This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/c846f422-c302-4462-b584-700e9346ca09/0/B2B2F42BF1978AD094186480A7DA0086FD7C2919.mft File: B2B2F42BF1978AD094186480A7DA0086FD7C2919.mft (raw, json) Hash identifier: 96xPFgkQdPa+CCMB4SSNXWQsjI+R+gjzgV4X453bFew= Subject key identifier: 8F:CB:EE:95:21:9D:36:31:30:B9:90:F5:C6:6A:88:9A:D0:BC:07:2C Authority key identifier: B2:B2:F4:2B:F1:97:8A:D0:94:18:64:80:A7:DA:00:86:FD:7C:29:19 Certificate issuer: /CN=B2B2F42BF1978AD094186480A7DA0086FD7C2919 Certificate serial: 0300B228964671A23C309385C05A1FBD2D137AEA Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B2B2F42BF1978AD094186480A7DA0086FD7C2919.cer Subject info access: rsync://repo-rpki.idnic.net/repo/c846f422-c302-4462-b584-700e9346ca09/0/B2B2F42BF1978AD094186480A7DA0086FD7C2919.mft Manifest number: 01C9 Signing time: Mon 01 Dec 2025 14:41:37 +0000 Manifest this update: Mon 01 Dec 2025 14:36:37 +0000 Manifest next update: Thu 04 Dec 2025 15:06:37 +0000 Files and hashes: 1: 3130332e32332e39382e302f32332d3233203d3e20313530323435.roa (hash: 4vMfmSE2Nr1Jh9euWzmJY0IXJeyMyzfrb4vovMJmB9A=) 2: 323030313a6466313a653034303a3a2f34382d3438203d3e20313530323435.roa (hash: gtOr9NwzW8Aa7fZGd03VkoCWA9Dhf88Ryc02CpBSPGY=) 3: B2B2F42BF1978AD094186480A7DA0086FD7C2919.crl (hash: sIlQfshxnBABbj2YhY5yNdSmwb1uZWIhUmDVObONMAU=) 4: 3130332e32332e39382e302f32342d3234203d3e20313530323435.roa (hash: zfWwMyIyfYFsLYce6cLTwp+3PWwf0vu9ehqN4lOZ8SU=) 5: 3130332e32332e39392e302f32342d3234203d3e20313530323435.roa (hash: 7tXNJtByPVAUWKN7rPTJrICa1r391Ty+571rFNCuCe4=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/c846f422-c302-4462-b584-700e9346ca09/0/B2B2F42BF1978AD094186480A7DA0086FD7C2919.crl rsync://repo-rpki.idnic.net/repo/c846f422-c302-4462-b584-700e9346ca09/0/B2B2F42BF1978AD094186480A7DA0086FD7C2919.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B2B2F42BF1978AD094186480A7DA0086FD7C2919.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 04 Dec 2025 15:06:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 03:00:b2:28:96:46:71:a2:3c:30:93:85:c0:5a:1f:bd:2d:13:7a:ea Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B2B2F42BF1978AD094186480A7DA0086FD7C2919 Validity Not Before: Dec 1 14:36:37 2025 GMT Not After : Dec 4 15:06:37 2025 GMT Subject: CN=8FCBEE95219D363130B990F5C66A889AD0BC072C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:5b:19:04:25:47:24:59:e7:9e:98:1a:3c:6c: 93:10:55:38:e4:65:c6:95:57:c9:c3:ee:ee:86:d2: a9:3d:a6:d9:6b:2e:1a:b7:92:da:55:83:5a:02:de: 08:30:4e:c6:50:04:31:01:c2:b6:98:70:0e:66:d1: 2a:72:e7:8f:07:35:9f:58:b5:05:68:a2:37:85:dc: 9d:9d:98:e3:76:0c:d9:a5:ac:d7:7e:c0:0b:82:04: 14:41:0c:c4:79:5f:be:b9:35:33:24:4e:3c:2c:c4: 99:0f:4b:a4:7e:45:d0:e6:3a:56:58:cb:28:b9:17: d0:37:02:c1:81:59:21:a7:82:20:ab:73:c4:e9:98: 12:45:b1:6a:e6:d1:43:31:d1:42:1a:a1:ba:6b:c8: ca:18:4d:3a:83:6a:2d:b5:25:14:24:4f:9f:dc:24: 36:48:4c:e4:41:c6:ed:c9:04:f9:22:45:bf:5d:9a: 8c:6c:d5:9f:ad:e1:6e:3e:18:5b:4f:8e:ba:dd:cd: bf:67:28:a0:92:ae:bc:c6:66:f2:32:14:a1:15:d3: b6:b1:9b:b6:75:9a:71:85:c8:61:1f:20:6f:62:d7: da:d4:a6:20:e2:22:bf:ef:4b:a3:61:c4:3d:f8:7e: 67:b9:b5:ae:c2:de:3e:4a:75:20:da:21:ee:61:5e: 7d:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:CB:EE:95:21:9D:36:31:30:B9:90:F5:C6:6A:88:9A:D0:BC:07:2C X509v3 Authority Key Identifier: keyid:B2:B2:F4:2B:F1:97:8A:D0:94:18:64:80:A7:DA:00:86:FD:7C:29:19 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/c846f422-c302-4462-b584-700e9346ca09/0/B2B2F42BF1978AD094186480A7DA0086FD7C2919.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B2B2F42BF1978AD094186480A7DA0086FD7C2919.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c846f422-c302-4462-b584-700e9346ca09/0/B2B2F42BF1978AD094186480A7DA0086FD7C2919.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a1:c0:a1:da:1f:b4:00:d2:d5:e6:f0:73:6a:e0:d4:da:5a:78: 11:45:2e:a6:c9:3b:ba:f4:62:97:01:56:3d:e9:ee:9a:88:7a: 2c:6f:74:45:1d:46:41:a0:14:24:af:a4:6c:80:cc:ed:01:84: 91:90:89:1b:84:a1:4a:03:14:89:7c:f5:28:67:2d:23:37:ad: 35:85:f0:f8:de:5b:1d:13:04:86:21:ce:ec:fe:31:60:60:8b: 17:54:bc:29:f3:21:e7:e9:bf:4f:e9:b2:8a:79:a6:2c:03:dd: fb:21:d4:4a:f1:b5:2c:5e:a0:82:1e:ab:32:5d:e7:93:9c:88: de:26:d3:0c:e7:49:b6:82:c1:e3:09:6f:ea:8e:9a:4e:6c:f3: 6f:70:77:8f:1b:41:3f:93:ba:e3:d9:44:6c:b6:7f:7d:4d:4c: 18:f7:b9:7c:1b:2d:28:8f:c5:04:ce:43:fe:2c:7d:fe:3c:b9: fa:ae:69:ef:2b:78:8d:c9:d7:25:ef:83:31:fa:3b:e0:b1:9d: 58:28:65:cb:f2:dc:73:ca:4c:db:49:c0:ca:c2:2e:66:0b:f8: f0:af:9d:cc:c5:80:3b:fe:86:71:4c:d2:9e:73:55:bb:f1:e4: ee:ea:cb:1c:49:f4:56:03:d8:b2:7c:bb:d3:50:af:40:76:e4: 6b:6d:b8:e2 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUAwCyKJZGcaI8MJOFwFofvS0TeuowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjJCMkY0MkJGMTk3OEFEMDk0MTg2NDgwQTdEQTAwODZG RDdDMjkxOTAeFw0yNTEyMDExNDM2MzdaFw0yNTEyMDQxNTA2MzdaMDMxMTAvBgNV BAMTKDhGQ0JFRTk1MjE5RDM2MzEzMEI5OTBGNUM2NkE4ODlBRDBCQzA3MkMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDOWxkEJUckWeeemBo8bJMQVTjk ZcaVV8nD7u6G0qk9ptlrLhq3ktpVg1oC3ggwTsZQBDEBwraYcA5m0Spy548HNZ9Y tQVoojeF3J2dmON2DNmlrNd+wAuCBBRBDMR5X765NTMkTjwsxJkPS6R+RdDmOlZY yyi5F9A3AsGBWSGngiCrc8TpmBJFsWrm0UMx0UIaobpryMoYTTqDai21JRQkT5/c JDZITORBxu3JBPkiRb9dmoxs1Z+t4W4+GFtPjrrdzb9nKKCSrrzGZvIyFKEV07ax m7Z1mnGFyGEfIG9i19rUpiDiIr/vS6NhxD34fme5ta7C3j5KdSDaIe5hXn17AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUj8vulSGdNjEwuZD1xmqImtC8BywwHwYDVR0j BBgwFoAUsrL0K/GXitCUGGSAp9oAhv18KRkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j ODQ2ZjQyMi1jMzAyLTQ0NjItYjU4NC03MDBlOTM0NmNhMDkvMC9CMkIyRjQyQkYx OTc4QUQwOTQxODY0ODBBN0RBMDA4NkZEN0MyOTE5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQjJCMkY0MkJGMTk3OEFEMDk0MTg2NDgwQTdEQTAwODZGRDdD MjkxOS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYzg0NmY0MjItYzMwMi00NDYyLWI1 ODQtNzAwZTkzNDZjYTA5LzAvQjJCMkY0MkJGMTk3OEFEMDk0MTg2NDgwQTdEQTAw ODZGRDdDMjkxOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKHAodoftADS1ebwc2rg1NpaeBFFLqbJO7r0 YpcBVj3p7pqIeixvdEUdRkGgFCSvpGyAzO0BhJGQiRuEoUoDFIl89ShnLSM3rTWF 8PjeWx0TBIYhzuz+MWBgixdUvCnzIefpv0/psop5piwD3fsh1ErxtSxeoIIeqzJd 55OciN4m0wznSbaCweMJb+qOmk5s829wd48bQT+TuuPZRGy2f31NTBj3uXwbLSiP xQTOQ/4sff48ufquae8reI3J1yXvgzH6O+CxnVgoZcvy3HPKTNtJwMrCLmYL+PCv nczFgDv+hnFM0p5zVbvx5O7qyxxJ9FYD2LJ8u9NQr0B25GttuOI= -----END CERTIFICATE-----Generated at Wed Dec 3 14:46:12 2025 by rpki-client