This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/db8be905-f296-45d1-a879-4a4de52cb2d6/0/B2D1CBD015A419010845E6F56D8385C8647B5390.mft File: B2D1CBD015A419010845E6F56D8385C8647B5390.mft (raw, json) Hash identifier: ltqKQGY714TzoM4DIIVDIVGzxz8ZSW0ZwZp3mqg3huU= Subject key identifier: 9B:FC:C1:16:27:F7:BE:5E:EA:2A:62:09:79:E8:B3:FE:C2:26:EC:43 Authority key identifier: B2:D1:CB:D0:15:A4:19:01:08:45:E6:F5:6D:83:85:C8:64:7B:53:90 Certificate issuer: /CN=B2D1CBD015A419010845E6F56D8385C8647B5390 Certificate serial: 28FD586B413685E70F9C286F5CC8F75B4423846E Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B2D1CBD015A419010845E6F56D8385C8647B5390.cer Subject info access: rsync://repo-rpki.idnic.net/repo/db8be905-f296-45d1-a879-4a4de52cb2d6/0/B2D1CBD015A419010845E6F56D8385C8647B5390.mft Manifest number: 02DC Signing time: Mon 01 Dec 2025 06:02:15 +0000 Manifest this update: Mon 01 Dec 2025 05:57:15 +0000 Manifest next update: Thu 04 Dec 2025 15:08:15 +0000 Files and hashes: 1: 3130332e3135332e3133352e302f32342d3234203d3e20313430343634.roa (hash: oUlQyF3I0zLJjLl9EcH8NBVRAz863HrDlDUllspbny0=) 2: 3130332e3135332e3133342e302f32332d3233203d3e20313430343634.roa (hash: bAHbnIP0Wicgt74YcQMMyo48qnOQtogRe4ndD6XNQrg=) 3: B2D1CBD015A419010845E6F56D8385C8647B5390.crl (hash: Rqh1jUJCBfVL/Z9j6O4Kx5jVsgmVf/7b47T8fG/zmR4=) 4: 323430363a343534303a3a2f33322d3332203d3e20313430343634.roa (hash: fW6me2gng7+RFAgwfv3lcoF9Ov98BB9yIZ6/btVVKsw=) 5: 3130332e3135332e3133342e302f32342d3234203d3e20313430343634.roa (hash: cn1hAJHYGCMSOghgviiiSzFiPXYh8mLQKkzicGhK/aE=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/db8be905-f296-45d1-a879-4a4de52cb2d6/0/B2D1CBD015A419010845E6F56D8385C8647B5390.crl rsync://repo-rpki.idnic.net/repo/db8be905-f296-45d1-a879-4a4de52cb2d6/0/B2D1CBD015A419010845E6F56D8385C8647B5390.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B2D1CBD015A419010845E6F56D8385C8647B5390.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 04 Dec 2025 15:08:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 28:fd:58:6b:41:36:85:e7:0f:9c:28:6f:5c:c8:f7:5b:44:23:84:6e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B2D1CBD015A419010845E6F56D8385C8647B5390 Validity Not Before: Dec 1 05:57:15 2025 GMT Not After : Dec 4 15:08:15 2025 GMT Subject: CN=9BFCC11627F7BE5EEA2A620979E8B3FEC226EC43 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:8b:49:f6:88:22:5e:00:51:06:96:f3:b1:09: 33:63:9f:aa:53:9d:e1:c8:a4:4c:ac:80:0f:f5:34: 5a:dc:8b:c5:1c:97:86:ae:fc:a9:1c:8c:dc:b0:23: 40:82:71:96:12:68:94:01:93:ed:69:d3:e9:0f:35: c1:3f:0e:ad:d2:7a:0e:b2:43:89:9b:55:ad:38:4a: cf:dd:8e:ef:ce:d9:b0:77:b2:20:90:5f:2a:16:72: a1:94:35:c7:95:a7:6d:a2:87:ae:56:48:95:71:a4: 87:f5:92:74:98:9f:0f:96:a7:47:68:04:b7:07:6b: 51:ab:71:a1:03:0e:a7:83:96:b5:da:0c:25:95:e2: d3:f4:f4:8d:de:43:91:71:ca:4b:34:53:1d:4e:b1: 31:e7:ec:af:12:5d:8d:9f:89:17:8d:c1:66:45:18: b7:38:fb:74:7b:4c:07:73:26:cd:c6:99:68:a0:b8: 65:7b:b3:55:0d:a1:4f:90:d1:7c:c1:93:db:c6:af: 4e:07:1d:b4:ae:41:51:0b:ac:a2:05:61:79:e9:19: 63:88:bc:e3:a2:32:01:fc:8a:9c:e1:38:bb:86:06: 07:96:29:08:bb:93:15:80:85:f9:db:2c:27:a2:08: fe:b6:02:1b:7f:d1:61:f8:99:e6:05:5d:6d:be:57: 8c:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9B:FC:C1:16:27:F7:BE:5E:EA:2A:62:09:79:E8:B3:FE:C2:26:EC:43 X509v3 Authority Key Identifier: keyid:B2:D1:CB:D0:15:A4:19:01:08:45:E6:F5:6D:83:85:C8:64:7B:53:90 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/db8be905-f296-45d1-a879-4a4de52cb2d6/0/B2D1CBD015A419010845E6F56D8385C8647B5390.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B2D1CBD015A419010845E6F56D8385C8647B5390.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/db8be905-f296-45d1-a879-4a4de52cb2d6/0/B2D1CBD015A419010845E6F56D8385C8647B5390.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3b:fa:bc:00:49:3f:0c:6d:54:81:8b:0f:dc:26:f4:51:7c:87: f0:58:64:61:dc:5e:da:21:12:d3:b8:e0:fa:df:f5:f4:f3:cc: 43:f7:1b:04:8d:4d:96:e2:f2:11:1b:4f:3f:62:41:ed:9a:89: 8d:16:db:bf:52:4b:55:c2:40:35:f5:37:7b:f5:48:44:39:68: b4:ce:63:ad:eb:7b:8b:ec:1b:f9:ad:1e:48:c5:7b:d8:da:46: 21:77:f3:59:d2:c0:d0:81:87:7c:1e:ff:7a:b1:d6:d6:c8:cc: a6:72:62:46:c7:a3:e6:f5:60:64:22:05:07:91:4c:15:cd:87: dd:87:a5:4b:da:87:64:34:e7:3f:b0:24:b3:47:50:ad:0d:b8: c9:21:95:5a:87:d3:42:ea:f8:5f:d4:af:b2:4f:f9:5f:be:15: dc:70:a2:36:6c:5d:55:31:2f:24:02:56:cd:34:1e:8c:8b:b0: 81:a8:64:35:b8:d2:39:7e:74:05:8b:f6:11:5b:46:9b:6f:4c: ee:19:91:ff:22:cc:a6:ea:7f:9c:fe:55:75:ea:31:8a:ba:07: 03:cb:63:98:62:78:fc:90:38:f2:c7:c2:c8:6c:f6:b5:03:50: c1:39:78:72:e1:02:cb:a6:ec:61:91:b0:13:c8:16:6f:db:6f: 8e:14:10:86 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUKP1Ya0E2hecPnChvXMj3W0QjhG4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjJEMUNCRDAxNUE0MTkwMTA4NDVFNkY1NkQ4Mzg1Qzg2 NDdCNTM5MDAeFw0yNTEyMDEwNTU3MTVaFw0yNTEyMDQxNTA4MTVaMDMxMTAvBgNV BAMTKDlCRkNDMTE2MjdGN0JFNUVFQTJBNjIwOTc5RThCM0ZFQzIyNkVDNDMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC7i0n2iCJeAFEGlvOxCTNjn6pT neHIpEysgA/1NFrci8Ucl4au/KkcjNywI0CCcZYSaJQBk+1p0+kPNcE/Dq3Seg6y Q4mbVa04Ss/dju/O2bB3siCQXyoWcqGUNceVp22ih65WSJVxpIf1knSYnw+Wp0do BLcHa1GrcaEDDqeDlrXaDCWV4tP09I3eQ5Fxyks0Ux1OsTHn7K8SXY2fiReNwWZF GLc4+3R7TAdzJs3GmWiguGV7s1UNoU+Q0XzBk9vGr04HHbSuQVELrKIFYXnpGWOI vOOiMgH8ipzhOLuGBgeWKQi7kxWAhfnbLCeiCP62Aht/0WH4meYFXW2+V4wzAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUm/zBFif3vl7qKmIJeeiz/sIm7EMwHwYDVR0j BBgwFoAUstHL0BWkGQEIReb1bYOFyGR7U5AwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k YjhiZTkwNS1mMjk2LTQ1ZDEtYTg3OS00YTRkZTUyY2IyZDYvMC9CMkQxQ0JEMDE1 QTQxOTAxMDg0NUU2RjU2RDgzODVDODY0N0I1MzkwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQjJEMUNCRDAxNUE0MTkwMTA4NDVFNkY1NkQ4Mzg1Qzg2NDdC NTM5MC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZGI4YmU5MDUtZjI5Ni00NWQxLWE4 NzktNGE0ZGU1MmNiMmQ2LzAvQjJEMUNCRDAxNUE0MTkwMTA4NDVFNkY1NkQ4Mzg1 Qzg2NDdCNTM5MC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADv6vABJPwxtVIGLD9wm9FF8h/BYZGHcXtoh EtO44Prf9fTzzEP3GwSNTZbi8hEbTz9iQe2aiY0W279SS1XCQDX1N3v1SEQ5aLTO Y63re4vsG/mtHkjFe9jaRiF381nSwNCBh3we/3qx1tbIzKZyYkbHo+b1YGQiBQeR TBXNh92HpUvah2Q05z+wJLNHUK0NuMkhlVqH00Lq+F/Ur7JP+V++FdxwojZsXVUx LyQCVs00HoyLsIGoZDW40jl+dAWL9hFbRptvTO4Zkf8izKbqf5z+VXXqMYq6BwPL Y5hiePyQOPLHwshs9rUDUME5eHLhAsum7GGRsBPIFm/bb44UEIY= -----END CERTIFICATE-----Generated at Wed Dec 3 14:44:12 2025 by rpki-client