This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/57cd511f-afff-4fec-8724-d4119f891df2/0/B0B4D0A5FD4E58D80534977B027C8BC68222070F.mft File: B0B4D0A5FD4E58D80534977B027C8BC68222070F.mft (raw, json) Hash identifier: xvM3FkkvcM5OOBGP6QshIXjhQrFZyL4B4ahIZRBY324= Subject key identifier: 45:45:A2:EA:F9:E0:92:6B:2B:47:16:B8:D0:A3:D0:7A:F9:26:AA:35 Authority key identifier: B0:B4:D0:A5:FD:4E:58:D8:05:34:97:7B:02:7C:8B:C6:82:22:07:0F Certificate issuer: /CN=B0B4D0A5FD4E58D80534977B027C8BC68222070F Certificate serial: 5497F706E43B582F1F380214248A5ED454D7AB77 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B0B4D0A5FD4E58D80534977B027C8BC68222070F.cer Subject info access: rsync://repo-rpki.idnic.net/repo/57cd511f-afff-4fec-8724-d4119f891df2/0/B0B4D0A5FD4E58D80534977B027C8BC68222070F.mft Manifest number: 03A9 Signing time: Sat 06 Dec 2025 07:41:27 +0000 Manifest this update: Sat 06 Dec 2025 07:36:27 +0000 Manifest next update: Tue 09 Dec 2025 11:11:27 +0000 Files and hashes: 1: 3130332e3136342e35372e302f32342d3234203d3e20313431393033.roa (hash: QHTzNtrA62lCbap5pnLy6Afc1/3RNfZE7wu74tOUQBg=) 2: 3130332e3136342e35362e302f32342d3234203d3e20313431393033.roa (hash: BZ7IxyZHQ1xzeEJa2EscxaRyrE0WSeLJOeD3hu5iHH8=) 3: 3130332e3136342e35362e302f32332d3233203d3e20313431393033.roa (hash: lmDaoh03D9rTDqDSAuHtSlsBls3g0dB3bSo5aCMqbVU=) 4: B0B4D0A5FD4E58D80534977B027C8BC68222070F.crl (hash: 8AEkRC6OmoLtAVwsY4p3CCY+JacN1V8EOewQx3ZKklw=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/57cd511f-afff-4fec-8724-d4119f891df2/0/B0B4D0A5FD4E58D80534977B027C8BC68222070F.crl rsync://repo-rpki.idnic.net/repo/57cd511f-afff-4fec-8724-d4119f891df2/0/B0B4D0A5FD4E58D80534977B027C8BC68222070F.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B0B4D0A5FD4E58D80534977B027C8BC68222070F.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 09 Dec 2025 11:11:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 54:97:f7:06:e4:3b:58:2f:1f:38:02:14:24:8a:5e:d4:54:d7:ab:77 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B0B4D0A5FD4E58D80534977B027C8BC68222070F Validity Not Before: Dec 6 07:36:27 2025 GMT Not After : Dec 9 11:11:27 2025 GMT Subject: CN=4545A2EAF9E0926B2B4716B8D0A3D07AF926AA35 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:29:49:c7:36:d1:86:66:fc:8e:40:0f:3b:08: a2:f8:bc:69:55:9c:45:ff:82:f2:38:ba:f2:f0:c1: e4:88:6c:3b:12:37:75:0e:8a:b1:56:ae:7c:b6:18: ba:64:b0:b5:20:4c:b4:36:b7:5d:17:6e:ee:55:b2: b8:62:b5:44:f5:4e:25:93:4c:36:9f:8c:91:71:d4: 0d:86:1d:92:9a:fd:00:3d:05:fb:b1:89:67:9c:b4: 44:29:e1:60:1d:b9:55:83:a3:6a:99:e9:95:1a:f8: 0d:27:78:81:99:a7:0a:d2:76:de:a1:c8:ea:a5:10: 8d:b4:95:ca:ef:9c:87:3d:41:8a:f5:79:f4:fc:66: fa:f9:79:a2:c8:4b:a4:1f:d5:2e:9c:48:83:fc:11: a9:c5:4d:31:26:c9:85:7f:2b:b1:f8:5b:d7:1c:97: a2:0a:28:80:b0:66:b8:5f:5b:a8:52:58:e5:e0:1e: b3:f1:65:93:87:8a:f9:dc:fc:db:af:a0:6b:69:2a: b7:36:bc:a0:9a:a8:fd:ff:47:ef:2d:6e:30:27:f0: b6:2b:9e:3a:99:34:e1:87:e8:1e:47:4a:bd:ed:06: 7e:1f:64:d7:a0:ce:fe:80:e2:a7:42:a6:79:8f:63: 9d:59:0b:45:fd:1c:ef:8c:b9:b3:d6:d8:3e:53:74: 86:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 45:45:A2:EA:F9:E0:92:6B:2B:47:16:B8:D0:A3:D0:7A:F9:26:AA:35 X509v3 Authority Key Identifier: keyid:B0:B4:D0:A5:FD:4E:58:D8:05:34:97:7B:02:7C:8B:C6:82:22:07:0F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/57cd511f-afff-4fec-8724-d4119f891df2/0/B0B4D0A5FD4E58D80534977B027C8BC68222070F.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B0B4D0A5FD4E58D80534977B027C8BC68222070F.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/57cd511f-afff-4fec-8724-d4119f891df2/0/B0B4D0A5FD4E58D80534977B027C8BC68222070F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5d:45:04:a7:54:df:1e:72:f6:32:32:38:50:9b:7c:91:80:f9: c9:a8:f3:25:1f:8c:af:d0:0e:5b:fa:c7:c1:12:94:7c:0b:58: 6c:f4:31:73:c8:1e:ea:e6:b6:64:fa:d0:70:27:19:b7:47:4e: e5:8e:7b:3b:25:11:8f:64:06:f5:61:2c:0d:c2:5d:4e:69:d3: fa:ec:54:30:d3:e9:13:a3:2f:29:74:1d:be:b9:42:35:cc:2a: cc:f2:a2:fe:11:e4:ff:86:11:d8:82:a0:75:61:bc:9f:ed:21: a9:8e:df:ac:cc:ad:c4:b1:76:b5:99:1d:0b:0e:47:59:1a:ab: 1d:58:31:f8:62:fc:29:f8:d5:6e:78:6a:f1:65:a8:81:32:7c: 12:6b:8c:24:0c:bc:e8:8c:7d:84:60:2a:81:fb:b2:31:3c:9b: a8:b6:60:9b:eb:30:cc:68:69:67:30:5d:d9:ad:ad:e1:7f:70: cd:12:ef:32:08:11:30:f1:eb:45:96:c8:be:8a:7d:64:63:03: 7c:9a:de:df:4e:be:6d:6f:c9:83:d7:a9:83:f3:66:25:86:b1: 4f:3d:87:d3:eb:bf:cb:15:ad:44:d0:cc:1c:24:7f:f0:b2:70: 52:8d:d5:45:05:a7:04:85:7a:16:3b:c5:c0:0b:1c:ce:67:a9: 66:10:55:8d -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUVJf3BuQ7WC8fOAIUJIpe1FTXq3cwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjBCNEQwQTVGRDRFNThEODA1MzQ5NzdCMDI3QzhCQzY4 MjIyMDcwRjAeFw0yNTEyMDYwNzM2MjdaFw0yNTEyMDkxMTExMjdaMDMxMTAvBgNV BAMTKDQ1NDVBMkVBRjlFMDkyNkIyQjQ3MTZCOEQwQTNEMDdBRjkyNkFBMzUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDZKUnHNtGGZvyOQA87CKL4vGlV nEX/gvI4uvLwweSIbDsSN3UOirFWrny2GLpksLUgTLQ2t10Xbu5VsrhitUT1TiWT TDafjJFx1A2GHZKa/QA9BfuxiWectEQp4WAduVWDo2qZ6ZUa+A0neIGZpwrSdt6h yOqlEI20lcrvnIc9QYr1efT8Zvr5eaLIS6Qf1S6cSIP8EanFTTEmyYV/K7H4W9cc l6IKKICwZrhfW6hSWOXgHrPxZZOHivnc/NuvoGtpKrc2vKCaqP3/R+8tbjAn8LYr njqZNOGH6B5HSr3tBn4fZNegzv6A4qdCpnmPY51ZC0X9HO+MubPW2D5TdIafAgMB AAGjggI8MIICODAdBgNVHQ4EFgQURUWi6vngkmsrRxa40KPQevkmqjUwHwYDVR0j BBgwFoAUsLTQpf1OWNgFNJd7AnyLxoIiBw8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 N2NkNTExZi1hZmZmLTRmZWMtODcyNC1kNDExOWY4OTFkZjIvMC9CMEI0RDBBNUZE NEU1OEQ4MDUzNDk3N0IwMjdDOEJDNjgyMjIwNzBGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQjBCNEQwQTVGRDRFNThEODA1MzQ5NzdCMDI3QzhCQzY4MjIy MDcwRi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNTdjZDUxMWYtYWZmZi00ZmVjLTg3 MjQtZDQxMTlmODkxZGYyLzAvQjBCNEQwQTVGRDRFNThEODA1MzQ5NzdCMDI3QzhC QzY4MjIyMDcwRi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAF1FBKdU3x5y9jIyOFCbfJGA+cmo8yUfjK/Q Dlv6x8ESlHwLWGz0MXPIHurmtmT60HAnGbdHTuWOezslEY9kBvVhLA3CXU5p0/rs VDDT6ROjLyl0Hb65QjXMKszyov4R5P+GEdiCoHVhvJ/tIamO36zMrcSxdrWZHQsO R1kaqx1YMfhi/Cn41W54avFlqIEyfBJrjCQMvOiMfYRgKoH7sjE8m6i2YJvrMMxo aWcwXdmtreF/cM0S7zIIETDx60WWyL6KfWRjA3ya3t9Ovm1vyYPXqYPzZiWGsU89 h9Prv8sVrUTQzBwkf/CycFKN1UUFpwSFehY7xcALHM5nqWYQVY0= -----END CERTIFICATE-----Generated at Sun Dec 7 00:14:15 2025 by rpki-client