This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/cdb59a10-58d0-462e-b09b-1919b1c35d72/0/B5F8E7712A83BE2BD78CFC40658C8032F03B6682.mft File: B5F8E7712A83BE2BD78CFC40658C8032F03B6682.mft (raw, json) Hash identifier: ugwo9xRnagDMXvaBxi7CmY4gh+TJp7W2hMSjXWyQfsg= Subject key identifier: D3:B1:49:20:2C:9A:D2:71:93:EA:5F:08:D6:64:90:00:F8:D1:19:85 Authority key identifier: B5:F8:E7:71:2A:83:BE:2B:D7:8C:FC:40:65:8C:80:32:F0:3B:66:82 Certificate issuer: /CN=B5F8E7712A83BE2BD78CFC40658C8032F03B6682 Certificate serial: 55CAFB286F170E33B3483F0ECF18F452A0BC76AB Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B5F8E7712A83BE2BD78CFC40658C8032F03B6682.cer Subject info access: rsync://repo-rpki.idnic.net/repo/cdb59a10-58d0-462e-b09b-1919b1c35d72/0/B5F8E7712A83BE2BD78CFC40658C8032F03B6682.mft Manifest number: 0160 Signing time: Thu 18 Dec 2025 03:51:57 +0000 Manifest this update: Thu 18 Dec 2025 03:46:57 +0000 Manifest next update: Sun 21 Dec 2025 09:25:57 +0000 Files and hashes: 1: B5F8E7712A83BE2BD78CFC40658C8032F03B6682.crl (hash: g17FOCZdaytq2laSFOG1rZZnEbwHV1YoK58SEz/Nn9A=) 2: 3130332e33382e3130382e302f32332d3234203d3e20313531353539.roa (hash: FEHaz0M5qWTtLzVTFwwxjOLyrh7B+FWo8+ydx+5qUx0=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/cdb59a10-58d0-462e-b09b-1919b1c35d72/0/B5F8E7712A83BE2BD78CFC40658C8032F03B6682.crl rsync://repo-rpki.idnic.net/repo/cdb59a10-58d0-462e-b09b-1919b1c35d72/0/B5F8E7712A83BE2BD78CFC40658C8032F03B6682.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B5F8E7712A83BE2BD78CFC40658C8032F03B6682.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 21 Dec 2025 08:59:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 55:ca:fb:28:6f:17:0e:33:b3:48:3f:0e:cf:18:f4:52:a0:bc:76:ab Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B5F8E7712A83BE2BD78CFC40658C8032F03B6682 Validity Not Before: Dec 18 03:46:57 2025 GMT Not After : Dec 21 09:25:57 2025 GMT Subject: CN=D3B149202C9AD27193EA5F08D6649000F8D11985 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:96:ec:31:9c:dd:4d:59:f7:6f:cf:a4:fc:c2: 2b:77:50:9f:0c:a0:41:3a:07:aa:4e:22:a9:32:ee: 0b:ab:6c:92:d4:0c:b8:fd:88:25:94:47:fa:22:6f: fd:95:bc:87:83:21:34:aa:9a:fb:38:bc:32:03:6e: ba:5c:f6:50:15:3d:0c:0e:9a:be:7d:a1:ff:c8:bf: fa:26:d0:43:b5:a7:78:3a:0d:81:2b:bb:f1:66:6f: 8a:51:41:f1:07:da:b0:d0:7f:70:5e:23:03:c3:32: 1b:60:fa:e8:5c:19:ca:e2:7d:15:35:2b:6f:81:dc: 2b:cf:1b:3d:e0:bb:4a:5e:23:cb:20:b1:da:cf:8e: c0:d6:55:ab:04:b8:22:3a:bd:2b:3e:09:9d:d6:4a: 03:f1:fc:cf:b5:87:22:60:84:4b:6d:74:8c:1d:b5: 18:ec:82:9c:3c:dd:73:b5:9d:98:ea:44:ad:d1:42: 88:fa:2a:a7:46:d8:5a:1b:fd:09:11:a6:89:da:0b: 12:04:67:31:13:a8:e2:07:37:7b:1d:bf:fa:66:b0: fd:d7:9b:f1:3d:66:c5:8b:6c:07:e2:c9:6b:ff:fd: 7e:fc:66:08:c0:b3:65:cf:92:3b:af:44:ed:9d:c8: 1c:88:c3:61:8a:76:2b:d2:ea:e5:eb:15:e6:8f:7c: b3:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:B1:49:20:2C:9A:D2:71:93:EA:5F:08:D6:64:90:00:F8:D1:19:85 X509v3 Authority Key Identifier: keyid:B5:F8:E7:71:2A:83:BE:2B:D7:8C:FC:40:65:8C:80:32:F0:3B:66:82 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/cdb59a10-58d0-462e-b09b-1919b1c35d72/0/B5F8E7712A83BE2BD78CFC40658C8032F03B6682.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B5F8E7712A83BE2BD78CFC40658C8032F03B6682.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/cdb59a10-58d0-462e-b09b-1919b1c35d72/0/B5F8E7712A83BE2BD78CFC40658C8032F03B6682.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 12:22:ac:02:3e:b8:69:01:92:a7:96:ef:ac:e8:6d:3f:56:81: 8c:90:9a:84:26:87:3a:a0:c8:94:c1:bb:11:1c:76:cc:9c:f9: 61:4a:c0:4e:f7:e1:ba:9f:a8:74:99:b4:13:59:7c:ab:19:89: 20:87:4e:ec:f7:2f:ff:45:09:66:a1:25:53:78:6a:b0:de:63: 4b:71:59:f2:73:df:d8:74:63:54:07:97:66:d0:63:4f:96:a7: 81:be:48:10:2b:10:94:54:16:3f:c2:5c:97:83:4b:12:a1:02: 48:cd:13:ff:97:12:24:c2:d9:75:d5:7c:e8:11:6e:d7:93:26: 74:76:0f:ee:85:f1:19:22:7d:f1:ea:23:4c:cc:50:59:d9:52: 5f:d4:69:e6:02:a6:d6:40:d2:b1:94:03:d4:8c:a4:b5:8f:12: ac:3c:4b:5a:67:79:97:5d:24:f9:4d:38:cc:06:f9:28:a0:3a: 97:6d:3d:a7:52:b6:e3:a7:14:2a:e7:fe:75:30:3f:65:e8:48: d3:d5:d6:40:0f:35:a5:c3:5e:90:29:e4:ed:5f:3b:d3:12:fd: 47:ac:29:2e:0a:d2:68:18:f8:18:da:71:ea:10:ba:ff:59:6c: 73:06:53:9e:a0:da:bc:bf:4b:d5:92:73:79:73:41:79:5f:a3: 4e:25:94:8d -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUVcr7KG8XDjOzSD8Ozxj0UqC8dqswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjVGOEU3NzEyQTgzQkUyQkQ3OENGQzQwNjU4QzgwMzJG MDNCNjY4MjAeFw0yNTEyMTgwMzQ2NTdaFw0yNTEyMjEwOTI1NTdaMDMxMTAvBgNV BAMTKEQzQjE0OTIwMkM5QUQyNzE5M0VBNUYwOEQ2NjQ5MDAwRjhEMTE5ODUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC1luwxnN1NWfdvz6T8wit3UJ8M oEE6B6pOIqky7gurbJLUDLj9iCWUR/oib/2VvIeDITSqmvs4vDIDbrpc9lAVPQwO mr59of/Iv/om0EO1p3g6DYEru/Fmb4pRQfEH2rDQf3BeIwPDMhtg+uhcGcrifRU1 K2+B3CvPGz3gu0peI8sgsdrPjsDWVasEuCI6vSs+CZ3WSgPx/M+1hyJghEttdIwd tRjsgpw83XO1nZjqRK3RQoj6KqdG2Fob/QkRponaCxIEZzETqOIHN3sdv/pmsP3X m/E9ZsWLbAfiyWv//X78ZgjAs2XPkjuvRO2dyByIw2GKdivS6uXrFeaPfLOdAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU07FJICya0nGT6l8I1mSQAPjRGYUwHwYDVR0j BBgwFoAUtfjncSqDvivXjPxAZYyAMvA7ZoIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j ZGI1OWExMC01OGQwLTQ2MmUtYjA5Yi0xOTE5YjFjMzVkNzIvMC9CNUY4RTc3MTJB ODNCRTJCRDc4Q0ZDNDA2NThDODAzMkYwM0I2NjgyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQjVGOEU3NzEyQTgzQkUyQkQ3OENGQzQwNjU4QzgwMzJGMDNC NjY4Mi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vY2RiNTlhMTAtNThkMC00NjJlLWIw OWItMTkxOWIxYzM1ZDcyLzAvQjVGOEU3NzEyQTgzQkUyQkQ3OENGQzQwNjU4Qzgw MzJGMDNCNjY4Mi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABIirAI+uGkBkqeW76zobT9WgYyQmoQmhzqg yJTBuxEcdsyc+WFKwE734bqfqHSZtBNZfKsZiSCHTuz3L/9FCWahJVN4arDeY0tx WfJz39h0Y1QHl2bQY0+Wp4G+SBArEJRUFj/CXJeDSxKhAkjNE/+XEiTC2XXVfOgR bteTJnR2D+6F8RkiffHqI0zMUFnZUl/UaeYCptZA0rGUA9SMpLWPEqw8S1pneZdd JPlNOMwG+SigOpdtPadStuOnFCrn/nUwP2XoSNPV1kAPNaXDXpAp5O1fO9MS/Ues KS4K0mgY+BjaceoQuv9ZbHMGU56g2ry/S9WSc3lzQXlfo04llI0= -----END CERTIFICATE-----Generated at Thu Dec 18 07:48:03 2025 by rpki-client