This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/17216425-6aa3-4429-b175-86901bb0cb1f/0/B247FB55BE5739FCE4EBBD20B84542267C15D192.mft File: B247FB55BE5739FCE4EBBD20B84542267C15D192.mft (raw, json) Hash identifier: YG21f4fja+SFJ/OzeHcODFDmLu/YFBYDwmxswqaTNQ4= Subject key identifier: 64:CC:A8:3E:66:70:3B:17:A8:90:64:09:2E:2D:52:5C:F6:96:18:D0 Authority key identifier: B2:47:FB:55:BE:57:39:FC:E4:EB:BD:20:B8:45:42:26:7C:15:D1:92 Certificate issuer: /CN=B247FB55BE5739FCE4EBBD20B84542267C15D192 Certificate serial: 2E51DD806E6D0267B8ACCFF534C43C3C25F64293 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B247FB55BE5739FCE4EBBD20B84542267C15D192.cer Subject info access: rsync://repo-rpki.idnic.net/repo/17216425-6aa3-4429-b175-86901bb0cb1f/0/B247FB55BE5739FCE4EBBD20B84542267C15D192.mft Manifest number: 02B6 Signing time: Wed 17 Dec 2025 19:41:26 +0000 Manifest this update: Wed 17 Dec 2025 19:36:26 +0000 Manifest next update: Sun 21 Dec 2025 04:25:26 +0000 Files and hashes: 1: 3130332e3137362e39392e302f32342d3234203d3e20313439333434.roa (hash: 1SXRbeE4Zo2BpgZYkA81FPjpBzqJO4ahWylO9ct7G/4=) 2: B247FB55BE5739FCE4EBBD20B84542267C15D192.crl (hash: gELXb6hg7sDJz75AJDBlpfE7c55zde4P6uwepyT9Qfg=) 3: 3130332e3137362e39382e302f32332d3234203d3e20313439333434.roa (hash: 9BKuqPMpOCYVLDkVIwaFy+U4SgMn8wYu59t+XyUcQfg=) 4: 3130332e3137362e39382e302f32342d3234203d3e20313439333434.roa (hash: EI6CAFKMozCEfiPKGQcvscTjTfj7/nkyBcwcx/XBDg8=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/17216425-6aa3-4429-b175-86901bb0cb1f/0/B247FB55BE5739FCE4EBBD20B84542267C15D192.crl rsync://repo-rpki.idnic.net/repo/17216425-6aa3-4429-b175-86901bb0cb1f/0/B247FB55BE5739FCE4EBBD20B84542267C15D192.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B247FB55BE5739FCE4EBBD20B84542267C15D192.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 21 Dec 2025 04:25:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2e:51:dd:80:6e:6d:02:67:b8:ac:cf:f5:34:c4:3c:3c:25:f6:42:93 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B247FB55BE5739FCE4EBBD20B84542267C15D192 Validity Not Before: Dec 17 19:36:26 2025 GMT Not After : Dec 21 04:25:26 2025 GMT Subject: CN=64CCA83E66703B17A89064092E2D525CF69618D0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:95:dc:e3:73:18:c6:d0:c8:72:d4:85:43:dd: 6e:5c:78:72:c1:75:92:26:ed:fd:aa:93:cd:d1:c3: 83:eb:1e:5a:79:ab:03:0a:29:bd:c0:f5:68:6f:93: b6:dc:13:42:ab:6a:d9:d3:43:69:35:84:5d:c9:6b: b9:6f:cc:42:48:66:4e:a5:bc:9d:68:99:ad:bf:fa: 09:76:a2:92:18:4d:91:c2:60:1c:ad:a1:c8:7d:0e: 48:de:3b:f9:ff:c1:b5:0b:d1:fb:90:b8:63:b6:64: 7b:bb:8b:20:4f:f8:8a:25:b4:22:49:7b:21:4a:19: 29:08:34:87:f9:f3:83:99:4d:2e:64:1f:d8:06:61: df:47:4e:d9:3b:d7:86:9f:5e:9c:e2:fe:5c:b8:f3: fb:2b:29:8f:9a:03:66:d7:b4:79:37:76:6a:33:e7: 40:78:83:f2:01:09:7f:f6:c3:64:89:9b:a0:64:58: 9a:d8:c3:59:a8:1a:e3:7a:c5:93:ae:1e:f7:94:df: ff:8c:96:d9:48:5a:cb:9b:4f:4e:57:a0:a6:73:25: 41:74:1b:e0:06:a2:08:4f:fd:7f:54:cb:c6:1b:09: 09:37:a6:41:86:f4:e9:2c:05:e1:76:17:fb:cc:9c: 0e:a1:a8:bc:64:6a:68:5f:96:f4:20:5c:a5:6c:0f: 50:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:CC:A8:3E:66:70:3B:17:A8:90:64:09:2E:2D:52:5C:F6:96:18:D0 X509v3 Authority Key Identifier: keyid:B2:47:FB:55:BE:57:39:FC:E4:EB:BD:20:B8:45:42:26:7C:15:D1:92 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/17216425-6aa3-4429-b175-86901bb0cb1f/0/B247FB55BE5739FCE4EBBD20B84542267C15D192.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B247FB55BE5739FCE4EBBD20B84542267C15D192.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/17216425-6aa3-4429-b175-86901bb0cb1f/0/B247FB55BE5739FCE4EBBD20B84542267C15D192.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 52:32:7a:d9:a0:cd:39:12:f5:c1:c3:d1:fa:0d:30:c7:b0:a3: 0c:6d:90:61:f6:30:a9:e9:77:44:ac:53:b2:4c:3b:f8:b9:1a: e6:d3:44:fa:f7:50:de:77:0a:0b:4b:25:2e:a8:4a:80:58:4f: cc:77:e3:a5:66:dc:0e:56:c4:25:4f:9c:5e:e9:86:6f:49:bd: 80:2c:76:63:4e:57:76:69:95:53:2e:d0:50:00:81:b8:ad:32: 70:95:29:0d:82:f8:3d:9e:29:96:1b:fa:58:bd:ff:1b:7d:a9: d4:63:16:dd:f3:f5:e9:11:9f:04:ca:c7:db:18:1f:c8:32:ed: 04:80:1a:30:36:70:fb:b7:64:bb:43:ea:87:37:df:8b:05:c6: 72:f0:a5:60:b2:1e:99:39:a5:d5:c1:0a:bf:c5:a1:38:51:61: cb:0f:e9:c9:08:05:61:c0:f0:0c:2b:dd:a2:93:dc:cc:1c:2e: 7d:8e:a9:ed:ef:5c:05:c5:49:94:a5:fc:40:c0:d5:b4:2c:41: 06:17:0a:c4:cb:d2:fe:77:6a:fc:0b:7e:71:a4:35:46:5a:ad: 57:3a:c5:1f:22:27:31:9e:17:b2:c7:83:3c:fe:7e:95:84:f0: a6:b8:2e:a3:5d:11:53:ee:7e:8f:6d:45:ba:a6:4b:eb:50:18: 25:de:c2:e2 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIULlHdgG5tAme4rM/1NMQ8PCX2QpMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjI0N0ZCNTVCRTU3MzlGQ0U0RUJCRDIwQjg0NTQyMjY3 QzE1RDE5MjAeFw0yNTEyMTcxOTM2MjZaFw0yNTEyMjEwNDI1MjZaMDMxMTAvBgNV BAMTKDY0Q0NBODNFNjY3MDNCMTdBODkwNjQwOTJFMkQ1MjVDRjY5NjE4RDAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDLldzjcxjG0Mhy1IVD3W5ceHLB dZIm7f2qk83Rw4PrHlp5qwMKKb3A9Whvk7bcE0KratnTQ2k1hF3Ja7lvzEJIZk6l vJ1oma2/+gl2opIYTZHCYBytoch9DkjeO/n/wbUL0fuQuGO2ZHu7iyBP+IoltCJJ eyFKGSkINIf584OZTS5kH9gGYd9HTtk714afXpzi/ly48/srKY+aA2bXtHk3dmoz 50B4g/IBCX/2w2SJm6BkWJrYw1moGuN6xZOuHveU3/+MltlIWsubT05XoKZzJUF0 G+AGoghP/X9Uy8YbCQk3pkGG9OksBeF2F/vMnA6hqLxkamhflvQgXKVsD1AvAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUZMyoPmZwOxeokGQJLi1SXPaWGNAwHwYDVR0j BBgwFoAUskf7Vb5XOfzk670guEVCJnwV0ZIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x NzIxNjQyNS02YWEzLTQ0MjktYjE3NS04NjkwMWJiMGNiMWYvMC9CMjQ3RkI1NUJF NTczOUZDRTRFQkJEMjBCODQ1NDIyNjdDMTVEMTkyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQjI0N0ZCNTVCRTU3MzlGQ0U0RUJCRDIwQjg0NTQyMjY3QzE1 RDE5Mi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMTcyMTY0MjUtNmFhMy00NDI5LWIx NzUtODY5MDFiYjBjYjFmLzAvQjI0N0ZCNTVCRTU3MzlGQ0U0RUJCRDIwQjg0NTQy MjY3QzE1RDE5Mi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFIyetmgzTkS9cHD0foNMMewowxtkGH2MKnp d0SsU7JMO/i5GubTRPr3UN53CgtLJS6oSoBYT8x346Vm3A5WxCVPnF7phm9JvYAs dmNOV3ZplVMu0FAAgbitMnCVKQ2C+D2eKZYb+li9/xt9qdRjFt3z9ekRnwTKx9sY H8gy7QSAGjA2cPu3ZLtD6oc334sFxnLwpWCyHpk5pdXBCr/FoThRYcsP6ckIBWHA 8Awr3aKT3MwcLn2Oqe3vXAXFSZSl/EDA1bQsQQYXCsTL0v53avwLfnGkNUZarVc6 xR8iJzGeF7LHgzz+fpWE8Ka4LqNdEVPufo9tRbqmS+tQGCXewuI= -----END CERTIFICATE-----Generated at Fri Dec 19 11:21:57 2025 by rpki-client