This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/38913893-5f64-4a5e-a8d2-5d51ebde473f/0/B1F0A7585ED1882783C6AF802B826607ABB92671.mft File: B1F0A7585ED1882783C6AF802B826607ABB92671.mft (raw, json) Hash identifier: DOVXBYndr0GSkO46iyvlQy3VSn7C1ZcoWlSwK3nnd4w= Subject key identifier: 83:5A:90:AE:97:E3:85:AC:51:E5:C3:01:0C:7D:F9:6D:F0:A9:6F:33 Authority key identifier: B1:F0:A7:58:5E:D1:88:27:83:C6:AF:80:2B:82:66:07:AB:B9:26:71 Certificate issuer: /CN=B1F0A7585ED1882783C6AF802B826607ABB92671 Certificate serial: 1A1A8B7E0AE45395B114E7CA1A10C1189620F8F0 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/B1F0A7585ED1882783C6AF802B826607ABB92671.cer Subject info access: rsync://repo-rpki.idnic.net/repo/38913893-5f64-4a5e-a8d2-5d51ebde473f/0/B1F0A7585ED1882783C6AF802B826607ABB92671.mft Manifest number: CA Signing time: Sat 06 Dec 2025 10:02:27 +0000 Manifest this update: Sat 06 Dec 2025 09:57:27 +0000 Manifest next update: Tue 09 Dec 2025 10:41:27 +0000 Files and hashes: 1: B1F0A7585ED1882783C6AF802B826607ABB92671.crl (hash: Tgey11R4OpPn/1CNtXZ4EWV+8nXB73gL1LZ92ZmPROI=) 2: 3136302e3138372e33362e302f32342d3234203d3e20313533333237.roa (hash: W6x4NYRtAG+Mf6fIyPCm/XsF8bO9fqqOCjC78Il5Kyw=) 3: 3136302e3138372e33372e302f32342d3234203d3e20313533333237.roa (hash: HwU0+K4pKIjqZ0rwzIAxU1cLuPfwooIJjDIs7VIOPKk=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/38913893-5f64-4a5e-a8d2-5d51ebde473f/0/B1F0A7585ED1882783C6AF802B826607ABB92671.crl rsync://repo-rpki.idnic.net/repo/38913893-5f64-4a5e-a8d2-5d51ebde473f/0/B1F0A7585ED1882783C6AF802B826607ABB92671.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/B1F0A7585ED1882783C6AF802B826607ABB92671.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 09 Dec 2025 06:55:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1a:1a:8b:7e:0a:e4:53:95:b1:14:e7:ca:1a:10:c1:18:96:20:f8:f0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B1F0A7585ED1882783C6AF802B826607ABB92671 Validity Not Before: Dec 6 09:57:27 2025 GMT Not After : Dec 9 10:41:27 2025 GMT Subject: CN=835A90AE97E385AC51E5C3010C7DF96DF0A96F33 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:b1:73:9f:73:4c:57:f5:ae:04:8b:8f:0c:a2: 53:6c:32:ec:81:b8:90:cf:41:43:0d:40:15:c8:92: 8d:26:0d:bf:71:02:82:6e:b2:49:f4:9f:23:6b:3b: 1c:7d:b4:f0:31:cf:05:e9:c4:b6:c7:29:35:4e:34: 67:3d:a2:31:95:58:7c:f5:7b:36:20:6a:bc:65:d9: 0b:c2:e7:74:e9:79:94:2b:0a:60:a8:c9:b8:8c:6f: dd:51:45:17:97:e0:73:91:f7:70:62:f4:7d:25:98: 35:4d:18:ac:7a:e8:f2:ca:cf:79:87:4b:fe:34:b3: 38:cd:cd:93:c1:4e:3a:de:29:5d:ca:09:c5:b0:f2: ac:3c:78:4d:b6:fa:71:3a:0e:96:63:5b:58:5f:15: e3:54:b9:38:d5:95:94:d3:af:c2:46:50:0b:03:bb: 83:c2:cb:1a:cb:1d:10:58:66:f0:80:5c:35:49:94: d3:95:67:44:f4:77:0a:48:5a:cd:ae:5e:21:6f:3a: b6:5b:c1:b0:cc:a4:59:e6:95:01:d7:41:f4:ab:1a: d2:c8:a4:2d:bf:3f:66:67:07:8f:a6:4c:2c:6c:b6: 53:fb:07:4e:60:35:da:19:12:dd:f1:8f:c8:7c:57: e7:d5:62:ff:0f:2e:e3:e6:0c:77:b3:11:63:e5:4f: b3:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 83:5A:90:AE:97:E3:85:AC:51:E5:C3:01:0C:7D:F9:6D:F0:A9:6F:33 X509v3 Authority Key Identifier: keyid:B1:F0:A7:58:5E:D1:88:27:83:C6:AF:80:2B:82:66:07:AB:B9:26:71 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/38913893-5f64-4a5e-a8d2-5d51ebde473f/0/B1F0A7585ED1882783C6AF802B826607ABB92671.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/B1F0A7585ED1882783C6AF802B826607ABB92671.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/38913893-5f64-4a5e-a8d2-5d51ebde473f/0/B1F0A7585ED1882783C6AF802B826607ABB92671.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a5:a8:00:0d:2a:70:fc:92:e9:63:8e:32:c6:bd:d4:b1:3e:63: e8:00:41:69:fd:04:72:68:f5:b6:64:be:c9:0f:ea:ea:07:e5: 21:9c:ea:cf:a6:ab:25:c5:7f:89:37:48:15:1a:f5:43:96:e2: a6:6e:f2:6a:d0:09:d6:25:83:d9:22:78:6e:f3:ec:b8:6a:fc: a4:f5:d3:82:98:8a:b7:fc:63:2b:68:b0:6f:55:6b:a7:2d:86: b7:12:17:ea:d3:9d:1c:0d:b8:54:19:e8:d6:e6:df:a7:7b:d6: 1e:fe:75:9d:81:9b:32:2a:21:04:83:e1:79:a0:82:de:ce:df: 9c:91:2a:db:6c:da:64:96:e7:5c:81:a9:c4:d4:e4:8d:42:99: 49:00:96:d8:ee:01:dd:ad:b6:79:1d:48:ff:66:66:3e:b4:1e: 01:7f:81:b5:10:4d:db:55:32:57:32:d7:39:4f:64:41:8c:c2: 89:48:90:3f:74:a3:19:77:ee:f5:76:6c:c8:ff:b3:ed:94:15: b9:91:04:99:d2:e3:18:20:fd:16:4b:9c:71:f6:8d:9f:4f:b7: ec:8e:1a:67:4f:ab:e4:69:c9:61:b6:4b:e6:7d:56:29:25:fd: ca:c2:e8:31:4d:bd:98:0c:6a:20:bc:c9:66:ce:cd:cf:6e:e6: a5:09:6f:45 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUGhqLfgrkU5WxFOfKGhDBGJYg+PAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjFGMEE3NTg1RUQxODgyNzgzQzZBRjgwMkI4MjY2MDdB QkI5MjY3MTAeFw0yNTEyMDYwOTU3MjdaFw0yNTEyMDkxMDQxMjdaMDMxMTAvBgNV BAMTKDgzNUE5MEFFOTdFMzg1QUM1MUU1QzMwMTBDN0RGOTZERjBBOTZGMzMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCssXOfc0xX9a4Ei48MolNsMuyB uJDPQUMNQBXIko0mDb9xAoJuskn0nyNrOxx9tPAxzwXpxLbHKTVONGc9ojGVWHz1 ezYgarxl2QvC53TpeZQrCmCoybiMb91RRReX4HOR93Bi9H0lmDVNGKx66PLKz3mH S/40szjNzZPBTjreKV3KCcWw8qw8eE22+nE6DpZjW1hfFeNUuTjVlZTTr8JGUAsD u4PCyxrLHRBYZvCAXDVJlNOVZ0T0dwpIWs2uXiFvOrZbwbDMpFnmlQHXQfSrGtLI pC2/P2ZnB4+mTCxstlP7B05gNdoZEt3xj8h8V+fVYv8PLuPmDHezEWPlT7OBAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUg1qQrpfjhaxR5cMBDH35bfCpbzMwHwYDVR0j BBgwFoAUsfCnWF7RiCeDxq+AK4JmB6u5JnEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z ODkxMzg5My01ZjY0LTRhNWUtYThkMi01ZDUxZWJkZTQ3M2YvMC9CMUYwQTc1ODVF RDE4ODI3ODNDNkFGODAyQjgyNjYwN0FCQjkyNjcxLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvQjFGMEE3NTg1RUQxODgyNzgzQzZBRjgwMkI4MjY2MDdBQkI5 MjY3MS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMzg5MTM4OTMtNWY2NC00YTVlLWE4 ZDItNWQ1MWViZGU0NzNmLzAvQjFGMEE3NTg1RUQxODgyNzgzQzZBRjgwMkI4MjY2 MDdBQkI5MjY3MS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKWoAA0qcPyS6WOOMsa91LE+Y+gAQWn9BHJo 9bZkvskP6uoH5SGc6s+mqyXFf4k3SBUa9UOW4qZu8mrQCdYlg9kieG7z7Lhq/KT1 04KYirf8YytosG9Va6cthrcSF+rTnRwNuFQZ6Nbm36d71h7+dZ2BmzIqIQSD4Xmg gt7O35yRKtts2mSW51yBqcTU5I1CmUkAltjuAd2ttnkdSP9mZj60HgF/gbUQTdtV Mlcy1zlPZEGMwolIkD90oxl37vV2bMj/s+2UFbmRBJnS4xgg/RZLnHH2jZ9Pt+yO GmdPq+RpyWG2S+Z9Vikl/crC6DFNvZgMaiC8yWbOzc9u5qUJb0U= -----END CERTIFICATE-----Generated at Sun Dec 7 02:07:53 2025 by rpki-client