This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/f38a2319-b4ff-4973-8da9-c41ad2f731f3/0/BE69E9E299CE2DFF176C7EFAB145442D3C790DC8.mft File: BE69E9E299CE2DFF176C7EFAB145442D3C790DC8.mft (raw, json) Hash identifier: S5uILlnuYL6QMxMGcVvpYK9vg3k5DoN6uIfXxpLDW2A= Subject key identifier: 90:9C:A7:9F:6C:BB:3B:63:24:64:73:E2:C1:37:78:FC:97:69:07:02 Authority key identifier: BE:69:E9:E2:99:CE:2D:FF:17:6C:7E:FA:B1:45:44:2D:3C:79:0D:C8 Certificate issuer: /CN=BE69E9E299CE2DFF176C7EFAB145442D3C790DC8 Certificate serial: 36AB14A872404280F7520D6748BDCEBFAC29ADEC Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BE69E9E299CE2DFF176C7EFAB145442D3C790DC8.cer Subject info access: rsync://repo-rpki.idnic.net/repo/f38a2319-b4ff-4973-8da9-c41ad2f731f3/0/BE69E9E299CE2DFF176C7EFAB145442D3C790DC8.mft Manifest number: 01E9 Signing time: Fri 05 Dec 2025 21:21:47 +0000 Manifest this update: Fri 05 Dec 2025 21:16:47 +0000 Manifest next update: Tue 09 Dec 2025 02:44:47 +0000 Files and hashes: 1: 3230322e38302e3131322e302f32302d3234203d3e203233363939.roa (hash: gm33V+FpkTZp4vhfMn0R1HmBUVRHmRHaTZRlyRWh1Lc=) 2: BE69E9E299CE2DFF176C7EFAB145442D3C790DC8.crl (hash: 4IEYYGPyFZT339+vAJKSGjCgMIKUela/U9zLvZUE8qI=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/f38a2319-b4ff-4973-8da9-c41ad2f731f3/0/BE69E9E299CE2DFF176C7EFAB145442D3C790DC8.crl rsync://repo-rpki.idnic.net/repo/f38a2319-b4ff-4973-8da9-c41ad2f731f3/0/BE69E9E299CE2DFF176C7EFAB145442D3C790DC8.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BE69E9E299CE2DFF176C7EFAB145442D3C790DC8.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 09 Dec 2025 02:44:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 36:ab:14:a8:72:40:42:80:f7:52:0d:67:48:bd:ce:bf:ac:29:ad:ec Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BE69E9E299CE2DFF176C7EFAB145442D3C790DC8 Validity Not Before: Dec 5 21:16:47 2025 GMT Not After : Dec 9 02:44:47 2025 GMT Subject: CN=909CA79F6CBB3B63246473E2C13778FC97690702 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:c5:87:cf:37:0c:90:5f:86:f0:4a:af:54:27: 4f:97:82:b3:0d:5b:2a:79:e3:e1:16:f2:58:2f:39: b0:4e:37:90:ab:b4:59:df:94:f4:ea:c0:07:65:c1: a8:2b:98:24:d2:69:e4:85:65:ab:ac:43:7b:0e:35: 61:b5:a5:a7:51:cb:11:46:bd:6f:04:c7:76:50:5b: c5:79:4e:3b:23:df:d8:b2:90:e2:84:c9:20:a9:79: 63:7b:30:a4:1f:cd:db:30:ce:40:9b:20:97:9b:a0: c9:d2:c9:33:89:e7:ff:58:21:58:4b:06:43:44:54: b7:3d:2a:55:9b:9b:d6:1c:35:d5:15:b8:47:0b:6a: ca:b7:54:34:d2:4b:01:16:35:5b:3a:51:3c:8a:de: 4c:e6:f1:14:29:eb:b3:9e:f2:6c:9e:22:4d:78:86: d0:79:f7:60:9a:60:d6:72:53:03:d5:fa:81:7f:1a: 4c:f4:17:6f:4b:9d:e2:e7:97:03:1b:c5:92:c6:21: de:1a:39:62:6a:33:61:d4:83:3d:16:b9:c5:b0:b2: 09:6d:c3:64:1b:bd:0c:07:89:43:e4:0c:06:ba:12: 29:24:e9:ef:a3:73:05:ec:2d:5c:ff:51:91:1f:c1: 50:a7:06:bb:af:ae:d5:d6:4d:54:5c:58:d8:4d:a8: 8f:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 90:9C:A7:9F:6C:BB:3B:63:24:64:73:E2:C1:37:78:FC:97:69:07:02 X509v3 Authority Key Identifier: keyid:BE:69:E9:E2:99:CE:2D:FF:17:6C:7E:FA:B1:45:44:2D:3C:79:0D:C8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/f38a2319-b4ff-4973-8da9-c41ad2f731f3/0/BE69E9E299CE2DFF176C7EFAB145442D3C790DC8.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BE69E9E299CE2DFF176C7EFAB145442D3C790DC8.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f38a2319-b4ff-4973-8da9-c41ad2f731f3/0/BE69E9E299CE2DFF176C7EFAB145442D3C790DC8.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2c:5d:a7:d3:c4:f5:29:70:c9:0b:6a:56:44:9e:fc:6e:02:cf: 0c:7e:be:e2:f7:b9:15:ac:4d:79:d0:3c:30:2f:9b:28:d6:08: 3e:2f:3f:cc:d8:30:ae:ae:29:99:cf:df:02:9b:6f:82:08:74: d3:ee:ab:c6:67:f6:09:ec:a2:30:f7:4d:56:c5:04:6a:d9:f6: 24:30:e0:38:d3:2c:95:a8:81:e7:48:6d:39:97:09:f1:61:9e: d5:2f:9e:8e:da:bf:54:dc:63:13:f1:ba:2f:db:65:84:ed:03: f0:be:55:5e:f9:c9:92:ce:bb:0f:67:fe:74:d9:57:d8:16:04: 8a:69:2a:04:42:c2:85:3f:2a:a9:e4:31:db:ea:3b:41:f6:9c: 73:0f:05:24:52:14:52:ec:9a:45:a3:73:ed:18:d3:e8:6f:03: 1c:62:36:82:34:02:58:79:8e:5c:05:7a:42:ee:11:3e:20:cb: 84:41:7f:58:3f:2f:18:da:44:04:59:d3:93:8b:a8:79:e7:a8: d9:e9:75:6f:36:d3:df:13:08:27:f9:ce:a9:63:75:84:02:71: ba:69:a7:42:7e:c8:3c:05:a0:77:35:66:55:09:4a:cd:63:ed: 41:e2:fa:9a:11:fd:87:f4:aa:94:4f:79:cd:e4:14:99:90:0d: 9f:4d:f6:83 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUNqsUqHJAQoD3Ug1nSL3Ov6wprewwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkU2OUU5RTI5OUNFMkRGRjE3NkM3RUZBQjE0NTQ0MkQz Qzc5MERDODAeFw0yNTEyMDUyMTE2NDdaFw0yNTEyMDkwMjQ0NDdaMDMxMTAvBgNV BAMTKDkwOUNBNzlGNkNCQjNCNjMyNDY0NzNFMkMxMzc3OEZDOTc2OTA3MDIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDoxYfPNwyQX4bwSq9UJ0+XgrMN Wyp54+EW8lgvObBON5CrtFnflPTqwAdlwagrmCTSaeSFZausQ3sONWG1padRyxFG vW8Ex3ZQW8V5Tjsj39iykOKEySCpeWN7MKQfzdswzkCbIJeboMnSyTOJ5/9YIVhL BkNEVLc9KlWbm9YcNdUVuEcLasq3VDTSSwEWNVs6UTyK3kzm8RQp67Oe8myeIk14 htB592CaYNZyUwPV+oF/Gkz0F29LneLnlwMbxZLGId4aOWJqM2HUgz0WucWwsglt w2QbvQwHiUPkDAa6Eikk6e+jcwXsLVz/UZEfwVCnBruvrtXWTVRcWNhNqI9nAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUkJynn2y7O2MkZHPiwTd4/JdpBwIwHwYDVR0j BBgwFoAUvmnp4pnOLf8XbH76sUVELTx5DcgwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m MzhhMjMxOS1iNGZmLTQ5NzMtOGRhOS1jNDFhZDJmNzMxZjMvMC9CRTY5RTlFMjk5 Q0UyREZGMTc2QzdFRkFCMTQ1NDQyRDNDNzkwREM4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQkU2OUU5RTI5OUNFMkRGRjE3NkM3RUZBQjE0NTQ0MkQzQzc5 MERDOC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZjM4YTIzMTktYjRmZi00OTczLThk YTktYzQxYWQyZjczMWYzLzAvQkU2OUU5RTI5OUNFMkRGRjE3NkM3RUZBQjE0NTQ0 MkQzQzc5MERDOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACxdp9PE9SlwyQtqVkSe/G4Czwx+vuL3uRWs TXnQPDAvmyjWCD4vP8zYMK6uKZnP3wKbb4IIdNPuq8Zn9gnsojD3TVbFBGrZ9iQw 4DjTLJWogedIbTmXCfFhntUvno7av1TcYxPxui/bZYTtA/C+VV75yZLOuw9n/nTZ V9gWBIppKgRCwoU/KqnkMdvqO0H2nHMPBSRSFFLsmkWjc+0Y0+hvAxxiNoI0Alh5 jlwFekLuET4gy4RBf1g/LxjaRARZ05OLqHnnqNnpdW82098TCCf5zqljdYQCcbpp p0J+yDwFoHc1ZlUJSs1j7UHi+poR/Yf0qpRPec3kFJmQDZ9N9oM= -----END CERTIFICATE-----Generated at Sun Dec 7 02:07:04 2025 by rpki-client