This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/db016085-2f94-40ff-80ce-ce23d39e65a1/0/B5A68ADE81322F194320BE4302C6897D29D13BDD.mft File: B5A68ADE81322F194320BE4302C6897D29D13BDD.mft (raw, json) Hash identifier: JTUpLf8wMFuAiLHZ+rcdvfv6quWTmbfZZjitDiSHDak= Subject key identifier: BF:70:E8:55:0F:AE:D8:2B:3F:98:F4:64:43:F0:1C:3E:99:06:10:D3 Authority key identifier: B5:A6:8A:DE:81:32:2F:19:43:20:BE:43:02:C6:89:7D:29:D1:3B:DD Certificate issuer: /CN=B5A68ADE81322F194320BE4302C6897D29D13BDD Certificate serial: 385175AB1865F1A0C3F58C26D2582AE4B7AF7CCF Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B5A68ADE81322F194320BE4302C6897D29D13BDD.cer Subject info access: rsync://repo-rpki.idnic.net/repo/db016085-2f94-40ff-80ce-ce23d39e65a1/0/B5A68ADE81322F194320BE4302C6897D29D13BDD.mft Manifest number: D8 Signing time: Fri 05 Dec 2025 18:01:29 +0000 Manifest this update: Fri 05 Dec 2025 17:56:29 +0000 Manifest next update: Tue 09 Dec 2025 02:50:29 +0000 Files and hashes: 1: 3130332e33382e3130362e302f32332d3234203d3e20313532303039.roa (hash: 5ddjKzEo7R2HXRPV5KVablgruigb2N4v7X9sDbCb8p8=) 2: B5A68ADE81322F194320BE4302C6897D29D13BDD.crl (hash: Mn8lhmqhUvan9pSr/sh2ZburPQKMhQAkUOjnod6IdFQ=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/db016085-2f94-40ff-80ce-ce23d39e65a1/0/B5A68ADE81322F194320BE4302C6897D29D13BDD.crl rsync://repo-rpki.idnic.net/repo/db016085-2f94-40ff-80ce-ce23d39e65a1/0/B5A68ADE81322F194320BE4302C6897D29D13BDD.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B5A68ADE81322F194320BE4302C6897D29D13BDD.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 09 Dec 2025 02:50:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 38:51:75:ab:18:65:f1:a0:c3:f5:8c:26:d2:58:2a:e4:b7:af:7c:cf Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B5A68ADE81322F194320BE4302C6897D29D13BDD Validity Not Before: Dec 5 17:56:29 2025 GMT Not After : Dec 9 02:50:29 2025 GMT Subject: CN=BF70E8550FAED82B3F98F46443F01C3E990610D3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:c1:8e:f6:7d:6f:f0:04:da:50:2a:82:3d:86: f4:24:a5:48:a3:e2:e8:22:3e:56:5c:22:56:f6:17: 7f:79:7e:9c:09:b0:44:4f:29:d8:e4:9a:9d:3c:22: d7:18:99:17:6a:ac:6d:1e:6d:5e:aa:15:7e:76:16: 4b:b4:12:ba:c7:5e:a5:1e:51:50:b4:66:73:6b:51: f7:b7:54:d4:cc:78:fc:cf:42:77:ea:6e:d8:8f:85: e4:8c:bf:d5:70:86:e0:e1:e5:71:2b:fc:3d:98:6f: 79:08:f8:7a:e2:4c:a5:6f:ea:a8:fc:5e:75:c7:ff: 16:c1:c5:0f:6d:44:fe:19:90:9f:af:1d:20:7b:ff: 46:dd:bb:60:98:90:49:26:f4:17:92:79:ff:83:e4: ba:c6:a5:e5:e2:09:88:39:ec:20:7d:c8:2d:c6:dc: d2:19:88:14:e8:04:55:a4:4a:6b:6f:bf:cf:6f:9d: b3:e1:f9:21:a8:aa:7e:ac:20:cd:ee:09:7a:60:3b: 32:a4:7e:ef:2c:1e:7b:e8:52:1a:b8:8a:3c:e5:8f: 1d:c8:65:a7:ad:94:a7:91:35:56:e1:30:d1:3f:59: 6f:22:ce:54:64:88:3a:0c:76:8f:25:7e:60:33:a7: 41:97:a2:6a:49:6a:f9:43:b6:b3:25:2c:0a:78:85: 7c:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:70:E8:55:0F:AE:D8:2B:3F:98:F4:64:43:F0:1C:3E:99:06:10:D3 X509v3 Authority Key Identifier: keyid:B5:A6:8A:DE:81:32:2F:19:43:20:BE:43:02:C6:89:7D:29:D1:3B:DD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/db016085-2f94-40ff-80ce-ce23d39e65a1/0/B5A68ADE81322F194320BE4302C6897D29D13BDD.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B5A68ADE81322F194320BE4302C6897D29D13BDD.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/db016085-2f94-40ff-80ce-ce23d39e65a1/0/B5A68ADE81322F194320BE4302C6897D29D13BDD.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4d:b4:3d:53:1c:87:38:f8:bb:67:ca:c3:6b:7e:36:1e:89:c6: c6:88:24:26:62:a9:b0:9d:51:ea:5e:23:76:76:9c:03:ed:1c: 95:ab:b4:d6:62:ef:e7:03:06:99:dc:f4:af:f0:60:53:7f:36: 76:e4:d3:92:5c:ff:10:45:2a:b2:59:74:12:35:3e:36:09:4d: a7:d9:15:28:63:b2:de:0f:45:d3:3d:31:20:48:33:2b:a1:46: 27:35:d4:5f:09:44:41:ef:03:61:af:d3:02:c7:b8:4b:01:97: ff:e3:53:74:05:df:73:27:91:35:99:d1:59:3a:d1:4e:bd:9a: 8e:70:21:0a:87:14:5e:7f:a3:f8:ef:f5:5b:4c:91:71:d6:e0: a8:44:62:d2:7e:fe:ff:78:ea:fe:8d:7e:8f:19:09:64:64:f7: 49:42:29:d6:24:37:d6:70:74:90:5a:27:e4:c5:8a:8b:e8:c2: b7:2a:d4:a9:14:4e:eb:74:57:70:8b:e4:8b:e9:c9:09:97:45: a5:fa:28:76:93:89:b1:fe:78:66:45:4f:39:19:05:49:a2:fb: e8:32:a7:14:99:6b:80:2f:ee:63:aa:59:d2:31:93:01:8a:70: 77:59:1b:63:41:38:cf:8e:ac:3c:e2:ac:66:bb:36:16:a9:ed: c7:60:b5:cb -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUOFF1qxhl8aDD9Ywm0lgq5LevfM8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjVBNjhBREU4MTMyMkYxOTQzMjBCRTQzMDJDNjg5N0Qy OUQxM0JERDAeFw0yNTEyMDUxNzU2MjlaFw0yNTEyMDkwMjUwMjlaMDMxMTAvBgNV BAMTKEJGNzBFODU1MEZBRUQ4MkIzRjk4RjQ2NDQzRjAxQzNFOTkwNjEwRDMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCxwY72fW/wBNpQKoI9hvQkpUij 4ugiPlZcIlb2F395fpwJsERPKdjkmp08ItcYmRdqrG0ebV6qFX52Fku0ErrHXqUe UVC0ZnNrUfe3VNTMePzPQnfqbtiPheSMv9VwhuDh5XEr/D2Yb3kI+HriTKVv6qj8 XnXH/xbBxQ9tRP4ZkJ+vHSB7/0bdu2CYkEkm9BeSef+D5LrGpeXiCYg57CB9yC3G 3NIZiBToBFWkSmtvv89vnbPh+SGoqn6sIM3uCXpgOzKkfu8sHnvoUhq4ijzljx3I ZaetlKeRNVbhMNE/WW8izlRkiDoMdo8lfmAzp0GXompJavlDtrMlLAp4hXwzAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUv3DoVQ+u2Cs/mPRkQ/AcPpkGENMwHwYDVR0j BBgwFoAUtaaK3oEyLxlDIL5DAsaJfSnRO90wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k YjAxNjA4NS0yZjk0LTQwZmYtODBjZS1jZTIzZDM5ZTY1YTEvMC9CNUE2OEFERTgx MzIyRjE5NDMyMEJFNDMwMkM2ODk3RDI5RDEzQkRELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQjVBNjhBREU4MTMyMkYxOTQzMjBCRTQzMDJDNjg5N0QyOUQx M0JERC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZGIwMTYwODUtMmY5NC00MGZmLTgw Y2UtY2UyM2QzOWU2NWExLzAvQjVBNjhBREU4MTMyMkYxOTQzMjBCRTQzMDJDNjg5 N0QyOUQxM0JERC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAE20PVMchzj4u2fKw2t+Nh6JxsaIJCZiqbCd UepeI3Z2nAPtHJWrtNZi7+cDBpnc9K/wYFN/Nnbk05Jc/xBFKrJZdBI1PjYJTafZ FShjst4PRdM9MSBIMyuhRic11F8JREHvA2Gv0wLHuEsBl//jU3QF33MnkTWZ0Vk6 0U69mo5wIQqHFF5/o/jv9VtMkXHW4KhEYtJ+/v946v6Nfo8ZCWRk90lCKdYkN9Zw dJBaJ+TFiovowrcq1KkUTut0V3CL5IvpyQmXRaX6KHaTibH+eGZFTzkZBUmi++gy pxSZa4Av7mOqWdIxkwGKcHdZG2NBOM+OrDzirGa7Nhap7cdgtcs= -----END CERTIFICATE-----Generated at Sun Dec 7 03:28:11 2025 by rpki-client