This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/05593445-a25d-48e0-abc2-ab05e0650655/0/B10FCCE02720E964D29342E0F3BDFC679A4D7BD6.mft File: B10FCCE02720E964D29342E0F3BDFC679A4D7BD6.mft (raw, json) Hash identifier: 91pdMH6KKE/9g3EXlSsaz5Resw63P4cEye1thzlCBZM= Subject key identifier: 8C:6B:0E:BE:53:C7:39:E4:C4:79:B7:63:34:34:33:D1:CA:F4:24:02 Authority key identifier: B1:0F:CC:E0:27:20:E9:64:D2:93:42:E0:F3:BD:FC:67:9A:4D:7B:D6 Certificate issuer: /CN=B10FCCE02720E964D29342E0F3BDFC679A4D7BD6 Certificate serial: 6055A55EDFE519FC5F255DC0897B7B5C1C40B4CD Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B10FCCE02720E964D29342E0F3BDFC679A4D7BD6.cer Subject info access: rsync://repo-rpki.idnic.net/repo/05593445-a25d-48e0-abc2-ab05e0650655/0/B10FCCE02720E964D29342E0F3BDFC679A4D7BD6.mft Manifest number: 0137 Signing time: Wed 24 Dec 2025 04:12:14 +0000 Manifest this update: Wed 24 Dec 2025 04:07:14 +0000 Manifest next update: Sat 27 Dec 2025 10:05:14 +0000 Files and hashes: 1: B10FCCE02720E964D29342E0F3BDFC679A4D7BD6.crl (hash: /B0ZPrkYWWq2lCCA7yijEen3xlrcohzw37Gqc2ziJac=) 2: 3130332e3134372e3234352e302f32342d3234203d3e20313339393733.roa (hash: rlPU/iIgYoRNsLv+c0V6Y8ev4dELtmVNbR6X//tRgJc=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/05593445-a25d-48e0-abc2-ab05e0650655/0/B10FCCE02720E964D29342E0F3BDFC679A4D7BD6.crl rsync://repo-rpki.idnic.net/repo/05593445-a25d-48e0-abc2-ab05e0650655/0/B10FCCE02720E964D29342E0F3BDFC679A4D7BD6.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B10FCCE02720E964D29342E0F3BDFC679A4D7BD6.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 27 Dec 2025 10:05:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 60:55:a5:5e:df:e5:19:fc:5f:25:5d:c0:89:7b:7b:5c:1c:40:b4:cd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B10FCCE02720E964D29342E0F3BDFC679A4D7BD6 Validity Not Before: Dec 24 04:07:14 2025 GMT Not After : Dec 27 10:05:14 2025 GMT Subject: CN=8C6B0EBE53C739E4C479B763343433D1CAF42402 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:7b:2f:9b:fc:3e:c8:4f:dc:4a:25:5e:3b:1b: 81:5e:d4:c5:be:07:c4:27:3f:00:42:52:49:d7:78: a3:84:3c:ca:9b:bf:f4:3c:0d:1d:48:a2:f0:a5:e1: 1f:98:31:e6:05:4c:89:bd:2d:fd:23:e3:97:f2:86: c1:6d:56:c4:0b:34:7e:55:2e:97:28:20:0b:03:51: 8f:c4:b5:83:d1:fa:e9:ad:00:29:b6:e2:6a:5e:e8: 4f:2f:1b:12:07:49:d0:38:66:8d:22:39:b1:35:fc: 6d:03:c8:73:1a:b2:4c:c5:5c:cd:39:0f:f2:15:29: 00:c9:ab:58:94:7a:d3:d7:d0:86:e7:72:64:aa:b4: dd:5e:b3:b2:9b:2a:95:b9:6b:7a:2f:ec:78:96:a2: 9f:44:58:9e:a9:e7:8f:a9:12:e2:f0:6a:78:54:af: 27:22:f9:30:4c:85:bd:c8:8b:88:4d:7b:64:da:94: 5b:b7:20:84:16:ef:de:54:aa:c8:d7:d6:f1:ec:a7: ab:24:c0:57:98:06:1a:b9:f3:18:38:d0:c2:ce:a1: 5b:4b:13:21:fb:3c:d4:22:9e:ac:bf:33:7c:4c:10: 5c:d4:57:de:40:10:4c:2b:7b:b8:12:dc:ec:4a:45: 82:30:85:71:78:0f:39:90:8e:62:0b:99:35:df:71: 6b:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8C:6B:0E:BE:53:C7:39:E4:C4:79:B7:63:34:34:33:D1:CA:F4:24:02 X509v3 Authority Key Identifier: keyid:B1:0F:CC:E0:27:20:E9:64:D2:93:42:E0:F3:BD:FC:67:9A:4D:7B:D6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/05593445-a25d-48e0-abc2-ab05e0650655/0/B10FCCE02720E964D29342E0F3BDFC679A4D7BD6.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B10FCCE02720E964D29342E0F3BDFC679A4D7BD6.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/05593445-a25d-48e0-abc2-ab05e0650655/0/B10FCCE02720E964D29342E0F3BDFC679A4D7BD6.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3b:94:94:c3:8e:53:d2:d2:42:1c:fa:36:0f:bc:6b:08:20:b2: 65:88:7a:49:82:a3:c0:f1:02:50:7d:3c:bc:85:67:29:d0:f7: 76:9a:01:d9:79:14:20:44:49:78:56:18:c6:5a:31:7f:fe:34: 5a:bf:15:0d:8b:22:57:88:65:37:62:e7:64:13:10:9f:26:56: f9:e6:d2:0b:6e:09:26:26:49:91:35:11:02:aa:db:06:5d:fd: 33:72:2c:9f:42:b3:94:4c:57:1d:92:9a:69:b0:af:bc:b8:5d: df:6d:47:e7:de:9e:2a:ec:17:1c:c1:b0:3b:3d:19:ff:51:f3: b8:16:2f:58:32:99:11:38:6b:bc:0c:2a:1c:37:95:54:ee:7e: c0:bc:41:c6:b5:36:05:b2:48:69:fb:eb:74:ed:be:28:e1:6d: 76:7f:a6:13:91:f2:e8:0e:60:64:39:1e:5b:80:c3:bc:90:ea: db:e1:17:6d:87:7a:24:40:15:3d:66:84:5d:5c:48:86:c2:df: 57:d6:b1:d1:d2:e6:f4:9a:44:6f:6d:00:9c:99:06:38:4f:4c: 99:d1:18:e0:d1:29:b2:94:24:78:ad:69:e1:b3:85:7f:84:7b: aa:5a:08:49:0d:fe:02:ec:30:72:42:20:df:2e:b6:af:0b:56: be:2e:39:28 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUYFWlXt/lGfxfJV3AiXt7XBxAtM0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjEwRkNDRTAyNzIwRTk2NEQyOTM0MkUwRjNCREZDNjc5 QTREN0JENjAeFw0yNTEyMjQwNDA3MTRaFw0yNTEyMjcxMDA1MTRaMDMxMTAvBgNV BAMTKDhDNkIwRUJFNTNDNzM5RTRDNDc5Qjc2MzM0MzQzM0QxQ0FGNDI0MDIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDVey+b/D7IT9xKJV47G4Fe1MW+ B8QnPwBCUknXeKOEPMqbv/Q8DR1IovCl4R+YMeYFTIm9Lf0j45fyhsFtVsQLNH5V LpcoIAsDUY/EtYPR+umtACm24mpe6E8vGxIHSdA4Zo0iObE1/G0DyHMaskzFXM05 D/IVKQDJq1iUetPX0IbncmSqtN1es7KbKpW5a3ov7HiWop9EWJ6p54+pEuLwanhU ryci+TBMhb3Ii4hNe2TalFu3IIQW795UqsjX1vHsp6skwFeYBhq58xg40MLOoVtL EyH7PNQinqy/M3xMEFzUV95AEEwre7gS3OxKRYIwhXF4DzmQjmILmTXfcWt9AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUjGsOvlPHOeTEebdjNDQz0cr0JAIwHwYDVR0j BBgwFoAUsQ/M4Ccg6WTSk0Lg8738Z5pNe9YwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w NTU5MzQ0NS1hMjVkLTQ4ZTAtYWJjMi1hYjA1ZTA2NTA2NTUvMC9CMTBGQ0NFMDI3 MjBFOTY0RDI5MzQyRTBGM0JERkM2NzlBNEQ3QkQ2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQjEwRkNDRTAyNzIwRTk2NEQyOTM0MkUwRjNCREZDNjc5QTRE N0JENi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMDU1OTM0NDUtYTI1ZC00OGUwLWFi YzItYWIwNWUwNjUwNjU1LzAvQjEwRkNDRTAyNzIwRTk2NEQyOTM0MkUwRjNCREZD Njc5QTREN0JENi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADuUlMOOU9LSQhz6Ng+8awggsmWIekmCo8Dx AlB9PLyFZynQ93aaAdl5FCBESXhWGMZaMX/+NFq/FQ2LIleIZTdi52QTEJ8mVvnm 0gtuCSYmSZE1EQKq2wZd/TNyLJ9Cs5RMVx2Smmmwr7y4Xd9tR+fenirsFxzBsDs9 Gf9R87gWL1gymRE4a7wMKhw3lVTufsC8Qca1NgWySGn763TtvijhbXZ/phOR8ugO YGQ5HluAw7yQ6tvhF22HeiRAFT1mhF1cSIbC31fWsdHS5vSaRG9tAJyZBjhPTJnR GODRKbKUJHitaeGzhX+Ee6paCEkN/gLsMHJCIN8utq8LVr4uOSg= -----END CERTIFICATE-----Generated at Wed Dec 24 20:25:25 2025 by rpki-client