This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/bf25b968-0927-4594-887e-67f53f967b12/0/131807BDDAAF97ED72214DFBC5C539ACB04FDCBE.mft File: 131807BDDAAF97ED72214DFBC5C539ACB04FDCBE.mft (raw, json) Hash identifier: YZrxqEQfguKWD0LBZbrDdBn6087MftWmURiIEpFk270= Subject key identifier: 84:01:BF:82:B2:91:82:36:E3:DD:BD:D9:5E:8B:91:D3:5F:BF:7A:70 Authority key identifier: 13:18:07:BD:DA:AF:97:ED:72:21:4D:FB:C5:C5:39:AC:B0:4F:DC:BE Certificate issuer: /CN=131807BDDAAF97ED72214DFBC5C539ACB04FDCBE Certificate serial: 729528E85272E42246655E989B868AF9B11620DA Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/131807BDDAAF97ED72214DFBC5C539ACB04FDCBE.cer Subject info access: rsync://repo-rpki.idnic.net/repo/bf25b968-0927-4594-887e-67f53f967b12/0/131807BDDAAF97ED72214DFBC5C539ACB04FDCBE.mft Manifest number: 0338 Signing time: Thu 18 Dec 2025 18:00:59 +0000 Manifest this update: Thu 18 Dec 2025 17:55:59 +0000 Manifest next update: Mon 22 Dec 2025 05:49:59 +0000 Files and hashes: 1: 3130332e3137342e32342e302f32332d3234203d3e20313331313131.roa (hash: IcV/PuSEjSNsy6cbDUeXZVgPYs8xhMimlvvll5vTiXU=) 2: 131807BDDAAF97ED72214DFBC5C539ACB04FDCBE.crl (hash: duK+6dDdCEWuvntvGfOSp5QQZk46qmst4WJWjvVIiKY=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/bf25b968-0927-4594-887e-67f53f967b12/0/131807BDDAAF97ED72214DFBC5C539ACB04FDCBE.crl rsync://repo-rpki.idnic.net/repo/bf25b968-0927-4594-887e-67f53f967b12/0/131807BDDAAF97ED72214DFBC5C539ACB04FDCBE.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/131807BDDAAF97ED72214DFBC5C539ACB04FDCBE.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 21 Dec 2025 13:29:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 72:95:28:e8:52:72:e4:22:46:65:5e:98:9b:86:8a:f9:b1:16:20:da Signature Algorithm: sha256WithRSAEncryption Issuer: CN=131807BDDAAF97ED72214DFBC5C539ACB04FDCBE Validity Not Before: Dec 18 17:55:59 2025 GMT Not After : Dec 22 05:49:59 2025 GMT Subject: CN=8401BF82B2918236E3DDBDD95E8B91D35FBF7A70 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:cb:03:89:86:77:88:89:fa:35:47:c8:3e:9a: 41:03:bf:c0:70:3d:ba:d6:01:95:e5:a3:bd:8f:97: 98:c9:15:c3:05:61:e1:e1:1a:0c:93:f3:36:2b:64: 31:77:0f:cf:d0:ba:a9:8c:c5:e2:de:3a:7b:87:4b: af:cc:00:92:c5:b1:69:d7:e5:a3:b3:ac:12:f2:06: 91:f4:18:e0:34:ce:0c:ba:c1:ee:97:c4:45:90:a0: c3:5e:56:fe:a7:bf:67:b9:c1:18:ee:bb:88:b7:02: a8:d0:16:d4:1e:98:52:07:73:de:1b:52:88:f8:ed: 7e:cc:fe:d6:e4:d3:de:e3:a0:54:b3:ed:3c:2f:b8: 2b:a7:09:46:38:bc:35:98:5f:aa:54:45:3c:1f:b8: 4b:ad:fb:b9:e0:b1:98:34:e6:26:3a:62:aa:e5:84: 29:44:1f:43:9f:79:f2:3b:68:56:02:a8:ab:be:88: 1c:e6:19:80:be:e3:9e:54:5a:ea:5a:a7:27:ff:09: b9:7f:76:dc:72:4c:f1:19:40:5e:85:58:e9:dd:a2: f9:fe:24:63:c1:51:0f:44:bd:45:52:4f:62:2d:65: 8d:9a:4d:65:3b:16:87:d3:ce:17:7a:d5:87:83:5b: ab:66:67:27:fb:62:ba:29:df:4b:0c:ac:d2:88:2e: 54:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:01:BF:82:B2:91:82:36:E3:DD:BD:D9:5E:8B:91:D3:5F:BF:7A:70 X509v3 Authority Key Identifier: keyid:13:18:07:BD:DA:AF:97:ED:72:21:4D:FB:C5:C5:39:AC:B0:4F:DC:BE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/bf25b968-0927-4594-887e-67f53f967b12/0/131807BDDAAF97ED72214DFBC5C539ACB04FDCBE.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/131807BDDAAF97ED72214DFBC5C539ACB04FDCBE.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/bf25b968-0927-4594-887e-67f53f967b12/0/131807BDDAAF97ED72214DFBC5C539ACB04FDCBE.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8b:3c:28:c8:b3:3a:e9:08:ed:10:2f:8e:fd:92:a5:17:54:e1: d7:a0:65:56:14:6b:af:16:97:1f:78:33:cc:a8:6b:f1:6a:a7: 12:f3:42:3a:97:2b:47:91:61:96:5d:86:3d:6b:82:35:12:8c: 33:42:fd:dc:68:ff:8f:37:4e:1f:f1:19:0b:69:ac:cb:82:02: e6:f8:f0:ab:02:6c:84:75:79:20:50:b0:af:88:f9:d6:23:fc: 44:70:05:6a:21:c1:4d:c8:0f:bf:24:c3:2d:07:86:7a:c7:e2: 50:bd:52:d0:4c:cf:e3:61:36:39:b9:91:17:0f:01:75:14:5d: 7c:c8:39:0f:dd:a4:30:b6:b6:8e:14:0c:ad:99:d4:e0:be:d6: 21:6b:31:f3:bc:08:40:07:7e:61:03:c8:2b:d7:ee:e9:4a:09: cc:41:eb:33:ea:73:77:89:3a:46:54:b8:a6:ec:80:d3:e5:b8: 84:2f:70:ef:66:82:4c:ba:46:8d:6f:b2:2a:1b:9b:1e:04:f7: 0d:85:1b:9a:d9:83:92:d9:c4:49:9d:db:c5:86:44:23:2b:13: 89:b7:52:18:78:80:94:16:7f:51:2f:5b:64:f6:2b:b1:8f:5d: c8:5e:48:1b:88:6b:c8:e4:15:48:7b:04:b2:b7:96:fa:72:c3: 95:51:e2:d4 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUcpUo6FJy5CJGZV6Ym4aK+bEWINowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTMxODA3QkREQUFGOTdFRDcyMjE0REZCQzVDNTM5QUNC MDRGRENCRTAeFw0yNTEyMTgxNzU1NTlaFw0yNTEyMjIwNTQ5NTlaMDMxMTAvBgNV BAMTKDg0MDFCRjgyQjI5MTgyMzZFM0REQkREOTVFOEI5MUQzNUZCRjdBNzAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDDywOJhneIifo1R8g+mkEDv8Bw PbrWAZXlo72Pl5jJFcMFYeHhGgyT8zYrZDF3D8/QuqmMxeLeOnuHS6/MAJLFsWnX 5aOzrBLyBpH0GOA0zgy6we6XxEWQoMNeVv6nv2e5wRjuu4i3AqjQFtQemFIHc94b Uoj47X7M/tbk097joFSz7TwvuCunCUY4vDWYX6pURTwfuEut+7ngsZg05iY6Yqrl hClEH0OfefI7aFYCqKu+iBzmGYC+455UWupapyf/Cbl/dtxyTPEZQF6FWOndovn+ JGPBUQ9EvUVST2ItZY2aTWU7FofTzhd61YeDW6tmZyf7Yrop30sMrNKILlTNAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUhAG/grKRgjbj3b3ZXouR01+/enAwHwYDVR0j BBgwFoAUExgHvdqvl+1yIU37xcU5rLBP3L4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i ZjI1Yjk2OC0wOTI3LTQ1OTQtODg3ZS02N2Y1M2Y5NjdiMTIvMC8xMzE4MDdCRERB QUY5N0VENzIyMTRERkJDNUM1MzlBQ0IwNEZEQ0JFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMTMxODA3QkREQUFGOTdFRDcyMjE0REZCQzVDNTM5QUNCMDRG RENCRS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYmYyNWI5NjgtMDkyNy00NTk0LTg4 N2UtNjdmNTNmOTY3YjEyLzAvMTMxODA3QkREQUFGOTdFRDcyMjE0REZCQzVDNTM5 QUNCMDRGRENCRS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIs8KMizOukI7RAvjv2SpRdU4degZVYUa68W lx94M8yoa/FqpxLzQjqXK0eRYZZdhj1rgjUSjDNC/dxo/483Th/xGQtprMuCAub4 8KsCbIR1eSBQsK+I+dYj/ERwBWohwU3ID78kwy0HhnrH4lC9UtBMz+NhNjm5kRcP AXUUXXzIOQ/dpDC2to4UDK2Z1OC+1iFrMfO8CEAHfmEDyCvX7ulKCcxB6zPqc3eJ OkZUuKbsgNPluIQvcO9mgky6Ro1vsiobmx4E9w2FG5rZg5LZxEmd28WGRCMrE4m3 Uhh4gJQWf1EvW2T2K7GPXcheSBuIa8jkFUh7BLK3lvpyw5VR4tQ= -----END CERTIFICATE-----Generated at Thu Dec 18 21:46:15 2025 by rpki-client