This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/e1fd351e-2bd7-4191-9106-53f875016f0e/0/BFE0F552446CE5C263D85414C72E8DD74CBC5EE9.mft File: BFE0F552446CE5C263D85414C72E8DD74CBC5EE9.mft (raw, json) Hash identifier: t/6XqPNqB9tErJyuJHZKHLl2gNlUZj5K8B1J9rkU1Vk= Subject key identifier: 7F:54:18:BA:AA:1E:3E:2F:15:E7:20:4B:5C:0F:60:55:54:95:23:6B Authority key identifier: BF:E0:F5:52:44:6C:E5:C2:63:D8:54:14:C7:2E:8D:D7:4C:BC:5E:E9 Certificate issuer: /CN=BFE0F552446CE5C263D85414C72E8DD74CBC5EE9 Certificate serial: 6DBED8C71FFF97CE91C762E501DF4253D6C239E7 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BFE0F552446CE5C263D85414C72E8DD74CBC5EE9.cer Subject info access: rsync://repo-rpki.idnic.net/repo/e1fd351e-2bd7-4191-9106-53f875016f0e/0/BFE0F552446CE5C263D85414C72E8DD74CBC5EE9.mft Manifest number: 0328 Signing time: Fri 05 Dec 2025 02:41:55 +0000 Manifest this update: Fri 05 Dec 2025 02:36:55 +0000 Manifest next update: Mon 08 Dec 2025 06:33:55 +0000 Files and hashes: 1: BFE0F552446CE5C263D85414C72E8DD74CBC5EE9.crl (hash: vAYXuEhJSdht7OPvwqkQvQLJxjltEfDOG9AtVS3lSdM=) 2: 3130332e3231302e3131392e302f32342d3234203d3e203634303234.roa (hash: Ytr8LGrcIz/5Ip4kUA/P8vtfeNKUZXIGazNVZyLvVDY=) 3: 3130332e3231302e3131372e302f32342d3234203d3e203634303234.roa (hash: rvryrNsii8p5FWEuXQ/ZA1z3QEXlw8MezShqHde9HFo=) 4: 3130332e3231302e3131362e302f32342d3234203d3e203634303234.roa (hash: yMj7uFI234xCcazZ5UUXhaecBl1WVAuun+atXN8IBlQ=) 5: 3130332e3231302e3131382e302f32342d3234203d3e203634303234.roa (hash: tavtmJbAGyPVyKNkS1yIlicvomGLqf7gKFQGKl+8wbg=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/e1fd351e-2bd7-4191-9106-53f875016f0e/0/BFE0F552446CE5C263D85414C72E8DD74CBC5EE9.crl rsync://repo-rpki.idnic.net/repo/e1fd351e-2bd7-4191-9106-53f875016f0e/0/BFE0F552446CE5C263D85414C72E8DD74CBC5EE9.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BFE0F552446CE5C263D85414C72E8DD74CBC5EE9.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 08 Dec 2025 06:33:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6d:be:d8:c7:1f:ff:97:ce:91:c7:62:e5:01:df:42:53:d6:c2:39:e7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BFE0F552446CE5C263D85414C72E8DD74CBC5EE9 Validity Not Before: Dec 5 02:36:55 2025 GMT Not After : Dec 8 06:33:55 2025 GMT Subject: CN=7F5418BAAA1E3E2F15E7204B5C0F60555495236B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:44:9b:a8:42:c6:42:b9:ea:b3:6a:a9:e9:a9: 56:19:f7:0a:ba:2f:9f:f9:bd:2f:c5:16:ea:e6:ec: c3:70:2a:48:2d:b9:86:ed:f9:d8:59:ac:a9:2a:f5: 1a:61:b1:dc:97:bd:3c:dc:73:38:fd:ce:e4:52:84: b3:5c:21:e0:20:88:14:b1:97:49:e6:a2:0c:2e:28: 2b:61:35:96:9b:77:bf:77:54:a4:a8:a1:ca:a1:cb: 35:17:73:6c:fd:1f:c7:eb:54:2b:4f:30:f8:98:af: f0:62:64:b5:80:83:d7:60:38:3b:b2:09:f1:14:f1: 76:7b:50:c7:55:3e:43:c7:71:c1:3b:c9:30:42:6e: a9:c2:6c:74:e5:9d:e4:ad:13:d9:6d:b4:b2:c4:cb: 3f:f4:9f:30:a0:d2:2b:ad:6c:07:40:81:44:db:05: 5b:4c:9e:c0:9c:dc:30:9c:8f:b8:31:58:17:26:eb: 78:fd:72:19:d3:df:6b:89:da:74:02:8e:f4:ab:23: 5e:3c:ae:73:03:75:8f:24:f3:6b:9b:fe:5a:f8:98: 1d:e6:03:11:5a:d7:6b:4c:55:36:a4:92:ad:4e:2b: 90:06:61:83:61:00:4e:09:f2:5b:aa:93:5c:00:4a: e1:42:ee:b3:bb:26:79:46:d1:b8:4e:3a:f3:18:dd: b3:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7F:54:18:BA:AA:1E:3E:2F:15:E7:20:4B:5C:0F:60:55:54:95:23:6B X509v3 Authority Key Identifier: keyid:BF:E0:F5:52:44:6C:E5:C2:63:D8:54:14:C7:2E:8D:D7:4C:BC:5E:E9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/e1fd351e-2bd7-4191-9106-53f875016f0e/0/BFE0F552446CE5C263D85414C72E8DD74CBC5EE9.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BFE0F552446CE5C263D85414C72E8DD74CBC5EE9.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e1fd351e-2bd7-4191-9106-53f875016f0e/0/BFE0F552446CE5C263D85414C72E8DD74CBC5EE9.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 56:7a:19:13:e5:d8:ed:fc:11:38:2c:5a:2b:60:9c:ee:ab:85: 0e:c0:bf:8d:c7:ee:f6:07:e2:3d:1c:a7:63:2f:47:0e:ae:d0: 47:ea:8a:5e:e3:fa:39:2f:36:7b:1e:6b:6f:dd:fb:93:2b:08: ed:36:7a:99:f8:fc:e0:3a:4f:60:31:27:76:ce:93:3b:e9:e2: c6:6f:9f:c7:ef:bd:da:a0:34:64:50:93:5a:41:1b:11:16:ae: 39:ae:b7:d4:44:b2:1b:ca:d3:a4:f8:45:b0:48:45:52:97:95: ee:f0:be:58:7f:ab:bf:31:b6:b6:56:a3:9e:25:fd:99:56:47: 2b:26:d3:11:91:8f:43:dc:ca:31:89:23:d1:13:21:47:eb:5d: 35:fa:24:35:98:60:aa:5f:68:b9:bf:e8:a8:60:06:54:08:dc: db:b7:ff:41:36:fb:26:f0:70:ab:62:7b:d3:54:8f:df:1f:5a: 0e:35:66:8a:7e:a6:e3:f7:07:d1:8a:d1:4b:57:91:1b:d2:b1: a4:0d:7c:06:b6:0f:6a:e7:bb:d1:66:c1:3f:da:d3:78:7e:d3: 22:58:4f:d0:ad:fc:21:74:d4:b1:ca:dd:76:16:2f:74:0d:d3: 67:68:68:e2:37:2b:dd:d6:cc:ec:99:05:26:8c:18:aa:5a:7d: 65:ab:01:25 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUbb7Yxx//l86Rx2LlAd9CU9bCOecwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkZFMEY1NTI0NDZDRTVDMjYzRDg1NDE0QzcyRThERDc0 Q0JDNUVFOTAeFw0yNTEyMDUwMjM2NTVaFw0yNTEyMDgwNjMzNTVaMDMxMTAvBgNV BAMTKDdGNTQxOEJBQUExRTNFMkYxNUU3MjA0QjVDMEY2MDU1NTQ5NTIzNkIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCrRJuoQsZCueqzaqnpqVYZ9wq6 L5/5vS/FFurm7MNwKkgtuYbt+dhZrKkq9RphsdyXvTzcczj9zuRShLNcIeAgiBSx l0nmogwuKCthNZabd793VKSoocqhyzUXc2z9H8frVCtPMPiYr/BiZLWAg9dgODuy CfEU8XZ7UMdVPkPHccE7yTBCbqnCbHTlneStE9lttLLEyz/0nzCg0iutbAdAgUTb BVtMnsCc3DCcj7gxWBcm63j9chnT32uJ2nQCjvSrI148rnMDdY8k82ub/lr4mB3m AxFa12tMVTakkq1OK5AGYYNhAE4J8luqk1wASuFC7rO7JnlG0bhOOvMY3bN/AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUf1QYuqoePi8V5yBLXA9gVVSVI2swHwYDVR0j BBgwFoAUv+D1UkRs5cJj2FQUxy6N10y8XukwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l MWZkMzUxZS0yYmQ3LTQxOTEtOTEwNi01M2Y4NzUwMTZmMGUvMC9CRkUwRjU1MjQ0 NkNFNUMyNjNEODU0MTRDNzJFOERENzRDQkM1RUU5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQkZFMEY1NTI0NDZDRTVDMjYzRDg1NDE0QzcyRThERDc0Q0JD NUVFOS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZTFmZDM1MWUtMmJkNy00MTkxLTkx MDYtNTNmODc1MDE2ZjBlLzAvQkZFMEY1NTI0NDZDRTVDMjYzRDg1NDE0QzcyRThE RDc0Q0JDNUVFOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFZ6GRPl2O38ETgsWitgnO6rhQ7Av43H7vYH 4j0cp2MvRw6u0Efqil7j+jkvNnsea2/d+5MrCO02epn4/OA6T2AxJ3bOkzvp4sZv n8fvvdqgNGRQk1pBGxEWrjmut9REshvK06T4RbBIRVKXle7wvlh/q78xtrZWo54l /ZlWRysm0xGRj0PcyjGJI9ETIUfrXTX6JDWYYKpfaLm/6KhgBlQI3Nu3/0E2+ybw cKtie9NUj98fWg41Zop+puP3B9GK0UtXkRvSsaQNfAa2D2rnu9FmwT/a03h+0yJY T9Ct/CF01LHK3XYWL3QN02doaOI3K93WzOyZBSaMGKpafWWrASU= -----END CERTIFICATE-----Generated at Sat Dec 6 22:53:44 2025 by rpki-client