This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/0e05a1ce-849f-417c-b673-fdd33f0d7447/0/B0AAB728B88975526C1741CCA8673CBC88F7697C.mft File: B0AAB728B88975526C1741CCA8673CBC88F7697C.mft (raw, json) Hash identifier: 8QIreRpiXm/f3M9WGswR6zhHSkjqCB4lvdON0y7NeQY= Subject key identifier: CD:76:AC:22:AD:62:52:8B:3B:46:27:17:66:11:75:F7:72:91:C8:3E Authority key identifier: B0:AA:B7:28:B8:89:75:52:6C:17:41:CC:A8:67:3C:BC:88:F7:69:7C Certificate issuer: /CN=B0AAB728B88975526C1741CCA8673CBC88F7697C Certificate serial: 63962DA4269AC72957D16FCC51099D1C7C0313E6 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B0AAB728B88975526C1741CCA8673CBC88F7697C.cer Subject info access: rsync://repo-rpki.idnic.net/repo/0e05a1ce-849f-417c-b673-fdd33f0d7447/0/B0AAB728B88975526C1741CCA8673CBC88F7697C.mft Manifest number: 03B8 Signing time: Wed 24 Dec 2025 21:51:17 +0000 Manifest this update: Wed 24 Dec 2025 21:46:17 +0000 Manifest next update: Sun 28 Dec 2025 09:03:17 +0000 Files and hashes: 1: B0AAB728B88975526C1741CCA8673CBC88F7697C.crl (hash: BMABzPkTn5GPGKfa9/0HKifphVhyolPlK3d4h6QpQ+o=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/0e05a1ce-849f-417c-b673-fdd33f0d7447/0/B0AAB728B88975526C1741CCA8673CBC88F7697C.crl rsync://repo-rpki.idnic.net/repo/0e05a1ce-849f-417c-b673-fdd33f0d7447/0/B0AAB728B88975526C1741CCA8673CBC88F7697C.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B0AAB728B88975526C1741CCA8673CBC88F7697C.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 28 Dec 2025 02:37:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 63:96:2d:a4:26:9a:c7:29:57:d1:6f:cc:51:09:9d:1c:7c:03:13:e6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B0AAB728B88975526C1741CCA8673CBC88F7697C Validity Not Before: Dec 24 21:46:17 2025 GMT Not After : Dec 28 09:03:17 2025 GMT Subject: CN=CD76AC22AD62528B3B462717661175F77291C83E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:f9:6b:eb:e4:9b:8a:6c:f7:b8:54:2d:e5:e7: aa:0f:11:01:41:61:f5:06:f7:60:8d:11:6b:f7:1f: 16:ae:e3:a1:8a:83:7e:37:7c:21:17:05:63:d4:e7: 3d:d6:0c:54:24:99:7b:2e:89:3f:1b:09:e3:d9:b9: bb:b7:86:50:1e:b8:64:b3:70:49:2c:ec:06:49:9f: fe:d1:71:2d:fb:fe:f1:53:1e:f9:76:b3:67:9c:54: c6:26:85:41:2c:6a:62:93:bf:50:e7:9f:47:55:8f: 4b:3f:be:8d:b7:45:a6:da:59:7a:d2:1a:24:53:0d: 8e:fd:ca:35:41:75:3f:4f:e7:6c:42:ed:72:ee:ea: c2:11:c7:f7:82:76:43:06:0e:59:ed:e1:fd:9d:55: 11:76:98:79:1d:45:92:0a:92:53:4a:ec:48:00:ec: 40:42:3f:f2:23:ad:4b:f2:5a:6e:3f:3d:bd:5f:ae: 87:4a:21:dc:a8:9f:0e:52:46:90:e8:d0:83:6c:b7: 05:e7:9f:da:10:c5:ef:a3:2f:89:56:b4:18:24:83: 96:8d:3d:58:42:ef:6d:6f:0d:7c:84:01:18:39:87: 19:e1:a3:0d:bd:67:19:b1:10:6f:fe:2d:a6:74:13: e9:6b:92:63:82:a6:9b:af:1b:88:6a:f9:b2:fc:3a: f2:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:76:AC:22:AD:62:52:8B:3B:46:27:17:66:11:75:F7:72:91:C8:3E X509v3 Authority Key Identifier: keyid:B0:AA:B7:28:B8:89:75:52:6C:17:41:CC:A8:67:3C:BC:88:F7:69:7C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/0e05a1ce-849f-417c-b673-fdd33f0d7447/0/B0AAB728B88975526C1741CCA8673CBC88F7697C.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B0AAB728B88975526C1741CCA8673CBC88F7697C.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/0e05a1ce-849f-417c-b673-fdd33f0d7447/0/B0AAB728B88975526C1741CCA8673CBC88F7697C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 47:74:43:d3:be:8d:29:d0:f9:a0:77:0b:e1:62:13:76:47:4d: 5f:52:29:bd:3b:d5:04:6d:be:46:b2:5e:db:a7:7a:ea:82:f1: 5d:7c:2f:f2:81:ff:a5:ef:7b:9b:23:cc:00:9b:9e:62:a8:f2: dd:85:b3:7d:0a:3b:f5:fe:95:35:50:6c:3c:25:06:80:e2:07: 19:1d:1a:80:1c:1a:27:0c:73:ab:f7:ff:5f:85:09:08:1d:c3: 4c:57:51:c0:28:c3:14:0c:00:7a:b8:71:85:d3:fd:a1:a9:ce: d2:94:b4:49:ce:ad:16:84:be:72:a7:76:57:7d:28:ab:f8:bc: 65:3b:6d:c0:b3:d2:67:91:7c:8d:70:76:f8:08:e6:30:12:1b: f8:b7:c9:42:ef:3d:db:70:31:e8:6d:a9:bd:51:aa:d1:1d:8f: 60:4d:31:e6:91:45:00:40:20:eb:31:ec:34:f8:5d:7d:6f:dc: c4:6e:3b:1a:77:be:e2:4e:63:7f:a9:1d:43:29:06:f3:e1:f0: b4:54:64:ac:d4:1a:a8:20:62:39:69:df:c5:e5:15:e8:5f:94: 22:09:bd:17:7d:78:76:d2:1f:c8:6e:8c:c7:23:7e:ff:88:8b: 9b:b4:e4:92:db:8b:51:93:f2:e5:ca:97:f5:47:27:6c:92:66: 95:4d:e5:12 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUY5YtpCaaxylX0W/MUQmdHHwDE+YwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjBBQUI3MjhCODg5NzU1MjZDMTc0MUNDQTg2NzNDQkM4 OEY3Njk3QzAeFw0yNTEyMjQyMTQ2MTdaFw0yNTEyMjgwOTAzMTdaMDMxMTAvBgNV BAMTKENENzZBQzIyQUQ2MjUyOEIzQjQ2MjcxNzY2MTE3NUY3NzI5MUM4M0UwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDX+Wvr5JuKbPe4VC3l56oPEQFB YfUG92CNEWv3Hxau46GKg343fCEXBWPU5z3WDFQkmXsuiT8bCePZubu3hlAeuGSz cEks7AZJn/7RcS37/vFTHvl2s2ecVMYmhUEsamKTv1Dnn0dVj0s/vo23RabaWXrS GiRTDY79yjVBdT9P52xC7XLu6sIRx/eCdkMGDlnt4f2dVRF2mHkdRZIKklNK7EgA 7EBCP/IjrUvyWm4/Pb1frodKIdyonw5SRpDo0INstwXnn9oQxe+jL4lWtBgkg5aN PVhC721vDXyEARg5hxnhow29ZxmxEG/+LaZ0E+lrkmOCppuvG4hq+bL8OvI9AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUzXasIq1iUos7RicXZhF193KRyD4wHwYDVR0j BBgwFoAUsKq3KLiJdVJsF0HMqGc8vIj3aXwwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w ZTA1YTFjZS04NDlmLTQxN2MtYjY3My1mZGQzM2YwZDc0NDcvMC9CMEFBQjcyOEI4 ODk3NTUyNkMxNzQxQ0NBODY3M0NCQzg4Rjc2OTdDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQjBBQUI3MjhCODg5NzU1MjZDMTc0MUNDQTg2NzNDQkM4OEY3 Njk3Qy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMGUwNWExY2UtODQ5Zi00MTdjLWI2 NzMtZmRkMzNmMGQ3NDQ3LzAvQjBBQUI3MjhCODg5NzU1MjZDMTc0MUNDQTg2NzND QkM4OEY3Njk3Qy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEd0Q9O+jSnQ+aB3C+FiE3ZHTV9SKb071QRt vkayXtuneuqC8V18L/KB/6Xve5sjzACbnmKo8t2Fs30KO/X+lTVQbDwlBoDiBxkd GoAcGicMc6v3/1+FCQgdw0xXUcAowxQMAHq4cYXT/aGpztKUtEnOrRaEvnKndld9 KKv4vGU7bcCz0meRfI1wdvgI5jASG/i3yULvPdtwMehtqb1RqtEdj2BNMeaRRQBA IOsx7DT4XX1v3MRuOxp3vuJOY3+pHUMpBvPh8LRUZKzUGqggYjlp38XlFehflCIJ vRd9eHbSH8hujMcjfv+Ii5u05JLbi1GT8uXKl/VHJ2ySZpVN5RI= -----END CERTIFICATE-----Generated at Thu Dec 25 00:40:00 2025 by rpki-client