This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/ae921917-13af-4403-97ab-9adaf5104c12/0/BCBEAD4672B19E91248E58DD91C4ECD894A7A3A8.mft File: BCBEAD4672B19E91248E58DD91C4ECD894A7A3A8.mft (raw, json) Hash identifier: qZGDeTImMp3I9+V0uiIfZBr2acTO79q6njxyiIOqLm8= Subject key identifier: 7A:6C:56:1F:43:DD:67:BE:16:35:A7:34:DE:93:42:65:80:BA:5C:0D Authority key identifier: BC:BE:AD:46:72:B1:9E:91:24:8E:58:DD:91:C4:EC:D8:94:A7:A3:A8 Certificate issuer: /CN=BCBEAD4672B19E91248E58DD91C4ECD894A7A3A8 Certificate serial: 708997143BEFB3AF617BDBB14C19BABF98377718 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BCBEAD4672B19E91248E58DD91C4ECD894A7A3A8.cer Subject info access: rsync://repo-rpki.idnic.net/repo/ae921917-13af-4403-97ab-9adaf5104c12/0/BCBEAD4672B19E91248E58DD91C4ECD894A7A3A8.mft Manifest number: EC Signing time: Sat 06 Dec 2025 03:01:06 +0000 Manifest this update: Sat 06 Dec 2025 02:56:06 +0000 Manifest next update: Tue 09 Dec 2025 09:40:06 +0000 Files and hashes: 1: BCBEAD4672B19E91248E58DD91C4ECD894A7A3A8.crl (hash: hDQG6HDYJcHW6hpD7uQDCTyh3jtxo5AtoXKPp/KenzY=) 2: 3130332e3134322e39302e302f32332d3234203d3e20313339333734.roa (hash: BCR4399uDrDPTCg+MIbL26PuI+e2Uq0NkSYBiX921Hw=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/ae921917-13af-4403-97ab-9adaf5104c12/0/BCBEAD4672B19E91248E58DD91C4ECD894A7A3A8.crl rsync://repo-rpki.idnic.net/repo/ae921917-13af-4403-97ab-9adaf5104c12/0/BCBEAD4672B19E91248E58DD91C4ECD894A7A3A8.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BCBEAD4672B19E91248E58DD91C4ECD894A7A3A8.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 09 Dec 2025 09:40:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 70:89:97:14:3b:ef:b3:af:61:7b:db:b1:4c:19:ba:bf:98:37:77:18 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BCBEAD4672B19E91248E58DD91C4ECD894A7A3A8 Validity Not Before: Dec 6 02:56:06 2025 GMT Not After : Dec 9 09:40:06 2025 GMT Subject: CN=7A6C561F43DD67BE1635A734DE93426580BA5C0D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:ae:f8:ed:ba:13:75:01:f5:81:5b:4e:6f:86: f4:f4:f9:14:d1:95:d9:d6:c2:65:fa:3d:cf:86:14: c0:c9:0e:10:8c:f3:8e:8e:9f:18:71:fb:e9:be:88: e7:1b:b6:f8:92:54:38:d7:8e:1e:b6:26:d2:83:42: 08:e9:50:07:ab:02:fc:79:23:93:21:8f:e2:b0:a9: 52:47:5e:26:e8:55:1a:72:45:51:75:74:c2:a5:57: fb:3a:ec:1e:07:1d:d2:82:ef:6c:b9:76:73:cf:30: 26:0c:47:dd:cd:15:ae:67:fa:28:05:2e:6f:d3:4a: b6:45:09:61:a8:dc:7d:9f:d4:02:c7:11:4f:8f:93: a2:bf:62:92:e6:33:19:70:96:4a:a6:11:27:dd:d8: f3:58:72:db:3c:62:02:fe:61:27:95:fc:35:1c:c2: 3c:23:b7:36:31:7f:dd:74:85:48:3e:a7:af:0a:42: f4:35:27:21:e2:b9:a2:b7:41:00:4c:78:1a:9f:a4: 4a:8b:6b:e1:9a:73:f1:fa:a5:50:24:12:83:67:9a: a2:38:58:28:fb:9d:21:2a:f3:ac:fc:67:19:a7:b8: f2:b8:f2:c1:04:7e:01:c5:65:d1:86:b1:6f:01:98: a3:cb:12:a4:b3:06:ec:14:98:a5:b2:15:e2:1d:0d: b6:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7A:6C:56:1F:43:DD:67:BE:16:35:A7:34:DE:93:42:65:80:BA:5C:0D X509v3 Authority Key Identifier: keyid:BC:BE:AD:46:72:B1:9E:91:24:8E:58:DD:91:C4:EC:D8:94:A7:A3:A8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/ae921917-13af-4403-97ab-9adaf5104c12/0/BCBEAD4672B19E91248E58DD91C4ECD894A7A3A8.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BCBEAD4672B19E91248E58DD91C4ECD894A7A3A8.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ae921917-13af-4403-97ab-9adaf5104c12/0/BCBEAD4672B19E91248E58DD91C4ECD894A7A3A8.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c0:86:cf:30:d4:ca:9a:82:63:97:39:3c:0a:1e:a4:2f:fe:e3: bf:63:76:10:18:09:53:1b:c7:2e:89:30:ce:97:83:4f:3a:1b: ad:42:1d:61:18:f5:0a:e3:dd:b1:f8:12:d7:38:10:e2:68:d0: 37:6f:2d:52:d7:40:96:69:9b:b0:0a:a5:43:3e:5e:40:9f:a9: 6e:ba:6d:7e:2c:b4:00:d5:cf:00:9a:f1:b7:b1:10:c1:f2:40: 9c:69:39:72:ce:6d:ac:80:81:44:67:e6:54:0b:31:8c:90:ab: ea:82:db:12:e8:bc:6c:a5:20:f7:24:3f:1b:6c:66:a9:7f:a1: 8e:91:4c:09:71:90:ba:64:c4:40:b8:c5:47:ea:64:8d:5b:bb: 2f:64:d9:5c:eb:27:8e:86:20:bf:32:47:fa:07:88:f6:c8:28: 53:c4:89:37:ab:a5:65:b7:a2:75:f8:58:33:cf:d5:8c:ce:84: 24:48:a9:16:d5:cc:1f:60:ff:35:c1:ac:cb:e6:40:58:67:0c: 6e:07:83:30:61:5a:c5:c1:64:c6:ab:a3:67:37:b2:09:7f:ee: 24:20:54:d6:b1:72:88:f2:dc:c8:36:d1:6b:9c:3a:2d:a8:96: 4d:82:8e:ab:d2:eb:88:6d:e7:b1:8b:49:98:97:b9:7e:26:68: 23:2e:8c:91 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUcImXFDvvs69he9uxTBm6v5g3dxgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkNCRUFENDY3MkIxOUU5MTI0OEU1OEREOTFDNEVDRDg5 NEE3QTNBODAeFw0yNTEyMDYwMjU2MDZaFw0yNTEyMDkwOTQwMDZaMDMxMTAvBgNV BAMTKDdBNkM1NjFGNDNERDY3QkUxNjM1QTczNERFOTM0MjY1ODBCQTVDMEQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDJrvjtuhN1AfWBW05vhvT0+RTR ldnWwmX6Pc+GFMDJDhCM846Onxhx++m+iOcbtviSVDjXjh62JtKDQgjpUAerAvx5 I5Mhj+KwqVJHXiboVRpyRVF1dMKlV/s67B4HHdKC72y5dnPPMCYMR93NFa5n+igF Lm/TSrZFCWGo3H2f1ALHEU+Pk6K/YpLmMxlwlkqmESfd2PNYcts8YgL+YSeV/DUc wjwjtzYxf910hUg+p68KQvQ1JyHiuaK3QQBMeBqfpEqLa+Gac/H6pVAkEoNnmqI4 WCj7nSEq86z8ZxmnuPK48sEEfgHFZdGGsW8BmKPLEqSzBuwUmKWyFeIdDbapAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUemxWH0PdZ74WNac03pNCZYC6XA0wHwYDVR0j BBgwFoAUvL6tRnKxnpEkjljdkcTs2JSno6gwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h ZTkyMTkxNy0xM2FmLTQ0MDMtOTdhYi05YWRhZjUxMDRjMTIvMC9CQ0JFQUQ0Njcy QjE5RTkxMjQ4RTU4REQ5MUM0RUNEODk0QTdBM0E4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQkNCRUFENDY3MkIxOUU5MTI0OEU1OEREOTFDNEVDRDg5NEE3 QTNBOC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYWU5MjE5MTctMTNhZi00NDAzLTk3 YWItOWFkYWY1MTA0YzEyLzAvQkNCRUFENDY3MkIxOUU5MTI0OEU1OEREOTFDNEVD RDg5NEE3QTNBOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAMCGzzDUypqCY5c5PAoepC/+479jdhAYCVMb xy6JMM6Xg086G61CHWEY9Qrj3bH4Etc4EOJo0DdvLVLXQJZpm7AKpUM+XkCfqW66 bX4stADVzwCa8bexEMHyQJxpOXLObayAgURn5lQLMYyQq+qC2xLovGylIPckPxts Zql/oY6RTAlxkLpkxEC4xUfqZI1buy9k2VzrJ46GIL8yR/oHiPbIKFPEiTerpWW3 onX4WDPP1YzOhCRIqRbVzB9g/zXBrMvmQFhnDG4HgzBhWsXBZMaro2c3sgl/7iQg VNaxcojy3Mg20WucOi2olk2CjqvS64ht57GLSZiXuX4maCMujJE= -----END CERTIFICATE-----Generated at Sun Dec 7 00:01:22 2025 by rpki-client