This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/060ce733-77f4-4e1d-b5ec-61ede4da074d/0/BE2A9EDC8C556D4DD7846892612E0BED3FFFB52B.mft File: BE2A9EDC8C556D4DD7846892612E0BED3FFFB52B.mft (raw, json) Hash identifier: PWsCXOyNQ13RME76TaG8WMpTcahaGGL93KTRIzlSAjw= Subject key identifier: AA:CB:DC:CC:9F:9A:BB:33:D5:0A:CA:5D:C0:CB:CF:9C:F1:90:A2:71 Authority key identifier: BE:2A:9E:DC:8C:55:6D:4D:D7:84:68:92:61:2E:0B:ED:3F:FF:B5:2B Certificate issuer: /CN=BE2A9EDC8C556D4DD7846892612E0BED3FFFB52B Certificate serial: 644B62FD6D1F9A3B47BE4CD7DDC056652184D425 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BE2A9EDC8C556D4DD7846892612E0BED3FFFB52B.cer Subject info access: rsync://repo-rpki.idnic.net/repo/060ce733-77f4-4e1d-b5ec-61ede4da074d/0/BE2A9EDC8C556D4DD7846892612E0BED3FFFB52B.mft Manifest number: 0358 Signing time: Tue 23 Dec 2025 23:52:48 +0000 Manifest this update: Tue 23 Dec 2025 23:47:48 +0000 Manifest next update: Sat 27 Dec 2025 09:35:48 +0000 Files and hashes: 1: BE2A9EDC8C556D4DD7846892612E0BED3FFFB52B.crl (hash: YBvs5q0bzmRg650bmmYeiYzxocG4KqUdcwBVp1T4E3o=) 2: 3130332e3232362e34392e302f32342d3234203d3e203539323733.roa (hash: Cv0EMC5062htKdHyxcMyy6exUpE5aD8gtMnGLSz9Wog=) 3: 3130332e3232362e34382e302f32342d3234203d3e203539323733.roa (hash: 2RhwyxU2ZZMzvcv7V8AkytYIscjSPeyUgoz7RilYeSY=) 4: 3130332e3232362e34382e302f32322d3232203d3e203539323733.roa (hash: NVnL3gu/ETV/ZZkGXx0LBYWbHfOXol4OHsqTQpLumLs=) 5: 3130332e3232362e35312e302f32342d3234203d3e203539323733.roa (hash: vEMXCI3M8VvAH47LiF9RDbq7pXkdLmDpmzWuC+Jv+wQ=) 6: 3130332e3232362e35302e302f32342d3234203d3e203539323733.roa (hash: ImyXAYYU6gxFlWNkFMZjYF3LgN4oXFfG1+SCVAdQsYE=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/060ce733-77f4-4e1d-b5ec-61ede4da074d/0/BE2A9EDC8C556D4DD7846892612E0BED3FFFB52B.crl rsync://repo-rpki.idnic.net/repo/060ce733-77f4-4e1d-b5ec-61ede4da074d/0/BE2A9EDC8C556D4DD7846892612E0BED3FFFB52B.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BE2A9EDC8C556D4DD7846892612E0BED3FFFB52B.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 27 Dec 2025 09:35:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 64:4b:62:fd:6d:1f:9a:3b:47:be:4c:d7:dd:c0:56:65:21:84:d4:25 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BE2A9EDC8C556D4DD7846892612E0BED3FFFB52B Validity Not Before: Dec 23 23:47:48 2025 GMT Not After : Dec 27 09:35:48 2025 GMT Subject: CN=AACBDCCC9F9ABB33D50ACA5DC0CBCF9CF190A271 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:2a:20:af:55:5d:d4:ee:77:4c:6a:30:d3:da: b5:99:8a:88:3d:1b:28:55:73:0a:85:38:7f:bf:d2: 11:f6:1b:a1:3e:f4:e0:1b:02:c4:3f:d6:a3:e3:52: bc:40:66:0e:5e:69:9c:ff:65:88:a6:21:67:03:b9: 0a:2f:2a:24:6a:55:24:2e:98:25:9c:a5:56:b1:c3: d0:23:b7:06:3b:31:ba:4c:40:96:bf:4b:c5:9c:d9: 99:3f:d0:ea:dd:97:a3:f7:b6:0d:60:be:1f:b7:eb: 4c:f0:28:d7:96:85:6d:f5:34:61:dc:c9:29:0c:ff: b6:6d:18:18:9e:92:a0:44:84:12:04:9f:12:b8:6d: c3:e3:bb:12:5c:82:5f:5e:d1:fe:54:88:97:3e:53: 5c:eb:08:e2:fb:4f:4c:33:98:56:2a:78:d8:43:a1: 83:a2:f7:b5:9d:fc:47:74:6b:9e:4b:6e:c2:ff:38: 39:80:f4:73:28:46:e6:ff:a8:c3:14:2d:a2:cb:84: d8:64:1c:d7:b5:7f:9e:08:5b:31:bb:e5:31:d6:6e: 7f:ec:81:75:4c:83:a8:86:4e:96:e4:a3:a3:c2:78: 52:4d:e5:6b:d6:76:16:1e:de:18:d9:4e:b5:e2:27: e7:04:de:73:5d:63:16:f7:08:07:f9:4a:b7:84:c1: ca:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:CB:DC:CC:9F:9A:BB:33:D5:0A:CA:5D:C0:CB:CF:9C:F1:90:A2:71 X509v3 Authority Key Identifier: keyid:BE:2A:9E:DC:8C:55:6D:4D:D7:84:68:92:61:2E:0B:ED:3F:FF:B5:2B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/060ce733-77f4-4e1d-b5ec-61ede4da074d/0/BE2A9EDC8C556D4DD7846892612E0BED3FFFB52B.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BE2A9EDC8C556D4DD7846892612E0BED3FFFB52B.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/060ce733-77f4-4e1d-b5ec-61ede4da074d/0/BE2A9EDC8C556D4DD7846892612E0BED3FFFB52B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6f:b6:ed:35:f6:85:51:21:02:73:96:35:fe:19:7c:ce:39:1d: 8c:c0:61:c6:41:c4:d8:d4:f8:cf:67:2d:20:99:f7:f0:7d:f3: a9:1b:a3:f5:55:0f:c5:07:0d:9f:7b:85:27:b2:1a:9e:ea:1f: e0:34:4d:f4:b7:2b:9c:09:fb:95:d9:c2:e6:f0:ce:78:d1:f3: 31:ef:f8:4b:9d:97:86:37:27:29:87:08:ce:07:6b:ed:cb:de: 37:9e:c3:f8:80:7a:8f:89:30:14:87:ae:ef:ec:53:e4:cc:57: c5:7b:f1:ad:c6:5a:9c:8c:51:d1:d0:f8:bb:11:b2:6f:dd:4b: ee:d8:e9:a2:39:d9:6b:43:98:cc:a2:7c:f5:96:53:e1:18:a6: 52:58:83:c0:a0:1d:bb:d4:40:b5:e8:89:25:8b:e7:b3:0b:ba: 45:4b:ee:0b:49:04:fe:e9:d2:6e:01:c5:60:24:68:b6:d2:97: 9f:bf:9e:7c:56:72:94:d7:a2:fe:8e:84:16:2b:01:e5:98:ff: 82:82:1b:80:ae:10:06:ef:78:a5:73:b1:c0:17:ae:94:ae:0f: 87:03:59:e7:65:2e:66:f2:8b:5c:a6:c8:07:92:61:b4:7d:1b: c8:16:9e:f0:bd:56:5c:55:d6:c3:5e:b0:e6:88:fd:d0:96:f2: 5a:81:c8:53 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUZEti/W0fmjtHvkzX3cBWZSGE1CUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkUyQTlFREM4QzU1NkQ0REQ3ODQ2ODkyNjEyRTBCRUQz RkZGQjUyQjAeFw0yNTEyMjMyMzQ3NDhaFw0yNTEyMjcwOTM1NDhaMDMxMTAvBgNV BAMTKEFBQ0JEQ0NDOUY5QUJCMzNENTBBQ0E1REMwQ0JDRjlDRjE5MEEyNzEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCtKiCvVV3U7ndMajDT2rWZiog9 GyhVcwqFOH+/0hH2G6E+9OAbAsQ/1qPjUrxAZg5eaZz/ZYimIWcDuQovKiRqVSQu mCWcpVaxw9AjtwY7MbpMQJa/S8Wc2Zk/0Ordl6P3tg1gvh+360zwKNeWhW31NGHc ySkM/7ZtGBiekqBEhBIEnxK4bcPjuxJcgl9e0f5UiJc+U1zrCOL7T0wzmFYqeNhD oYOi97Wd/Ed0a55LbsL/ODmA9HMoRub/qMMULaLLhNhkHNe1f54IWzG75THWbn/s gXVMg6iGTpbko6PCeFJN5WvWdhYe3hjZTrXiJ+cE3nNdYxb3CAf5SreEwco/AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUqsvczJ+auzPVCspdwMvPnPGQonEwHwYDVR0j BBgwFoAUviqe3IxVbU3XhGiSYS4L7T//tSswDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w NjBjZTczMy03N2Y0LTRlMWQtYjVlYy02MWVkZTRkYTA3NGQvMC9CRTJBOUVEQzhD NTU2RDRERDc4NDY4OTI2MTJFMEJFRDNGRkZCNTJCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQkUyQTlFREM4QzU1NkQ0REQ3ODQ2ODkyNjEyRTBCRUQzRkZG QjUyQi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMDYwY2U3MzMtNzdmNC00ZTFkLWI1 ZWMtNjFlZGU0ZGEwNzRkLzAvQkUyQTlFREM4QzU1NkQ0REQ3ODQ2ODkyNjEyRTBC RUQzRkZGQjUyQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAG+27TX2hVEhAnOWNf4ZfM45HYzAYcZBxNjU +M9nLSCZ9/B986kbo/VVD8UHDZ97hSeyGp7qH+A0TfS3K5wJ+5XZwubwznjR8zHv +Eudl4Y3JymHCM4Ha+3L3jeew/iAeo+JMBSHru/sU+TMV8V78a3GWpyMUdHQ+LsR sm/dS+7Y6aI52WtDmMyifPWWU+EYplJYg8CgHbvUQLXoiSWL57MLukVL7gtJBP7p 0m4BxWAkaLbSl5+/nnxWcpTXov6OhBYrAeWY/4KCG4CuEAbveKVzscAXrpSuD4cD WedlLmbyi1ymyAeSYbR9G8gWnvC9VlxV1sNesOaI/dCW8lqByFM= -----END CERTIFICATE-----Generated at Thu Dec 25 01:21:55 2025 by rpki-client