This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/7cd323be-837d-4244-846c-7d2393a9a009/0/B0928A45D014D8D5FAD50314E828086F12B15610.mft File: B0928A45D014D8D5FAD50314E828086F12B15610.mft (raw, json) Hash identifier: LhFE8KB2JjcgU5q/WXq6XnsZ0ZgcrLrGuOMpijgR//E= Subject key identifier: 0D:6E:11:36:07:9E:C5:AB:75:65:80:1E:6C:17:6B:DB:4D:C4:C8:ED Authority key identifier: B0:92:8A:45:D0:14:D8:D5:FA:D5:03:14:E8:28:08:6F:12:B1:56:10 Certificate issuer: /CN=B0928A45D014D8D5FAD50314E828086F12B15610 Certificate serial: 35EB00268DC3BA775AF1580A86EF11470FE73769 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B0928A45D014D8D5FAD50314E828086F12B15610.cer Subject info access: rsync://repo-rpki.idnic.net/repo/7cd323be-837d-4244-846c-7d2393a9a009/0/B0928A45D014D8D5FAD50314E828086F12B15610.mft Manifest number: 0330 Signing time: Fri 05 Dec 2025 18:01:21 +0000 Manifest this update: Fri 05 Dec 2025 17:56:21 +0000 Manifest next update: Mon 08 Dec 2025 21:56:21 +0000 Files and hashes: 1: 3230322e3132352e38322e302f32332d3233203d3e20313430343433.roa (hash: g4b6/Xa0b41J+1gc8Xz+JaVY6mTt5QNosbt82K9ZCLY=) 2: 3230322e3132352e38322e302f32342d3234203d3e20313430343433.roa (hash: svi5IuXnIA+13Wc0eQrV3WQdaOBiVClli1PIWM+ewGc=) 3: B0928A45D014D8D5FAD50314E828086F12B15610.crl (hash: d+EmDTJ+/9SAT1O7tsOIteUQG9ij4oOPaRGH6v38eV8=) 4: 3230322e3132352e38332e302f32342d3234203d3e20313430343433.roa (hash: Ky8MrLU9AvVMvZfrLkoaRO/9X/2qSweH3weFbcGoV3c=) 5: 3230322e37302e3133322e302f32342d3234203d3e20313430343433.roa (hash: hnSe2L9heULKYvVeefFY6CeCDXE6iTWu+s4r/qCo/4o=) 6: 3230322e37302e3133332e302f32342d3234203d3e20313430343433.roa (hash: wdtK/qmLPSYK98usl8We2OAmclE1Y5QskILTtOqsrh0=) 7: 3230322e37302e3133322e302f32332d3233203d3e20313430343433.roa (hash: unxNSSNtfbW/QtJSHv1+Jppsd16Z88+qlZSg2ZXLUc0=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/7cd323be-837d-4244-846c-7d2393a9a009/0/B0928A45D014D8D5FAD50314E828086F12B15610.crl rsync://repo-rpki.idnic.net/repo/7cd323be-837d-4244-846c-7d2393a9a009/0/B0928A45D014D8D5FAD50314E828086F12B15610.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B0928A45D014D8D5FAD50314E828086F12B15610.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 08 Dec 2025 21:56:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 35:eb:00:26:8d:c3:ba:77:5a:f1:58:0a:86:ef:11:47:0f:e7:37:69 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B0928A45D014D8D5FAD50314E828086F12B15610 Validity Not Before: Dec 5 17:56:21 2025 GMT Not After : Dec 8 21:56:21 2025 GMT Subject: CN=0D6E1136079EC5AB7565801E6C176BDB4DC4C8ED Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:68:32:31:fe:0b:0e:bf:5c:a1:b4:c5:5f:72: 15:04:df:48:d0:0e:8e:08:48:4d:e0:da:87:96:ce: 3f:60:b4:e0:1f:a5:dc:79:aa:4b:47:99:4e:d8:6b: de:a6:52:c2:69:50:49:e6:b0:bf:b9:1e:e3:36:c8: 0b:91:16:a0:7f:be:67:8e:62:4f:78:7a:4b:06:f9: 33:2c:0d:a5:37:aa:38:8d:2c:8e:99:66:3e:56:70: a8:ed:03:1b:cb:1a:86:eb:8c:4b:0a:db:01:9d:97: 95:a7:ec:f9:9b:5d:46:c3:57:27:c6:44:be:ce:23: 64:bc:4a:95:fc:50:23:3f:c5:e2:16:54:7f:3c:b5: d6:f6:42:62:2c:cb:47:29:35:a7:d8:b9:fd:2b:1d: 2e:05:6b:d5:80:c2:6a:de:e5:10:64:af:1e:3f:4a: cd:1f:b2:f5:03:cc:b4:03:d0:70:46:1d:8a:0b:aa: 74:48:b9:56:f1:52:1a:9c:69:0d:c0:43:04:ea:ca: 07:d5:f1:fc:ed:54:90:85:cf:56:79:b7:0f:bc:76: 75:f7:2f:1b:d0:5c:9b:b5:90:a4:09:46:db:ff:48: cf:c9:1e:44:12:ef:95:75:d5:fb:1d:28:d6:98:54: 5d:88:1d:8f:b4:01:70:8e:7d:24:43:6c:ab:1a:38: 7f:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0D:6E:11:36:07:9E:C5:AB:75:65:80:1E:6C:17:6B:DB:4D:C4:C8:ED X509v3 Authority Key Identifier: keyid:B0:92:8A:45:D0:14:D8:D5:FA:D5:03:14:E8:28:08:6F:12:B1:56:10 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/7cd323be-837d-4244-846c-7d2393a9a009/0/B0928A45D014D8D5FAD50314E828086F12B15610.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B0928A45D014D8D5FAD50314E828086F12B15610.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7cd323be-837d-4244-846c-7d2393a9a009/0/B0928A45D014D8D5FAD50314E828086F12B15610.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 41:31:1f:eb:d2:40:be:6b:90:b4:6f:93:92:37:7a:8a:6a:fc: 0d:8b:a0:eb:a2:be:af:1b:5c:35:aa:4e:02:77:57:d4:c6:5f: ec:05:15:d2:65:db:01:41:f7:fd:e5:0e:3b:81:82:74:c4:b1: d9:93:77:8c:76:3f:2c:85:24:5c:e4:93:48:65:f8:d1:43:d1: cf:76:16:8e:ee:df:ed:bf:68:48:11:f3:e3:25:01:dc:bb:c0: 18:df:e3:11:56:2b:c8:dd:8f:50:56:63:c8:b9:5b:fd:d0:5b: 49:3d:35:6d:21:6c:71:5c:83:98:64:9f:0f:6f:bb:1b:3b:5e: 54:6c:ff:ce:26:4c:84:ee:79:d1:83:9f:f4:2c:8a:c7:cb:6d: f3:da:0b:6a:ca:2c:fc:63:d5:cf:0a:38:bb:3e:48:24:78:f2: 96:31:d9:3a:6c:6d:ba:e3:66:5f:50:a5:57:e5:60:b7:9f:1e: ab:5b:4d:f6:ae:a4:61:52:7e:40:f1:b4:bc:ec:e9:e6:56:5c: b4:2c:c2:62:2e:4b:47:b0:38:de:67:7c:97:5d:89:62:8c:9c: b7:cc:4e:a8:f9:f4:99:ba:7e:37:e6:7e:c2:86:51:5e:9c:15: 2f:0a:dc:a4:d9:49:24:79:1a:d9:83:07:41:39:a6:59:d7:b7: 7e:68:12:69 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUNesAJo3Dunda8VgKhu8RRw/nN2kwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjA5MjhBNDVEMDE0RDhENUZBRDUwMzE0RTgyODA4NkYx MkIxNTYxMDAeFw0yNTEyMDUxNzU2MjFaFw0yNTEyMDgyMTU2MjFaMDMxMTAvBgNV BAMTKDBENkUxMTM2MDc5RUM1QUI3NTY1ODAxRTZDMTc2QkRCNERDNEM4RUQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCdaDIx/gsOv1yhtMVfchUE30jQ Do4ISE3g2oeWzj9gtOAfpdx5qktHmU7Ya96mUsJpUEnmsL+5HuM2yAuRFqB/vmeO Yk94eksG+TMsDaU3qjiNLI6ZZj5WcKjtAxvLGobrjEsK2wGdl5Wn7PmbXUbDVyfG RL7OI2S8SpX8UCM/xeIWVH88tdb2QmIsy0cpNafYuf0rHS4Fa9WAwmre5RBkrx4/ Ss0fsvUDzLQD0HBGHYoLqnRIuVbxUhqcaQ3AQwTqygfV8fztVJCFz1Z5tw+8dnX3 LxvQXJu1kKQJRtv/SM/JHkQS75V11fsdKNaYVF2IHY+0AXCOfSRDbKsaOH8dAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUDW4RNgeexat1ZYAebBdr203EyO0wHwYDVR0j BBgwFoAUsJKKRdAU2NX61QMU6CgIbxKxVhAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 Y2QzMjNiZS04MzdkLTQyNDQtODQ2Yy03ZDIzOTNhOWEwMDkvMC9CMDkyOEE0NUQw MTREOEQ1RkFENTAzMTRFODI4MDg2RjEyQjE1NjEwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQjA5MjhBNDVEMDE0RDhENUZBRDUwMzE0RTgyODA4NkYxMkIx NTYxMC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vN2NkMzIzYmUtODM3ZC00MjQ0LTg0 NmMtN2QyMzkzYTlhMDA5LzAvQjA5MjhBNDVEMDE0RDhENUZBRDUwMzE0RTgyODA4 NkYxMkIxNTYxMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEExH+vSQL5rkLRvk5I3eopq/A2LoOuivq8b XDWqTgJ3V9TGX+wFFdJl2wFB9/3lDjuBgnTEsdmTd4x2PyyFJFzkk0hl+NFD0c92 Fo7u3+2/aEgR8+MlAdy7wBjf4xFWK8jdj1BWY8i5W/3QW0k9NW0hbHFcg5hknw9v uxs7XlRs/84mTITuedGDn/QsisfLbfPaC2rKLPxj1c8KOLs+SCR48pYx2Tpsbbrj Zl9QpVflYLefHqtbTfaupGFSfkDxtLzs6eZWXLQswmIuS0ewON5nfJddiWKMnLfM Tqj59Jm6fjfmfsKGUV6cFS8K3KTZSSR5GtmDB0E5plnXt35oEmk= -----END CERTIFICATE-----Generated at Sun Dec 7 01:40:15 2025 by rpki-client