This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/22f5f07c-f07b-4aaa-a0c2-df17c910c586/0/B5787D648E70D60E0E09510EBF1809D686E83D03.mft File: B5787D648E70D60E0E09510EBF1809D686E83D03.mft (raw, json) Hash identifier: QJLF0/Qh3mRur6Hoxbhx5ge/dscSZjIn6kmrWRE9xE4= Subject key identifier: 31:D2:28:6F:D8:AA:76:9E:D9:3B:6D:AE:19:83:73:ED:93:28:D1:4B Authority key identifier: B5:78:7D:64:8E:70:D6:0E:0E:09:51:0E:BF:18:09:D6:86:E8:3D:03 Certificate issuer: /CN=B5787D648E70D60E0E09510EBF1809D686E83D03 Certificate serial: 47BFC7AAE0B44953771BA2782746EFB840BA16B9 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B5787D648E70D60E0E09510EBF1809D686E83D03.cer Subject info access: rsync://repo-rpki.idnic.net/repo/22f5f07c-f07b-4aaa-a0c2-df17c910c586/0/B5787D648E70D60E0E09510EBF1809D686E83D03.mft Manifest number: 035C Signing time: Sat 06 Dec 2025 19:32:10 +0000 Manifest this update: Sat 06 Dec 2025 19:27:10 +0000 Manifest next update: Wed 10 Dec 2025 03:04:10 +0000 Files and hashes: 1: B5787D648E70D60E0E09510EBF1809D686E83D03.crl (hash: a+ncreW8Vlrt91ckL4CNMXn3Prhlfr7lz5QDSaaoKM4=) 2: 3130332e3137322e3138362e302f32332d3233203d3e20313432343030.roa (hash: eAolVNFu5RbZ8vrRSJHTSAnnItGXFwJM+Qxe0653Ja4=) 3: 3130332e3137322e3138372e302f32342d3234203d3e20313432343030.roa (hash: UMxzpZwJkuyWT8WiV33AdNXTdJHylmbT6yyy6htu0s4=) 4: 3130332e3137322e3138362e302f32342d3234203d3e20313432343030.roa (hash: hdRTJYsi8eswhC1onrTfel6azdbRvum1qwnVMu+58TM=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/22f5f07c-f07b-4aaa-a0c2-df17c910c586/0/B5787D648E70D60E0E09510EBF1809D686E83D03.crl rsync://repo-rpki.idnic.net/repo/22f5f07c-f07b-4aaa-a0c2-df17c910c586/0/B5787D648E70D60E0E09510EBF1809D686E83D03.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B5787D648E70D60E0E09510EBF1809D686E83D03.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 09 Dec 2025 15:57:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 47:bf:c7:aa:e0:b4:49:53:77:1b:a2:78:27:46:ef:b8:40:ba:16:b9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B5787D648E70D60E0E09510EBF1809D686E83D03 Validity Not Before: Dec 6 19:27:10 2025 GMT Not After : Dec 10 03:04:10 2025 GMT Subject: CN=31D2286FD8AA769ED93B6DAE198373ED9328D14B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:bb:14:56:34:27:fb:89:a4:82:d7:23:10:9b: c8:5a:70:9f:de:1d:44:18:e9:07:40:ce:1a:0b:1a: 1e:da:93:6e:27:05:a7:cc:3c:ff:74:3a:0c:08:1b: 6e:f7:f5:b3:fb:09:4d:1e:ea:e6:f8:db:fd:dc:52: ae:3c:8f:ab:b1:93:53:99:23:f6:93:b0:73:8b:02: 53:22:77:9d:b4:dd:aa:51:cb:69:d8:45:ed:de:5e: 1e:e4:48:4a:06:4c:e0:96:23:a9:ea:28:91:9e:43: ef:34:31:c1:ab:63:fb:0c:7f:32:92:c2:5e:28:ad: aa:4c:21:58:6a:30:92:eb:31:e1:de:37:89:5e:f1: e1:ec:2a:8c:40:d3:ef:6a:76:60:e9:23:6d:36:cf: 55:75:f1:52:5e:52:08:c7:87:1f:9f:e3:c2:d1:78: a5:d3:d1:ac:fb:fa:15:fd:98:ed:37:41:4a:3a:b5: 5e:cc:22:86:71:21:ee:ed:4a:43:29:72:4a:b0:7d: 72:9c:57:5f:fd:9e:1b:ef:21:ef:ab:e1:93:60:4a: 4d:41:d1:f4:75:ea:32:da:4c:33:8c:25:34:cb:76: dd:ae:45:d5:2a:4f:8a:83:eb:4e:f0:7b:ce:cb:e9: b1:62:ca:63:e4:32:51:8e:6e:5e:0e:37:64:52:8b: 92:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 31:D2:28:6F:D8:AA:76:9E:D9:3B:6D:AE:19:83:73:ED:93:28:D1:4B X509v3 Authority Key Identifier: keyid:B5:78:7D:64:8E:70:D6:0E:0E:09:51:0E:BF:18:09:D6:86:E8:3D:03 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/22f5f07c-f07b-4aaa-a0c2-df17c910c586/0/B5787D648E70D60E0E09510EBF1809D686E83D03.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B5787D648E70D60E0E09510EBF1809D686E83D03.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/22f5f07c-f07b-4aaa-a0c2-df17c910c586/0/B5787D648E70D60E0E09510EBF1809D686E83D03.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 11:c5:f9:b7:9d:c1:67:83:ca:43:79:fb:12:67:3f:2f:31:e1: fd:f4:03:a0:10:1e:73:b4:27:57:e3:e7:cc:0e:11:f9:d5:b7: 61:06:05:32:83:b7:52:f4:4d:db:50:6b:47:f7:95:e0:80:92: 80:c1:08:05:2e:5c:f8:ae:02:c0:70:c0:9c:e7:00:7f:3d:57: d3:d4:cc:1c:05:7c:21:57:68:8b:38:ad:ad:69:b8:98:d1:4d: 9e:d4:98:d4:40:4e:c0:4a:d0:53:cb:c5:bf:48:48:5e:6f:3f: ba:23:32:72:a4:e6:fe:dc:2d:7c:cb:23:5d:41:f9:ec:dc:53: 6f:ad:5e:24:17:da:5c:f7:76:96:fc:3b:a9:1a:39:73:85:50: 52:43:b6:7a:7c:4f:64:31:57:44:fe:4a:2c:81:67:06:f6:f6: c4:6a:8f:cf:17:a8:64:9b:41:48:8f:93:5b:64:95:0a:eb:f5: 24:06:90:fb:6b:59:5e:ab:22:fd:d8:39:1b:0f:26:e0:2f:53: 8d:9c:84:06:b2:27:48:7b:1f:06:91:f1:dd:99:89:7e:61:91: 20:ca:cc:be:0a:4f:9a:af:b0:17:93:99:85:bb:ab:53:22:af: 4b:f7:71:4c:31:b4:d0:d3:4d:7f:98:60:57:05:a5:f0:15:46: db:54:2c:80 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUR7/HquC0SVN3G6J4J0bvuEC6FrkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjU3ODdENjQ4RTcwRDYwRTBFMDk1MTBFQkYxODA5RDY4 NkU4M0QwMzAeFw0yNTEyMDYxOTI3MTBaFw0yNTEyMTAwMzA0MTBaMDMxMTAvBgNV BAMTKDMxRDIyODZGRDhBQTc2OUVEOTNCNkRBRTE5ODM3M0VEOTMyOEQxNEIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDFuxRWNCf7iaSC1yMQm8hacJ/e HUQY6QdAzhoLGh7ak24nBafMPP90OgwIG2739bP7CU0e6ub42/3cUq48j6uxk1OZ I/aTsHOLAlMid5203apRy2nYRe3eXh7kSEoGTOCWI6nqKJGeQ+80McGrY/sMfzKS wl4orapMIVhqMJLrMeHeN4le8eHsKoxA0+9qdmDpI202z1V18VJeUgjHhx+f48LR eKXT0az7+hX9mO03QUo6tV7MIoZxIe7tSkMpckqwfXKcV1/9nhvvIe+r4ZNgSk1B 0fR16jLaTDOMJTTLdt2uRdUqT4qD607we87L6bFiymPkMlGObl4ON2RSi5J3AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUMdIob9iqdp7ZO22uGYNz7ZMo0UswHwYDVR0j BBgwFoAUtXh9ZI5w1g4OCVEOvxgJ1oboPQMwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y MmY1ZjA3Yy1mMDdiLTRhYWEtYTBjMi1kZjE3YzkxMGM1ODYvMC9CNTc4N0Q2NDhF NzBENjBFMEUwOTUxMEVCRjE4MDlENjg2RTgzRDAzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQjU3ODdENjQ4RTcwRDYwRTBFMDk1MTBFQkYxODA5RDY4NkU4 M0QwMy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMjJmNWYwN2MtZjA3Yi00YWFhLWEw YzItZGYxN2M5MTBjNTg2LzAvQjU3ODdENjQ4RTcwRDYwRTBFMDk1MTBFQkYxODA5 RDY4NkU4M0QwMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABHF+bedwWeDykN5+xJnPy8x4f30A6AQHnO0 J1fj58wOEfnVt2EGBTKDt1L0TdtQa0f3leCAkoDBCAUuXPiuAsBwwJznAH89V9PU zBwFfCFXaIs4ra1puJjRTZ7UmNRATsBK0FPLxb9ISF5vP7ojMnKk5v7cLXzLI11B +ezcU2+tXiQX2lz3dpb8O6kaOXOFUFJDtnp8T2QxV0T+SiyBZwb29sRqj88XqGSb QUiPk1tklQrr9SQGkPtrWV6rIv3YORsPJuAvU42chAayJ0h7HwaR8d2ZiX5hkSDK zL4KT5qvsBeTmYW7q1Mir0v3cUwxtNDTTX+YYFcFpfAVRttULIA= -----END CERTIFICATE-----Generated at Sun Dec 7 00:11:35 2025 by rpki-client