This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/07deded1-d14e-4123-b5c9-c93a5997fc30/0/B6847B928C30800282D7BA8E337482DFF4DEC8A5.mft File: B6847B928C30800282D7BA8E337482DFF4DEC8A5.mft (raw, json) Hash identifier: SWKS0XGZBm4eFuyJqjz6E+MAzA/HB7y0qQvAPs2N5Sg= Subject key identifier: 08:8C:8E:1D:7D:4C:31:5D:F4:79:B7:CD:28:29:2B:A7:99:5B:8C:64 Authority key identifier: B6:84:7B:92:8C:30:80:02:82:D7:BA:8E:33:74:82:DF:F4:DE:C8:A5 Certificate issuer: /CN=B6847B928C30800282D7BA8E337482DFF4DEC8A5 Certificate serial: 3777CE984F905025D866C0B02ABB55E8A70CC96E Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B6847B928C30800282D7BA8E337482DFF4DEC8A5.cer Subject info access: rsync://repo-rpki.idnic.net/repo/07deded1-d14e-4123-b5c9-c93a5997fc30/0/B6847B928C30800282D7BA8E337482DFF4DEC8A5.mft Manifest number: 052E Signing time: Sat 06 Dec 2025 05:51:29 +0000 Manifest this update: Sat 06 Dec 2025 05:46:29 +0000 Manifest next update: Tue 09 Dec 2025 12:25:29 +0000 Files and hashes: 1: 323030313a6466363a343530303a3a2f34382d3438203d3e20313338303539.roa (hash: IoCq5Fr7ucJSiJXgyl0hLajgLtZdo657+jXfL09lCzQ=) 2: 3130332e3132312e3132332e302f32342d3234203d3e20313338303539.roa (hash: Zl03XVx57nbxitWYw7MeSszUElsg5oZ5jVn5EskWk+g=) 3: B6847B928C30800282D7BA8E337482DFF4DEC8A5.crl (hash: iQ9mRzcxGOBh8PkJrpinDKd//7LgF3HroYB1FjeHEzc=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/07deded1-d14e-4123-b5c9-c93a5997fc30/0/B6847B928C30800282D7BA8E337482DFF4DEC8A5.crl rsync://repo-rpki.idnic.net/repo/07deded1-d14e-4123-b5c9-c93a5997fc30/0/B6847B928C30800282D7BA8E337482DFF4DEC8A5.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B6847B928C30800282D7BA8E337482DFF4DEC8A5.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 09 Dec 2025 12:25:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 37:77:ce:98:4f:90:50:25:d8:66:c0:b0:2a:bb:55:e8:a7:0c:c9:6e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B6847B928C30800282D7BA8E337482DFF4DEC8A5 Validity Not Before: Dec 6 05:46:29 2025 GMT Not After : Dec 9 12:25:29 2025 GMT Subject: CN=088C8E1D7D4C315DF479B7CD28292BA7995B8C64 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:78:f2:c6:59:7b:ab:5b:5f:43:6a:84:cc:45: 12:e3:c7:99:a5:b3:03:12:58:5f:69:81:84:34:88: 5d:c7:f8:65:60:ca:d9:4f:d7:28:d3:2b:b4:7f:6d: dc:76:04:f9:a7:f2:57:f6:70:5d:0d:94:98:9a:99: 98:c3:5a:7e:bd:62:fb:05:23:a8:49:08:2e:4a:2e: c1:d4:9a:36:c2:e6:0c:eb:97:e9:6e:4b:51:29:ce: 07:20:ee:10:d1:c2:c2:b1:5a:00:3c:98:71:4d:8b: b2:92:47:52:4f:98:b5:b6:cf:2d:0d:c3:fa:e7:0a: 07:17:7e:fe:ed:c2:4c:b7:11:57:df:8d:c1:28:7a: c0:df:fc:c0:a9:1d:45:2f:15:09:fc:32:bf:14:cd: 50:37:d0:22:f9:e5:76:91:42:d7:b8:16:4c:d4:62: c2:b3:7a:7d:ee:b8:66:47:44:ba:6d:c9:0a:fc:d0: 33:0e:0d:50:a0:b8:1b:39:eb:e6:67:76:83:00:06: ab:6b:3f:a4:0a:80:90:1c:64:36:2e:a8:7e:e4:62: 3b:0c:47:6b:a7:ae:41:a7:3e:33:46:63:53:70:b6: 97:20:96:fe:c4:dc:67:2e:eb:68:37:49:cf:24:7a: 61:33:66:ad:23:c0:ca:18:3b:86:23:83:e1:32:40: a5:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 08:8C:8E:1D:7D:4C:31:5D:F4:79:B7:CD:28:29:2B:A7:99:5B:8C:64 X509v3 Authority Key Identifier: keyid:B6:84:7B:92:8C:30:80:02:82:D7:BA:8E:33:74:82:DF:F4:DE:C8:A5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/07deded1-d14e-4123-b5c9-c93a5997fc30/0/B6847B928C30800282D7BA8E337482DFF4DEC8A5.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B6847B928C30800282D7BA8E337482DFF4DEC8A5.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/07deded1-d14e-4123-b5c9-c93a5997fc30/0/B6847B928C30800282D7BA8E337482DFF4DEC8A5.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8c:3a:54:38:01:61:86:23:73:7c:ae:43:9d:1b:b0:4e:b6:cd: bc:4e:ae:f4:bd:24:e7:19:5f:51:0c:a7:ca:a8:d8:61:e0:1f: 40:11:a2:3c:ea:73:6a:5f:77:6f:2b:2a:3e:91:14:39:a1:01: 96:9d:21:a0:ec:a7:15:4d:10:8f:2b:c0:57:67:96:65:bd:20: 3e:db:e5:48:07:ee:5e:e3:69:94:d1:31:58:b7:eb:8f:e0:50: 54:c8:fd:57:73:e4:eb:2d:88:cc:4a:f6:d0:f8:3d:4e:a4:37: 11:1f:cf:e4:74:58:d2:61:6c:40:7d:01:f6:45:37:b4:0b:23: 1d:68:23:89:29:7c:b7:78:4e:8d:e5:e1:5c:29:4f:5d:48:24: ee:b8:1b:3f:59:f7:e8:05:8e:39:71:9f:a8:7a:46:c9:d8:8b: 21:bf:0a:07:0c:87:71:1a:67:48:db:e6:18:ac:28:d6:9d:f3: 66:1a:97:f9:56:21:07:10:7c:bd:ee:8b:57:c6:80:f8:34:77: 4c:a4:2a:7d:13:46:76:8c:9a:3a:9e:98:83:83:e0:0d:f6:2b: a9:01:e4:76:c7:d6:58:c2:9a:65:ea:9c:4a:e5:06:4d:27:93: f7:af:f0:88:13:71:1c:b0:f8:5e:9f:0b:39:57:8b:20:4c:20: dd:eb:0c:b5 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUN3fOmE+QUCXYZsCwKrtV6KcMyW4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjY4NDdCOTI4QzMwODAwMjgyRDdCQThFMzM3NDgyREZG NERFQzhBNTAeFw0yNTEyMDYwNTQ2MjlaFw0yNTEyMDkxMjI1MjlaMDMxMTAvBgNV BAMTKDA4OEM4RTFEN0Q0QzMxNURGNDc5QjdDRDI4MjkyQkE3OTk1QjhDNjQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDdePLGWXurW19DaoTMRRLjx5ml swMSWF9pgYQ0iF3H+GVgytlP1yjTK7R/bdx2BPmn8lf2cF0NlJiamZjDWn69YvsF I6hJCC5KLsHUmjbC5gzrl+luS1Epzgcg7hDRwsKxWgA8mHFNi7KSR1JPmLW2zy0N w/rnCgcXfv7twky3EVffjcEoesDf/MCpHUUvFQn8Mr8UzVA30CL55XaRQte4FkzU YsKzen3uuGZHRLptyQr80DMODVCguBs56+ZndoMABqtrP6QKgJAcZDYuqH7kYjsM R2unrkGnPjNGY1Nwtpcglv7E3Gcu62g3Sc8kemEzZq0jwMoYO4Yjg+EyQKW7AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUCIyOHX1MMV30ebfNKCkrp5lbjGQwHwYDVR0j BBgwFoAUtoR7kowwgAKC17qOM3SC3/TeyKUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w N2RlZGVkMS1kMTRlLTQxMjMtYjVjOS1jOTNhNTk5N2ZjMzAvMC9CNjg0N0I5MjhD MzA4MDAyODJEN0JBOEUzMzc0ODJERkY0REVDOEE1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQjY4NDdCOTI4QzMwODAwMjgyRDdCQThFMzM3NDgyREZGNERF QzhBNS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMDdkZWRlZDEtZDE0ZS00MTIzLWI1 YzktYzkzYTU5OTdmYzMwLzAvQjY4NDdCOTI4QzMwODAwMjgyRDdCQThFMzM3NDgy REZGNERFQzhBNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIw6VDgBYYYjc3yuQ50bsE62zbxOrvS9JOcZ X1EMp8qo2GHgH0ARojzqc2pfd28rKj6RFDmhAZadIaDspxVNEI8rwFdnlmW9ID7b 5UgH7l7jaZTRMVi364/gUFTI/Vdz5OstiMxK9tD4PU6kNxEfz+R0WNJhbEB9AfZF N7QLIx1oI4kpfLd4To3l4VwpT11IJO64Gz9Z9+gFjjlxn6h6RsnYiyG/CgcMh3Ea Z0jb5hisKNad82Yal/lWIQcQfL3ui1fGgPg0d0ykKn0TRnaMmjqemIOD4A32K6kB 5HbH1ljCmmXqnErlBk0nk/ev8IgTcRyw+F6fCzlXiyBMIN3rDLU= -----END CERTIFICATE-----Generated at Sun Dec 7 09:21:17 2025 by rpki-client