This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/e1fd351e-2bd7-4191-9106-53f875016f0e/0/BFE0F552446CE5C263D85414C72E8DD74CBC5EE9.mft File: BFE0F552446CE5C263D85414C72E8DD74CBC5EE9.mft (raw, json) Hash identifier: pEoxqOxAbRZ/HCEliYzOnPzKwMH7MXxUeh91DpXrt70= Subject key identifier: E0:38:F5:1F:06:50:53:2D:B1:31:F9:4F:B0:4B:05:69:B6:7A:F4:4F Authority key identifier: BF:E0:F5:52:44:6C:E5:C2:63:D8:54:14:C7:2E:8D:D7:4C:BC:5E:E9 Certificate issuer: /CN=BFE0F552446CE5C263D85414C72E8DD74CBC5EE9 Certificate serial: 2D489845F992E6CC83DE0D2E8C74EA0DF6B55CEB Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BFE0F552446CE5C263D85414C72E8DD74CBC5EE9.cer Subject info access: rsync://repo-rpki.idnic.net/repo/e1fd351e-2bd7-4191-9106-53f875016f0e/0/BFE0F552446CE5C263D85414C72E8DD74CBC5EE9.mft Manifest number: 0327 Signing time: Tue 02 Dec 2025 17:01:58 +0000 Manifest this update: Tue 02 Dec 2025 16:56:58 +0000 Manifest next update: Sat 06 Dec 2025 02:40:58 +0000 Files and hashes: 1: 3130332e3231302e3131372e302f32342d3234203d3e203634303234.roa (hash: rvryrNsii8p5FWEuXQ/ZA1z3QEXlw8MezShqHde9HFo=) 2: BFE0F552446CE5C263D85414C72E8DD74CBC5EE9.crl (hash: CFR+iY4mkw6p3aBIJAt+m3lFz3XM3T8bbyPIhHlJieg=) 3: 3130332e3231302e3131362e302f32342d3234203d3e203634303234.roa (hash: yMj7uFI234xCcazZ5UUXhaecBl1WVAuun+atXN8IBlQ=) 4: 3130332e3231302e3131382e302f32342d3234203d3e203634303234.roa (hash: tavtmJbAGyPVyKNkS1yIlicvomGLqf7gKFQGKl+8wbg=) 5: 3130332e3231302e3131392e302f32342d3234203d3e203634303234.roa (hash: Ytr8LGrcIz/5Ip4kUA/P8vtfeNKUZXIGazNVZyLvVDY=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/e1fd351e-2bd7-4191-9106-53f875016f0e/0/BFE0F552446CE5C263D85414C72E8DD74CBC5EE9.crl rsync://repo-rpki.idnic.net/repo/e1fd351e-2bd7-4191-9106-53f875016f0e/0/BFE0F552446CE5C263D85414C72E8DD74CBC5EE9.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BFE0F552446CE5C263D85414C72E8DD74CBC5EE9.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 06 Dec 2025 02:40:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2d:48:98:45:f9:92:e6:cc:83:de:0d:2e:8c:74:ea:0d:f6:b5:5c:eb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BFE0F552446CE5C263D85414C72E8DD74CBC5EE9 Validity Not Before: Dec 2 16:56:58 2025 GMT Not After : Dec 6 02:40:58 2025 GMT Subject: CN=E038F51F0650532DB131F94FB04B0569B67AF44F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:eb:22:23:12:49:ee:fc:42:25:5a:d4:dd:41: e4:14:9c:cd:69:b0:93:eb:0c:1d:fc:d2:e8:9f:d1: 06:a8:2a:a4:8b:cf:35:6d:0d:77:d1:82:6c:3b:d2: 64:85:59:05:9e:e1:0c:e0:ee:c7:39:a7:6f:d2:24: 98:71:f3:a2:9f:64:e1:7a:23:1e:28:f1:1c:52:98: 9f:be:f1:6a:f8:14:73:24:16:6b:b5:3c:ff:9b:89: 2b:2a:2d:9b:7d:1b:50:9b:48:1c:97:7e:8e:cf:c1: 41:b6:c8:b4:83:16:b9:c4:9e:31:60:99:03:2b:a2: 83:1f:27:35:9b:53:40:89:a9:d6:ec:22:e3:c9:a4: 4b:57:38:48:cc:4d:6f:49:ad:0e:eb:33:9f:57:5a: d1:9a:8d:be:fb:d2:11:a1:72:37:57:ee:61:c2:ce: d8:a4:0c:f4:b5:13:6f:98:a9:13:14:67:95:c3:83: 63:03:34:28:da:c6:c0:04:d8:0a:fc:0e:32:9e:62: 64:d2:95:4b:f6:b5:01:3b:72:b5:6d:8f:0c:a3:59: d4:e0:88:96:dd:2b:a2:71:d9:05:42:c9:e2:cc:07: 7c:35:95:76:cf:46:2e:0d:10:66:ac:f8:1e:c3:33: 41:5d:5a:14:4b:91:5e:43:4c:47:29:4b:8b:83:0a: 42:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E0:38:F5:1F:06:50:53:2D:B1:31:F9:4F:B0:4B:05:69:B6:7A:F4:4F X509v3 Authority Key Identifier: keyid:BF:E0:F5:52:44:6C:E5:C2:63:D8:54:14:C7:2E:8D:D7:4C:BC:5E:E9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/e1fd351e-2bd7-4191-9106-53f875016f0e/0/BFE0F552446CE5C263D85414C72E8DD74CBC5EE9.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BFE0F552446CE5C263D85414C72E8DD74CBC5EE9.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e1fd351e-2bd7-4191-9106-53f875016f0e/0/BFE0F552446CE5C263D85414C72E8DD74CBC5EE9.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6e:7f:00:eb:c2:a2:17:a6:37:35:84:17:06:4c:36:d2:e5:5c: 58:a9:00:91:5d:dc:0c:26:70:7b:9b:bd:81:2a:7b:5c:60:04: c8:09:10:f0:60:09:34:6a:4e:d9:4a:8e:c0:6a:e0:36:50:c5: ee:67:93:c8:05:50:13:a3:af:89:66:8b:40:c6:65:a6:8e:c4: 16:ec:a9:23:f4:f5:75:5e:03:5e:b8:ba:e8:61:64:32:10:72: b2:d1:50:e9:89:81:b4:10:ce:03:e0:f1:23:d7:31:ff:14:74: 02:ed:de:27:98:ea:22:72:8a:33:f1:9c:94:50:b1:15:ba:16: 29:9f:ad:53:e6:5d:ca:3a:53:46:02:0b:34:fd:31:33:7a:bf: 21:9d:55:61:11:d5:84:bf:d0:5f:2d:35:22:22:a3:a2:05:27: c6:2a:9d:61:f5:f7:dc:7d:bc:cb:fa:d8:77:c7:a0:d7:a3:51: f1:a8:77:cf:93:0c:9b:66:ec:60:ad:d2:5c:57:cd:f1:dc:e0: fe:66:66:f8:5e:87:50:80:36:c3:85:23:3a:c6:b1:bc:44:22: 4b:4f:d8:54:df:14:b2:4e:a9:5b:d5:61:31:f4:86:26:25:4d: 4f:f4:f8:c6:54:46:26:ba:f9:0c:45:56:44:40:79:0d:c9:45: b1:55:30:8e -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIULUiYRfmS5syD3g0ujHTqDfa1XOswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkZFMEY1NTI0NDZDRTVDMjYzRDg1NDE0QzcyRThERDc0 Q0JDNUVFOTAeFw0yNTEyMDIxNjU2NThaFw0yNTEyMDYwMjQwNThaMDMxMTAvBgNV BAMTKEUwMzhGNTFGMDY1MDUzMkRCMTMxRjk0RkIwNEIwNTY5QjY3QUY0NEYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDf6yIjEknu/EIlWtTdQeQUnM1p sJPrDB380uif0QaoKqSLzzVtDXfRgmw70mSFWQWe4Qzg7sc5p2/SJJhx86KfZOF6 Ix4o8RxSmJ++8Wr4FHMkFmu1PP+biSsqLZt9G1CbSByXfo7PwUG2yLSDFrnEnjFg mQMrooMfJzWbU0CJqdbsIuPJpEtXOEjMTW9JrQ7rM59XWtGajb770hGhcjdX7mHC ztikDPS1E2+YqRMUZ5XDg2MDNCjaxsAE2Ar8DjKeYmTSlUv2tQE7crVtjwyjWdTg iJbdK6Jx2QVCyeLMB3w1lXbPRi4NEGas+B7DM0FdWhRLkV5DTEcpS4uDCkIlAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU4Dj1HwZQUy2xMflPsEsFabZ69E8wHwYDVR0j BBgwFoAUv+D1UkRs5cJj2FQUxy6N10y8XukwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l MWZkMzUxZS0yYmQ3LTQxOTEtOTEwNi01M2Y4NzUwMTZmMGUvMC9CRkUwRjU1MjQ0 NkNFNUMyNjNEODU0MTRDNzJFOERENzRDQkM1RUU5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQkZFMEY1NTI0NDZDRTVDMjYzRDg1NDE0QzcyRThERDc0Q0JD NUVFOS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZTFmZDM1MWUtMmJkNy00MTkxLTkx MDYtNTNmODc1MDE2ZjBlLzAvQkZFMEY1NTI0NDZDRTVDMjYzRDg1NDE0QzcyRThE RDc0Q0JDNUVFOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAG5/AOvCohemNzWEFwZMNtLlXFipAJFd3Awm cHubvYEqe1xgBMgJEPBgCTRqTtlKjsBq4DZQxe5nk8gFUBOjr4lmi0DGZaaOxBbs qSP09XVeA164uuhhZDIQcrLRUOmJgbQQzgPg8SPXMf8UdALt3ieY6iJyijPxnJRQ sRW6FimfrVPmXco6U0YCCzT9MTN6vyGdVWER1YS/0F8tNSIio6IFJ8YqnWH199x9 vMv62HfHoNejUfGod8+TDJtm7GCt0lxXzfHc4P5mZvheh1CANsOFIzrGsbxEIktP 2FTfFLJOqVvVYTH0hiYlTU/0+MZURia6+QxFVkRAeQ3JRbFVMI4= -----END CERTIFICATE-----Generated at Wed Dec 3 13:57:27 2025 by rpki-client