This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/62d29b32-3a29-4a14-bc9b-c76a007ca032/0/BD6731D05CD61815BC0A711C659F17313EF0F5EB.mft File: BD6731D05CD61815BC0A711C659F17313EF0F5EB.mft (raw, json) Hash identifier: ZmbQFnPEALvyRtfX4C87vmfaSpAh+qBDFGvZ8rvensg= Subject key identifier: 3A:54:69:E5:D4:50:A9:50:11:41:6C:2B:CD:D6:34:65:4F:F6:A0:38 Authority key identifier: BD:67:31:D0:5C:D6:18:15:BC:0A:71:1C:65:9F:17:31:3E:F0:F5:EB Certificate issuer: /CN=BD6731D05CD61815BC0A711C659F17313EF0F5EB Certificate serial: 46A5E5900B01954D8D9FE1698356A8399FB7C5B2 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/BD6731D05CD61815BC0A711C659F17313EF0F5EB.cer Subject info access: rsync://repo-rpki.idnic.net/repo/62d29b32-3a29-4a14-bc9b-c76a007ca032/0/BD6731D05CD61815BC0A711C659F17313EF0F5EB.mft Manifest number: AF Signing time: Wed 17 Dec 2025 13:51:06 +0000 Manifest this update: Wed 17 Dec 2025 13:46:06 +0000 Manifest next update: Sat 20 Dec 2025 14:28:06 +0000 Files and hashes: 1: 3136302e32322e39322e302f32342d3234203d3e20313532383335.roa (hash: +o6+ngIFA4hU6bMKlAFkTNxS1BaRiBEB0UhCbvig7rE=) 2: BD6731D05CD61815BC0A711C659F17313EF0F5EB.crl (hash: qJOYojxx7cvAlQOVnzQdYUNxpLH/+1s8dO44qbDiH2A=) 3: 3136302e32322e39332e302f32342d3234203d3e20313532383335.roa (hash: SeJIZiTXDjba/24vDFwUassgzTgVWzwJ94ejAOzdpPE=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/62d29b32-3a29-4a14-bc9b-c76a007ca032/0/BD6731D05CD61815BC0A711C659F17313EF0F5EB.crl rsync://repo-rpki.idnic.net/repo/62d29b32-3a29-4a14-bc9b-c76a007ca032/0/BD6731D05CD61815BC0A711C659F17313EF0F5EB.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/BD6731D05CD61815BC0A711C659F17313EF0F5EB.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 20 Dec 2025 09:41:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 46:a5:e5:90:0b:01:95:4d:8d:9f:e1:69:83:56:a8:39:9f:b7:c5:b2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BD6731D05CD61815BC0A711C659F17313EF0F5EB Validity Not Before: Dec 17 13:46:06 2025 GMT Not After : Dec 20 14:28:06 2025 GMT Subject: CN=3A5469E5D450A95011416C2BCDD634654FF6A038 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:aa:4f:73:c7:fe:db:4a:4c:d2:c5:52:b1:51: e3:92:74:96:fe:52:98:4e:87:9c:23:ed:b0:76:09: ea:88:15:7d:83:4a:fc:e6:f1:04:89:51:cc:93:87: 76:6c:6e:8a:58:cc:43:fe:e2:d4:76:ba:04:d2:33: b3:ba:b3:14:3b:26:84:4b:b4:52:d8:81:52:7b:3f: 53:07:61:4e:e0:db:f0:b3:12:44:cf:8c:ca:07:8c: 99:eb:29:69:d2:3d:b4:60:0c:25:cb:08:e5:96:49: 7d:1a:20:ae:31:14:a7:3d:33:20:a1:3e:7e:2a:d9: 6a:cc:be:1a:62:55:f9:15:2a:01:49:93:49:62:6e: 4b:aa:16:fb:19:86:79:3a:bc:e3:c9:14:da:4d:00: 7d:e0:78:93:f7:56:9b:25:4b:0d:40:87:74:d8:98: 86:65:a0:d6:84:00:04:5c:33:cb:91:ab:2e:9b:2b: 5e:1c:72:17:8f:f5:cd:78:48:5e:d8:03:e8:2d:af: da:d7:d1:75:71:fa:11:dc:4e:e7:ea:76:e6:d0:37: a4:56:69:91:4b:7c:8b:77:a9:70:66:a5:95:67:d2: 73:51:b8:6e:ca:07:8a:a5:f9:62:bd:20:bd:8d:1b: 96:8e:03:a2:af:c8:b7:1a:3e:b4:1c:bc:ed:77:55: 4c:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:54:69:E5:D4:50:A9:50:11:41:6C:2B:CD:D6:34:65:4F:F6:A0:38 X509v3 Authority Key Identifier: keyid:BD:67:31:D0:5C:D6:18:15:BC:0A:71:1C:65:9F:17:31:3E:F0:F5:EB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/62d29b32-3a29-4a14-bc9b-c76a007ca032/0/BD6731D05CD61815BC0A711C659F17313EF0F5EB.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/BD6731D05CD61815BC0A711C659F17313EF0F5EB.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/62d29b32-3a29-4a14-bc9b-c76a007ca032/0/BD6731D05CD61815BC0A711C659F17313EF0F5EB.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 30:18:a1:94:f4:f9:80:d6:6a:f1:19:68:17:37:49:0f:d5:e6: 9e:a3:b9:2d:fc:8c:a4:fb:f2:3f:91:0d:fe:82:a6:fa:a6:57: 6e:3c:2a:cd:cf:aa:d4:fb:49:b9:89:e1:b5:a1:bd:42:86:b8: 35:d1:6d:8b:9b:0c:d9:cd:76:a2:cd:17:39:c3:57:82:ca:37: 42:59:e8:f7:b7:3c:9b:4a:77:53:b6:05:3f:6f:df:68:3d:89: f0:88:18:d8:85:13:7c:0d:9a:a2:4f:96:96:46:bb:30:52:04: 02:8f:c9:e3:a9:c2:c0:4d:b9:04:19:0f:09:5d:78:1a:85:c3: 79:92:a2:1f:a0:1b:bf:f1:f7:32:82:b8:11:20:af:d4:e9:95: 4e:a5:ff:b9:45:81:ee:77:22:6a:d0:c6:ea:4f:d9:a3:c3:84: e6:be:7e:69:cf:d0:de:2f:13:31:ad:f1:bb:72:f0:b7:b6:9f: db:09:95:cf:68:3c:7f:bc:1c:f6:ea:0e:88:5f:db:6e:b7:22: c5:e7:9f:b0:ca:ad:26:41:32:95:03:e2:18:95:47:a9:94:53: 9a:2e:23:77:5b:08:36:f7:56:23:99:27:e3:c6:c6:c6:9e:f1: c1:86:de:78:f1:c6:13:d0:ae:4a:c5:83:6a:7a:de:fa:6d:4a: 2b:d1:b4:85 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIURqXlkAsBlU2Nn+Fpg1aoOZ+3xbIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkQ2NzMxRDA1Q0Q2MTgxNUJDMEE3MTFDNjU5RjE3MzEz RUYwRjVFQjAeFw0yNTEyMTcxMzQ2MDZaFw0yNTEyMjAxNDI4MDZaMDMxMTAvBgNV BAMTKDNBNTQ2OUU1RDQ1MEE5NTAxMTQxNkMyQkNERDYzNDY1NEZGNkEwMzgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDgqk9zx/7bSkzSxVKxUeOSdJb+ UphOh5wj7bB2CeqIFX2DSvzm8QSJUcyTh3ZsbopYzEP+4tR2ugTSM7O6sxQ7JoRL tFLYgVJ7P1MHYU7g2/CzEkTPjMoHjJnrKWnSPbRgDCXLCOWWSX0aIK4xFKc9MyCh Pn4q2WrMvhpiVfkVKgFJk0libkuqFvsZhnk6vOPJFNpNAH3geJP3VpslSw1Ah3TY mIZloNaEAARcM8uRqy6bK14ccheP9c14SF7YA+gtr9rX0XVx+hHcTufqdubQN6RW aZFLfIt3qXBmpZVn0nNRuG7KB4ql+WK9IL2NG5aOA6KvyLcaPrQcvO13VUx9AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUOlRp5dRQqVARQWwrzdY0ZU/2oDgwHwYDVR0j BBgwFoAUvWcx0FzWGBW8CnEcZZ8XMT7w9eswDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 MmQyOWIzMi0zYTI5LTRhMTQtYmM5Yi1jNzZhMDA3Y2EwMzIvMC9CRDY3MzFEMDVD RDYxODE1QkMwQTcxMUM2NTlGMTczMTNFRjBGNUVCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvQkQ2NzMxRDA1Q0Q2MTgxNUJDMEE3MTFDNjU5RjE3MzEzRUYw RjVFQi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNjJkMjliMzItM2EyOS00YTE0LWJj OWItYzc2YTAwN2NhMDMyLzAvQkQ2NzMxRDA1Q0Q2MTgxNUJDMEE3MTFDNjU5RjE3 MzEzRUYwRjVFQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADAYoZT0+YDWavEZaBc3SQ/V5p6juS38jKT7 8j+RDf6CpvqmV248Ks3PqtT7SbmJ4bWhvUKGuDXRbYubDNnNdqLNFznDV4LKN0JZ 6Pe3PJtKd1O2BT9v32g9ifCIGNiFE3wNmqJPlpZGuzBSBAKPyeOpwsBNuQQZDwld eBqFw3mSoh+gG7/x9zKCuBEgr9TplU6l/7lFge53ImrQxupP2aPDhOa+fmnP0N4v EzGt8bty8Le2n9sJlc9oPH+8HPbqDohf2263IsXnn7DKrSZBMpUD4hiVR6mUU5ou I3dbCDb3ViOZJ+PGxsae8cGG3njxxhPQrkrFg2p63vptSivRtIU= -----END CERTIFICATE-----Generated at Thu Dec 18 05:45:56 2025 by rpki-client