This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/d3925388-35c6-41d7-9dc4-db4d118d135a/0/B891A45840F824B9F116CBEAA3574A68343F5538.mft File: B891A45840F824B9F116CBEAA3574A68343F5538.mft (raw, json) Hash identifier: JBJraBy//mqXSMzJsuD96xn5qaacPmsBD8qa74V+4LM= Subject key identifier: C0:CC:61:A3:D5:DF:5D:C8:99:89:F3:CE:20:3B:44:16:42:82:5C:E8 Authority key identifier: B8:91:A4:58:40:F8:24:B9:F1:16:CB:EA:A3:57:4A:68:34:3F:55:38 Certificate issuer: /CN=B891A45840F824B9F116CBEAA3574A68343F5538 Certificate serial: 1B5737E94029464DBC3641C39649F6435A6CB720 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B891A45840F824B9F116CBEAA3574A68343F5538.cer Subject info access: rsync://repo-rpki.idnic.net/repo/d3925388-35c6-41d7-9dc4-db4d118d135a/0/B891A45840F824B9F116CBEAA3574A68343F5538.mft Manifest number: A0 Signing time: Mon 01 Dec 2025 10:32:16 +0000 Manifest this update: Mon 01 Dec 2025 10:27:16 +0000 Manifest next update: Thu 04 Dec 2025 16:58:16 +0000 Files and hashes: 1: 3130332e3234362e3136392e302f32342d3234203d3e203538333835.roa (hash: M7vZQHPEWxI5UNs6yi6gKlm3olQkDzTXBE8xEqwNtQY=) 2: 3130332e32332e3131362e302f32332d3234203d3e203538333835.roa (hash: GOKg9RSCe07Sx9GP7mLWYk+y2Rm870vCrIk4OhiKGTc=) 3: B891A45840F824B9F116CBEAA3574A68343F5538.crl (hash: 7e5WoSDNObzGweh00mqPgnEt6KQPdqnmw/aYkXfQwBs=) 4: 3131302e39322e37342e302f32332d3234203d3e203538333835.roa (hash: XhWdokRSZKsmkPslfMXYqoYsZmB36DXqHyY6n5ueEW4=) 5: 3130332e32382e3231382e302f32342d3234203d3e203538333835.roa (hash: LRVa/+g9Phm4DS1KM+ftjtti7KXy6ccI0ROhTKpj7KU=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/d3925388-35c6-41d7-9dc4-db4d118d135a/0/B891A45840F824B9F116CBEAA3574A68343F5538.crl rsync://repo-rpki.idnic.net/repo/d3925388-35c6-41d7-9dc4-db4d118d135a/0/B891A45840F824B9F116CBEAA3574A68343F5538.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B891A45840F824B9F116CBEAA3574A68343F5538.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 04 Dec 2025 16:58:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1b:57:37:e9:40:29:46:4d:bc:36:41:c3:96:49:f6:43:5a:6c:b7:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B891A45840F824B9F116CBEAA3574A68343F5538 Validity Not Before: Dec 1 10:27:16 2025 GMT Not After : Dec 4 16:58:16 2025 GMT Subject: CN=C0CC61A3D5DF5DC89989F3CE203B441642825CE8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:11:30:02:a7:b5:9b:aa:26:11:96:5a:01:da: 86:8c:fc:06:3b:01:20:10:42:6b:da:e4:fc:64:a3: 30:95:c1:25:f5:48:1d:18:53:72:34:ac:4e:71:df: ea:fc:08:fc:7e:56:21:ed:0a:2e:08:77:a0:f7:ad: 4c:80:31:06:74:05:86:96:1e:8c:fc:ac:9f:db:89: c9:8a:d6:f0:2a:3b:a4:e7:bf:9c:20:6e:4d:78:2a: 24:09:42:11:45:19:4c:92:c1:d8:5b:ce:0d:17:22: 82:14:75:e3:b0:63:4b:59:d7:a6:d3:e0:07:02:d5: 1a:8e:56:f1:5d:e0:43:1a:d1:24:24:bb:70:37:31: e5:5d:56:e3:43:ea:30:80:87:23:39:f1:58:ee:b3: 11:c4:72:08:96:10:5c:53:b0:3a:c0:93:00:29:27: 22:db:23:61:63:56:0e:2d:c5:80:6e:c8:f2:23:27: e6:38:a5:c8:6f:b9:58:4b:e7:5b:31:69:c3:71:23: 2c:97:cb:76:5c:8c:37:ad:94:15:4a:07:51:ce:22: 7e:8f:04:45:a1:de:9e:e3:18:54:8c:6d:f3:ea:77: 5d:5f:e0:04:2c:0b:ff:d6:ac:11:dc:a4:1e:5c:aa: fa:c8:73:9e:f7:cc:cd:21:b8:da:b4:1d:9a:27:08: c5:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C0:CC:61:A3:D5:DF:5D:C8:99:89:F3:CE:20:3B:44:16:42:82:5C:E8 X509v3 Authority Key Identifier: keyid:B8:91:A4:58:40:F8:24:B9:F1:16:CB:EA:A3:57:4A:68:34:3F:55:38 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/d3925388-35c6-41d7-9dc4-db4d118d135a/0/B891A45840F824B9F116CBEAA3574A68343F5538.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B891A45840F824B9F116CBEAA3574A68343F5538.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d3925388-35c6-41d7-9dc4-db4d118d135a/0/B891A45840F824B9F116CBEAA3574A68343F5538.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 29:b1:ff:fa:90:36:ce:4d:da:2c:cf:9b:c4:2b:14:cb:af:bf: 80:7b:61:ff:70:13:fd:bb:ff:82:13:d6:93:1f:84:5c:c4:26: d7:98:56:7f:78:00:56:3d:29:df:95:ff:da:25:7e:4e:6c:93: ff:6e:4e:73:78:2b:fb:81:7c:19:dc:f6:f8:c4:01:b5:1b:56: 9e:2b:f7:50:4e:ef:d1:b1:d3:cb:b8:52:a8:c0:d3:c3:26:a8: 48:56:a6:55:58:ef:c7:59:c7:c3:45:e8:e5:77:4e:c0:84:c1: cf:f1:5c:11:da:fd:e1:cf:77:1c:10:5a:1a:ca:61:2e:40:b5: 00:51:e2:75:50:a7:9a:6d:72:17:a5:c6:f3:e4:ff:f1:aa:55: 86:fa:0c:d0:37:ce:da:07:71:6c:ea:36:99:d3:f1:8d:dc:91: 1c:d4:80:62:35:62:18:ec:b9:8a:3f:ee:c9:0b:a7:87:3f:64: 0c:cf:9d:e3:7e:08:7b:a6:94:49:1a:32:2f:c3:e1:0c:fc:e4: e9:c4:16:8f:a6:35:30:d3:f8:52:87:61:f6:7f:92:e5:b6:49: 3b:f0:3b:cc:31:d5:cf:28:12:b7:83:9a:33:3f:1d:0d:44:c5: 86:e6:27:a4:bd:24:b4:0a:7c:6a:cc:3b:71:99:78:f5:6e:29: ac:3a:1e:de -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUG1c36UApRk28NkHDlkn2Q1pstyAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjg5MUE0NTg0MEY4MjRCOUYxMTZDQkVBQTM1NzRBNjgz NDNGNTUzODAeFw0yNTEyMDExMDI3MTZaFw0yNTEyMDQxNjU4MTZaMDMxMTAvBgNV BAMTKEMwQ0M2MUEzRDVERjVEQzg5OTg5RjNDRTIwM0I0NDE2NDI4MjVDRTgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCiETACp7WbqiYRlloB2oaM/AY7 ASAQQmva5PxkozCVwSX1SB0YU3I0rE5x3+r8CPx+ViHtCi4Id6D3rUyAMQZ0BYaW Hoz8rJ/bicmK1vAqO6Tnv5wgbk14KiQJQhFFGUySwdhbzg0XIoIUdeOwY0tZ16bT 4AcC1RqOVvFd4EMa0SQku3A3MeVdVuND6jCAhyM58VjusxHEcgiWEFxTsDrAkwAp JyLbI2FjVg4txYBuyPIjJ+Y4pchvuVhL51sxacNxIyyXy3ZcjDetlBVKB1HOIn6P BEWh3p7jGFSMbfPqd11f4AQsC//WrBHcpB5cqvrIc573zM0huNq0HZonCMWTAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUwMxho9XfXciZifPOIDtEFkKCXOgwHwYDVR0j BBgwFoAUuJGkWED4JLnxFsvqo1dKaDQ/VTgwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k MzkyNTM4OC0zNWM2LTQxZDctOWRjNC1kYjRkMTE4ZDEzNWEvMC9CODkxQTQ1ODQw RjgyNEI5RjExNkNCRUFBMzU3NEE2ODM0M0Y1NTM4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQjg5MUE0NTg0MEY4MjRCOUYxMTZDQkVBQTM1NzRBNjgzNDNG NTUzOC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZDM5MjUzODgtMzVjNi00MWQ3LTlk YzQtZGI0ZDExOGQxMzVhLzAvQjg5MUE0NTg0MEY4MjRCOUYxMTZDQkVBQTM1NzRB NjgzNDNGNTUzOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACmx//qQNs5N2izPm8QrFMuvv4B7Yf9wE/27 /4IT1pMfhFzEJteYVn94AFY9Kd+V/9olfk5sk/9uTnN4K/uBfBnc9vjEAbUbVp4r 91BO79Gx08u4UqjA08MmqEhWplVY78dZx8NF6OV3TsCEwc/xXBHa/eHPdxwQWhrK YS5AtQBR4nVQp5ptchelxvPk//GqVYb6DNA3ztoHcWzqNpnT8Y3ckRzUgGI1Yhjs uYo/7skLp4c/ZAzPneN+CHumlEkaMi/D4Qz85OnEFo+mNTDT+FKHYfZ/kuW2STvw O8wx1c8oEreDmjM/HQ1ExYbmJ6S9JLQKfGrMO3GZePVuKaw6Ht4= -----END CERTIFICATE-----Generated at Wed Dec 3 14:43:42 2025 by rpki-client