This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/c29cceb6-a4e7-4e82-88be-bb9697bd1d01/0/BF97329188204CAD55AEC0D48286FAC81B806C71.mft File: BF97329188204CAD55AEC0D48286FAC81B806C71.mft (raw, json) Hash identifier: uL9CuNLBWhWe248KMdWKNDyzT52ya/RZL4wrHtQpl48= Subject key identifier: 62:A3:64:EC:E8:BE:AA:DD:19:52:BD:31:A3:40:D6:45:C3:21:10:E4 Authority key identifier: BF:97:32:91:88:20:4C:AD:55:AE:C0:D4:82:86:FA:C8:1B:80:6C:71 Certificate issuer: /CN=BF97329188204CAD55AEC0D48286FAC81B806C71 Certificate serial: 3CE5BE03B329D8FE634FEFBA77751A594EC77771 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BF97329188204CAD55AEC0D48286FAC81B806C71.cer Subject info access: rsync://repo-rpki.idnic.net/repo/c29cceb6-a4e7-4e82-88be-bb9697bd1d01/0/BF97329188204CAD55AEC0D48286FAC81B806C71.mft Manifest number: 80 Signing time: Sat 06 Dec 2025 20:42:01 +0000 Manifest this update: Sat 06 Dec 2025 20:37:01 +0000 Manifest next update: Wed 10 Dec 2025 01:46:01 +0000 Files and hashes: 1: BF97329188204CAD55AEC0D48286FAC81B806C71.crl (hash: J1FPUHYwFaDgsjXH5NL6o0D8Cm9jFXJrk7KDfqH0w9s=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/c29cceb6-a4e7-4e82-88be-bb9697bd1d01/0/BF97329188204CAD55AEC0D48286FAC81B806C71.crl rsync://repo-rpki.idnic.net/repo/c29cceb6-a4e7-4e82-88be-bb9697bd1d01/0/BF97329188204CAD55AEC0D48286FAC81B806C71.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BF97329188204CAD55AEC0D48286FAC81B806C71.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 09 Dec 2025 15:57:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3c:e5:be:03:b3:29:d8:fe:63:4f:ef:ba:77:75:1a:59:4e:c7:77:71 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BF97329188204CAD55AEC0D48286FAC81B806C71 Validity Not Before: Dec 6 20:37:01 2025 GMT Not After : Dec 10 01:46:01 2025 GMT Subject: CN=62A364ECE8BEAADD1952BD31A340D645C32110E4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:1f:04:68:e1:54:c0:0c:3f:d1:9f:72:dc:86: ba:4c:f1:07:aa:40:d3:bf:ba:83:1c:1a:40:19:bf: 50:cb:93:9e:89:15:33:ed:d6:0c:f2:77:cd:1f:ce: cb:aa:c7:d1:ac:2d:da:09:16:af:29:c8:b7:24:0d: 57:38:a7:5d:e7:9a:93:a7:b3:51:ad:a9:8d:9d:1d: 10:a0:c3:68:14:0f:58:21:d7:ef:6d:18:f7:c7:a1: c1:bc:f9:2f:ae:e0:91:49:25:2b:47:19:c9:3b:ea: 29:58:68:1b:a9:40:cf:1f:78:0e:95:d7:b6:dd:64: b6:42:79:4b:f6:2e:1d:04:80:e1:79:da:c3:c7:72: 71:8f:8b:d7:3f:89:e2:8d:fd:7b:6a:fe:2d:8e:9b: 5b:5f:00:28:2b:a5:b9:17:ce:99:37:3f:0f:f6:3f: e4:af:e5:5c:dc:0a:d9:02:36:52:1c:1f:0c:57:0d: 2f:12:71:8e:cd:bc:16:db:37:44:ef:d4:78:d9:61: c0:f4:6e:62:a0:fe:03:41:23:4b:f6:ea:6b:dc:69: 0c:9f:b9:0d:c4:86:c5:04:95:c7:89:69:dc:84:7b: 28:84:a2:10:87:82:ae:21:d2:60:64:e6:1d:db:12: c4:94:e6:97:ac:16:2a:af:ca:ad:06:24:46:db:1a: b1:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 62:A3:64:EC:E8:BE:AA:DD:19:52:BD:31:A3:40:D6:45:C3:21:10:E4 X509v3 Authority Key Identifier: keyid:BF:97:32:91:88:20:4C:AD:55:AE:C0:D4:82:86:FA:C8:1B:80:6C:71 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/c29cceb6-a4e7-4e82-88be-bb9697bd1d01/0/BF97329188204CAD55AEC0D48286FAC81B806C71.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BF97329188204CAD55AEC0D48286FAC81B806C71.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c29cceb6-a4e7-4e82-88be-bb9697bd1d01/0/BF97329188204CAD55AEC0D48286FAC81B806C71.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 72:05:d6:f2:93:66:53:a5:ff:5e:1c:87:f8:1f:15:a7:82:6c: 05:f7:b2:f0:17:11:db:69:79:00:4f:ed:aa:e0:24:b6:b8:0f: db:aa:60:cb:25:94:f3:75:23:da:26:3c:77:4a:21:35:5c:76: 26:59:49:8c:ea:6f:15:2c:cb:fd:d6:41:e6:9b:fb:7f:84:3c: 4d:90:3a:26:0a:8b:dd:68:2a:c5:5a:ff:60:c1:e8:92:eb:64: 3c:9a:3b:10:ba:31:de:d7:ac:f2:8d:fc:ab:1c:b1:f7:84:29: 9a:1c:de:36:a0:d6:37:c7:60:8b:39:be:5b:7d:e9:40:ea:7a: 2f:f2:e5:e2:fe:b9:c9:7d:cb:7b:1b:bc:8f:eb:10:51:5a:9c: 78:5e:ce:a1:eb:41:42:5b:98:a6:0f:f6:b6:2c:3e:45:88:e4: e7:80:c2:af:d5:75:a4:f9:ba:aa:bf:67:7f:ae:e6:e4:12:d6: 20:1b:ed:f7:03:c2:83:5c:29:2c:ab:59:bc:db:0d:86:f3:fc: e8:61:df:4d:e6:e4:87:27:20:23:91:90:57:ba:51:03:74:4e: af:8f:af:d3:e8:1a:b9:3b:b9:8e:9a:50:2c:be:1c:df:68:24: 19:a3:cf:51:45:a4:60:b2:b8:31:6b:a4:13:9b:46:a3:ff:38: 4e:e0:99:0d -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUPOW+A7Mp2P5jT++6d3UaWU7Hd3EwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkY5NzMyOTE4ODIwNENBRDU1QUVDMEQ0ODI4NkZBQzgx QjgwNkM3MTAeFw0yNTEyMDYyMDM3MDFaFw0yNTEyMTAwMTQ2MDFaMDMxMTAvBgNV BAMTKDYyQTM2NEVDRThCRUFBREQxOTUyQkQzMUEzNDBENjQ1QzMyMTEwRTQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCfHwRo4VTADD/Rn3LchrpM8Qeq QNO/uoMcGkAZv1DLk56JFTPt1gzyd80fzsuqx9GsLdoJFq8pyLckDVc4p13nmpOn s1GtqY2dHRCgw2gUD1gh1+9tGPfHocG8+S+u4JFJJStHGck76ilYaBupQM8feA6V 17bdZLZCeUv2Lh0EgOF52sPHcnGPi9c/ieKN/Xtq/i2Om1tfACgrpbkXzpk3Pw/2 P+Sv5VzcCtkCNlIcHwxXDS8ScY7NvBbbN0Tv1HjZYcD0bmKg/gNBI0v26mvcaQyf uQ3EhsUElceJadyEeyiEohCHgq4h0mBk5h3bEsSU5pesFiqvyq0GJEbbGrExAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUYqNk7Oi+qt0ZUr0xo0DWRcMhEOQwHwYDVR0j BBgwFoAUv5cykYggTK1VrsDUgob6yBuAbHEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j MjljY2ViNi1hNGU3LTRlODItODhiZS1iYjk2OTdiZDFkMDEvMC9CRjk3MzI5MTg4 MjA0Q0FENTVBRUMwRDQ4Mjg2RkFDODFCODA2QzcxLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQkY5NzMyOTE4ODIwNENBRDU1QUVDMEQ0ODI4NkZBQzgxQjgw NkM3MS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYzI5Y2NlYjYtYTRlNy00ZTgyLTg4 YmUtYmI5Njk3YmQxZDAxLzAvQkY5NzMyOTE4ODIwNENBRDU1QUVDMEQ0ODI4NkZB QzgxQjgwNkM3MS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHIF1vKTZlOl/14ch/gfFaeCbAX3svAXEdtp eQBP7argJLa4D9uqYMsllPN1I9omPHdKITVcdiZZSYzqbxUsy/3WQeab+3+EPE2Q OiYKi91oKsVa/2DB6JLrZDyaOxC6Md7XrPKN/KscsfeEKZoc3jag1jfHYIs5vlt9 6UDqei/y5eL+ucl9y3sbvI/rEFFanHhezqHrQUJbmKYP9rYsPkWI5OeAwq/VdaT5 uqq/Z3+u5uQS1iAb7fcDwoNcKSyrWbzbDYbz/Ohh303m5IcnICORkFe6UQN0Tq+P r9PoGrk7uY6aUCy+HN9oJBmjz1FFpGCyuDFrpBObRqP/OE7gmQ0= -----END CERTIFICATE-----Generated at Sun Dec 7 03:06:02 2025 by rpki-client