This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/b59cfd04-69d0-4d4c-8d09-2d2213842c2c/0/BD8CDE6FE3DF9FA1EDA6CEA462F77EF60478990D.mft File: BD8CDE6FE3DF9FA1EDA6CEA462F77EF60478990D.mft (raw, json) Hash identifier: rmNAU4kvJnmm8MnjVeJcV3iK32i6QxNV1hvIkC2WMTQ= Subject key identifier: 88:57:1E:9E:FB:7A:B8:18:2F:50:DD:6E:93:67:95:08:45:6C:E7:63 Authority key identifier: BD:8C:DE:6F:E3:DF:9F:A1:ED:A6:CE:A4:62:F7:7E:F6:04:78:99:0D Certificate issuer: /CN=BD8CDE6FE3DF9FA1EDA6CEA462F77EF60478990D Certificate serial: 6D17EA7EA6C6017D018289247D01F7FAF684C025 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BD8CDE6FE3DF9FA1EDA6CEA462F77EF60478990D.cer Subject info access: rsync://repo-rpki.idnic.net/repo/b59cfd04-69d0-4d4c-8d09-2d2213842c2c/0/BD8CDE6FE3DF9FA1EDA6CEA462F77EF60478990D.mft Manifest number: 0530 Signing time: Sun 14 Dec 2025 23:21:26 +0000 Manifest this update: Sun 14 Dec 2025 23:16:26 +0000 Manifest next update: Thu 18 Dec 2025 04:05:26 +0000 Files and hashes: 1: BD8CDE6FE3DF9FA1EDA6CEA462F77EF60478990D.crl (hash: Kew8Vh6WP8RYqpcXFkggJQmIqfgwiD9DRBgMI8M+mv8=) 2: 3130332e3134312e36312e302f32342d3234203d3e20313333383032.roa (hash: sgxUrcQvRnNHbIUuVwSUcdBBcs11g4RjDxY5LVoPdt0=) 3: 3130332e34312e3234372e302f32342d3234203d3e20313333383032.roa (hash: 8V1al14v0fXTXIGlVH1c93VdIS9Ve5+tbHSMrRhqr58=) 4: 323030313a6466343a366330303a3a2f34382d3438203d3e20313333383032.roa (hash: 6j5m2VjCwkXGfQzXHijMICktkY7XqIoC3rD1yeh02OI=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/b59cfd04-69d0-4d4c-8d09-2d2213842c2c/0/BD8CDE6FE3DF9FA1EDA6CEA462F77EF60478990D.crl rsync://repo-rpki.idnic.net/repo/b59cfd04-69d0-4d4c-8d09-2d2213842c2c/0/BD8CDE6FE3DF9FA1EDA6CEA462F77EF60478990D.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BD8CDE6FE3DF9FA1EDA6CEA462F77EF60478990D.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 18 Dec 2025 04:05:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6d:17:ea:7e:a6:c6:01:7d:01:82:89:24:7d:01:f7:fa:f6:84:c0:25 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BD8CDE6FE3DF9FA1EDA6CEA462F77EF60478990D Validity Not Before: Dec 14 23:16:26 2025 GMT Not After : Dec 18 04:05:26 2025 GMT Subject: CN=88571E9EFB7AB8182F50DD6E93679508456CE763 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:79:63:c3:14:b5:01:dc:56:28:34:70:84:86: 85:1b:05:70:8a:ed:e0:75:83:3b:9c:3b:b4:2a:0b: a5:a9:5c:23:b5:22:d5:2c:82:57:29:02:4a:24:2d: 4e:cb:a7:3e:b4:88:5d:3d:1e:a3:44:18:e8:f4:30: b5:32:6c:b3:08:65:9c:61:78:af:05:7b:5a:9c:31: a4:3a:f6:e4:13:d9:fb:41:2a:4f:37:63:28:44:4b: 96:34:3a:16:54:4d:26:7d:05:2a:02:6e:8c:8e:42: b1:a1:7e:b1:58:92:70:e9:41:41:7a:88:b7:7d:f4: 51:cc:1a:42:7c:0f:e5:71:64:65:79:c1:6c:27:25: ca:b9:aa:3b:bf:46:d7:37:f7:d2:5b:0a:c7:ba:d8: 3c:6e:6e:f0:81:ee:e7:14:3f:c5:52:79:60:1b:97: 05:75:7a:4e:25:7a:29:e4:7b:44:e5:e5:16:92:bb: 26:18:04:18:b7:43:2a:b8:cd:17:0e:e1:36:e5:b0: 3c:ef:68:6a:c8:4b:dc:15:41:d1:8f:ae:24:72:ba: 5e:67:d4:30:43:7d:d6:ce:0b:49:e9:28:49:20:3a: 5a:d3:a3:8c:96:3b:80:42:c6:97:09:fd:85:b4:40: a7:68:26:32:77:5a:d5:97:e7:31:a4:a3:a6:cd:66: ac:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:57:1E:9E:FB:7A:B8:18:2F:50:DD:6E:93:67:95:08:45:6C:E7:63 X509v3 Authority Key Identifier: keyid:BD:8C:DE:6F:E3:DF:9F:A1:ED:A6:CE:A4:62:F7:7E:F6:04:78:99:0D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/b59cfd04-69d0-4d4c-8d09-2d2213842c2c/0/BD8CDE6FE3DF9FA1EDA6CEA462F77EF60478990D.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BD8CDE6FE3DF9FA1EDA6CEA462F77EF60478990D.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/b59cfd04-69d0-4d4c-8d09-2d2213842c2c/0/BD8CDE6FE3DF9FA1EDA6CEA462F77EF60478990D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 25:1e:4b:24:62:0d:e9:23:84:b6:51:1d:69:7f:61:6c:60:e8: d5:ef:12:0d:3f:a8:ab:4b:66:28:34:84:c6:f9:60:c7:f4:18: ed:dd:75:ee:a1:3b:c2:d1:a4:42:e9:14:4e:63:5e:91:21:7b: 69:d6:3a:d9:94:20:87:62:c5:81:05:e1:08:06:f2:16:be:43: e0:0e:42:a4:28:2b:62:89:54:63:12:81:84:cc:44:a8:fa:ab: cc:75:c3:c1:e3:0c:44:75:5d:30:01:33:e8:48:38:92:f5:4d: 19:30:58:9c:f1:85:f0:a2:da:1b:42:4e:ef:1d:cd:d3:c8:d7: fc:a4:88:70:d9:25:2d:4d:14:22:bf:25:bf:fa:a3:bb:7b:ff: 70:0a:c9:bd:36:7d:34:13:4f:e1:a1:6d:f7:51:64:82:ba:b1: 88:81:f9:74:9e:7e:0e:80:8f:3f:1b:cc:ec:b9:94:2c:d2:9b: b9:79:ed:2b:9d:8c:3c:97:a3:d3:3d:66:e1:48:6b:4b:2d:6c: 37:0b:ef:3a:a5:12:3c:c4:71:45:cb:c1:30:a5:79:85:4f:ac: f2:a7:2a:ae:c2:21:ac:ad:81:cf:5e:dc:a4:1e:cf:07:f3:fd: 08:98:2d:17:45:c5:aa:90:73:6d:8c:92:82:37:c0:ba:11:b5: 91:6a:3f:95 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUbRfqfqbGAX0BgokkfQH3+vaEwCUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkQ4Q0RFNkZFM0RGOUZBMUVEQTZDRUE0NjJGNzdFRjYw NDc4OTkwRDAeFw0yNTEyMTQyMzE2MjZaFw0yNTEyMTgwNDA1MjZaMDMxMTAvBgNV BAMTKDg4NTcxRTlFRkI3QUI4MTgyRjUwREQ2RTkzNjc5NTA4NDU2Q0U3NjMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCleWPDFLUB3FYoNHCEhoUbBXCK 7eB1gzucO7QqC6WpXCO1ItUsglcpAkokLU7Lpz60iF09HqNEGOj0MLUybLMIZZxh eK8Fe1qcMaQ69uQT2ftBKk83YyhES5Y0OhZUTSZ9BSoCboyOQrGhfrFYknDpQUF6 iLd99FHMGkJ8D+VxZGV5wWwnJcq5qju/Rtc399JbCse62DxubvCB7ucUP8VSeWAb lwV1ek4leinke0Tl5RaSuyYYBBi3Qyq4zRcO4TblsDzvaGrIS9wVQdGPriRyul5n 1DBDfdbOC0npKEkgOlrTo4yWO4BCxpcJ/YW0QKdoJjJ3WtWX5zGko6bNZqw3AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUiFcenvt6uBgvUN1uk2eVCEVs52MwHwYDVR0j BBgwFoAUvYzeb+Pfn6Htps6kYvd+9gR4mQ0wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i NTljZmQwNC02OWQwLTRkNGMtOGQwOS0yZDIyMTM4NDJjMmMvMC9CRDhDREU2RkUz REY5RkExRURBNkNFQTQ2MkY3N0VGNjA0Nzg5OTBELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQkQ4Q0RFNkZFM0RGOUZBMUVEQTZDRUE0NjJGNzdFRjYwNDc4 OTkwRC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYjU5Y2ZkMDQtNjlkMC00ZDRjLThk MDktMmQyMjEzODQyYzJjLzAvQkQ4Q0RFNkZFM0RGOUZBMUVEQTZDRUE0NjJGNzdF RjYwNDc4OTkwRC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACUeSyRiDekjhLZRHWl/YWxg6NXvEg0/qKtL Zig0hMb5YMf0GO3dde6hO8LRpELpFE5jXpEhe2nWOtmUIIdixYEF4QgG8ha+Q+AO QqQoK2KJVGMSgYTMRKj6q8x1w8HjDER1XTABM+hIOJL1TRkwWJzxhfCi2htCTu8d zdPI1/ykiHDZJS1NFCK/Jb/6o7t7/3AKyb02fTQTT+GhbfdRZIK6sYiB+XSefg6A jz8bzOy5lCzSm7l57SudjDyXo9M9ZuFIa0stbDcL7zqlEjzEcUXLwTCleYVPrPKn Kq7CIaytgc9e3KQezwfz/QiYLRdFxaqQc22MkoI3wLoRtZFqP5U= -----END CERTIFICATE-----Generated at Mon Dec 15 15:32:45 2025 by rpki-client