This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/d5908b83-7f44-46e0-8535-6fb84b59d58a/0/0BB3D1874063172B5374865233070332233FB7B3.mft File: 0BB3D1874063172B5374865233070332233FB7B3.mft (raw, json) Hash identifier: nfoKjV/nma6fvS7kdTJre6DVoEVdiylf8t1XvJMLV5Q= Subject key identifier: 99:F7:EE:AD:1E:D3:C9:F2:47:BE:14:B9:DF:E2:19:12:55:EE:AA:C3 Authority key identifier: 0B:B3:D1:87:40:63:17:2B:53:74:86:52:33:07:03:32:23:3F:B7:B3 Certificate issuer: /CN=0BB3D1874063172B5374865233070332233FB7B3 Certificate serial: 451E6B16EC6603C28F633E6FBCF109D3D6A83791 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0BB3D1874063172B5374865233070332233FB7B3.cer Subject info access: rsync://repo-rpki.idnic.net/repo/d5908b83-7f44-46e0-8535-6fb84b59d58a/0/0BB3D1874063172B5374865233070332233FB7B3.mft Manifest number: 052F Signing time: Wed 17 Dec 2025 10:31:30 +0000 Manifest this update: Wed 17 Dec 2025 10:26:30 +0000 Manifest next update: Sat 20 Dec 2025 18:00:30 +0000 Files and hashes: 1: 0BB3D1874063172B5374865233070332233FB7B3.crl (hash: lycQ3u7/d67QvnvoeKaF9sok9gg9HR54iR2UtgvI4h4=) 2: 3230322e3135332e31362e302f32302d3234203d3e203233363636.roa (hash: 5FOROrvQq+0t+Mk/ACrrEVqg06jInBJCBz0qroNhCeU=) 3: 3131372e3130342e3139322e302f31392d3234203d3e203233363636.roa (hash: zCm8uejNjkpY+DjdGXgrEnekcPvtN86UHanFShqlM6g=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/d5908b83-7f44-46e0-8535-6fb84b59d58a/0/0BB3D1874063172B5374865233070332233FB7B3.crl rsync://repo-rpki.idnic.net/repo/d5908b83-7f44-46e0-8535-6fb84b59d58a/0/0BB3D1874063172B5374865233070332233FB7B3.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0BB3D1874063172B5374865233070332233FB7B3.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 20 Dec 2025 18:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 45:1e:6b:16:ec:66:03:c2:8f:63:3e:6f:bc:f1:09:d3:d6:a8:37:91 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0BB3D1874063172B5374865233070332233FB7B3 Validity Not Before: Dec 17 10:26:30 2025 GMT Not After : Dec 20 18:00:30 2025 GMT Subject: CN=99F7EEAD1ED3C9F247BE14B9DFE2191255EEAAC3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:9c:c6:14:a7:46:7a:49:e8:37:6c:c4:d7:81: 77:63:fc:21:92:0e:b2:7e:19:76:bd:c4:6e:57:70: 75:6d:d1:66:c9:37:2c:8a:19:75:4e:77:c6:09:ec: 97:c2:d4:4b:03:eb:44:56:34:56:ea:ab:7d:9d:43: 42:91:52:ba:01:8f:b7:1f:3c:2c:8d:44:f8:2e:53: ca:35:d1:cc:09:ef:f6:b8:1c:dc:f7:82:6a:03:80: f7:12:70:2a:f1:21:85:e3:6e:93:5a:51:65:ef:44: f3:6e:87:16:8d:73:d1:fd:d2:07:81:c4:c8:c3:27: a2:aa:4c:29:5e:ec:c4:9d:01:07:a0:90:76:05:c5: 47:1d:02:94:47:56:af:2b:8d:14:a6:1b:a9:bf:7d: b6:23:0c:b0:2b:22:18:17:67:86:80:6f:8b:2b:e8: d2:af:0b:a1:90:a3:3e:35:0f:a7:4b:29:17:94:cb: 94:d2:9a:11:81:c4:5a:bd:90:c1:92:26:61:92:cc: 6c:f5:83:ce:d8:40:84:41:eb:50:a4:cd:c7:b8:f7: a8:13:86:de:19:23:7e:ab:2d:64:e4:7e:ce:88:a7: a5:14:96:73:a4:38:94:1d:5e:43:05:01:c7:e4:ac: ad:9e:f7:ef:8e:75:1b:06:be:85:0b:55:5d:2a:b5: 29:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:F7:EE:AD:1E:D3:C9:F2:47:BE:14:B9:DF:E2:19:12:55:EE:AA:C3 X509v3 Authority Key Identifier: keyid:0B:B3:D1:87:40:63:17:2B:53:74:86:52:33:07:03:32:23:3F:B7:B3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/d5908b83-7f44-46e0-8535-6fb84b59d58a/0/0BB3D1874063172B5374865233070332233FB7B3.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0BB3D1874063172B5374865233070332233FB7B3.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d5908b83-7f44-46e0-8535-6fb84b59d58a/0/0BB3D1874063172B5374865233070332233FB7B3.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption bc:c2:25:df:25:85:98:45:65:40:d1:4b:8f:e3:27:56:a5:c7: 90:e1:23:b5:e3:5d:f3:f4:9b:9f:97:a5:f3:f0:0e:b7:7a:d8: 63:66:10:ef:46:1c:25:f9:9f:d5:0b:61:4b:d5:cc:5c:13:8a: 2b:b3:9e:37:ef:a8:e1:61:bb:6a:5e:73:88:e9:3c:c6:97:9f: 01:37:17:72:71:23:4c:d6:b3:d5:59:71:d0:e9:6a:d8:d0:01: df:03:10:b2:05:ca:7b:5c:45:41:eb:5e:dd:ce:d6:db:d3:ab: 37:01:e6:98:0c:62:48:74:e2:18:52:1c:5a:88:e8:04:47:82: 96:ae:3f:80:e3:31:5b:76:c9:cc:40:62:f7:a9:11:cf:80:08: c6:af:ec:a6:10:0f:93:19:12:93:c8:1d:6d:b1:3f:fa:45:ab: 9f:01:0e:ce:d7:e4:a2:50:f5:50:d6:fb:19:64:3f:32:7e:8a: 34:6a:2c:3b:48:b8:5e:5e:3b:1e:dc:94:7f:9c:14:c4:83:9d: eb:db:12:76:93:e0:16:13:ff:47:15:83:1a:c2:9e:e2:3e:2c: 53:de:e9:86:18:64:3e:bc:9c:e3:aa:51:ba:01:2e:32:41:25: 32:6e:b4:45:f1:c8:ef:34:27:ed:47:2c:e9:87:94:f2:2f:0a: 92:7f:5e:56 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIURR5rFuxmA8KPYz5vvPEJ09aoN5EwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMEJCM0QxODc0MDYzMTcyQjUzNzQ4NjUyMzMwNzAzMzIy MzNGQjdCMzAeFw0yNTEyMTcxMDI2MzBaFw0yNTEyMjAxODAwMzBaMDMxMTAvBgNV BAMTKDk5RjdFRUFEMUVEM0M5RjI0N0JFMTRCOURGRTIxOTEyNTVFRUFBQzMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDJnMYUp0Z6Seg3bMTXgXdj/CGS DrJ+GXa9xG5XcHVt0WbJNyyKGXVOd8YJ7JfC1EsD60RWNFbqq32dQ0KRUroBj7cf PCyNRPguU8o10cwJ7/a4HNz3gmoDgPcScCrxIYXjbpNaUWXvRPNuhxaNc9H90geB xMjDJ6KqTCle7MSdAQegkHYFxUcdApRHVq8rjRSmG6m/fbYjDLArIhgXZ4aAb4sr 6NKvC6GQoz41D6dLKReUy5TSmhGBxFq9kMGSJmGSzGz1g87YQIRB61Ckzce496gT ht4ZI36rLWTkfs6Ip6UUlnOkOJQdXkMFAcfkrK2e9++OdRsGvoULVV0qtSk3AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUmffurR7TyfJHvhS53+IZElXuqsMwHwYDVR0j BBgwFoAUC7PRh0BjFytTdIZSMwcDMiM/t7MwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k NTkwOGI4My03ZjQ0LTQ2ZTAtODUzNS02ZmI4NGI1OWQ1OGEvMC8wQkIzRDE4NzQw NjMxNzJCNTM3NDg2NTIzMzA3MDMzMjIzM0ZCN0IzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMEJCM0QxODc0MDYzMTcyQjUzNzQ4NjUyMzMwNzAzMzIyMzNG QjdCMy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZDU5MDhiODMtN2Y0NC00NmUwLTg1 MzUtNmZiODRiNTlkNThhLzAvMEJCM0QxODc0MDYzMTcyQjUzNzQ4NjUyMzMwNzAz MzIyMzNGQjdCMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALzCJd8lhZhFZUDRS4/jJ1alx5DhI7XjXfP0 m5+XpfPwDrd62GNmEO9GHCX5n9ULYUvVzFwTiiuznjfvqOFhu2pec4jpPMaXnwE3 F3JxI0zWs9VZcdDpatjQAd8DELIFyntcRUHrXt3O1tvTqzcB5pgMYkh04hhSHFqI 6ARHgpauP4DjMVt2ycxAYvepEc+ACMav7KYQD5MZEpPIHW2xP/pFq58BDs7X5KJQ 9VDW+xlkPzJ+ijRqLDtIuF5eOx7clH+cFMSDnevbEnaT4BYT/0cVgxrCnuI+LFPe 6YYYZD68nOOqUboBLjJBJTJutEXxyO80J+1HLOmHlPIvCpJ/XlY= -----END CERTIFICATE-----Generated at Thu Dec 18 11:02:34 2025 by rpki-client