This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/22f5f07c-f07b-4aaa-a0c2-df17c910c586/0/B5787D648E70D60E0E09510EBF1809D686E83D03.mft File: B5787D648E70D60E0E09510EBF1809D686E83D03.mft (raw, json) Hash identifier: kXT+jRTik92YBsn8NCcveMl7cEJNec6eCeF/p8X8YKE= Subject key identifier: 82:58:CA:22:8D:2F:A4:88:C7:E6:2C:96:05:74:D3:29:E6:03:7B:8F Authority key identifier: B5:78:7D:64:8E:70:D6:0E:0E:09:51:0E:BF:18:09:D6:86:E8:3D:03 Certificate issuer: /CN=B5787D648E70D60E0E09510EBF1809D686E83D03 Certificate serial: 61B2EDC82851E7B97AF6B3C86FCA0B61AFB73EA7 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B5787D648E70D60E0E09510EBF1809D686E83D03.cer Subject info access: rsync://repo-rpki.idnic.net/repo/22f5f07c-f07b-4aaa-a0c2-df17c910c586/0/B5787D648E70D60E0E09510EBF1809D686E83D03.mft Manifest number: 0364 Signing time: Wed 24 Dec 2025 09:55:05 +0000 Manifest this update: Wed 24 Dec 2025 09:50:05 +0000 Manifest next update: Sat 27 Dec 2025 14:16:05 +0000 Files and hashes: 1: 3130332e3137322e3138362e302f32332d3233203d3e20313432343030.roa (hash: eAolVNFu5RbZ8vrRSJHTSAnnItGXFwJM+Qxe0653Ja4=) 2: 3130332e3137322e3138362e302f32342d3234203d3e20313432343030.roa (hash: hdRTJYsi8eswhC1onrTfel6azdbRvum1qwnVMu+58TM=) 3: B5787D648E70D60E0E09510EBF1809D686E83D03.crl (hash: pBJviIFeKQ3EI+7BDMPWCvLDqqdCIuUCnHuVXvVt4WQ=) 4: 3130332e3137322e3138372e302f32342d3234203d3e20313432343030.roa (hash: UMxzpZwJkuyWT8WiV33AdNXTdJHylmbT6yyy6htu0s4=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/22f5f07c-f07b-4aaa-a0c2-df17c910c586/0/B5787D648E70D60E0E09510EBF1809D686E83D03.crl rsync://repo-rpki.idnic.net/repo/22f5f07c-f07b-4aaa-a0c2-df17c910c586/0/B5787D648E70D60E0E09510EBF1809D686E83D03.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B5787D648E70D60E0E09510EBF1809D686E83D03.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 27 Dec 2025 14:16:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 61:b2:ed:c8:28:51:e7:b9:7a:f6:b3:c8:6f:ca:0b:61:af:b7:3e:a7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B5787D648E70D60E0E09510EBF1809D686E83D03 Validity Not Before: Dec 24 09:50:05 2025 GMT Not After : Dec 27 14:16:05 2025 GMT Subject: CN=8258CA228D2FA488C7E62C960574D329E6037B8F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:d9:12:b6:da:8b:2a:41:08:6d:5b:7a:81:2b: 00:92:8b:3d:93:1b:b8:e0:b7:ff:4e:2d:5a:f4:0f: 91:3b:2d:3c:81:0e:7e:1c:f9:7d:63:24:c8:71:b3: 14:36:31:68:f1:49:29:ff:20:97:10:f1:14:1e:0a: 4c:41:69:24:2d:0d:c6:93:ab:86:b2:91:ab:8b:d0: 81:00:b0:f6:0e:f1:84:49:0d:a8:be:91:46:01:59: 13:ab:c1:3c:e5:13:ea:25:c9:9b:6a:39:e6:75:fa: f6:4f:63:d2:5c:e7:3e:b4:dc:cf:d1:90:af:21:b8: b8:fc:5d:dc:88:03:4a:bb:c0:ab:2a:cb:f9:35:82: f3:e5:f6:5b:6c:75:d3:38:01:3c:90:26:94:e4:65: 32:70:33:7f:2c:7d:68:1e:d8:2c:6d:24:bc:bf:85: 7d:f7:42:73:68:b5:32:96:d0:b7:51:c8:c4:ca:fa: 72:6a:8b:ff:92:a7:49:b9:da:10:2d:50:34:f6:4c: d1:e5:64:14:d7:14:e4:8b:74:0d:41:c8:ab:e6:b7: 21:0b:e8:f1:6a:9e:35:58:70:79:ce:2e:d1:a7:3e: a3:60:db:6f:e7:f9:4b:8d:31:3c:4b:84:aa:c3:0c: 4c:f8:8f:3a:68:c3:c0:e3:ee:76:55:88:17:ce:91: 7f:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 82:58:CA:22:8D:2F:A4:88:C7:E6:2C:96:05:74:D3:29:E6:03:7B:8F X509v3 Authority Key Identifier: keyid:B5:78:7D:64:8E:70:D6:0E:0E:09:51:0E:BF:18:09:D6:86:E8:3D:03 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/22f5f07c-f07b-4aaa-a0c2-df17c910c586/0/B5787D648E70D60E0E09510EBF1809D686E83D03.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B5787D648E70D60E0E09510EBF1809D686E83D03.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/22f5f07c-f07b-4aaa-a0c2-df17c910c586/0/B5787D648E70D60E0E09510EBF1809D686E83D03.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 45:56:80:a4:d1:50:96:a2:d5:bc:4f:c2:4c:94:60:44:55:8b: 62:84:47:38:38:79:67:e9:a1:cd:82:10:11:cf:96:df:c0:14: 2a:4e:99:e4:64:6c:46:d9:52:66:15:d6:f4:36:93:b9:26:92: b5:31:40:29:d8:52:35:d3:81:cf:27:cd:df:88:ea:64:62:45: dc:a3:c4:76:57:92:98:38:c1:1e:80:16:38:3e:72:0b:b8:0b: 1a:39:04:c6:fd:32:f0:80:92:cb:ac:e3:d9:68:8b:62:d1:96: 34:b1:b3:7c:c2:a1:f9:8d:fc:8a:91:4d:f5:36:2e:6a:b2:94: ac:3b:4a:13:ae:5a:3d:c9:fa:28:e1:d7:ba:fe:de:7e:9b:f4: 0c:41:10:ae:78:9a:db:4c:e5:94:7f:d9:84:b9:28:ae:a2:88: 77:51:94:ca:c4:d1:12:71:de:6f:0f:75:e9:68:f7:f5:7f:f2: a4:cd:fd:07:65:79:ac:a5:43:b3:16:97:bd:94:a9:0f:9d:50: 6a:39:f3:1f:cd:a4:92:66:fd:66:3a:48:4a:43:db:71:af:71: d8:0a:a7:3b:93:63:87:0e:61:26:a5:5f:1f:2e:89:7f:74:c1: d1:c6:b5:76:79:c9:63:45:03:a5:60:69:ee:14:26:8b:6e:6a: ff:e1:22:f5 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUYbLtyChR57l69rPIb8oLYa+3PqcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjU3ODdENjQ4RTcwRDYwRTBFMDk1MTBFQkYxODA5RDY4 NkU4M0QwMzAeFw0yNTEyMjQwOTUwMDVaFw0yNTEyMjcxNDE2MDVaMDMxMTAvBgNV BAMTKDgyNThDQTIyOEQyRkE0ODhDN0U2MkM5NjA1NzREMzI5RTYwMzdCOEYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/2RK22osqQQhtW3qBKwCSiz2T G7jgt/9OLVr0D5E7LTyBDn4c+X1jJMhxsxQ2MWjxSSn/IJcQ8RQeCkxBaSQtDcaT q4aykauL0IEAsPYO8YRJDai+kUYBWROrwTzlE+olyZtqOeZ1+vZPY9Jc5z603M/R kK8huLj8XdyIA0q7wKsqy/k1gvPl9ltsddM4ATyQJpTkZTJwM38sfWge2CxtJLy/ hX33QnNotTKW0LdRyMTK+nJqi/+Sp0m52hAtUDT2TNHlZBTXFOSLdA1ByKvmtyEL 6PFqnjVYcHnOLtGnPqNg22/n+UuNMTxLhKrDDEz4jzpow8Dj7nZViBfOkX/dAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUgljKIo0vpIjH5iyWBXTTKeYDe48wHwYDVR0j BBgwFoAUtXh9ZI5w1g4OCVEOvxgJ1oboPQMwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y MmY1ZjA3Yy1mMDdiLTRhYWEtYTBjMi1kZjE3YzkxMGM1ODYvMC9CNTc4N0Q2NDhF NzBENjBFMEUwOTUxMEVCRjE4MDlENjg2RTgzRDAzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQjU3ODdENjQ4RTcwRDYwRTBFMDk1MTBFQkYxODA5RDY4NkU4 M0QwMy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMjJmNWYwN2MtZjA3Yi00YWFhLWEw YzItZGYxN2M5MTBjNTg2LzAvQjU3ODdENjQ4RTcwRDYwRTBFMDk1MTBFQkYxODA5 RDY4NkU4M0QwMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEVWgKTRUJai1bxPwkyUYERVi2KERzg4eWfp oc2CEBHPlt/AFCpOmeRkbEbZUmYV1vQ2k7kmkrUxQCnYUjXTgc8nzd+I6mRiRdyj xHZXkpg4wR6AFjg+cgu4Cxo5BMb9MvCAksus49loi2LRljSxs3zCofmN/IqRTfU2 LmqylKw7ShOuWj3J+ijh17r+3n6b9AxBEK54mttM5ZR/2YS5KK6iiHdRlMrE0RJx 3m8Pdelo9/V/8qTN/QdleaylQ7MWl72UqQ+dUGo58x/NpJJm/WY6SEpD23GvcdgK pzuTY4cOYSalXx8uiX90wdHGtXZ5yWNFA6Vgae4UJotuav/hIvU= -----END CERTIFICATE-----Generated at Wed Dec 24 20:25:14 2025 by rpki-client