This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/b5c9c394-fcd0-4b4b-bb1a-824770f40342/0/B4153DCEE87E15F92AABAC0DF6729C9A5DE5CFCC.mft File: B4153DCEE87E15F92AABAC0DF6729C9A5DE5CFCC.mft (raw, json) Hash identifier: DelVwtr1xAHC21FQTtFkIyvQUL3+ysPZoHhl8dg/CSg= Subject key identifier: DA:B1:22:06:75:C4:FD:33:EE:9C:9A:11:56:F7:29:32:3E:56:FF:56 Authority key identifier: B4:15:3D:CE:E8:7E:15:F9:2A:AB:AC:0D:F6:72:9C:9A:5D:E5:CF:CC Certificate issuer: /CN=B4153DCEE87E15F92AABAC0DF6729C9A5DE5CFCC Certificate serial: 6C9BC1D814EB79DC0D8231C5203FA7E34121966B Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B4153DCEE87E15F92AABAC0DF6729C9A5DE5CFCC.cer Subject info access: rsync://repo-rpki.idnic.net/repo/b5c9c394-fcd0-4b4b-bb1a-824770f40342/0/B4153DCEE87E15F92AABAC0DF6729C9A5DE5CFCC.mft Manifest number: 052D Signing time: Fri 05 Dec 2025 15:21:17 +0000 Manifest this update: Fri 05 Dec 2025 15:16:17 +0000 Manifest next update: Mon 08 Dec 2025 19:12:17 +0000 Files and hashes: 1: B4153DCEE87E15F92AABAC0DF6729C9A5DE5CFCC.crl (hash: OcQlI+mCOUSdLQjwfHJ8tPuPaPatzp/kyVmAQXUSe4M=) 2: 3130332e3132332e3233362e302f32342d3234203d3e20313338303738.roa (hash: RmlnKYQXWGOfP+UEgb2aQ4Zckhx5L2Ib8Jbz3UBAKro=) 3: 323030313a6466363a643730303a3a2f34382d3438203d3e20313338303738.roa (hash: O7ms2O+UhtZVKkE81cuQDtuTyN3BEIVlVc+cc3/gZMg=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/b5c9c394-fcd0-4b4b-bb1a-824770f40342/0/B4153DCEE87E15F92AABAC0DF6729C9A5DE5CFCC.crl rsync://repo-rpki.idnic.net/repo/b5c9c394-fcd0-4b4b-bb1a-824770f40342/0/B4153DCEE87E15F92AABAC0DF6729C9A5DE5CFCC.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B4153DCEE87E15F92AABAC0DF6729C9A5DE5CFCC.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 08 Dec 2025 19:12:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6c:9b:c1:d8:14:eb:79:dc:0d:82:31:c5:20:3f:a7:e3:41:21:96:6b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B4153DCEE87E15F92AABAC0DF6729C9A5DE5CFCC Validity Not Before: Dec 5 15:16:17 2025 GMT Not After : Dec 8 19:12:17 2025 GMT Subject: CN=DAB1220675C4FD33EE9C9A1156F729323E56FF56 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:7a:39:99:6a:b0:50:d6:a5:12:a6:b4:fa:16: a7:32:a2:ba:f8:fe:8d:6f:0e:c7:1d:31:01:80:58: 71:4b:2a:9e:a9:9d:f8:57:aa:85:b6:99:d2:9f:a3: 59:4b:2b:e9:c3:6a:96:ec:aa:5f:69:7c:0c:d0:eb: 69:dd:93:fc:b5:37:cb:d8:83:ad:8a:8e:70:20:ff: a2:b4:f4:a0:b3:66:ae:06:55:27:9e:10:f2:54:67: 71:b8:5d:ad:96:ab:b4:80:93:b6:8c:88:69:77:29: cd:47:8b:34:ea:40:fe:13:71:5e:bb:49:e5:52:c3: 5b:f7:7a:5b:78:3c:d7:75:04:99:7d:5c:e6:00:1c: 20:60:a4:58:a2:02:db:2a:57:d4:88:f1:f6:21:f0: c1:f8:06:53:37:df:3b:b3:01:d1:89:d4:55:7f:08: 59:a1:a0:83:35:f3:57:c8:f9:95:33:49:8b:18:a7: ec:b9:60:0f:95:7d:5a:a5:31:c9:ca:5d:24:96:2b: 4d:f6:5f:7d:b4:d0:9d:5d:90:f0:0d:f6:be:a4:ba: 2f:b5:c9:0b:19:1c:57:27:11:1d:b6:b9:21:63:a3: 43:f1:02:15:c7:7e:10:a3:f1:cf:19:be:5e:20:26: 4a:1e:2c:0f:65:bf:86:21:8f:c0:72:35:94:69:b5: ef:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DA:B1:22:06:75:C4:FD:33:EE:9C:9A:11:56:F7:29:32:3E:56:FF:56 X509v3 Authority Key Identifier: keyid:B4:15:3D:CE:E8:7E:15:F9:2A:AB:AC:0D:F6:72:9C:9A:5D:E5:CF:CC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/b5c9c394-fcd0-4b4b-bb1a-824770f40342/0/B4153DCEE87E15F92AABAC0DF6729C9A5DE5CFCC.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B4153DCEE87E15F92AABAC0DF6729C9A5DE5CFCC.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/b5c9c394-fcd0-4b4b-bb1a-824770f40342/0/B4153DCEE87E15F92AABAC0DF6729C9A5DE5CFCC.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4c:98:9b:73:4f:b1:c6:7a:7a:b1:ff:41:18:cf:27:f3:61:47: 86:bb:37:65:2c:a1:77:d2:ec:54:d5:43:be:8c:57:d3:fd:9d: d6:0a:06:d0:0a:73:c8:94:8f:84:83:a7:cd:da:71:16:c1:14: 21:9d:a6:7b:c2:f8:98:07:35:7a:9e:31:48:3e:7c:ee:8e:1c: d7:7f:4f:68:d1:6c:b1:8e:7b:f4:95:c6:24:91:95:af:a0:4b: 1f:33:c2:df:90:5d:6b:c0:dc:42:f6:f1:56:42:bb:41:e8:f2: 3f:22:dc:22:d6:c7:64:93:bf:9a:a8:50:e5:f7:81:5a:a4:6d: fa:76:a2:d2:1b:eb:4f:f0:a3:95:72:28:73:83:07:56:51:a2: a6:48:21:61:4f:47:a4:ab:1f:5e:58:42:b3:ee:54:f5:eb:4c: b2:4f:b1:dc:e6:c0:ad:b0:61:6d:b7:97:b6:c1:41:1c:31:c5: 82:db:3f:bd:03:df:57:9a:b4:e7:ee:93:8a:ab:51:0a:ba:af: 84:9d:ca:f3:81:df:3a:f0:d8:e4:5e:cb:62:03:33:f9:19:28: c9:03:2a:c1:e4:ae:61:33:34:f3:39:83:1c:b5:36:20:19:4c: 30:b5:6b:d7:6b:6f:72:39:96:6f:ed:6a:7f:25:08:67:88:b4: c1:e0:64:ea -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUbJvB2BTredwNgjHFID+n40EhlmswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjQxNTNEQ0VFODdFMTVGOTJBQUJBQzBERjY3MjlDOUE1 REU1Q0ZDQzAeFw0yNTEyMDUxNTE2MTdaFw0yNTEyMDgxOTEyMTdaMDMxMTAvBgNV BAMTKERBQjEyMjA2NzVDNEZEMzNFRTlDOUExMTU2RjcyOTMyM0U1NkZGNTYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCtejmZarBQ1qUSprT6Fqcyorr4 /o1vDscdMQGAWHFLKp6pnfhXqoW2mdKfo1lLK+nDapbsql9pfAzQ62ndk/y1N8vY g62KjnAg/6K09KCzZq4GVSeeEPJUZ3G4Xa2Wq7SAk7aMiGl3Kc1HizTqQP4TcV67 SeVSw1v3elt4PNd1BJl9XOYAHCBgpFiiAtsqV9SI8fYh8MH4BlM33zuzAdGJ1FV/ CFmhoIM181fI+ZUzSYsYp+y5YA+VfVqlMcnKXSSWK032X3200J1dkPAN9r6kui+1 yQsZHFcnER22uSFjo0PxAhXHfhCj8c8Zvl4gJkoeLA9lv4Yhj8ByNZRpte/dAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU2rEiBnXE/TPunJoRVvcpMj5W/1YwHwYDVR0j BBgwFoAUtBU9zuh+Ffkqq6wN9nKcml3lz8wwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i NWM5YzM5NC1mY2QwLTRiNGItYmIxYS04MjQ3NzBmNDAzNDIvMC9CNDE1M0RDRUU4 N0UxNUY5MkFBQkFDMERGNjcyOUM5QTVERTVDRkNDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQjQxNTNEQ0VFODdFMTVGOTJBQUJBQzBERjY3MjlDOUE1REU1 Q0ZDQy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYjVjOWMzOTQtZmNkMC00YjRiLWJi MWEtODI0NzcwZjQwMzQyLzAvQjQxNTNEQ0VFODdFMTVGOTJBQUJBQzBERjY3MjlD OUE1REU1Q0ZDQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEyYm3NPscZ6erH/QRjPJ/NhR4a7N2UsoXfS 7FTVQ76MV9P9ndYKBtAKc8iUj4SDp83acRbBFCGdpnvC+JgHNXqeMUg+fO6OHNd/ T2jRbLGOe/SVxiSRla+gSx8zwt+QXWvA3EL28VZCu0Ho8j8i3CLWx2STv5qoUOX3 gVqkbfp2otIb60/wo5VyKHODB1ZRoqZIIWFPR6SrH15YQrPuVPXrTLJPsdzmwK2w YW23l7bBQRwxxYLbP70D31eatOfuk4qrUQq6r4SdyvOB3zrw2ORey2IDM/kZKMkD KsHkrmEzNPM5gxy1NiAZTDC1a9drb3I5lm/tan8lCGeItMHgZOo= -----END CERTIFICATE-----Generated at Sat Dec 6 23:53:52 2025 by rpki-client