This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/b4bf8641-bf70-4e3f-9871-ee26a33db3a2/0/BD685C24FF8F432543C3E583484044A44E53067B.mft File: BD685C24FF8F432543C3E583484044A44E53067B.mft (raw, json) Hash identifier: OaN9qpBL43v6X5YT74S2gxOoAt4k+XK/ABLK8XJIS+c= Subject key identifier: E1:7D:C4:E5:12:31:CD:CE:26:3A:9E:99:EF:75:83:8E:C6:49:90:F4 Authority key identifier: BD:68:5C:24:FF:8F:43:25:43:C3:E5:83:48:40:44:A4:4E:53:06:7B Certificate issuer: /CN=BD685C24FF8F432543C3E583484044A44E53067B Certificate serial: 6AFA4E04CE89608D1ED628E2768899BDBAE0E615 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BD685C24FF8F432543C3E583484044A44E53067B.cer Subject info access: rsync://repo-rpki.idnic.net/repo/b4bf8641-bf70-4e3f-9871-ee26a33db3a2/0/BD685C24FF8F432543C3E583484044A44E53067B.mft Manifest number: 11 Signing time: Tue 02 Dec 2025 11:01:18 +0000 Manifest this update: Tue 02 Dec 2025 10:56:18 +0000 Manifest next update: Fri 05 Dec 2025 17:18:18 +0000 Files and hashes: 1: 3130332e38332e3139382e302f32342d3234203d3e20313336303931.roa (hash: dhpkhk04ab2tWVnfTiYy7HAwnFkFS5/nKq6B26Ta2Ao=) 2: BD685C24FF8F432543C3E583484044A44E53067B.crl (hash: XQ84kdhYKeTsqQK/ZCvfRZrgfcjvgpX8jP5yRFgwLRU=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/b4bf8641-bf70-4e3f-9871-ee26a33db3a2/0/BD685C24FF8F432543C3E583484044A44E53067B.crl rsync://repo-rpki.idnic.net/repo/b4bf8641-bf70-4e3f-9871-ee26a33db3a2/0/BD685C24FF8F432543C3E583484044A44E53067B.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BD685C24FF8F432543C3E583484044A44E53067B.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 05 Dec 2025 17:18:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6a:fa:4e:04:ce:89:60:8d:1e:d6:28:e2:76:88:99:bd:ba:e0:e6:15 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BD685C24FF8F432543C3E583484044A44E53067B Validity Not Before: Dec 2 10:56:18 2025 GMT Not After : Dec 5 17:18:18 2025 GMT Subject: CN=E17DC4E51231CDCE263A9E99EF75838EC64990F4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:20:24:fe:ae:1b:52:6c:af:5e:4e:d9:b7:94: bf:59:9f:83:52:8d:ad:4e:95:31:7a:e0:be:68:14: c5:f3:5a:de:c8:1b:ad:8b:f7:83:de:1d:12:6e:fa: 58:4a:d4:1a:c8:91:d3:fc:90:56:b6:2b:34:b0:e4: 66:5f:2b:72:75:1a:50:2d:2a:38:4e:dd:f9:ce:56: a0:49:e9:0b:9d:a4:22:48:78:67:fd:23:4f:64:62: eb:67:04:34:3c:35:98:4d:63:99:5c:d6:dd:42:d8: d3:01:16:39:4e:75:df:fe:61:77:54:24:0f:fd:cd: 4b:3a:f2:3c:56:e7:3a:93:6a:4b:d6:09:40:d2:3b: af:a3:4f:ed:fb:93:73:99:61:95:b5:5d:5a:03:e4: 22:c4:85:e5:49:77:34:a4:3b:79:f1:4f:83:86:d7: d5:16:2f:de:7c:b7:89:34:b1:94:64:a2:9f:a5:6e: f0:06:d7:15:4a:00:f3:6d:f2:32:26:04:f6:c9:40: d4:d4:a4:d2:ae:f8:61:17:9e:a9:7d:b4:c1:07:12: 6a:5d:c7:79:0a:8a:74:e6:12:6e:ba:00:b1:9f:39: 5d:48:ea:54:7c:89:81:f3:56:ec:b8:1a:d2:ee:1e: fb:72:15:a8:01:3a:8a:6f:fa:47:b0:77:67:03:da: 9c:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E1:7D:C4:E5:12:31:CD:CE:26:3A:9E:99:EF:75:83:8E:C6:49:90:F4 X509v3 Authority Key Identifier: keyid:BD:68:5C:24:FF:8F:43:25:43:C3:E5:83:48:40:44:A4:4E:53:06:7B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/b4bf8641-bf70-4e3f-9871-ee26a33db3a2/0/BD685C24FF8F432543C3E583484044A44E53067B.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BD685C24FF8F432543C3E583484044A44E53067B.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/b4bf8641-bf70-4e3f-9871-ee26a33db3a2/0/BD685C24FF8F432543C3E583484044A44E53067B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a8:10:8b:85:21:94:58:6a:4c:f4:cc:27:8f:80:e8:6a:53:16: 07:89:f5:f1:59:70:79:95:6d:b4:4b:57:11:dc:1c:12:0c:c7: 54:d8:9b:e3:b1:b1:54:ec:6e:c0:b9:8d:5f:20:4b:27:29:a0: 01:ad:08:0e:ba:26:f6:d0:3a:ac:be:f7:53:2a:8e:4e:8d:0d: 74:30:30:5a:c5:bc:5d:ba:fb:94:52:1c:f4:6e:8f:02:22:36: 0a:80:7d:85:7b:52:fd:2a:12:d1:21:1b:3d:f7:31:38:b8:eb: ea:bf:89:61:47:fd:27:67:5b:7e:d4:a4:c9:5c:6b:39:25:1b: 64:40:59:23:c5:ab:89:d1:21:d6:27:d2:7d:e1:16:1a:b3:79: c6:44:6c:52:c3:c0:57:79:8a:eb:da:1b:d3:01:26:11:69:e3: 79:2f:d7:c2:f1:46:0f:b0:a9:40:6c:35:ac:65:5c:73:2d:5d: d9:71:07:e4:56:b1:ab:28:ce:45:6a:5b:69:01:ed:4c:72:0a: df:b5:79:51:cf:95:0e:7c:bb:39:11:6e:11:0f:97:61:cd:4c: 9d:f1:e1:03:d5:7a:62:4c:36:99:59:c0:0e:f5:bb:01:2b:fc: a8:27:f1:7f:58:84:e3:96:57:ab:ff:c8:bf:44:86:de:53:15: 65:8f:17:5c -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUavpOBM6JYI0e1ijidoiZvbrg5hUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkQ2ODVDMjRGRjhGNDMyNTQzQzNFNTgzNDg0MDQ0QTQ0 RTUzMDY3QjAeFw0yNTEyMDIxMDU2MThaFw0yNTEyMDUxNzE4MThaMDMxMTAvBgNV BAMTKEUxN0RDNEU1MTIzMUNEQ0UyNjNBOUU5OUVGNzU4MzhFQzY0OTkwRjQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDjICT+rhtSbK9eTtm3lL9Zn4NS ja1OlTF64L5oFMXzWt7IG62L94PeHRJu+lhK1BrIkdP8kFa2KzSw5GZfK3J1GlAt KjhO3fnOVqBJ6QudpCJIeGf9I09kYutnBDQ8NZhNY5lc1t1C2NMBFjlOdd/+YXdU JA/9zUs68jxW5zqTakvWCUDSO6+jT+37k3OZYZW1XVoD5CLEheVJdzSkO3nxT4OG 19UWL958t4k0sZRkop+lbvAG1xVKAPNt8jImBPbJQNTUpNKu+GEXnql9tMEHEmpd x3kKinTmEm66ALGfOV1I6lR8iYHzVuy4GtLuHvtyFagBOopv+kewd2cD2px7AgMB AAGjggI8MIICODAdBgNVHQ4EFgQU4X3E5RIxzc4mOp6Z73WDjsZJkPQwHwYDVR0j BBgwFoAUvWhcJP+PQyVDw+WDSEBEpE5TBnswDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i NGJmODY0MS1iZjcwLTRlM2YtOTg3MS1lZTI2YTMzZGIzYTIvMC9CRDY4NUMyNEZG OEY0MzI1NDNDM0U1ODM0ODQwNDRBNDRFNTMwNjdCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQkQ2ODVDMjRGRjhGNDMyNTQzQzNFNTgzNDg0MDQ0QTQ0RTUz MDY3Qi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYjRiZjg2NDEtYmY3MC00ZTNmLTk4 NzEtZWUyNmEzM2RiM2EyLzAvQkQ2ODVDMjRGRjhGNDMyNTQzQzNFNTgzNDg0MDQ0 QTQ0RTUzMDY3Qi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKgQi4UhlFhqTPTMJ4+A6GpTFgeJ9fFZcHmV bbRLVxHcHBIMx1TYm+OxsVTsbsC5jV8gSycpoAGtCA66JvbQOqy+91Mqjk6NDXQw MFrFvF26+5RSHPRujwIiNgqAfYV7Uv0qEtEhGz33MTi46+q/iWFH/SdnW37UpMlc azklG2RAWSPFq4nRIdYn0n3hFhqzecZEbFLDwFd5iuvaG9MBJhFp43kv18LxRg+w qUBsNaxlXHMtXdlxB+RWsasozkVqW2kB7UxyCt+1eVHPlQ58uzkRbhEPl2HNTJ3x 4QPVemJMNplZwA71uwEr/Kgn8X9YhOOWV6v/yL9Eht5TFWWPF1w= -----END CERTIFICATE-----Generated at Wed Dec 3 14:50:03 2025 by rpki-client