This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/877b01cf-b1c9-450f-8551-4dcb4cbd4262/0/BCDF6D8F5670257F852914E87D552983AA37A3A3.mft File: BCDF6D8F5670257F852914E87D552983AA37A3A3.mft (raw, json) Hash identifier: dHfQvGC/fQy6d19G9rcrA3mS1IPtbbuCTsbRgpymg2o= Subject key identifier: 17:21:35:4F:64:BC:3D:6D:77:5E:46:77:6E:8E:1D:F0:1D:F3:9B:4E Authority key identifier: BC:DF:6D:8F:56:70:25:7F:85:29:14:E8:7D:55:29:83:AA:37:A3:A3 Certificate issuer: /CN=BCDF6D8F5670257F852914E87D552983AA37A3A3 Certificate serial: 0AD28800D08F8F8F3DCC2CA75C970823DA97ACFA Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BCDF6D8F5670257F852914E87D552983AA37A3A3.cer Subject info access: rsync://repo-rpki.idnic.net/repo/877b01cf-b1c9-450f-8551-4dcb4cbd4262/0/BCDF6D8F5670257F852914E87D552983AA37A3A3.mft Manifest number: 0485 Signing time: Sat 06 Dec 2025 14:01:00 +0000 Manifest this update: Sat 06 Dec 2025 13:56:00 +0000 Manifest next update: Tue 09 Dec 2025 14:02:00 +0000 Files and hashes: 1: BCDF6D8F5670257F852914E87D552983AA37A3A3.crl (hash: VDF9tBw7AZ/oN6TPjVhD1WpdP2BP9UTS5p4oSEn2Ql4=) 2: 3130332e3134372e37362e302f32332d3233203d3e20313339393532.roa (hash: ZtfrmcdIDZFk5FXV0vrgffSS//LC3R042y4pGOoRFVw=) 3: 3130332e3134372e37372e302f32342d3234203d3e20313339393532.roa (hash: gks4E4RAlqsYzpMbY7s86LphrkEHlbXfODEV9a6VKSU=) 4: 3130332e3134372e37362e302f32342d3234203d3e20313339393532.roa (hash: 2JYulwUxi2T/jzgAmBWLWpOPU3Z1C06NLPJ2YJd9h44=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/877b01cf-b1c9-450f-8551-4dcb4cbd4262/0/BCDF6D8F5670257F852914E87D552983AA37A3A3.crl rsync://repo-rpki.idnic.net/repo/877b01cf-b1c9-450f-8551-4dcb4cbd4262/0/BCDF6D8F5670257F852914E87D552983AA37A3A3.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BCDF6D8F5670257F852914E87D552983AA37A3A3.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 09 Dec 2025 14:02:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0a:d2:88:00:d0:8f:8f:8f:3d:cc:2c:a7:5c:97:08:23:da:97:ac:fa Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BCDF6D8F5670257F852914E87D552983AA37A3A3 Validity Not Before: Dec 6 13:56:00 2025 GMT Not After : Dec 9 14:02:00 2025 GMT Subject: CN=1721354F64BC3D6D775E46776E8E1DF01DF39B4E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:f4:e4:d2:d0:30:f1:71:45:e9:75:79:4d:c9: aa:a9:c8:c0:1c:02:16:51:ec:e2:af:5a:c0:be:69: 8b:ae:8a:f7:29:2a:5c:df:c7:a3:32:9d:de:df:7b: 50:95:7a:fe:65:8c:6f:1d:1f:05:b3:0e:49:03:84: 93:29:ba:fe:5c:85:2b:ec:71:f0:fe:b1:c6:d1:15: fc:e4:30:f9:2d:59:5a:d7:e6:23:a6:64:1d:78:11: 0a:07:27:3d:13:28:4f:40:b3:93:c2:84:d3:ff:23: 83:f1:39:68:32:76:3b:cf:9d:78:2b:4c:80:9f:ae: c5:de:9f:75:10:4b:2b:2d:e1:fb:9e:eb:a7:97:50: 27:54:82:23:13:8d:22:be:2b:30:3d:10:a0:1e:f3: f4:ba:44:20:68:e8:28:9d:49:d0:08:7a:34:01:6e: 1e:4f:db:84:85:9f:89:e8:ed:18:95:72:90:60:c9: af:ef:8c:b2:c9:85:ed:ba:34:c5:24:51:6d:2d:e1: 99:7d:44:b1:ec:48:f8:43:da:6c:32:2c:ba:41:16: bf:91:8c:0a:57:ca:23:fd:54:18:ad:fb:e8:a2:1d: 4d:bb:4f:cd:d1:50:bc:f9:c1:8f:5c:f9:9f:e9:fc: 4c:dc:40:57:14:39:49:73:43:5d:be:76:1c:a7:e3: 67:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:21:35:4F:64:BC:3D:6D:77:5E:46:77:6E:8E:1D:F0:1D:F3:9B:4E X509v3 Authority Key Identifier: keyid:BC:DF:6D:8F:56:70:25:7F:85:29:14:E8:7D:55:29:83:AA:37:A3:A3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/877b01cf-b1c9-450f-8551-4dcb4cbd4262/0/BCDF6D8F5670257F852914E87D552983AA37A3A3.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BCDF6D8F5670257F852914E87D552983AA37A3A3.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/877b01cf-b1c9-450f-8551-4dcb4cbd4262/0/BCDF6D8F5670257F852914E87D552983AA37A3A3.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7e:47:5c:20:59:5f:8e:ed:a3:0e:b5:29:9c:9c:d6:01:ba:ae: 43:ce:60:75:31:3f:80:c8:b2:c8:e7:1b:c4:48:25:55:a1:bb: c8:88:80:2d:e1:72:cd:c1:7f:71:ec:98:a0:74:d6:78:a2:11: 68:0b:d2:2c:16:a4:3d:81:cd:c4:45:1c:40:7e:ec:05:2f:6f: 64:5c:1d:4a:e7:2b:a2:89:74:76:8d:1c:14:8c:44:e3:ef:13: 34:2e:3e:7e:66:b9:ad:60:15:30:0c:82:7d:3c:90:5f:76:b4: 97:e2:fd:6c:27:0a:39:7d:6c:d8:cb:ae:4a:10:8d:49:76:a4: f1:41:69:c7:12:62:10:40:2b:44:6c:99:1e:09:85:0c:f4:50: 25:96:31:d7:93:03:11:2d:64:e4:20:a0:e8:0c:2d:bd:94:bd: 54:0c:30:53:d1:30:18:29:0b:39:4d:be:00:c3:82:a2:4b:c0: 90:fe:dc:ca:f2:82:0a:73:a9:20:7d:28:27:9e:0c:44:fe:6c: 20:b8:8b:65:93:00:fe:c0:ac:ae:14:bb:33:45:d3:df:44:8b: 27:a4:08:2a:3b:3c:70:da:94:0c:50:14:2e:8f:1f:d2:51:1a: 71:ba:db:4c:8f:45:a7:44:26:ea:f1:63:a9:c5:f3:79:56:34: 18:ef:51:a6 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUCtKIANCPj489zCynXJcII9qXrPowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkNERjZEOEY1NjcwMjU3Rjg1MjkxNEU4N0Q1NTI5ODNB QTM3QTNBMzAeFw0yNTEyMDYxMzU2MDBaFw0yNTEyMDkxNDAyMDBaMDMxMTAvBgNV BAMTKDE3MjEzNTRGNjRCQzNENkQ3NzVFNDY3NzZFOEUxREYwMURGMzlCNEUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDF9OTS0DDxcUXpdXlNyaqpyMAc AhZR7OKvWsC+aYuuivcpKlzfx6Mynd7fe1CVev5ljG8dHwWzDkkDhJMpuv5chSvs cfD+scbRFfzkMPktWVrX5iOmZB14EQoHJz0TKE9As5PChNP/I4PxOWgydjvPnXgr TICfrsXen3UQSyst4fue66eXUCdUgiMTjSK+KzA9EKAe8/S6RCBo6CidSdAIejQB bh5P24SFn4no7RiVcpBgya/vjLLJhe26NMUkUW0t4Zl9RLHsSPhD2mwyLLpBFr+R jApXyiP9VBit++iiHU27T83RULz5wY9c+Z/p/EzcQFcUOUlzQ12+dhyn42f1AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUFyE1T2S8PW13XkZ3bo4d8B3zm04wHwYDVR0j BBgwFoAUvN9tj1ZwJX+FKRTofVUpg6o3o6MwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 NzdiMDFjZi1iMWM5LTQ1MGYtODU1MS00ZGNiNGNiZDQyNjIvMC9CQ0RGNkQ4RjU2 NzAyNTdGODUyOTE0RTg3RDU1Mjk4M0FBMzdBM0EzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQkNERjZEOEY1NjcwMjU3Rjg1MjkxNEU4N0Q1NTI5ODNBQTM3 QTNBMy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vODc3YjAxY2YtYjFjOS00NTBmLTg1 NTEtNGRjYjRjYmQ0MjYyLzAvQkNERjZEOEY1NjcwMjU3Rjg1MjkxNEU4N0Q1NTI5 ODNBQTM3QTNBMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAH5HXCBZX47tow61KZyc1gG6rkPOYHUxP4DI ssjnG8RIJVWhu8iIgC3hcs3Bf3HsmKB01niiEWgL0iwWpD2BzcRFHEB+7AUvb2Rc HUrnK6KJdHaNHBSMROPvEzQuPn5mua1gFTAMgn08kF92tJfi/WwnCjl9bNjLrkoQ jUl2pPFBaccSYhBAK0RsmR4JhQz0UCWWMdeTAxEtZOQgoOgMLb2UvVQMMFPRMBgp CzlNvgDDgqJLwJD+3MryggpzqSB9KCeeDET+bCC4i2WTAP7ArK4UuzNF099Eiyek CCo7PHDalAxQFC6PH9JRGnG620yPRadEJurxY6nF83lWNBjvUaY= -----END CERTIFICATE-----Generated at Sun Dec 7 00:50:48 2025 by rpki-client