This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/5bf2cf03-f9f9-4bca-8c2c-6073280dfea8/0/B392381083372148D0977D0066CFF38FD5A32CDB.mft File: B392381083372148D0977D0066CFF38FD5A32CDB.mft (raw, json) Hash identifier: FHLT1r4cOK+T1UaeoN6g7ZFtIUItkaxhj02s2WKX2iU= Subject key identifier: 6C:12:62:E5:46:C4:73:60:22:B0:2D:4A:CC:B3:33:C9:5C:CF:9C:AB Authority key identifier: B3:92:38:10:83:37:21:48:D0:97:7D:00:66:CF:F3:8F:D5:A3:2C:DB Certificate issuer: /CN=B392381083372148D0977D0066CFF38FD5A32CDB Certificate serial: 4A8B7C9092CE25294CC6CD5EE66D7CB4EE48F7E3 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B392381083372148D0977D0066CFF38FD5A32CDB.cer Subject info access: rsync://repo-rpki.idnic.net/repo/5bf2cf03-f9f9-4bca-8c2c-6073280dfea8/0/B392381083372148D0977D0066CFF38FD5A32CDB.mft Manifest number: 0258 Signing time: Fri 05 Dec 2025 19:32:08 +0000 Manifest this update: Fri 05 Dec 2025 19:27:08 +0000 Manifest next update: Tue 09 Dec 2025 03:42:08 +0000 Files and hashes: 1: 3130332e3138352e38322e302f32332d3234203d3e203538383230.roa (hash: KYSy/nRpWJvgJOx3JwwIgJ7/nxfWqKSbFEYRVqxBqWw=) 2: B392381083372148D0977D0066CFF38FD5A32CDB.crl (hash: vlJMQGP0vHB+3YpXb8NHN4oJssFg9grf2bKcG0Pnk7U=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/5bf2cf03-f9f9-4bca-8c2c-6073280dfea8/0/B392381083372148D0977D0066CFF38FD5A32CDB.crl rsync://repo-rpki.idnic.net/repo/5bf2cf03-f9f9-4bca-8c2c-6073280dfea8/0/B392381083372148D0977D0066CFF38FD5A32CDB.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B392381083372148D0977D0066CFF38FD5A32CDB.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 09 Dec 2025 03:42:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4a:8b:7c:90:92:ce:25:29:4c:c6:cd:5e:e6:6d:7c:b4:ee:48:f7:e3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B392381083372148D0977D0066CFF38FD5A32CDB Validity Not Before: Dec 5 19:27:08 2025 GMT Not After : Dec 9 03:42:08 2025 GMT Subject: CN=6C1262E546C4736022B02D4ACCB333C95CCF9CAB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:38:ed:20:89:67:c4:fb:f0:c3:e7:9a:98:6f: 42:42:63:72:03:e9:76:15:20:a6:c3:8d:15:b7:ad: 59:5a:04:ef:17:16:63:02:03:64:2f:92:35:af:6d: f6:02:c6:ca:cb:17:68:ff:b3:5e:24:c2:44:df:b4: 46:e2:eb:0a:4c:4d:91:0d:4a:0f:6a:df:d3:dd:d3: 04:0b:62:84:77:44:15:a0:e3:2c:09:e6:99:19:97: 7c:a7:b0:5b:8c:90:97:f6:5c:88:b8:58:bd:bf:2a: 72:a5:62:ef:d3:8a:7d:74:16:a1:a8:61:9a:35:21: 84:a8:1a:11:aa:59:50:f0:c3:d3:64:5f:6e:c1:d9: 37:84:c9:2c:38:98:6f:7e:ce:72:84:24:c0:7c:c3: 24:3b:61:d8:53:16:54:a6:13:8c:34:e7:0a:84:1c: 0e:e0:0e:b1:9a:6b:8c:7f:a7:7a:c2:1e:b2:fa:b6: 00:4a:d9:a4:30:b1:c8:c5:90:32:6e:55:e2:4c:28: c2:3e:03:36:53:9c:18:dc:92:24:e9:6a:a6:9d:da: 9d:f5:0a:86:c9:c4:a4:26:4d:b0:d6:00:68:bc:5d: 50:e7:8e:a6:03:d3:fd:87:71:83:11:ab:89:0f:75: bc:44:6c:24:c8:e1:cf:a8:84:93:fe:5e:83:78:15: b5:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6C:12:62:E5:46:C4:73:60:22:B0:2D:4A:CC:B3:33:C9:5C:CF:9C:AB X509v3 Authority Key Identifier: keyid:B3:92:38:10:83:37:21:48:D0:97:7D:00:66:CF:F3:8F:D5:A3:2C:DB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/5bf2cf03-f9f9-4bca-8c2c-6073280dfea8/0/B392381083372148D0977D0066CFF38FD5A32CDB.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B392381083372148D0977D0066CFF38FD5A32CDB.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/5bf2cf03-f9f9-4bca-8c2c-6073280dfea8/0/B392381083372148D0977D0066CFF38FD5A32CDB.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5d:25:b5:ea:92:3e:2a:70:2b:b1:33:1e:1e:d9:fd:d5:ee:23: 5d:cf:a9:7f:df:d0:16:40:43:cc:4e:9f:35:81:70:9d:de:e4: ca:b3:17:e4:d0:99:6f:96:25:bd:b1:d9:f5:5e:0f:4b:21:9d: f2:75:c9:f6:ed:44:09:de:75:20:d5:6c:38:d5:40:b5:e3:ae: 0e:13:52:e3:e3:c2:9b:01:fc:b3:bb:2e:d1:3e:65:44:d8:2b: 5a:26:2e:4d:ba:88:65:35:01:cb:fd:88:d8:a8:f9:63:75:78: 54:32:21:49:1a:50:80:81:d6:dd:34:ff:da:42:a9:f0:eb:ee: 07:e9:af:8e:95:6c:d9:10:c1:25:1b:ae:91:17:29:4d:5a:a6: c9:ec:09:0d:a7:5d:ef:4f:ee:b5:dc:2e:9f:44:9a:73:9e:ac: ff:e6:eb:db:d5:4f:c7:67:5c:c7:52:75:6a:b7:00:73:87:e9: 29:d8:96:62:d7:8e:6c:95:6d:c1:d1:ca:60:85:fc:ed:75:36: a2:f8:92:c2:a5:a2:bc:be:de:1b:e9:90:a2:f7:b7:fb:d4:09: a3:45:de:cf:b9:8b:54:b2:72:a4:8b:f6:d7:05:73:29:7b:08: dc:c2:f0:1a:8f:14:42:b5:85:fe:d1:73:f1:76:18:49:22:3d: 08:13:c6:8f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUSot8kJLOJSlMxs1e5m18tO5I9+MwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjM5MjM4MTA4MzM3MjE0OEQwOTc3RDAwNjZDRkYzOEZE NUEzMkNEQjAeFw0yNTEyMDUxOTI3MDhaFw0yNTEyMDkwMzQyMDhaMDMxMTAvBgNV BAMTKDZDMTI2MkU1NDZDNDczNjAyMkIwMkQ0QUNDQjMzM0M5NUNDRjlDQUIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC3OO0giWfE+/DD55qYb0JCY3ID 6XYVIKbDjRW3rVlaBO8XFmMCA2QvkjWvbfYCxsrLF2j/s14kwkTftEbi6wpMTZEN Sg9q39Pd0wQLYoR3RBWg4ywJ5pkZl3ynsFuMkJf2XIi4WL2/KnKlYu/Tin10FqGo YZo1IYSoGhGqWVDww9NkX27B2TeEySw4mG9+znKEJMB8wyQ7YdhTFlSmE4w05wqE HA7gDrGaa4x/p3rCHrL6tgBK2aQwscjFkDJuVeJMKMI+AzZTnBjckiTpaqad2p31 CobJxKQmTbDWAGi8XVDnjqYD0/2HcYMRq4kPdbxEbCTI4c+ohJP+XoN4FbX7AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUbBJi5UbEc2AisC1KzLMzyVzPnKswHwYDVR0j BBgwFoAUs5I4EIM3IUjQl30AZs/zj9WjLNswDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 YmYyY2YwMy1mOWY5LTRiY2EtOGMyYy02MDczMjgwZGZlYTgvMC9CMzkyMzgxMDgz MzcyMTQ4RDA5NzdEMDA2NkNGRjM4RkQ1QTMyQ0RCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQjM5MjM4MTA4MzM3MjE0OEQwOTc3RDAwNjZDRkYzOEZENUEz MkNEQi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNWJmMmNmMDMtZjlmOS00YmNhLThj MmMtNjA3MzI4MGRmZWE4LzAvQjM5MjM4MTA4MzM3MjE0OEQwOTc3RDAwNjZDRkYz OEZENUEzMkNEQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAF0lteqSPipwK7EzHh7Z/dXuI13PqX/f0BZA Q8xOnzWBcJ3e5MqzF+TQmW+WJb2x2fVeD0shnfJ1yfbtRAnedSDVbDjVQLXjrg4T UuPjwpsB/LO7LtE+ZUTYK1omLk26iGU1Acv9iNio+WN1eFQyIUkaUICB1t00/9pC qfDr7gfpr46VbNkQwSUbrpEXKU1apsnsCQ2nXe9P7rXcLp9EmnOerP/m69vVT8dn XMdSdWq3AHOH6SnYlmLXjmyVbcHRymCF/O11NqL4ksKlory+3hvpkKL3t/vUCaNF 3s+5i1SycqSL9tcFcyl7CNzC8BqPFEK1hf7Rc/F2GEkiPQgTxo8= -----END CERTIFICATE-----Generated at Sun Dec 7 01:42:52 2025 by rpki-client