This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/45dff9b3-9041-4dd6-b7ab-02060d65d09a/0/B605D71FEB5A1DBE5676CFACB394ABBA37C83A86.mft File: B605D71FEB5A1DBE5676CFACB394ABBA37C83A86.mft (raw, json) Hash identifier: jyVaUr1pceamuVZycHdyEtf6+3xeOckJaBJKCEbJ2jE= Subject key identifier: 08:D4:15:43:28:BA:D7:8B:C6:97:AC:EA:72:0A:E2:52:BD:DB:56:05 Authority key identifier: B6:05:D7:1F:EB:5A:1D:BE:56:76:CF:AC:B3:94:AB:BA:37:C8:3A:86 Certificate issuer: /CN=B605D71FEB5A1DBE5676CFACB394ABBA37C83A86 Certificate serial: 31E4069AD77A7817C308470C8F3B43A87BB14848 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B605D71FEB5A1DBE5676CFACB394ABBA37C83A86.cer Subject info access: rsync://repo-rpki.idnic.net/repo/45dff9b3-9041-4dd6-b7ab-02060d65d09a/0/B605D71FEB5A1DBE5676CFACB394ABBA37C83A86.mft Manifest number: 052F Signing time: Fri 05 Dec 2025 21:32:10 +0000 Manifest this update: Fri 05 Dec 2025 21:27:10 +0000 Manifest next update: Tue 09 Dec 2025 03:16:10 +0000 Files and hashes: 1: 323430333a653434303a3a2f33322d3332203d3e20313338303936.roa (hash: NFm2BuROSXEUux226kkrY22nGhWfXy6Nzi8qa9TvywQ=) 2: 3130332e3132342e3139392e302f32342d3234203d3e20313338303936.roa (hash: 9iKS8p7Xao18ldzefre+pP4jboQ9AAl4Hg0B9pQyQbE=) 3: 3130332e3132342e3139382e302f32342d3234203d3e20313338303936.roa (hash: 6uaz9H2C0Zmi7+Kl7mXUqp61Tn9wAvtzejcx5d8BSvE=) 4: B605D71FEB5A1DBE5676CFACB394ABBA37C83A86.crl (hash: DxlEN7uuw9kpMUYb5uxTv028/CXkrPlSfiy4xMqkaKM=) 5: 3130332e3132342e3139372e302f32342d3234203d3e20313338303936.roa (hash: nzLKnI/D3cwy5mjROOKEojLaE+IM3VD8CZS+m6prGYU=) 6: 3130332e3132342e3139362e302f32342d3234203d3e20313338303936.roa (hash: n0pHhF58CPylB9y5w46zbjaPBFWjrRvur8ZNb3WIRks=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/45dff9b3-9041-4dd6-b7ab-02060d65d09a/0/B605D71FEB5A1DBE5676CFACB394ABBA37C83A86.crl rsync://repo-rpki.idnic.net/repo/45dff9b3-9041-4dd6-b7ab-02060d65d09a/0/B605D71FEB5A1DBE5676CFACB394ABBA37C83A86.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B605D71FEB5A1DBE5676CFACB394ABBA37C83A86.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 09 Dec 2025 03:16:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 31:e4:06:9a:d7:7a:78:17:c3:08:47:0c:8f:3b:43:a8:7b:b1:48:48 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B605D71FEB5A1DBE5676CFACB394ABBA37C83A86 Validity Not Before: Dec 5 21:27:10 2025 GMT Not After : Dec 9 03:16:10 2025 GMT Subject: CN=08D4154328BAD78BC697ACEA720AE252BDDB5605 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:6d:11:13:c6:ca:00:0b:25:c0:a6:2f:d4:b0: ed:31:4c:b2:cc:87:fb:e8:dc:c9:18:b5:11:16:a3: 4e:6e:53:f6:3a:0e:be:34:8d:32:84:38:56:0b:1d: c1:e3:cd:5d:44:09:5c:bf:f5:f6:aa:0f:f6:79:e5: 14:df:91:4f:24:bf:d8:b5:1d:85:dc:d8:3c:ed:db: c2:1b:40:78:e8:e0:87:c0:75:5a:50:4d:2f:39:40: bc:35:0e:2f:29:c0:90:a2:5c:00:01:e9:96:91:29: 85:fb:41:63:36:19:7c:cc:1e:48:56:ce:ff:a0:79: 96:e1:ad:82:62:82:65:48:ad:18:c4:fd:38:ba:6d: a8:45:f2:3d:8f:6f:6c:2b:47:ac:fb:bf:17:2f:97: 85:88:ac:be:ce:2e:42:10:fc:72:b0:72:3e:9f:dc: 13:09:0b:14:b7:d3:72:3f:9c:40:e9:d8:ec:f2:1e: d7:a2:ea:0e:37:2b:32:3f:75:79:ef:04:26:5e:38: aa:1d:ec:80:e2:f0:49:da:b5:e0:41:3d:dd:54:80: 38:44:d3:81:6f:01:6e:ae:6a:ab:45:c2:83:aa:d1: cd:64:b2:df:78:a8:c5:ea:58:0d:a0:63:13:5d:59: a8:a1:38:89:ab:35:61:21:b5:17:a2:47:d8:56:ee: ce:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 08:D4:15:43:28:BA:D7:8B:C6:97:AC:EA:72:0A:E2:52:BD:DB:56:05 X509v3 Authority Key Identifier: keyid:B6:05:D7:1F:EB:5A:1D:BE:56:76:CF:AC:B3:94:AB:BA:37:C8:3A:86 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/45dff9b3-9041-4dd6-b7ab-02060d65d09a/0/B605D71FEB5A1DBE5676CFACB394ABBA37C83A86.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B605D71FEB5A1DBE5676CFACB394ABBA37C83A86.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/45dff9b3-9041-4dd6-b7ab-02060d65d09a/0/B605D71FEB5A1DBE5676CFACB394ABBA37C83A86.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 92:f1:ff:f3:df:5e:34:f6:04:7f:92:50:97:30:1f:60:e0:e4: 0f:70:a6:95:85:44:e5:9e:80:31:b6:f8:a6:c5:24:e8:7a:b6: 0e:31:6a:81:90:c5:48:9c:a9:f4:97:51:b7:0d:2b:a6:87:3d: 15:fa:31:94:bc:6b:8d:a3:d5:e5:e3:05:c3:6d:52:af:07:13: 6e:08:b1:5c:9b:23:7f:6c:c9:69:71:f8:a2:61:c6:5f:86:11: 19:e3:eb:9c:9e:80:84:5a:35:46:78:c1:e4:23:31:70:cd:b6: a4:cb:f7:2b:c1:1f:e4:ca:26:e3:aa:8a:68:15:74:01:af:64: 0f:40:de:78:cb:60:e9:2c:b1:24:40:fe:fe:41:23:ba:36:b1: 64:3d:7d:d8:99:42:f5:d0:1d:98:3b:97:3f:61:94:a1:27:5b: fa:47:ac:f3:7f:73:17:12:49:c7:f4:b7:e7:3b:cc:1c:c3:f3: 2f:55:c6:a8:93:88:cc:2c:e6:a5:9f:fe:69:ab:77:ea:b4:24: c9:50:c9:b6:98:95:cb:cc:8c:19:06:6e:a4:55:93:5e:a3:90: a5:96:0f:c8:a9:ef:e2:82:88:af:db:df:e2:f3:af:5b:47:42: 46:01:66:12:56:8e:1e:0e:d7:24:3d:f3:a5:b0:50:57:c8:fb: 30:72:7b:41 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUMeQGmtd6eBfDCEcMjztDqHuxSEgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjYwNUQ3MUZFQjVBMURCRTU2NzZDRkFDQjM5NEFCQkEz N0M4M0E4NjAeFw0yNTEyMDUyMTI3MTBaFw0yNTEyMDkwMzE2MTBaMDMxMTAvBgNV BAMTKDA4RDQxNTQzMjhCQUQ3OEJDNjk3QUNFQTcyMEFFMjUyQkREQjU2MDUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDnbRETxsoACyXApi/UsO0xTLLM h/vo3MkYtREWo05uU/Y6Dr40jTKEOFYLHcHjzV1ECVy/9faqD/Z55RTfkU8kv9i1 HYXc2Dzt28IbQHjo4IfAdVpQTS85QLw1Di8pwJCiXAAB6ZaRKYX7QWM2GXzMHkhW zv+geZbhrYJigmVIrRjE/Ti6bahF8j2Pb2wrR6z7vxcvl4WIrL7OLkIQ/HKwcj6f 3BMJCxS303I/nEDp2OzyHtei6g43KzI/dXnvBCZeOKod7IDi8EnateBBPd1UgDhE 04FvAW6uaqtFwoOq0c1kst94qMXqWA2gYxNdWaihOImrNWEhtReiR9hW7s5hAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUCNQVQyi614vGl6zqcgriUr3bVgUwHwYDVR0j BBgwFoAUtgXXH+taHb5Wds+ss5SrujfIOoYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 NWRmZjliMy05MDQxLTRkZDYtYjdhYi0wMjA2MGQ2NWQwOWEvMC9CNjA1RDcxRkVC NUExREJFNTY3NkNGQUNCMzk0QUJCQTM3QzgzQTg2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQjYwNUQ3MUZFQjVBMURCRTU2NzZDRkFDQjM5NEFCQkEzN0M4 M0E4Ni5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNDVkZmY5YjMtOTA0MS00ZGQ2LWI3 YWItMDIwNjBkNjVkMDlhLzAvQjYwNUQ3MUZFQjVBMURCRTU2NzZDRkFDQjM5NEFC QkEzN0M4M0E4Ni5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJLx//PfXjT2BH+SUJcwH2Dg5A9wppWFROWe gDG2+KbFJOh6tg4xaoGQxUicqfSXUbcNK6aHPRX6MZS8a42j1eXjBcNtUq8HE24I sVybI39syWlx+KJhxl+GERnj65yegIRaNUZ4weQjMXDNtqTL9yvBH+TKJuOqimgV dAGvZA9A3njLYOkssSRA/v5BI7o2sWQ9fdiZQvXQHZg7lz9hlKEnW/pHrPN/cxcS Scf0t+c7zBzD8y9VxqiTiMws5qWf/mmrd+q0JMlQybaYlcvMjBkGbqRVk16jkKWW D8ip7+KCiK/b3+Lzr1tHQkYBZhJWjh4O1yQ986WwUFfI+zBye0E= -----END CERTIFICATE-----Generated at Sun Dec 7 10:48:10 2025 by rpki-client