This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/b0bd7d6c-ea5a-4c45-9558-717994ab680e/0/B5ABE86EBB2A02C58392749A92FEA68FBAFC5C46.mft File: B5ABE86EBB2A02C58392749A92FEA68FBAFC5C46.mft (raw, json) Hash identifier: 3+1m6n5aM77lh2m1YxQE8O9C5m7gZQJnJD41dGR1zDQ= Subject key identifier: 12:59:03:EC:BC:16:A6:1E:86:41:F1:D8:F4:59:49:71:0F:8A:67:22 Authority key identifier: B5:AB:E8:6E:BB:2A:02:C5:83:92:74:9A:92:FE:A6:8F:BA:FC:5C:46 Certificate issuer: /CN=B5ABE86EBB2A02C58392749A92FEA68FBAFC5C46 Certificate serial: 0A47A9D1BABA6D1C67C2ECE7BA891062AB9E0A8C Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/B5ABE86EBB2A02C58392749A92FEA68FBAFC5C46.cer Subject info access: rsync://repo-rpki.idnic.net/repo/b0bd7d6c-ea5a-4c45-9558-717994ab680e/0/B5ABE86EBB2A02C58392749A92FEA68FBAFC5C46.mft Manifest number: 011D Signing time: Sat 06 Dec 2025 00:30:02 +0000 Manifest this update: Sat 06 Dec 2025 00:25:02 +0000 Manifest next update: Tue 09 Dec 2025 06:12:02 +0000 Files and hashes: 1: 3135372e32302e33372e302f32342d3234203d3e20313430343730.roa (hash: xOyiM0EcaCp+QM0RHt1mndAJkrKKxlB6dJJDF4X/v7Y=) 2: B5ABE86EBB2A02C58392749A92FEA68FBAFC5C46.crl (hash: ZLjc6UV4gR7ADIdg5MMc4vh+rGWhH/NaFhs5K+Z4kzA=) 3: 3135372e32302e33362e302f32332d3233203d3e20313430343730.roa (hash: RHyzhtAgplvJvuCV7fIv62s8sggnnXtZnxO1BaRf1q4=) 4: 3135372e32302e33362e302f32342d3234203d3e20313430343730.roa (hash: GpC0yHwXQ5lbHiYUnaLrCvfX3lNPHMkYotv+J++l4RE=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/b0bd7d6c-ea5a-4c45-9558-717994ab680e/0/B5ABE86EBB2A02C58392749A92FEA68FBAFC5C46.crl rsync://repo-rpki.idnic.net/repo/b0bd7d6c-ea5a-4c45-9558-717994ab680e/0/B5ABE86EBB2A02C58392749A92FEA68FBAFC5C46.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/B5ABE86EBB2A02C58392749A92FEA68FBAFC5C46.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 09 Dec 2025 06:12:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0a:47:a9:d1:ba:ba:6d:1c:67:c2:ec:e7:ba:89:10:62:ab:9e:0a:8c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B5ABE86EBB2A02C58392749A92FEA68FBAFC5C46 Validity Not Before: Dec 6 00:25:02 2025 GMT Not After : Dec 9 06:12:02 2025 GMT Subject: CN=125903ECBC16A61E8641F1D8F45949710F8A6722 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:9f:23:a8:59:3b:90:39:c7:db:76:a5:bb:77: 15:50:0d:ac:63:76:45:59:26:9c:20:cc:f5:7c:85: 9d:3c:a3:c0:c8:24:6c:da:ee:fd:29:1e:bd:9c:97: 5a:05:c6:58:7c:21:42:37:88:bd:0e:b5:fe:2b:07: 83:0b:f7:fe:76:65:bb:63:1b:f7:b9:81:f2:64:66: 83:6b:0f:f6:e6:c5:c5:bc:da:b3:b9:b9:57:f4:66: 73:41:92:15:f8:0d:13:0c:0f:3f:53:28:78:2f:60: 18:49:d0:9d:c0:c3:6b:19:80:c2:b3:6c:86:df:47: 16:e1:ae:2f:75:17:35:1d:51:b8:46:a7:2b:c5:a8: ca:87:e7:56:f3:39:18:48:41:0f:71:6f:8e:44:7a: 72:73:2c:33:35:c5:15:99:5c:f5:b1:b7:0a:33:78: 30:c2:dd:68:72:70:6a:46:78:96:af:40:14:4b:2e: ac:e8:97:f5:21:36:80:8e:c1:9e:c3:cc:4b:1f:fe: 28:a5:42:2c:a5:08:43:cf:33:e1:27:2d:09:75:8e: 0b:81:94:16:78:17:51:9c:61:33:88:38:c6:e2:0e: 3e:02:c6:ad:a5:e4:d0:a2:5b:bf:e4:40:4a:b8:14: 1d:04:63:b1:57:f1:d8:c2:8a:3d:0b:6c:04:4c:15: f6:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:59:03:EC:BC:16:A6:1E:86:41:F1:D8:F4:59:49:71:0F:8A:67:22 X509v3 Authority Key Identifier: keyid:B5:AB:E8:6E:BB:2A:02:C5:83:92:74:9A:92:FE:A6:8F:BA:FC:5C:46 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/b0bd7d6c-ea5a-4c45-9558-717994ab680e/0/B5ABE86EBB2A02C58392749A92FEA68FBAFC5C46.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/B5ABE86EBB2A02C58392749A92FEA68FBAFC5C46.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/b0bd7d6c-ea5a-4c45-9558-717994ab680e/0/B5ABE86EBB2A02C58392749A92FEA68FBAFC5C46.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 07:99:60:79:2a:38:b6:b5:1f:33:37:7f:c1:c7:10:3d:fe:d7: 8c:16:7b:6e:82:98:14:c1:dd:32:7a:aa:d7:11:3d:38:b4:15: 9e:7f:6a:a7:8c:b3:1a:8c:c6:9b:c2:9d:77:e0:cc:6b:34:d3: be:db:0e:e4:a1:56:7a:82:37:5e:78:50:93:db:43:d4:66:c1: c4:95:14:79:88:a4:50:fd:94:a8:4f:08:40:09:bc:5e:74:9c: 09:31:26:dc:9e:a1:d1:43:de:11:50:1b:73:59:18:e4:94:29: ab:19:77:6f:62:d6:5e:67:02:33:c5:77:f1:d8:31:38:0e:2a: 21:ee:76:fa:dd:25:56:f5:d1:df:3d:42:63:6d:bf:54:74:f4: 65:0a:0d:8f:0c:b7:3b:3a:35:13:c3:ec:b7:9d:94:1d:e7:8b: 93:ab:09:da:32:5d:91:4e:e8:12:af:03:dc:46:90:7e:96:8d: 64:a2:2f:e5:3f:ec:32:e0:e6:dc:f2:44:74:5e:8d:f5:82:cb: 34:33:d6:44:82:2a:43:69:f1:1d:e1:0f:52:e1:cd:2d:14:0d: c3:08:d3:f7:e2:3b:2e:29:9c:e5:ef:00:3a:c6:53:99:68:22: c5:de:eb:e1:96:10:93:bb:ed:4e:74:46:c7:87:b9:de:68:ee: 4f:78:3e:b9 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUCkep0bq6bRxnwuznuokQYqueCowwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjVBQkU4NkVCQjJBMDJDNTgzOTI3NDlBOTJGRUE2OEZC QUZDNUM0NjAeFw0yNTEyMDYwMDI1MDJaFw0yNTEyMDkwNjEyMDJaMDMxMTAvBgNV BAMTKDEyNTkwM0VDQkMxNkE2MUU4NjQxRjFEOEY0NTk0OTcxMEY4QTY3MjIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDCnyOoWTuQOcfbdqW7dxVQDaxj dkVZJpwgzPV8hZ08o8DIJGza7v0pHr2cl1oFxlh8IUI3iL0Otf4rB4ML9/52Zbtj G/e5gfJkZoNrD/bmxcW82rO5uVf0ZnNBkhX4DRMMDz9TKHgvYBhJ0J3Aw2sZgMKz bIbfRxbhri91FzUdUbhGpyvFqMqH51bzORhIQQ9xb45EenJzLDM1xRWZXPWxtwoz eDDC3WhycGpGeJavQBRLLqzol/UhNoCOwZ7DzEsf/iilQiylCEPPM+EnLQl1jguB lBZ4F1GcYTOIOMbiDj4Cxq2l5NCiW7/kQEq4FB0EY7FX8djCij0LbARMFfanAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUElkD7LwWph6GQfHY9FlJcQ+KZyIwHwYDVR0j BBgwFoAUtavobrsqAsWDknSakv6mj7r8XEYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i MGJkN2Q2Yy1lYTVhLTRjNDUtOTU1OC03MTc5OTRhYjY4MGUvMC9CNUFCRTg2RUJC MkEwMkM1ODM5Mjc0OUE5MkZFQTY4RkJBRkM1QzQ2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvQjVBQkU4NkVCQjJBMDJDNTgzOTI3NDlBOTJGRUE2OEZCQUZD NUM0Ni5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYjBiZDdkNmMtZWE1YS00YzQ1LTk1 NTgtNzE3OTk0YWI2ODBlLzAvQjVBQkU4NkVCQjJBMDJDNTgzOTI3NDlBOTJGRUE2 OEZCQUZDNUM0Ni5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAeZYHkqOLa1HzM3f8HHED3+14wWe26CmBTB 3TJ6qtcRPTi0FZ5/aqeMsxqMxpvCnXfgzGs0077bDuShVnqCN154UJPbQ9RmwcSV FHmIpFD9lKhPCEAJvF50nAkxJtyeodFD3hFQG3NZGOSUKasZd29i1l5nAjPFd/HY MTgOKiHudvrdJVb10d89QmNtv1R09GUKDY8Mtzs6NRPD7LedlB3ni5OrCdoyXZFO 6BKvA9xGkH6WjWSiL+U/7DLg5tzyRHRejfWCyzQz1kSCKkNp8R3hD1LhzS0UDcMI 0/fiOy4pnOXvADrGU5loIsXe6+GWEJO77U50RseHud5o7k94Prk= -----END CERTIFICATE-----Generated at Sat Dec 6 17:14:12 2025 by rpki-client