This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/db016085-2f94-40ff-80ce-ce23d39e65a1/0/B5A68ADE81322F194320BE4302C6897D29D13BDD.mft File: B5A68ADE81322F194320BE4302C6897D29D13BDD.mft (raw, json) Hash identifier: 0orHsHpuSozDPcnh7xpVgahAhnhm5f0HXjgGT4AfMSE= Subject key identifier: A6:74:61:D5:67:0B:E9:D9:DC:0B:B5:B1:F7:FA:07:5D:F6:E0:76:42 Authority key identifier: B5:A6:8A:DE:81:32:2F:19:43:20:BE:43:02:C6:89:7D:29:D1:3B:DD Certificate issuer: /CN=B5A68ADE81322F194320BE4302C6897D29D13BDD Certificate serial: 7DF2EF83AEDE6965CE439F85BD383B8429C1F287 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B5A68ADE81322F194320BE4302C6897D29D13BDD.cer Subject info access: rsync://repo-rpki.idnic.net/repo/db016085-2f94-40ff-80ce-ce23d39e65a1/0/B5A68ADE81322F194320BE4302C6897D29D13BDD.mft Manifest number: D7 Signing time: Wed 03 Dec 2025 12:31:27 +0000 Manifest this update: Wed 03 Dec 2025 12:26:27 +0000 Manifest next update: Sat 06 Dec 2025 17:57:27 +0000 Files and hashes: 1: 3130332e33382e3130362e302f32332d3234203d3e20313532303039.roa (hash: 5ddjKzEo7R2HXRPV5KVablgruigb2N4v7X9sDbCb8p8=) 2: B5A68ADE81322F194320BE4302C6897D29D13BDD.crl (hash: BR0vUuLPKSs0CDk3Q73GZrA2Hb9ZQCUKtBBJ3h3r0y0=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/db016085-2f94-40ff-80ce-ce23d39e65a1/0/B5A68ADE81322F194320BE4302C6897D29D13BDD.crl rsync://repo-rpki.idnic.net/repo/db016085-2f94-40ff-80ce-ce23d39e65a1/0/B5A68ADE81322F194320BE4302C6897D29D13BDD.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B5A68ADE81322F194320BE4302C6897D29D13BDD.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 06 Dec 2025 12:07:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7d:f2:ef:83:ae:de:69:65:ce:43:9f:85:bd:38:3b:84:29:c1:f2:87 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B5A68ADE81322F194320BE4302C6897D29D13BDD Validity Not Before: Dec 3 12:26:27 2025 GMT Not After : Dec 6 17:57:27 2025 GMT Subject: CN=A67461D5670BE9D9DC0BB5B1F7FA075DF6E07642 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:e0:88:93:3b:e9:fa:2e:c8:23:c5:9b:2d:6b: e9:30:89:1a:e4:a1:31:57:82:1f:6e:2a:f2:3c:93: f5:b1:5a:c2:02:41:1d:e6:60:a8:c1:97:1f:e8:cc: 1a:f8:b5:b4:7e:e8:86:c6:5f:1e:b5:1b:73:22:68: 51:fe:9b:5a:4c:e6:13:90:f3:3e:47:a8:b6:20:10: 79:aa:5e:04:43:b2:55:be:09:2a:cf:d6:7b:34:56: d9:8a:20:25:48:2a:30:e6:f0:2f:68:28:f2:5c:55: 1f:dc:fd:df:26:ca:a6:36:54:f7:c7:08:0a:4d:26: 8a:f7:df:79:03:4c:a7:47:b6:73:92:e5:e4:a4:6b: 51:73:8d:ed:67:48:42:01:27:42:e5:f2:bd:a8:52: 03:a7:4e:0e:19:68:e2:7a:b1:9f:4f:f7:1e:a8:84: 3f:91:92:c3:23:2d:8d:b5:b3:a1:0a:cc:dd:1c:45: 89:ca:dd:8a:de:1e:72:67:34:82:f4:06:e6:01:89: fc:5d:3c:84:35:c1:00:2e:54:9f:51:30:9c:6a:4f: 10:29:7b:c2:af:89:48:b2:99:d5:60:c9:93:d7:90: 97:1c:93:48:4a:04:20:f7:1b:1e:aa:80:ff:5b:6c: 7e:59:22:a1:20:0c:b4:21:a2:7e:09:04:50:ba:20: 9f:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A6:74:61:D5:67:0B:E9:D9:DC:0B:B5:B1:F7:FA:07:5D:F6:E0:76:42 X509v3 Authority Key Identifier: keyid:B5:A6:8A:DE:81:32:2F:19:43:20:BE:43:02:C6:89:7D:29:D1:3B:DD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/db016085-2f94-40ff-80ce-ce23d39e65a1/0/B5A68ADE81322F194320BE4302C6897D29D13BDD.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B5A68ADE81322F194320BE4302C6897D29D13BDD.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/db016085-2f94-40ff-80ce-ce23d39e65a1/0/B5A68ADE81322F194320BE4302C6897D29D13BDD.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 58:95:27:fd:b6:b9:fd:23:94:6d:2a:40:66:e5:54:73:76:0a: da:f5:78:30:ba:d7:ec:b6:5f:77:38:30:eb:81:62:b7:4f:82: 85:cd:8c:e9:65:2e:2f:bc:40:f5:7b:19:99:34:82:f4:06:7f: 2e:e1:39:31:dc:1d:38:83:4f:7c:c4:c7:ef:ef:e2:4f:64:46: b4:3b:d3:c4:af:ea:00:d9:82:d8:63:19:98:60:03:e6:36:57: 4f:bf:2a:42:6c:75:59:29:33:52:ee:b6:36:fb:c2:2d:8b:b4: 44:8c:57:a3:89:14:05:a4:1b:57:3b:5d:19:0b:f6:3c:f9:dd: 42:4b:db:b6:c9:91:f0:1b:3f:ac:ad:45:a2:88:20:13:87:06: 70:93:00:da:1a:3c:07:46:56:54:25:ef:67:fb:1e:2a:f8:e5: 23:b4:97:cc:7b:95:af:00:62:41:69:17:50:5b:db:36:18:e9: 0e:df:56:7f:95:d7:29:6f:08:5b:ce:6d:9d:49:6f:86:c9:ac: 97:4f:a0:b8:5c:b4:31:bb:91:09:24:43:0b:e3:8a:d4:36:35: 6e:2d:42:d4:0a:12:26:23:1c:20:4a:ef:f2:a4:a0:65:d2:68: fc:9c:22:0b:85:23:ee:51:69:d7:64:9e:d7:4b:e0:57:68:fc: 27:a5:40:29 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUffLvg67eaWXOQ5+FvTg7hCnB8ocwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjVBNjhBREU4MTMyMkYxOTQzMjBCRTQzMDJDNjg5N0Qy OUQxM0JERDAeFw0yNTEyMDMxMjI2MjdaFw0yNTEyMDYxNzU3MjdaMDMxMTAvBgNV BAMTKEE2NzQ2MUQ1NjcwQkU5RDlEQzBCQjVCMUY3RkEwNzVERjZFMDc2NDIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCm4IiTO+n6LsgjxZsta+kwiRrk oTFXgh9uKvI8k/WxWsICQR3mYKjBlx/ozBr4tbR+6IbGXx61G3MiaFH+m1pM5hOQ 8z5HqLYgEHmqXgRDslW+CSrP1ns0VtmKICVIKjDm8C9oKPJcVR/c/d8myqY2VPfH CApNJor333kDTKdHtnOS5eSka1Fzje1nSEIBJ0Ll8r2oUgOnTg4ZaOJ6sZ9P9x6o hD+RksMjLY21s6EKzN0cRYnK3YreHnJnNIL0BuYBifxdPIQ1wQAuVJ9RMJxqTxAp e8KviUiymdVgyZPXkJcck0hKBCD3Gx6qgP9bbH5ZIqEgDLQhon4JBFC6IJ93AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUpnRh1WcL6dncC7Wx9/oHXfbgdkIwHwYDVR0j BBgwFoAUtaaK3oEyLxlDIL5DAsaJfSnRO90wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k YjAxNjA4NS0yZjk0LTQwZmYtODBjZS1jZTIzZDM5ZTY1YTEvMC9CNUE2OEFERTgx MzIyRjE5NDMyMEJFNDMwMkM2ODk3RDI5RDEzQkRELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQjVBNjhBREU4MTMyMkYxOTQzMjBCRTQzMDJDNjg5N0QyOUQx M0JERC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZGIwMTYwODUtMmY5NC00MGZmLTgw Y2UtY2UyM2QzOWU2NWExLzAvQjVBNjhBREU4MTMyMkYxOTQzMjBCRTQzMDJDNjg5 N0QyOUQxM0JERC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFiVJ/22uf0jlG0qQGblVHN2Ctr1eDC61+y2 X3c4MOuBYrdPgoXNjOllLi+8QPV7GZk0gvQGfy7hOTHcHTiDT3zEx+/v4k9kRrQ7 08Sv6gDZgthjGZhgA+Y2V0+/KkJsdVkpM1Lutjb7wi2LtESMV6OJFAWkG1c7XRkL 9jz53UJL27bJkfAbP6ytRaKIIBOHBnCTANoaPAdGVlQl72f7Hir45SO0l8x7la8A YkFpF1Bb2zYY6Q7fVn+V1ylvCFvObZ1Jb4bJrJdPoLhctDG7kQkkQwvjitQ2NW4t QtQKEiYjHCBK7/KkoGXSaPycIguFI+5RaddkntdL4Fdo/CelQCk= -----END CERTIFICATE-----Generated at Wed Dec 3 14:42:31 2025 by rpki-client