This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/b59cfd04-69d0-4d4c-8d09-2d2213842c2c/0/BD8CDE6FE3DF9FA1EDA6CEA462F77EF60478990D.mft File: BD8CDE6FE3DF9FA1EDA6CEA462F77EF60478990D.mft (raw, json) Hash identifier: 7jOlzdxYZM055imN1b3+8M969KH06fLvek9wdkdn5fk= Subject key identifier: 2F:99:05:E6:90:92:9F:5C:9B:72:57:A2:2A:09:6B:53:C1:09:BD:87 Authority key identifier: BD:8C:DE:6F:E3:DF:9F:A1:ED:A6:CE:A4:62:F7:7E:F6:04:78:99:0D Certificate issuer: /CN=BD8CDE6FE3DF9FA1EDA6CEA462F77EF60478990D Certificate serial: 562CB8C4E70FBEF94CB16587D75E34E9F013ADDF Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BD8CDE6FE3DF9FA1EDA6CEA462F77EF60478990D.cer Subject info access: rsync://repo-rpki.idnic.net/repo/b59cfd04-69d0-4d4c-8d09-2d2213842c2c/0/BD8CDE6FE3DF9FA1EDA6CEA462F77EF60478990D.mft Manifest number: 052A Signing time: Mon 01 Dec 2025 07:21:25 +0000 Manifest this update: Mon 01 Dec 2025 07:16:25 +0000 Manifest next update: Thu 04 Dec 2025 14:14:25 +0000 Files and hashes: 1: 3130332e3134312e36312e302f32342d3234203d3e20313333383032.roa (hash: sgxUrcQvRnNHbIUuVwSUcdBBcs11g4RjDxY5LVoPdt0=) 2: BD8CDE6FE3DF9FA1EDA6CEA462F77EF60478990D.crl (hash: hmR9slHB3UaMg9CkrGjgd2Wz7cgloQ1QL1dutO0WZQI=) 3: 323030313a6466343a366330303a3a2f34382d3438203d3e20313333383032.roa (hash: 6j5m2VjCwkXGfQzXHijMICktkY7XqIoC3rD1yeh02OI=) 4: 3130332e34312e3234372e302f32342d3234203d3e20313333383032.roa (hash: 8V1al14v0fXTXIGlVH1c93VdIS9Ve5+tbHSMrRhqr58=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/b59cfd04-69d0-4d4c-8d09-2d2213842c2c/0/BD8CDE6FE3DF9FA1EDA6CEA462F77EF60478990D.crl rsync://repo-rpki.idnic.net/repo/b59cfd04-69d0-4d4c-8d09-2d2213842c2c/0/BD8CDE6FE3DF9FA1EDA6CEA462F77EF60478990D.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BD8CDE6FE3DF9FA1EDA6CEA462F77EF60478990D.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 04 Dec 2025 14:14:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 56:2c:b8:c4:e7:0f:be:f9:4c:b1:65:87:d7:5e:34:e9:f0:13:ad:df Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BD8CDE6FE3DF9FA1EDA6CEA462F77EF60478990D Validity Not Before: Dec 1 07:16:25 2025 GMT Not After : Dec 4 14:14:25 2025 GMT Subject: CN=2F9905E690929F5C9B7257A22A096B53C109BD87 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:19:16:46:0a:d5:17:c8:7e:e0:0a:e7:5b:ec: 84:17:22:0c:e7:44:6d:97:0f:19:b0:8b:03:ce:a5: b3:a2:f9:b8:1f:64:4f:7d:7b:45:0d:a1:73:e8:5a: 57:40:ed:25:d2:77:a7:4f:52:56:29:7a:de:63:7c: fa:91:73:08:10:1b:6d:46:82:10:ca:3d:66:38:15: da:e8:b1:75:51:7a:ce:a6:bb:72:99:20:90:2d:24: 1d:d9:08:7c:e1:53:a6:8b:62:ba:fc:57:4c:69:94: b2:dc:30:9f:d7:1c:c3:e8:43:16:ae:a2:3b:c0:fb: a8:1b:6e:41:aa:2d:59:8e:d7:99:c4:26:16:14:0e: 31:08:9b:93:a7:db:8f:2b:0e:9e:f4:3c:8d:a9:a1: 10:54:0f:9b:ea:65:b5:6c:67:ae:61:90:d7:13:66: 78:b8:20:5f:ea:c8:3d:17:d6:d0:db:e0:f8:4e:e7: a7:88:6c:b9:f7:90:eb:b7:80:24:4e:7a:fe:ae:a2: 38:df:a2:7b:95:5a:37:c7:95:52:73:02:27:59:af: 19:0e:54:2b:fc:fb:49:52:15:31:22:7c:bf:82:c9: 27:07:ed:10:40:d8:ff:3d:cd:d8:33:14:c4:3b:e9: 12:65:78:3b:09:cb:6e:8f:b4:f2:02:90:fa:7d:45: af:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2F:99:05:E6:90:92:9F:5C:9B:72:57:A2:2A:09:6B:53:C1:09:BD:87 X509v3 Authority Key Identifier: keyid:BD:8C:DE:6F:E3:DF:9F:A1:ED:A6:CE:A4:62:F7:7E:F6:04:78:99:0D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/b59cfd04-69d0-4d4c-8d09-2d2213842c2c/0/BD8CDE6FE3DF9FA1EDA6CEA462F77EF60478990D.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BD8CDE6FE3DF9FA1EDA6CEA462F77EF60478990D.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/b59cfd04-69d0-4d4c-8d09-2d2213842c2c/0/BD8CDE6FE3DF9FA1EDA6CEA462F77EF60478990D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7d:79:60:d9:ee:1b:99:e0:7e:de:ed:dc:96:4e:03:be:05:eb: 18:35:d7:e3:f7:08:9e:8d:8b:cb:35:8a:11:b2:19:68:46:6d: 46:0d:b1:07:c6:cf:ba:f7:62:81:ac:f3:92:4f:e3:52:aa:bf: bb:65:d4:2f:4f:7d:a8:5b:5f:a0:9f:8a:49:cf:ed:f6:c8:54: 91:15:30:24:0b:56:72:f6:d1:70:cc:3d:c9:fb:44:4a:e4:65: 41:a5:2a:45:55:e6:52:2e:38:0e:0a:93:f7:6a:a5:36:81:c5: 7f:2f:1c:d5:f4:c0:d7:ae:e8:c8:5c:38:be:37:82:c7:04:da: ce:c5:b9:51:b6:a2:0a:9a:45:38:fe:96:46:38:0d:ac:71:09: ad:94:51:dd:b7:20:8c:db:ab:74:c3:b9:11:59:9e:6a:99:ca: fe:75:c1:66:5a:39:13:0c:fa:50:0a:00:1b:ea:17:39:be:e4: ab:a4:40:32:f9:7a:74:d4:ce:e0:67:3f:82:55:8b:83:97:88: c6:17:eb:1f:af:e4:40:24:0d:c5:75:b2:f7:91:08:a3:94:df: 74:50:11:42:99:cd:37:08:53:88:cf:25:68:b5:e8:79:cf:51: 5f:03:eb:a1:12:b7:86:24:d1:82:03:d8:f1:c6:61:39:60:c6: 6a:f5:d0:1b -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUViy4xOcPvvlMsWWH11406fATrd8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkQ4Q0RFNkZFM0RGOUZBMUVEQTZDRUE0NjJGNzdFRjYw NDc4OTkwRDAeFw0yNTEyMDEwNzE2MjVaFw0yNTEyMDQxNDE0MjVaMDMxMTAvBgNV BAMTKDJGOTkwNUU2OTA5MjlGNUM5QjcyNTdBMjJBMDk2QjUzQzEwOUJEODcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDKGRZGCtUXyH7gCudb7IQXIgzn RG2XDxmwiwPOpbOi+bgfZE99e0UNoXPoWldA7SXSd6dPUlYpet5jfPqRcwgQG21G ghDKPWY4FdrosXVRes6mu3KZIJAtJB3ZCHzhU6aLYrr8V0xplLLcMJ/XHMPoQxau ojvA+6gbbkGqLVmO15nEJhYUDjEIm5On248rDp70PI2poRBUD5vqZbVsZ65hkNcT Zni4IF/qyD0X1tDb4PhO56eIbLn3kOu3gCROev6uojjfonuVWjfHlVJzAidZrxkO VCv8+0lSFTEifL+CyScH7RBA2P89zdgzFMQ76RJleDsJy26PtPICkPp9Ra9RAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUL5kF5pCSn1ybcleiKglrU8EJvYcwHwYDVR0j BBgwFoAUvYzeb+Pfn6Htps6kYvd+9gR4mQ0wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i NTljZmQwNC02OWQwLTRkNGMtOGQwOS0yZDIyMTM4NDJjMmMvMC9CRDhDREU2RkUz REY5RkExRURBNkNFQTQ2MkY3N0VGNjA0Nzg5OTBELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQkQ4Q0RFNkZFM0RGOUZBMUVEQTZDRUE0NjJGNzdFRjYwNDc4 OTkwRC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYjU5Y2ZkMDQtNjlkMC00ZDRjLThk MDktMmQyMjEzODQyYzJjLzAvQkQ4Q0RFNkZFM0RGOUZBMUVEQTZDRUE0NjJGNzdF RjYwNDc4OTkwRC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAH15YNnuG5ngft7t3JZOA74F6xg11+P3CJ6N i8s1ihGyGWhGbUYNsQfGz7r3YoGs85JP41Kqv7tl1C9PfahbX6CfiknP7fbIVJEV MCQLVnL20XDMPcn7RErkZUGlKkVV5lIuOA4Kk/dqpTaBxX8vHNX0wNeu6MhcOL43 gscE2s7FuVG2ogqaRTj+lkY4DaxxCa2UUd23IIzbq3TDuRFZnmqZyv51wWZaORMM +lAKABvqFzm+5KukQDL5enTUzuBnP4JVi4OXiMYX6x+v5EAkDcV1sveRCKOU33RQ EUKZzTcIU4jPJWi16HnPUV8D66ESt4Yk0YID2PHGYTlgxmr10Bs= -----END CERTIFICATE-----Generated at Wed Dec 3 13:59:00 2025 by rpki-client