This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/bf25b968-0927-4594-887e-67f53f967b12/0/131807BDDAAF97ED72214DFBC5C539ACB04FDCBE.mft File: 131807BDDAAF97ED72214DFBC5C539ACB04FDCBE.mft (raw, json) Hash identifier: WNcIH5dEDunbtjRr0otc/Q8Y5QYA4k1Wk2G4w6f42Ak= Subject key identifier: 26:FF:96:F4:99:BE:67:D1:E3:39:E7:F2:59:D6:D6:16:77:14:33:19 Authority key identifier: 13:18:07:BD:DA:AF:97:ED:72:21:4D:FB:C5:C5:39:AC:B0:4F:DC:BE Certificate issuer: /CN=131807BDDAAF97ED72214DFBC5C539ACB04FDCBE Certificate serial: 5E303517294ABBD4032AFD3424F529EA3AEF509F Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/131807BDDAAF97ED72214DFBC5C539ACB04FDCBE.cer Subject info access: rsync://repo-rpki.idnic.net/repo/bf25b968-0927-4594-887e-67f53f967b12/0/131807BDDAAF97ED72214DFBC5C539ACB04FDCBE.mft Manifest number: 0332 Signing time: Fri 05 Dec 2025 05:50:59 +0000 Manifest this update: Fri 05 Dec 2025 05:45:59 +0000 Manifest next update: Mon 08 Dec 2025 11:14:59 +0000 Files and hashes: 1: 131807BDDAAF97ED72214DFBC5C539ACB04FDCBE.crl (hash: 2+xB+g2Bcc6X7+BqRVWvqHfPvfCGSfwlg7ZBF65pl7Q=) 2: 3130332e3137342e32342e302f32332d3234203d3e20313331313131.roa (hash: IcV/PuSEjSNsy6cbDUeXZVgPYs8xhMimlvvll5vTiXU=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/bf25b968-0927-4594-887e-67f53f967b12/0/131807BDDAAF97ED72214DFBC5C539ACB04FDCBE.crl rsync://repo-rpki.idnic.net/repo/bf25b968-0927-4594-887e-67f53f967b12/0/131807BDDAAF97ED72214DFBC5C539ACB04FDCBE.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/131807BDDAAF97ED72214DFBC5C539ACB04FDCBE.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 08 Dec 2025 11:14:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5e:30:35:17:29:4a:bb:d4:03:2a:fd:34:24:f5:29:ea:3a:ef:50:9f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=131807BDDAAF97ED72214DFBC5C539ACB04FDCBE Validity Not Before: Dec 5 05:45:59 2025 GMT Not After : Dec 8 11:14:59 2025 GMT Subject: CN=26FF96F499BE67D1E339E7F259D6D61677143319 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:82:88:75:1f:6b:d9:ca:da:d0:4d:5c:c3:64: 14:f0:0c:07:98:c6:b1:cd:07:ae:e5:89:b8:65:4e: 45:5b:2b:4a:e1:c7:76:9e:31:bf:2c:0a:63:e9:90: b4:19:3a:78:58:d6:ff:2e:d0:50:54:02:2b:56:e2: 94:a4:3d:1a:43:dd:9b:07:72:81:bf:96:1f:b9:6c: 46:ac:be:c4:ae:73:6a:b0:23:93:33:ae:71:7e:db: d1:51:70:58:8c:11:30:92:65:de:3a:3b:7d:e8:a9: 25:61:26:65:b5:cb:51:1c:64:ae:e4:7c:b2:05:11: 62:30:2d:70:12:09:64:6f:32:47:1b:6c:e7:7d:69: 26:0d:5e:77:2b:f2:30:d3:47:a5:05:58:70:09:93: 3d:c6:08:1f:00:18:36:46:10:24:91:e5:51:42:0b: 65:f3:75:61:ee:86:52:35:56:57:12:71:b8:06:3a: 9d:9f:92:02:70:f8:1d:56:6d:ef:a8:38:90:82:6b: 11:d3:b5:0b:b9:5d:36:b3:37:a9:e4:89:93:38:41: e3:76:f4:53:fd:f5:70:4d:47:b1:ca:ad:84:a5:86: 2f:df:70:31:67:ad:26:fc:9f:0a:00:ad:2e:b5:a2: a3:d7:bc:1c:a0:70:20:26:f2:7f:c4:38:89:6f:6c: 30:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 26:FF:96:F4:99:BE:67:D1:E3:39:E7:F2:59:D6:D6:16:77:14:33:19 X509v3 Authority Key Identifier: keyid:13:18:07:BD:DA:AF:97:ED:72:21:4D:FB:C5:C5:39:AC:B0:4F:DC:BE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/bf25b968-0927-4594-887e-67f53f967b12/0/131807BDDAAF97ED72214DFBC5C539ACB04FDCBE.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/131807BDDAAF97ED72214DFBC5C539ACB04FDCBE.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/bf25b968-0927-4594-887e-67f53f967b12/0/131807BDDAAF97ED72214DFBC5C539ACB04FDCBE.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 45:82:48:fd:8a:8c:e7:05:ba:b4:a5:c9:f1:f6:17:bd:68:8d: 83:71:18:a7:2e:97:de:38:68:d1:cc:9f:5d:cd:e3:89:ab:49: d4:b2:a1:af:3d:d9:ae:d5:af:1d:d6:12:68:05:c4:ce:5c:12: b6:86:81:86:24:65:25:aa:da:b2:e6:5a:b2:51:08:9b:bd:54: 16:58:ee:29:47:e1:98:e8:c2:13:12:86:40:25:da:f9:63:77: 62:28:3e:b4:95:2b:d2:69:c8:dd:dc:50:6f:09:34:9e:27:a3: 30:cb:2e:dd:4e:6a:85:b8:de:70:6c:a6:cc:95:48:c3:c2:22: f0:3b:0f:a6:87:88:8c:bf:b7:18:56:97:01:34:ff:bb:3a:97: 36:d2:cc:a6:a5:65:4f:ab:0c:03:0f:ea:4b:70:34:fd:53:9a: 5d:1d:14:47:d6:52:45:7c:6b:d4:0c:89:0b:d0:2c:05:9f:76: 8f:60:75:a4:2a:a8:f7:09:8b:29:b3:a4:c3:51:8d:5a:00:d5: 74:bf:6d:1b:01:e4:26:1b:92:12:fc:51:e5:25:cb:92:b8:bb: 66:01:91:f6:fe:c2:fa:8e:10:37:9a:38:df:16:ea:88:da:9e: 7b:b3:61:b3:91:cf:16:53:9c:a0:d9:53:3d:d3:0e:fa:1f:42: 35:45:85:79 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUXjA1FylKu9QDKv00JPUp6jrvUJ8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTMxODA3QkREQUFGOTdFRDcyMjE0REZCQzVDNTM5QUNC MDRGRENCRTAeFw0yNTEyMDUwNTQ1NTlaFw0yNTEyMDgxMTE0NTlaMDMxMTAvBgNV BAMTKDI2RkY5NkY0OTlCRTY3RDFFMzM5RTdGMjU5RDZENjE2NzcxNDMzMTkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCygoh1H2vZytrQTVzDZBTwDAeY xrHNB67libhlTkVbK0rhx3aeMb8sCmPpkLQZOnhY1v8u0FBUAitW4pSkPRpD3ZsH coG/lh+5bEasvsSuc2qwI5MzrnF+29FRcFiMETCSZd46O33oqSVhJmW1y1EcZK7k fLIFEWIwLXASCWRvMkcbbOd9aSYNXncr8jDTR6UFWHAJkz3GCB8AGDZGECSR5VFC C2XzdWHuhlI1VlcScbgGOp2fkgJw+B1Wbe+oOJCCaxHTtQu5XTazN6nkiZM4QeN2 9FP99XBNR7HKrYSlhi/fcDFnrSb8nwoArS61oqPXvBygcCAm8n/EOIlvbDAfAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUJv+W9Jm+Z9HjOefyWdbWFncUMxkwHwYDVR0j BBgwFoAUExgHvdqvl+1yIU37xcU5rLBP3L4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i ZjI1Yjk2OC0wOTI3LTQ1OTQtODg3ZS02N2Y1M2Y5NjdiMTIvMC8xMzE4MDdCRERB QUY5N0VENzIyMTRERkJDNUM1MzlBQ0IwNEZEQ0JFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMTMxODA3QkREQUFGOTdFRDcyMjE0REZCQzVDNTM5QUNCMDRG RENCRS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYmYyNWI5NjgtMDkyNy00NTk0LTg4 N2UtNjdmNTNmOTY3YjEyLzAvMTMxODA3QkREQUFGOTdFRDcyMjE0REZCQzVDNTM5 QUNCMDRGRENCRS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEWCSP2KjOcFurSlyfH2F71ojYNxGKcul944 aNHMn13N44mrSdSyoa892a7Vrx3WEmgFxM5cEraGgYYkZSWq2rLmWrJRCJu9VBZY 7ilH4ZjowhMShkAl2vljd2IoPrSVK9JpyN3cUG8JNJ4nozDLLt1OaoW43nBspsyV SMPCIvA7D6aHiIy/txhWlwE0/7s6lzbSzKalZU+rDAMP6ktwNP1Tml0dFEfWUkV8 a9QMiQvQLAWfdo9gdaQqqPcJiymzpMNRjVoA1XS/bRsB5CYbkhL8UeUly5K4u2YB kfb+wvqOEDeaON8W6ojannuzYbORzxZTnKDZUz3TDvofQjVFhXk= -----END CERTIFICATE-----Generated at Sat Dec 6 21:16:43 2025 by rpki-client