This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/0234ef1d-734d-4c71-8ba7-d31e168b632c/0/BF38DDD5DA2ABF08EB1DD8D87B566F36EE73F307.mft File: BF38DDD5DA2ABF08EB1DD8D87B566F36EE73F307.mft (raw, json) Hash identifier: 8EV98J4zNMrCGbO2zrklLWQERMRJvHpyYJExSj16+Wk= Subject key identifier: B2:4D:CA:E9:65:12:4E:61:2D:37:FC:81:0D:31:B3:DA:B9:BF:97:26 Authority key identifier: BF:38:DD:D5:DA:2A:BF:08:EB:1D:D8:D8:7B:56:6F:36:EE:73:F3:07 Certificate issuer: /CN=BF38DDD5DA2ABF08EB1DD8D87B566F36EE73F307 Certificate serial: 15B8ECC67832C1CB59E498D9217AD649929F4F37 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BF38DDD5DA2ABF08EB1DD8D87B566F36EE73F307.cer Subject info access: rsync://repo-rpki.idnic.net/repo/0234ef1d-734d-4c71-8ba7-d31e168b632c/0/BF38DDD5DA2ABF08EB1DD8D87B566F36EE73F307.mft Manifest number: 0233 Signing time: Sat 06 Dec 2025 15:51:30 +0000 Manifest this update: Sat 06 Dec 2025 15:46:30 +0000 Manifest next update: Tue 09 Dec 2025 16:29:30 +0000 Files and hashes: 1: 3130332e3138392e36332e302f32342d3234203d3e20313439373436.roa (hash: KkYyNZh9ZDbNoVpyOM3q+Wq6B9uj3EG/cdRvxrx75Ic=) 2: BF38DDD5DA2ABF08EB1DD8D87B566F36EE73F307.crl (hash: kvsKpzuoOSJdoPx+Y8ZMFkQQKr0NYZD58vbL07/6Mo0=) 3: 3130332e3138392e36322e302f32342d3234203d3e20313439373436.roa (hash: 48e011jsIhGivkdBp8Labkdz5aYvN7kU5niI+PWaloc=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/0234ef1d-734d-4c71-8ba7-d31e168b632c/0/BF38DDD5DA2ABF08EB1DD8D87B566F36EE73F307.crl rsync://repo-rpki.idnic.net/repo/0234ef1d-734d-4c71-8ba7-d31e168b632c/0/BF38DDD5DA2ABF08EB1DD8D87B566F36EE73F307.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BF38DDD5DA2ABF08EB1DD8D87B566F36EE73F307.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 09 Dec 2025 15:57:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 15:b8:ec:c6:78:32:c1:cb:59:e4:98:d9:21:7a:d6:49:92:9f:4f:37 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BF38DDD5DA2ABF08EB1DD8D87B566F36EE73F307 Validity Not Before: Dec 6 15:46:30 2025 GMT Not After : Dec 9 16:29:30 2025 GMT Subject: CN=B24DCAE965124E612D37FC810D31B3DAB9BF9726 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:78:d2:98:07:68:cd:66:c8:0c:a2:1e:5c:7e: 29:7a:2e:ac:0a:4b:e5:bf:f2:43:c5:a5:8c:74:60: 1b:54:c3:15:0c:26:5c:d7:f5:03:a4:35:38:54:f4: 17:66:3b:2a:09:35:a9:09:9f:d0:7a:55:7d:40:c7: b4:bb:da:82:00:e9:f4:73:0b:84:6a:d6:47:1f:7b: 83:c6:dc:85:d4:48:33:78:ff:06:82:64:38:75:f0: 77:ef:e6:78:5b:26:60:76:51:75:aa:2d:7c:b8:7f: 0d:db:2e:a6:90:3c:43:4c:88:e6:4e:c2:c6:61:06: 45:82:2f:14:f9:ec:ff:90:52:2b:39:a1:fe:4b:cc: 78:e1:fd:99:66:47:c5:d8:61:d7:a2:13:e8:52:cc: da:ef:12:77:4f:78:c2:c6:76:38:70:10:58:e6:ba: 8c:15:a8:2b:07:65:02:7e:a1:5d:d8:ea:71:3b:b5: ed:71:a6:27:ce:02:fe:d2:f2:6c:ae:2c:55:d5:2c: 29:2f:fb:a8:c6:c1:31:ce:9c:53:d8:cc:5e:c5:b5: 9a:08:b4:cb:43:38:a3:c8:5a:c5:92:d8:0d:ab:7e: 9b:0f:f4:f5:76:88:54:2e:90:db:bb:27:8c:12:c8: a2:da:01:2a:ef:cc:94:bc:84:61:18:bf:3b:0a:20: 40:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:4D:CA:E9:65:12:4E:61:2D:37:FC:81:0D:31:B3:DA:B9:BF:97:26 X509v3 Authority Key Identifier: keyid:BF:38:DD:D5:DA:2A:BF:08:EB:1D:D8:D8:7B:56:6F:36:EE:73:F3:07 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/0234ef1d-734d-4c71-8ba7-d31e168b632c/0/BF38DDD5DA2ABF08EB1DD8D87B566F36EE73F307.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BF38DDD5DA2ABF08EB1DD8D87B566F36EE73F307.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/0234ef1d-734d-4c71-8ba7-d31e168b632c/0/BF38DDD5DA2ABF08EB1DD8D87B566F36EE73F307.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 81:29:6e:04:a9:38:e4:41:98:6a:2e:90:1a:4b:3c:f3:59:42: b6:0c:d9:26:f9:ec:02:63:e6:44:1c:f3:6b:a3:bd:d3:de:f6: ca:41:11:7d:68:bf:13:70:a3:04:d6:c0:62:97:47:94:34:c7: 79:29:92:49:86:28:41:a7:97:b6:5f:89:0f:30:f6:61:f9:e0: f1:14:91:46:66:76:83:49:ef:09:63:5b:68:e7:53:84:16:85: ac:a8:7d:75:f3:46:4e:b7:23:0e:3b:b8:62:d9:be:92:d5:dc: c8:7f:c5:3d:5d:2c:2f:ea:47:03:54:8c:50:20:ec:7b:ef:52: 2b:2f:1f:ec:a7:12:d3:3b:bf:d4:c7:47:fc:c7:b1:63:db:99: 81:40:27:78:69:54:ea:de:a7:f7:bb:bf:84:2c:1f:f7:ef:c6: 9d:50:18:81:32:4f:d1:ca:a4:8c:d5:0f:e4:6b:6a:ef:9d:3d: a7:b7:21:b3:64:2a:fd:d9:52:78:b6:c9:08:56:47:99:23:8a: c4:fb:87:2c:fa:b6:a8:fd:fe:2d:71:c4:b7:4b:ab:3f:3c:37: 61:fe:1b:09:a2:0e:c0:f6:ea:d8:31:b5:d2:5f:4a:53:9a:54: fc:9b:a3:0a:51:5f:33:f6:0e:1c:ad:89:4f:a5:9d:bf:69:18: 32:b9:a6:76 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUFbjsxngywctZ5JjZIXrWSZKfTzcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkYzOERERDVEQTJBQkYwOEVCMUREOEQ4N0I1NjZGMzZF RTczRjMwNzAeFw0yNTEyMDYxNTQ2MzBaFw0yNTEyMDkxNjI5MzBaMDMxMTAvBgNV BAMTKEIyNERDQUU5NjUxMjRFNjEyRDM3RkM4MTBEMzFCM0RBQjlCRjk3MjYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCveNKYB2jNZsgMoh5cfil6LqwK S+W/8kPFpYx0YBtUwxUMJlzX9QOkNThU9BdmOyoJNakJn9B6VX1Ax7S72oIA6fRz C4Rq1kcfe4PG3IXUSDN4/waCZDh18Hfv5nhbJmB2UXWqLXy4fw3bLqaQPENMiOZO wsZhBkWCLxT57P+QUis5of5LzHjh/ZlmR8XYYdeiE+hSzNrvEndPeMLGdjhwEFjm uowVqCsHZQJ+oV3Y6nE7te1xpifOAv7S8myuLFXVLCkv+6jGwTHOnFPYzF7FtZoI tMtDOKPIWsWS2A2rfpsP9PV2iFQukNu7J4wSyKLaASrvzJS8hGEYvzsKIECJAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUsk3K6WUSTmEtN/yBDTGz2rm/lyYwHwYDVR0j BBgwFoAUvzjd1doqvwjrHdjYe1ZvNu5z8wcwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w MjM0ZWYxZC03MzRkLTRjNzEtOGJhNy1kMzFlMTY4YjYzMmMvMC9CRjM4RERENURB MkFCRjA4RUIxREQ4RDg3QjU2NkYzNkVFNzNGMzA3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQkYzOERERDVEQTJBQkYwOEVCMUREOEQ4N0I1NjZGMzZFRTcz RjMwNy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMDIzNGVmMWQtNzM0ZC00YzcxLThi YTctZDMxZTE2OGI2MzJjLzAvQkYzOERERDVEQTJBQkYwOEVCMUREOEQ4N0I1NjZG MzZFRTczRjMwNy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIEpbgSpOORBmGoukBpLPPNZQrYM2Sb57AJj 5kQc82ujvdPe9spBEX1ovxNwowTWwGKXR5Q0x3kpkkmGKEGnl7ZfiQ8w9mH54PEU kUZmdoNJ7wljW2jnU4QWhayofXXzRk63Iw47uGLZvpLV3Mh/xT1dLC/qRwNUjFAg 7HvvUisvH+ynEtM7v9THR/zHsWPbmYFAJ3hpVOrep/e7v4QsH/fvxp1QGIEyT9HK pIzVD+Rrau+dPae3IbNkKv3ZUni2yQhWR5kjisT7hyz6tqj9/i1xxLdLqz88N2H+ GwmiDsD26tgxtdJfSlOaVPybowpRXzP2DhytiU+lnb9pGDK5pnY= -----END CERTIFICATE-----Generated at Sat Dec 6 23:58:43 2025 by rpki-client