This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/bf25b968-0927-4594-887e-67f53f967b12/0/131807BDDAAF97ED72214DFBC5C539ACB04FDCBE.mft File: 131807BDDAAF97ED72214DFBC5C539ACB04FDCBE.mft (raw, json) Hash identifier: puZNzXY4jlqk509y15cmEpPIQpM5y2/mTbi+TO5uKWM= Subject key identifier: 15:3B:2E:DD:C3:BE:C9:2F:DA:5C:97:75:33:B9:9F:3C:B8:ED:C3:8D Authority key identifier: 13:18:07:BD:DA:AF:97:ED:72:21:4D:FB:C5:C5:39:AC:B0:4F:DC:BE Certificate issuer: /CN=131807BDDAAF97ED72214DFBC5C539ACB04FDCBE Certificate serial: 04037EAFF99809FBA6A31FBAF290481CD9DFBFEB Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/131807BDDAAF97ED72214DFBC5C539ACB04FDCBE.cer Subject info access: rsync://repo-rpki.idnic.net/repo/bf25b968-0927-4594-887e-67f53f967b12/0/131807BDDAAF97ED72214DFBC5C539ACB04FDCBE.mft Manifest number: 0337 Signing time: Tue 16 Dec 2025 07:00:57 +0000 Manifest this update: Tue 16 Dec 2025 06:55:57 +0000 Manifest next update: Fri 19 Dec 2025 17:58:57 +0000 Files and hashes: 1: 131807BDDAAF97ED72214DFBC5C539ACB04FDCBE.crl (hash: o0NOVTpfUZrZF+NjKICDwUH44MYr2AIZKuhwApg6J4g=) 2: 3130332e3137342e32342e302f32332d3234203d3e20313331313131.roa (hash: IcV/PuSEjSNsy6cbDUeXZVgPYs8xhMimlvvll5vTiXU=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/bf25b968-0927-4594-887e-67f53f967b12/0/131807BDDAAF97ED72214DFBC5C539ACB04FDCBE.crl rsync://repo-rpki.idnic.net/repo/bf25b968-0927-4594-887e-67f53f967b12/0/131807BDDAAF97ED72214DFBC5C539ACB04FDCBE.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/131807BDDAAF97ED72214DFBC5C539ACB04FDCBE.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 19 Dec 2025 17:58:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 04:03:7e:af:f9:98:09:fb:a6:a3:1f:ba:f2:90:48:1c:d9:df:bf:eb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=131807BDDAAF97ED72214DFBC5C539ACB04FDCBE Validity Not Before: Dec 16 06:55:57 2025 GMT Not After : Dec 19 17:58:57 2025 GMT Subject: CN=153B2EDDC3BEC92FDA5C977533B99F3CB8EDC38D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:29:af:b0:b4:9b:e4:f1:4c:72:0a:03:ca:9c: 86:bf:77:51:fc:53:d7:5a:cc:6a:a3:50:3b:b1:d4: 2c:94:a5:1b:90:52:dd:7f:56:4e:7c:6e:70:6e:06: 01:2e:6e:fa:c2:cc:f3:c1:c8:8b:ca:60:f8:c9:37: f8:41:7a:d7:09:79:fb:62:c0:5e:cd:5e:80:74:f7: a6:95:5a:f0:58:0d:16:d2:53:de:6a:36:ca:96:1f: 20:0e:e7:e8:d8:a0:9a:49:ea:e1:f8:37:b7:ff:25: 77:e3:27:73:9c:a0:c2:e2:54:04:d3:0f:f1:21:25: c5:81:da:1a:c0:ff:6e:29:c5:6c:90:82:e4:1e:58: 5e:88:df:b5:07:fa:48:d9:3b:5e:c5:81:b0:db:d4: 2a:8d:7d:86:79:5d:fd:e8:47:77:ba:6f:38:18:07: 6e:f3:44:20:f3:8b:65:b3:9d:98:c9:d1:f5:4c:0b: 8f:1f:39:1a:ae:57:f2:d7:1e:be:cf:2b:cf:ef:8f: e1:49:00:eb:ee:0b:26:36:fc:00:c0:b1:2e:b2:0a: 73:ac:4e:df:50:b9:91:ab:b8:79:96:ce:e5:07:9d: be:51:13:29:ee:0b:6c:7e:0d:82:c7:aa:5f:71:36: 97:dd:ee:7a:2c:21:ef:45:18:b2:a3:c8:09:9b:3f: 25:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 15:3B:2E:DD:C3:BE:C9:2F:DA:5C:97:75:33:B9:9F:3C:B8:ED:C3:8D X509v3 Authority Key Identifier: keyid:13:18:07:BD:DA:AF:97:ED:72:21:4D:FB:C5:C5:39:AC:B0:4F:DC:BE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/bf25b968-0927-4594-887e-67f53f967b12/0/131807BDDAAF97ED72214DFBC5C539ACB04FDCBE.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/131807BDDAAF97ED72214DFBC5C539ACB04FDCBE.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/bf25b968-0927-4594-887e-67f53f967b12/0/131807BDDAAF97ED72214DFBC5C539ACB04FDCBE.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 65:8e:c5:3f:f3:75:08:44:d6:14:57:c9:95:fb:95:00:6d:9c: 53:cf:65:a7:3e:fc:62:6c:40:2c:3d:54:62:68:d6:2c:2f:b7: 0d:0e:24:a9:1b:ca:24:df:8a:90:eb:9b:25:da:7b:e2:d9:36: 1f:1b:19:25:88:0c:7f:f9:41:7b:89:87:5a:16:7b:0e:36:1f: bf:6a:ac:77:08:10:98:05:ab:63:45:97:91:36:1b:71:b2:3a: 58:22:81:ad:e6:fb:60:77:7c:0a:60:d7:05:22:f2:29:2f:5a: f5:7f:80:30:7e:32:46:84:5f:db:5e:f9:4d:30:44:99:ca:f1: af:a5:5c:08:73:3a:3c:6f:3b:34:81:a8:a4:24:cd:cd:c7:35: 9b:42:5b:97:d8:6d:a8:77:e0:82:74:47:e5:4d:84:28:10:6d: 38:26:a0:57:4b:2a:4e:19:f9:5a:ab:a7:46:7a:ba:6e:22:e5: 2a:65:87:62:aa:7e:6d:6c:75:1c:db:a1:0e:3d:f9:0d:c8:a7: b1:e0:39:d9:9e:30:ff:d4:f3:a4:8c:af:68:02:0b:7c:e0:3c: cf:76:0a:ae:07:70:ca:dc:f0:88:ca:58:c5:b1:6d:f9:af:c3: 84:b7:86:84:d5:2a:7a:57:b4:d6:22:a5:70:ff:0f:b0:d0:82: 39:7f:89:66 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUBAN+r/mYCfumox+68pBIHNnfv+swDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTMxODA3QkREQUFGOTdFRDcyMjE0REZCQzVDNTM5QUNC MDRGRENCRTAeFw0yNTEyMTYwNjU1NTdaFw0yNTEyMTkxNzU4NTdaMDMxMTAvBgNV BAMTKDE1M0IyRUREQzNCRUM5MkZEQTVDOTc3NTMzQjk5RjNDQjhFREMzOEQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+Ka+wtJvk8UxyCgPKnIa/d1H8 U9dazGqjUDux1CyUpRuQUt1/Vk58bnBuBgEubvrCzPPByIvKYPjJN/hBetcJefti wF7NXoB096aVWvBYDRbSU95qNsqWHyAO5+jYoJpJ6uH4N7f/JXfjJ3OcoMLiVATT D/EhJcWB2hrA/24pxWyQguQeWF6I37UH+kjZO17FgbDb1CqNfYZ5Xf3oR3e6bzgY B27zRCDzi2WznZjJ0fVMC48fORquV/LXHr7PK8/vj+FJAOvuCyY2/ADAsS6yCnOs Tt9QuZGruHmWzuUHnb5REynuC2x+DYLHql9xNpfd7nosIe9FGLKjyAmbPyWdAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUFTsu3cO+yS/aXJd1M7mfPLjtw40wHwYDVR0j BBgwFoAUExgHvdqvl+1yIU37xcU5rLBP3L4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i ZjI1Yjk2OC0wOTI3LTQ1OTQtODg3ZS02N2Y1M2Y5NjdiMTIvMC8xMzE4MDdCRERB QUY5N0VENzIyMTRERkJDNUM1MzlBQ0IwNEZEQ0JFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMTMxODA3QkREQUFGOTdFRDcyMjE0REZCQzVDNTM5QUNCMDRG RENCRS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYmYyNWI5NjgtMDkyNy00NTk0LTg4 N2UtNjdmNTNmOTY3YjEyLzAvMTMxODA3QkREQUFGOTdFRDcyMjE0REZCQzVDNTM5 QUNCMDRGRENCRS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGWOxT/zdQhE1hRXyZX7lQBtnFPPZac+/GJs QCw9VGJo1iwvtw0OJKkbyiTfipDrmyXae+LZNh8bGSWIDH/5QXuJh1oWew42H79q rHcIEJgFq2NFl5E2G3GyOlgiga3m+2B3fApg1wUi8ikvWvV/gDB+MkaEX9te+U0w RJnK8a+lXAhzOjxvOzSBqKQkzc3HNZtCW5fYbah34IJ0R+VNhCgQbTgmoFdLKk4Z +Vqrp0Z6um4i5Splh2Kqfm1sdRzboQ49+Q3Ip7HgOdmeMP/U86SMr2gCC3zgPM92 Cq4HcMrc8IjKWMWxbfmvw4S3hoTVKnpXtNYipXD/D7DQgjl/iWY= -----END CERTIFICATE-----Generated at Thu Dec 18 12:46:41 2025 by rpki-client