This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/f8423b8a-fe22-43ad-9507-1a99abba7d94/0/50BD1739D53F832A82B3E86C9535DE6307BE0DAB.mft File: 50BD1739D53F832A82B3E86C9535DE6307BE0DAB.mft (raw, json) Hash identifier: gXCepMrvZS7kD9YAh/QKccKPtaIy5CEQItMNFRD6Y78= Subject key identifier: 60:8A:41:93:BE:C8:F3:E0:CB:8C:98:9C:EB:5D:34:BE:82:90:F8:36 Authority key identifier: 50:BD:17:39:D5:3F:83:2A:82:B3:E8:6C:95:35:DE:63:07:BE:0D:AB Certificate issuer: /CN=50BD1739D53F832A82B3E86C9535DE6307BE0DAB Certificate serial: 71A0FA8D7361E00A0EB6F5FCB000DD1C3156B079 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/50BD1739D53F832A82B3E86C9535DE6307BE0DAB.cer Subject info access: rsync://repo-rpki.idnic.net/repo/f8423b8a-fe22-43ad-9507-1a99abba7d94/0/50BD1739D53F832A82B3E86C9535DE6307BE0DAB.mft Manifest number: 04DB Signing time: Tue 02 Dec 2025 14:21:30 +0000 Manifest this update: Tue 02 Dec 2025 14:16:30 +0000 Manifest next update: Fri 05 Dec 2025 16:16:30 +0000 Files and hashes: 1: 50BD1739D53F832A82B3E86C9535DE6307BE0DAB.crl (hash: 3hNRzUsYcSeFnhwXRaVMlioOfDKq77OzxeLvBi1ZfOM=) 2: 3130332e36352e3231322e302f32322d3234203d3e20313335343439.roa (hash: 7xrQRwovsS9OKMLv2YrykZjU8MnTLBOyQSk5mbbd2RE=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/f8423b8a-fe22-43ad-9507-1a99abba7d94/0/50BD1739D53F832A82B3E86C9535DE6307BE0DAB.crl rsync://repo-rpki.idnic.net/repo/f8423b8a-fe22-43ad-9507-1a99abba7d94/0/50BD1739D53F832A82B3E86C9535DE6307BE0DAB.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/50BD1739D53F832A82B3E86C9535DE6307BE0DAB.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 05 Dec 2025 16:16:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 71:a0:fa:8d:73:61:e0:0a:0e:b6:f5:fc:b0:00:dd:1c:31:56:b0:79 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=50BD1739D53F832A82B3E86C9535DE6307BE0DAB Validity Not Before: Dec 2 14:16:30 2025 GMT Not After : Dec 5 16:16:30 2025 GMT Subject: CN=608A4193BEC8F3E0CB8C989CEB5D34BE8290F836 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:00:54:8d:c9:ed:e7:23:7f:55:fc:3a:ce:ce: 00:6c:3b:f4:b0:07:3e:2e:ce:24:26:e2:a4:53:7f: 54:8f:1c:0e:71:b7:ec:c6:a4:ce:a9:72:a9:82:9f: 8d:f4:bb:69:97:20:54:3a:6f:76:ad:cb:78:a8:8b: 81:76:65:30:91:70:79:f9:02:ad:32:0f:9e:cc:38: e7:7a:0d:1d:71:64:d9:5d:c3:b3:26:91:15:28:77: 8d:ab:78:93:02:2d:d4:89:6b:ff:01:c0:56:e7:6c: 25:cc:bc:d2:67:39:35:a3:4c:64:b0:3e:6a:c0:95: ed:78:74:36:49:21:ae:8e:cb:54:0f:c2:53:f4:36: ed:4f:76:86:e1:87:8a:dc:a2:85:f2:81:d7:db:d6: 25:69:b8:6d:07:55:5c:22:b4:84:83:97:28:d9:54: 72:45:a2:de:f0:67:c9:54:35:8b:73:11:2b:93:0a: 11:8d:b9:12:07:9f:eb:1c:30:92:80:c2:9c:b3:48: f2:7a:73:ed:85:82:18:56:f6:00:d6:fe:28:1d:92: 7b:d3:33:f0:de:6c:53:e8:bf:06:90:cf:e4:42:ae: 3f:6c:f1:da:b5:20:ea:96:8d:ff:e9:6e:ac:f8:f6: d7:30:a0:98:b2:52:6f:e2:e0:db:bf:fc:4a:8a:fe: 1b:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 60:8A:41:93:BE:C8:F3:E0:CB:8C:98:9C:EB:5D:34:BE:82:90:F8:36 X509v3 Authority Key Identifier: keyid:50:BD:17:39:D5:3F:83:2A:82:B3:E8:6C:95:35:DE:63:07:BE:0D:AB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/f8423b8a-fe22-43ad-9507-1a99abba7d94/0/50BD1739D53F832A82B3E86C9535DE6307BE0DAB.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/50BD1739D53F832A82B3E86C9535DE6307BE0DAB.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f8423b8a-fe22-43ad-9507-1a99abba7d94/0/50BD1739D53F832A82B3E86C9535DE6307BE0DAB.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption af:20:5c:fe:91:62:dd:05:ad:a5:3e:43:43:83:e8:65:25:ac: 62:c2:5c:9a:24:6a:39:78:16:31:f2:ae:10:39:49:61:a9:a3: dd:2b:f3:1d:ab:26:b8:bc:a9:08:8b:26:56:2a:4a:75:17:85: d2:ff:97:90:92:01:17:dd:70:e9:91:3d:3c:7d:a9:4f:75:14: f2:08:8a:d4:8b:cf:31:64:e0:77:c6:d7:fc:1f:5d:55:a3:25: 86:48:c0:cb:7f:b7:e4:e5:ce:d4:15:e7:12:8f:ec:9f:25:b6: a8:41:8d:d3:f3:bc:45:f8:ef:f1:e1:c7:62:a2:b0:2e:e3:08: c7:70:c6:df:8d:d9:31:44:59:f2:c2:f7:95:3e:25:a8:a4:f6: 29:e6:78:41:0f:c1:10:92:28:a1:91:91:8e:ed:b2:e3:89:6b: 80:a0:9c:39:6b:99:96:ec:83:2f:fd:b5:54:0d:c6:49:75:22: 11:f6:e5:5d:a8:7e:d9:23:2a:ef:32:7e:ab:e6:80:1e:2f:de: c7:38:c6:a1:2a:f3:ee:31:f1:5f:66:36:ed:d6:42:11:8e:0f: 16:26:11:ba:db:e7:5c:ab:1f:30:73:16:27:8c:19:b8:43:12: 95:6a:cb:8a:50:4c:e4:b3:1c:cb:b8:fe:18:a2:e1:0c:aa:2c: 83:2e:01:22 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUcaD6jXNh4AoOtvX8sADdHDFWsHkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTBCRDE3MzlENTNGODMyQTgyQjNFODZDOTUzNURFNjMw N0JFMERBQjAeFw0yNTEyMDIxNDE2MzBaFw0yNTEyMDUxNjE2MzBaMDMxMTAvBgNV BAMTKDYwOEE0MTkzQkVDOEYzRTBDQjhDOTg5Q0VCNUQzNEJFODI5MEY4MzYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC1AFSNye3nI39V/DrOzgBsO/Sw Bz4uziQm4qRTf1SPHA5xt+zGpM6pcqmCn430u2mXIFQ6b3aty3ioi4F2ZTCRcHn5 Aq0yD57MOOd6DR1xZNldw7MmkRUod42reJMCLdSJa/8BwFbnbCXMvNJnOTWjTGSw PmrAle14dDZJIa6Oy1QPwlP0Nu1Pdobhh4rcooXygdfb1iVpuG0HVVwitISDlyjZ VHJFot7wZ8lUNYtzESuTChGNuRIHn+scMJKAwpyzSPJ6c+2FghhW9gDW/igdknvT M/DebFPovwaQz+RCrj9s8dq1IOqWjf/pbqz49tcwoJiyUm/i4Nu//EqK/hupAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUYIpBk77I8+DLjJic6100voKQ+DYwHwYDVR0j BBgwFoAUUL0XOdU/gyqCs+hslTXeYwe+DaswDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m ODQyM2I4YS1mZTIyLTQzYWQtOTUwNy0xYTk5YWJiYTdkOTQvMC81MEJEMTczOUQ1 M0Y4MzJBODJCM0U4NkM5NTM1REU2MzA3QkUwREFCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNTBCRDE3MzlENTNGODMyQTgyQjNFODZDOTUzNURFNjMwN0JF MERBQi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZjg0MjNiOGEtZmUyMi00M2FkLTk1 MDctMWE5OWFiYmE3ZDk0LzAvNTBCRDE3MzlENTNGODMyQTgyQjNFODZDOTUzNURF NjMwN0JFMERBQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAK8gXP6RYt0FraU+Q0OD6GUlrGLCXJokajl4 FjHyrhA5SWGpo90r8x2rJri8qQiLJlYqSnUXhdL/l5CSARfdcOmRPTx9qU91FPII itSLzzFk4HfG1/wfXVWjJYZIwMt/t+TlztQV5xKP7J8ltqhBjdPzvEX47/Hhx2Ki sC7jCMdwxt+N2TFEWfLC95U+Jaik9inmeEEPwRCSKKGRkY7tsuOJa4CgnDlrmZbs gy/9tVQNxkl1IhH25V2oftkjKu8yfqvmgB4v3sc4xqEq8+4x8V9mNu3WQhGODxYm Ebrb51yrHzBzFieMGbhDEpVqy4pQTOSzHMu4/hii4QyqLIMuASI= -----END CERTIFICATE-----Generated at Wed Dec 3 13:59:37 2025 by rpki-client