This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/cafcbfbb-ba3f-4d53-a04f-14d6f4be0cb1/1/B92F0FB3E141D52ED2A71FA483ED3C6D723F60E2.mft File: B92F0FB3E141D52ED2A71FA483ED3C6D723F60E2.mft (raw, json) Hash identifier: Gd+3onfHkaWksDSTXOiV0fitkFJ/zp846yYyOjz8Tho= Subject key identifier: 43:F2:42:6B:D8:19:61:36:5E:41:54:3C:21:F6:B6:0C:7C:B3:54:E2 Authority key identifier: B9:2F:0F:B3:E1:41:D5:2E:D2:A7:1F:A4:83:ED:3C:6D:72:3F:60:E2 Certificate issuer: /CN=B92F0FB3E141D52ED2A71FA483ED3C6D723F60E2 Certificate serial: 7057269239CB786E745AB8B858986A5175F2C167 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B92F0FB3E141D52ED2A71FA483ED3C6D723F60E2.cer Subject info access: rsync://repo-rpki.idnic.net/repo/cafcbfbb-ba3f-4d53-a04f-14d6f4be0cb1/1/B92F0FB3E141D52ED2A71FA483ED3C6D723F60E2.mft Manifest number: A5 Signing time: Tue 02 Dec 2025 14:31:37 +0000 Manifest this update: Tue 02 Dec 2025 14:26:37 +0000 Manifest next update: Fri 05 Dec 2025 15:14:37 +0000 Files and hashes: 1: B92F0FB3E141D52ED2A71FA483ED3C6D723F60E2.crl (hash: Aetm7TZt2hcaxpQjgmJDtrSp+nPc1Y0PzPm65eC7RGI=) 2: 323030313a6466343a363463303a3a2f34382d3438203d3e20313533313430.roa (hash: tCFWfM3xPDNAE6hYqcghBjN3a3o8405nfAZiA3LJhEE=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/cafcbfbb-ba3f-4d53-a04f-14d6f4be0cb1/1/B92F0FB3E141D52ED2A71FA483ED3C6D723F60E2.crl rsync://repo-rpki.idnic.net/repo/cafcbfbb-ba3f-4d53-a04f-14d6f4be0cb1/1/B92F0FB3E141D52ED2A71FA483ED3C6D723F60E2.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B92F0FB3E141D52ED2A71FA483ED3C6D723F60E2.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 05 Dec 2025 15:14:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 70:57:26:92:39:cb:78:6e:74:5a:b8:b8:58:98:6a:51:75:f2:c1:67 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B92F0FB3E141D52ED2A71FA483ED3C6D723F60E2 Validity Not Before: Dec 2 14:26:37 2025 GMT Not After : Dec 5 15:14:37 2025 GMT Subject: CN=43F2426BD81961365E41543C21F6B60C7CB354E2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:33:f9:56:55:bd:8c:8d:89:22:90:a8:fe:24: f2:b5:70:af:7f:d9:94:92:cc:68:23:c6:a1:f5:97: 53:81:ce:fa:a0:2a:10:fb:4f:39:6b:d0:25:ce:98: b9:61:4e:f7:f9:18:05:62:c6:a6:1d:ef:f0:c1:dd: bf:5e:7e:de:27:5b:85:0e:82:67:36:cc:2c:46:6f: f2:0d:71:cf:73:92:19:de:e1:65:f1:58:ac:74:fa: 1d:70:f9:dd:c2:a6:e6:ab:cc:c9:a0:6e:cd:17:e1: cb:2c:28:33:33:ea:a2:b6:92:73:1b:a8:cf:46:8b: 93:d6:45:43:28:35:17:30:49:0d:d8:57:94:a3:35: fa:e8:a4:a0:9e:1a:c9:ca:da:6b:3e:ee:09:3f:9e: 8f:dd:4c:72:c7:c6:c8:3f:d4:72:f7:61:98:eb:b1: c9:55:4a:3e:a4:61:60:01:e9:11:1a:6f:f3:51:6d: ab:08:50:0b:54:b8:10:c1:2c:f6:4a:09:48:e6:cc: 9b:c0:15:41:7b:59:bd:9a:c9:31:2d:75:6b:6c:92: d5:4e:0d:3a:5e:15:d8:5b:42:be:f7:00:61:a7:82: 66:51:a4:ab:db:96:b5:54:53:56:b0:a3:bc:56:89: 85:d9:7f:3a:ee:f0:eb:2c:e0:7c:a0:da:ed:d8:12: 15:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:F2:42:6B:D8:19:61:36:5E:41:54:3C:21:F6:B6:0C:7C:B3:54:E2 X509v3 Authority Key Identifier: keyid:B9:2F:0F:B3:E1:41:D5:2E:D2:A7:1F:A4:83:ED:3C:6D:72:3F:60:E2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/cafcbfbb-ba3f-4d53-a04f-14d6f4be0cb1/1/B92F0FB3E141D52ED2A71FA483ED3C6D723F60E2.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B92F0FB3E141D52ED2A71FA483ED3C6D723F60E2.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/cafcbfbb-ba3f-4d53-a04f-14d6f4be0cb1/1/B92F0FB3E141D52ED2A71FA483ED3C6D723F60E2.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 38:34:b7:65:82:47:cd:31:5c:a6:2f:93:34:20:19:f2:8a:d6: 27:ab:aa:7e:80:83:5e:41:2c:5f:4d:76:f3:57:42:53:87:30: 18:5d:62:7b:44:74:ec:a4:01:4e:e8:5d:ed:e8:cd:57:9f:ca: 7c:b9:57:72:b4:d1:43:1f:0e:62:0f:df:27:d2:c3:58:fb:ae: e9:e3:c8:d9:3d:53:6b:b6:6a:cc:1d:98:64:ca:0e:67:17:8c: bc:3f:e0:49:f1:bd:f1:52:79:c1:82:60:12:f8:38:11:cb:68: c2:35:f0:3a:93:38:03:47:37:9c:5f:45:31:1e:ed:dd:e7:78: d6:f4:9e:67:eb:49:90:4c:07:4f:64:9d:ae:b4:93:3f:21:c6: 22:e4:cc:0d:4e:c6:d2:c0:cd:98:07:56:87:a1:6d:57:b1:1e: a9:c6:60:e9:d6:e0:5f:b9:ef:a7:d6:87:27:9a:19:fd:32:cf: 1c:eb:a0:f1:b5:a8:73:52:45:51:7c:35:6c:7a:2f:ea:fd:87: b5:91:aa:12:c1:5c:35:e0:52:72:3b:4d:38:4c:ea:74:ab:ea: 78:8d:bb:aa:4e:3e:1f:39:d7:56:dd:93:14:8b:0b:6a:3e:94: b2:8b:4e:08:8d:68:51:39:d7:43:db:7e:63:f4:e2:41:d5:88: 89:bd:01:d5 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUcFcmkjnLeG50Wri4WJhqUXXywWcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjkyRjBGQjNFMTQxRDUyRUQyQTcxRkE0ODNFRDNDNkQ3 MjNGNjBFMjAeFw0yNTEyMDIxNDI2MzdaFw0yNTEyMDUxNTE0MzdaMDMxMTAvBgNV BAMTKDQzRjI0MjZCRDgxOTYxMzY1RTQxNTQzQzIxRjZCNjBDN0NCMzU0RTIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDDM/lWVb2MjYkikKj+JPK1cK9/ 2ZSSzGgjxqH1l1OBzvqgKhD7Tzlr0CXOmLlhTvf5GAVixqYd7/DB3b9eft4nW4UO gmc2zCxGb/INcc9zkhne4WXxWKx0+h1w+d3CpuarzMmgbs0X4cssKDMz6qK2knMb qM9Gi5PWRUMoNRcwSQ3YV5SjNfropKCeGsnK2ms+7gk/no/dTHLHxsg/1HL3YZjr sclVSj6kYWAB6REab/NRbasIUAtUuBDBLPZKCUjmzJvAFUF7Wb2ayTEtdWtsktVO DTpeFdhbQr73AGGngmZRpKvblrVUU1awo7xWiYXZfzru8Oss4Hyg2u3YEhXPAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUQ/JCa9gZYTZeQVQ8Ifa2DHyzVOIwHwYDVR0j BBgwFoAUuS8Ps+FB1S7Spx+kg+08bXI/YOIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j YWZjYmZiYi1iYTNmLTRkNTMtYTA0Zi0xNGQ2ZjRiZTBjYjEvMS9COTJGMEZCM0Ux NDFENTJFRDJBNzFGQTQ4M0VEM0M2RDcyM0Y2MEUyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQjkyRjBGQjNFMTQxRDUyRUQyQTcxRkE0ODNFRDNDNkQ3MjNG NjBFMi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vY2FmY2JmYmItYmEzZi00ZDUzLWEw NGYtMTRkNmY0YmUwY2IxLzEvQjkyRjBGQjNFMTQxRDUyRUQyQTcxRkE0ODNFRDND NkQ3MjNGNjBFMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADg0t2WCR80xXKYvkzQgGfKK1ierqn6Ag15B LF9NdvNXQlOHMBhdYntEdOykAU7oXe3ozVefyny5V3K00UMfDmIP3yfSw1j7runj yNk9U2u2aswdmGTKDmcXjLw/4EnxvfFSecGCYBL4OBHLaMI18DqTOANHN5xfRTEe 7d3neNb0nmfrSZBMB09kna60kz8hxiLkzA1OxtLAzZgHVoehbVexHqnGYOnW4F+5 76fWhyeaGf0yzxzroPG1qHNSRVF8NWx6L+r9h7WRqhLBXDXgUnI7TThM6nSr6niN u6pOPh8511bdkxSLC2o+lLKLTgiNaFE510PbfmP04kHViIm9AdU= -----END CERTIFICATE-----Generated at Wed Dec 3 13:55:06 2025 by rpki-client