This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/6d4fbfb0-93ee-4ea6-b4cf-07d769b88a22/0/B59504F478A4226C16D97004A6F98153CD19D2E0.mft File: B59504F478A4226C16D97004A6F98153CD19D2E0.mft (raw, json) Hash identifier: uUsk2Qr1T+10jxNYKP2BJA9dkA+zqfYG6xkSIDTzo8A= Subject key identifier: 78:49:F0:1C:83:E1:BE:6B:00:00:29:B8:12:34:CC:A0:97:D6:CE:F0 Authority key identifier: B5:95:04:F4:78:A4:22:6C:16:D9:70:04:A6:F9:81:53:CD:19:D2:E0 Certificate issuer: /CN=B59504F478A4226C16D97004A6F98153CD19D2E0 Certificate serial: 49FECAABCC66EAF389C85260E8F010FB0A1641F8 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B59504F478A4226C16D97004A6F98153CD19D2E0.cer Subject info access: rsync://repo-rpki.idnic.net/repo/6d4fbfb0-93ee-4ea6-b4cf-07d769b88a22/0/B59504F478A4226C16D97004A6F98153CD19D2E0.mft Manifest number: 82 Signing time: Sat 06 Dec 2025 01:23:30 +0000 Manifest this update: Sat 06 Dec 2025 01:18:30 +0000 Manifest next update: Tue 09 Dec 2025 10:02:30 +0000 Files and hashes: 1: B59504F478A4226C16D97004A6F98153CD19D2E0.crl (hash: 6J//NnYWoJJbWARVPReKrr56HFARuAeT4HV8fDciqCw=) 2: 3130332e3132322e352e302f32342d3234203d3e20313338303530.roa (hash: 3JVZnoM38MMLZt8EaIuKj3KzjzbuiEZaBDfLeCAseRs=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/6d4fbfb0-93ee-4ea6-b4cf-07d769b88a22/0/B59504F478A4226C16D97004A6F98153CD19D2E0.crl rsync://repo-rpki.idnic.net/repo/6d4fbfb0-93ee-4ea6-b4cf-07d769b88a22/0/B59504F478A4226C16D97004A6F98153CD19D2E0.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B59504F478A4226C16D97004A6F98153CD19D2E0.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 09 Dec 2025 10:02:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 49:fe:ca:ab:cc:66:ea:f3:89:c8:52:60:e8:f0:10:fb:0a:16:41:f8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B59504F478A4226C16D97004A6F98153CD19D2E0 Validity Not Before: Dec 6 01:18:30 2025 GMT Not After : Dec 9 10:02:30 2025 GMT Subject: CN=7849F01C83E1BE6B000029B81234CCA097D6CEF0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:94:98:9a:78:ae:e7:8b:c8:e7:f6:c3:c0:10: 72:8a:3a:ae:e4:96:0a:48:57:19:d8:57:9c:bd:01: 74:4c:d7:08:43:8d:89:6b:c8:db:42:8b:59:ea:99: 75:14:69:15:ad:55:ad:87:45:fa:09:f3:49:84:fc: 70:aa:4b:db:55:12:96:35:d0:73:fd:9e:54:47:6f: e6:e2:ac:dc:32:92:3f:dc:6c:a7:62:4f:a5:56:46: 43:fc:1e:4f:d3:e5:8d:4e:64:d3:f2:d4:14:15:5c: 8d:e3:42:25:f8:5a:c8:26:78:4a:56:47:14:8c:94: 38:fa:9e:67:b5:12:a6:fa:d0:1e:6f:73:68:f7:15: d4:e4:d7:bf:58:11:8a:b9:47:74:92:ff:cd:8f:41: c4:60:21:9d:06:0f:32:a2:9d:04:01:11:89:b1:7f: 3b:71:be:a9:11:86:d6:6b:2d:1a:22:4c:c0:cc:13: 11:0c:7b:e7:d7:23:b8:43:9c:72:d7:45:a7:76:71: 97:6f:ab:05:6f:c1:99:13:65:ec:19:93:ca:e1:83: 78:7c:03:87:59:68:bc:8b:5a:f6:2d:d0:5f:ee:7c: a8:87:51:23:68:32:4a:7f:a9:97:a4:7f:d2:37:42: 4d:49:4a:8f:32:b3:a9:9f:12:2f:73:60:4c:43:91: ba:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 78:49:F0:1C:83:E1:BE:6B:00:00:29:B8:12:34:CC:A0:97:D6:CE:F0 X509v3 Authority Key Identifier: keyid:B5:95:04:F4:78:A4:22:6C:16:D9:70:04:A6:F9:81:53:CD:19:D2:E0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/6d4fbfb0-93ee-4ea6-b4cf-07d769b88a22/0/B59504F478A4226C16D97004A6F98153CD19D2E0.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B59504F478A4226C16D97004A6F98153CD19D2E0.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/6d4fbfb0-93ee-4ea6-b4cf-07d769b88a22/0/B59504F478A4226C16D97004A6F98153CD19D2E0.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8b:6b:c8:9d:4f:1a:2b:b0:b9:c0:ff:d8:8e:8f:1f:36:42:2b: 91:97:f8:b1:85:f1:25:b4:ed:40:dd:5b:d2:0c:0c:55:0e:ed: 3d:f4:dd:17:27:4b:04:6c:1a:8c:71:c5:86:73:39:79:36:d3: fe:4e:b1:55:c4:3a:0f:5c:cd:29:9d:af:44:93:58:3e:d2:56: d4:27:62:63:cf:c4:61:75:91:b0:a1:65:18:00:26:dd:12:14: 97:94:6b:19:4f:05:b5:7e:69:0c:d6:aa:24:03:60:c2:7e:ac: d5:96:b1:cd:fb:8f:9a:c5:41:1a:8b:9d:3d:fa:46:56:13:a5: 97:b7:1d:17:77:5f:59:de:c5:4b:0e:c5:21:c4:4f:74:7e:75: e3:86:a0:f3:9c:b3:a7:1e:30:cf:cc:cd:79:48:6f:24:91:1f: 37:88:08:36:e8:96:9c:41:42:e0:2f:03:d0:df:ae:86:bc:7b: 6e:f6:01:35:45:bb:a6:f2:c4:51:c5:4a:af:c5:4b:9b:1f:59: b1:dc:25:b9:5d:5c:7c:b8:7d:e5:5c:91:26:57:83:13:12:41: cc:7f:cc:cd:4b:6f:c5:c7:38:6e:a6:d2:6d:14:85:f4:f4:18: d2:6a:58:a7:81:fc:49:08:de:48:b1:e8:c2:a7:aa:14:3b:8a: 0e:03:b8:ec -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUSf7Kq8xm6vOJyFJg6PAQ+woWQfgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjU5NTA0RjQ3OEE0MjI2QzE2RDk3MDA0QTZGOTgxNTND RDE5RDJFMDAeFw0yNTEyMDYwMTE4MzBaFw0yNTEyMDkxMDAyMzBaMDMxMTAvBgNV BAMTKDc4NDlGMDFDODNFMUJFNkIwMDAwMjlCODEyMzRDQ0EwOTdENkNFRjAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDOlJiaeK7ni8jn9sPAEHKKOq7k lgpIVxnYV5y9AXRM1whDjYlryNtCi1nqmXUUaRWtVa2HRfoJ80mE/HCqS9tVEpY1 0HP9nlRHb+birNwykj/cbKdiT6VWRkP8Hk/T5Y1OZNPy1BQVXI3jQiX4WsgmeEpW RxSMlDj6nme1Eqb60B5vc2j3FdTk179YEYq5R3SS/82PQcRgIZ0GDzKinQQBEYmx fztxvqkRhtZrLRoiTMDMExEMe+fXI7hDnHLXRad2cZdvqwVvwZkTZewZk8rhg3h8 A4dZaLyLWvYt0F/ufKiHUSNoMkp/qZekf9I3Qk1JSo8ys6mfEi9zYExDkbp3AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUeEnwHIPhvmsAACm4EjTMoJfWzvAwHwYDVR0j BBgwFoAUtZUE9HikImwW2XAEpvmBU80Z0uAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 ZDRmYmZiMC05M2VlLTRlYTYtYjRjZi0wN2Q3NjliODhhMjIvMC9CNTk1MDRGNDc4 QTQyMjZDMTZEOTcwMDRBNkY5ODE1M0NEMTlEMkUwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQjU5NTA0RjQ3OEE0MjI2QzE2RDk3MDA0QTZGOTgxNTNDRDE5 RDJFMC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNmQ0ZmJmYjAtOTNlZS00ZWE2LWI0 Y2YtMDdkNzY5Yjg4YTIyLzAvQjU5NTA0RjQ3OEE0MjI2QzE2RDk3MDA0QTZGOTgx NTNDRDE5RDJFMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAItryJ1PGiuwucD/2I6PHzZCK5GX+LGF8SW0 7UDdW9IMDFUO7T303RcnSwRsGoxxxYZzOXk20/5OsVXEOg9czSmdr0STWD7SVtQn YmPPxGF1kbChZRgAJt0SFJeUaxlPBbV+aQzWqiQDYMJ+rNWWsc37j5rFQRqLnT36 RlYTpZe3HRd3X1nexUsOxSHET3R+deOGoPOcs6ceMM/MzXlIbySRHzeICDbolpxB QuAvA9Dfroa8e272ATVFu6byxFHFSq/FS5sfWbHcJbldXHy4feVckSZXgxMSQcx/ zM1Lb8XHOG6m0m0UhfT0GNJqWKeB/EkI3kix6MKnqhQ7ig4DuOw= -----END CERTIFICATE-----Generated at Sun Dec 7 06:20:40 2025 by rpki-client