This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/40d34e77-6cf6-4187-9083-1c7a8819e965/0/B62E442C8D2C70D0F5AB5E2A3A1F11B2D0B4D8BD.mft File: B62E442C8D2C70D0F5AB5E2A3A1F11B2D0B4D8BD.mft (raw, json) Hash identifier: 9H2f5Z2lQuiuIIRu1110qWOunKV5Ivey9s7HwpH+phI= Subject key identifier: 4B:27:2A:65:AE:F6:3F:F5:11:A5:B5:56:77:45:4C:1E:DA:23:D1:C5 Authority key identifier: B6:2E:44:2C:8D:2C:70:D0:F5:AB:5E:2A:3A:1F:11:B2:D0:B4:D8:BD Certificate issuer: /CN=B62E442C8D2C70D0F5AB5E2A3A1F11B2D0B4D8BD Certificate serial: 5DFF6EB3BD1006A532CBF23391756C617A8D6D92 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B62E442C8D2C70D0F5AB5E2A3A1F11B2D0B4D8BD.cer Subject info access: rsync://repo-rpki.idnic.net/repo/40d34e77-6cf6-4187-9083-1c7a8819e965/0/B62E442C8D2C70D0F5AB5E2A3A1F11B2D0B4D8BD.mft Manifest number: 0213 Signing time: Fri 05 Dec 2025 06:21:47 +0000 Manifest this update: Fri 05 Dec 2025 06:16:47 +0000 Manifest next update: Mon 08 Dec 2025 15:49:47 +0000 Files and hashes: 1: B62E442C8D2C70D0F5AB5E2A3A1F11B2D0B4D8BD.crl (hash: JS54GKeanNlFn9nwr1bz1TrxR71bFjUEc+V7n9mfzEI=) 2: 323430353a663234303a3a2f33322d3332203d3e20313430333834.roa (hash: jCC55QoiailnQ1RFdBW81Arc7TozD6cSp8bDswcvT9g=) 3: 3130332e3134392e3233382e302f32332d3233203d3e20313430333834.roa (hash: n/ZxzBzZ2gRpYTiml4oQKNkriGvajLH2YwRAWcXMQ3M=) 4: 3130332e3134392e3233382e302f32342d3234203d3e20313430333834.roa (hash: nzGXD+WO9jNdAgLBDWw3XXsmMEFx1ERW+wySreu0Q7o=) 5: 3130332e3134392e3233392e302f32342d3234203d3e20313430333834.roa (hash: qwBhVFJ/29JkjYJBmiXis9vZ9dZgJ/dBqQTkQKD7IUk=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/40d34e77-6cf6-4187-9083-1c7a8819e965/0/B62E442C8D2C70D0F5AB5E2A3A1F11B2D0B4D8BD.crl rsync://repo-rpki.idnic.net/repo/40d34e77-6cf6-4187-9083-1c7a8819e965/0/B62E442C8D2C70D0F5AB5E2A3A1F11B2D0B4D8BD.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B62E442C8D2C70D0F5AB5E2A3A1F11B2D0B4D8BD.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 08 Dec 2025 15:49:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5d:ff:6e:b3:bd:10:06:a5:32:cb:f2:33:91:75:6c:61:7a:8d:6d:92 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B62E442C8D2C70D0F5AB5E2A3A1F11B2D0B4D8BD Validity Not Before: Dec 5 06:16:47 2025 GMT Not After : Dec 8 15:49:47 2025 GMT Subject: CN=4B272A65AEF63FF511A5B55677454C1EDA23D1C5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:a1:d4:62:b0:97:b3:ef:02:b8:8e:7e:c0:14: b0:07:7a:ee:2e:3e:6c:f4:85:2f:ae:43:95:aa:f1: 91:5e:29:5a:c0:74:fe:4a:16:7e:b6:b2:71:95:85: 25:d0:4f:50:40:2b:25:76:2a:a8:79:5c:1e:b6:00: df:22:ee:67:e7:b0:06:20:04:d9:bb:1e:5f:a1:f6: ed:26:e4:e8:09:d1:b2:14:fd:53:77:27:5c:bc:79: 1e:3f:39:49:fc:59:8e:5a:02:8f:1c:00:f9:ab:53: cf:4a:03:9d:5b:da:c8:04:f9:22:1a:38:f1:59:24: 47:1a:df:ed:70:25:d7:d3:ed:ff:14:ff:f4:bb:b8: fa:49:30:68:c4:78:dc:0c:ad:ca:7d:b4:06:c8:eb: f8:65:ff:7b:c9:eb:27:e8:ec:67:0a:e4:73:2b:1d: e0:30:f1:f5:91:c6:fe:81:de:cb:44:a4:fc:c4:14: bf:68:79:b4:b2:b8:8c:71:9c:9c:23:e9:2d:1b:c5: 7f:e8:8c:2c:3f:66:18:4d:a1:90:b7:1f:64:2a:08: 85:d9:fb:05:4d:27:85:65:d0:5e:f9:4f:ce:95:fe: c1:8d:76:1d:7d:8a:a1:d2:31:c0:49:37:48:6f:bc: d5:3b:11:20:e0:a6:cd:4f:f2:08:c5:07:fa:12:97: 83:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4B:27:2A:65:AE:F6:3F:F5:11:A5:B5:56:77:45:4C:1E:DA:23:D1:C5 X509v3 Authority Key Identifier: keyid:B6:2E:44:2C:8D:2C:70:D0:F5:AB:5E:2A:3A:1F:11:B2:D0:B4:D8:BD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/40d34e77-6cf6-4187-9083-1c7a8819e965/0/B62E442C8D2C70D0F5AB5E2A3A1F11B2D0B4D8BD.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B62E442C8D2C70D0F5AB5E2A3A1F11B2D0B4D8BD.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/40d34e77-6cf6-4187-9083-1c7a8819e965/0/B62E442C8D2C70D0F5AB5E2A3A1F11B2D0B4D8BD.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 47:2d:60:fb:20:e5:e0:8e:17:48:75:ed:4f:1a:b2:46:76:ff: 97:a4:f0:25:38:a6:35:16:a5:51:ce:d8:b0:de:56:ac:0b:e2: 23:95:c7:fe:39:1f:a4:4b:d2:27:60:1f:e5:4b:e8:77:68:11: d8:23:fb:52:96:88:43:77:49:9c:16:c4:ab:36:54:b9:4d:5d: 0a:f3:2c:6c:73:01:7d:86:30:6e:1e:e6:7a:c6:88:6b:ca:45: e9:61:16:1b:07:b0:4a:f5:06:8e:65:22:37:1d:6f:51:20:65: 0c:5c:34:23:3a:02:e7:19:e4:86:c8:a5:4e:25:b1:bc:18:ff: 23:52:a5:84:48:28:66:20:ec:7c:67:64:13:c5:93:18:b4:8c: 4d:9d:36:fd:1e:78:19:4c:dd:4a:a5:85:f4:1c:ad:de:86:fe: fb:fc:d6:62:80:d6:ae:2e:5c:79:5e:fa:ab:90:5d:99:fa:d2: 7d:8f:1c:ca:49:e0:f7:df:67:ba:e8:c8:6d:8b:2e:37:e3:0c: f5:95:ad:de:2d:ae:0f:55:c6:a9:86:f1:69:dd:c9:da:0f:99: 87:4e:9d:5c:cc:9c:80:d0:e2:e1:b3:dd:7a:e6:f2:03:a2:b5: 3b:b7:7f:39:52:a7:d1:7d:9c:b7:4e:27:87:c8:8c:a9:79:e1: 2d:3a:2b:05 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUXf9us70QBqUyy/IzkXVsYXqNbZIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjYyRTQ0MkM4RDJDNzBEMEY1QUI1RTJBM0ExRjExQjJE MEI0RDhCRDAeFw0yNTEyMDUwNjE2NDdaFw0yNTEyMDgxNTQ5NDdaMDMxMTAvBgNV BAMTKDRCMjcyQTY1QUVGNjNGRjUxMUE1QjU1Njc3NDU0QzFFREEyM0QxQzUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDXodRisJez7wK4jn7AFLAHeu4u Pmz0hS+uQ5Wq8ZFeKVrAdP5KFn62snGVhSXQT1BAKyV2Kqh5XB62AN8i7mfnsAYg BNm7Hl+h9u0m5OgJ0bIU/VN3J1y8eR4/OUn8WY5aAo8cAPmrU89KA51b2sgE+SIa OPFZJEca3+1wJdfT7f8U//S7uPpJMGjEeNwMrcp9tAbI6/hl/3vJ6yfo7GcK5HMr HeAw8fWRxv6B3stEpPzEFL9oebSyuIxxnJwj6S0bxX/ojCw/ZhhNoZC3H2QqCIXZ +wVNJ4Vl0F75T86V/sGNdh19iqHSMcBJN0hvvNU7ESDgps1P8gjFB/oSl4PDAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUSycqZa72P/URpbVWd0VMHtoj0cUwHwYDVR0j BBgwFoAUti5ELI0scND1q14qOh8RstC02L0wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 MGQzNGU3Ny02Y2Y2LTQxODctOTA4My0xYzdhODgxOWU5NjUvMC9CNjJFNDQyQzhE MkM3MEQwRjVBQjVFMkEzQTFGMTFCMkQwQjREOEJELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQjYyRTQ0MkM4RDJDNzBEMEY1QUI1RTJBM0ExRjExQjJEMEI0 RDhCRC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNDBkMzRlNzctNmNmNi00MTg3LTkw ODMtMWM3YTg4MTllOTY1LzAvQjYyRTQ0MkM4RDJDNzBEMEY1QUI1RTJBM0ExRjEx QjJEMEI0RDhCRC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEctYPsg5eCOF0h17U8askZ2/5ek8CU4pjUW pVHO2LDeVqwL4iOVx/45H6RL0idgH+VL6HdoEdgj+1KWiEN3SZwWxKs2VLlNXQrz LGxzAX2GMG4e5nrGiGvKRelhFhsHsEr1Bo5lIjcdb1EgZQxcNCM6AucZ5IbIpU4l sbwY/yNSpYRIKGYg7HxnZBPFkxi0jE2dNv0eeBlM3UqlhfQcrd6G/vv81mKA1q4u XHle+quQXZn60n2PHMpJ4PffZ7royG2LLjfjDPWVrd4trg9VxqmG8WndydoPmYdO nVzMnIDQ4uGz3Xrm8gOitTu3fzlSp9F9nLdOJ4fIjKl54S06KwU= -----END CERTIFICATE-----Generated at Sun Dec 7 00:49:35 2025 by rpki-client