This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/1bdce391-a5d3-411b-a97b-e862fbf5631c/0/BE41FE7DC77148079EA1CAC4C9005DEB6884BB8C.mft File: BE41FE7DC77148079EA1CAC4C9005DEB6884BB8C.mft (raw, json) Hash identifier: xX57nyK9JgSr1QheWOouba8qCEdPqOXjIwTJV8FkA0Y= Subject key identifier: B0:9D:7B:8F:65:BE:D0:D9:81:47:C4:1B:75:E6:9B:03:D0:FF:BF:77 Authority key identifier: BE:41:FE:7D:C7:71:48:07:9E:A1:CA:C4:C9:00:5D:EB:68:84:BB:8C Certificate issuer: /CN=BE41FE7DC77148079EA1CAC4C9005DEB6884BB8C Certificate serial: 6FC2B9CCFD0CC5D2CC97846931FE72B99173CEC5 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/BE41FE7DC77148079EA1CAC4C9005DEB6884BB8C.cer Subject info access: rsync://repo-rpki.idnic.net/repo/1bdce391-a5d3-411b-a97b-e862fbf5631c/0/BE41FE7DC77148079EA1CAC4C9005DEB6884BB8C.mft Manifest number: F6 Signing time: Fri 05 Dec 2025 01:22:09 +0000 Manifest this update: Fri 05 Dec 2025 01:17:09 +0000 Manifest next update: Mon 08 Dec 2025 01:42:09 +0000 Files and hashes: 1: 3136302e32322e32372e302f32342d3234203d3e20313532383036.roa (hash: 0OeYR75ixQZTlrIcMsAEVIAMsFHHHRmOANT+VjAQdGg=) 2: 3136302e32322e32362e302f32342d3234203d3e20313532383036.roa (hash: 9EHkZCz3jJLHmIc/2dkH9Ib/3pIoSydcnX/ESKF5C0o=) 3: 3136302e32322e32362e302f32332d3233203d3e20313532383036.roa (hash: Kzrvc50VZVqxvNyylv+S6nQsNORPDp45F0+BBKuP5OE=) 4: BE41FE7DC77148079EA1CAC4C9005DEB6884BB8C.crl (hash: xKTxb8KQtaXm9uWlg4i3H3RswG+YDW+q3y82reu73EA=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/1bdce391-a5d3-411b-a97b-e862fbf5631c/0/BE41FE7DC77148079EA1CAC4C9005DEB6884BB8C.crl rsync://repo-rpki.idnic.net/repo/1bdce391-a5d3-411b-a97b-e862fbf5631c/0/BE41FE7DC77148079EA1CAC4C9005DEB6884BB8C.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/BE41FE7DC77148079EA1CAC4C9005DEB6884BB8C.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 08 Dec 2025 01:42:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6f:c2:b9:cc:fd:0c:c5:d2:cc:97:84:69:31:fe:72:b9:91:73:ce:c5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BE41FE7DC77148079EA1CAC4C9005DEB6884BB8C Validity Not Before: Dec 5 01:17:09 2025 GMT Not After : Dec 8 01:42:09 2025 GMT Subject: CN=B09D7B8F65BED0D98147C41B75E69B03D0FFBF77 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:b3:6b:11:c1:74:35:d5:e2:61:2f:87:0b:5a: 2e:90:3c:ca:d8:8f:4b:d8:3c:c4:54:df:a4:ea:bf: de:8a:83:e2:88:79:00:c1:cd:c4:2b:96:9f:e1:ae: a6:0c:f6:9c:40:09:90:54:9f:0c:42:19:1d:66:13: f9:f7:33:7c:c6:68:58:6b:a1:1c:14:94:0d:d5:d0: 3f:e0:1f:fe:a7:a9:ad:35:25:4c:34:9e:4b:81:4d: 49:6d:03:49:e7:a8:07:b2:24:2a:c1:fa:40:9b:13: 0e:ee:73:00:0f:2d:cd:04:2a:e8:a5:34:e2:ac:94: 8c:de:cd:6e:f6:5d:53:80:c9:69:bf:40:c9:16:64: 00:a0:ff:a7:d2:d8:1f:71:6f:f2:2a:2f:72:27:15: 14:76:34:89:24:f6:1b:df:1f:f9:bc:74:30:7f:bb: 53:d6:0a:30:54:ca:82:a4:e2:31:ed:7e:f1:7d:bd: 35:8f:d7:fa:54:ee:a7:7b:05:5c:2d:b8:32:d7:cc: ba:4b:2a:61:5a:c4:bf:97:3e:73:22:31:1b:2c:74: 78:83:ce:5e:f6:2d:e1:a0:08:9d:20:30:1a:26:99: a0:a5:99:3f:c1:b1:99:7e:ae:fe:3e:f3:65:88:b6: 9c:eb:f8:b8:71:af:62:aa:13:85:9e:1a:08:8c:3d: 82:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B0:9D:7B:8F:65:BE:D0:D9:81:47:C4:1B:75:E6:9B:03:D0:FF:BF:77 X509v3 Authority Key Identifier: keyid:BE:41:FE:7D:C7:71:48:07:9E:A1:CA:C4:C9:00:5D:EB:68:84:BB:8C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/1bdce391-a5d3-411b-a97b-e862fbf5631c/0/BE41FE7DC77148079EA1CAC4C9005DEB6884BB8C.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/BE41FE7DC77148079EA1CAC4C9005DEB6884BB8C.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/1bdce391-a5d3-411b-a97b-e862fbf5631c/0/BE41FE7DC77148079EA1CAC4C9005DEB6884BB8C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 56:3c:53:1a:50:ed:df:69:ac:c7:1a:89:f0:c9:23:ea:57:a1: f7:dc:bf:99:61:b7:06:7b:66:f8:2f:fc:f0:7b:2f:bc:55:6f: ab:d1:94:fd:e6:42:32:4a:85:cd:e0:f1:11:f8:55:ec:fe:61: 51:f1:20:ec:12:9f:e2:90:41:dc:4a:b7:16:57:a5:b4:7c:42: 9b:bb:34:92:11:52:6f:8d:6e:62:19:06:19:25:ea:02:43:27: 68:19:4d:1e:85:47:62:be:0f:6c:19:54:ff:55:be:a8:71:48: 99:63:49:94:75:8f:95:b9:ca:16:f7:13:3f:65:cf:e2:bd:57: ea:73:5a:fb:0f:91:56:26:8f:11:88:fe:b7:e9:0e:ae:75:05: 88:97:62:aa:e7:73:ab:43:56:ef:59:dc:b0:20:c6:7c:7d:a0: 44:e8:31:aa:c6:3d:a7:8d:ca:1d:b4:1f:42:85:50:c1:82:f0: 0f:ce:c5:39:5d:56:24:75:b9:16:ef:26:c2:49:82:a7:2c:7a: ec:f9:d8:21:67:5d:ec:ef:28:30:1d:24:da:c4:33:f1:8b:5a: 2a:3b:1e:79:a9:60:10:d2:37:8b:b5:17:58:13:86:41:90:a7: 7b:2e:f7:96:0b:29:bd:90:2e:d6:b9:00:fa:af:a0:78:0b:e1: 4a:5c:3e:dc -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUb8K5zP0MxdLMl4RpMf5yuZFzzsUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkU0MUZFN0RDNzcxNDgwNzlFQTFDQUM0QzkwMDVERUI2 ODg0QkI4QzAeFw0yNTEyMDUwMTE3MDlaFw0yNTEyMDgwMTQyMDlaMDMxMTAvBgNV BAMTKEIwOUQ3QjhGNjVCRUQwRDk4MTQ3QzQxQjc1RTY5QjAzRDBGRkJGNzcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC3s2sRwXQ11eJhL4cLWi6QPMrY j0vYPMRU36Tqv96Kg+KIeQDBzcQrlp/hrqYM9pxACZBUnwxCGR1mE/n3M3zGaFhr oRwUlA3V0D/gH/6nqa01JUw0nkuBTUltA0nnqAeyJCrB+kCbEw7ucwAPLc0EKuil NOKslIzezW72XVOAyWm/QMkWZACg/6fS2B9xb/IqL3InFRR2NIkk9hvfH/m8dDB/ u1PWCjBUyoKk4jHtfvF9vTWP1/pU7qd7BVwtuDLXzLpLKmFaxL+XPnMiMRssdHiD zl72LeGgCJ0gMBommaClmT/BsZl+rv4+82WItpzr+Lhxr2KqE4WeGgiMPYJJAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUsJ17j2W+0NmBR8QbdeabA9D/v3cwHwYDVR0j BBgwFoAUvkH+fcdxSAeeocrEyQBd62iEu4wwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x YmRjZTM5MS1hNWQzLTQxMWItYTk3Yi1lODYyZmJmNTYzMWMvMC9CRTQxRkU3REM3 NzE0ODA3OUVBMUNBQzRDOTAwNURFQjY4ODRCQjhDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvQkU0MUZFN0RDNzcxNDgwNzlFQTFDQUM0QzkwMDVERUI2ODg0 QkI4Qy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMWJkY2UzOTEtYTVkMy00MTFiLWE5 N2ItZTg2MmZiZjU2MzFjLzAvQkU0MUZFN0RDNzcxNDgwNzlFQTFDQUM0QzkwMDVE RUI2ODg0QkI4Qy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFY8UxpQ7d9prMcaifDJI+pXoffcv5lhtwZ7 Zvgv/PB7L7xVb6vRlP3mQjJKhc3g8RH4Vez+YVHxIOwSn+KQQdxKtxZXpbR8Qpu7 NJIRUm+NbmIZBhkl6gJDJ2gZTR6FR2K+D2wZVP9VvqhxSJljSZR1j5W5yhb3Ez9l z+K9V+pzWvsPkVYmjxGI/rfpDq51BYiXYqrnc6tDVu9Z3LAgxnx9oEToMarGPaeN yh20H0KFUMGC8A/OxTldViR1uRbvJsJJgqcseuz52CFnXezvKDAdJNrEM/GLWio7 HnmpYBDSN4u1F1gThkGQp3su95YLKb2QLta5APqvoHgL4UpcPtw= -----END CERTIFICATE-----Generated at Sat Dec 6 21:21:56 2025 by rpki-client