This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/db8be905-f296-45d1-a879-4a4de52cb2d6/0/B2D1CBD015A419010845E6F56D8385C8647B5390.mft File: B2D1CBD015A419010845E6F56D8385C8647B5390.mft (raw, json) Hash identifier: 13IvOiRqiusEtw892ztzZWW1fDShAN81a7V0vebm1is= Subject key identifier: D8:0A:62:34:45:68:D3:38:2D:3E:6A:10:65:BD:F4:55:4A:47:D6:56 Authority key identifier: B2:D1:CB:D0:15:A4:19:01:08:45:E6:F5:6D:83:85:C8:64:7B:53:90 Certificate issuer: /CN=B2D1CBD015A419010845E6F56D8385C8647B5390 Certificate serial: 7BD1D9E1E846658700F436B1A11C05C31AAC041E Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B2D1CBD015A419010845E6F56D8385C8647B5390.cer Subject info access: rsync://repo-rpki.idnic.net/repo/db8be905-f296-45d1-a879-4a4de52cb2d6/0/B2D1CBD015A419010845E6F56D8385C8647B5390.mft Manifest number: 02DE Signing time: Fri 05 Dec 2025 15:42:12 +0000 Manifest this update: Fri 05 Dec 2025 15:37:12 +0000 Manifest next update: Mon 08 Dec 2025 17:42:12 +0000 Files and hashes: 1: 3130332e3135332e3133342e302f32342d3234203d3e20313430343634.roa (hash: cn1hAJHYGCMSOghgviiiSzFiPXYh8mLQKkzicGhK/aE=) 2: 3130332e3135332e3133342e302f32332d3233203d3e20313430343634.roa (hash: bAHbnIP0Wicgt74YcQMMyo48qnOQtogRe4ndD6XNQrg=) 3: B2D1CBD015A419010845E6F56D8385C8647B5390.crl (hash: jfhS7d0/A0SJMO5qHIo/y0Z8rpbZuUS7KlqKb8mfAu8=) 4: 323430363a343534303a3a2f33322d3332203d3e20313430343634.roa (hash: fW6me2gng7+RFAgwfv3lcoF9Ov98BB9yIZ6/btVVKsw=) 5: 3130332e3135332e3133352e302f32342d3234203d3e20313430343634.roa (hash: oUlQyF3I0zLJjLl9EcH8NBVRAz863HrDlDUllspbny0=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/db8be905-f296-45d1-a879-4a4de52cb2d6/0/B2D1CBD015A419010845E6F56D8385C8647B5390.crl rsync://repo-rpki.idnic.net/repo/db8be905-f296-45d1-a879-4a4de52cb2d6/0/B2D1CBD015A419010845E6F56D8385C8647B5390.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B2D1CBD015A419010845E6F56D8385C8647B5390.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 08 Dec 2025 17:42:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7b:d1:d9:e1:e8:46:65:87:00:f4:36:b1:a1:1c:05:c3:1a:ac:04:1e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B2D1CBD015A419010845E6F56D8385C8647B5390 Validity Not Before: Dec 5 15:37:12 2025 GMT Not After : Dec 8 17:42:12 2025 GMT Subject: CN=D80A62344568D3382D3E6A1065BDF4554A47D656 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:64:59:18:2b:f2:7f:0a:cd:74:3d:c9:e1:9a: 51:d6:ec:dc:0d:3c:bf:6f:46:da:24:83:f4:e4:8a: f8:5a:54:0d:ae:2b:8d:ca:fa:33:5c:42:65:a6:48: fb:a7:4a:f2:a1:f0:74:f1:02:16:26:44:5d:d0:83: 6d:48:44:f5:13:a9:d0:87:72:4f:11:ed:8d:78:b7: fd:aa:53:8e:52:ac:fd:f6:29:51:ac:8b:d4:e8:da: 85:2d:61:0c:fb:d7:c6:21:73:81:fc:cd:a4:48:4f: 26:68:bb:54:84:6e:c4:5b:6c:12:79:7d:1d:66:09: d6:c3:cb:a5:2a:bd:4d:2d:81:89:bc:50:d1:47:16: a0:5b:35:b3:fb:32:42:7d:2a:77:de:98:d2:3a:31: bb:f9:09:17:ab:ce:20:91:78:d0:b4:38:06:a4:9f: dc:e9:8c:bd:0c:27:8c:ed:6b:bf:84:84:f1:26:57: 21:8f:b3:d9:f0:f2:2a:8c:f2:b6:20:02:2d:64:46: 0f:a1:54:4c:34:85:58:4b:6d:3f:c9:c2:d5:68:68: f2:e4:db:91:80:8f:69:a4:ff:1d:61:70:1e:7c:f1: 54:84:5a:cf:18:fc:77:b7:3f:6c:29:9a:7d:ae:4f: 21:83:97:0e:8e:12:1a:c3:a9:a0:74:52:45:5b:8c: 14:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:0A:62:34:45:68:D3:38:2D:3E:6A:10:65:BD:F4:55:4A:47:D6:56 X509v3 Authority Key Identifier: keyid:B2:D1:CB:D0:15:A4:19:01:08:45:E6:F5:6D:83:85:C8:64:7B:53:90 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/db8be905-f296-45d1-a879-4a4de52cb2d6/0/B2D1CBD015A419010845E6F56D8385C8647B5390.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B2D1CBD015A419010845E6F56D8385C8647B5390.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/db8be905-f296-45d1-a879-4a4de52cb2d6/0/B2D1CBD015A419010845E6F56D8385C8647B5390.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1f:c9:d4:f7:41:33:51:57:88:22:3d:f1:c9:65:bb:b0:31:e5: ee:ba:b1:d8:4f:bd:f4:59:b5:e3:ff:a9:53:59:d9:61:98:2d: 32:ae:64:b7:3f:91:0e:46:4f:e0:36:87:a6:ac:67:dc:4f:a8: 4b:19:a4:00:9d:5d:05:de:f0:57:49:f1:35:9d:4d:cc:a5:6d: 63:3b:f9:dc:e0:b6:fe:55:a6:6f:fa:ad:6a:8a:f6:0b:a1:30: 83:20:0a:c6:a4:4c:f8:03:d8:9d:db:ab:15:ba:fc:59:7f:b1: 09:48:fe:2d:a2:f1:77:8e:7d:a5:c4:a3:fc:be:fc:48:99:1c: 6e:bb:43:3b:f8:a7:e2:78:30:85:f2:d5:a5:c7:2d:b5:0b:c5: 60:13:64:b4:f5:fd:92:d3:a4:ed:08:68:3e:ea:80:41:bf:14: 9f:14:fe:e5:1c:b9:8c:e0:14:64:9c:5f:94:15:bc:b9:57:19: a6:a2:31:fd:77:7b:e7:2f:3b:4d:be:ed:e0:84:81:3c:55:ae: f7:bd:15:5e:d4:87:1e:9e:46:86:63:fe:cb:a8:e2:b5:5b:43: 1a:4e:b1:3d:0a:96:01:e6:2d:1b:61:d8:ba:52:23:73:13:96: b0:39:09:f7:8f:2f:48:07:28:46:3a:22:ad:fb:e4:dc:58:bb: bc:04:8a:fb -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUe9HZ4ehGZYcA9DaxoRwFwxqsBB4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjJEMUNCRDAxNUE0MTkwMTA4NDVFNkY1NkQ4Mzg1Qzg2 NDdCNTM5MDAeFw0yNTEyMDUxNTM3MTJaFw0yNTEyMDgxNzQyMTJaMDMxMTAvBgNV BAMTKEQ4MEE2MjM0NDU2OEQzMzgyRDNFNkExMDY1QkRGNDU1NEE0N0Q2NTYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC4ZFkYK/J/Cs10PcnhmlHW7NwN PL9vRtokg/TkivhaVA2uK43K+jNcQmWmSPunSvKh8HTxAhYmRF3Qg21IRPUTqdCH ck8R7Y14t/2qU45SrP32KVGsi9To2oUtYQz718Yhc4H8zaRITyZou1SEbsRbbBJ5 fR1mCdbDy6UqvU0tgYm8UNFHFqBbNbP7MkJ9KnfemNI6Mbv5CRerziCReNC0OAak n9zpjL0MJ4zta7+EhPEmVyGPs9nw8iqM8rYgAi1kRg+hVEw0hVhLbT/JwtVoaPLk 25GAj2mk/x1hcB588VSEWs8Y/He3P2wpmn2uTyGDlw6OEhrDqaB0UkVbjBSvAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU2ApiNEVo0zgtPmoQZb30VUpH1lYwHwYDVR0j BBgwFoAUstHL0BWkGQEIReb1bYOFyGR7U5AwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k YjhiZTkwNS1mMjk2LTQ1ZDEtYTg3OS00YTRkZTUyY2IyZDYvMC9CMkQxQ0JEMDE1 QTQxOTAxMDg0NUU2RjU2RDgzODVDODY0N0I1MzkwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQjJEMUNCRDAxNUE0MTkwMTA4NDVFNkY1NkQ4Mzg1Qzg2NDdC NTM5MC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZGI4YmU5MDUtZjI5Ni00NWQxLWE4 NzktNGE0ZGU1MmNiMmQ2LzAvQjJEMUNCRDAxNUE0MTkwMTA4NDVFNkY1NkQ4Mzg1 Qzg2NDdCNTM5MC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAB/J1PdBM1FXiCI98cllu7Ax5e66sdhPvfRZ teP/qVNZ2WGYLTKuZLc/kQ5GT+A2h6asZ9xPqEsZpACdXQXe8FdJ8TWdTcylbWM7 +dzgtv5Vpm/6rWqK9guhMIMgCsakTPgD2J3bqxW6/Fl/sQlI/i2i8XeOfaXEo/y+ /EiZHG67Qzv4p+J4MIXy1aXHLbULxWATZLT1/ZLTpO0IaD7qgEG/FJ8U/uUcuYzg FGScX5QVvLlXGaaiMf13e+cvO02+7eCEgTxVrve9FV7Uhx6eRoZj/suo4rVbQxpO sT0KlgHmLRth2LpSI3MTlrA5CfePL0gHKEY6Iq375NxYu7wEivs= -----END CERTIFICATE-----Generated at Sun Dec 7 03:13:13 2025 by rpki-client