This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/3b905766-440e-4bcb-ae72-3e78831ce9dc/0/B2650BD2D997B6C198A4B362B7395AC364683312.mft File: B2650BD2D997B6C198A4B362B7395AC364683312.mft (raw, json) Hash identifier: 4stm7SfWFqA3fFQi3kXW+t3wfx/edeGAUt1xdjuM+rQ= Subject key identifier: EA:5E:56:3B:53:8B:46:76:A3:D6:4B:63:33:B3:B3:AE:F4:33:FA:17 Authority key identifier: B2:65:0B:D2:D9:97:B6:C1:98:A4:B3:62:B7:39:5A:C3:64:68:33:12 Certificate issuer: /CN=B2650BD2D997B6C198A4B362B7395AC364683312 Certificate serial: 3281FB820D9378833320B258A7CFE94942F76E75 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B2650BD2D997B6C198A4B362B7395AC364683312.cer Subject info access: rsync://repo-rpki.idnic.net/repo/3b905766-440e-4bcb-ae72-3e78831ce9dc/0/B2650BD2D997B6C198A4B362B7395AC364683312.mft Manifest number: 020E Signing time: Wed 24 Dec 2025 06:00:58 +0000 Manifest this update: Wed 24 Dec 2025 05:55:58 +0000 Manifest next update: Sat 27 Dec 2025 13:47:58 +0000 Files and hashes: 1: 3130332e31372e33332e302f32342d3234203d3e20313530323238.roa (hash: Din5W7YK7LMJbRJUi9wsZasS4GJU6jj09R0J09VzjXg=) 2: B2650BD2D997B6C198A4B362B7395AC364683312.crl (hash: Vzv7B6jBg7w0dK96AAQhuDzI0FJvkkys9la7C5aEe+4=) 3: 3130332e31372e33322e302f32342d3234203d3e20313530323238.roa (hash: IFrFNgL9nGnkBy6pVhjob4v5DLOWZyxcdQ+rkKOm7OM=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/3b905766-440e-4bcb-ae72-3e78831ce9dc/0/B2650BD2D997B6C198A4B362B7395AC364683312.crl rsync://repo-rpki.idnic.net/repo/3b905766-440e-4bcb-ae72-3e78831ce9dc/0/B2650BD2D997B6C198A4B362B7395AC364683312.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B2650BD2D997B6C198A4B362B7395AC364683312.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 27 Dec 2025 13:47:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 32:81:fb:82:0d:93:78:83:33:20:b2:58:a7:cf:e9:49:42:f7:6e:75 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B2650BD2D997B6C198A4B362B7395AC364683312 Validity Not Before: Dec 24 05:55:58 2025 GMT Not After : Dec 27 13:47:58 2025 GMT Subject: CN=EA5E563B538B4676A3D64B6333B3B3AEF433FA17 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:4a:c2:a0:a8:b5:8a:51:e9:ce:97:29:40:d7: 7b:92:d2:ac:2c:7e:eb:71:cb:44:f7:f4:42:d4:8c: 3b:d8:ac:7d:90:40:9e:03:64:5e:ca:7d:cc:eb:af: 50:7b:88:0d:4a:4b:7f:1b:ad:99:0a:9c:15:2a:97: c6:30:94:48:70:81:f2:43:9e:b6:2d:28:01:4b:a6: 77:ad:63:bf:31:e4:83:ed:71:5b:6a:d1:2f:96:6f: 0e:f0:cd:56:b8:76:61:49:04:5c:66:56:a9:c8:22: 2f:92:ee:86:5b:e8:6d:74:7a:c0:6d:27:8d:6e:8f: ab:10:ca:84:d9:f0:2c:0f:5c:ec:c0:70:ef:13:00: a5:81:72:78:be:4d:a6:78:bd:d3:72:56:b2:0c:21: 0c:34:67:22:48:24:e8:e1:11:cc:9e:d0:a7:7b:2c: c8:f0:86:44:14:1c:e7:2d:44:a1:35:bd:51:6f:fc: 2b:4c:df:c5:51:48:b2:8f:ca:1f:a3:c3:33:ac:74: 82:f1:1f:52:cd:55:d1:24:be:f3:e3:9c:d3:9c:c5: 22:2e:82:94:a3:50:9a:9b:f8:16:af:c5:f0:8b:83: a8:19:d3:40:1f:a7:b2:a7:0a:46:38:42:fd:17:0b: fa:4e:5d:df:86:02:93:e2:b1:a0:b3:92:3a:82:dd: 03:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EA:5E:56:3B:53:8B:46:76:A3:D6:4B:63:33:B3:B3:AE:F4:33:FA:17 X509v3 Authority Key Identifier: keyid:B2:65:0B:D2:D9:97:B6:C1:98:A4:B3:62:B7:39:5A:C3:64:68:33:12 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/3b905766-440e-4bcb-ae72-3e78831ce9dc/0/B2650BD2D997B6C198A4B362B7395AC364683312.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B2650BD2D997B6C198A4B362B7395AC364683312.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3b905766-440e-4bcb-ae72-3e78831ce9dc/0/B2650BD2D997B6C198A4B362B7395AC364683312.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 39:92:31:a4:71:05:56:7e:8f:27:74:66:11:98:18:73:e8:e3: 84:d5:82:aa:89:f3:c6:14:e6:05:53:75:ed:e7:a8:56:36:8b: 6b:46:38:d0:cf:a7:ab:2b:d2:79:7a:d3:3d:f8:b8:11:6d:73: e2:0e:8a:8a:a2:b6:f9:25:bd:a8:9a:6a:0e:6d:56:24:72:27: 11:16:d2:53:82:76:5f:82:ef:75:bc:e3:f4:c4:bc:aa:1b:7d: 2f:87:6b:12:fe:47:cb:3e:7e:76:bb:3c:a8:33:ff:9b:d5:b9: 51:2f:16:72:92:77:c5:74:67:dd:01:3c:6c:09:a8:50:9f:7a: 14:4d:2f:55:8c:77:3e:50:16:ff:a0:d9:af:a7:e0:f6:54:44: 2b:d7:3b:90:7d:b7:dd:af:96:58:4b:52:1c:47:39:ac:75:aa: cf:ae:55:23:b7:9e:ed:ca:96:f7:14:65:f6:ea:e0:1b:07:22: d1:19:a1:46:8e:1f:64:27:13:ef:43:7e:da:57:84:73:a6:55: ba:a3:21:bd:6d:4e:8c:66:f9:cf:74:73:bc:2b:ef:91:22:0d: 71:ff:a5:70:91:b7:9f:61:39:38:05:b9:d7:64:b9:e6:62:ff: 95:5f:60:56:9f:9e:e4:89:ba:e4:99:46:e7:94:27:f1:c6:3e: 6e:c9:61:4a -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUMoH7gg2TeIMzILJYp8/pSUL3bnUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjI2NTBCRDJEOTk3QjZDMTk4QTRCMzYyQjczOTVBQzM2 NDY4MzMxMjAeFw0yNTEyMjQwNTU1NThaFw0yNTEyMjcxMzQ3NThaMDMxMTAvBgNV BAMTKEVBNUU1NjNCNTM4QjQ2NzZBM0Q2NEI2MzMzQjNCM0FFRjQzM0ZBMTcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+SsKgqLWKUenOlylA13uS0qws futxy0T39ELUjDvYrH2QQJ4DZF7Kfczrr1B7iA1KS38brZkKnBUql8YwlEhwgfJD nrYtKAFLpnetY78x5IPtcVtq0S+Wbw7wzVa4dmFJBFxmVqnIIi+S7oZb6G10esBt J41uj6sQyoTZ8CwPXOzAcO8TAKWBcni+TaZ4vdNyVrIMIQw0ZyJIJOjhEcye0Kd7 LMjwhkQUHOctRKE1vVFv/CtM38VRSLKPyh+jwzOsdILxH1LNVdEkvvPjnNOcxSIu gpSjUJqb+BavxfCLg6gZ00Afp7KnCkY4Qv0XC/pOXd+GApPisaCzkjqC3QP7AgMB AAGjggI8MIICODAdBgNVHQ4EFgQU6l5WO1OLRnaj1ktjM7OzrvQz+hcwHwYDVR0j BBgwFoAUsmUL0tmXtsGYpLNitzlaw2RoMxIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z YjkwNTc2Ni00NDBlLTRiY2ItYWU3Mi0zZTc4ODMxY2U5ZGMvMC9CMjY1MEJEMkQ5 OTdCNkMxOThBNEIzNjJCNzM5NUFDMzY0NjgzMzEyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQjI2NTBCRDJEOTk3QjZDMTk4QTRCMzYyQjczOTVBQzM2NDY4 MzMxMi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vM2I5MDU3NjYtNDQwZS00YmNiLWFl NzItM2U3ODgzMWNlOWRjLzAvQjI2NTBCRDJEOTk3QjZDMTk4QTRCMzYyQjczOTVB QzM2NDY4MzMxMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADmSMaRxBVZ+jyd0ZhGYGHPo44TVgqqJ88YU 5gVTde3nqFY2i2tGONDPp6sr0nl60z34uBFtc+IOioqitvklvaiaag5tViRyJxEW 0lOCdl+C73W84/TEvKobfS+HaxL+R8s+fna7PKgz/5vVuVEvFnKSd8V0Z90BPGwJ qFCfehRNL1WMdz5QFv+g2a+n4PZURCvXO5B9t92vllhLUhxHOax1qs+uVSO3nu3K lvcUZfbq4BsHItEZoUaOH2QnE+9DftpXhHOmVbqjIb1tToxm+c90c7wr75EiDXH/ pXCRt59hOTgFuddkueZi/5VfYFafnuSJuuSZRueUJ/HGPm7JYUo= -----END CERTIFICATE-----Generated at Wed Dec 24 20:04:48 2025 by rpki-client