This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/f86a13bd-b79a-450e-9be3-3d5a03ab93b1/0/BC0ECFDDD081CE5132BEC9CFDC1A390A9AF3BCBE.mft File: BC0ECFDDD081CE5132BEC9CFDC1A390A9AF3BCBE.mft (raw, json) Hash identifier: PtqSfGgcxhqiMbjizigCAI+aBDseODIINmDAtNMW9aQ= Subject key identifier: A4:8E:47:D7:91:B1:83:C8:68:2D:C4:4B:7F:AC:67:78:10:BB:A3:81 Authority key identifier: BC:0E:CF:DD:D0:81:CE:51:32:BE:C9:CF:DC:1A:39:0A:9A:F3:BC:BE Certificate issuer: /CN=BC0ECFDDD081CE5132BEC9CFDC1A390A9AF3BCBE Certificate serial: 54A24AE1AA156AD3A1012381FBD917CE5E64EBFC Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BC0ECFDDD081CE5132BEC9CFDC1A390A9AF3BCBE.cer Subject info access: rsync://repo-rpki.idnic.net/repo/f86a13bd-b79a-450e-9be3-3d5a03ab93b1/0/BC0ECFDDD081CE5132BEC9CFDC1A390A9AF3BCBE.mft Manifest number: 021D Signing time: Wed 03 Dec 2025 02:01:31 +0000 Manifest this update: Wed 03 Dec 2025 01:56:31 +0000 Manifest next update: Sat 06 Dec 2025 09:46:31 +0000 Files and hashes: 1: BC0ECFDDD081CE5132BEC9CFDC1A390A9AF3BCBE.crl (hash: W0Xl0JkESoo34kIFhp1yMQQqqkffKmvgkTVgrnxLVZA=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/f86a13bd-b79a-450e-9be3-3d5a03ab93b1/0/BC0ECFDDD081CE5132BEC9CFDC1A390A9AF3BCBE.crl rsync://repo-rpki.idnic.net/repo/f86a13bd-b79a-450e-9be3-3d5a03ab93b1/0/BC0ECFDDD081CE5132BEC9CFDC1A390A9AF3BCBE.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BC0ECFDDD081CE5132BEC9CFDC1A390A9AF3BCBE.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 06 Dec 2025 09:46:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 54:a2:4a:e1:aa:15:6a:d3:a1:01:23:81:fb:d9:17:ce:5e:64:eb:fc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BC0ECFDDD081CE5132BEC9CFDC1A390A9AF3BCBE Validity Not Before: Dec 3 01:56:31 2025 GMT Not After : Dec 6 09:46:31 2025 GMT Subject: CN=A48E47D791B183C8682DC44B7FAC677810BBA381 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:96:d8:3f:e7:36:7f:db:1e:7d:80:72:8d:99: 0a:40:8a:6c:40:be:23:49:0d:bf:a6:80:ac:10:cb: aa:c1:48:02:80:11:75:28:9d:7c:48:80:44:3b:d3: 3a:61:f6:7f:a1:a2:f8:89:2b:9b:1d:d4:00:2b:77: d6:9d:c6:05:11:14:ad:16:20:7c:e7:fc:2b:1a:6c: 2d:d1:d8:97:db:30:24:b9:fe:ea:f0:e5:ef:65:2c: 11:d9:90:01:92:f2:40:60:9f:1c:61:9c:21:66:31: f6:42:46:a1:b0:90:2e:49:ee:71:09:29:8c:23:da: 63:d3:39:c6:aa:f2:e5:1f:22:ec:b7:3f:7b:dd:22: b8:9c:50:59:91:ae:fb:c8:95:c9:8d:e3:3a:d0:64: 06:05:7d:15:26:70:67:e1:b9:01:18:7d:f9:e0:e8: 94:c4:d9:7a:fd:94:b7:5a:10:57:ff:bf:ca:8f:ee: a4:f6:61:b7:e4:97:83:ba:68:fa:dd:bb:42:e4:6c: 53:ab:1e:01:a0:a3:00:89:5a:fc:06:54:8d:fe:f6: 31:6c:b8:20:e1:47:f4:8a:d3:8b:f4:67:af:2a:6a: 37:aa:77:77:e0:d6:7d:e1:01:51:9a:90:fc:3a:ec: 9f:01:09:f0:1d:92:23:e6:43:6a:72:e9:99:89:bc: 68:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A4:8E:47:D7:91:B1:83:C8:68:2D:C4:4B:7F:AC:67:78:10:BB:A3:81 X509v3 Authority Key Identifier: keyid:BC:0E:CF:DD:D0:81:CE:51:32:BE:C9:CF:DC:1A:39:0A:9A:F3:BC:BE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/f86a13bd-b79a-450e-9be3-3d5a03ab93b1/0/BC0ECFDDD081CE5132BEC9CFDC1A390A9AF3BCBE.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BC0ECFDDD081CE5132BEC9CFDC1A390A9AF3BCBE.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f86a13bd-b79a-450e-9be3-3d5a03ab93b1/0/BC0ECFDDD081CE5132BEC9CFDC1A390A9AF3BCBE.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 01:38:ad:56:89:25:ff:f0:ea:39:67:c1:c8:28:57:8b:d2:f3: 87:5e:00:75:e2:d1:53:ca:b5:21:20:73:5c:0d:f3:06:6d:8e: 76:3c:43:04:51:f9:01:6e:69:0b:05:84:ae:41:fa:a6:78:7e: 0b:d5:04:18:7f:6c:24:2c:28:e8:df:8c:fe:49:d4:72:65:98: 7b:87:ab:dd:68:3f:0a:d5:e5:e4:f3:cd:45:3b:fd:4c:63:3b: 49:5f:2a:39:71:d9:b0:87:3d:6c:0d:6d:9a:3c:a5:50:2f:ce: 13:3e:91:56:cd:b3:58:3c:4e:8b:f9:e3:ec:d5:d4:d2:64:a6: b8:2e:30:f7:2c:7f:53:f7:db:18:59:a0:51:81:3a:9b:7c:aa: 68:9d:7c:84:e4:86:ab:d7:93:ac:6b:d7:65:22:e5:f2:a9:f9: fa:8d:06:5d:58:a6:18:78:ce:cc:b9:90:ac:37:55:72:79:a2: e8:08:ea:5b:2a:cc:49:ff:b5:04:42:a3:f3:b5:5d:fa:34:d2: 59:26:ca:c4:ef:5f:6f:b1:7f:30:90:1f:c9:d0:37:df:29:56: 36:65:71:25:af:a2:80:c9:66:b4:60:f7:2a:76:70:aa:6e:2a: 5f:a8:80:81:b8:7b:21:17:ad:bc:e1:2e:9f:f3:64:36:0f:16: 4d:04:8a:ef -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUVKJK4aoVatOhASOB+9kXzl5k6/wwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkMwRUNGREREMDgxQ0U1MTMyQkVDOUNGREMxQTM5MEE5 QUYzQkNCRTAeFw0yNTEyMDMwMTU2MzFaFw0yNTEyMDYwOTQ2MzFaMDMxMTAvBgNV BAMTKEE0OEU0N0Q3OTFCMTgzQzg2ODJEQzQ0QjdGQUM2Nzc4MTBCQkEzODEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCXltg/5zZ/2x59gHKNmQpAimxA viNJDb+mgKwQy6rBSAKAEXUonXxIgEQ70zph9n+hoviJK5sd1AArd9adxgURFK0W IHzn/CsabC3R2JfbMCS5/urw5e9lLBHZkAGS8kBgnxxhnCFmMfZCRqGwkC5J7nEJ KYwj2mPTOcaq8uUfIuy3P3vdIricUFmRrvvIlcmN4zrQZAYFfRUmcGfhuQEYffng 6JTE2Xr9lLdaEFf/v8qP7qT2Ybfkl4O6aPrdu0LkbFOrHgGgowCJWvwGVI3+9jFs uCDhR/SK04v0Z68qajeqd3fg1n3hAVGakPw67J8BCfAdkiPmQ2py6ZmJvGjrAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUpI5H15Gxg8hoLcRLf6xneBC7o4EwHwYDVR0j BBgwFoAUvA7P3dCBzlEyvsnP3Bo5CprzvL4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m ODZhMTNiZC1iNzlhLTQ1MGUtOWJlMy0zZDVhMDNhYjkzYjEvMC9CQzBFQ0ZEREQw ODFDRTUxMzJCRUM5Q0ZEQzFBMzkwQTlBRjNCQ0JFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQkMwRUNGREREMDgxQ0U1MTMyQkVDOUNGREMxQTM5MEE5QUYz QkNCRS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZjg2YTEzYmQtYjc5YS00NTBlLTli ZTMtM2Q1YTAzYWI5M2IxLzAvQkMwRUNGREREMDgxQ0U1MTMyQkVDOUNGREMxQTM5 MEE5QUYzQkNCRS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAE4rVaJJf/w6jlnwcgoV4vS84deAHXi0VPK tSEgc1wN8wZtjnY8QwRR+QFuaQsFhK5B+qZ4fgvVBBh/bCQsKOjfjP5J1HJlmHuH q91oPwrV5eTzzUU7/UxjO0lfKjlx2bCHPWwNbZo8pVAvzhM+kVbNs1g8Tov54+zV 1NJkprguMPcsf1P32xhZoFGBOpt8qmidfITkhqvXk6xr12Ui5fKp+fqNBl1Yphh4 zsy5kKw3VXJ5ougI6lsqzEn/tQRCo/O1Xfo00lkmysTvX2+xfzCQH8nQN98pVjZl cSWvooDJZrRg9yp2cKpuKl+ogIG4eyEXrbzhLp/zZDYPFk0Eiu8= -----END CERTIFICATE-----Generated at Wed Dec 3 14:42:36 2025 by rpki-client