This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/62d29b32-3a29-4a14-bc9b-c76a007ca032/0/BD6731D05CD61815BC0A711C659F17313EF0F5EB.mft File: BD6731D05CD61815BC0A711C659F17313EF0F5EB.mft (raw, json) Hash identifier: mHWGwJ/EW0m7y7Iaj0zL9L1kKXmcaOZFAU3b+MBrr/E= Subject key identifier: D3:03:72:48:2B:A1:20:D6:9B:97:F4:64:F6:AE:39:52:E2:E0:77:AE Authority key identifier: BD:67:31:D0:5C:D6:18:15:BC:0A:71:1C:65:9F:17:31:3E:F0:F5:EB Certificate issuer: /CN=BD6731D05CD61815BC0A711C659F17313EF0F5EB Certificate serial: 505542853FF1349154B69928BB2BB63E589BF6CA Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/BD6731D05CD61815BC0A711C659F17313EF0F5EB.cer Subject info access: rsync://repo-rpki.idnic.net/repo/62d29b32-3a29-4a14-bc9b-c76a007ca032/0/BD6731D05CD61815BC0A711C659F17313EF0F5EB.mft Manifest number: A9 Signing time: Thu 04 Dec 2025 16:01:05 +0000 Manifest this update: Thu 04 Dec 2025 15:56:05 +0000 Manifest next update: Sun 07 Dec 2025 20:42:05 +0000 Files and hashes: 1: 3136302e32322e39322e302f32342d3234203d3e20313532383335.roa (hash: +o6+ngIFA4hU6bMKlAFkTNxS1BaRiBEB0UhCbvig7rE=) 2: BD6731D05CD61815BC0A711C659F17313EF0F5EB.crl (hash: NGBhpca5kALcxfudZni1+uU7e6B5QZ+pcDjKpweXQ0g=) 3: 3136302e32322e39332e302f32342d3234203d3e20313532383335.roa (hash: SeJIZiTXDjba/24vDFwUassgzTgVWzwJ94ejAOzdpPE=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/62d29b32-3a29-4a14-bc9b-c76a007ca032/0/BD6731D05CD61815BC0A711C659F17313EF0F5EB.crl rsync://repo-rpki.idnic.net/repo/62d29b32-3a29-4a14-bc9b-c76a007ca032/0/BD6731D05CD61815BC0A711C659F17313EF0F5EB.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/BD6731D05CD61815BC0A711C659F17313EF0F5EB.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 07 Dec 2025 20:42:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 50:55:42:85:3f:f1:34:91:54:b6:99:28:bb:2b:b6:3e:58:9b:f6:ca Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BD6731D05CD61815BC0A711C659F17313EF0F5EB Validity Not Before: Dec 4 15:56:05 2025 GMT Not After : Dec 7 20:42:05 2025 GMT Subject: CN=D30372482BA120D69B97F464F6AE3952E2E077AE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:cf:23:1a:bb:23:f5:40:5b:e6:f1:d6:32:18: da:54:22:9f:65:8b:e2:a6:84:42:59:00:bd:60:4c: 12:b4:aa:1f:45:fd:f1:c2:ec:47:bf:9b:62:95:7b: 6c:b2:91:d2:dd:e4:5d:c9:9d:9a:65:34:a1:e0:a0: 5a:f1:03:55:3e:a9:73:e4:2e:3c:50:c1:c3:1d:99: d6:58:e1:f1:71:e6:a2:eb:f9:41:e0:b8:91:3f:3c: 31:70:01:78:44:05:d1:55:95:c0:20:56:96:3a:54: 0e:96:e0:85:52:0c:b7:37:03:92:a5:67:ab:6a:f4: 17:6c:6e:8d:38:c4:01:24:e3:3b:53:f0:d2:36:cf: 12:01:f6:e7:97:55:8c:ee:11:2e:e9:ca:15:07:40: be:a5:8d:0b:7c:37:33:54:2c:50:20:e1:00:b3:70: 2c:db:d7:52:f1:6b:61:31:ad:90:28:d5:e7:26:37: 88:f0:bf:25:95:73:c8:1d:a5:c4:72:71:b4:45:6e: ae:38:78:8e:63:5b:84:a0:14:c2:fc:ba:44:5e:ac: 4e:12:65:1e:fa:16:51:8d:70:1c:38:be:83:84:e9: d4:1e:da:a0:c1:00:b7:8e:9e:12:64:81:fd:56:d2: 4d:3a:1a:1d:40:47:32:c2:d1:8e:33:2a:a6:37:d5: 63:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:03:72:48:2B:A1:20:D6:9B:97:F4:64:F6:AE:39:52:E2:E0:77:AE X509v3 Authority Key Identifier: keyid:BD:67:31:D0:5C:D6:18:15:BC:0A:71:1C:65:9F:17:31:3E:F0:F5:EB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/62d29b32-3a29-4a14-bc9b-c76a007ca032/0/BD6731D05CD61815BC0A711C659F17313EF0F5EB.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/BD6731D05CD61815BC0A711C659F17313EF0F5EB.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/62d29b32-3a29-4a14-bc9b-c76a007ca032/0/BD6731D05CD61815BC0A711C659F17313EF0F5EB.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2a:d6:ae:38:ca:87:8e:0c:7d:f0:32:1c:fc:93:20:59:50:37: c3:ed:35:10:2a:24:8e:96:82:40:cb:ab:e7:b7:cf:12:37:d0: 50:d9:be:c9:7d:c2:54:e9:de:1f:c7:b9:4a:0d:31:04:a0:4c: 1d:c1:c8:39:24:11:dc:fd:b3:dd:72:8d:4e:da:6a:52:cc:b6: a4:07:b7:be:ab:8e:fa:53:cc:8f:2f:dc:35:02:41:06:36:62: 4b:c4:ef:a8:41:d6:e7:0c:d8:ba:1e:e4:50:9a:ea:ae:d2:36: d5:fd:10:e3:bc:39:a5:26:41:15:a6:86:aa:b9:48:59:49:e5: f0:93:33:a6:51:c0:be:f0:52:ca:0d:ec:85:ff:1f:43:f9:ef: 61:44:76:1c:dd:25:6a:2c:93:d3:ea:cd:b6:7c:a3:78:66:9f: fe:e5:de:88:30:16:aa:a0:4c:3f:c3:49:d6:6a:a9:c2:22:0d: ae:a0:b6:c6:5c:1c:38:4a:af:fd:51:67:83:cf:7f:5e:14:75: a6:db:50:2c:7e:f1:9b:11:8c:fe:43:f0:1a:a6:ff:7b:4e:52: 0e:8f:29:d1:36:ce:27:f4:5a:8c:81:9c:be:fd:cd:2c:24:18: 3a:ac:7c:ef:fa:ee:f9:c8:82:28:53:e7:53:62:cd:d8:9c:f6: 73:b3:f0:75 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUUFVChT/xNJFUtpkouyu2Plib9sowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkQ2NzMxRDA1Q0Q2MTgxNUJDMEE3MTFDNjU5RjE3MzEz RUYwRjVFQjAeFw0yNTEyMDQxNTU2MDVaFw0yNTEyMDcyMDQyMDVaMDMxMTAvBgNV BAMTKEQzMDM3MjQ4MkJBMTIwRDY5Qjk3RjQ2NEY2QUUzOTUyRTJFMDc3QUUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC0zyMauyP1QFvm8dYyGNpUIp9l i+KmhEJZAL1gTBK0qh9F/fHC7Ee/m2KVe2yykdLd5F3JnZplNKHgoFrxA1U+qXPk LjxQwcMdmdZY4fFx5qLr+UHguJE/PDFwAXhEBdFVlcAgVpY6VA6W4IVSDLc3A5Kl Z6tq9Bdsbo04xAEk4ztT8NI2zxIB9ueXVYzuES7pyhUHQL6ljQt8NzNULFAg4QCz cCzb11Lxa2ExrZAo1ecmN4jwvyWVc8gdpcRycbRFbq44eI5jW4SgFML8ukRerE4S ZR76FlGNcBw4voOE6dQe2qDBALeOnhJkgf1W0k06Gh1ARzLC0Y4zKqY31WO5AgMB AAGjggI8MIICODAdBgNVHQ4EFgQU0wNySCuhINabl/Rk9q45UuLgd64wHwYDVR0j BBgwFoAUvWcx0FzWGBW8CnEcZZ8XMT7w9eswDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 MmQyOWIzMi0zYTI5LTRhMTQtYmM5Yi1jNzZhMDA3Y2EwMzIvMC9CRDY3MzFEMDVD RDYxODE1QkMwQTcxMUM2NTlGMTczMTNFRjBGNUVCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvQkQ2NzMxRDA1Q0Q2MTgxNUJDMEE3MTFDNjU5RjE3MzEzRUYw RjVFQi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNjJkMjliMzItM2EyOS00YTE0LWJj OWItYzc2YTAwN2NhMDMyLzAvQkQ2NzMxRDA1Q0Q2MTgxNUJDMEE3MTFDNjU5RjE3 MzEzRUYwRjVFQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACrWrjjKh44MffAyHPyTIFlQN8PtNRAqJI6W gkDLq+e3zxI30FDZvsl9wlTp3h/HuUoNMQSgTB3ByDkkEdz9s91yjU7aalLMtqQH t76rjvpTzI8v3DUCQQY2YkvE76hB1ucM2Loe5FCa6q7SNtX9EOO8OaUmQRWmhqq5 SFlJ5fCTM6ZRwL7wUsoN7IX/H0P572FEdhzdJWosk9PqzbZ8o3hmn/7l3ogwFqqg TD/DSdZqqcIiDa6gtsZcHDhKr/1RZ4PPf14UdabbUCx+8ZsRjP5D8Bqm/3tOUg6P KdE2zif0WoyBnL79zSwkGDqsfO/67vnIgihT51Nizdic9nOz8HU= -----END CERTIFICATE-----Generated at Sat Dec 6 17:51:42 2025 by rpki-client