This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/f8fca42f-836a-40ec-a76f-b604711f3364/0/BEA8C6D5F4B424A9EABFC2F68F71B0505B7E3641.mft File: BEA8C6D5F4B424A9EABFC2F68F71B0505B7E3641.mft (raw, json) Hash identifier: IRYuyhnOViDzELmtSlfgfxPhqblL+o2l8bQ2q/dHVI0= Subject key identifier: C6:D2:39:9D:82:19:6A:AD:60:2E:40:CC:C7:BA:40:EC:2B:1E:9B:46 Authority key identifier: BE:A8:C6:D5:F4:B4:24:A9:EA:BF:C2:F6:8F:71:B0:50:5B:7E:36:41 Certificate issuer: /CN=BEA8C6D5F4B424A9EABFC2F68F71B0505B7E3641 Certificate serial: 7A3B32886B3DADC6DDD3CFA09E1A77B026A3F2DF Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BEA8C6D5F4B424A9EABFC2F68F71B0505B7E3641.cer Subject info access: rsync://repo-rpki.idnic.net/repo/f8fca42f-836a-40ec-a76f-b604711f3364/0/BEA8C6D5F4B424A9EABFC2F68F71B0505B7E3641.mft Manifest number: FA Signing time: Sat 06 Dec 2025 07:41:57 +0000 Manifest this update: Sat 06 Dec 2025 07:36:57 +0000 Manifest next update: Tue 09 Dec 2025 18:20:57 +0000 Files and hashes: 1: BEA8C6D5F4B424A9EABFC2F68F71B0505B7E3641.crl (hash: FlXoF2uvdPlPKRP5PVxS5g5DuRAxg8jfkFI6/QZb2xo=) 2: 3130332e35382e3134362e302f32342d3234203d3e20313333383335.roa (hash: RZTZbSxb2PRYobjmO198JK6HQHDPb0oKEJ95ldcpw5Y=) 3: 323030313a6466343a353430303a3a2f34382d3438203d3e20313333383335.roa (hash: WVWkZoK2slUp5FXFBlvV70xmkvB8Xi8yr0ufb6QFcL0=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/f8fca42f-836a-40ec-a76f-b604711f3364/0/BEA8C6D5F4B424A9EABFC2F68F71B0505B7E3641.crl rsync://repo-rpki.idnic.net/repo/f8fca42f-836a-40ec-a76f-b604711f3364/0/BEA8C6D5F4B424A9EABFC2F68F71B0505B7E3641.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BEA8C6D5F4B424A9EABFC2F68F71B0505B7E3641.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 09 Dec 2025 15:57:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7a:3b:32:88:6b:3d:ad:c6:dd:d3:cf:a0:9e:1a:77:b0:26:a3:f2:df Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BEA8C6D5F4B424A9EABFC2F68F71B0505B7E3641 Validity Not Before: Dec 6 07:36:57 2025 GMT Not After : Dec 9 18:20:57 2025 GMT Subject: CN=C6D2399D82196AAD602E40CCC7BA40EC2B1E9B46 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ef:84:48:95:92:cf:6b:84:81:74:b0:f0:5a:3a: a0:9a:07:54:e9:b4:15:a9:6b:86:4b:1e:fc:f7:4e: f9:d2:ca:6a:1f:99:1c:0c:c0:48:24:57:ad:c5:c5: af:bd:57:af:48:8b:54:7b:b3:e2:cf:ca:54:9a:99: 67:62:46:e8:d3:e5:f1:02:2f:ff:c3:1b:ae:e6:6b: cd:df:99:b7:2c:8e:f9:3f:dc:62:0c:e1:b6:92:3b: db:7b:fe:30:c2:5c:19:e2:bb:a1:a9:5e:ae:f2:b6: 36:c3:33:60:42:f4:96:07:98:4c:e6:fa:56:fc:51: 1e:43:7f:5e:be:0f:0c:e6:45:7f:fc:a7:74:5c:01: 63:9b:5b:73:5e:09:57:c4:f2:33:bf:26:37:ec:62: fb:31:63:30:4e:b4:3a:ca:e6:0d:c2:ee:fa:34:75: 97:e3:c8:01:e7:7c:be:09:4f:61:3c:27:93:a3:93: 9c:b9:34:88:bc:f5:c9:8d:1f:d5:de:a8:fa:a2:ca: 99:d1:b0:eb:85:0a:43:61:c1:1c:51:d3:ba:c7:c7: f7:ab:db:20:f5:06:29:d1:56:75:04:6a:33:a4:9d: 5e:fe:f8:0d:6f:b6:5d:3c:ff:82:d6:f8:b8:11:69: e6:f3:cc:c2:36:fa:67:c1:ba:93:23:82:9b:1d:ae: 34:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C6:D2:39:9D:82:19:6A:AD:60:2E:40:CC:C7:BA:40:EC:2B:1E:9B:46 X509v3 Authority Key Identifier: keyid:BE:A8:C6:D5:F4:B4:24:A9:EA:BF:C2:F6:8F:71:B0:50:5B:7E:36:41 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/f8fca42f-836a-40ec-a76f-b604711f3364/0/BEA8C6D5F4B424A9EABFC2F68F71B0505B7E3641.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BEA8C6D5F4B424A9EABFC2F68F71B0505B7E3641.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f8fca42f-836a-40ec-a76f-b604711f3364/0/BEA8C6D5F4B424A9EABFC2F68F71B0505B7E3641.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 48:03:d9:3d:39:bc:36:00:3f:d9:f2:d4:09:b2:a3:49:39:9d: 16:49:32:d2:3f:b0:c9:3e:aa:16:b1:75:d4:4e:8b:30:46:33: 58:a3:b5:ce:8b:e3:12:8a:a8:4a:f1:44:ce:a6:ce:f1:3c:04: ef:27:cf:25:dc:71:60:69:03:a8:a9:57:73:1b:5d:60:53:70: c3:de:29:dd:fb:6b:43:d0:b3:55:45:c6:1a:76:42:73:43:14: 36:b7:82:b6:8a:25:80:b5:33:61:b9:49:0b:fd:5e:51:e2:3a: 15:1d:16:bd:7f:5b:71:b9:41:79:7e:4e:d7:10:08:7e:6a:44: f7:0e:72:ca:88:d7:e0:7a:00:04:a8:ca:56:94:a0:06:06:0b: 2e:2b:33:83:2e:ac:a8:71:01:fb:1d:20:eb:c0:36:81:c8:23: 08:36:98:3d:16:e4:07:88:16:e7:93:d4:c5:0b:e4:a6:24:f2: a2:74:9b:c7:d2:59:9d:83:37:33:88:16:3b:f0:8b:02:20:2e: 1f:16:fa:00:5c:65:e1:dd:62:9a:5a:20:2c:d2:4a:eb:ad:fb: ef:c6:9b:15:79:32:0f:8f:a1:4e:54:1e:da:e0:5d:25:4f:46: 9f:58:9f:93:ba:f1:03:10:13:d2:e0:be:6e:69:14:03:bd:0a: f7:65:85:da -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUejsyiGs9rcbd08+gnhp3sCaj8t8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkVBOEM2RDVGNEI0MjRBOUVBQkZDMkY2OEY3MUIwNTA1 QjdFMzY0MTAeFw0yNTEyMDYwNzM2NTdaFw0yNTEyMDkxODIwNTdaMDMxMTAvBgNV BAMTKEM2RDIzOTlEODIxOTZBQUQ2MDJFNDBDQ0M3QkE0MEVDMkIxRTlCNDYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDvhEiVks9rhIF0sPBaOqCaB1Tp tBWpa4ZLHvz3TvnSymofmRwMwEgkV63Fxa+9V69Ii1R7s+LPylSamWdiRujT5fEC L//DG67ma83fmbcsjvk/3GIM4baSO9t7/jDCXBniu6GpXq7ytjbDM2BC9JYHmEzm +lb8UR5Df16+DwzmRX/8p3RcAWObW3NeCVfE8jO/JjfsYvsxYzBOtDrK5g3C7vo0 dZfjyAHnfL4JT2E8J5Ojk5y5NIi89cmNH9XeqPqiypnRsOuFCkNhwRxR07rHx/er 2yD1BinRVnUEajOknV7++A1vtl08/4LW+LgRaebzzMI2+mfBupMjgpsdrjSdAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUxtI5nYIZaq1gLkDMx7pA7Csem0YwHwYDVR0j BBgwFoAUvqjG1fS0JKnqv8L2j3GwUFt+NkEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m OGZjYTQyZi04MzZhLTQwZWMtYTc2Zi1iNjA0NzExZjMzNjQvMC9CRUE4QzZENUY0 QjQyNEE5RUFCRkMyRjY4RjcxQjA1MDVCN0UzNjQxLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQkVBOEM2RDVGNEI0MjRBOUVBQkZDMkY2OEY3MUIwNTA1QjdF MzY0MS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZjhmY2E0MmYtODM2YS00MGVjLWE3 NmYtYjYwNDcxMWYzMzY0LzAvQkVBOEM2RDVGNEI0MjRBOUVBQkZDMkY2OEY3MUIw NTA1QjdFMzY0MS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEgD2T05vDYAP9ny1Amyo0k5nRZJMtI/sMk+ qhaxddROizBGM1ijtc6L4xKKqErxRM6mzvE8BO8nzyXccWBpA6ipV3MbXWBTcMPe Kd37a0PQs1VFxhp2QnNDFDa3graKJYC1M2G5SQv9XlHiOhUdFr1/W3G5QXl+TtcQ CH5qRPcOcsqI1+B6AASoylaUoAYGCy4rM4MurKhxAfsdIOvANoHIIwg2mD0W5AeI FueT1MUL5KYk8qJ0m8fSWZ2DNzOIFjvwiwIgLh8W+gBcZeHdYppaICzSSuut++/G mxV5Mg+PoU5UHtrgXSVPRp9Yn5O68QMQE9Lgvm5pFAO9Cvdlhdo= -----END CERTIFICATE-----Generated at Sat Dec 6 22:53:05 2025 by rpki-client