This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/d3f8f55c-9e35-4ce2-890f-0de3e2404611/0/BD809D8A065DB595DC069383736A1A9C4A96B267.mft File: BD809D8A065DB595DC069383736A1A9C4A96B267.mft (raw, json) Hash identifier: q5oUGrCO6siJwJkZzXmRVJwu4ybkoxoY29VnEcJcfQA= Subject key identifier: 70:EE:EA:C2:4E:89:3B:01:24:65:BB:18:00:1D:26:66:76:B0:F8:B5 Authority key identifier: BD:80:9D:8A:06:5D:B5:95:DC:06:93:83:73:6A:1A:9C:4A:96:B2:67 Certificate issuer: /CN=BD809D8A065DB595DC069383736A1A9C4A96B267 Certificate serial: 600EE300F9473E5F0D863B6BF131183DFAE6B596 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BD809D8A065DB595DC069383736A1A9C4A96B267.cer Subject info access: rsync://repo-rpki.idnic.net/repo/d3f8f55c-9e35-4ce2-890f-0de3e2404611/0/BD809D8A065DB595DC069383736A1A9C4A96B267.mft Manifest number: 052F Signing time: Tue 02 Dec 2025 18:02:14 +0000 Manifest this update: Tue 02 Dec 2025 17:57:14 +0000 Manifest next update: Fri 05 Dec 2025 23:18:14 +0000 Files and hashes: 1: BD809D8A065DB595DC069383736A1A9C4A96B267.crl (hash: kRoBdVigJy6oh3GLTMCXFhO5NpddUJe0w/lJKP03CHo=) 2: 3130332e35362e3230352e302f32342d3234203d3e203538343737.roa (hash: Y6tvd+1XtHiukr4Lnc++EG2e4/MBcfeHFg9Xd0kGFMg=) 3: 3130332e35362e3230372e302f32342d3234203d3e203538343737.roa (hash: +FaWxeyMSXTm1A2YbWkKpjjxd9ODF5R6bPfmYjsvC3c=) 4: 34352e3132372e3133342e302f32342d3234203d3e203538343737.roa (hash: mAHS4RhjFlyuuj4wSTCANOzW1BtppaUwbd4+LpgqV3A=) 5: 34352e3132372e3133322e302f32342d3234203d3e203538343737.roa (hash: 6P/MnisWmadZujdf0MdzBBem1MXVl8xw/vKYXqNcxoU=) 6: 3130332e35362e3230362e302f32342d3234203d3e203538343737.roa (hash: ctlL63La/nA2o80IyG4Gn5yERO9Svxh3VS6Tj8PS2Bk=) 7: 3130332e35362e3230342e302f32342d3234203d3e203538343737.roa (hash: E6oSwKyWxejOo/v5HHitngqUwJ84vi0WR9s9o+kQ4qc=) 8: 34352e3132372e3133332e302f32342d3234203d3e203538343737.roa (hash: m1RDFs81kJe7cLkzIuvESdF6lsbsj7FMYtNBuW0nGcE=) 9: 34352e3132372e3133352e302f32342d3234203d3e20313335333630.roa (hash: lOPyN4jlxJmDfUm1Z5usitGLtQdiU+flslurwWQqLwM=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/d3f8f55c-9e35-4ce2-890f-0de3e2404611/0/BD809D8A065DB595DC069383736A1A9C4A96B267.crl rsync://repo-rpki.idnic.net/repo/d3f8f55c-9e35-4ce2-890f-0de3e2404611/0/BD809D8A065DB595DC069383736A1A9C4A96B267.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BD809D8A065DB595DC069383736A1A9C4A96B267.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 05 Dec 2025 23:18:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 60:0e:e3:00:f9:47:3e:5f:0d:86:3b:6b:f1:31:18:3d:fa:e6:b5:96 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BD809D8A065DB595DC069383736A1A9C4A96B267 Validity Not Before: Dec 2 17:57:14 2025 GMT Not After : Dec 5 23:18:14 2025 GMT Subject: CN=70EEEAC24E893B012465BB18001D266676B0F8B5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:47:e6:76:f1:20:aa:67:4d:99:5e:15:d3:c2: 39:0d:a6:38:d7:9f:1f:47:31:38:21:6b:ba:b1:9a: 4e:78:1b:5a:89:45:47:fa:8e:4c:14:81:44:79:14: 5b:fc:b2:21:8e:6d:11:0a:73:96:bb:67:5d:85:dd: ce:29:e0:30:88:70:dd:6d:2f:a3:6a:a5:3d:cd:39: 86:dd:b1:27:66:7a:b5:b3:67:cc:56:74:9c:44:9f: 5c:7b:a4:dd:c3:d4:6d:e6:91:81:d0:ef:17:12:78: 27:56:24:e6:fa:e8:81:56:dc:ee:8a:ae:47:28:31: f8:83:15:09:aa:3c:4a:07:dc:56:6f:68:46:11:6c: 54:55:aa:45:28:95:a7:37:9c:fa:b0:a4:93:49:53: 42:6e:76:a4:f6:24:4f:d7:ba:2e:84:df:5f:9a:b9: e1:1e:bd:c8:66:da:09:db:57:0b:89:33:f0:39:d8: 45:5a:91:c9:f2:9a:ce:a6:b9:64:56:a3:91:57:0f: 2a:50:59:66:ab:3f:f3:0c:ac:25:b2:82:e8:c4:54: 2c:7d:05:d0:cc:2b:7d:4d:bd:37:29:36:46:ba:d0: 05:1d:be:dd:3e:85:58:6c:24:d8:fa:94:61:c0:48: 0b:ce:14:b2:ed:13:87:63:53:05:e8:ed:13:4e:b3: 42:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:EE:EA:C2:4E:89:3B:01:24:65:BB:18:00:1D:26:66:76:B0:F8:B5 X509v3 Authority Key Identifier: keyid:BD:80:9D:8A:06:5D:B5:95:DC:06:93:83:73:6A:1A:9C:4A:96:B2:67 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/d3f8f55c-9e35-4ce2-890f-0de3e2404611/0/BD809D8A065DB595DC069383736A1A9C4A96B267.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BD809D8A065DB595DC069383736A1A9C4A96B267.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d3f8f55c-9e35-4ce2-890f-0de3e2404611/0/BD809D8A065DB595DC069383736A1A9C4A96B267.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7f:91:4f:89:7f:62:84:bc:83:a1:26:f9:63:5f:f7:06:e2:ce: c9:7d:ee:c9:01:94:00:e8:39:d9:7d:c4:53:30:62:08:db:65: 2f:d7:76:ba:19:4e:64:18:19:14:af:3f:49:1d:04:2e:c6:35: 97:01:61:80:2d:75:d0:1d:5d:00:18:86:27:ba:b6:02:88:c3: 4d:a4:91:ab:8b:b9:f5:c4:c3:7b:6a:18:47:5a:97:d2:68:9c: 72:0e:9d:56:b1:ef:c4:1a:8a:e9:ba:51:13:c3:af:d3:a0:83: ec:41:83:72:1d:0a:23:17:fd:72:a6:be:fd:8d:16:03:cc:eb: b0:67:f7:af:3c:6e:89:d9:33:e8:10:94:84:dd:a0:c3:27:f3: f7:5f:ea:32:e4:75:1e:3b:6c:25:e1:2f:f3:2c:fc:5b:b7:50: 57:11:a6:a8:57:ac:b6:82:88:c0:09:63:7a:8c:cb:86:f1:ad: d5:18:ab:48:25:de:b7:a0:5d:6d:7b:6c:40:4a:ea:c7:21:26: 4c:df:4b:92:33:4a:f8:a4:0c:57:66:e6:7b:55:b0:3e:96:b3: e9:ba:56:ee:12:5e:a5:71:67:6b:38:48:a3:c7:85:d1:c9:ae: d9:80:9d:d4:4d:8c:4b:a0:03:da:f1:df:1c:52:47:61:a8:76: c1:a4:01:1b -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUYA7jAPlHPl8Nhjtr8TEYPfrmtZYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkQ4MDlEOEEwNjVEQjU5NURDMDY5MzgzNzM2QTFBOUM0 QTk2QjI2NzAeFw0yNTEyMDIxNzU3MTRaFw0yNTEyMDUyMzE4MTRaMDMxMTAvBgNV BAMTKDcwRUVFQUMyNEU4OTNCMDEyNDY1QkIxODAwMUQyNjY2NzZCMEY4QjUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCkR+Z28SCqZ02ZXhXTwjkNpjjX nx9HMTgha7qxmk54G1qJRUf6jkwUgUR5FFv8siGObREKc5a7Z12F3c4p4DCIcN1t L6NqpT3NOYbdsSdmerWzZ8xWdJxEn1x7pN3D1G3mkYHQ7xcSeCdWJOb66IFW3O6K rkcoMfiDFQmqPEoH3FZvaEYRbFRVqkUolac3nPqwpJNJU0JudqT2JE/Xui6E31+a ueEevchm2gnbVwuJM/A52EVakcnyms6muWRWo5FXDypQWWarP/MMrCWygujEVCx9 BdDMK31NvTcpNka60AUdvt0+hVhsJNj6lGHASAvOFLLtE4djUwXo7RNOs0JvAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUcO7qwk6JOwEkZbsYAB0mZnaw+LUwHwYDVR0j BBgwFoAUvYCdigZdtZXcBpODc2oanEqWsmcwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k M2Y4ZjU1Yy05ZTM1LTRjZTItODkwZi0wZGUzZTI0MDQ2MTEvMC9CRDgwOUQ4QTA2 NURCNTk1REMwNjkzODM3MzZBMUE5QzRBOTZCMjY3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQkQ4MDlEOEEwNjVEQjU5NURDMDY5MzgzNzM2QTFBOUM0QTk2 QjI2Ny5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZDNmOGY1NWMtOWUzNS00Y2UyLTg5 MGYtMGRlM2UyNDA0NjExLzAvQkQ4MDlEOEEwNjVEQjU5NURDMDY5MzgzNzM2QTFB OUM0QTk2QjI2Ny5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAH+RT4l/YoS8g6Em+WNf9wbizsl97skBlADo Odl9xFMwYgjbZS/XdroZTmQYGRSvP0kdBC7GNZcBYYAtddAdXQAYhie6tgKIw02k kauLufXEw3tqGEdal9JonHIOnVax78Qaium6URPDr9Ogg+xBg3IdCiMX/XKmvv2N FgPM67Bn9688bonZM+gQlITdoMMn8/df6jLkdR47bCXhL/Ms/Fu3UFcRpqhXrLaC iMAJY3qMy4bxrdUYq0gl3regXW17bEBK6schJkzfS5IzSvikDFdm5ntVsD6Ws+m6 Vu4SXqVxZ2s4SKPHhdHJrtmAndRNjEugA9rx3xxSR2GodsGkARs= -----END CERTIFICATE-----Generated at Wed Dec 3 14:13:25 2025 by rpki-client