This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/e50da447-a138-4625-a420-a711ac243519/0/BF076EA24A68CF152C323C7A3DFD3F92AFE8AA2B.mft File: BF076EA24A68CF152C323C7A3DFD3F92AFE8AA2B.mft (raw, json) Hash identifier: JXo+Zm5fe2HVBt21J5BDomuHZPO/ThEpN3BOqqZLGF4= Subject key identifier: 0C:7C:9A:1B:C6:2B:9E:86:83:DA:0F:71:2A:B4:C1:4E:0B:F1:08:53 Authority key identifier: BF:07:6E:A2:4A:68:CF:15:2C:32:3C:7A:3D:FD:3F:92:AF:E8:AA:2B Certificate issuer: /CN=BF076EA24A68CF152C323C7A3DFD3F92AFE8AA2B Certificate serial: 30564380E79EFE9A119741AA74DF5EC64E59C143 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BF076EA24A68CF152C323C7A3DFD3F92AFE8AA2B.cer Subject info access: rsync://repo-rpki.idnic.net/repo/e50da447-a138-4625-a420-a711ac243519/0/BF076EA24A68CF152C323C7A3DFD3F92AFE8AA2B.mft Manifest number: 053A Signing time: Tue 02 Dec 2025 19:32:37 +0000 Manifest this update: Tue 02 Dec 2025 19:27:37 +0000 Manifest next update: Sat 06 Dec 2025 05:40:37 +0000 Files and hashes: 1: 3131312e36372e38302e302f32332d3234203d3e203535363931.roa (hash: 6r7ytzVqOZCu9ltnazdoDFZyu1sN5kdyWtk6OiFCZME=) 2: 34352e36342e3130302e302f32322d3234203d3e203435373836.roa (hash: sLI9kyH4UUKtJ48DuSDvIEt/kI9PlelTvUCSLOep6GI=) 3: 3130332e32312e38342e302f32322d3234203d3e203435373836.roa (hash: TQgzpMcLfaNgOb2UQ22DmepvwTBX2ZphizKn7sBXlfU=) 4: 3131312e36372e37362e302f32342d3234203d3e203536323333.roa (hash: q6kGIkTw1IEwFZ8E1rrhCKF72eKLzmU0iFvN+CMeGms=) 5: 3230322e36312e3130302e302f32332d3234203d3e203435373836.roa (hash: a8mTP5wqsK0/6i33hi9F2fx0vcrLrr8F0sXVOsBm+uM=) 6: 3131312e36372e36342e302f31392d3234203d3e203435373836.roa (hash: WtJvSkSMcWIFCYDWJoeYFOWIHYYIU2e63ZAjyF2Lb8o=) 7: 3131312e36372e37332e302f32342d3234203d3e203536323333.roa (hash: LN/QrtLQN7eBHDeVxv+de8QzLZrhiGE5e9eCTFW2W9s=) 8: BF076EA24A68CF152C323C7A3DFD3F92AFE8AA2B.crl (hash: Kc5598QUat+SAkLS+zzxX96SW17EmP8HAzhFv45LH44=) 9: 3138322e35302e3234302e302f32302d3234203d3e203435373836.roa (hash: duzHqAm6QedJQSgIxWwqnRHJ98BpWQZp6Vy/UDaP+2w=) 10: 323030313a6466303a63623a3a2f34382d3438203d3e203435373836.roa (hash: /ZSyzzH4osQQo8OEYTUKDqHS0TOIh680hRVxT7riSK4=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/e50da447-a138-4625-a420-a711ac243519/0/BF076EA24A68CF152C323C7A3DFD3F92AFE8AA2B.crl rsync://repo-rpki.idnic.net/repo/e50da447-a138-4625-a420-a711ac243519/0/BF076EA24A68CF152C323C7A3DFD3F92AFE8AA2B.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BF076EA24A68CF152C323C7A3DFD3F92AFE8AA2B.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 06 Dec 2025 05:40:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 30:56:43:80:e7:9e:fe:9a:11:97:41:aa:74:df:5e:c6:4e:59:c1:43 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BF076EA24A68CF152C323C7A3DFD3F92AFE8AA2B Validity Not Before: Dec 2 19:27:37 2025 GMT Not After : Dec 6 05:40:37 2025 GMT Subject: CN=0C7C9A1BC62B9E8683DA0F712AB4C14E0BF10853 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:86:3f:b3:fa:60:a9:51:67:51:f9:e2:d2:f5: 5d:75:fd:63:80:46:bc:08:d2:7c:32:3b:6c:7c:02: 97:9f:bd:a9:a4:b0:85:3d:9f:af:68:3d:52:76:d1: 50:41:e1:cc:b9:7c:2b:38:89:ec:ce:4a:d6:ab:b4: 6f:7f:56:0d:3f:ba:38:7c:94:39:44:7c:80:a5:59: 63:74:b4:c8:7e:5b:a8:db:67:cd:98:a0:a8:dc:43: 30:f8:43:53:8d:d6:13:b9:e8:e2:68:9b:f9:b7:31: 05:4a:10:e2:26:01:f2:cc:42:e6:02:4d:a0:c6:73: 42:e2:02:84:33:6c:b5:96:5e:1b:ef:1a:53:0f:28: 58:f7:e5:84:11:31:69:ad:0a:5d:d2:79:74:0a:06: b2:45:0e:3f:ff:c3:6b:cd:a0:7c:22:22:f0:66:3f: 6b:e1:a9:f2:b1:d8:6e:cf:f7:8f:27:18:d6:dc:1a: 08:8a:53:1d:3d:9f:7d:ac:11:b7:aa:a1:d5:7b:8b: 01:8a:17:cb:da:54:10:c2:c3:4a:2e:b7:b1:0d:c5: 97:20:8d:ee:a8:08:ab:02:e1:a6:66:9e:00:b3:b9: 37:3c:13:1e:4b:6e:79:65:ae:55:e3:73:2d:7b:f1: fe:19:bf:6f:bd:4a:06:7b:89:10:18:bc:84:58:7f: a5:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0C:7C:9A:1B:C6:2B:9E:86:83:DA:0F:71:2A:B4:C1:4E:0B:F1:08:53 X509v3 Authority Key Identifier: keyid:BF:07:6E:A2:4A:68:CF:15:2C:32:3C:7A:3D:FD:3F:92:AF:E8:AA:2B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/e50da447-a138-4625-a420-a711ac243519/0/BF076EA24A68CF152C323C7A3DFD3F92AFE8AA2B.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BF076EA24A68CF152C323C7A3DFD3F92AFE8AA2B.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e50da447-a138-4625-a420-a711ac243519/0/BF076EA24A68CF152C323C7A3DFD3F92AFE8AA2B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ae:8f:b3:93:88:a4:f0:79:16:65:ed:03:ce:a1:8c:0c:5c:b2: dd:af:73:f7:08:09:47:f8:df:e8:de:90:42:dc:28:18:39:38: 52:1b:28:29:f7:d4:20:07:dd:79:f8:13:c9:50:f5:1e:ae:eb: bf:23:e0:41:d7:77:29:c2:14:30:c5:f3:ce:c6:10:2f:d9:1d: 84:b6:2c:99:4c:be:ad:6a:53:8b:5d:ac:55:60:83:7a:aa:88: 78:f3:a2:cc:50:86:2e:56:79:d7:14:00:fe:57:af:82:f4:56: 2f:e7:b5:3d:42:71:bd:86:d2:46:e6:45:7f:c9:ec:65:34:05: f3:1f:d6:17:21:63:c5:48:05:05:27:41:9c:c0:e5:6d:3e:98: d9:60:11:90:65:7a:2d:72:ca:87:9d:f0:0f:74:63:69:e4:f2: 11:c0:30:1e:19:3c:59:96:b1:13:d7:7f:e1:c6:a1:d3:33:50: 2b:b5:3b:22:96:bc:a0:05:85:98:07:a3:b0:d1:38:6f:cb:b1: 60:58:74:ba:bf:c5:b6:54:42:b5:bc:fb:6c:b6:b6:65:4d:2f: 7f:af:db:d0:e3:4a:37:dd:22:4c:75:10:0c:ba:72:8d:78:d2: 3e:59:59:fd:8a:0d:6b:86:2c:d8:14:e8:0b:3c:77:73:d0:da: b6:49:61:2f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUMFZDgOee/poRl0GqdN9exk5ZwUMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkYwNzZFQTI0QTY4Q0YxNTJDMzIzQzdBM0RGRDNGOTJB RkU4QUEyQjAeFw0yNTEyMDIxOTI3MzdaFw0yNTEyMDYwNTQwMzdaMDMxMTAvBgNV BAMTKDBDN0M5QTFCQzYyQjlFODY4M0RBMEY3MTJBQjRDMTRFMEJGMTA4NTMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCZhj+z+mCpUWdR+eLS9V11/WOA RrwI0nwyO2x8ApefvamksIU9n69oPVJ20VBB4cy5fCs4iezOStartG9/Vg0/ujh8 lDlEfIClWWN0tMh+W6jbZ82YoKjcQzD4Q1ON1hO56OJom/m3MQVKEOImAfLMQuYC TaDGc0LiAoQzbLWWXhvvGlMPKFj35YQRMWmtCl3SeXQKBrJFDj//w2vNoHwiIvBm P2vhqfKx2G7P948nGNbcGgiKUx09n32sEbeqodV7iwGKF8vaVBDCw0out7ENxZcg je6oCKsC4aZmngCzuTc8Ex5LbnllrlXjcy178f4Zv2+9SgZ7iRAYvIRYf6XrAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUDHyaG8YrnoaD2g9xKrTBTgvxCFMwHwYDVR0j BBgwFoAUvwduokpozxUsMjx6Pf0/kq/oqiswDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l NTBkYTQ0Ny1hMTM4LTQ2MjUtYTQyMC1hNzExYWMyNDM1MTkvMC9CRjA3NkVBMjRB NjhDRjE1MkMzMjNDN0EzREZEM0Y5MkFGRThBQTJCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQkYwNzZFQTI0QTY4Q0YxNTJDMzIzQzdBM0RGRDNGOTJBRkU4 QUEyQi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZTUwZGE0NDctYTEzOC00NjI1LWE0 MjAtYTcxMWFjMjQzNTE5LzAvQkYwNzZFQTI0QTY4Q0YxNTJDMzIzQzdBM0RGRDNG OTJBRkU4QUEyQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAK6Ps5OIpPB5FmXtA86hjAxcst2vc/cICUf4 3+jekELcKBg5OFIbKCn31CAH3Xn4E8lQ9R6u678j4EHXdynCFDDF887GEC/ZHYS2 LJlMvq1qU4tdrFVgg3qqiHjzosxQhi5WedcUAP5Xr4L0Vi/ntT1Ccb2G0kbmRX/J 7GU0BfMf1hchY8VIBQUnQZzA5W0+mNlgEZBlei1yyoed8A90Y2nk8hHAMB4ZPFmW sRPXf+HGodMzUCu1OyKWvKAFhZgHo7DROG/LsWBYdLq/xbZUQrW8+2y2tmVNL3+v 29DjSjfdIkx1EAy6co140j5ZWf2KDWuGLNgU6As8d3PQ2rZJYS8= -----END CERTIFICATE-----Generated at Wed Dec 3 14:46:10 2025 by rpki-client