This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/bdc41c1a-e088-4ef6-9d28-814c61456d30/0/B591059B6AF2F5D66EBBD14031DA23E5AAFC64F7.mft File: B591059B6AF2F5D66EBBD14031DA23E5AAFC64F7.mft (raw, json) Hash identifier: o3eD7x8t3BC2D3SSZg+ZRGkNpsivbrQUm+SUItWFQzk= Subject key identifier: 7B:68:16:13:B9:7E:60:A4:C1:4E:8F:D2:41:57:CA:F1:09:7D:C3:4F Authority key identifier: B5:91:05:9B:6A:F2:F5:D6:6E:BB:D1:40:31:DA:23:E5:AA:FC:64:F7 Certificate issuer: /CN=B591059B6AF2F5D66EBBD14031DA23E5AAFC64F7 Certificate serial: 0BEB42A15239CAC0A24154F00F601B8967F07AF3 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B591059B6AF2F5D66EBBD14031DA23E5AAFC64F7.cer Subject info access: rsync://repo-rpki.idnic.net/repo/bdc41c1a-e088-4ef6-9d28-814c61456d30/0/B591059B6AF2F5D66EBBD14031DA23E5AAFC64F7.mft Manifest number: 052B Signing time: Fri 05 Dec 2025 12:31:25 +0000 Manifest this update: Fri 05 Dec 2025 12:26:25 +0000 Manifest next update: Mon 08 Dec 2025 16:02:25 +0000 Files and hashes: 1: B591059B6AF2F5D66EBBD14031DA23E5AAFC64F7.crl (hash: Fwus2vWg7YxrQwfLNUaNMBfEEi8LkVX7iHZbbEqIYp8=) 2: 3130332e3135332e33342e302f32342d3234203d3e20313430343532.roa (hash: L+WYyxtBJBb4IPQAp+Phpn95Mr1s/ocDbq38zQ6JLtA=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/bdc41c1a-e088-4ef6-9d28-814c61456d30/0/B591059B6AF2F5D66EBBD14031DA23E5AAFC64F7.crl rsync://repo-rpki.idnic.net/repo/bdc41c1a-e088-4ef6-9d28-814c61456d30/0/B591059B6AF2F5D66EBBD14031DA23E5AAFC64F7.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B591059B6AF2F5D66EBBD14031DA23E5AAFC64F7.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 08 Dec 2025 16:02:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0b:eb:42:a1:52:39:ca:c0:a2:41:54:f0:0f:60:1b:89:67:f0:7a:f3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B591059B6AF2F5D66EBBD14031DA23E5AAFC64F7 Validity Not Before: Dec 5 12:26:25 2025 GMT Not After : Dec 8 16:02:25 2025 GMT Subject: CN=7B681613B97E60A4C14E8FD24157CAF1097DC34F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:b4:5f:8e:97:b0:66:20:8d:ff:fc:40:f5:82: fe:92:09:19:d1:46:76:76:d9:43:22:c8:46:7a:8c: 65:b5:b4:c0:f1:be:e5:a8:44:e1:23:ac:c6:85:d3: e3:2b:30:43:97:4b:0e:c7:86:3b:6b:5d:9f:1d:77: 48:52:f6:e8:7d:b8:b7:97:fd:a6:54:bd:b5:cc:5f: 33:fd:0a:10:1b:a9:c3:6e:e2:47:52:3d:0e:dd:52: be:20:04:27:c1:d9:e7:6f:6c:6a:d3:01:d1:16:82: 4a:43:e7:c7:f5:b8:d5:88:07:7f:36:45:71:a0:3d: ba:95:39:95:22:72:c1:27:d5:55:cc:37:96:4f:76: ce:ed:ef:70:ed:29:f6:35:41:93:6a:02:60:0f:df: 24:99:17:ed:30:4d:9e:65:12:c5:d0:b1:92:fc:d3: 89:18:8f:88:17:11:99:71:84:19:1c:0a:42:aa:21: f9:cf:2f:a3:df:cf:d8:cf:95:f0:0b:03:2a:32:57: f1:14:43:ac:97:c3:cd:ac:be:e9:58:cb:5c:cf:f2: 0d:f8:41:ce:80:32:cc:b9:60:c8:7e:1e:5c:74:d5: c6:ba:a1:1f:32:84:db:7e:8b:c1:96:f9:25:d0:10: ed:51:59:4d:9f:8d:4c:ed:79:de:8f:11:e6:18:dd: 6b:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7B:68:16:13:B9:7E:60:A4:C1:4E:8F:D2:41:57:CA:F1:09:7D:C3:4F X509v3 Authority Key Identifier: keyid:B5:91:05:9B:6A:F2:F5:D6:6E:BB:D1:40:31:DA:23:E5:AA:FC:64:F7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/bdc41c1a-e088-4ef6-9d28-814c61456d30/0/B591059B6AF2F5D66EBBD14031DA23E5AAFC64F7.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B591059B6AF2F5D66EBBD14031DA23E5AAFC64F7.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/bdc41c1a-e088-4ef6-9d28-814c61456d30/0/B591059B6AF2F5D66EBBD14031DA23E5AAFC64F7.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 50:65:3b:01:e6:86:4c:d1:4d:c1:96:19:73:e1:b8:05:3f:ba: 23:8c:bd:30:ef:52:19:75:a2:ce:25:2f:02:b9:27:72:f2:3a: 48:e1:6a:9b:11:ea:62:8e:8b:58:dc:b9:ae:f2:fb:5d:14:b7: 63:9a:ef:30:7d:52:c0:59:84:9c:4f:56:b0:eb:be:08:ab:2f: 84:94:b8:95:8c:f2:af:7a:96:9e:28:48:30:b0:bc:4e:b5:a8: d0:eb:54:3c:ff:b2:1d:a5:20:74:9a:7d:dc:2a:50:18:d2:d2: 3b:f9:af:0c:13:ae:c4:04:66:8c:68:51:02:68:50:b7:9f:9d: 35:11:c9:87:6f:7d:5b:51:60:77:a2:58:37:5d:2d:a2:8a:6f: 4b:93:73:7b:14:34:84:65:ae:2e:91:8d:33:7d:12:c4:d6:9c: 40:18:c4:3b:4b:ba:90:b6:71:c7:be:5b:43:1a:cd:fc:52:0e: a5:fd:8c:24:9a:a8:f2:98:5b:37:bc:68:1b:c9:4b:bb:9a:a2: ca:d6:37:5d:09:33:b4:8e:80:e9:99:24:ce:86:b1:1b:72:40: bc:82:0d:9b:5f:c2:16:84:c0:b8:e8:b5:a6:4b:71:89:a5:82: 47:6d:3c:c3:70:6c:79:ef:e6:d0:a8:c6:46:24:ad:ed:20:75: f5:db:f2:dd -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUC+tCoVI5ysCiQVTwD2AbiWfwevMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjU5MTA1OUI2QUYyRjVENjZFQkJEMTQwMzFEQTIzRTVB QUZDNjRGNzAeFw0yNTEyMDUxMjI2MjVaFw0yNTEyMDgxNjAyMjVaMDMxMTAvBgNV BAMTKDdCNjgxNjEzQjk3RTYwQTRDMTRFOEZEMjQxNTdDQUYxMDk3REMzNEYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC3tF+Ol7BmII3//ED1gv6SCRnR RnZ22UMiyEZ6jGW1tMDxvuWoROEjrMaF0+MrMEOXSw7HhjtrXZ8dd0hS9uh9uLeX /aZUvbXMXzP9ChAbqcNu4kdSPQ7dUr4gBCfB2edvbGrTAdEWgkpD58f1uNWIB382 RXGgPbqVOZUicsEn1VXMN5ZPds7t73DtKfY1QZNqAmAP3ySZF+0wTZ5lEsXQsZL8 04kYj4gXEZlxhBkcCkKqIfnPL6Pfz9jPlfALAyoyV/EUQ6yXw82svulYy1zP8g34 Qc6AMsy5YMh+Hlx01ca6oR8yhNt+i8GW+SXQEO1RWU2fjUzted6PEeYY3Wt9AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUe2gWE7l+YKTBTo/SQVfK8Ql9w08wHwYDVR0j BBgwFoAUtZEFm2ry9dZuu9FAMdoj5ar8ZPcwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i ZGM0MWMxYS1lMDg4LTRlZjYtOWQyOC04MTRjNjE0NTZkMzAvMC9CNTkxMDU5QjZB RjJGNUQ2NkVCQkQxNDAzMURBMjNFNUFBRkM2NEY3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQjU5MTA1OUI2QUYyRjVENjZFQkJEMTQwMzFEQTIzRTVBQUZD NjRGNy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYmRjNDFjMWEtZTA4OC00ZWY2LTlk MjgtODE0YzYxNDU2ZDMwLzAvQjU5MTA1OUI2QUYyRjVENjZFQkJEMTQwMzFEQTIz RTVBQUZDNjRGNy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFBlOwHmhkzRTcGWGXPhuAU/uiOMvTDvUhl1 os4lLwK5J3LyOkjhapsR6mKOi1jcua7y+10Ut2Oa7zB9UsBZhJxPVrDrvgirL4SU uJWM8q96lp4oSDCwvE61qNDrVDz/sh2lIHSafdwqUBjS0jv5rwwTrsQEZoxoUQJo ULefnTURyYdvfVtRYHeiWDddLaKKb0uTc3sUNIRlri6RjTN9EsTWnEAYxDtLupC2 cce+W0MazfxSDqX9jCSaqPKYWze8aBvJS7uaosrWN10JM7SOgOmZJM6GsRtyQLyC DZtfwhaEwLjotaZLcYmlgkdtPMNwbHnv5tCoxkYkre0gdfXb8t0= -----END CERTIFICATE-----Generated at Sun Dec 7 01:00:38 2025 by rpki-client