This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/fae24907-a6f2-4a55-aa6f-18c7db143fe8/0/BD6194D3C25B637B15DAEB654B288A451054ABE0.mft File: BD6194D3C25B637B15DAEB654B288A451054ABE0.mft (raw, json) Hash identifier: eP7n+ORvYabaT88fKgOxSeA4KdtD1O0fJbPqhR/K+lY= Subject key identifier: 32:19:D1:F4:B8:7F:05:7E:2F:DB:54:EE:F4:03:DB:60:51:56:2A:78 Authority key identifier: BD:61:94:D3:C2:5B:63:7B:15:DA:EB:65:4B:28:8A:45:10:54:AB:E0 Certificate issuer: /CN=BD6194D3C25B637B15DAEB654B288A451054ABE0 Certificate serial: 51DA0B0CAA2826673E01CC1FA912C5C1471E6F0A Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BD6194D3C25B637B15DAEB654B288A451054ABE0.cer Subject info access: rsync://repo-rpki.idnic.net/repo/fae24907-a6f2-4a55-aa6f-18c7db143fe8/0/BD6194D3C25B637B15DAEB654B288A451054ABE0.mft Manifest number: 01CE Signing time: Fri 05 Dec 2025 02:41:14 +0000 Manifest this update: Fri 05 Dec 2025 02:36:14 +0000 Manifest next update: Mon 08 Dec 2025 11:33:14 +0000 Files and hashes: 1: BD6194D3C25B637B15DAEB654B288A451054ABE0.crl (hash: I1ZrBN4mk8Rm6VqyuQUdJ75PaV5kbgo5rERbTraEL7A=) 2: 3130332e37392e3133302e302f32332d3233203d3e20313430343433.roa (hash: RNdh1+r+BNYLHAu4V1jupY7hG6iYrh06nO6HbqG1vXI=) 3: 3130332e37392e3133302e302f32342d3234203d3e20313430343433.roa (hash: BlB54vUebVCTB7wA7qoqMH+xgyxkQDhZWNMRec/AbvE=) 4: 3130332e37392e3133312e302f32342d3234203d3e20313430343433.roa (hash: 10mUGoiah4HNNhQPC/xIeaHPveRue0pYK34O0LI+OcA=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/fae24907-a6f2-4a55-aa6f-18c7db143fe8/0/BD6194D3C25B637B15DAEB654B288A451054ABE0.crl rsync://repo-rpki.idnic.net/repo/fae24907-a6f2-4a55-aa6f-18c7db143fe8/0/BD6194D3C25B637B15DAEB654B288A451054ABE0.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BD6194D3C25B637B15DAEB654B288A451054ABE0.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 08 Dec 2025 11:33:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 51:da:0b:0c:aa:28:26:67:3e:01:cc:1f:a9:12:c5:c1:47:1e:6f:0a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BD6194D3C25B637B15DAEB654B288A451054ABE0 Validity Not Before: Dec 5 02:36:14 2025 GMT Not After : Dec 8 11:33:14 2025 GMT Subject: CN=3219D1F4B87F057E2FDB54EEF403DB6051562A78 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:38:3a:b0:f8:00:b8:6f:d0:cc:ab:9b:99:53: 03:b8:32:06:53:7d:5b:40:a8:30:77:0d:6f:c2:fd: 45:3a:54:50:ad:9f:fa:30:cf:f3:6a:dd:e8:1e:b5: 33:30:ca:da:e5:70:3e:fe:98:43:30:d5:42:0b:b9: 30:4b:b2:31:9f:59:69:23:ba:9f:3d:5b:ab:90:1e: df:13:d1:21:6f:ca:0b:33:8f:4b:a8:ed:aa:bf:d7: 9f:78:0d:0e:10:58:ba:5c:ae:a5:56:ca:cb:09:f3: fd:9e:85:b0:53:1f:a5:c9:db:98:e1:6d:28:b6:15: 80:e9:97:0a:7f:04:fb:4d:58:3e:86:6b:24:a2:ed: ee:19:65:2e:9b:be:ad:6c:29:ad:62:48:a0:a8:57: 01:54:7c:9e:b7:d7:3e:5b:2b:ca:5b:b8:8b:4f:89: 7e:82:ab:09:61:0d:35:c9:bd:83:c2:e2:14:dd:dd: f4:18:9c:2b:33:de:b6:49:d1:03:6f:f8:2b:d7:62: 31:65:79:f7:7f:c0:01:13:25:8b:35:30:b7:40:8a: a0:fc:d6:2d:31:09:a2:88:8c:f9:13:ab:e4:1a:03: c4:47:f2:7f:62:04:bb:df:ad:d7:09:ee:1f:db:52: e8:5e:06:a9:01:61:6d:1e:04:c9:fc:91:65:37:d8: a2:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:19:D1:F4:B8:7F:05:7E:2F:DB:54:EE:F4:03:DB:60:51:56:2A:78 X509v3 Authority Key Identifier: keyid:BD:61:94:D3:C2:5B:63:7B:15:DA:EB:65:4B:28:8A:45:10:54:AB:E0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/fae24907-a6f2-4a55-aa6f-18c7db143fe8/0/BD6194D3C25B637B15DAEB654B288A451054ABE0.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BD6194D3C25B637B15DAEB654B288A451054ABE0.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/fae24907-a6f2-4a55-aa6f-18c7db143fe8/0/BD6194D3C25B637B15DAEB654B288A451054ABE0.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8b:5b:ab:a7:a2:78:66:f3:2b:71:bf:36:75:1b:93:9d:d3:b8: 94:73:e2:2f:2c:b9:4a:7e:27:dc:94:81:ba:35:a4:de:a7:27: 17:ec:1e:1d:82:50:ba:d2:70:88:11:b4:d3:8b:85:87:f6:4c: 65:94:33:a6:c8:cd:42:7c:7e:62:e9:11:e1:2c:aa:85:25:77: 94:bd:7f:a4:30:31:c8:76:54:b6:09:1c:c1:8f:17:f0:a8:be: 30:46:1e:3f:89:91:5c:94:fd:82:a6:ff:10:c9:da:6f:38:f9: e4:21:0d:e4:ce:ea:40:c6:e4:5d:04:b9:8b:4a:ee:ab:5e:e6: fd:ab:48:7a:0d:99:cf:69:50:ed:0e:87:1c:4f:3c:7e:62:32: 26:ee:b0:a7:1b:5f:c1:e8:fb:ea:98:33:ed:2f:fa:ea:5e:ac: ab:a6:df:90:c3:1a:65:e4:1c:58:b5:7d:6a:59:27:d3:9b:73: 91:bb:06:5c:cd:87:74:4c:97:83:c1:fb:8e:79:36:bb:91:81: 51:2b:59:82:39:d1:02:79:29:d7:8a:2f:3e:11:70:07:9f:d0: 18:44:f2:7a:17:71:25:52:f4:37:bc:c7:92:d1:a6:b2:22:40: 00:5b:b9:20:20:36:76:2b:5d:ce:d7:df:a9:4f:91:84:4e:82: ba:e0:af:46 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUUdoLDKooJmc+AcwfqRLFwUcebwowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkQ2MTk0RDNDMjVCNjM3QjE1REFFQjY1NEIyODhBNDUx MDU0QUJFMDAeFw0yNTEyMDUwMjM2MTRaFw0yNTEyMDgxMTMzMTRaMDMxMTAvBgNV BAMTKDMyMTlEMUY0Qjg3RjA1N0UyRkRCNTRFRUY0MDNEQjYwNTE1NjJBNzgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC1ODqw+AC4b9DMq5uZUwO4MgZT fVtAqDB3DW/C/UU6VFCtn/owz/Nq3egetTMwytrlcD7+mEMw1UILuTBLsjGfWWkj up89W6uQHt8T0SFvygszj0uo7aq/1594DQ4QWLpcrqVWyssJ8/2ehbBTH6XJ25jh bSi2FYDplwp/BPtNWD6GaySi7e4ZZS6bvq1sKa1iSKCoVwFUfJ631z5bK8pbuItP iX6CqwlhDTXJvYPC4hTd3fQYnCsz3rZJ0QNv+CvXYjFlefd/wAETJYs1MLdAiqD8 1i0xCaKIjPkTq+QaA8RH8n9iBLvfrdcJ7h/bUuheBqkBYW0eBMn8kWU32KK7AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUMhnR9Lh/BX4v21Tu9APbYFFWKngwHwYDVR0j BBgwFoAUvWGU08JbY3sV2utlSyiKRRBUq+AwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m YWUyNDkwNy1hNmYyLTRhNTUtYWE2Zi0xOGM3ZGIxNDNmZTgvMC9CRDYxOTREM0My NUI2MzdCMTVEQUVCNjU0QjI4OEE0NTEwNTRBQkUwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQkQ2MTk0RDNDMjVCNjM3QjE1REFFQjY1NEIyODhBNDUxMDU0 QUJFMC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZmFlMjQ5MDctYTZmMi00YTU1LWFh NmYtMThjN2RiMTQzZmU4LzAvQkQ2MTk0RDNDMjVCNjM3QjE1REFFQjY1NEIyODhB NDUxMDU0QUJFMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAItbq6eieGbzK3G/NnUbk53TuJRz4i8suUp+ J9yUgbo1pN6nJxfsHh2CULrScIgRtNOLhYf2TGWUM6bIzUJ8fmLpEeEsqoUld5S9 f6QwMch2VLYJHMGPF/CovjBGHj+JkVyU/YKm/xDJ2m84+eQhDeTO6kDG5F0EuYtK 7qte5v2rSHoNmc9pUO0OhxxPPH5iMibusKcbX8Ho++qYM+0v+uperKum35DDGmXk HFi1fWpZJ9Obc5G7BlzNh3RMl4PB+455NruRgVErWYI50QJ5KdeKLz4RcAef0BhE 8noXcSVS9De8x5LRprIiQABbuSAgNnYrXc7X36lPkYROgrrgr0Y= -----END CERTIFICATE-----Generated at Sun Dec 7 01:02:47 2025 by rpki-client