This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/b36066e8-8e19-4de7-947b-94ee3cd09f85/0/BD9B7A89C85E0DF6786F5BD51D4B7D963618231A.mft File: BD9B7A89C85E0DF6786F5BD51D4B7D963618231A.mft (raw, json) Hash identifier: xTXOs3/oFjbyKLpUXzkibPxizQ3QNyRvSzzXdzJo/+8= Subject key identifier: 14:C7:0F:26:82:E6:43:14:DA:1D:F3:85:80:BA:42:CC:EC:77:C9:3B Authority key identifier: BD:9B:7A:89:C8:5E:0D:F6:78:6F:5B:D5:1D:4B:7D:96:36:18:23:1A Certificate issuer: /CN=BD9B7A89C85E0DF6786F5BD51D4B7D963618231A Certificate serial: 639D4F08F6671467D6AEEC96FA4A69F290A112F2 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/BD9B7A89C85E0DF6786F5BD51D4B7D963618231A.cer Subject info access: rsync://repo-rpki.idnic.net/repo/b36066e8-8e19-4de7-947b-94ee3cd09f85/0/BD9B7A89C85E0DF6786F5BD51D4B7D963618231A.mft Manifest number: FA Signing time: Fri 05 Dec 2025 02:21:13 +0000 Manifest this update: Fri 05 Dec 2025 02:16:13 +0000 Manifest next update: Mon 08 Dec 2025 12:34:13 +0000 Files and hashes: 1: BD9B7A89C85E0DF6786F5BD51D4B7D963618231A.crl (hash: BWHPRAFyA+eoXB6QoiBadb8oAwykSR2zqTE5hKjx8Qs=) 2: 3135372e32302e3137382e302f32342d3234203d3e20313532343138.roa (hash: t349gF8xh8M32UG8Ruer+VIkvNUKNNfdFe/xLjKGLjs=) 3: 3135372e32302e3137382e302f32332d3233203d3e20313532343138.roa (hash: Gr1mlE+rzWEpOTNh6WPoTj4w/1KCxiBabRIKttXDzDg=) 4: 3135372e32302e3137392e302f32342d3234203d3e20313532343138.roa (hash: Z2FYRByoR87CHEnziWjFnKQyuENb6OACYT6R1ULlqwE=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/b36066e8-8e19-4de7-947b-94ee3cd09f85/0/BD9B7A89C85E0DF6786F5BD51D4B7D963618231A.crl rsync://repo-rpki.idnic.net/repo/b36066e8-8e19-4de7-947b-94ee3cd09f85/0/BD9B7A89C85E0DF6786F5BD51D4B7D963618231A.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/BD9B7A89C85E0DF6786F5BD51D4B7D963618231A.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 08 Dec 2025 12:34:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 63:9d:4f:08:f6:67:14:67:d6:ae:ec:96:fa:4a:69:f2:90:a1:12:f2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BD9B7A89C85E0DF6786F5BD51D4B7D963618231A Validity Not Before: Dec 5 02:16:13 2025 GMT Not After : Dec 8 12:34:13 2025 GMT Subject: CN=14C70F2682E64314DA1DF38580BA42CCEC77C93B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:41:93:f7:9b:c7:5a:87:cf:d8:6e:8f:09:6b: cf:6f:b6:de:f1:34:6c:58:3e:4d:29:15:83:65:d3: c0:ab:7a:c3:28:a5:36:eb:82:e2:76:fe:a9:77:1d: 61:11:8d:85:d1:7a:1e:b9:2b:12:b2:2e:49:78:59: 03:ec:ba:e1:27:27:af:98:92:bd:ec:18:46:e2:b2: a1:f3:67:d2:c5:f2:d7:82:0c:08:43:e4:b2:99:c2: 54:5d:86:d5:c2:94:a2:b6:02:11:2d:46:58:41:bb: 41:ca:b1:88:de:a1:14:fa:3f:e4:62:f6:89:68:c1: 4b:68:12:ee:36:d1:0b:74:9d:19:4c:3c:8a:34:10: bf:94:09:c6:19:26:e7:89:00:51:e4:79:10:f1:39: 69:af:1c:53:8f:15:93:c7:81:d5:c9:71:05:f6:9f: 1e:2f:5c:cf:3a:57:d7:91:90:1e:be:cb:66:83:0e: 31:e4:71:95:46:43:40:cb:89:19:2c:70:0c:fa:01: 63:c9:c6:e7:26:fd:40:25:0b:69:f9:52:02:3e:44: cf:d9:d0:73:34:d5:1d:ee:5f:29:0f:1e:a9:f4:f5: cd:e3:67:ce:ba:2c:27:73:4e:ac:e6:d5:af:5f:7e: 2a:c2:1d:93:d9:cf:57:a9:46:2e:39:8b:68:1b:25: a1:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:C7:0F:26:82:E6:43:14:DA:1D:F3:85:80:BA:42:CC:EC:77:C9:3B X509v3 Authority Key Identifier: keyid:BD:9B:7A:89:C8:5E:0D:F6:78:6F:5B:D5:1D:4B:7D:96:36:18:23:1A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/b36066e8-8e19-4de7-947b-94ee3cd09f85/0/BD9B7A89C85E0DF6786F5BD51D4B7D963618231A.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/BD9B7A89C85E0DF6786F5BD51D4B7D963618231A.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/b36066e8-8e19-4de7-947b-94ee3cd09f85/0/BD9B7A89C85E0DF6786F5BD51D4B7D963618231A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 77:95:f7:70:74:2e:05:e9:c1:ad:2a:ae:3a:2e:92:1e:d1:c0: 35:c4:4e:88:a2:38:be:9a:0e:d0:24:b6:e7:27:96:08:4d:6f: 77:34:39:6a:ab:cb:f9:42:bd:4f:52:05:60:9f:7c:ed:48:65: 78:ea:9c:9c:3d:35:d9:2c:4b:14:fd:4b:d7:f1:65:35:5a:1f: 55:79:f8:0f:2c:ef:98:16:0e:a0:a2:14:14:f7:8f:10:aa:12: b6:e0:02:8a:c8:71:c1:00:33:6c:8b:07:40:45:b9:62:ca:94: 4d:67:81:7e:43:76:a8:b1:91:1d:8c:03:cf:e6:3c:b1:2e:56: dd:2b:fb:fc:75:fd:2f:08:99:22:3c:b2:0e:bb:e4:bb:06:0b: 8b:08:3e:89:11:b3:3d:df:2c:aa:15:c3:b4:c1:35:16:00:55: 37:6c:a7:e4:94:a8:83:40:da:00:68:59:ff:17:df:c0:66:9a: 36:8e:3c:dd:41:47:32:12:32:eb:aa:7e:9c:3b:93:88:67:c9: 73:13:bb:42:e0:2e:90:24:4e:06:8c:96:15:45:be:50:ca:52: 4a:58:94:7b:78:07:ce:1c:60:d9:32:4b:c7:eb:f0:cd:b4:5c: 46:c4:bf:e3:0a:a1:6a:3b:c2:b2:90:ea:47:a3:d3:6c:49:57: f8:d7:f5:cd -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUY51PCPZnFGfWruyW+kpp8pChEvIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkQ5QjdBODlDODVFMERGNjc4NkY1QkQ1MUQ0QjdEOTYz NjE4MjMxQTAeFw0yNTEyMDUwMjE2MTNaFw0yNTEyMDgxMjM0MTNaMDMxMTAvBgNV BAMTKDE0QzcwRjI2ODJFNjQzMTREQTFERjM4NTgwQkE0MkNDRUM3N0M5M0IwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC1QZP3m8dah8/Ybo8Ja89vtt7x NGxYPk0pFYNl08CresMopTbrguJ2/ql3HWERjYXReh65KxKyLkl4WQPsuuEnJ6+Y kr3sGEbisqHzZ9LF8teCDAhD5LKZwlRdhtXClKK2AhEtRlhBu0HKsYjeoRT6P+Ri 9olowUtoEu420Qt0nRlMPIo0EL+UCcYZJueJAFHkeRDxOWmvHFOPFZPHgdXJcQX2 nx4vXM86V9eRkB6+y2aDDjHkcZVGQ0DLiRkscAz6AWPJxucm/UAlC2n5UgI+RM/Z 0HM01R3uXykPHqn09c3jZ866LCdzTqzm1a9ffirCHZPZz1epRi45i2gbJaF5AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUFMcPJoLmQxTaHfOFgLpCzOx3yTswHwYDVR0j BBgwFoAUvZt6icheDfZ4b1vVHUt9ljYYIxowDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i MzYwNjZlOC04ZTE5LTRkZTctOTQ3Yi05NGVlM2NkMDlmODUvMC9CRDlCN0E4OUM4 NUUwREY2Nzg2RjVCRDUxRDRCN0Q5NjM2MTgyMzFBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvQkQ5QjdBODlDODVFMERGNjc4NkY1QkQ1MUQ0QjdEOTYzNjE4 MjMxQS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYjM2MDY2ZTgtOGUxOS00ZGU3LTk0 N2ItOTRlZTNjZDA5Zjg1LzAvQkQ5QjdBODlDODVFMERGNjc4NkY1QkQ1MUQ0QjdE OTYzNjE4MjMxQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHeV93B0LgXpwa0qrjoukh7RwDXEToiiOL6a DtAktucnlghNb3c0OWqry/lCvU9SBWCffO1IZXjqnJw9NdksSxT9S9fxZTVaH1V5 +A8s75gWDqCiFBT3jxCqErbgAorIccEAM2yLB0BFuWLKlE1ngX5DdqixkR2MA8/m PLEuVt0r+/x1/S8ImSI8sg675LsGC4sIPokRsz3fLKoVw7TBNRYAVTdsp+SUqINA 2gBoWf8X38BmmjaOPN1BRzISMuuqfpw7k4hnyXMTu0LgLpAkTgaMlhVFvlDKUkpY lHt4B84cYNkyS8fr8M20XEbEv+MKoWo7wrKQ6kej02xJV/jX9c0= -----END CERTIFICATE-----Generated at Sun Dec 7 04:09:37 2025 by rpki-client