This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/b59cfd04-69d0-4d4c-8d09-2d2213842c2c/0/BD8CDE6FE3DF9FA1EDA6CEA462F77EF60478990D.mft File: BD8CDE6FE3DF9FA1EDA6CEA462F77EF60478990D.mft (raw, json) Hash identifier: FFyhVNvzNkucyM2pWD426IaYbEDQ0D+Xzxrclrx9iD8= Subject key identifier: D1:43:50:96:B1:1C:02:91:D7:E6:BC:66:44:7E:8A:F2:EC:C5:99:0C Authority key identifier: BD:8C:DE:6F:E3:DF:9F:A1:ED:A6:CE:A4:62:F7:7E:F6:04:78:99:0D Certificate issuer: /CN=BD8CDE6FE3DF9FA1EDA6CEA462F77EF60478990D Certificate serial: 649AD1D1D6ABFA51514CC9EEF2E6BCF2DB382D83 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BD8CDE6FE3DF9FA1EDA6CEA462F77EF60478990D.cer Subject info access: rsync://repo-rpki.idnic.net/repo/b59cfd04-69d0-4d4c-8d09-2d2213842c2c/0/BD8CDE6FE3DF9FA1EDA6CEA462F77EF60478990D.mft Manifest number: 052C Signing time: Fri 05 Dec 2025 23:21:25 +0000 Manifest this update: Fri 05 Dec 2025 23:16:25 +0000 Manifest next update: Tue 09 Dec 2025 07:55:25 +0000 Files and hashes: 1: 323030313a6466343a366330303a3a2f34382d3438203d3e20313333383032.roa (hash: 6j5m2VjCwkXGfQzXHijMICktkY7XqIoC3rD1yeh02OI=) 2: BD8CDE6FE3DF9FA1EDA6CEA462F77EF60478990D.crl (hash: Fu+9yQiEAojcXwr2X6P26AHbFZWuUPx89zU+R2GfbdA=) 3: 3130332e3134312e36312e302f32342d3234203d3e20313333383032.roa (hash: sgxUrcQvRnNHbIUuVwSUcdBBcs11g4RjDxY5LVoPdt0=) 4: 3130332e34312e3234372e302f32342d3234203d3e20313333383032.roa (hash: 8V1al14v0fXTXIGlVH1c93VdIS9Ve5+tbHSMrRhqr58=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/b59cfd04-69d0-4d4c-8d09-2d2213842c2c/0/BD8CDE6FE3DF9FA1EDA6CEA462F77EF60478990D.crl rsync://repo-rpki.idnic.net/repo/b59cfd04-69d0-4d4c-8d09-2d2213842c2c/0/BD8CDE6FE3DF9FA1EDA6CEA462F77EF60478990D.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BD8CDE6FE3DF9FA1EDA6CEA462F77EF60478990D.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 09 Dec 2025 07:55:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 64:9a:d1:d1:d6:ab:fa:51:51:4c:c9:ee:f2:e6:bc:f2:db:38:2d:83 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BD8CDE6FE3DF9FA1EDA6CEA462F77EF60478990D Validity Not Before: Dec 5 23:16:25 2025 GMT Not After : Dec 9 07:55:25 2025 GMT Subject: CN=D1435096B11C0291D7E6BC66447E8AF2ECC5990C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:c7:81:9a:f3:e3:7a:a7:1e:a2:6a:61:1b:a0: 04:a5:58:26:60:66:9a:89:7a:d5:19:ad:d5:7e:e4: 12:43:6b:34:7c:91:07:f2:d1:e1:12:2e:4b:47:d5: bb:14:b3:95:a1:c1:c3:e6:fd:01:43:06:07:22:8b: 10:78:0b:5f:a2:b4:db:3e:25:cd:40:e8:00:21:d8: 34:f4:95:dc:c8:26:67:20:27:8d:86:93:c6:1b:ff: d3:24:52:32:9c:cb:28:56:bd:9f:c1:a3:fe:87:28: a9:c0:82:9d:3a:11:01:db:3e:e0:9f:2d:6b:41:3b: 6f:40:a1:9f:15:b4:70:5f:93:06:18:9d:73:85:75: 6a:eb:92:96:6e:c5:bb:b8:08:53:3b:42:dc:cf:6f: 7b:37:63:0c:9b:84:a2:24:45:f6:e8:7d:aa:5f:13: 2a:65:47:8e:d6:a3:04:18:17:4d:c9:24:8e:a5:8a: 10:9b:a1:b6:4e:0b:ec:eb:c9:26:a3:f3:8b:ce:98: 0c:de:bd:71:ca:c7:5a:1f:2e:75:33:88:3a:c8:85: d2:2f:2d:41:ee:56:76:28:fe:57:9b:14:39:31:e4: 49:68:86:4f:94:49:3e:ea:1b:48:a6:f8:5d:d7:66: b7:87:18:36:10:ba:db:01:00:88:36:36:10:8e:a1: 92:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:43:50:96:B1:1C:02:91:D7:E6:BC:66:44:7E:8A:F2:EC:C5:99:0C X509v3 Authority Key Identifier: keyid:BD:8C:DE:6F:E3:DF:9F:A1:ED:A6:CE:A4:62:F7:7E:F6:04:78:99:0D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/b59cfd04-69d0-4d4c-8d09-2d2213842c2c/0/BD8CDE6FE3DF9FA1EDA6CEA462F77EF60478990D.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BD8CDE6FE3DF9FA1EDA6CEA462F77EF60478990D.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/b59cfd04-69d0-4d4c-8d09-2d2213842c2c/0/BD8CDE6FE3DF9FA1EDA6CEA462F77EF60478990D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0b:49:87:2a:2f:6e:25:74:47:44:b6:f8:41:bf:ec:a6:a8:8f: 3f:78:7d:c4:22:5c:80:9e:3f:c7:c2:6d:7d:e3:29:84:17:48: ec:21:6e:bb:17:06:49:8a:a4:92:7c:af:15:5b:16:3d:32:e3: ea:7c:0c:81:0d:6d:2a:69:ba:d2:35:a8:82:fd:d8:cf:1d:e0: 90:a9:2d:0e:28:0a:52:d3:83:00:c7:a3:13:72:3a:c7:4a:41: b6:c2:2a:41:b6:11:88:e1:ad:0c:65:cc:0b:99:e5:e3:50:30: c5:29:93:04:ff:42:14:c6:09:59:7f:94:18:5a:ea:70:80:c0: 7c:58:1b:ec:fb:3c:19:2f:5f:61:0f:52:81:1f:51:f5:db:5c: 6a:aa:d4:93:06:69:b5:3b:93:cb:b6:c6:4d:18:af:1e:b8:46: 56:48:02:71:ba:08:6d:4f:44:6c:23:25:5f:7b:f2:b6:15:05: ce:75:c9:28:52:6f:6e:49:15:da:17:50:e5:86:de:22:76:7a: 5c:dc:52:66:10:1b:5d:24:24:d0:ba:e6:af:2b:52:70:fc:70: 3a:6e:d4:ad:47:c5:27:68:f4:0f:5c:63:b5:03:04:7b:be:0c: b6:0c:2a:1d:bf:27:0f:6e:bf:6d:5b:ca:36:9b:a4:96:87:91: f8:44:5a:a8 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUZJrR0dar+lFRTMnu8ua88ts4LYMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkQ4Q0RFNkZFM0RGOUZBMUVEQTZDRUE0NjJGNzdFRjYw NDc4OTkwRDAeFw0yNTEyMDUyMzE2MjVaFw0yNTEyMDkwNzU1MjVaMDMxMTAvBgNV BAMTKEQxNDM1MDk2QjExQzAyOTFEN0U2QkM2NjQ0N0U4QUYyRUNDNTk5MEMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+x4Ga8+N6px6iamEboASlWCZg ZpqJetUZrdV+5BJDazR8kQfy0eESLktH1bsUs5WhwcPm/QFDBgciixB4C1+itNs+ Jc1A6AAh2DT0ldzIJmcgJ42Gk8Yb/9MkUjKcyyhWvZ/Bo/6HKKnAgp06EQHbPuCf LWtBO29AoZ8VtHBfkwYYnXOFdWrrkpZuxbu4CFM7QtzPb3s3YwybhKIkRfbofapf EyplR47WowQYF03JJI6lihCbobZOC+zrySaj84vOmAzevXHKx1ofLnUziDrIhdIv LUHuVnYo/lebFDkx5Elohk+UST7qG0im+F3XZreHGDYQutsBAIg2NhCOoZKJAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU0UNQlrEcApHX5rxmRH6K8uzFmQwwHwYDVR0j BBgwFoAUvYzeb+Pfn6Htps6kYvd+9gR4mQ0wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i NTljZmQwNC02OWQwLTRkNGMtOGQwOS0yZDIyMTM4NDJjMmMvMC9CRDhDREU2RkUz REY5RkExRURBNkNFQTQ2MkY3N0VGNjA0Nzg5OTBELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQkQ4Q0RFNkZFM0RGOUZBMUVEQTZDRUE0NjJGNzdFRjYwNDc4 OTkwRC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYjU5Y2ZkMDQtNjlkMC00ZDRjLThk MDktMmQyMjEzODQyYzJjLzAvQkQ4Q0RFNkZFM0RGOUZBMUVEQTZDRUE0NjJGNzdF RjYwNDc4OTkwRC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAtJhyovbiV0R0S2+EG/7Kaojz94fcQiXICe P8fCbX3jKYQXSOwhbrsXBkmKpJJ8rxVbFj0y4+p8DIENbSpputI1qIL92M8d4JCp LQ4oClLTgwDHoxNyOsdKQbbCKkG2EYjhrQxlzAuZ5eNQMMUpkwT/QhTGCVl/lBha 6nCAwHxYG+z7PBkvX2EPUoEfUfXbXGqq1JMGabU7k8u2xk0Yrx64RlZIAnG6CG1P RGwjJV978rYVBc51yShSb25JFdoXUOWG3iJ2elzcUmYQG10kJNC65q8rUnD8cDpu 1K1HxSdo9A9cY7UDBHu+DLYMKh2/Jw9uv21byjabpJaHkfhEWqg= -----END CERTIFICATE-----Generated at Sat Dec 6 22:52:36 2025 by rpki-client