This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/f7f49068-c0ca-4a21-9a8a-eed26fcdd1aa/0/B144E4EB28F69D9B76C0C2499BFD7B3EC503EF3E.mft File: B144E4EB28F69D9B76C0C2499BFD7B3EC503EF3E.mft (raw, json) Hash identifier: cof1itN/TupeygMEqJ1cI1Pyp+O1eHXg9DsDbNbJeKA= Subject key identifier: FB:53:D1:C5:AF:F3:1C:47:E2:B8:04:3C:D5:60:AA:DB:FC:13:63:E8 Authority key identifier: B1:44:E4:EB:28:F6:9D:9B:76:C0:C2:49:9B:FD:7B:3E:C5:03:EF:3E Certificate issuer: /CN=B144E4EB28F69D9B76C0C2499BFD7B3EC503EF3E Certificate serial: 65F1EDC1C1900C15FB2019126BFCFCB4D8199B0E Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B144E4EB28F69D9B76C0C2499BFD7B3EC503EF3E.cer Subject info access: rsync://repo-rpki.idnic.net/repo/f7f49068-c0ca-4a21-9a8a-eed26fcdd1aa/0/B144E4EB28F69D9B76C0C2499BFD7B3EC503EF3E.mft Manifest number: 052A Signing time: Tue 02 Dec 2025 05:30:46 +0000 Manifest this update: Tue 02 Dec 2025 05:25:46 +0000 Manifest next update: Fri 05 Dec 2025 05:55:46 +0000 Files and hashes: 1: 3130332e37322e3131312e302f32342d3234203d3e203538343736.roa (hash: lw8CjbCa9nau6CgaK9qo3W7fJOYahpzK8W9j4IBI5bo=) 2: 34332e3234322e3133332e302f32342d3234203d3e203538343736.roa (hash: 2NAEElgvlB7IhQMwd1Atvpj3R7riVOfOU9AzMjYnGF0=) 3: 323030313a6466303a3236663a3a2f34382d3438203d3e203538343736.roa (hash: 19ABnycRhti98EG6MJ/6S6W4a31omV6sktXNN7fCeRE=) 4: 3130332e37322e3131302e302f32342d3234203d3e203538343736.roa (hash: voekDMYuoDNmVswZr7/xsWsJnvx7lZSdUg+Aq+ToSP0=) 5: 3130332e32382e3130362e302f32342d3234203d3e203538343736.roa (hash: 3CwSzY5tw6Zm4h624sLhttPd8ZN8CiHTGKhVehN+hWE=) 6: 3130332e32382e3130372e302f32342d3234203d3e203538343736.roa (hash: 1UalLxKn41/lSLgzHwYn+86cGRYM0p3PY4M21eZtrAo=) 7: B144E4EB28F69D9B76C0C2499BFD7B3EC503EF3E.crl (hash: Tcxw5OoPsfuPNnh24dZRbnqPHisVMZH9uA10HLcGe2A=) 8: 34332e3234322e3133322e302f32342d3234203d3e203538343736.roa (hash: ut8mKe181e+GL8gZVd8D9lpxfAhurYa657vG8sPaVZU=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/f7f49068-c0ca-4a21-9a8a-eed26fcdd1aa/0/B144E4EB28F69D9B76C0C2499BFD7B3EC503EF3E.crl rsync://repo-rpki.idnic.net/repo/f7f49068-c0ca-4a21-9a8a-eed26fcdd1aa/0/B144E4EB28F69D9B76C0C2499BFD7B3EC503EF3E.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B144E4EB28F69D9B76C0C2499BFD7B3EC503EF3E.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 05 Dec 2025 05:55:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 65:f1:ed:c1:c1:90:0c:15:fb:20:19:12:6b:fc:fc:b4:d8:19:9b:0e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B144E4EB28F69D9B76C0C2499BFD7B3EC503EF3E Validity Not Before: Dec 2 05:25:46 2025 GMT Not After : Dec 5 05:55:46 2025 GMT Subject: CN=FB53D1C5AFF31C47E2B8043CD560AADBFC1363E8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:56:9f:43:83:b4:45:43:bc:3b:ab:8f:c5:3c: c3:d8:4f:c9:57:1f:03:47:44:79:24:b8:9e:77:bf: 6a:42:bf:b0:61:c6:be:77:32:ce:68:1b:7b:51:cb: b9:2b:87:f4:f5:2f:ca:d8:c2:73:e8:8d:f6:ec:b4: ff:18:6d:41:1c:6e:42:43:fa:ab:32:86:b7:b9:8a: 1f:29:ab:25:74:eb:ac:3a:23:ae:91:d7:39:fb:6a: 5d:2a:d8:e7:f0:d9:66:b3:34:2d:11:5a:d7:a7:4c: 25:6a:10:b0:54:05:07:14:59:12:12:67:4f:3c:c5: f7:3b:42:01:b3:d5:3b:10:4e:54:91:35:24:3f:9e: 6c:f0:4b:c7:cf:db:4c:ee:b8:83:96:b1:0a:01:fd: b0:a3:1e:ee:d4:15:9c:ee:58:c9:f5:42:ef:32:b7: 94:98:78:fe:73:5a:85:a5:36:be:99:12:10:6c:c7: b8:04:28:81:0c:9f:d3:8e:d7:e5:8b:62:70:91:1f: 7a:25:4e:1b:1c:9d:79:01:f9:7c:61:1b:51:7e:48: a5:be:27:b8:3e:7e:bc:40:87:47:fb:6e:af:a3:a0: 0e:d4:5b:03:a6:fb:d1:85:fc:ff:1a:11:26:4c:96: 68:b6:f9:07:d9:d5:e2:3c:0c:21:48:24:05:d2:d3: b7:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FB:53:D1:C5:AF:F3:1C:47:E2:B8:04:3C:D5:60:AA:DB:FC:13:63:E8 X509v3 Authority Key Identifier: keyid:B1:44:E4:EB:28:F6:9D:9B:76:C0:C2:49:9B:FD:7B:3E:C5:03:EF:3E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/f7f49068-c0ca-4a21-9a8a-eed26fcdd1aa/0/B144E4EB28F69D9B76C0C2499BFD7B3EC503EF3E.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B144E4EB28F69D9B76C0C2499BFD7B3EC503EF3E.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f7f49068-c0ca-4a21-9a8a-eed26fcdd1aa/0/B144E4EB28F69D9B76C0C2499BFD7B3EC503EF3E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 15:1c:ac:2d:f3:d9:26:d3:9a:41:bf:d7:b5:2e:bd:e0:67:82: 79:7b:1e:81:61:95:88:3f:22:0c:f0:b2:c4:ca:82:cc:a8:b9: e1:0d:57:d5:32:35:4c:e9:dd:24:1f:9f:0c:76:81:b2:8b:b4: a2:f4:f7:4b:60:a9:43:69:ad:08:4b:13:6b:65:89:60:8e:db: f5:cc:94:01:fd:59:49:86:51:c8:e7:95:4f:4f:1d:be:86:fa: a4:31:8d:60:b4:19:28:06:81:1d:61:3d:68:b9:d3:46:93:fe: 8d:7d:94:f2:49:3d:0b:62:9b:d4:89:f3:b7:00:35:85:7f:3b: 7f:ba:8e:6c:da:94:5c:ba:db:e0:29:4f:01:a1:34:71:f8:ef: b8:b0:8a:d8:e5:2c:3c:60:09:1b:00:61:91:62:18:3d:2c:22: 77:4b:b4:77:78:77:d3:05:dc:6a:96:86:5c:89:00:0e:5c:4f: 77:ec:c9:59:65:6d:aa:7f:17:6c:d8:a1:d3:4d:46:4a:a5:05: a8:f6:d9:69:f7:af:8c:b6:f0:eb:16:62:a2:e6:22:47:b1:73: a7:d9:25:cf:e4:3e:7f:4f:bb:47:4d:7f:a9:f7:95:d0:2e:0f: 95:3a:e3:1a:cd:49:b9:80:8a:94:3b:dc:38:f7:15:59:63:a2: 8e:25:68:89 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUZfHtwcGQDBX7IBkSa/z8tNgZmw4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjE0NEU0RUIyOEY2OUQ5Qjc2QzBDMjQ5OUJGRDdCM0VD NTAzRUYzRTAeFw0yNTEyMDIwNTI1NDZaFw0yNTEyMDUwNTU1NDZaMDMxMTAvBgNV BAMTKEZCNTNEMUM1QUZGMzFDNDdFMkI4MDQzQ0Q1NjBBQURCRkMxMzYzRTgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCxVp9Dg7RFQ7w7q4/FPMPYT8lX HwNHRHkkuJ53v2pCv7Bhxr53Ms5oG3tRy7krh/T1L8rYwnPojfbstP8YbUEcbkJD +qsyhre5ih8pqyV066w6I66R1zn7al0q2Ofw2WazNC0RWtenTCVqELBUBQcUWRIS Z088xfc7QgGz1TsQTlSRNSQ/nmzwS8fP20zuuIOWsQoB/bCjHu7UFZzuWMn1Qu8y t5SYeP5zWoWlNr6ZEhBsx7gEKIEMn9OO1+WLYnCRH3olThscnXkB+XxhG1F+SKW+ J7g+frxAh0f7bq+joA7UWwOm+9GF/P8aESZMlmi2+QfZ1eI8DCFIJAXS07dFAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU+1PRxa/zHEfiuAQ81WCq2/wTY+gwHwYDVR0j BBgwFoAUsUTk6yj2nZt2wMJJm/17PsUD7z4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m N2Y0OTA2OC1jMGNhLTRhMjEtOWE4YS1lZWQyNmZjZGQxYWEvMC9CMTQ0RTRFQjI4 RjY5RDlCNzZDMEMyNDk5QkZEN0IzRUM1MDNFRjNFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQjE0NEU0RUIyOEY2OUQ5Qjc2QzBDMjQ5OUJGRDdCM0VDNTAz RUYzRS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZjdmNDkwNjgtYzBjYS00YTIxLTlh OGEtZWVkMjZmY2RkMWFhLzAvQjE0NEU0RUIyOEY2OUQ5Qjc2QzBDMjQ5OUJGRDdC M0VDNTAzRUYzRS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABUcrC3z2SbTmkG/17UuveBngnl7HoFhlYg/ IgzwssTKgsyoueENV9UyNUzp3SQfnwx2gbKLtKL090tgqUNprQhLE2tliWCO2/XM lAH9WUmGUcjnlU9PHb6G+qQxjWC0GSgGgR1hPWi500aT/o19lPJJPQtim9SJ87cA NYV/O3+6jmzalFy62+ApTwGhNHH477iwitjlLDxgCRsAYZFiGD0sIndLtHd4d9MF 3GqWhlyJAA5cT3fsyVllbap/F2zYodNNRkqlBaj22Wn3r4y28OsWYqLmIkexc6fZ Jc/kPn9Pu0dNf6n3ldAuD5U64xrNSbmAipQ73Dj3FVljoo4laIk= -----END CERTIFICATE-----Generated at Wed Dec 3 14:43:49 2025 by rpki-client