This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/bdc41c1a-e088-4ef6-9d28-814c61456d30/0/B591059B6AF2F5D66EBBD14031DA23E5AAFC64F7.mft File: B591059B6AF2F5D66EBBD14031DA23E5AAFC64F7.mft (raw, json) Hash identifier: 8XfCPIzUb76erCVCClO9CL7PPOoGRTWtxfqHbEZ7ypg= Subject key identifier: D4:BC:F1:3D:F9:58:25:EA:47:9B:2F:33:75:AE:13:2A:67:1D:21:5B Authority key identifier: B5:91:05:9B:6A:F2:F5:D6:6E:BB:D1:40:31:DA:23:E5:AA:FC:64:F7 Certificate issuer: /CN=B591059B6AF2F5D66EBBD14031DA23E5AAFC64F7 Certificate serial: 7A8528651607F700B34C2F950CF1C3A6A70BEF80 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B591059B6AF2F5D66EBBD14031DA23E5AAFC64F7.cer Subject info access: rsync://repo-rpki.idnic.net/repo/bdc41c1a-e088-4ef6-9d28-814c61456d30/0/B591059B6AF2F5D66EBBD14031DA23E5AAFC64F7.mft Manifest number: 0530 Signing time: Tue 16 Dec 2025 08:01:26 +0000 Manifest this update: Tue 16 Dec 2025 07:56:26 +0000 Manifest next update: Fri 19 Dec 2025 14:55:26 +0000 Files and hashes: 1: B591059B6AF2F5D66EBBD14031DA23E5AAFC64F7.crl (hash: 77i67VMSrmmQHcktdcLJam58jHICCqTpg00+C0EtmpM=) 2: 3130332e3135332e33342e302f32342d3234203d3e20313430343532.roa (hash: L+WYyxtBJBb4IPQAp+Phpn95Mr1s/ocDbq38zQ6JLtA=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/bdc41c1a-e088-4ef6-9d28-814c61456d30/0/B591059B6AF2F5D66EBBD14031DA23E5AAFC64F7.crl rsync://repo-rpki.idnic.net/repo/bdc41c1a-e088-4ef6-9d28-814c61456d30/0/B591059B6AF2F5D66EBBD14031DA23E5AAFC64F7.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B591059B6AF2F5D66EBBD14031DA23E5AAFC64F7.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 19 Dec 2025 14:55:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7a:85:28:65:16:07:f7:00:b3:4c:2f:95:0c:f1:c3:a6:a7:0b:ef:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B591059B6AF2F5D66EBBD14031DA23E5AAFC64F7 Validity Not Before: Dec 16 07:56:26 2025 GMT Not After : Dec 19 14:55:26 2025 GMT Subject: CN=D4BCF13DF95825EA479B2F3375AE132A671D215B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:17:48:7b:5c:7c:6d:0b:d8:23:26:3a:b2:21: 54:9f:cb:8f:0b:29:b0:e8:6b:18:36:64:c5:df:52: df:25:e5:c6:77:27:ab:88:29:32:46:9f:90:12:1e: a8:06:07:54:d6:2d:df:13:30:17:c1:57:63:75:bf: 37:d5:a8:3a:fd:0d:aa:fc:0d:51:fb:62:4e:c0:44: 96:25:f8:86:bf:6d:00:19:4a:2e:53:d9:77:f0:85: 04:b0:29:a0:d0:5e:99:41:24:8f:85:49:ca:c9:e9: 4a:7b:8e:77:6b:d5:80:21:1f:13:f7:26:cc:45:dd: 7b:76:ec:0b:30:5a:97:96:da:5a:10:6e:4a:4a:2b: 5a:52:c9:fe:fe:8d:e8:f2:25:3f:7b:06:6d:d5:9e: d6:f2:7a:95:3d:72:7a:d0:89:bc:aa:36:2b:48:90: 5a:b2:2f:d8:8a:df:cf:8e:48:72:1a:4b:c9:5d:b2: 5b:25:62:35:d3:7a:67:ff:89:6c:3f:6f:07:ef:5b: 17:8b:ce:11:3b:ea:69:aa:82:5e:9f:66:cf:77:e9: d8:19:49:f4:3e:18:14:6b:09:4a:84:bf:81:40:34: fa:f8:fa:55:f7:99:46:ba:25:18:0e:00:45:75:56: 52:8e:e3:6b:a2:4a:a7:80:23:1b:ae:82:9b:d1:ae: 78:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:BC:F1:3D:F9:58:25:EA:47:9B:2F:33:75:AE:13:2A:67:1D:21:5B X509v3 Authority Key Identifier: keyid:B5:91:05:9B:6A:F2:F5:D6:6E:BB:D1:40:31:DA:23:E5:AA:FC:64:F7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/bdc41c1a-e088-4ef6-9d28-814c61456d30/0/B591059B6AF2F5D66EBBD14031DA23E5AAFC64F7.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B591059B6AF2F5D66EBBD14031DA23E5AAFC64F7.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/bdc41c1a-e088-4ef6-9d28-814c61456d30/0/B591059B6AF2F5D66EBBD14031DA23E5AAFC64F7.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption bc:af:08:08:6b:b3:be:e4:b4:e6:04:a6:97:70:b1:61:7f:c8: cb:04:89:b0:b0:fa:a8:b6:c2:fc:4c:46:db:ef:fc:d1:42:77: 54:35:c3:3c:a4:6a:82:81:5c:b9:40:8d:00:d9:eb:f0:a1:17: 11:e1:19:0f:8b:20:de:7d:86:19:67:e2:1e:ca:b9:ce:a4:c9: cd:4f:b7:63:c0:b6:3c:94:93:19:e3:f5:97:b8:ef:02:b3:1d: 1f:fd:00:07:6c:ba:6d:0e:9a:d8:e9:17:ee:04:43:fa:77:dd: e5:1f:23:bf:ff:fa:03:bc:de:a1:20:1c:f3:95:ae:f3:f5:6d: 90:57:c0:b2:61:3f:64:d0:b6:43:6b:eb:f7:3e:80:70:de:b6: 55:ba:17:22:68:47:e7:7f:b8:05:18:ab:2d:55:5e:fe:c1:03: e7:7f:56:f6:da:a0:a2:c3:36:8f:a3:6e:9d:da:c4:94:25:e9: 98:f9:15:ec:54:c6:f2:ba:2b:57:d1:ea:d3:c5:0f:4a:4d:75: 9a:ea:d6:a0:ec:ac:0e:5e:c1:21:59:9e:03:fa:10:a0:ba:b8: fb:72:aa:a1:8a:a0:de:b6:e7:53:db:4f:a0:aa:29:da:0d:04: 67:ac:66:d6:3d:37:ce:96:91:90:6c:35:91:c7:b0:6e:4f:ed: ac:e7:eb:50 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUeoUoZRYH9wCzTC+VDPHDpqcL74AwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjU5MTA1OUI2QUYyRjVENjZFQkJEMTQwMzFEQTIzRTVB QUZDNjRGNzAeFw0yNTEyMTYwNzU2MjZaFw0yNTEyMTkxNDU1MjZaMDMxMTAvBgNV BAMTKEQ0QkNGMTNERjk1ODI1RUE0NzlCMkYzMzc1QUUxMzJBNjcxRDIxNUIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDSF0h7XHxtC9gjJjqyIVSfy48L KbDoaxg2ZMXfUt8l5cZ3J6uIKTJGn5ASHqgGB1TWLd8TMBfBV2N1vzfVqDr9Dar8 DVH7Yk7ARJYl+Ia/bQAZSi5T2XfwhQSwKaDQXplBJI+FScrJ6Up7jndr1YAhHxP3 JsxF3Xt27AswWpeW2loQbkpKK1pSyf7+jejyJT97Bm3VntbyepU9cnrQibyqNitI kFqyL9iK38+OSHIaS8ldslslYjXTemf/iWw/bwfvWxeLzhE76mmqgl6fZs936dgZ SfQ+GBRrCUqEv4FANPr4+lX3mUa6JRgOAEV1VlKO42uiSqeAIxuugpvRrnjNAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU1LzxPflYJepHmy8zda4TKmcdIVswHwYDVR0j BBgwFoAUtZEFm2ry9dZuu9FAMdoj5ar8ZPcwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i ZGM0MWMxYS1lMDg4LTRlZjYtOWQyOC04MTRjNjE0NTZkMzAvMC9CNTkxMDU5QjZB RjJGNUQ2NkVCQkQxNDAzMURBMjNFNUFBRkM2NEY3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQjU5MTA1OUI2QUYyRjVENjZFQkJEMTQwMzFEQTIzRTVBQUZD NjRGNy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYmRjNDFjMWEtZTA4OC00ZWY2LTlk MjgtODE0YzYxNDU2ZDMwLzAvQjU5MTA1OUI2QUYyRjVENjZFQkJEMTQwMzFEQTIz RTVBQUZDNjRGNy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALyvCAhrs77ktOYEppdwsWF/yMsEibCw+qi2 wvxMRtvv/NFCd1Q1wzykaoKBXLlAjQDZ6/ChFxHhGQ+LIN59hhln4h7Kuc6kyc1P t2PAtjyUkxnj9Ze47wKzHR/9AAdsum0OmtjpF+4EQ/p33eUfI7//+gO83qEgHPOV rvP1bZBXwLJhP2TQtkNr6/c+gHDetlW6FyJoR+d/uAUYqy1VXv7BA+d/VvbaoKLD No+jbp3axJQl6Zj5FexUxvK6K1fR6tPFD0pNdZrq1qDsrA5ewSFZngP6EKC6uPty qqGKoN6251PbT6CqKdoNBGesZtY9N86WkZBsNZHHsG5P7azn61A= -----END CERTIFICATE-----Generated at Thu Dec 18 07:38:32 2025 by rpki-client