This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/b652bf9c-634b-40b9-ac0c-a87b47d59f91/0/B48345F7F9FB4F14FFFE8BC5B74685D2A0993094.mft File: B48345F7F9FB4F14FFFE8BC5B74685D2A0993094.mft (raw, json) Hash identifier: mr1DQtuB+5R+vJXXQj6ZuhfGmSGi+1N2utHLOESoN2Y= Subject key identifier: 31:66:D3:6C:C5:46:C1:96:00:80:16:ED:FB:F6:64:B6:46:3F:EB:0C Authority key identifier: B4:83:45:F7:F9:FB:4F:14:FF:FE:8B:C5:B7:46:85:D2:A0:99:30:94 Certificate issuer: /CN=B48345F7F9FB4F14FFFE8BC5B74685D2A0993094 Certificate serial: 709CA3F43B3B02631269C9534F26D93DA22EF254 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B48345F7F9FB4F14FFFE8BC5B74685D2A0993094.cer Subject info access: rsync://repo-rpki.idnic.net/repo/b652bf9c-634b-40b9-ac0c-a87b47d59f91/0/B48345F7F9FB4F14FFFE8BC5B74685D2A0993094.mft Manifest number: 01E2 Signing time: Wed 03 Dec 2025 12:10:05 +0000 Manifest this update: Wed 03 Dec 2025 12:05:05 +0000 Manifest next update: Sat 06 Dec 2025 16:51:05 +0000 Files and hashes: 1: 3130332e312e35302e302f32342d3234203d3e20313432333532.roa (hash: 0HtGEFB5lVL9KGTJaAeG0cG7Yc1XqVsEKqDCZP63hmI=) 2: 3130332e312e35312e302f32342d3234203d3e20313432333532.roa (hash: CD4KlQzH2eJhKNwTfYMuI96gq5Df2JYdd7khju1XQoY=) 3: 3130332e312e35302e302f32332d3233203d3e20313432333532.roa (hash: NK7iP85WMoAKxYMx5lbhJuhwp1xc1m7+bm7ki4OmrgU=) 4: B48345F7F9FB4F14FFFE8BC5B74685D2A0993094.crl (hash: PjOkXQKdVwBDadOoHUuD+2a3WV9kyYGPTWL/ExCNJsg=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/b652bf9c-634b-40b9-ac0c-a87b47d59f91/0/B48345F7F9FB4F14FFFE8BC5B74685D2A0993094.crl rsync://repo-rpki.idnic.net/repo/b652bf9c-634b-40b9-ac0c-a87b47d59f91/0/B48345F7F9FB4F14FFFE8BC5B74685D2A0993094.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B48345F7F9FB4F14FFFE8BC5B74685D2A0993094.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 06 Dec 2025 12:07:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 70:9c:a3:f4:3b:3b:02:63:12:69:c9:53:4f:26:d9:3d:a2:2e:f2:54 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B48345F7F9FB4F14FFFE8BC5B74685D2A0993094 Validity Not Before: Dec 3 12:05:05 2025 GMT Not After : Dec 6 16:51:05 2025 GMT Subject: CN=3166D36CC546C196008016EDFBF664B6463FEB0C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:1a:62:1c:57:69:9d:14:1e:db:26:0a:df:e4: 04:40:4d:a1:da:08:7e:61:1d:6d:7a:25:0e:4d:bf: 89:ef:34:68:d4:61:74:7d:ee:23:f7:66:19:01:de: 3f:3a:f9:f4:7e:41:3b:71:db:eb:9a:32:5f:b1:91: b4:b6:f1:da:f1:c0:d2:a0:8d:36:b3:9b:91:06:17: 3e:d3:25:51:2c:10:82:ad:18:4e:04:51:17:0e:03: f3:85:fa:0a:54:77:fd:5d:f8:45:fb:b4:00:d3:de: d1:0a:6e:e2:e4:ed:3a:20:6b:85:b4:d7:bc:1c:ba: cb:f0:c6:0f:d9:e4:ea:33:2d:4e:8b:d2:39:93:0d: 37:31:d4:70:90:89:42:87:5f:60:27:1d:28:c5:82: a2:47:cf:b9:0d:29:e5:ee:08:aa:59:31:59:ce:be: 03:b5:8d:8c:9c:06:e5:1e:37:bf:ec:76:16:6e:0a: 9e:c2:a7:1c:ef:0c:67:83:d7:21:28:8a:81:4d:e4: 68:61:ce:88:82:e6:18:8f:12:74:07:b6:0a:a6:2a: 68:4a:aa:3b:d2:99:86:34:0a:b9:3c:8c:40:b7:2b: c3:25:92:99:95:eb:20:bb:15:d8:a6:9b:d1:23:ba: 33:6d:30:e0:a7:f3:f9:f4:e1:b9:8a:42:f6:23:f7: 35:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 31:66:D3:6C:C5:46:C1:96:00:80:16:ED:FB:F6:64:B6:46:3F:EB:0C X509v3 Authority Key Identifier: keyid:B4:83:45:F7:F9:FB:4F:14:FF:FE:8B:C5:B7:46:85:D2:A0:99:30:94 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/b652bf9c-634b-40b9-ac0c-a87b47d59f91/0/B48345F7F9FB4F14FFFE8BC5B74685D2A0993094.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B48345F7F9FB4F14FFFE8BC5B74685D2A0993094.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/b652bf9c-634b-40b9-ac0c-a87b47d59f91/0/B48345F7F9FB4F14FFFE8BC5B74685D2A0993094.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8a:18:e1:2d:70:36:f9:ff:2f:2c:fe:1a:78:b6:58:27:97:06: 43:18:cd:e4:63:d4:3f:f9:5c:29:69:c9:78:c6:0b:3b:84:d3: 1a:10:a6:40:bb:46:71:44:4a:e1:77:af:66:2c:05:36:a2:e9: bf:c0:ac:86:6e:42:d0:cc:44:f4:0d:cd:4a:85:5e:9a:02:2e: fc:fc:71:08:5f:68:9a:28:b9:e8:88:71:53:e5:3a:30:d0:ab: d2:f3:ec:2c:fc:05:b3:d4:08:a6:a3:a3:8e:17:bc:51:c7:be: 4b:26:61:ab:9a:fe:1a:47:1d:20:79:aa:8a:83:49:fe:63:d1: 28:5b:32:df:54:97:b0:69:d0:11:79:91:56:29:56:a5:2e:41: 9a:41:f8:b4:7e:6f:16:8d:0d:77:d3:44:da:67:31:7e:61:0f: a0:bc:34:d3:f5:08:c4:e5:0b:a3:e0:96:21:49:db:88:49:09: 11:7c:5a:4d:b5:68:bf:52:39:07:cc:f9:b3:f8:bc:61:20:32: f3:9b:e1:40:04:3d:ac:da:78:2c:ac:ec:22:ac:d5:e3:92:38: 1a:4a:a9:c1:5c:9f:75:2c:30:fd:2b:ea:20:eb:7b:25:2c:cf: 9a:d6:40:a1:74:b7:6b:d9:7a:77:11:10:4d:17:29:61:60:03: 06:c7:68:db -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUcJyj9Ds7AmMSaclTTybZPaIu8lQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjQ4MzQ1RjdGOUZCNEYxNEZGRkU4QkM1Qjc0Njg1RDJB MDk5MzA5NDAeFw0yNTEyMDMxMjA1MDVaFw0yNTEyMDYxNjUxMDVaMDMxMTAvBgNV BAMTKDMxNjZEMzZDQzU0NkMxOTYwMDgwMTZFREZCRjY2NEI2NDYzRkVCMEMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC7GmIcV2mdFB7bJgrf5ARATaHa CH5hHW16JQ5Nv4nvNGjUYXR97iP3ZhkB3j86+fR+QTtx2+uaMl+xkbS28drxwNKg jTazm5EGFz7TJVEsEIKtGE4EURcOA/OF+gpUd/1d+EX7tADT3tEKbuLk7Toga4W0 17wcusvwxg/Z5OozLU6L0jmTDTcx1HCQiUKHX2AnHSjFgqJHz7kNKeXuCKpZMVnO vgO1jYycBuUeN7/sdhZuCp7CpxzvDGeD1yEoioFN5GhhzoiC5hiPEnQHtgqmKmhK qjvSmYY0Crk8jEC3K8MlkpmV6yC7Fdimm9EjujNtMOCn8/n04bmKQvYj9zVvAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUMWbTbMVGwZYAgBbt+/ZktkY/6wwwHwYDVR0j BBgwFoAUtINF9/n7TxT//ovFt0aF0qCZMJQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i NjUyYmY5Yy02MzRiLTQwYjktYWMwYy1hODdiNDdkNTlmOTEvMC9CNDgzNDVGN0Y5 RkI0RjE0RkZGRThCQzVCNzQ2ODVEMkEwOTkzMDk0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQjQ4MzQ1RjdGOUZCNEYxNEZGRkU4QkM1Qjc0Njg1RDJBMDk5 MzA5NC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYjY1MmJmOWMtNjM0Yi00MGI5LWFj MGMtYTg3YjQ3ZDU5ZjkxLzAvQjQ4MzQ1RjdGOUZCNEYxNEZGRkU4QkM1Qjc0Njg1 RDJBMDk5MzA5NC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIoY4S1wNvn/Lyz+Gni2WCeXBkMYzeRj1D/5 XClpyXjGCzuE0xoQpkC7RnFESuF3r2YsBTai6b/ArIZuQtDMRPQNzUqFXpoCLvz8 cQhfaJooueiIcVPlOjDQq9Lz7Cz8BbPUCKajo44XvFHHvksmYaua/hpHHSB5qoqD Sf5j0ShbMt9Ul7Bp0BF5kVYpVqUuQZpB+LR+bxaNDXfTRNpnMX5hD6C8NNP1CMTl C6PgliFJ24hJCRF8Wk21aL9SOQfM+bP4vGEgMvOb4UAEPazaeCys7CKs1eOSOBpK qcFcn3UsMP0r6iDreyUsz5rWQKF0t2vZencREE0XKWFgAwbHaNs= -----END CERTIFICATE-----Generated at Wed Dec 3 13:58:59 2025 by rpki-client