This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/ca124e6a-f51b-46d0-8ea3-76b2744558a6/0/B178402BEDE3EC5A5EE2E0E71F736A1360C06AF6.mft File: B178402BEDE3EC5A5EE2E0E71F736A1360C06AF6.mft (raw, json) Hash identifier: JltNACJoMS7sQseFElNaqPJ/QhqUX0kUBdE65f0uTtU= Subject key identifier: 18:EC:1C:0F:42:03:80:F6:1E:27:06:25:5C:77:6D:DC:E1:CD:73:20 Authority key identifier: B1:78:40:2B:ED:E3:EC:5A:5E:E2:E0:E7:1F:73:6A:13:60:C0:6A:F6 Certificate issuer: /CN=B178402BEDE3EC5A5EE2E0E71F736A1360C06AF6 Certificate serial: 3AC44E9A881DB797A4E4EA9DEEE63559F76F1182 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B178402BEDE3EC5A5EE2E0E71F736A1360C06AF6.cer Subject info access: rsync://repo-rpki.idnic.net/repo/ca124e6a-f51b-46d0-8ea3-76b2744558a6/0/B178402BEDE3EC5A5EE2E0E71F736A1360C06AF6.mft Manifest number: 0102 Signing time: Sat 06 Dec 2025 17:32:02 +0000 Manifest this update: Sat 06 Dec 2025 17:27:02 +0000 Manifest next update: Tue 09 Dec 2025 20:17:02 +0000 Files and hashes: 1: 3130332e372e3130362e302f32332d3233203d3e20313531353939.roa (hash: gKuzS0cjEmgd3PQlr3qETih9wH6v1uECgkfmF5qpn9s=) 2: B178402BEDE3EC5A5EE2E0E71F736A1360C06AF6.crl (hash: zIv1V3+fMpTdu9UtM0I/nIpq+AbOhHDyXuHOlpvyTMk=) 3: 3130332e372e3130362e302f32342d3234203d3e20313531353939.roa (hash: 0rbZlrsZPTaqVhI90ea5Mcg8UbhZvU1fUTVZXNAKo74=) 4: 3130332e372e3130372e302f32342d3234203d3e20313531353939.roa (hash: ZOp7UUJVVpn+HE+2CW6AOz2wc15ptx3FxJXIlhX1FTo=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/ca124e6a-f51b-46d0-8ea3-76b2744558a6/0/B178402BEDE3EC5A5EE2E0E71F736A1360C06AF6.crl rsync://repo-rpki.idnic.net/repo/ca124e6a-f51b-46d0-8ea3-76b2744558a6/0/B178402BEDE3EC5A5EE2E0E71F736A1360C06AF6.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B178402BEDE3EC5A5EE2E0E71F736A1360C06AF6.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 09 Dec 2025 15:57:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3a:c4:4e:9a:88:1d:b7:97:a4:e4:ea:9d:ee:e6:35:59:f7:6f:11:82 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B178402BEDE3EC5A5EE2E0E71F736A1360C06AF6 Validity Not Before: Dec 6 17:27:02 2025 GMT Not After : Dec 9 20:17:02 2025 GMT Subject: CN=18EC1C0F420380F61E2706255C776DDCE1CD7320 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:9c:38:0a:f0:9f:69:f2:30:ae:79:80:af:a6: 6f:3b:69:eb:bf:1b:07:68:8f:eb:b1:43:41:e4:41: 99:57:be:c0:9c:5b:55:4c:92:32:6c:6c:95:ea:e1: 49:7c:9a:61:5b:ed:e2:ae:af:f9:3b:ad:d7:43:e1: 28:ab:a3:f6:ac:12:24:1b:7d:6e:d4:e7:8c:7d:53: 8b:c5:b3:fc:53:3f:dd:88:19:5c:d4:97:e0:38:95: 8e:0a:57:20:36:18:3e:21:f1:a3:5a:58:d5:40:12: 89:dd:c9:d5:b9:d3:ee:b8:a5:f5:39:7a:cd:bb:ba: 1c:b5:9c:f9:c4:87:d3:64:ca:7a:a0:69:a5:f1:18: 79:32:03:7b:28:18:79:70:c7:97:14:f3:6a:02:32: fd:11:9d:a5:0c:dd:8a:aa:94:29:6d:42:85:11:e5: 71:d6:44:41:45:96:82:0b:1e:48:dd:85:2e:86:00: 40:f5:2e:ee:f6:16:3a:c0:58:44:90:eb:4d:0b:f7: 76:fe:0f:52:30:c6:ba:f3:47:1d:04:61:19:64:42: 6f:ff:95:5a:40:8d:78:09:6c:fc:2b:ed:1b:ff:40: ea:5d:5a:9c:6b:ef:b9:00:86:96:da:66:be:50:c8: b6:95:43:d8:74:af:a2:bb:c4:ac:f5:5c:bb:5c:9e: 2a:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 18:EC:1C:0F:42:03:80:F6:1E:27:06:25:5C:77:6D:DC:E1:CD:73:20 X509v3 Authority Key Identifier: keyid:B1:78:40:2B:ED:E3:EC:5A:5E:E2:E0:E7:1F:73:6A:13:60:C0:6A:F6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/ca124e6a-f51b-46d0-8ea3-76b2744558a6/0/B178402BEDE3EC5A5EE2E0E71F736A1360C06AF6.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B178402BEDE3EC5A5EE2E0E71F736A1360C06AF6.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ca124e6a-f51b-46d0-8ea3-76b2744558a6/0/B178402BEDE3EC5A5EE2E0E71F736A1360C06AF6.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 21:03:53:37:fa:c3:af:a6:0d:0e:f4:78:8e:49:f5:24:11:d7: 11:e7:fa:04:15:87:9f:1c:70:0c:ba:df:a4:54:8c:50:2d:da: 9c:cc:18:ac:2c:da:6d:28:83:ea:cc:cf:e3:9e:10:c9:fb:89: ff:65:67:71:d6:8b:cd:5b:21:cb:04:ea:f6:20:2b:e5:24:d8: 9e:13:4f:d4:51:c9:7f:96:a0:24:6d:9e:ea:d5:1a:f0:e9:37: bd:a0:11:f7:bf:7d:6f:49:c5:97:fd:f9:58:7b:24:c5:4e:d9: d9:40:c3:27:71:8a:5d:ff:dd:60:46:83:c1:65:b8:e4:dd:fe: af:14:16:34:f9:be:16:9e:6a:2a:d1:5d:c7:bc:e3:48:96:c2: b4:2d:79:d6:2a:0a:55:1d:a2:ea:e9:9b:8c:7f:e3:8b:f0:1a: 1f:72:e0:9c:9c:b0:28:ba:71:8a:55:a7:1a:b3:61:52:e0:79: 33:86:94:7b:f7:b5:02:a4:15:b2:b9:eb:7f:dd:fd:e0:6d:4a: 69:0c:f2:3f:ed:52:6c:ef:24:41:03:54:e9:a8:ae:f0:64:dd: d1:28:aa:cc:ab:3f:f3:da:95:57:d5:37:cd:f2:8d:d0:04:0b: f8:e3:fe:f6:17:b9:02:60:84:d4:4e:a6:d1:2e:34:3f:27:62: 3e:54:9f:97 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUOsROmogdt5ek5Oqd7uY1WfdvEYIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjE3ODQwMkJFREUzRUM1QTVFRTJFMEU3MUY3MzZBMTM2 MEMwNkFGNjAeFw0yNTEyMDYxNzI3MDJaFw0yNTEyMDkyMDE3MDJaMDMxMTAvBgNV BAMTKDE4RUMxQzBGNDIwMzgwRjYxRTI3MDYyNTVDNzc2RERDRTFDRDczMjAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCknDgK8J9p8jCueYCvpm87aeu/ Gwdoj+uxQ0HkQZlXvsCcW1VMkjJsbJXq4Ul8mmFb7eKur/k7rddD4Siro/asEiQb fW7U54x9U4vFs/xTP92IGVzUl+A4lY4KVyA2GD4h8aNaWNVAEondydW50+64pfU5 es27uhy1nPnEh9NkynqgaaXxGHkyA3soGHlwx5cU82oCMv0RnaUM3YqqlCltQoUR 5XHWREFFloILHkjdhS6GAED1Lu72FjrAWESQ600L93b+D1IwxrrzRx0EYRlkQm// lVpAjXgJbPwr7Rv/QOpdWpxr77kAhpbaZr5QyLaVQ9h0r6K7xKz1XLtcnioFAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUGOwcD0IDgPYeJwYlXHdt3OHNcyAwHwYDVR0j BBgwFoAUsXhAK+3j7Fpe4uDnH3NqE2DAavYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j YTEyNGU2YS1mNTFiLTQ2ZDAtOGVhMy03NmIyNzQ0NTU4YTYvMC9CMTc4NDAyQkVE RTNFQzVBNUVFMkUwRTcxRjczNkExMzYwQzA2QUY2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQjE3ODQwMkJFREUzRUM1QTVFRTJFMEU3MUY3MzZBMTM2MEMw NkFGNi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vY2ExMjRlNmEtZjUxYi00NmQwLThl YTMtNzZiMjc0NDU1OGE2LzAvQjE3ODQwMkJFREUzRUM1QTVFRTJFMEU3MUY3MzZB MTM2MEMwNkFGNi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACEDUzf6w6+mDQ70eI5J9SQR1xHn+gQVh58c cAy636RUjFAt2pzMGKws2m0og+rMz+OeEMn7if9lZ3HWi81bIcsE6vYgK+Uk2J4T T9RRyX+WoCRtnurVGvDpN72gEfe/fW9JxZf9+Vh7JMVO2dlAwydxil3/3WBGg8Fl uOTd/q8UFjT5vhaeairRXce840iWwrQtedYqClUdourpm4x/44vwGh9y4JycsCi6 cYpVpxqzYVLgeTOGlHv3tQKkFbK563/d/eBtSmkM8j/tUmzvJEEDVOmorvBk3dEo qsyrP/PalVfVN83yjdAEC/jj/vYXuQJghNROptEuND8nYj5Un5c= -----END CERTIFICATE-----Generated at Sat Dec 6 22:52:52 2025 by rpki-client