This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/0e05a1ce-849f-417c-b673-fdd33f0d7447/0/B0AAB728B88975526C1741CCA8673CBC88F7697C.mft File: B0AAB728B88975526C1741CCA8673CBC88F7697C.mft (raw, json) Hash identifier: JlAD5uB7Q7NUh9x02fVUwzmHghf2viAWS2V2X6G7/e8= Subject key identifier: 94:4D:19:BC:F1:AB:05:88:C7:50:77:B2:8B:51:74:94:4A:22:40:F7 Authority key identifier: B0:AA:B7:28:B8:89:75:52:6C:17:41:CC:A8:67:3C:BC:88:F7:69:7C Certificate issuer: /CN=B0AAB728B88975526C1741CCA8673CBC88F7697C Certificate serial: 67D4F9E0AFD94F0D779F347986859D47F5BE3B95 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B0AAB728B88975526C1741CCA8673CBC88F7697C.cer Subject info access: rsync://repo-rpki.idnic.net/repo/0e05a1ce-849f-417c-b673-fdd33f0d7447/0/B0AAB728B88975526C1741CCA8673CBC88F7697C.mft Manifest number: 03AF Signing time: Fri 05 Dec 2025 07:11:16 +0000 Manifest this update: Fri 05 Dec 2025 07:06:16 +0000 Manifest next update: Mon 08 Dec 2025 10:52:16 +0000 Files and hashes: 1: B0AAB728B88975526C1741CCA8673CBC88F7697C.crl (hash: 2YzAPO2mdHavz4aV2xG4TMGN6jrQEni8kXR6pVq8N30=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/0e05a1ce-849f-417c-b673-fdd33f0d7447/0/B0AAB728B88975526C1741CCA8673CBC88F7697C.crl rsync://repo-rpki.idnic.net/repo/0e05a1ce-849f-417c-b673-fdd33f0d7447/0/B0AAB728B88975526C1741CCA8673CBC88F7697C.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B0AAB728B88975526C1741CCA8673CBC88F7697C.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 08 Dec 2025 10:52:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 67:d4:f9:e0:af:d9:4f:0d:77:9f:34:79:86:85:9d:47:f5:be:3b:95 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B0AAB728B88975526C1741CCA8673CBC88F7697C Validity Not Before: Dec 5 07:06:16 2025 GMT Not After : Dec 8 10:52:16 2025 GMT Subject: CN=944D19BCF1AB0588C75077B28B5174944A2240F7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:9f:88:cb:52:eb:f9:fb:0a:08:2d:a5:11:88: c7:c3:8a:2f:1b:59:3d:2d:04:0d:92:27:fb:01:e1: 2d:40:b7:e8:d7:e7:71:38:a8:46:cf:db:f4:50:f3: 00:ff:8b:bf:d4:48:2f:ce:6c:70:59:ed:4b:4b:d5: 36:35:73:0b:80:84:fb:85:80:5e:53:24:17:76:e6: 2d:b6:20:23:04:53:f1:95:38:97:82:02:60:b8:59: 4e:bd:06:05:11:2c:7c:68:ee:18:22:de:42:e7:41: 95:49:dc:56:2d:e2:29:99:de:7a:6b:54:e2:a9:64: 00:69:8b:bf:33:5a:f1:0e:4b:fb:07:ff:54:27:06: d7:02:c0:6f:a8:ed:65:e6:82:cf:a8:f1:23:42:08: 0c:0a:74:ab:d6:d1:74:ba:6e:17:88:09:1d:ad:d9: a6:bb:c8:07:e5:f9:9e:9d:36:94:8b:5c:b9:22:37: 06:13:34:a4:92:21:4a:bc:74:07:32:dc:92:09:19: 4d:78:d5:55:a5:5e:eb:16:57:93:8b:63:14:c3:a9: 67:6a:23:7d:c3:8a:97:44:94:7c:16:60:41:f1:e3: 69:57:21:cb:e5:92:6d:95:4f:e4:92:c1:00:a6:fd: 96:25:77:90:75:ac:cf:ed:a8:9e:b3:8b:88:75:d9: df:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 94:4D:19:BC:F1:AB:05:88:C7:50:77:B2:8B:51:74:94:4A:22:40:F7 X509v3 Authority Key Identifier: keyid:B0:AA:B7:28:B8:89:75:52:6C:17:41:CC:A8:67:3C:BC:88:F7:69:7C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/0e05a1ce-849f-417c-b673-fdd33f0d7447/0/B0AAB728B88975526C1741CCA8673CBC88F7697C.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B0AAB728B88975526C1741CCA8673CBC88F7697C.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/0e05a1ce-849f-417c-b673-fdd33f0d7447/0/B0AAB728B88975526C1741CCA8673CBC88F7697C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0c:1f:a1:bb:6a:cf:c3:db:01:1e:d7:08:46:b5:d0:a7:5d:7a: 41:4d:62:6f:e1:b9:b4:c7:9a:55:e0:65:4f:ed:c5:f0:90:ba: dc:45:8e:af:b2:3a:68:d3:0e:b7:87:58:ac:0a:99:6d:90:c6: 77:b4:c0:eb:46:19:de:fb:1b:3f:f8:36:fc:a4:3d:7b:9d:7d: b0:62:51:25:57:60:45:37:f3:f8:0d:53:b1:c1:0c:a5:ab:cf: bf:af:23:ed:36:ff:81:62:58:4c:c2:a9:82:9b:5c:f5:c7:f1: c1:ca:b7:a8:ce:b8:dd:7a:30:ea:2f:b1:13:99:87:92:ef:f2: 69:bf:18:e3:62:74:8a:16:01:c3:1f:40:a7:4b:46:55:60:6c: 1b:a0:33:dd:81:1b:10:57:c6:01:b2:a7:e8:d6:4a:f1:76:05: e7:65:f0:3d:25:80:13:ed:35:df:e5:2f:2e:2d:2d:33:21:30: 59:3e:77:5e:58:e4:fa:23:b5:8d:e3:9d:78:4a:61:f5:7e:d3: 4f:e9:b2:f9:d4:e6:d6:91:e8:12:99:be:d7:ea:b7:6e:a0:ea: c5:a9:5a:97:eb:04:55:5c:4b:b6:74:46:2a:fa:07:ab:52:a1: 7a:98:3a:03:4b:cb:e6:b3:a0:3c:c7:61:a4:33:ff:77:22:cd: 26:a0:d5:2b -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUZ9T54K/ZTw13nzR5hoWdR/W+O5UwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjBBQUI3MjhCODg5NzU1MjZDMTc0MUNDQTg2NzNDQkM4 OEY3Njk3QzAeFw0yNTEyMDUwNzA2MTZaFw0yNTEyMDgxMDUyMTZaMDMxMTAvBgNV BAMTKDk0NEQxOUJDRjFBQjA1ODhDNzUwNzdCMjhCNTE3NDk0NEEyMjQwRjcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDHn4jLUuv5+woILaURiMfDii8b WT0tBA2SJ/sB4S1At+jX53E4qEbP2/RQ8wD/i7/USC/ObHBZ7UtL1TY1cwuAhPuF gF5TJBd25i22ICMEU/GVOJeCAmC4WU69BgURLHxo7hgi3kLnQZVJ3FYt4imZ3npr VOKpZABpi78zWvEOS/sH/1QnBtcCwG+o7WXmgs+o8SNCCAwKdKvW0XS6bheICR2t 2aa7yAfl+Z6dNpSLXLkiNwYTNKSSIUq8dAcy3JIJGU141VWlXusWV5OLYxTDqWdq I33DipdElHwWYEHx42lXIcvlkm2VT+SSwQCm/ZYld5B1rM/tqJ6zi4h12d+PAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUlE0ZvPGrBYjHUHeyi1F0lEoiQPcwHwYDVR0j BBgwFoAUsKq3KLiJdVJsF0HMqGc8vIj3aXwwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w ZTA1YTFjZS04NDlmLTQxN2MtYjY3My1mZGQzM2YwZDc0NDcvMC9CMEFBQjcyOEI4 ODk3NTUyNkMxNzQxQ0NBODY3M0NCQzg4Rjc2OTdDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQjBBQUI3MjhCODg5NzU1MjZDMTc0MUNDQTg2NzNDQkM4OEY3 Njk3Qy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMGUwNWExY2UtODQ5Zi00MTdjLWI2 NzMtZmRkMzNmMGQ3NDQ3LzAvQjBBQUI3MjhCODg5NzU1MjZDMTc0MUNDQTg2NzND QkM4OEY3Njk3Qy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAwfobtqz8PbAR7XCEa10KddekFNYm/hubTH mlXgZU/txfCQutxFjq+yOmjTDreHWKwKmW2Qxne0wOtGGd77Gz/4NvykPXudfbBi USVXYEU38/gNU7HBDKWrz7+vI+02/4FiWEzCqYKbXPXH8cHKt6jOuN16MOovsROZ h5Lv8mm/GONidIoWAcMfQKdLRlVgbBugM92BGxBXxgGyp+jWSvF2Bedl8D0lgBPt Nd/lLy4tLTMhMFk+d15Y5PojtY3jnXhKYfV+00/psvnU5taR6BKZvtfqt26g6sWp WpfrBFVcS7Z0Rir6B6tSoXqYOgNLy+azoDzHYaQz/3cizSag1Ss= -----END CERTIFICATE-----Generated at Sun Dec 7 01:00:15 2025 by rpki-client