This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/0e05a1ce-849f-417c-b673-fdd33f0d7447/0/B0AAB728B88975526C1741CCA8673CBC88F7697C.mft File: B0AAB728B88975526C1741CCA8673CBC88F7697C.mft (raw, json) Hash identifier: ry4q2I8sqKfpQJaHZS6NR3/7Oq0RVObPdwTvTOXcHws= Subject key identifier: D2:33:2A:53:92:A3:27:9E:CB:C0:D0:07:8C:43:39:F3:1F:F8:3E:A7 Authority key identifier: B0:AA:B7:28:B8:89:75:52:6C:17:41:CC:A8:67:3C:BC:88:F7:69:7C Certificate issuer: /CN=B0AAB728B88975526C1741CCA8673CBC88F7697C Certificate serial: 6BCAAC29FEC455483125A1EE06AFE8EED71DF047 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B0AAB728B88975526C1741CCA8673CBC88F7697C.cer Subject info access: rsync://repo-rpki.idnic.net/repo/0e05a1ce-849f-417c-b673-fdd33f0d7447/0/B0AAB728B88975526C1741CCA8673CBC88F7697C.mft Manifest number: 03B4 Signing time: Mon 15 Dec 2025 23:41:16 +0000 Manifest this update: Mon 15 Dec 2025 23:36:16 +0000 Manifest next update: Fri 19 Dec 2025 06:23:16 +0000 Files and hashes: 1: B0AAB728B88975526C1741CCA8673CBC88F7697C.crl (hash: N6XQ9MPIMvbUSntGYWXPA871mdVAxlJi2+JpwLRL+RE=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/0e05a1ce-849f-417c-b673-fdd33f0d7447/0/B0AAB728B88975526C1741CCA8673CBC88F7697C.crl rsync://repo-rpki.idnic.net/repo/0e05a1ce-849f-417c-b673-fdd33f0d7447/0/B0AAB728B88975526C1741CCA8673CBC88F7697C.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B0AAB728B88975526C1741CCA8673CBC88F7697C.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 19 Dec 2025 06:23:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6b:ca:ac:29:fe:c4:55:48:31:25:a1:ee:06:af:e8:ee:d7:1d:f0:47 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B0AAB728B88975526C1741CCA8673CBC88F7697C Validity Not Before: Dec 15 23:36:16 2025 GMT Not After : Dec 19 06:23:16 2025 GMT Subject: CN=D2332A5392A3279ECBC0D0078C4339F31FF83EA7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:88:d7:ad:3b:06:d8:28:d5:03:e5:0c:73:18: bb:8c:de:a6:1b:ee:16:c2:c6:f0:ad:47:76:46:46: 0b:e2:33:d8:12:17:d2:93:ab:e6:48:97:94:02:60: f3:31:78:c6:e8:6d:c0:e8:ec:de:8f:02:97:09:9d: d1:14:48:35:2b:76:df:0d:4c:b8:c7:b8:45:77:83: 32:f6:b1:e9:57:18:0c:a3:fd:2f:6b:18:8e:d8:5c: 88:72:f9:c7:a2:d7:e8:5f:e4:48:71:08:00:20:c7: 8f:6e:dd:37:87:c8:07:59:33:4d:37:38:e9:ff:2c: 0c:56:6f:c4:dd:22:2b:8d:eb:ed:30:b3:fa:ee:0e: 1d:22:c8:61:82:fa:49:9c:b5:cd:62:b5:95:99:32: c3:8e:c8:e1:d1:ae:f9:60:14:59:da:56:1b:0b:b3: 54:6e:69:0d:ed:a9:a4:f8:9f:42:7e:76:47:80:29: b4:f1:3d:fd:34:8a:2a:a9:a6:45:41:e8:41:88:e0: cf:65:f4:d8:e4:a6:fd:60:03:51:60:6c:10:e4:e6: 59:3d:16:5e:a0:e2:20:ab:d1:49:4a:1a:e4:15:0b: 7c:25:5c:9c:e6:90:ac:69:a4:ab:9f:18:93:40:02: 2d:d6:1e:bb:9e:ea:d2:2b:57:01:29:2d:52:88:75: 7e:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:33:2A:53:92:A3:27:9E:CB:C0:D0:07:8C:43:39:F3:1F:F8:3E:A7 X509v3 Authority Key Identifier: keyid:B0:AA:B7:28:B8:89:75:52:6C:17:41:CC:A8:67:3C:BC:88:F7:69:7C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/0e05a1ce-849f-417c-b673-fdd33f0d7447/0/B0AAB728B88975526C1741CCA8673CBC88F7697C.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B0AAB728B88975526C1741CCA8673CBC88F7697C.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/0e05a1ce-849f-417c-b673-fdd33f0d7447/0/B0AAB728B88975526C1741CCA8673CBC88F7697C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9a:61:97:b3:bf:14:0c:38:e6:89:f9:b4:20:4b:ad:66:6a:6c: f9:33:f5:53:92:96:2c:6d:ff:0c:05:af:c1:58:6d:f8:5e:5d: 17:58:ac:41:c5:29:f5:fb:85:8f:87:04:45:45:5d:3e:bc:df: a0:80:0d:fb:8a:ff:4e:e8:1b:04:f1:e6:6a:f5:70:17:f6:26: 02:74:02:5b:47:93:23:5e:8e:ed:8d:f0:04:1c:af:b8:33:2b: 40:a9:9c:dc:aa:0f:1c:ff:14:d0:0e:9b:7f:dc:55:7b:21:19: a1:2b:21:07:6f:b0:29:bf:99:a7:d0:83:de:8c:5c:5d:22:26: 4f:a3:ce:59:1e:d5:4c:01:cc:2f:2a:3d:9f:26:a5:aa:ec:98: 8f:69:65:b1:cf:10:e3:39:e5:fa:ee:4a:e5:2d:7d:1d:71:1c: 83:a8:b2:aa:d9:50:f9:33:cb:11:1a:f3:2f:be:5d:4f:a4:b5: 89:19:31:fa:fa:f6:51:e8:bd:74:a6:05:a1:09:2b:e1:94:50: 57:91:8a:b2:84:1f:38:69:4e:71:03:05:d1:0a:46:8c:53:7f: 47:eb:95:13:b3:75:e0:5c:43:a2:7a:ad:f0:b8:4a:5d:a1:2d: 30:b0:13:0e:be:28:4c:b1:33:a7:cf:57:ad:c4:c7:98:d1:dd: f6:3f:b7:dc -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUa8qsKf7EVUgxJaHuBq/o7tcd8EcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjBBQUI3MjhCODg5NzU1MjZDMTc0MUNDQTg2NzNDQkM4 OEY3Njk3QzAeFw0yNTEyMTUyMzM2MTZaFw0yNTEyMTkwNjIzMTZaMDMxMTAvBgNV BAMTKEQyMzMyQTUzOTJBMzI3OUVDQkMwRDAwNzhDNDMzOUYzMUZGODNFQTcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC1iNetOwbYKNUD5QxzGLuM3qYb 7hbCxvCtR3ZGRgviM9gSF9KTq+ZIl5QCYPMxeMbobcDo7N6PApcJndEUSDUrdt8N TLjHuEV3gzL2selXGAyj/S9rGI7YXIhy+cei1+hf5EhxCAAgx49u3TeHyAdZM003 OOn/LAxWb8TdIiuN6+0ws/ruDh0iyGGC+kmctc1itZWZMsOOyOHRrvlgFFnaVhsL s1RuaQ3tqaT4n0J+dkeAKbTxPf00iiqppkVB6EGI4M9l9Njkpv1gA1FgbBDk5lk9 Fl6g4iCr0UlKGuQVC3wlXJzmkKxppKufGJNAAi3WHrue6tIrVwEpLVKIdX5RAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU0jMqU5KjJ57LwNAHjEM58x/4PqcwHwYDVR0j BBgwFoAUsKq3KLiJdVJsF0HMqGc8vIj3aXwwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w ZTA1YTFjZS04NDlmLTQxN2MtYjY3My1mZGQzM2YwZDc0NDcvMC9CMEFBQjcyOEI4 ODk3NTUyNkMxNzQxQ0NBODY3M0NCQzg4Rjc2OTdDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQjBBQUI3MjhCODg5NzU1MjZDMTc0MUNDQTg2NzNDQkM4OEY3 Njk3Qy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMGUwNWExY2UtODQ5Zi00MTdjLWI2 NzMtZmRkMzNmMGQ3NDQ3LzAvQjBBQUI3MjhCODg5NzU1MjZDMTc0MUNDQTg2NzND QkM4OEY3Njk3Qy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJphl7O/FAw45on5tCBLrWZqbPkz9VOSlixt /wwFr8FYbfheXRdYrEHFKfX7hY+HBEVFXT6836CADfuK/07oGwTx5mr1cBf2JgJ0 AltHkyNeju2N8AQcr7gzK0CpnNyqDxz/FNAOm3/cVXshGaErIQdvsCm/mafQg96M XF0iJk+jzlke1UwBzC8qPZ8mparsmI9pZbHPEOM55fruSuUtfR1xHIOosqrZUPkz yxEa8y++XU+ktYkZMfr69lHovXSmBaEJK+GUUFeRirKEHzhpTnEDBdEKRoxTf0fr lROzdeBcQ6J6rfC4Sl2hLTCwEw6+KEyxM6fPV63Ex5jR3fY/t9w= -----END CERTIFICATE-----Generated at Tue Dec 16 17:56:12 2025 by rpki-client