This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/060ce733-77f4-4e1d-b5ec-61ede4da074d/0/BE2A9EDC8C556D4DD7846892612E0BED3FFFB52B.mft File: BE2A9EDC8C556D4DD7846892612E0BED3FFFB52B.mft (raw, json) Hash identifier: BfStNCOpKk4dfxEsLo5p/baHe2NHzJ3mWm0xeTzkcxw= Subject key identifier: 99:40:8B:09:8F:AA:6C:44:2D:47:37:EB:76:FE:F9:2D:5A:C4:0D:EE Authority key identifier: BE:2A:9E:DC:8C:55:6D:4D:D7:84:68:92:61:2E:0B:ED:3F:FF:B5:2B Certificate issuer: /CN=BE2A9EDC8C556D4DD7846892612E0BED3FFFB52B Certificate serial: 50AC5BB02E881980E3A351F9876AA6B821CEA75F Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BE2A9EDC8C556D4DD7846892612E0BED3FFFB52B.cer Subject info access: rsync://repo-rpki.idnic.net/repo/060ce733-77f4-4e1d-b5ec-61ede4da074d/0/BE2A9EDC8C556D4DD7846892612E0BED3FFFB52B.mft Manifest number: 0350 Signing time: Fri 05 Dec 2025 09:11:41 +0000 Manifest this update: Fri 05 Dec 2025 09:06:41 +0000 Manifest next update: Mon 08 Dec 2025 16:30:41 +0000 Files and hashes: 1: 3130332e3232362e34382e302f32322d3232203d3e203539323733.roa (hash: NVnL3gu/ETV/ZZkGXx0LBYWbHfOXol4OHsqTQpLumLs=) 2: BE2A9EDC8C556D4DD7846892612E0BED3FFFB52B.crl (hash: bSOIbxO4OshJIzHVln15d23GX+zx8ULo/nbzoiBX86Y=) 3: 3130332e3232362e34382e302f32342d3234203d3e203539323733.roa (hash: 2RhwyxU2ZZMzvcv7V8AkytYIscjSPeyUgoz7RilYeSY=) 4: 3130332e3232362e35302e302f32342d3234203d3e203539323733.roa (hash: ImyXAYYU6gxFlWNkFMZjYF3LgN4oXFfG1+SCVAdQsYE=) 5: 3130332e3232362e34392e302f32342d3234203d3e203539323733.roa (hash: Cv0EMC5062htKdHyxcMyy6exUpE5aD8gtMnGLSz9Wog=) 6: 3130332e3232362e35312e302f32342d3234203d3e203539323733.roa (hash: vEMXCI3M8VvAH47LiF9RDbq7pXkdLmDpmzWuC+Jv+wQ=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/060ce733-77f4-4e1d-b5ec-61ede4da074d/0/BE2A9EDC8C556D4DD7846892612E0BED3FFFB52B.crl rsync://repo-rpki.idnic.net/repo/060ce733-77f4-4e1d-b5ec-61ede4da074d/0/BE2A9EDC8C556D4DD7846892612E0BED3FFFB52B.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BE2A9EDC8C556D4DD7846892612E0BED3FFFB52B.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 08 Dec 2025 16:30:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 50:ac:5b:b0:2e:88:19:80:e3:a3:51:f9:87:6a:a6:b8:21:ce:a7:5f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BE2A9EDC8C556D4DD7846892612E0BED3FFFB52B Validity Not Before: Dec 5 09:06:41 2025 GMT Not After : Dec 8 16:30:41 2025 GMT Subject: CN=99408B098FAA6C442D4737EB76FEF92D5AC40DEE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:74:c9:e8:b0:39:42:ec:96:9e:40:03:a7:7e: 58:e2:5c:9a:a2:50:f0:79:fc:4d:55:b1:7a:bc:8b: 7b:4a:77:86:ec:ed:e7:40:fe:c7:4c:31:a3:02:1f: 01:f0:82:68:86:97:03:79:fa:e5:d2:8c:c0:12:a0: c1:ae:27:8a:96:d8:d4:4f:97:5c:54:50:aa:20:09: ae:01:f2:3d:cf:0c:6f:0f:f8:95:b4:53:d2:59:68: 47:98:84:a5:3c:64:78:89:71:7a:1f:eb:10:2e:3a: a3:20:6b:e7:04:a3:21:e6:5d:90:d7:1a:9a:68:bb: 5b:fc:49:4e:98:bd:a5:94:b2:ea:a6:cf:af:a0:a0: 2a:2b:b5:9f:27:cd:92:93:b9:51:18:f7:4a:4e:a5: 69:ac:52:00:8b:40:91:0e:fa:e5:23:d4:e2:54:50: 5d:97:a5:ee:ff:cd:ad:1b:06:61:e7:07:db:c4:f6: 3d:13:ab:4a:50:ed:51:1a:2d:84:06:85:3d:79:55: c5:a0:bf:54:3d:cf:95:f1:b1:b2:2c:a4:e8:6f:f8: d0:09:29:db:10:96:bd:f7:c6:80:7c:8f:20:6f:40: 74:9e:ba:b8:6e:ed:84:b7:b2:b5:a3:25:55:1b:09: 75:f3:69:68:a4:0d:5d:79:94:91:07:a3:ba:46:94: a7:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:40:8B:09:8F:AA:6C:44:2D:47:37:EB:76:FE:F9:2D:5A:C4:0D:EE X509v3 Authority Key Identifier: keyid:BE:2A:9E:DC:8C:55:6D:4D:D7:84:68:92:61:2E:0B:ED:3F:FF:B5:2B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/060ce733-77f4-4e1d-b5ec-61ede4da074d/0/BE2A9EDC8C556D4DD7846892612E0BED3FFFB52B.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BE2A9EDC8C556D4DD7846892612E0BED3FFFB52B.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/060ce733-77f4-4e1d-b5ec-61ede4da074d/0/BE2A9EDC8C556D4DD7846892612E0BED3FFFB52B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 07:18:6f:6f:9d:63:52:d9:40:4c:bd:74:e9:00:7f:3e:3e:36: 0e:a0:fe:c0:eb:38:4a:58:e9:44:0f:d6:48:0f:c2:cb:d6:4f: 67:dd:2b:aa:3b:81:6a:c6:0b:64:82:d5:0b:f6:c4:1f:e9:31: ff:98:72:26:d8:7a:ba:14:6f:a4:69:f4:86:82:54:d2:20:f2: 14:6b:09:3a:3c:a4:73:c2:2e:b4:e2:24:5b:30:53:4b:f1:e9: af:7f:3c:6e:cc:85:3b:74:49:28:34:f5:bd:3c:89:f3:f7:c7: 1e:64:ba:03:7e:a8:7a:58:20:86:7d:be:45:11:91:8b:d5:11: bd:f9:20:42:df:03:aa:50:10:91:b1:65:85:48:d7:e9:4e:91: af:06:08:82:36:6e:ca:34:97:f2:e2:4b:a9:79:04:0a:ad:2e: 60:b2:81:ec:f3:9a:46:2a:79:f9:64:7b:5f:c4:e1:3a:be:fb: b8:c5:07:c5:34:92:c3:37:61:af:b0:61:e7:ae:3f:69:6f:c4: 73:df:f6:7b:5c:7c:8d:27:dd:61:0f:50:99:72:98:31:17:e6: c1:de:c7:45:d6:a3:6d:e1:de:b7:86:ec:c2:0e:fc:d8:ea:6f: 25:36:1d:06:16:76:2c:6e:ac:76:9d:56:94:48:82:1d:1c:36: c8:82:8c:df -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUUKxbsC6IGYDjo1H5h2qmuCHOp18wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkUyQTlFREM4QzU1NkQ0REQ3ODQ2ODkyNjEyRTBCRUQz RkZGQjUyQjAeFw0yNTEyMDUwOTA2NDFaFw0yNTEyMDgxNjMwNDFaMDMxMTAvBgNV BAMTKDk5NDA4QjA5OEZBQTZDNDQyRDQ3MzdFQjc2RkVGOTJENUFDNDBERUUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCvdMnosDlC7JaeQAOnfljiXJqi UPB5/E1VsXq8i3tKd4bs7edA/sdMMaMCHwHwgmiGlwN5+uXSjMASoMGuJ4qW2NRP l1xUUKogCa4B8j3PDG8P+JW0U9JZaEeYhKU8ZHiJcXof6xAuOqMga+cEoyHmXZDX Gppou1v8SU6YvaWUsuqmz6+goCortZ8nzZKTuVEY90pOpWmsUgCLQJEO+uUj1OJU UF2Xpe7/za0bBmHnB9vE9j0Tq0pQ7VEaLYQGhT15VcWgv1Q9z5XxsbIspOhv+NAJ KdsQlr33xoB8jyBvQHSeurhu7YS3srWjJVUbCXXzaWikDV15lJEHo7pGlKchAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUmUCLCY+qbEQtRzfrdv75LVrEDe4wHwYDVR0j BBgwFoAUviqe3IxVbU3XhGiSYS4L7T//tSswDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w NjBjZTczMy03N2Y0LTRlMWQtYjVlYy02MWVkZTRkYTA3NGQvMC9CRTJBOUVEQzhD NTU2RDRERDc4NDY4OTI2MTJFMEJFRDNGRkZCNTJCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQkUyQTlFREM4QzU1NkQ0REQ3ODQ2ODkyNjEyRTBCRUQzRkZG QjUyQi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMDYwY2U3MzMtNzdmNC00ZTFkLWI1 ZWMtNjFlZGU0ZGEwNzRkLzAvQkUyQTlFREM4QzU1NkQ0REQ3ODQ2ODkyNjEyRTBC RUQzRkZGQjUyQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAcYb2+dY1LZQEy9dOkAfz4+Ng6g/sDrOEpY 6UQP1kgPwsvWT2fdK6o7gWrGC2SC1Qv2xB/pMf+YcibYeroUb6Rp9IaCVNIg8hRr CTo8pHPCLrTiJFswU0vx6a9/PG7MhTt0SSg09b08ifP3xx5kugN+qHpYIIZ9vkUR kYvVEb35IELfA6pQEJGxZYVI1+lOka8GCII2bso0l/LiS6l5BAqtLmCygezzmkYq eflke1/E4Tq++7jFB8U0ksM3Ya+wYeeuP2lvxHPf9ntcfI0n3WEPUJlymDEX5sHe x0XWo23h3reG7MIO/NjqbyU2HQYWdixurHadVpRIgh0cNsiCjN8= -----END CERTIFICATE-----Generated at Sat Dec 6 23:24:58 2025 by rpki-client