This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/fae24907-a6f2-4a55-aa6f-18c7db143fe8/0/BD6194D3C25B637B15DAEB654B288A451054ABE0.mft File: BD6194D3C25B637B15DAEB654B288A451054ABE0.mft (raw, json) Hash identifier: ba2Zenv/lXabT/sWtQgs/9EAogmURPAR2KlCnmu/PcE= Subject key identifier: 7A:BD:03:3E:AD:A0:74:BF:52:40:FF:EA:E1:65:60:51:80:90:0C:AA Authority key identifier: BD:61:94:D3:C2:5B:63:7B:15:DA:EB:65:4B:28:8A:45:10:54:AB:E0 Certificate issuer: /CN=BD6194D3C25B637B15DAEB654B288A451054ABE0 Certificate serial: 41AAFEC74C78683BC3698B33C4026DAA00316436 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BD6194D3C25B637B15DAEB654B288A451054ABE0.cer Subject info access: rsync://repo-rpki.idnic.net/repo/fae24907-a6f2-4a55-aa6f-18c7db143fe8/0/BD6194D3C25B637B15DAEB654B288A451054ABE0.mft Manifest number: 01CD Signing time: Tue 02 Dec 2025 22:11:15 +0000 Manifest this update: Tue 02 Dec 2025 22:06:15 +0000 Manifest next update: Sat 06 Dec 2025 02:34:15 +0000 Files and hashes: 1: 3130332e37392e3133302e302f32332d3233203d3e20313430343433.roa (hash: RNdh1+r+BNYLHAu4V1jupY7hG6iYrh06nO6HbqG1vXI=) 2: 3130332e37392e3133302e302f32342d3234203d3e20313430343433.roa (hash: BlB54vUebVCTB7wA7qoqMH+xgyxkQDhZWNMRec/AbvE=) 3: 3130332e37392e3133312e302f32342d3234203d3e20313430343433.roa (hash: 10mUGoiah4HNNhQPC/xIeaHPveRue0pYK34O0LI+OcA=) 4: BD6194D3C25B637B15DAEB654B288A451054ABE0.crl (hash: F3Ei/0rwGs1Tk84v08J7AdfFOUxtsmfma4fOVCBn0A4=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/fae24907-a6f2-4a55-aa6f-18c7db143fe8/0/BD6194D3C25B637B15DAEB654B288A451054ABE0.crl rsync://repo-rpki.idnic.net/repo/fae24907-a6f2-4a55-aa6f-18c7db143fe8/0/BD6194D3C25B637B15DAEB654B288A451054ABE0.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BD6194D3C25B637B15DAEB654B288A451054ABE0.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 06 Dec 2025 02:34:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 41:aa:fe:c7:4c:78:68:3b:c3:69:8b:33:c4:02:6d:aa:00:31:64:36 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BD6194D3C25B637B15DAEB654B288A451054ABE0 Validity Not Before: Dec 2 22:06:15 2025 GMT Not After : Dec 6 02:34:15 2025 GMT Subject: CN=7ABD033EADA074BF5240FFEAE165605180900CAA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:b3:1d:4c:23:6a:74:fe:cc:da:08:ad:e9:dc: be:ba:5e:6f:34:52:9a:4c:c4:8d:b3:e2:b1:0e:da: db:86:98:6f:17:c3:0d:86:c5:dc:39:5c:22:03:77: 03:7e:58:f7:33:51:17:aa:4d:23:81:c5:71:e8:01: 44:17:ff:1e:09:42:c3:5b:78:d7:5e:e0:fd:28:e7: da:bd:2f:00:27:d1:3a:15:34:ed:d5:99:27:7e:4d: e4:60:19:29:22:fa:07:f8:c8:4b:17:66:e8:03:ee: 38:cb:5f:fe:ca:d4:7e:a4:17:da:ae:b8:38:ae:74: c2:68:f4:5e:d2:75:c4:93:d4:73:d1:eb:ef:9e:c4: b4:e9:72:16:0c:91:ff:fe:24:70:08:ec:c0:45:7a: 7c:fd:3f:01:ac:8c:21:33:bd:88:5a:06:c1:69:f1: 73:f0:1f:e6:b8:fa:d6:ff:65:75:4d:c7:e2:3d:bd: 86:17:30:a6:59:92:fa:03:dc:9f:ed:c4:d2:b2:be: ae:a8:2b:dc:6c:dc:ac:b7:1f:dd:2d:da:46:c5:e6: 89:02:6c:c6:a1:40:1d:96:72:31:c4:da:b0:89:f9: d0:56:c8:ae:37:ba:71:fb:4b:54:23:6f:e2:0e:7e: 72:45:6c:b5:b3:b5:39:ce:1c:e5:f7:a0:b9:0c:b5: 2a:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7A:BD:03:3E:AD:A0:74:BF:52:40:FF:EA:E1:65:60:51:80:90:0C:AA X509v3 Authority Key Identifier: keyid:BD:61:94:D3:C2:5B:63:7B:15:DA:EB:65:4B:28:8A:45:10:54:AB:E0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/fae24907-a6f2-4a55-aa6f-18c7db143fe8/0/BD6194D3C25B637B15DAEB654B288A451054ABE0.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BD6194D3C25B637B15DAEB654B288A451054ABE0.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/fae24907-a6f2-4a55-aa6f-18c7db143fe8/0/BD6194D3C25B637B15DAEB654B288A451054ABE0.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b0:e6:24:cc:1b:46:a3:ef:63:11:ab:ca:0f:f4:1d:16:f2:5a: a1:4b:0e:27:32:e1:45:9e:46:c9:f8:3b:83:9b:6a:ea:24:1a: b0:3f:67:b5:48:ef:ae:7c:1f:d5:bd:36:45:0d:1a:bc:58:78: f0:9a:d4:33:7a:10:74:ff:11:29:e1:69:51:85:b6:bd:e0:e9: 67:44:4a:bc:6a:23:ed:40:7a:69:bc:43:76:0b:c9:07:db:96: ce:a9:d3:09:86:46:74:76:94:1c:d9:63:40:e6:8d:4a:cf:a5: 8f:00:89:8a:dd:28:9f:81:50:5d:73:3b:3c:0d:1e:0e:33:98: 00:af:0f:49:94:4d:c0:f8:2e:71:96:8b:e6:69:37:95:b5:91: 15:a2:42:9d:03:8b:f4:98:7c:79:7c:89:8a:71:db:d9:ff:9a: 56:23:27:b4:a2:78:d1:eb:32:44:e0:c4:69:05:22:70:11:76: b6:ec:22:c0:97:7d:20:65:8d:cd:99:37:59:e0:e8:8e:d4:2e: ff:bb:ca:a2:f0:5a:52:ce:58:81:81:0e:17:03:43:e9:d0:5a: fd:94:cb:0c:c7:5f:c3:cf:29:16:8d:14:87:a0:b4:1e:66:cf: 31:ca:78:32:86:ed:14:5d:c5:5b:77:75:61:bb:18:55:c2:3e: 93:6d:b6:8a -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUQar+x0x4aDvDaYszxAJtqgAxZDYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkQ2MTk0RDNDMjVCNjM3QjE1REFFQjY1NEIyODhBNDUx MDU0QUJFMDAeFw0yNTEyMDIyMjA2MTVaFw0yNTEyMDYwMjM0MTVaMDMxMTAvBgNV BAMTKDdBQkQwMzNFQURBMDc0QkY1MjQwRkZFQUUxNjU2MDUxODA5MDBDQUEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDksx1MI2p0/szaCK3p3L66Xm80 UppMxI2z4rEO2tuGmG8Xww2Gxdw5XCIDdwN+WPczUReqTSOBxXHoAUQX/x4JQsNb eNde4P0o59q9LwAn0ToVNO3VmSd+TeRgGSki+gf4yEsXZugD7jjLX/7K1H6kF9qu uDiudMJo9F7SdcST1HPR6++exLTpchYMkf/+JHAI7MBFenz9PwGsjCEzvYhaBsFp 8XPwH+a4+tb/ZXVNx+I9vYYXMKZZkvoD3J/txNKyvq6oK9xs3Ky3H90t2kbF5okC bMahQB2WcjHE2rCJ+dBWyK43unH7S1Qjb+IOfnJFbLWztTnOHOX3oLkMtSohAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUer0DPq2gdL9SQP/q4WVgUYCQDKowHwYDVR0j BBgwFoAUvWGU08JbY3sV2utlSyiKRRBUq+AwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m YWUyNDkwNy1hNmYyLTRhNTUtYWE2Zi0xOGM3ZGIxNDNmZTgvMC9CRDYxOTREM0My NUI2MzdCMTVEQUVCNjU0QjI4OEE0NTEwNTRBQkUwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQkQ2MTk0RDNDMjVCNjM3QjE1REFFQjY1NEIyODhBNDUxMDU0 QUJFMC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZmFlMjQ5MDctYTZmMi00YTU1LWFh NmYtMThjN2RiMTQzZmU4LzAvQkQ2MTk0RDNDMjVCNjM3QjE1REFFQjY1NEIyODhB NDUxMDU0QUJFMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALDmJMwbRqPvYxGryg/0HRbyWqFLDicy4UWe Rsn4O4ObauokGrA/Z7VI7658H9W9NkUNGrxYePCa1DN6EHT/ESnhaVGFtr3g6WdE SrxqI+1Aemm8Q3YLyQfbls6p0wmGRnR2lBzZY0DmjUrPpY8AiYrdKJ+BUF1zOzwN Hg4zmACvD0mUTcD4LnGWi+ZpN5W1kRWiQp0Di/SYfHl8iYpx29n/mlYjJ7SieNHr MkTgxGkFInARdrbsIsCXfSBljc2ZN1ng6I7ULv+7yqLwWlLOWIGBDhcDQ+nQWv2U ywzHX8PPKRaNFIegtB5mzzHKeDKG7RRdxVt3dWG7GFXCPpNttoo= -----END CERTIFICATE-----Generated at Wed Dec 3 14:43:41 2025 by rpki-client