This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/78e78ee0-0002-4a67-a739-3033d5b5ba61/0/B1D4F5495BE4F9D995EA9C1545469CA2B98334F1.mft File: B1D4F5495BE4F9D995EA9C1545469CA2B98334F1.mft (raw, json) Hash identifier: A0pDMDk92NjJNg6zY0IXNb9nFRIOgj4QdPmBM11H0ho= Subject key identifier: 85:C7:95:D1:62:C7:3F:9E:56:A6:C9:6B:27:0E:0E:64:C1:07:AC:35 Authority key identifier: B1:D4:F5:49:5B:E4:F9:D9:95:EA:9C:15:45:46:9C:A2:B9:83:34:F1 Certificate issuer: /CN=B1D4F5495BE4F9D995EA9C1545469CA2B98334F1 Certificate serial: 0CC17A31E1EEC10288FE91369C70964F44ED6C79 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B1D4F5495BE4F9D995EA9C1545469CA2B98334F1.cer Subject info access: rsync://repo-rpki.idnic.net/repo/78e78ee0-0002-4a67-a739-3033d5b5ba61/0/B1D4F5495BE4F9D995EA9C1545469CA2B98334F1.mft Manifest number: 026B Signing time: Sat 06 Dec 2025 16:42:28 +0000 Manifest this update: Sat 06 Dec 2025 16:37:28 +0000 Manifest next update: Tue 09 Dec 2025 20:43:28 +0000 Files and hashes: 1: 3130332e3136382e3138342e302f32342d3234203d3e203438343635.roa (hash: 1UJAHonWaadwHYuLef8BFUV8SSyJkucgr+FB5CesNHg=) 2: B1D4F5495BE4F9D995EA9C1545469CA2B98334F1.crl (hash: R+DcbzZuy9WrUNLgfG1pZbWyPaoRH8/Cjk/8X0CmByA=) 3: 3130332e3136382e3138342e302f32342d3234203d3e20313432333231.roa (hash: yqDA1Gh+nI24zoKtqUazyok0UGXURA+Nlb1kM1EqJCo=) 4: 3130332e3136382e3138342e302f32332d3233203d3e20313432333231.roa (hash: 8qmJTm3w/YB+pPXRr4kfQMyCGfmyB46RphMFNG6KdwM=) 5: 3130332e3136382e3138352e302f32342d3234203d3e20313432333231.roa (hash: UnglZoBVP+l2hAxzoGbqmzfsJvv/Xe0z5CKmhsW/FLo=) 6: 3130332e3136382e3138352e302f32342d3234203d3e203438343635.roa (hash: hum6PwDa+tJlyU75JQFBXd7LlyucqEnCFxIhwk7g/uE=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/78e78ee0-0002-4a67-a739-3033d5b5ba61/0/B1D4F5495BE4F9D995EA9C1545469CA2B98334F1.crl rsync://repo-rpki.idnic.net/repo/78e78ee0-0002-4a67-a739-3033d5b5ba61/0/B1D4F5495BE4F9D995EA9C1545469CA2B98334F1.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B1D4F5495BE4F9D995EA9C1545469CA2B98334F1.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 09 Dec 2025 15:57:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0c:c1:7a:31:e1:ee:c1:02:88:fe:91:36:9c:70:96:4f:44:ed:6c:79 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B1D4F5495BE4F9D995EA9C1545469CA2B98334F1 Validity Not Before: Dec 6 16:37:28 2025 GMT Not After : Dec 9 20:43:28 2025 GMT Subject: CN=85C795D162C73F9E56A6C96B270E0E64C107AC35 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:13:74:cf:0d:e0:c1:ba:4d:c4:34:1b:89:f1: 76:f3:d2:5e:5e:43:ae:dc:6d:a7:c7:1c:04:ac:cc: d5:36:bc:e5:46:cb:6a:08:82:3e:36:71:e0:5a:4a: e0:0b:50:e4:3d:dd:31:3e:f0:f6:0b:1c:ce:12:9c: d3:ec:74:72:33:5c:61:29:91:89:49:3f:76:fb:e2: 91:f0:7d:1e:f6:ca:7b:6a:36:e9:87:54:ac:ac:15: 1b:cd:c3:39:b3:46:97:96:8a:17:bc:be:6e:ab:22: 2b:4b:5d:9f:73:98:4b:1b:16:c1:52:d9:8d:ac:5f: d7:ac:7d:c1:2c:af:1a:da:a1:8f:59:95:68:a9:4b: 1e:10:b2:8f:b6:ab:d5:e4:84:57:a3:d4:83:66:45: 34:28:83:7d:1f:a7:c1:f8:7d:ef:64:78:e0:5f:db: e7:49:8b:8a:95:6a:fd:2a:05:93:e6:89:b4:ce:e2: 32:75:6f:9d:c8:d6:46:97:2e:2e:b8:9f:1e:95:32: 8b:a9:85:aa:30:34:e8:e4:be:d6:77:22:ca:0a:e0: 27:cc:ce:16:8b:af:ff:51:5c:20:3b:c8:8c:41:a3: f4:63:df:13:30:e1:35:61:08:2d:c1:02:72:3d:e3: 27:11:95:21:06:10:6f:a6:5b:88:0c:bf:4b:03:9d: 6d:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:C7:95:D1:62:C7:3F:9E:56:A6:C9:6B:27:0E:0E:64:C1:07:AC:35 X509v3 Authority Key Identifier: keyid:B1:D4:F5:49:5B:E4:F9:D9:95:EA:9C:15:45:46:9C:A2:B9:83:34:F1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/78e78ee0-0002-4a67-a739-3033d5b5ba61/0/B1D4F5495BE4F9D995EA9C1545469CA2B98334F1.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B1D4F5495BE4F9D995EA9C1545469CA2B98334F1.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/78e78ee0-0002-4a67-a739-3033d5b5ba61/0/B1D4F5495BE4F9D995EA9C1545469CA2B98334F1.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption d5:21:9a:5c:13:b9:a2:99:ea:9f:17:b9:f2:59:6a:ba:3f:12: f8:88:89:f3:07:42:85:65:d8:e0:1a:97:3c:2e:59:db:5f:b0: 6a:4a:cc:1d:c8:8c:74:a4:21:6d:95:23:ec:98:af:e7:c5:a0: ba:bf:77:e9:5c:12:38:1d:0f:e0:56:5e:55:9d:67:02:1b:fc: 80:7a:0c:2b:74:30:a0:19:81:49:97:66:02:ca:2f:aa:e0:c6: d2:4d:63:30:3a:9b:8f:e6:94:58:36:13:19:5d:d3:9b:17:0e: 69:28:df:22:11:f2:b9:db:44:43:f9:73:65:4c:78:dd:22:dd: 83:37:b2:33:58:ab:77:5f:5b:15:c3:18:5a:e5:9e:2d:bd:0d: 58:21:0f:3c:b6:34:de:83:56:3d:55:6e:86:b2:0a:47:bb:82: 42:fc:80:08:69:26:22:57:fb:25:05:6c:6b:71:f1:fc:6b:b0: 57:93:15:42:40:c3:69:fc:68:d4:f6:b1:c7:e2:0e:fa:fa:ae: 62:cf:87:76:d1:51:a9:fb:23:6e:58:ff:97:dd:e7:ee:79:1c: 40:01:c0:56:2c:d8:17:1d:68:f0:43:f2:41:7b:be:2a:94:43: 6b:1e:0d:eb:14:90:15:8b:c1:77:00:4a:3f:2d:8c:20:c9:cd: 88:19:9e:c9 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUDMF6MeHuwQKI/pE2nHCWT0TtbHkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjFENEY1NDk1QkU0RjlEOTk1RUE5QzE1NDU0NjlDQTJC OTgzMzRGMTAeFw0yNTEyMDYxNjM3MjhaFw0yNTEyMDkyMDQzMjhaMDMxMTAvBgNV BAMTKDg1Qzc5NUQxNjJDNzNGOUU1NkE2Qzk2QjI3MEUwRTY0QzEwN0FDMzUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDoE3TPDeDBuk3ENBuJ8Xbz0l5e Q67cbafHHASszNU2vOVGy2oIgj42ceBaSuALUOQ93TE+8PYLHM4SnNPsdHIzXGEp kYlJP3b74pHwfR72yntqNumHVKysFRvNwzmzRpeWihe8vm6rIitLXZ9zmEsbFsFS 2Y2sX9esfcEsrxraoY9ZlWipSx4Qso+2q9XkhFej1INmRTQog30fp8H4fe9keOBf 2+dJi4qVav0qBZPmibTO4jJ1b53I1kaXLi64nx6VMouphaowNOjkvtZ3IsoK4CfM zhaLr/9RXCA7yIxBo/Rj3xMw4TVhCC3BAnI94ycRlSEGEG+mW4gMv0sDnW2rAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUhceV0WLHP55WpslrJw4OZMEHrDUwHwYDVR0j BBgwFoAUsdT1SVvk+dmV6pwVRUacormDNPEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 OGU3OGVlMC0wMDAyLTRhNjctYTczOS0zMDMzZDViNWJhNjEvMC9CMUQ0RjU0OTVC RTRGOUQ5OTVFQTlDMTU0NTQ2OUNBMkI5ODMzNEYxLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQjFENEY1NDk1QkU0RjlEOTk1RUE5QzE1NDU0NjlDQTJCOTgz MzRGMS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNzhlNzhlZTAtMDAwMi00YTY3LWE3 MzktMzAzM2Q1YjViYTYxLzAvQjFENEY1NDk1QkU0RjlEOTk1RUE5QzE1NDU0NjlD QTJCOTgzMzRGMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBANUhmlwTuaKZ6p8XufJZaro/EviIifMHQoVl 2OAalzwuWdtfsGpKzB3IjHSkIW2VI+yYr+fFoLq/d+lcEjgdD+BWXlWdZwIb/IB6 DCt0MKAZgUmXZgLKL6rgxtJNYzA6m4/mlFg2Exld05sXDmko3yIR8rnbREP5c2VM eN0i3YM3sjNYq3dfWxXDGFrlni29DVghDzy2NN6DVj1VboayCke7gkL8gAhpJiJX +yUFbGtx8fxrsFeTFUJAw2n8aNT2scfiDvr6rmLPh3bRUan7I25Y/5fd5+55HEAB wFYs2BcdaPBD8kF7viqUQ2seDesUkBWLwXcASj8tjCDJzYgZnsk= -----END CERTIFICATE-----Generated at Sun Dec 7 00:55:13 2025 by rpki-client