This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/b4a02d37-3b9d-453a-8c81-328e540141fd/0/BB64FDB64281947C3567104C08735A011C6210F4.mft File: BB64FDB64281947C3567104C08735A011C6210F4.mft (raw, json) Hash identifier: lG7AfL7CFx2sp86cvOTfA+7W8bLf9D2WHPlAkCCdEps= Subject key identifier: 7C:53:C9:7E:D8:04:D4:FF:B7:24:D5:C5:6A:6E:0E:3A:F8:8E:7F:65 Authority key identifier: BB:64:FD:B6:42:81:94:7C:35:67:10:4C:08:73:5A:01:1C:62:10:F4 Certificate issuer: /CN=BB64FDB64281947C3567104C08735A011C6210F4 Certificate serial: 36D98080723BD9ABDFBD349D386C99C94F519485 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BB64FDB64281947C3567104C08735A011C6210F4.cer Subject info access: rsync://repo-rpki.idnic.net/repo/b4a02d37-3b9d-453a-8c81-328e540141fd/0/BB64FDB64281947C3567104C08735A011C6210F4.mft Manifest number: 03B4 Signing time: Fri 05 Dec 2025 07:11:49 +0000 Manifest this update: Fri 05 Dec 2025 07:06:49 +0000 Manifest next update: Mon 08 Dec 2025 07:28:49 +0000 Files and hashes: 1: BB64FDB64281947C3567104C08735A011C6210F4.crl (hash: kCR85EkbDJ0krcAJ2064iiytTqpE6+P2UdWOLKERVP8=) 2: 3130332e3136392e3139322e302f32332d3234203d3e20313432333438.roa (hash: WO1pfWHoqTdWNx4bevNPCtJdd2Sq+t2I2uTA3HBPJBM=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/b4a02d37-3b9d-453a-8c81-328e540141fd/0/BB64FDB64281947C3567104C08735A011C6210F4.crl rsync://repo-rpki.idnic.net/repo/b4a02d37-3b9d-453a-8c81-328e540141fd/0/BB64FDB64281947C3567104C08735A011C6210F4.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BB64FDB64281947C3567104C08735A011C6210F4.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 08 Dec 2025 07:28:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 36:d9:80:80:72:3b:d9:ab:df:bd:34:9d:38:6c:99:c9:4f:51:94:85 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BB64FDB64281947C3567104C08735A011C6210F4 Validity Not Before: Dec 5 07:06:49 2025 GMT Not After : Dec 8 07:28:49 2025 GMT Subject: CN=7C53C97ED804D4FFB724D5C56A6E0E3AF88E7F65 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ed:92:7a:81:2c:f7:55:ff:6a:6b:17:57:e4:61: 7e:44:f9:86:be:19:5c:c7:dc:55:cb:69:8e:69:6d: 3e:ac:4e:21:cc:fb:77:be:d7:ba:43:5a:b9:5f:dd: 5b:42:bf:3a:fc:7e:6c:aa:16:a7:5e:b7:a6:13:29: 8d:03:ba:bb:2c:3d:ef:d3:25:21:b1:77:0e:0a:7f: ed:62:a9:91:ee:98:a2:81:36:6c:6e:ee:6b:b4:55: 14:89:67:c8:1d:b7:73:5b:96:9d:a5:d9:32:ee:90: 15:f0:2c:cb:c4:a3:5f:06:0c:62:30:d2:e8:28:c8: dd:8b:81:63:f8:67:bd:92:f1:09:33:cb:41:6f:f9: bc:e5:7f:12:a7:f6:1f:2c:83:6b:c0:d0:5f:6f:f6: 86:1c:48:40:4d:46:2e:fb:0f:e0:9f:78:55:ee:9d: 67:12:55:84:c6:a3:a5:a4:98:25:87:23:a4:ff:3b: 31:8d:77:5c:de:64:fe:e3:6f:42:b6:ee:49:40:bd: 3d:8f:fd:13:9c:7a:82:da:55:1a:69:cf:e0:ed:f8: f6:de:54:d3:f4:5b:75:af:ea:e7:3b:5f:03:98:10: 39:66:99:27:53:2c:35:26:98:cc:ad:a7:87:18:91: 49:f7:b2:40:c2:20:fa:e5:9a:d5:84:21:f9:fe:7f: e5:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7C:53:C9:7E:D8:04:D4:FF:B7:24:D5:C5:6A:6E:0E:3A:F8:8E:7F:65 X509v3 Authority Key Identifier: keyid:BB:64:FD:B6:42:81:94:7C:35:67:10:4C:08:73:5A:01:1C:62:10:F4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/b4a02d37-3b9d-453a-8c81-328e540141fd/0/BB64FDB64281947C3567104C08735A011C6210F4.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BB64FDB64281947C3567104C08735A011C6210F4.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/b4a02d37-3b9d-453a-8c81-328e540141fd/0/BB64FDB64281947C3567104C08735A011C6210F4.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3d:ec:78:dd:24:93:fb:35:2c:f7:c5:92:32:c8:32:a0:ad:68: c9:01:ab:47:30:82:2c:c6:b4:6d:c0:8b:a4:ab:ac:46:8a:11: 19:47:5a:33:c2:a4:e3:55:c8:e8:f0:9f:20:ac:b0:25:f4:27: 7f:46:86:cb:ae:ba:bc:0f:9f:da:5b:d1:d6:9f:59:46:f2:83: f3:51:db:1d:ed:07:f2:bb:70:48:55:b3:ec:88:52:b3:f4:88: 23:37:b1:7f:b2:76:86:da:10:dd:34:83:96:45:e3:74:72:21: ec:d6:97:32:b3:0c:77:2d:35:7d:19:92:a5:d3:61:83:e9:5b: 23:4d:b4:35:81:28:52:65:d4:b1:2e:1a:31:11:9f:22:a2:aa: 10:fe:cb:e6:6c:0b:02:3f:9a:52:34:99:ad:e7:8b:11:05:ae: f0:bd:41:ab:73:a2:16:e9:2b:55:07:37:16:56:bb:f7:05:8e: b9:8b:37:58:44:b7:45:3b:b3:54:5e:20:e8:2e:40:4e:f2:2d: cd:c2:57:d8:f6:f2:75:ee:14:aa:e4:f1:11:a7:61:e4:44:ea: 19:96:d6:e2:2f:7e:23:6a:f5:89:0a:97:9e:3b:8b:a9:ac:ed: 2a:99:53:eb:2d:07:41:93:be:22:1f:cd:ec:23:c6:81:ce:21: 47:33:ae:fd -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUNtmAgHI72avfvTSdOGyZyU9RlIUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkI2NEZEQjY0MjgxOTQ3QzM1NjcxMDRDMDg3MzVBMDEx QzYyMTBGNDAeFw0yNTEyMDUwNzA2NDlaFw0yNTEyMDgwNzI4NDlaMDMxMTAvBgNV BAMTKDdDNTNDOTdFRDgwNEQ0RkZCNzI0RDVDNTZBNkUwRTNBRjg4RTdGNjUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDtknqBLPdV/2prF1fkYX5E+Ya+ GVzH3FXLaY5pbT6sTiHM+3e+17pDWrlf3VtCvzr8fmyqFqdet6YTKY0DurssPe/T JSGxdw4Kf+1iqZHumKKBNmxu7mu0VRSJZ8gdt3Nblp2l2TLukBXwLMvEo18GDGIw 0ugoyN2LgWP4Z72S8Qkzy0Fv+bzlfxKn9h8sg2vA0F9v9oYcSEBNRi77D+CfeFXu nWcSVYTGo6WkmCWHI6T/OzGNd1zeZP7jb0K27klAvT2P/ROceoLaVRppz+Dt+Pbe VNP0W3Wv6uc7XwOYEDlmmSdTLDUmmMytp4cYkUn3skDCIPrlmtWEIfn+f+X1AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUfFPJftgE1P+3JNXFam4OOviOf2UwHwYDVR0j BBgwFoAUu2T9tkKBlHw1ZxBMCHNaARxiEPQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i NGEwMmQzNy0zYjlkLTQ1M2EtOGM4MS0zMjhlNTQwMTQxZmQvMC9CQjY0RkRCNjQy ODE5NDdDMzU2NzEwNEMwODczNUEwMTFDNjIxMEY0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQkI2NEZEQjY0MjgxOTQ3QzM1NjcxMDRDMDg3MzVBMDExQzYy MTBGNC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYjRhMDJkMzctM2I5ZC00NTNhLThj ODEtMzI4ZTU0MDE0MWZkLzAvQkI2NEZEQjY0MjgxOTQ3QzM1NjcxMDRDMDg3MzVB MDExQzYyMTBGNC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAD3seN0kk/s1LPfFkjLIMqCtaMkBq0cwgizG tG3Ai6SrrEaKERlHWjPCpONVyOjwnyCssCX0J39GhsuuurwPn9pb0dafWUbyg/NR 2x3tB/K7cEhVs+yIUrP0iCM3sX+ydobaEN00g5ZF43RyIezWlzKzDHctNX0ZkqXT YYPpWyNNtDWBKFJl1LEuGjERnyKiqhD+y+ZsCwI/mlI0ma3nixEFrvC9Qatzohbp K1UHNxZWu/cFjrmLN1hEt0U7s1ReIOguQE7yLc3CV9j28nXuFKrk8RGnYeRE6hmW 1uIvfiNq9YkKl547i6ms7SqZU+stB0GTviIfzewjxoHOIUczrv0= -----END CERTIFICATE-----Generated at Sun Dec 7 02:14:12 2025 by rpki-client