414B4F9C9059FC2C5768C217FE6DAAD3AD4 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BB64FDB64281947C3567104C08735A011C6210F4.cer Subject info access: rsync://repo-rpki.idnic.net/repo/b4a02d37-3b9d-453a-8c81-328e540141fd/0/BB64FDB64281947C3567104C08735A011C6210F4.mft Manifest number: 03B3 Signing time: Tue 02 Dec 2025 23:11:50 +0000 Manifest this update: Tue 02 Dec 2025 23:06:50 +0000 Manifest next update: Sat 06 Dec 2025 07:05:50 +0000 Files and hashes: 1: 3130332e3136392e3139322e302f32332d3234203d3e20313432333438.roa (hash: WO1pfWHoqTdWNx4bevNPCtJdd2Sq+t2I2uTA3HBPJBM=) 2: BB64FDB64281947C3567104C08735A011C6210F4.crl (hash: knaRe6ve81oFnHMzKM1jcVqaX7SiZYYCZcvX6eL9Bo0=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/b4a02d37-3b9d-453a-8c81-328e540141fd/0/BB64FDB64281947C3567104C08735A011C6210F4.crl rsync://repo-rpki.idnic.net/repo/b4a02d37-3b9d-453a-8c81-328e540141fd/0/BB64FDB64281947C3567104C08735A011C6210F4.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BB64FDB64281947C3567104C08735A011C6210F4.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 06 Dec 2025 07:05:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 57:7e:54:14:b4:f9:c9:05:9f:c2:c5:76:8c:21:7f:e6:da:ad:3a:d4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BB64FDB64281947C3567104C08735A011C6210F4 Validity Not Before: Dec 2 23:06:50 2025 GMT Not After : Dec 6 07:05:50 2025 GMT Subject: CN=3D416907021A030B6E24B1A6B7520C5B6C5BE3F6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:c1:94:f9:c4:4c:65:b8:e0:fb:fa:bd:6d:a8: 28:62:01:4b:b1:aa:ad:6b:50:b8:b2:b9:27:47:60: 28:a8:aa:14:61:ee:b7:d0:a5:4d:ee:16:74:db:45: 82:5c:a0:94:2f:31:34:1a:e5:95:03:bd:f0:b6:a9: 9e:17:e4:df:bf:9f:ed:3e:0e:32:b6:6d:72:58:68: c9:76:b4:ff:5e:df:f0:94:9e:33:96:f7:b1:a8:5b: 86:af:11:1f:d4:2d:55:b6:a5:12:46:2e:ea:98:31: 26:cc:0f:6f:1d:2a:d0:c7:5f:5a:26:27:d5:5a:69: 3f:57:f0:ac:89:9b:76:be:96:ca:9d:14:86:94:62: 2c:b1:c3:61:90:36:a6:de:0a:6b:93:64:25:2a:98: f1:29:ef:44:82:d2:33:32:24:4f:89:a2:6b:5c:d9: 54:69:e1:79:1e:7c:0f:76:80:f7:9b:37:8c:8b:2c: d1:4e:44:7c:dd:ff:6b:a4:12:c2:1f:d8:20:97:bc: 46:c8:35:bb:42:82:f9:72:c1:78:8f:8b:97:12:cc: 92:f3:7a:29:e2:4b:1f:6d:17:0b:15:ca:58:ac:d7: 6b:5f:7e:d9:f4:cd:04:7a:29:95:ac:b2:c0:85:a6: f0:23:8f:08:be:e5:ec:e0:49:48:e0:21:55:9f:7c: 2c:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:41:69:07:02:1A:03:0B:6E:24:B1:A6:B7:52:0C:5B:6C:5B:E3:F6 X509v3 Authority Key Identifier: keyid:BB:64:FD:B6:42:81:94:7C:35:67:10:4C:08:73:5A:01:1C:62:10:F4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/b4a02d37-3b9d-453a-8c81-328e540141fd/0/BB64FDB64281947C3567104C08735A011C6210F4.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BB64FDB64281947C3567104C08735A011C6210F4.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/b4a02d37-3b9d-453a-8c81-328e540141fd/0/BB64FDB64281947C3567104C08735A011C6210F4.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 41:5f:06:e9:89:de:27:64:19:b0:91:b6:10:e8:74:33:52:2e: e7:e2:5a:da:a8:6e:4f:c4:bf:17:f1:3f:00:8d:96:7e:77:10: 16:09:b9:bd:ca:c5:39:9e:1c:40:1f:49:d2:25:ce:5d:38:4b: f9:d4:94:0e:1a:99:bd:a5:3c:b4:bf:ed:7c:c6:79:47:4d:2f: 9c:0a:34:e5:63:eb:63:9a:e3:b8:8b:bc:ec:36:14:36:88:f4: 61:82:ed:19:f5:4f:8b:45:fb:47:e0:d9:ff:19:1a:fd:39:f8: 38:51:3c:cc:62:97:70:25:ac:7b:a9:65:af:65:47:30:10:b0: c4:26:33:8f:e3:5a:51:35:e8:f0:62:7b:ab:7f:73:cc:cb:b8: ea:c8:de:9d:9f:ba:ab:7a:53:b5:b9:ce:ab:47:2b:8e:7f:17: ef:3d:e3:63:87:6e:c8:3d:fa:aa:6c:e8:88:0a:66:25:c6:92: ca:1f:d0:3d:e7:5b:5b:48:83:b2:02:29:c6:e9:08:12:5b:13: 46:2e:04:f7:ba:e7:37:29:e1:bf:f5:5b:4d:e7:d6:74:21:41: c9:a9:c5:ff:a5:56:94:bb:41:f4:a3:2d:9a:c4:0f:12:bf:26: d9:df:51:b1:4d:10:29:2d:d2:bb:2e:cc:a0:2f:a1:f6:75:21: 7e:36:db:0f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUV35UFLT5yQWfwsV2jCF/5tqtOtQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkI2NEZEQjY0MjgxOTQ3QzM1NjcxMDRDMDg3MzVBMDEx QzYyMTBGNDAeFw0yNTEyMDIyMzA2NTBaFw0yNTEyMDYwNzA1NTBaMDMxMTAvBgNV BAMTKDNENDE2OTA3MDIxQTAzMEI2RTI0QjFBNkI3NTIwQzVCNkM1QkUzRjYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCawZT5xExluOD7+r1tqChiAUux qq1rULiyuSdHYCioqhRh7rfQpU3uFnTbRYJcoJQvMTQa5ZUDvfC2qZ4X5N+/n+0+ DjK2bXJYaMl2tP9e3/CUnjOW97GoW4avER/ULVW2pRJGLuqYMSbMD28dKtDHX1om J9VaaT9X8KyJm3a+lsqdFIaUYiyxw2GQNqbeCmuTZCUqmPEp70SC0jMyJE+Jomtc 2VRp4XkefA92gPebN4yLLNFORHzd/2ukEsIf2CCXvEbINbtCgvlywXiPi5cSzJLz einiSx9tFwsVylis12tfftn0zQR6KZWsssCFpvAjjwi+5ezgSUjgIVWffCzBAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUPUFpBwIaAwtuJLGmt1IMW2xb4/YwHwYDVR0j BBgwFoAUu2T9tkKBlHw1ZxBMCHNaARxiEPQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i NGEwMmQzNy0zYjlkLTQ1M2EtOGM4MS0zMjhlNTQwMTQxZmQvMC9CQjY0RkRCNjQy ODE5NDdDMzU2NzEwNEMwODczNUEwMTFDNjIxMEY0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQkI2NEZEQjY0MjgxOTQ3QzM1NjcxMDRDMDg3MzVBMDExQzYy MTBGNC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYjRhMDJkMzctM2I5ZC00NTNhLThj ODEtMzI4ZTU0MDE0MWZkLzAvQkI2NEZEQjY0MjgxOTQ3QzM1NjcxMDRDMDg3MzVB MDExQzYyMTBGNC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEFfBumJ3idkGbCRthDodDNSLufiWtqobk/E vxfxPwCNln53EBYJub3KxTmeHEAfSdIlzl04S/nUlA4amb2lPLS/7XzGeUdNL5wK NOVj62Oa47iLvOw2FDaI9GGC7Rn1T4tF+0fg2f8ZGv05+DhRPMxil3AlrHupZa9l RzAQsMQmM4/jWlE16PBie6t/c8zLuOrI3p2fuqt6U7W5zqtHK45/F+8942OHbsg9 +qps6IgKZiXGksof0D3nW1tIg7ICKcbpCBJbE0YuBPe65zcp4b/1W03n1nQhQcmp xf+lVpS7QfSjLZrEDxK/JtnfUbFNECkt0rsuzKAvofZ1IX422w8= -----END CERTIFICATE-----Generated at Wed Dec 3 14:14:28 2025 by rpki-client