This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/42713a32-fada-484e-a68d-0cac0fffa33c/0/B0FA6C3ED4780E032B0A3F161E018A7C8FA82B45.mft File: B0FA6C3ED4780E032B0A3F161E018A7C8FA82B45.mft (raw, json) Hash identifier: SIrcg+3a3di9zthom+kqApmPyyd4AE121AiEnzviTcM= Subject key identifier: CC:36:D7:44:88:A6:EC:4C:5C:92:9E:B9:2E:6C:4A:71:66:D8:AF:79 Authority key identifier: B0:FA:6C:3E:D4:78:0E:03:2B:0A:3F:16:1E:01:8A:7C:8F:A8:2B:45 Certificate issuer: /CN=B0FA6C3ED4780E032B0A3F161E018A7C8FA82B45 Certificate serial: 455600F64886098D86DEA53B70E60BD6D0ED1A0A Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B0FA6C3ED4780E032B0A3F161E018A7C8FA82B45.cer Subject info access: rsync://repo-rpki.idnic.net/repo/42713a32-fada-484e-a68d-0cac0fffa33c/0/B0FA6C3ED4780E032B0A3F161E018A7C8FA82B45.mft Manifest number: 0248 Signing time: Sat 06 Dec 2025 11:42:17 +0000 Manifest this update: Sat 06 Dec 2025 11:37:17 +0000 Manifest next update: Tue 09 Dec 2025 18:11:17 +0000 Files and hashes: 1: 3130332e3138362e3136382e302f32342d3234203d3e20313439333135.roa (hash: cA/IXkQfExxLqkZklRIGA4Iq/8wfMruGPEzuyZnNgNM=) 2: 3130332e3138362e3136392e302f32342d3234203d3e20313439333135.roa (hash: k0YtTjCvRfHkKBkEOTB9msrr0NImtoiaOd/b0Un02oI=) 3: B0FA6C3ED4780E032B0A3F161E018A7C8FA82B45.crl (hash: gwvoOLQiqkSGMnbTbkafhMwEfIXTle6iVm+kbrHOo0g=) 4: 3130332e3138362e3136382e302f32332d3233203d3e20313439333135.roa (hash: 0o9IBgjEwrH3ZJGqMXSmtJgW+TONR3n1c/K3AjhSCz0=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/42713a32-fada-484e-a68d-0cac0fffa33c/0/B0FA6C3ED4780E032B0A3F161E018A7C8FA82B45.crl rsync://repo-rpki.idnic.net/repo/42713a32-fada-484e-a68d-0cac0fffa33c/0/B0FA6C3ED4780E032B0A3F161E018A7C8FA82B45.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B0FA6C3ED4780E032B0A3F161E018A7C8FA82B45.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 09 Dec 2025 15:57:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 45:56:00:f6:48:86:09:8d:86:de:a5:3b:70:e6:0b:d6:d0:ed:1a:0a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B0FA6C3ED4780E032B0A3F161E018A7C8FA82B45 Validity Not Before: Dec 6 11:37:17 2025 GMT Not After : Dec 9 18:11:17 2025 GMT Subject: CN=CC36D74488A6EC4C5C929EB92E6C4A7166D8AF79 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:f4:36:97:f0:8f:87:9e:7f:0b:a7:cc:c2:d4: a7:0b:17:98:35:08:5d:4f:ad:f5:2d:51:9a:18:aa: 72:66:1e:0e:76:5f:f6:04:93:cc:fe:5b:dc:87:01: c7:f1:f4:78:0d:77:e6:35:87:51:fd:33:4c:32:20: 99:77:53:18:85:c5:e0:b0:23:97:a8:d6:15:2b:55: 66:ca:e8:ed:2d:fc:83:ce:22:e2:fd:81:ef:f5:ca: 34:69:ea:6a:50:62:5a:30:35:a2:c3:ac:2a:c7:58: 18:35:8a:83:30:67:4a:93:79:ee:9a:42:ef:60:53: 94:c1:58:c2:dc:1d:63:2b:6f:46:dc:1c:e0:2b:a8: 9a:bb:a8:8d:9e:88:38:9d:3f:6e:62:d8:c2:08:d2: 03:f5:4c:d8:6f:c3:cf:08:05:fc:5d:dc:fb:34:bf: 03:85:6b:ce:23:b7:0c:c8:89:86:b1:ed:37:cf:79: 7e:92:dc:68:12:11:5e:d6:40:82:33:be:d3:a5:e0: 43:2e:fb:bd:d9:aa:a5:39:06:29:f3:6a:5f:59:aa: 32:dc:f5:81:d1:02:75:91:8c:af:88:f2:b6:43:d0: a3:f8:85:fb:16:6c:be:2a:7b:3e:cf:a5:c1:55:b8: 72:c6:71:d0:54:24:96:e6:cc:5e:88:11:bc:60:67: 68:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CC:36:D7:44:88:A6:EC:4C:5C:92:9E:B9:2E:6C:4A:71:66:D8:AF:79 X509v3 Authority Key Identifier: keyid:B0:FA:6C:3E:D4:78:0E:03:2B:0A:3F:16:1E:01:8A:7C:8F:A8:2B:45 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/42713a32-fada-484e-a68d-0cac0fffa33c/0/B0FA6C3ED4780E032B0A3F161E018A7C8FA82B45.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B0FA6C3ED4780E032B0A3F161E018A7C8FA82B45.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/42713a32-fada-484e-a68d-0cac0fffa33c/0/B0FA6C3ED4780E032B0A3F161E018A7C8FA82B45.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 03:76:14:8f:65:b3:55:a3:2b:b0:96:fd:e3:ba:47:86:83:e5: 78:93:65:17:89:3f:64:c5:f1:d7:87:2d:9d:b0:ca:9a:5b:52: c2:ae:32:5c:8d:e5:c9:3d:5c:ed:05:2d:fb:72:9c:c0:fe:c1: 80:d2:a4:77:84:54:3f:31:1a:5c:c0:68:25:eb:3d:04:0e:52: 0a:e6:b0:9f:c0:cf:4c:42:6c:93:01:a3:bf:d7:08:8e:dc:aa: 9f:09:e8:73:08:28:06:b4:15:fa:71:01:18:15:40:cc:51:21: 46:a4:45:2f:0d:df:35:bd:83:d0:6f:54:96:ba:7a:67:15:08: 97:4a:b6:0e:ac:a1:93:a8:ef:ad:df:7b:bd:a9:65:2c:08:57: 52:c8:e7:92:9c:5f:d7:57:51:69:c1:48:81:df:d8:03:e4:fe: 61:2a:e8:a0:a2:e9:89:ba:dc:ec:06:76:3a:79:2c:59:9d:d5: ca:52:f2:4c:3b:42:63:6e:04:0d:0d:a0:ad:56:95:95:10:1b: 16:4e:c2:05:0d:a0:3d:53:51:cf:1d:73:c0:aa:1f:8b:eb:26: df:e6:0d:bd:f6:bd:70:b8:3d:91:53:c4:3b:2a:c8:51:2d:50: 52:c7:2a:3a:d0:23:19:e6:e0:40:c4:26:5f:0a:ef:18:d5:af: ac:dd:6d:99 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIURVYA9kiGCY2G3qU7cOYL1tDtGgowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjBGQTZDM0VENDc4MEUwMzJCMEEzRjE2MUUwMThBN0M4 RkE4MkI0NTAeFw0yNTEyMDYxMTM3MTdaFw0yNTEyMDkxODExMTdaMDMxMTAvBgNV BAMTKENDMzZENzQ0ODhBNkVDNEM1QzkyOUVCOTJFNkM0QTcxNjZEOEFGNzkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDk9DaX8I+Hnn8Lp8zC1KcLF5g1 CF1PrfUtUZoYqnJmHg52X/YEk8z+W9yHAcfx9HgNd+Y1h1H9M0wyIJl3UxiFxeCw I5eo1hUrVWbK6O0t/IPOIuL9ge/1yjRp6mpQYlowNaLDrCrHWBg1ioMwZ0qTee6a Qu9gU5TBWMLcHWMrb0bcHOArqJq7qI2eiDidP25i2MII0gP1TNhvw88IBfxd3Ps0 vwOFa84jtwzIiYax7TfPeX6S3GgSEV7WQIIzvtOl4EMu+73ZqqU5Binzal9ZqjLc 9YHRAnWRjK+I8rZD0KP4hfsWbL4qez7PpcFVuHLGcdBUJJbmzF6IEbxgZ2hJAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUzDbXRIim7Exckp65LmxKcWbYr3kwHwYDVR0j BBgwFoAUsPpsPtR4DgMrCj8WHgGKfI+oK0UwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 MjcxM2EzMi1mYWRhLTQ4NGUtYTY4ZC0wY2FjMGZmZmEzM2MvMC9CMEZBNkMzRUQ0 NzgwRTAzMkIwQTNGMTYxRTAxOEE3QzhGQTgyQjQ1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQjBGQTZDM0VENDc4MEUwMzJCMEEzRjE2MUUwMThBN0M4RkE4 MkI0NS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNDI3MTNhMzItZmFkYS00ODRlLWE2 OGQtMGNhYzBmZmZhMzNjLzAvQjBGQTZDM0VENDc4MEUwMzJCMEEzRjE2MUUwMThB N0M4RkE4MkI0NS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAN2FI9ls1WjK7CW/eO6R4aD5XiTZReJP2TF 8deHLZ2wyppbUsKuMlyN5ck9XO0FLftynMD+wYDSpHeEVD8xGlzAaCXrPQQOUgrm sJ/Az0xCbJMBo7/XCI7cqp8J6HMIKAa0FfpxARgVQMxRIUakRS8N3zW9g9BvVJa6 emcVCJdKtg6soZOo763fe72pZSwIV1LI55KcX9dXUWnBSIHf2APk/mEq6KCi6Ym6 3OwGdjp5LFmd1cpS8kw7QmNuBA0NoK1WlZUQGxZOwgUNoD1TUc8dc8CqH4vrJt/m Db32vXC4PZFTxDsqyFEtUFLHKjrQIxnm4EDEJl8K7xjVr6zdbZk= -----END CERTIFICATE-----Generated at Sun Dec 7 08:36:33 2025 by rpki-client