This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/85dd4f16-570e-4c8c-a992-db89ea3bad36/0/B2077B9BAF0BF3E5FCB84513B1D7445E30CE6582.mft File: B2077B9BAF0BF3E5FCB84513B1D7445E30CE6582.mft (raw, json) Hash identifier: 5H1G8DQERNlErja8bkuY0hWGt8fHwGmxnAqN1v/UtWo= Subject key identifier: C0:1C:41:10:D1:E5:AF:6B:7D:8A:6A:5F:32:CC:A0:55:8D:1B:9C:94 Authority key identifier: B2:07:7B:9B:AF:0B:F3:E5:FC:B8:45:13:B1:D7:44:5E:30:CE:65:82 Certificate issuer: /CN=B2077B9BAF0BF3E5FCB84513B1D7445E30CE6582 Certificate serial: 176E39ED7C9576A8D5564562F2B83D4A71C08E7B Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B2077B9BAF0BF3E5FCB84513B1D7445E30CE6582.cer Subject info access: rsync://repo-rpki.idnic.net/repo/85dd4f16-570e-4c8c-a992-db89ea3bad36/0/B2077B9BAF0BF3E5FCB84513B1D7445E30CE6582.mft Manifest number: 04A4 Signing time: Sat 06 Dec 2025 19:02:12 +0000 Manifest this update: Sat 06 Dec 2025 18:57:12 +0000 Manifest next update: Tue 09 Dec 2025 20:53:12 +0000 Files and hashes: 1: 3130332e3135372e362e302f32342d3234203d3e20313431313036.roa (hash: 2XQOc628Et0oqO8CO0VRKDq3/7F6VNJ+Q07NK/QPZuc=) 2: B2077B9BAF0BF3E5FCB84513B1D7445E30CE6582.crl (hash: n/AmOFe9/UoXrim2CnepYoy6KLM2RZHKAx+EfCoUnxs=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/85dd4f16-570e-4c8c-a992-db89ea3bad36/0/B2077B9BAF0BF3E5FCB84513B1D7445E30CE6582.crl rsync://repo-rpki.idnic.net/repo/85dd4f16-570e-4c8c-a992-db89ea3bad36/0/B2077B9BAF0BF3E5FCB84513B1D7445E30CE6582.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B2077B9BAF0BF3E5FCB84513B1D7445E30CE6582.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 09 Dec 2025 15:57:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 17:6e:39:ed:7c:95:76:a8:d5:56:45:62:f2:b8:3d:4a:71:c0:8e:7b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B2077B9BAF0BF3E5FCB84513B1D7445E30CE6582 Validity Not Before: Dec 6 18:57:12 2025 GMT Not After : Dec 9 20:53:12 2025 GMT Subject: CN=C01C4110D1E5AF6B7D8A6A5F32CCA0558D1B9C94 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:5d:b4:4d:58:fa:e0:18:61:96:da:b6:3f:6d: 45:bc:6b:83:8e:ec:c7:91:8e:48:b4:08:a9:dc:ca: 13:08:d1:1c:01:59:e1:b6:ca:d1:d0:b1:61:14:0c: 20:70:bd:d4:4a:6c:5a:08:83:ce:92:b3:b6:20:1a: 6f:23:ee:31:1d:44:df:cd:95:d9:07:19:37:e1:cc: d5:7d:d4:81:1e:08:5b:85:76:88:f4:18:e4:6b:df: 3c:fc:76:c3:93:57:7d:63:6c:86:26:77:44:84:44: b2:7d:52:71:3b:28:f0:f8:bd:48:76:b3:7a:4c:7d: 11:81:64:79:86:d9:e0:66:e4:54:8d:89:4a:94:fd: 70:81:f9:32:47:1b:8a:e4:47:35:ee:68:04:85:fc: ac:88:a0:51:75:11:f8:d1:42:ab:1e:1b:51:21:8c: 51:92:35:2a:36:a9:94:73:7f:b7:08:ae:32:73:43: f9:b5:c4:3d:1a:2c:2c:1a:7a:72:a3:85:27:26:f0: 77:0a:0a:db:f9:32:82:5e:e8:c7:7c:1c:94:ee:19: 1d:fa:80:53:2a:7a:af:c0:37:54:ed:dd:63:7b:2c: 8b:df:67:e9:b0:cd:87:ae:fc:a4:bc:e4:75:04:c1: 9c:17:d4:71:d4:eb:56:a7:be:19:0b:95:b1:f6:5b: 4c:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C0:1C:41:10:D1:E5:AF:6B:7D:8A:6A:5F:32:CC:A0:55:8D:1B:9C:94 X509v3 Authority Key Identifier: keyid:B2:07:7B:9B:AF:0B:F3:E5:FC:B8:45:13:B1:D7:44:5E:30:CE:65:82 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/85dd4f16-570e-4c8c-a992-db89ea3bad36/0/B2077B9BAF0BF3E5FCB84513B1D7445E30CE6582.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B2077B9BAF0BF3E5FCB84513B1D7445E30CE6582.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/85dd4f16-570e-4c8c-a992-db89ea3bad36/0/B2077B9BAF0BF3E5FCB84513B1D7445E30CE6582.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 54:73:3b:46:33:d6:bf:66:da:67:be:ae:cf:bf:ee:31:9f:5a: 1e:6b:ec:66:6b:df:e2:49:81:9c:c2:a4:77:e6:0d:92:dc:55: 38:a8:84:49:90:09:81:6d:67:dc:a1:ef:01:36:b7:f2:6f:89: d5:e9:23:c9:7b:7d:33:68:19:f9:30:51:a3:70:e9:ad:eb:9b: fe:93:ba:9e:21:b1:cc:b1:18:63:aa:da:30:2a:98:40:bb:7d: c9:1f:39:3a:05:a2:fd:43:13:26:75:e9:89:ca:a8:d4:ea:74: 42:fb:2b:48:55:a5:38:9d:40:f5:a5:62:3d:fa:39:af:82:41: 78:32:4a:96:16:f5:2e:49:36:ba:2d:a1:ea:b8:30:4e:6f:8d: 23:81:6d:89:f0:40:f6:72:98:fa:b4:cb:3e:99:6e:fe:06:03: 14:b5:c4:a5:64:c6:22:4c:0d:3d:a2:86:eb:df:2e:92:21:cf: 0a:2f:c2:d4:fb:02:82:a8:57:00:b7:ed:80:5e:a0:77:44:4e: a1:b4:f5:33:79:e7:0c:f0:d2:26:44:28:00:53:e9:73:07:b6: 84:f6:ca:fd:b9:9c:3c:1f:a6:99:25:0c:38:1b:d6:e7:e1:07: c8:41:43:90:e9:fb:ae:99:4b:2e:07:cf:82:a9:8d:a6:ea:9a: 96:8d:33:d3 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUF2457XyVdqjVVkVi8rg9SnHAjnswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjIwNzdCOUJBRjBCRjNFNUZDQjg0NTEzQjFENzQ0NUUz MENFNjU4MjAeFw0yNTEyMDYxODU3MTJaFw0yNTEyMDkyMDUzMTJaMDMxMTAvBgNV BAMTKEMwMUM0MTEwRDFFNUFGNkI3RDhBNkE1RjMyQ0NBMDU1OEQxQjlDOTQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDYXbRNWPrgGGGW2rY/bUW8a4OO 7MeRjki0CKncyhMI0RwBWeG2ytHQsWEUDCBwvdRKbFoIg86Ss7YgGm8j7jEdRN/N ldkHGTfhzNV91IEeCFuFdoj0GORr3zz8dsOTV31jbIYmd0SERLJ9UnE7KPD4vUh2 s3pMfRGBZHmG2eBm5FSNiUqU/XCB+TJHG4rkRzXuaASF/KyIoFF1EfjRQqseG1Eh jFGSNSo2qZRzf7cIrjJzQ/m1xD0aLCwaenKjhScm8HcKCtv5MoJe6Md8HJTuGR36 gFMqeq/AN1Tt3WN7LIvfZ+mwzYeu/KS85HUEwZwX1HHU61anvhkLlbH2W0xjAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUwBxBENHlr2t9impfMsygVY0bnJQwHwYDVR0j BBgwFoAUsgd7m68L8+X8uEUTsddEXjDOZYIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 NWRkNGYxNi01NzBlLTRjOGMtYTk5Mi1kYjg5ZWEzYmFkMzYvMC9CMjA3N0I5QkFG MEJGM0U1RkNCODQ1MTNCMUQ3NDQ1RTMwQ0U2NTgyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQjIwNzdCOUJBRjBCRjNFNUZDQjg0NTEzQjFENzQ0NUUzMENF NjU4Mi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vODVkZDRmMTYtNTcwZS00YzhjLWE5 OTItZGI4OWVhM2JhZDM2LzAvQjIwNzdCOUJBRjBCRjNFNUZDQjg0NTEzQjFENzQ0 NUUzMENFNjU4Mi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFRzO0Yz1r9m2me+rs+/7jGfWh5r7GZr3+JJ gZzCpHfmDZLcVTiohEmQCYFtZ9yh7wE2t/JvidXpI8l7fTNoGfkwUaNw6a3rm/6T up4hscyxGGOq2jAqmEC7fckfOToFov1DEyZ16YnKqNTqdEL7K0hVpTidQPWlYj36 Oa+CQXgySpYW9S5JNrotoeq4ME5vjSOBbYnwQPZymPq0yz6Zbv4GAxS1xKVkxiJM DT2ihuvfLpIhzwovwtT7AoKoVwC37YBeoHdETqG09TN55wzw0iZEKABT6XMHtoT2 yv25nDwfppklDDgb1ufhB8hBQ5Dp+66ZSy4Hz4KpjabqmpaNM9M= -----END CERTIFICATE-----Generated at Sun Dec 7 06:41:07 2025 by rpki-client