This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/f7418013-1679-496b-80f6-2d05cc5be72f/0/BC8BD5485C9B01D176F3FAA8F381E5ECED8CD3B8.mft File: BC8BD5485C9B01D176F3FAA8F381E5ECED8CD3B8.mft (raw, json) Hash identifier: +NYQjfA2MJ4sv/JEEjTi70E6JHiG4PZUuFvbl/96idw= Subject key identifier: 0F:5E:13:BB:DD:F6:B9:15:AA:3C:AE:A6:99:C8:D1:2F:06:AB:8C:5E Authority key identifier: BC:8B:D5:48:5C:9B:01:D1:76:F3:FA:A8:F3:81:E5:EC:ED:8C:D3:B8 Certificate issuer: /CN=BC8BD5485C9B01D176F3FAA8F381E5ECED8CD3B8 Certificate serial: 33EF8AFFF8AA76D54834E96762B46FB8013A8073 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BC8BD5485C9B01D176F3FAA8F381E5ECED8CD3B8.cer Subject info access: rsync://repo-rpki.idnic.net/repo/f7418013-1679-496b-80f6-2d05cc5be72f/0/BC8BD5485C9B01D176F3FAA8F381E5ECED8CD3B8.mft Manifest number: 022D Signing time: Mon 01 Dec 2025 05:40:40 +0000 Manifest this update: Mon 01 Dec 2025 05:35:40 +0000 Manifest next update: Thu 04 Dec 2025 15:10:40 +0000 Files and hashes: 1: 3130332e37332e3139322e302f32342d3234203d3e20313439393434.roa (hash: kygHr26DqsY5AyJfGENb/AiH0P8fZ+v+8xcM4ekCjqw=) 2: BC8BD5485C9B01D176F3FAA8F381E5ECED8CD3B8.crl (hash: i7rnYpz+9/0m1vHN0qtgwR7DZoL1WPk2Brq7fui+TEc=) 3: 3130332e37332e3139332e302f32342d3234203d3e20313439393434.roa (hash: 0uJHSCFsdwdZP1NKhkt1f+yFu68JksGMAuDEtBg71VE=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/f7418013-1679-496b-80f6-2d05cc5be72f/0/BC8BD5485C9B01D176F3FAA8F381E5ECED8CD3B8.crl rsync://repo-rpki.idnic.net/repo/f7418013-1679-496b-80f6-2d05cc5be72f/0/BC8BD5485C9B01D176F3FAA8F381E5ECED8CD3B8.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BC8BD5485C9B01D176F3FAA8F381E5ECED8CD3B8.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 04 Dec 2025 15:10:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 33:ef:8a:ff:f8:aa:76:d5:48:34:e9:67:62:b4:6f:b8:01:3a:80:73 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BC8BD5485C9B01D176F3FAA8F381E5ECED8CD3B8 Validity Not Before: Dec 1 05:35:40 2025 GMT Not After : Dec 4 15:10:40 2025 GMT Subject: CN=0F5E13BBDDF6B915AA3CAEA699C8D12F06AB8C5E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:2d:a1:35:f8:19:a5:b8:80:91:2b:91:a3:4f: 87:25:76:6c:2f:3b:2d:a8:ac:af:74:17:35:91:35: ec:d4:06:44:bb:22:c4:d5:34:e9:d8:e1:cb:4d:8a: 17:78:01:48:10:3e:ba:9c:2e:c5:e1:2d:4a:dd:be: d7:32:1c:02:bf:5f:09:4d:68:cc:dc:f5:c0:f0:aa: 2f:90:1b:18:74:8c:72:23:d8:a2:5c:4e:bd:58:15: 76:41:54:62:45:f1:38:26:fa:2e:9c:f4:36:c7:19: c0:d6:c5:f0:ce:c6:e0:c2:16:12:a6:d4:0c:97:17: d6:f3:4e:e3:cc:27:39:c3:40:24:0c:27:6c:cf:89: fe:5f:42:45:03:1c:df:f2:84:a9:03:d0:99:29:4c: c4:10:24:d4:29:1f:03:b1:e1:53:69:f9:27:24:68: a8:44:58:6a:35:15:65:83:6e:89:f2:43:47:e8:8b: e2:76:df:01:d3:b2:d4:10:9f:e4:d7:ba:b8:fc:02: 32:d3:8b:f2:3f:b0:e2:c1:0d:14:21:d0:70:9f:55: 0c:c1:69:26:8c:24:a1:bf:70:89:4a:2b:39:59:12: 44:12:7e:30:14:a8:2c:a0:b5:be:e5:dd:5d:d1:7d: 04:fd:ff:62:51:45:e5:f7:c0:0e:a2:71:33:10:d9: 35:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0F:5E:13:BB:DD:F6:B9:15:AA:3C:AE:A6:99:C8:D1:2F:06:AB:8C:5E X509v3 Authority Key Identifier: keyid:BC:8B:D5:48:5C:9B:01:D1:76:F3:FA:A8:F3:81:E5:EC:ED:8C:D3:B8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/f7418013-1679-496b-80f6-2d05cc5be72f/0/BC8BD5485C9B01D176F3FAA8F381E5ECED8CD3B8.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BC8BD5485C9B01D176F3FAA8F381E5ECED8CD3B8.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f7418013-1679-496b-80f6-2d05cc5be72f/0/BC8BD5485C9B01D176F3FAA8F381E5ECED8CD3B8.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 12:ff:12:0d:8f:c9:1f:cb:a9:8f:b7:f3:73:3c:22:19:7c:fa: 22:1c:78:b3:ce:8e:0d:bc:07:42:51:e5:68:5e:d7:2b:5e:72: a7:b9:5f:16:56:74:44:5c:61:04:d9:be:b6:5c:6c:12:03:e4: 21:5c:e8:25:34:1a:4a:0a:fc:5c:b8:bf:87:b9:2c:06:bd:2f: 55:85:69:ed:b4:45:9c:ef:b1:10:e5:39:fa:77:f1:ed:00:24: de:35:8a:7f:d7:34:2c:56:03:53:4e:0e:6b:0e:19:55:16:da: 52:ed:55:27:b3:fd:f5:b8:29:30:04:ce:6b:eb:af:99:76:1a: dc:64:03:07:d9:cb:75:8b:ce:d0:5a:96:60:3b:97:90:b5:92: dd:0c:ab:cf:db:7c:fd:20:80:d3:79:4a:69:81:b4:e2:9b:cb: 16:b2:5c:37:06:3e:bc:1f:1e:27:38:fd:00:ae:15:f6:4d:e2: 86:d6:d6:d9:9e:22:e5:17:70:65:3f:e2:ec:4b:b0:40:1f:f8: 00:0e:fd:da:f6:20:45:3b:c6:a7:35:ad:6a:bc:80:f2:5f:5d: 4a:6e:9e:f7:34:a3:ca:f2:b4:92:a4:07:4c:e3:8c:da:8c:b4: a8:e6:2f:ee:45:4c:64:03:79:ee:43:82:e8:dc:97:02:da:d9: 70:f4:c8:7e -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUM++K//iqdtVINOlnYrRvuAE6gHMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkM4QkQ1NDg1QzlCMDFEMTc2RjNGQUE4RjM4MUU1RUNF RDhDRDNCODAeFw0yNTEyMDEwNTM1NDBaFw0yNTEyMDQxNTEwNDBaMDMxMTAvBgNV BAMTKDBGNUUxM0JCRERGNkI5MTVBQTNDQUVBNjk5QzhEMTJGMDZBQjhDNUUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDJLaE1+BmluICRK5GjT4cldmwv Oy2orK90FzWRNezUBkS7IsTVNOnY4ctNihd4AUgQPrqcLsXhLUrdvtcyHAK/XwlN aMzc9cDwqi+QGxh0jHIj2KJcTr1YFXZBVGJF8Tgm+i6c9DbHGcDWxfDOxuDCFhKm 1AyXF9bzTuPMJznDQCQMJ2zPif5fQkUDHN/yhKkD0JkpTMQQJNQpHwOx4VNp+Sck aKhEWGo1FWWDbonyQ0foi+J23wHTstQQn+TXurj8AjLTi/I/sOLBDRQh0HCfVQzB aSaMJKG/cIlKKzlZEkQSfjAUqCygtb7l3V3RfQT9/2JRReX3wA6icTMQ2TWdAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUD14Tu932uRWqPK6mmcjRLwarjF4wHwYDVR0j BBgwFoAUvIvVSFybAdF28/qo84Hl7O2M07gwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m NzQxODAxMy0xNjc5LTQ5NmItODBmNi0yZDA1Y2M1YmU3MmYvMC9CQzhCRDU0ODVD OUIwMUQxNzZGM0ZBQThGMzgxRTVFQ0VEOENEM0I4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQkM4QkQ1NDg1QzlCMDFEMTc2RjNGQUE4RjM4MUU1RUNFRDhD RDNCOC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZjc0MTgwMTMtMTY3OS00OTZiLTgw ZjYtMmQwNWNjNWJlNzJmLzAvQkM4QkQ1NDg1QzlCMDFEMTc2RjNGQUE4RjM4MUU1 RUNFRDhDRDNCOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABL/Eg2PyR/LqY+383M8Ihl8+iIceLPOjg28 B0JR5Whe1ytecqe5XxZWdERcYQTZvrZcbBID5CFc6CU0GkoK/Fy4v4e5LAa9L1WF ae20RZzvsRDlOfp38e0AJN41in/XNCxWA1NODmsOGVUW2lLtVSez/fW4KTAEzmvr r5l2GtxkAwfZy3WLztBalmA7l5C1kt0Mq8/bfP0ggNN5SmmBtOKbyxayXDcGPrwf Hic4/QCuFfZN4obW1tmeIuUXcGU/4uxLsEAf+AAO/dr2IEU7xqc1rWq8gPJfXUpu nvc0o8rytJKkB0zjjNqMtKjmL+5FTGQDee5DgujclwLa2XD0yH4= -----END CERTIFICATE-----Generated at Wed Dec 3 13:56:50 2025 by rpki-client