This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/c29cceb6-a4e7-4e82-88be-bb9697bd1d01/0/BF97329188204CAD55AEC0D48286FAC81B806C71.mft File: BF97329188204CAD55AEC0D48286FAC81B806C71.mft (raw, json) Hash identifier: g65aSS1ESSo/QU2Y344/4T7ia2thX26TBa08wJg1Plk= Subject key identifier: D3:D1:44:B5:81:1E:E1:82:5B:41:31:2B:B9:AF:61:6D:6E:CF:B0:8B Authority key identifier: BF:97:32:91:88:20:4C:AD:55:AE:C0:D4:82:86:FA:C8:1B:80:6C:71 Certificate issuer: /CN=BF97329188204CAD55AEC0D48286FAC81B806C71 Certificate serial: 3E86311C93457278D978C73982C2094AC0DD46B5 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BF97329188204CAD55AEC0D48286FAC81B806C71.cer Subject info access: rsync://repo-rpki.idnic.net/repo/c29cceb6-a4e7-4e82-88be-bb9697bd1d01/0/BF97329188204CAD55AEC0D48286FAC81B806C71.mft Manifest number: 7E Signing time: Tue 02 Dec 2025 01:31:59 +0000 Manifest this update: Tue 02 Dec 2025 01:26:59 +0000 Manifest next update: Fri 05 Dec 2025 13:13:59 +0000 Files and hashes: 1: BF97329188204CAD55AEC0D48286FAC81B806C71.crl (hash: 2ZcFjPvvG8Kf3sAza8AcQSZbFB7zUGGpbev8TIZHcjk=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/c29cceb6-a4e7-4e82-88be-bb9697bd1d01/0/BF97329188204CAD55AEC0D48286FAC81B806C71.crl rsync://repo-rpki.idnic.net/repo/c29cceb6-a4e7-4e82-88be-bb9697bd1d01/0/BF97329188204CAD55AEC0D48286FAC81B806C71.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BF97329188204CAD55AEC0D48286FAC81B806C71.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 05 Dec 2025 13:13:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3e:86:31:1c:93:45:72:78:d9:78:c7:39:82:c2:09:4a:c0:dd:46:b5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BF97329188204CAD55AEC0D48286FAC81B806C71 Validity Not Before: Dec 2 01:26:59 2025 GMT Not After : Dec 5 13:13:59 2025 GMT Subject: CN=D3D144B5811EE1825B41312BB9AF616D6ECFB08B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:42:af:37:d0:76:95:44:c2:c8:55:ab:31:2c: ba:57:d5:24:11:f9:a2:90:57:0c:c6:c2:9e:36:48: 10:32:34:ea:e7:5d:36:46:4e:b4:f3:07:97:9e:b2: 0c:c6:c5:5d:14:a4:1a:7a:78:e4:78:54:47:6a:de: 31:89:fa:f0:cb:aa:0e:e1:dc:48:34:ac:4e:df:dc: df:8b:11:55:f5:27:8e:67:a4:ff:f9:eb:84:ea:5b: be:52:33:06:af:69:2c:37:fb:f2:e6:d4:12:14:8b: 60:94:81:7e:c3:f3:c5:29:22:aa:4b:4d:a2:4b:f4: 0c:a5:ee:d3:5d:a0:e8:69:b6:37:5d:e8:dd:af:34: fc:62:e4:6b:02:13:b5:c0:d8:62:53:d2:da:b0:34: ae:7b:57:37:9b:45:a2:dc:2a:f5:a6:85:ea:28:76: 2c:bc:25:02:3f:96:9b:62:bb:45:a0:a0:42:c4:e6: e9:5d:96:69:42:b0:1b:ca:9d:a7:cd:2f:0e:e0:9a: 29:8e:d4:51:a6:e2:a2:a1:ae:56:04:51:2a:1d:3b: 61:78:9b:e2:7a:80:67:ec:a0:00:37:72:68:59:65: fb:b3:d1:d9:2c:ed:f6:70:8c:a9:85:59:5f:e4:72: f3:90:c0:48:31:e0:1f:73:88:de:a4:12:56:96:cd: 40:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:D1:44:B5:81:1E:E1:82:5B:41:31:2B:B9:AF:61:6D:6E:CF:B0:8B X509v3 Authority Key Identifier: keyid:BF:97:32:91:88:20:4C:AD:55:AE:C0:D4:82:86:FA:C8:1B:80:6C:71 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/c29cceb6-a4e7-4e82-88be-bb9697bd1d01/0/BF97329188204CAD55AEC0D48286FAC81B806C71.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BF97329188204CAD55AEC0D48286FAC81B806C71.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c29cceb6-a4e7-4e82-88be-bb9697bd1d01/0/BF97329188204CAD55AEC0D48286FAC81B806C71.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5a:f2:4d:8d:ef:16:9b:2c:44:86:3f:5f:43:93:b8:2d:1d:c8: 59:34:e0:e3:3d:99:02:c0:05:cc:0f:4b:64:73:69:b8:7f:d3: df:65:8e:99:af:43:ea:3f:e7:46:e3:92:89:7c:ee:d4:c7:f9: a7:ac:8d:b6:47:1e:48:f0:42:2a:07:fe:0a:8e:08:c8:40:03: 29:bb:40:7a:e9:76:7b:76:96:2d:0f:ed:14:44:3d:ae:f6:dc: c2:9a:80:14:db:af:b3:c0:45:a4:4a:70:47:b1:05:6b:cd:78: 7c:ce:23:02:a4:40:bf:9a:5b:97:8c:ef:93:67:8f:d3:76:7a: fb:26:97:82:81:7a:d7:d0:b2:4e:9c:9a:df:59:11:58:61:5f: bb:98:4c:4f:fd:4a:2b:7d:9f:21:38:6b:23:da:42:9a:b2:bf: d0:01:73:9f:f5:c6:46:37:8e:8a:66:cd:78:e1:dc:34:32:d3: 39:15:0c:27:3c:86:07:9b:8b:73:65:a4:c0:cd:3a:c5:cc:bf: e3:a7:8f:8f:1b:15:19:46:cf:bc:30:df:4f:25:45:b8:d0:f7: 85:91:20:d4:51:25:28:f3:58:45:6e:66:46:d9:a6:27:5e:49: c4:cb:07:f8:f3:7b:88:2d:bc:8d:80:c2:cd:44:b4:34:a1:b3: 23:bf:f0:79 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUPoYxHJNFcnjZeMc5gsIJSsDdRrUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkY5NzMyOTE4ODIwNENBRDU1QUVDMEQ0ODI4NkZBQzgx QjgwNkM3MTAeFw0yNTEyMDIwMTI2NTlaFw0yNTEyMDUxMzEzNTlaMDMxMTAvBgNV BAMTKEQzRDE0NEI1ODExRUUxODI1QjQxMzEyQkI5QUY2MTZENkVDRkIwOEIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCsQq830HaVRMLIVasxLLpX1SQR +aKQVwzGwp42SBAyNOrnXTZGTrTzB5eesgzGxV0UpBp6eOR4VEdq3jGJ+vDLqg7h 3Eg0rE7f3N+LEVX1J45npP/564TqW75SMwavaSw3+/Lm1BIUi2CUgX7D88UpIqpL TaJL9Ayl7tNdoOhptjdd6N2vNPxi5GsCE7XA2GJT0tqwNK57VzebRaLcKvWmheoo diy8JQI/lptiu0WgoELE5uldlmlCsBvKnafNLw7gmimO1FGm4qKhrlYEUSodO2F4 m+J6gGfsoAA3cmhZZfuz0dks7fZwjKmFWV/kcvOQwEgx4B9ziN6kElaWzUCbAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU09FEtYEe4YJbQTErua9hbW7PsIswHwYDVR0j BBgwFoAUv5cykYggTK1VrsDUgob6yBuAbHEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j MjljY2ViNi1hNGU3LTRlODItODhiZS1iYjk2OTdiZDFkMDEvMC9CRjk3MzI5MTg4 MjA0Q0FENTVBRUMwRDQ4Mjg2RkFDODFCODA2QzcxLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQkY5NzMyOTE4ODIwNENBRDU1QUVDMEQ0ODI4NkZBQzgxQjgw NkM3MS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYzI5Y2NlYjYtYTRlNy00ZTgyLTg4 YmUtYmI5Njk3YmQxZDAxLzAvQkY5NzMyOTE4ODIwNENBRDU1QUVDMEQ0ODI4NkZB QzgxQjgwNkM3MS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFryTY3vFpssRIY/X0OTuC0dyFk04OM9mQLA BcwPS2Rzabh/099ljpmvQ+o/50bjkol87tTH+aesjbZHHkjwQioH/gqOCMhAAym7 QHrpdnt2li0P7RREPa723MKagBTbr7PARaRKcEexBWvNeHzOIwKkQL+aW5eM75Nn j9N2evsml4KBetfQsk6cmt9ZEVhhX7uYTE/9Sit9nyE4ayPaQpqyv9ABc5/1xkY3 jopmzXjh3DQy0zkVDCc8hgebi3NlpMDNOsXMv+Onj48bFRlGz7ww308lRbjQ94WR INRRJSjzWEVuZkbZpideScTLB/jze4gtvI2Aws1EtDShsyO/8Hk= -----END CERTIFICATE-----Generated at Wed Dec 3 14:13:26 2025 by rpki-client