This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/42713a32-fada-484e-a68d-0cac0fffa33c/0/B0FA6C3ED4780E032B0A3F161E018A7C8FA82B45.mft File: B0FA6C3ED4780E032B0A3F161E018A7C8FA82B45.mft (raw, json) Hash identifier: jW8e49rW76Ae1gr3WsbbQM36NNq+yPrXsLO3VK8LKTo= Subject key identifier: C5:C3:4A:30:11:BA:27:DC:86:66:E8:D7:9E:39:34:2B:F7:49:0B:AD Authority key identifier: B0:FA:6C:3E:D4:78:0E:03:2B:0A:3F:16:1E:01:8A:7C:8F:A8:2B:45 Certificate issuer: /CN=B0FA6C3ED4780E032B0A3F161E018A7C8FA82B45 Certificate serial: 435142AAE6D55D2526196E0BCD107614CBB62E21 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B0FA6C3ED4780E032B0A3F161E018A7C8FA82B45.cer Subject info access: rsync://repo-rpki.idnic.net/repo/42713a32-fada-484e-a68d-0cac0fffa33c/0/B0FA6C3ED4780E032B0A3F161E018A7C8FA82B45.mft Manifest number: 0250 Signing time: Tue 23 Dec 2025 18:43:30 +0000 Manifest this update: Tue 23 Dec 2025 18:38:30 +0000 Manifest next update: Fri 26 Dec 2025 23:01:30 +0000 Files and hashes: 1: 3130332e3138362e3136382e302f32332d3233203d3e20313439333135.roa (hash: 0o9IBgjEwrH3ZJGqMXSmtJgW+TONR3n1c/K3AjhSCz0=) 2: 3130332e3138362e3136382e302f32342d3234203d3e20313439333135.roa (hash: cA/IXkQfExxLqkZklRIGA4Iq/8wfMruGPEzuyZnNgNM=) 3: 3130332e3138362e3136392e302f32342d3234203d3e20313439333135.roa (hash: k0YtTjCvRfHkKBkEOTB9msrr0NImtoiaOd/b0Un02oI=) 4: B0FA6C3ED4780E032B0A3F161E018A7C8FA82B45.crl (hash: jg4jS3QxrO5HwxObl+QVxWuRyD6mVY+SWvl4DnfuROo=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/42713a32-fada-484e-a68d-0cac0fffa33c/0/B0FA6C3ED4780E032B0A3F161E018A7C8FA82B45.crl rsync://repo-rpki.idnic.net/repo/42713a32-fada-484e-a68d-0cac0fffa33c/0/B0FA6C3ED4780E032B0A3F161E018A7C8FA82B45.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B0FA6C3ED4780E032B0A3F161E018A7C8FA82B45.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 26 Dec 2025 23:01:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 43:51:42:aa:e6:d5:5d:25:26:19:6e:0b:cd:10:76:14:cb:b6:2e:21 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B0FA6C3ED4780E032B0A3F161E018A7C8FA82B45 Validity Not Before: Dec 23 18:38:30 2025 GMT Not After : Dec 26 23:01:30 2025 GMT Subject: CN=C5C34A3011BA27DC8666E8D79E39342BF7490BAD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:87:f9:d1:c4:a4:78:53:93:87:45:93:bf:62: e9:1c:a7:c8:26:e4:3f:8e:fc:3f:ba:3a:5f:f0:8b: 2e:b9:d1:37:b6:c3:14:eb:0e:af:45:45:f2:2d:a1: 4b:24:72:e0:cf:62:6f:49:dd:50:3f:43:6b:d2:8e: 4f:e4:b7:0d:47:55:a8:96:ac:52:a2:e4:9b:2d:da: 5a:90:b7:51:94:a3:d5:53:d5:39:91:2a:57:1d:d2: f1:fe:70:08:95:b4:34:39:6c:70:20:ef:d2:b9:01: 66:2e:23:af:41:d2:fa:f5:96:92:2d:ee:de:03:ae: b8:ed:c5:38:a9:1e:c4:d2:04:47:b6:34:e6:17:d6: 90:4c:2a:41:30:70:d8:7c:88:cc:52:57:8f:de:f0: d8:5f:6a:94:28:5c:5a:a8:a3:07:23:f0:3d:d9:c6: 85:31:b3:a1:a6:99:7e:cf:4a:22:d0:2b:af:8e:ca: 37:57:ae:6b:ba:57:95:4f:3e:13:86:d3:2b:31:08: 6a:e0:31:70:05:f5:ce:16:52:ba:a3:57:67:b1:1c: f7:b4:8f:15:5f:47:43:24:b3:03:78:3b:d0:8c:8d: 49:e9:08:e2:8b:2c:d6:be:73:f7:e5:f0:c7:f0:fc: f7:eb:f4:34:df:cd:48:c9:6d:e6:cd:92:01:9d:1d: bf:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:C3:4A:30:11:BA:27:DC:86:66:E8:D7:9E:39:34:2B:F7:49:0B:AD X509v3 Authority Key Identifier: keyid:B0:FA:6C:3E:D4:78:0E:03:2B:0A:3F:16:1E:01:8A:7C:8F:A8:2B:45 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/42713a32-fada-484e-a68d-0cac0fffa33c/0/B0FA6C3ED4780E032B0A3F161E018A7C8FA82B45.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B0FA6C3ED4780E032B0A3F161E018A7C8FA82B45.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/42713a32-fada-484e-a68d-0cac0fffa33c/0/B0FA6C3ED4780E032B0A3F161E018A7C8FA82B45.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8f:76:be:33:9e:ed:74:59:d1:f5:b5:f7:56:21:7f:1f:ae:fa: 87:95:5d:29:3e:cd:e2:05:c5:55:5f:75:c4:de:7b:ad:fe:fa: 98:a9:df:27:d9:8c:30:61:4f:2e:61:ff:7b:7e:34:1d:0f:82: c1:2f:2f:78:e2:50:13:4e:a3:be:d4:bb:ce:21:e9:34:51:70: 91:ff:a2:5f:34:21:01:82:14:07:e9:8c:86:5c:01:7a:67:0e: 34:71:92:50:68:8c:c0:70:09:02:d4:47:88:93:05:d6:92:d5: df:1e:d1:f0:b2:90:04:45:ea:51:d6:21:d9:85:8c:3f:59:c2: 55:72:e1:e1:d3:a3:87:44:dd:40:bf:5a:6e:d9:09:3a:03:94: 40:46:43:26:da:a6:fd:90:0d:14:2f:15:9a:55:ec:c6:97:a0: 9a:4b:c0:42:da:78:32:ef:80:c7:32:66:b1:a8:d4:16:70:e0: 65:a7:51:ce:eb:c6:8b:17:bb:66:c3:5a:4e:14:6b:5b:29:ca: 7d:87:80:27:a6:08:07:82:ce:f6:e8:52:ce:2b:99:72:fd:0d: d3:7c:c4:12:6e:bc:d1:ca:e3:38:ca:5d:4e:46:a7:cf:2d:ba: 27:7f:33:44:60:54:ef:1d:6e:db:c8:6f:bf:c6:63:71:ea:62: 61:ca:19:54 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUQ1FCqubVXSUmGW4LzRB2FMu2LiEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjBGQTZDM0VENDc4MEUwMzJCMEEzRjE2MUUwMThBN0M4 RkE4MkI0NTAeFw0yNTEyMjMxODM4MzBaFw0yNTEyMjYyMzAxMzBaMDMxMTAvBgNV BAMTKEM1QzM0QTMwMTFCQTI3REM4NjY2RThENzlFMzkzNDJCRjc0OTBCQUQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDZh/nRxKR4U5OHRZO/Yukcp8gm 5D+O/D+6Ol/wiy650Te2wxTrDq9FRfItoUskcuDPYm9J3VA/Q2vSjk/ktw1HVaiW rFKi5Jst2lqQt1GUo9VT1TmRKlcd0vH+cAiVtDQ5bHAg79K5AWYuI69B0vr1lpIt 7t4DrrjtxTipHsTSBEe2NOYX1pBMKkEwcNh8iMxSV4/e8NhfapQoXFqoowcj8D3Z xoUxs6GmmX7PSiLQK6+OyjdXrmu6V5VPPhOG0ysxCGrgMXAF9c4WUrqjV2exHPe0 jxVfR0MkswN4O9CMjUnpCOKLLNa+c/fl8Mfw/Pfr9DTfzUjJbebNkgGdHb/7AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUxcNKMBG6J9yGZujXnjk0K/dJC60wHwYDVR0j BBgwFoAUsPpsPtR4DgMrCj8WHgGKfI+oK0UwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 MjcxM2EzMi1mYWRhLTQ4NGUtYTY4ZC0wY2FjMGZmZmEzM2MvMC9CMEZBNkMzRUQ0 NzgwRTAzMkIwQTNGMTYxRTAxOEE3QzhGQTgyQjQ1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQjBGQTZDM0VENDc4MEUwMzJCMEEzRjE2MUUwMThBN0M4RkE4 MkI0NS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNDI3MTNhMzItZmFkYS00ODRlLWE2 OGQtMGNhYzBmZmZhMzNjLzAvQjBGQTZDM0VENDc4MEUwMzJCMEEzRjE2MUUwMThB N0M4RkE4MkI0NS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAI92vjOe7XRZ0fW191Yhfx+u+oeVXSk+zeIF xVVfdcTee63++pip3yfZjDBhTy5h/3t+NB0PgsEvL3jiUBNOo77Uu84h6TRRcJH/ ol80IQGCFAfpjIZcAXpnDjRxklBojMBwCQLUR4iTBdaS1d8e0fCykARF6lHWIdmF jD9ZwlVy4eHTo4dE3UC/Wm7ZCToDlEBGQybapv2QDRQvFZpV7MaXoJpLwELaeDLv gMcyZrGo1BZw4GWnUc7rxosXu2bDWk4Ua1spyn2HgCemCAeCzvboUs4rmXL9DdN8 xBJuvNHK4zjKXU5Gp88tuid/M0RgVO8dbtvIb7/GY3HqYmHKGVQ= -----END CERTIFICATE-----Generated at Wed Dec 24 22:10:48 2025 by rpki-client