This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/6f2a8011-4c66-43d1-bbc5-fb11e89f91e0/0/B32E9EABD055A12FD3AA7A307C1DF6832A481AF8.mft File: B32E9EABD055A12FD3AA7A307C1DF6832A481AF8.mft (raw, json) Hash identifier: SaE0o1dLfsyP1Nk4+H/RRT0IeJFJzD3FTdjJsGRm8ls= Subject key identifier: 73:D2:E7:92:8F:0F:DC:60:D5:88:7C:2E:DB:15:A1:24:A6:33:D5:0D Authority key identifier: B3:2E:9E:AB:D0:55:A1:2F:D3:AA:7A:30:7C:1D:F6:83:2A:48:1A:F8 Certificate issuer: /CN=B32E9EABD055A12FD3AA7A307C1DF6832A481AF8 Certificate serial: 55778D66DB9E3D95326A3D5E5BD62C820AB2CF4C Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B32E9EABD055A12FD3AA7A307C1DF6832A481AF8.cer Subject info access: rsync://repo-rpki.idnic.net/repo/6f2a8011-4c66-43d1-bbc5-fb11e89f91e0/0/B32E9EABD055A12FD3AA7A307C1DF6832A481AF8.mft Manifest number: 014B Signing time: Sun 07 Dec 2025 01:31:38 +0000 Manifest this update: Sun 07 Dec 2025 01:26:38 +0000 Manifest next update: Wed 10 Dec 2025 04:08:38 +0000 Files and hashes: 1: B32E9EABD055A12FD3AA7A307C1DF6832A481AF8.crl (hash: de89h1J8AHkv9Z6Gypxqaof7D3HG53VKlafpxtTZlQ4=) 2: 32372e3132342e37362e302f32332d3234203d3e20313532303336.roa (hash: dEzIqEvBQoLb4jDZxATrGmBvt2RxQTfgU7Js5Mbni88=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/6f2a8011-4c66-43d1-bbc5-fb11e89f91e0/0/B32E9EABD055A12FD3AA7A307C1DF6832A481AF8.crl rsync://repo-rpki.idnic.net/repo/6f2a8011-4c66-43d1-bbc5-fb11e89f91e0/0/B32E9EABD055A12FD3AA7A307C1DF6832A481AF8.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B32E9EABD055A12FD3AA7A307C1DF6832A481AF8.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 09 Dec 2025 15:57:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 55:77:8d:66:db:9e:3d:95:32:6a:3d:5e:5b:d6:2c:82:0a:b2:cf:4c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B32E9EABD055A12FD3AA7A307C1DF6832A481AF8 Validity Not Before: Dec 7 01:26:38 2025 GMT Not After : Dec 10 04:08:38 2025 GMT Subject: CN=73D2E7928F0FDC60D5887C2EDB15A124A633D50D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:72:60:71:b9:16:3d:7a:dc:a0:a9:87:32:f8: dc:75:11:d9:e9:de:a0:20:7a:d4:6e:45:b3:fd:51: f1:dc:29:f6:66:cf:38:96:aa:b9:da:05:87:95:d9: f3:a3:fb:76:f1:b3:4e:25:37:e5:be:56:98:29:8f: f4:98:ab:74:f2:40:06:8b:2e:e5:91:5b:8a:bd:da: 05:aa:11:8b:b4:ea:58:04:02:55:9d:da:a7:94:a8: 51:4c:a6:13:53:1a:02:ea:35:d5:a5:55:49:f6:ac: bc:d8:f2:a8:80:98:0e:10:d8:e7:ec:59:93:2d:1a: 84:51:fc:9c:04:53:54:05:da:13:62:8f:9f:f1:66: be:3d:1a:94:00:23:36:c8:50:27:31:53:e3:26:2c: a2:cf:a9:36:cf:55:cd:c5:d9:6e:98:6d:5f:ef:42: 43:d5:e6:81:c3:bf:17:21:ce:e2:ab:e6:31:24:d1: c9:fe:56:fc:9d:50:d3:7b:49:d7:9a:1c:b9:c9:5f: d9:71:81:10:2c:d1:a5:72:a3:f9:13:20:1e:b8:91: ac:f5:20:d8:11:ec:99:8c:99:7c:e7:d7:46:b1:b6: e7:66:2a:81:1f:aa:cc:72:39:3c:ce:72:08:87:5e: 53:8e:bd:c9:ef:37:37:ba:c8:8b:7f:d3:ef:86:8f: 72:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 73:D2:E7:92:8F:0F:DC:60:D5:88:7C:2E:DB:15:A1:24:A6:33:D5:0D X509v3 Authority Key Identifier: keyid:B3:2E:9E:AB:D0:55:A1:2F:D3:AA:7A:30:7C:1D:F6:83:2A:48:1A:F8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/6f2a8011-4c66-43d1-bbc5-fb11e89f91e0/0/B32E9EABD055A12FD3AA7A307C1DF6832A481AF8.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B32E9EABD055A12FD3AA7A307C1DF6832A481AF8.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/6f2a8011-4c66-43d1-bbc5-fb11e89f91e0/0/B32E9EABD055A12FD3AA7A307C1DF6832A481AF8.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 91:e8:17:00:f1:8f:d2:d0:42:ca:2b:98:2c:b6:09:69:42:a1: b1:1d:dd:7e:c0:ca:fd:2d:aa:94:19:5b:2e:9d:6a:f5:94:d2: 0c:1c:38:aa:3e:86:75:bc:5d:45:f3:3a:5a:5a:df:66:b0:d7: eb:bd:04:2e:c6:af:f5:05:ed:3a:1b:c8:f3:3d:22:f4:ff:e1: 0f:17:a0:21:05:c9:83:09:7c:da:10:9c:f7:f1:0c:9c:65:09: cf:f5:3d:51:ae:7a:e4:e0:5e:d2:30:6a:11:15:4b:b0:2b:1c: 05:c6:82:78:d4:16:0d:0c:2f:50:20:b3:03:e1:08:23:6c:c5: 0d:7a:46:b5:e3:65:86:27:0a:50:1a:79:1d:8d:58:fc:82:ac: b9:90:26:fb:91:36:5b:20:0f:4c:c7:0b:08:cd:03:1d:0a:d3: 6b:52:66:4e:33:2c:c4:99:1c:b9:f7:79:6c:57:a4:f1:97:8d: 34:1f:09:49:69:9f:6e:93:f3:b6:9a:50:dc:35:ab:f0:01:ab: 33:9b:dd:8f:16:06:44:d0:d7:ef:b7:d4:5f:4f:82:10:7d:29: 65:0f:60:0c:d5:db:ea:7d:d0:8a:7c:84:12:76:87:44:12:09: 67:ae:35:9c:51:fa:b7:6d:19:8f:eb:41:4e:91:a5:ac:c4:34: 7d:66:48:47 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUVXeNZtuePZUyaj1eW9Ysggqyz0wwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjMyRTlFQUJEMDU1QTEyRkQzQUE3QTMwN0MxREY2ODMy QTQ4MUFGODAeFw0yNTEyMDcwMTI2MzhaFw0yNTEyMTAwNDA4MzhaMDMxMTAvBgNV BAMTKDczRDJFNzkyOEYwRkRDNjBENTg4N0MyRURCMTVBMTI0QTYzM0Q1MEQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC0cmBxuRY9etygqYcy+Nx1Ednp 3qAgetRuRbP9UfHcKfZmzziWqrnaBYeV2fOj+3bxs04lN+W+Vpgpj/SYq3TyQAaL LuWRW4q92gWqEYu06lgEAlWd2qeUqFFMphNTGgLqNdWlVUn2rLzY8qiAmA4Q2Ofs WZMtGoRR/JwEU1QF2hNij5/xZr49GpQAIzbIUCcxU+MmLKLPqTbPVc3F2W6YbV/v QkPV5oHDvxchzuKr5jEk0cn+VvydUNN7SdeaHLnJX9lxgRAs0aVyo/kTIB64kaz1 INgR7JmMmXzn10axtudmKoEfqsxyOTzOcgiHXlOOvcnvNze6yIt/0++Gj3LfAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUc9Lnko8P3GDViHwu2xWhJKYz1Q0wHwYDVR0j BBgwFoAUsy6eq9BVoS/TqnowfB32gypIGvgwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 ZjJhODAxMS00YzY2LTQzZDEtYmJjNS1mYjExZTg5ZjkxZTAvMC9CMzJFOUVBQkQw NTVBMTJGRDNBQTdBMzA3QzFERjY4MzJBNDgxQUY4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQjMyRTlFQUJEMDU1QTEyRkQzQUE3QTMwN0MxREY2ODMyQTQ4 MUFGOC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNmYyYTgwMTEtNGM2Ni00M2QxLWJi YzUtZmIxMWU4OWY5MWUwLzAvQjMyRTlFQUJEMDU1QTEyRkQzQUE3QTMwN0MxREY2 ODMyQTQ4MUFGOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJHoFwDxj9LQQsormCy2CWlCobEd3X7Ayv0t qpQZWy6davWU0gwcOKo+hnW8XUXzOlpa32aw1+u9BC7Gr/UF7TobyPM9IvT/4Q8X oCEFyYMJfNoQnPfxDJxlCc/1PVGueuTgXtIwahEVS7ArHAXGgnjUFg0ML1AgswPh CCNsxQ16RrXjZYYnClAaeR2NWPyCrLmQJvuRNlsgD0zHCwjNAx0K02tSZk4zLMSZ HLn3eWxXpPGXjTQfCUlpn26T87aaUNw1q/ABqzOb3Y8WBkTQ1++31F9PghB9KWUP YAzV2+p90Ip8hBJ2h0QSCWeuNZxR+rdtGY/rQU6RpazENH1mSEc= -----END CERTIFICATE-----Generated at Sun Dec 7 03:08:04 2025 by rpki-client