This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/f8423b8a-fe22-43ad-9507-1a99abba7d94/0/50BD1739D53F832A82B3E86C9535DE6307BE0DAB.mft File: 50BD1739D53F832A82B3E86C9535DE6307BE0DAB.mft (raw, json) Hash identifier: LnL+rbaQMQOvfGJGESd86DUfmhrydsgywi+UCrgCcsQ= Subject key identifier: CF:0E:88:5D:BD:BC:63:F8:AC:8F:73:C4:8B:63:32:17:1A:52:6E:3F Authority key identifier: 50:BD:17:39:D5:3F:83:2A:82:B3:E8:6C:95:35:DE:63:07:BE:0D:AB Certificate issuer: /CN=50BD1739D53F832A82B3E86C9535DE6307BE0DAB Certificate serial: 3CF52E6249157F410D88EA8E66103C90E9F3867F Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/50BD1739D53F832A82B3E86C9535DE6307BE0DAB.cer Subject info access: rsync://repo-rpki.idnic.net/repo/f8423b8a-fe22-43ad-9507-1a99abba7d94/0/50BD1739D53F832A82B3E86C9535DE6307BE0DAB.mft Manifest number: 04DD Signing time: Sat 06 Dec 2025 17:51:30 +0000 Manifest this update: Sat 06 Dec 2025 17:46:30 +0000 Manifest next update: Tue 09 Dec 2025 18:57:30 +0000 Files and hashes: 1: 50BD1739D53F832A82B3E86C9535DE6307BE0DAB.crl (hash: 3oiP4grVB9789chDesa5ckDF4ilmXcGDVAdUyZuS7bM=) 2: 3130332e36352e3231322e302f32322d3234203d3e20313335343439.roa (hash: 7xrQRwovsS9OKMLv2YrykZjU8MnTLBOyQSk5mbbd2RE=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/f8423b8a-fe22-43ad-9507-1a99abba7d94/0/50BD1739D53F832A82B3E86C9535DE6307BE0DAB.crl rsync://repo-rpki.idnic.net/repo/f8423b8a-fe22-43ad-9507-1a99abba7d94/0/50BD1739D53F832A82B3E86C9535DE6307BE0DAB.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/50BD1739D53F832A82B3E86C9535DE6307BE0DAB.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 09 Dec 2025 15:57:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3c:f5:2e:62:49:15:7f:41:0d:88:ea:8e:66:10:3c:90:e9:f3:86:7f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=50BD1739D53F832A82B3E86C9535DE6307BE0DAB Validity Not Before: Dec 6 17:46:30 2025 GMT Not After : Dec 9 18:57:30 2025 GMT Subject: CN=CF0E885DBDBC63F8AC8F73C48B6332171A526E3F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:7e:a9:74:10:a6:50:04:32:d2:bb:5e:64:bd: 89:0e:01:aa:ab:d4:37:02:fb:75:4e:9b:f4:b8:99: 20:33:e1:68:7e:f6:61:8e:1e:d1:b7:ac:70:2a:5c: 62:d0:48:a3:4f:6f:9c:f2:cd:59:1e:5c:1b:b4:aa: f0:20:24:9b:e3:fa:7e:c1:5e:f3:2d:bf:00:a0:00: c9:d9:90:f4:8d:79:83:82:93:85:b1:4d:d1:69:4f: b5:31:89:2b:3d:ee:e1:3f:ef:d9:9b:bf:2c:54:23: 00:4c:b8:50:f7:cf:67:41:88:b4:e2:96:91:1e:87: 6e:e3:58:72:68:6c:df:2f:29:45:4a:87:51:db:79: 3b:98:27:3e:82:78:a4:72:d9:b2:51:cd:51:5f:f4: bb:81:41:dd:fc:10:c8:9c:5a:75:6b:05:2f:51:9e: 4a:4b:cc:e3:7c:74:1b:a1:07:7e:c1:6e:24:6a:13: a2:48:28:8e:5b:80:d9:2b:32:92:9d:dd:6c:e4:a6: ee:76:02:00:0e:ba:ce:ad:ba:19:a3:49:35:60:6f: d8:e5:b4:73:6e:bf:c7:0c:2e:cc:82:76:7e:36:9b: e0:6d:5c:1e:5b:85:61:d1:28:c8:98:7c:bc:87:f6: 65:3c:0b:34:f7:33:f2:4a:8b:e7:02:82:4f:c3:ba: 54:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:0E:88:5D:BD:BC:63:F8:AC:8F:73:C4:8B:63:32:17:1A:52:6E:3F X509v3 Authority Key Identifier: keyid:50:BD:17:39:D5:3F:83:2A:82:B3:E8:6C:95:35:DE:63:07:BE:0D:AB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/f8423b8a-fe22-43ad-9507-1a99abba7d94/0/50BD1739D53F832A82B3E86C9535DE6307BE0DAB.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/50BD1739D53F832A82B3E86C9535DE6307BE0DAB.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f8423b8a-fe22-43ad-9507-1a99abba7d94/0/50BD1739D53F832A82B3E86C9535DE6307BE0DAB.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 72:3d:0f:bd:10:8e:e8:fc:5c:28:bd:c3:61:f1:1e:9b:1b:cd: e9:31:87:0a:45:05:56:01:10:a2:97:f2:4d:83:5e:f8:06:e6: e8:f0:a9:cf:cd:ab:fb:b9:eb:77:18:2a:46:19:ed:75:51:aa: 70:87:8e:c7:75:fc:3e:7e:49:55:85:5e:7c:7e:78:10:44:62: f8:39:14:43:3b:8f:12:b3:98:1a:7f:3b:db:7b:66:8f:61:f4: a6:9a:7c:3c:4f:90:99:30:0b:4f:5d:8a:a4:99:83:6b:0c:14: 3c:8d:d2:62:c3:3c:a4:53:f9:8a:5e:c1:2a:6f:99:97:0e:38: 2c:d5:bd:d6:45:a6:b3:c9:a7:4e:fc:08:d5:1f:b9:eb:a1:0d: b5:e4:a3:c4:56:9a:f9:fa:d0:c7:ee:be:4d:9a:16:a4:39:43: 90:80:cb:5d:8a:1b:e9:16:9a:ff:f5:57:3f:49:fd:36:35:d0: 69:70:21:c1:f0:80:88:33:5f:89:df:53:11:d0:dd:84:1c:7d: 37:b7:f4:7a:c7:ff:76:78:8d:28:21:b9:43:77:a3:dd:d6:8f: d0:eb:c1:94:b4:5f:fb:02:c7:7a:9f:9f:3c:a0:b4:89:a4:92: dc:36:d4:06:ab:bb:f2:45:32:1b:e4:42:bb:36:7d:cd:9d:30: c8:17:4b:35 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUPPUuYkkVf0ENiOqOZhA8kOnzhn8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTBCRDE3MzlENTNGODMyQTgyQjNFODZDOTUzNURFNjMw N0JFMERBQjAeFw0yNTEyMDYxNzQ2MzBaFw0yNTEyMDkxODU3MzBaMDMxMTAvBgNV BAMTKENGMEU4ODVEQkRCQzYzRjhBQzhGNzNDNDhCNjMzMjE3MUE1MjZFM0YwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCSfql0EKZQBDLSu15kvYkOAaqr 1DcC+3VOm/S4mSAz4Wh+9mGOHtG3rHAqXGLQSKNPb5zyzVkeXBu0qvAgJJvj+n7B XvMtvwCgAMnZkPSNeYOCk4WxTdFpT7UxiSs97uE/79mbvyxUIwBMuFD3z2dBiLTi lpEeh27jWHJobN8vKUVKh1HbeTuYJz6CeKRy2bJRzVFf9LuBQd38EMicWnVrBS9R nkpLzON8dBuhB37BbiRqE6JIKI5bgNkrMpKd3Wzkpu52AgAOus6tuhmjSTVgb9jl tHNuv8cMLsyCdn42m+BtXB5bhWHRKMiYfLyH9mU8CzT3M/JKi+cCgk/DulQ1AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUzw6IXb28Y/isj3PEi2MyFxpSbj8wHwYDVR0j BBgwFoAUUL0XOdU/gyqCs+hslTXeYwe+DaswDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m ODQyM2I4YS1mZTIyLTQzYWQtOTUwNy0xYTk5YWJiYTdkOTQvMC81MEJEMTczOUQ1 M0Y4MzJBODJCM0U4NkM5NTM1REU2MzA3QkUwREFCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNTBCRDE3MzlENTNGODMyQTgyQjNFODZDOTUzNURFNjMwN0JF MERBQi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZjg0MjNiOGEtZmUyMi00M2FkLTk1 MDctMWE5OWFiYmE3ZDk0LzAvNTBCRDE3MzlENTNGODMyQTgyQjNFODZDOTUzNURF NjMwN0JFMERBQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHI9D70Qjuj8XCi9w2HxHpsbzekxhwpFBVYB EKKX8k2DXvgG5ujwqc/Nq/u563cYKkYZ7XVRqnCHjsd1/D5+SVWFXnx+eBBEYvg5 FEM7jxKzmBp/O9t7Zo9h9KaafDxPkJkwC09diqSZg2sMFDyN0mLDPKRT+YpewSpv mZcOOCzVvdZFprPJp078CNUfueuhDbXko8RWmvn60Mfuvk2aFqQ5Q5CAy12KG+kW mv/1Vz9J/TY10GlwIcHwgIgzX4nfUxHQ3YQcfTe39HrH/3Z4jSghuUN3o93Wj9Dr wZS0X/sCx3qfnzygtImkktw21Aaru/JFMhvkQrs2fc2dMMgXSzU= -----END CERTIFICATE-----Generated at Sat Dec 6 23:25:05 2025 by rpki-client