This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/3d7a71bc-f910-4b8c-9cff-0857d5f2d37f/0/BD0CA7BB7EE14597A171F1B1E3E3127A79DFFFD0.mft File: BD0CA7BB7EE14597A171F1B1E3E3127A79DFFFD0.mft (raw, json) Hash identifier: C7eKyUZxVUYPwRlCaY6CjmOPxsAG/SMQZStBSV8ypMM= Subject key identifier: 42:CC:6B:D5:96:74:B1:D3:D7:06:D2:48:4D:59:34:1B:99:8F:B0:36 Authority key identifier: BD:0C:A7:BB:7E:E1:45:97:A1:71:F1:B1:E3:E3:12:7A:79:DF:FF:D0 Certificate issuer: /CN=BD0CA7BB7EE14597A171F1B1E3E3127A79DFFFD0 Certificate serial: 37FBC0A592910742FA31AF363A52151E0817ACCA Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BD0CA7BB7EE14597A171F1B1E3E3127A79DFFFD0.cer Subject info access: rsync://repo-rpki.idnic.net/repo/3d7a71bc-f910-4b8c-9cff-0857d5f2d37f/0/BD0CA7BB7EE14597A171F1B1E3E3127A79DFFFD0.mft Manifest number: 0203 Signing time: Fri 05 Dec 2025 10:20:55 +0000 Manifest this update: Fri 05 Dec 2025 10:15:55 +0000 Manifest next update: Mon 08 Dec 2025 16:16:55 +0000 Files and hashes: 1: 3130332e32302e38352e302f32342d3234203d3e20313530323337.roa (hash: /Ll9XnZwq9kQ7KqFTm1tz2GQbHOFyxKz40lfWdvRTyg=) 2: BD0CA7BB7EE14597A171F1B1E3E3127A79DFFFD0.crl (hash: bLPIp8pzKUK5MWyxnuBXP1OdKyEYJtHa5z2uDLhT1ZI=) 3: 3130332e32302e38342e302f32342d3234203d3e20313530323337.roa (hash: Q4o71jeTV80A1Kcs2rXwd40dCqE8n3Drpr6hWhmrWZg=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/3d7a71bc-f910-4b8c-9cff-0857d5f2d37f/0/BD0CA7BB7EE14597A171F1B1E3E3127A79DFFFD0.crl rsync://repo-rpki.idnic.net/repo/3d7a71bc-f910-4b8c-9cff-0857d5f2d37f/0/BD0CA7BB7EE14597A171F1B1E3E3127A79DFFFD0.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BD0CA7BB7EE14597A171F1B1E3E3127A79DFFFD0.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 08 Dec 2025 16:16:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 37:fb:c0:a5:92:91:07:42:fa:31:af:36:3a:52:15:1e:08:17:ac:ca Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BD0CA7BB7EE14597A171F1B1E3E3127A79DFFFD0 Validity Not Before: Dec 5 10:15:55 2025 GMT Not After : Dec 8 16:16:55 2025 GMT Subject: CN=42CC6BD59674B1D3D706D2484D59341B998FB036 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:5d:f8:af:14:6c:34:c3:64:af:a2:88:e5:35: 37:d2:09:1b:c9:ee:f1:a7:d9:87:1b:6f:cc:98:d9: 95:ff:60:bd:82:22:05:d1:c4:63:7d:38:89:dc:53: 75:c2:bf:cb:57:8b:4a:aa:48:2b:75:72:7a:7b:88: 83:ac:ad:d6:0a:19:df:9a:b5:2f:36:82:81:f2:09: 12:bf:05:83:42:53:3f:34:cb:09:a3:fc:54:e8:8b: c0:a0:47:73:7f:4d:23:2c:37:92:39:bc:ab:12:23: 06:3b:69:e5:40:80:56:4e:8d:28:31:54:71:69:44: eb:dd:cd:c6:55:07:47:90:ac:89:a6:2a:2b:aa:16: ec:2c:ff:f0:6d:a1:b8:94:35:a0:47:57:39:77:9b: e2:54:83:43:4b:82:b9:e0:6a:ab:d3:3f:63:28:c7: a6:d1:48:59:26:e8:ca:b7:23:42:37:3a:66:7c:6c: c8:2b:c6:38:3f:78:60:dd:10:d3:41:3c:60:84:74: 55:0b:d7:62:ba:a3:46:ff:56:82:3c:12:48:20:6b: 53:e2:e6:c6:7d:49:44:d7:da:0d:8d:d0:48:42:bc: 0e:d8:23:72:fe:7a:74:90:eb:eb:0e:04:86:b8:48: 2a:25:70:8e:16:b7:fd:d0:41:5c:c0:50:c7:97:c5: 27:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:CC:6B:D5:96:74:B1:D3:D7:06:D2:48:4D:59:34:1B:99:8F:B0:36 X509v3 Authority Key Identifier: keyid:BD:0C:A7:BB:7E:E1:45:97:A1:71:F1:B1:E3:E3:12:7A:79:DF:FF:D0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/3d7a71bc-f910-4b8c-9cff-0857d5f2d37f/0/BD0CA7BB7EE14597A171F1B1E3E3127A79DFFFD0.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BD0CA7BB7EE14597A171F1B1E3E3127A79DFFFD0.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3d7a71bc-f910-4b8c-9cff-0857d5f2d37f/0/BD0CA7BB7EE14597A171F1B1E3E3127A79DFFFD0.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 39:1b:84:83:8b:11:44:42:dc:10:16:83:c2:e2:2b:aa:cc:ce: c2:55:78:67:6a:e9:fd:a3:9f:57:4e:4b:d8:e3:f4:65:8f:d5: 71:db:88:f6:ba:fb:8b:bd:25:4e:f8:3f:11:8e:14:3e:d0:87: 10:1a:ed:95:f3:5d:9e:ef:f0:41:1f:d7:36:14:cd:b0:57:6a: c6:15:61:e9:20:d8:55:9f:e4:8e:1f:70:c3:02:cb:91:42:64: 85:c6:8f:24:d2:a8:17:ae:47:b5:7e:45:d6:70:35:8c:81:1d: 9c:d9:10:a3:44:2d:0a:9d:60:88:b4:ab:2a:71:3e:5c:ed:ca: a3:8a:87:c6:ba:67:93:37:df:51:35:b9:1b:88:59:18:b2:0c: 5a:9d:cf:7b:3a:79:0f:22:6f:d9:4f:62:1e:24:8b:5d:29:7d: f2:5a:fb:c1:67:47:96:86:f2:d3:2a:44:fd:44:5e:c4:f6:bc: 1c:66:39:c6:07:cb:00:a0:25:31:f9:31:e1:90:a2:66:68:a4: a8:52:ea:76:68:73:86:d8:12:12:04:0d:fc:62:83:4a:db:da: 52:eb:37:41:3f:aa:0f:a3:7d:06:18:dc:ae:eb:71:b2:b0:d1: a9:f0:7a:ef:9a:8f:a3:09:09:3b:be:ab:74:d8:8a:93:5d:9e: 35:82:42:e5 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUN/vApZKRB0L6Ma82OlIVHggXrMowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkQwQ0E3QkI3RUUxNDU5N0ExNzFGMUIxRTNFMzEyN0E3 OURGRkZEMDAeFw0yNTEyMDUxMDE1NTVaFw0yNTEyMDgxNjE2NTVaMDMxMTAvBgNV BAMTKDQyQ0M2QkQ1OTY3NEIxRDNENzA2RDI0ODRENTkzNDFCOTk4RkIwMzYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDDXfivFGw0w2SvoojlNTfSCRvJ 7vGn2Ycbb8yY2ZX/YL2CIgXRxGN9OIncU3XCv8tXi0qqSCt1cnp7iIOsrdYKGd+a tS82goHyCRK/BYNCUz80ywmj/FToi8CgR3N/TSMsN5I5vKsSIwY7aeVAgFZOjSgx VHFpROvdzcZVB0eQrImmKiuqFuws//BtobiUNaBHVzl3m+JUg0NLgrngaqvTP2Mo x6bRSFkm6Mq3I0I3OmZ8bMgrxjg/eGDdENNBPGCEdFUL12K6o0b/VoI8Ekgga1Pi 5sZ9SUTX2g2N0EhCvA7YI3L+enSQ6+sOBIa4SColcI4Wt/3QQVzAUMeXxScxAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUQsxr1ZZ0sdPXBtJITVk0G5mPsDYwHwYDVR0j BBgwFoAUvQynu37hRZehcfGx4+MSennf/9AwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z ZDdhNzFiYy1mOTEwLTRiOGMtOWNmZi0wODU3ZDVmMmQzN2YvMC9CRDBDQTdCQjdF RTE0NTk3QTE3MUYxQjFFM0UzMTI3QTc5REZGRkQwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQkQwQ0E3QkI3RUUxNDU5N0ExNzFGMUIxRTNFMzEyN0E3OURG RkZEMC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vM2Q3YTcxYmMtZjkxMC00YjhjLTlj ZmYtMDg1N2Q1ZjJkMzdmLzAvQkQwQ0E3QkI3RUUxNDU5N0ExNzFGMUIxRTNFMzEy N0E3OURGRkZEMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADkbhIOLEURC3BAWg8LiK6rMzsJVeGdq6f2j n1dOS9jj9GWP1XHbiPa6+4u9JU74PxGOFD7QhxAa7ZXzXZ7v8EEf1zYUzbBXasYV Yekg2FWf5I4fcMMCy5FCZIXGjyTSqBeuR7V+RdZwNYyBHZzZEKNELQqdYIi0qypx PlztyqOKh8a6Z5M331E1uRuIWRiyDFqdz3s6eQ8ib9lPYh4ki10pffJa+8FnR5aG 8tMqRP1EXsT2vBxmOcYHywCgJTH5MeGQomZopKhS6nZoc4bYEhIEDfxig0rb2lLr N0E/qg+jfQYY3K7rcbKw0anweu+aj6MJCTu+q3TYipNdnjWCQuU= -----END CERTIFICATE-----Generated at Sun Dec 7 08:11:47 2025 by rpki-client