This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/45dff9b3-9041-4dd6-b7ab-02060d65d09a/0/B605D71FEB5A1DBE5676CFACB394ABBA37C83A86.mft File: B605D71FEB5A1DBE5676CFACB394ABBA37C83A86.mft (raw, json) Hash identifier: 3ovET6elqd3+lFwucVzYjmqcwfdqBsxfaRAfFJViLqo= Subject key identifier: 22:A7:3A:6D:EF:57:4D:93:40:4F:23:E9:54:41:A3:3A:D4:E6:8E:BE Authority key identifier: B6:05:D7:1F:EB:5A:1D:BE:56:76:CF:AC:B3:94:AB:BA:37:C8:3A:86 Certificate issuer: /CN=B605D71FEB5A1DBE5676CFACB394ABBA37C83A86 Certificate serial: 0E462D031DCB6E145D4F693AB806A30C59D18A01 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B605D71FEB5A1DBE5676CFACB394ABBA37C83A86.cer Subject info access: rsync://repo-rpki.idnic.net/repo/45dff9b3-9041-4dd6-b7ab-02060d65d09a/0/B605D71FEB5A1DBE5676CFACB394ABBA37C83A86.mft Manifest number: 0533 Signing time: Mon 15 Dec 2025 09:42:13 +0000 Manifest this update: Mon 15 Dec 2025 09:37:13 +0000 Manifest next update: Thu 18 Dec 2025 11:44:13 +0000 Files and hashes: 1: 3130332e3132342e3139392e302f32342d3234203d3e20313338303936.roa (hash: 9iKS8p7Xao18ldzefre+pP4jboQ9AAl4Hg0B9pQyQbE=) 2: 3130332e3132342e3139362e302f32342d3234203d3e20313338303936.roa (hash: n0pHhF58CPylB9y5w46zbjaPBFWjrRvur8ZNb3WIRks=) 3: B605D71FEB5A1DBE5676CFACB394ABBA37C83A86.crl (hash: 1GSgtlHviGN4zLUiD7z6Qdce4HZ0aDtAFTPdZrhjUyU=) 4: 323430333a653434303a3a2f33322d3332203d3e20313338303936.roa (hash: NFm2BuROSXEUux226kkrY22nGhWfXy6Nzi8qa9TvywQ=) 5: 3130332e3132342e3139382e302f32342d3234203d3e20313338303936.roa (hash: 6uaz9H2C0Zmi7+Kl7mXUqp61Tn9wAvtzejcx5d8BSvE=) 6: 3130332e3132342e3139372e302f32342d3234203d3e20313338303936.roa (hash: nzLKnI/D3cwy5mjROOKEojLaE+IM3VD8CZS+m6prGYU=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/45dff9b3-9041-4dd6-b7ab-02060d65d09a/0/B605D71FEB5A1DBE5676CFACB394ABBA37C83A86.crl rsync://repo-rpki.idnic.net/repo/45dff9b3-9041-4dd6-b7ab-02060d65d09a/0/B605D71FEB5A1DBE5676CFACB394ABBA37C83A86.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B605D71FEB5A1DBE5676CFACB394ABBA37C83A86.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 18 Dec 2025 11:44:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0e:46:2d:03:1d:cb:6e:14:5d:4f:69:3a:b8:06:a3:0c:59:d1:8a:01 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B605D71FEB5A1DBE5676CFACB394ABBA37C83A86 Validity Not Before: Dec 15 09:37:13 2025 GMT Not After : Dec 18 11:44:13 2025 GMT Subject: CN=22A73A6DEF574D93404F23E95441A33AD4E68EBE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:d7:9a:e3:f3:dd:47:c0:60:c3:d4:a8:76:f1: 7a:43:5a:96:8e:95:cb:d6:cd:70:20:76:99:ae:50: 6f:87:60:3a:bc:90:a5:57:8a:a7:43:de:a3:de:e7: 34:87:64:5f:63:47:61:35:b4:0e:b9:b0:78:b4:5a: d6:4e:67:ea:d5:aa:11:01:d2:02:63:a0:32:55:b1: 3b:fe:54:16:e4:ad:9a:2c:19:8c:63:7d:93:b0:b2: 39:c3:8c:ab:d1:5f:f3:9a:e6:22:79:79:a6:9f:43: cc:bc:98:00:3b:43:42:e5:ce:a6:4e:e4:d0:38:bf: 2f:d2:65:08:be:12:4d:58:b5:fb:11:9d:6f:c0:15: 6f:2b:fc:fa:0a:c6:14:e6:9d:07:7d:b4:36:2f:cb: aa:2f:2d:09:4b:ce:20:d9:e8:c9:14:51:82:6c:f9: 23:71:6f:4e:1e:83:67:09:3a:66:5f:45:ce:de:ee: 2d:f3:ce:dc:a4:c9:14:e8:f6:31:0c:f8:e1:53:5d: f4:47:3d:64:6d:08:6f:a4:2c:d0:92:9c:fd:18:44: e2:90:3f:06:dd:37:94:74:c4:33:15:e3:da:e3:35: 03:df:51:5f:26:52:d9:6a:ef:f2:93:05:be:56:e0: c3:91:dd:1b:e1:7d:01:24:d5:f7:9b:dc:a7:5b:30: 05:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:A7:3A:6D:EF:57:4D:93:40:4F:23:E9:54:41:A3:3A:D4:E6:8E:BE X509v3 Authority Key Identifier: keyid:B6:05:D7:1F:EB:5A:1D:BE:56:76:CF:AC:B3:94:AB:BA:37:C8:3A:86 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/45dff9b3-9041-4dd6-b7ab-02060d65d09a/0/B605D71FEB5A1DBE5676CFACB394ABBA37C83A86.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B605D71FEB5A1DBE5676CFACB394ABBA37C83A86.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/45dff9b3-9041-4dd6-b7ab-02060d65d09a/0/B605D71FEB5A1DBE5676CFACB394ABBA37C83A86.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 79:13:76:ce:f6:09:11:fd:b8:1b:85:ce:81:78:b3:ef:1b:83: b6:88:51:42:a9:f4:0a:6c:42:6f:c8:21:21:dc:52:db:61:8e: 80:e0:93:28:1b:ce:15:08:21:6d:41:a5:ac:be:21:0e:0b:9b: 86:fc:fb:3a:86:80:7b:df:b5:d7:13:59:1c:86:cf:b6:e9:f4: f8:e7:84:0a:b4:f8:21:da:91:2f:7a:2d:90:37:7f:18:77:9a: b1:2b:a7:50:20:bd:3c:58:3c:12:0a:a3:e5:06:fb:22:b0:b2: 55:04:ed:60:ac:77:1d:21:b5:ff:4c:23:72:ab:98:ec:41:fd: 66:f9:8b:d1:a4:9f:73:e9:5a:d5:ec:a4:22:10:cd:84:10:96: ef:0a:b3:dc:f7:f1:b6:38:51:92:28:29:19:0e:6c:db:27:bb: 4c:cd:f3:c8:a9:32:33:ea:de:d3:9d:2d:e2:98:93:b4:f3:0f: d7:8f:b3:09:de:f1:a7:22:2d:58:5e:d8:20:c3:66:eb:14:ca: e1:79:88:1a:6a:04:f5:ab:e1:6c:2b:b7:e5:e5:0c:3a:45:dc: 7e:12:48:11:33:c6:21:7f:85:b0:ea:fa:bb:26:46:18:36:e5: ba:c6:8f:e5:e5:58:2e:6b:71:ab:0e:98:c4:41:90:48:f8:4c: e1:8d:e6:6c -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUDkYtAx3LbhRdT2k6uAajDFnRigEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjYwNUQ3MUZFQjVBMURCRTU2NzZDRkFDQjM5NEFCQkEz N0M4M0E4NjAeFw0yNTEyMTUwOTM3MTNaFw0yNTEyMTgxMTQ0MTNaMDMxMTAvBgNV BAMTKDIyQTczQTZERUY1NzREOTM0MDRGMjNFOTU0NDFBMzNBRDRFNjhFQkUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCq15rj891HwGDD1Kh28XpDWpaO lcvWzXAgdpmuUG+HYDq8kKVXiqdD3qPe5zSHZF9jR2E1tA65sHi0WtZOZ+rVqhEB 0gJjoDJVsTv+VBbkrZosGYxjfZOwsjnDjKvRX/Oa5iJ5eaafQ8y8mAA7Q0LlzqZO 5NA4vy/SZQi+Ek1YtfsRnW/AFW8r/PoKxhTmnQd9tDYvy6ovLQlLziDZ6MkUUYJs +SNxb04eg2cJOmZfRc7e7i3zztykyRTo9jEM+OFTXfRHPWRtCG+kLNCSnP0YROKQ PwbdN5R0xDMV49rjNQPfUV8mUtlq7/KTBb5W4MOR3RvhfQEk1feb3KdbMAUxAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUIqc6be9XTZNATyPpVEGjOtTmjr4wHwYDVR0j BBgwFoAUtgXXH+taHb5Wds+ss5SrujfIOoYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 NWRmZjliMy05MDQxLTRkZDYtYjdhYi0wMjA2MGQ2NWQwOWEvMC9CNjA1RDcxRkVC NUExREJFNTY3NkNGQUNCMzk0QUJCQTM3QzgzQTg2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQjYwNUQ3MUZFQjVBMURCRTU2NzZDRkFDQjM5NEFCQkEzN0M4 M0E4Ni5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNDVkZmY5YjMtOTA0MS00ZGQ2LWI3 YWItMDIwNjBkNjVkMDlhLzAvQjYwNUQ3MUZFQjVBMURCRTU2NzZDRkFDQjM5NEFC QkEzN0M4M0E4Ni5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHkTds72CRH9uBuFzoF4s+8bg7aIUUKp9Aps Qm/IISHcUtthjoDgkygbzhUIIW1Bpay+IQ4Lm4b8+zqGgHvftdcTWRyGz7bp9Pjn hAq0+CHakS96LZA3fxh3mrErp1AgvTxYPBIKo+UG+yKwslUE7WCsdx0htf9MI3Kr mOxB/Wb5i9Gkn3PpWtXspCIQzYQQlu8Ks9z38bY4UZIoKRkObNsnu0zN88ipMjPq 3tOdLeKYk7TzD9ePswne8aciLVhe2CDDZusUyuF5iBpqBPWr4Wwrt+XlDDpF3H4S SBEzxiF/hbDq+rsmRhg25brGj+XlWC5rcasOmMRBkEj4TOGN5mw= -----END CERTIFICATE-----Generated at Tue Dec 16 11:05:17 2025 by rpki-client