This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/45dff9b3-9041-4dd6-b7ab-02060d65d09a/0/B605D71FEB5A1DBE5676CFACB394ABBA37C83A86.mft File: B605D71FEB5A1DBE5676CFACB394ABBA37C83A86.mft (raw, json) Hash identifier: kqbHqR/XliwoTb6hiDeod4aq1jzEJkNAoCM4jSsZZYI= Subject key identifier: E4:FE:9E:08:55:5D:E4:A5:7E:8F:79:CE:49:6A:49:1D:99:F7:25:8B Authority key identifier: B6:05:D7:1F:EB:5A:1D:BE:56:76:CF:AC:B3:94:AB:BA:37:C8:3A:86 Certificate issuer: /CN=B605D71FEB5A1DBE5676CFACB394ABBA37C83A86 Certificate serial: 4DED368B5A161EC1AA8A6B23766249E5BAB690F8 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B605D71FEB5A1DBE5676CFACB394ABBA37C83A86.cer Subject info access: rsync://repo-rpki.idnic.net/repo/45dff9b3-9041-4dd6-b7ab-02060d65d09a/0/B605D71FEB5A1DBE5676CFACB394ABBA37C83A86.mft Manifest number: 0534 Signing time: Wed 17 Dec 2025 11:52:14 +0000 Manifest this update: Wed 17 Dec 2025 11:47:14 +0000 Manifest next update: Sat 20 Dec 2025 22:20:14 +0000 Files and hashes: 1: 3130332e3132342e3139362e302f32342d3234203d3e20313338303936.roa (hash: n0pHhF58CPylB9y5w46zbjaPBFWjrRvur8ZNb3WIRks=) 2: 3130332e3132342e3139392e302f32342d3234203d3e20313338303936.roa (hash: 9iKS8p7Xao18ldzefre+pP4jboQ9AAl4Hg0B9pQyQbE=) 3: 3130332e3132342e3139382e302f32342d3234203d3e20313338303936.roa (hash: 6uaz9H2C0Zmi7+Kl7mXUqp61Tn9wAvtzejcx5d8BSvE=) 4: 3130332e3132342e3139372e302f32342d3234203d3e20313338303936.roa (hash: nzLKnI/D3cwy5mjROOKEojLaE+IM3VD8CZS+m6prGYU=) 5: B605D71FEB5A1DBE5676CFACB394ABBA37C83A86.crl (hash: S+aW5zCqKWVLsaLs+aDOwOudycRdNfmYqDSWWUAdBCU=) 6: 323430333a653434303a3a2f33322d3332203d3e20313338303936.roa (hash: NFm2BuROSXEUux226kkrY22nGhWfXy6Nzi8qa9TvywQ=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/45dff9b3-9041-4dd6-b7ab-02060d65d09a/0/B605D71FEB5A1DBE5676CFACB394ABBA37C83A86.crl rsync://repo-rpki.idnic.net/repo/45dff9b3-9041-4dd6-b7ab-02060d65d09a/0/B605D71FEB5A1DBE5676CFACB394ABBA37C83A86.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B605D71FEB5A1DBE5676CFACB394ABBA37C83A86.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 20 Dec 2025 22:20:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4d:ed:36:8b:5a:16:1e:c1:aa:8a:6b:23:76:62:49:e5:ba:b6:90:f8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B605D71FEB5A1DBE5676CFACB394ABBA37C83A86 Validity Not Before: Dec 17 11:47:14 2025 GMT Not After : Dec 20 22:20:14 2025 GMT Subject: CN=E4FE9E08555DE4A57E8F79CE496A491D99F7258B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:32:a7:42:5f:25:2d:3f:65:66:80:88:80:20: 64:58:ad:56:b4:93:60:18:d7:dd:fd:aa:96:37:7f: 60:1e:76:0f:67:83:fd:23:27:41:63:af:a3:6f:c6: e5:63:6e:0e:45:dd:59:ba:ce:18:0c:46:0d:89:eb: de:ea:c7:58:57:59:ae:a4:15:d6:5b:71:a1:3d:ac: 21:c6:66:29:08:03:f3:d4:97:fe:5c:b7:c5:0c:54: 7b:5c:df:da:ab:f8:94:d9:0c:0b:3c:ac:0d:25:80: 37:b1:84:bb:b8:26:3a:c3:3b:7f:60:22:2b:75:69: 6d:24:a8:42:67:d8:f4:7e:6c:78:fe:d0:97:6e:af: c6:99:59:fd:89:1d:44:f9:bf:b0:f2:c9:e7:85:22: 88:b0:69:10:8f:c5:80:c2:d2:3a:d4:7d:0e:73:82: 74:33:3a:40:01:fe:dd:e4:ce:6c:2f:c5:b0:e2:20: a6:8e:b2:b0:ca:85:bc:9e:e6:e1:45:e7:36:e3:a4: 90:8e:4b:42:a5:4d:e0:28:70:0d:4a:c6:fa:91:96: 2f:0b:e2:cc:ec:34:47:e5:05:c6:90:9d:13:32:f6: 33:41:f8:e0:39:44:4f:7e:13:e6:8a:f5:5d:eb:da: ec:bd:d6:04:1f:0e:96:5b:3c:8a:69:a1:a0:b1:38: 9d:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E4:FE:9E:08:55:5D:E4:A5:7E:8F:79:CE:49:6A:49:1D:99:F7:25:8B X509v3 Authority Key Identifier: keyid:B6:05:D7:1F:EB:5A:1D:BE:56:76:CF:AC:B3:94:AB:BA:37:C8:3A:86 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/45dff9b3-9041-4dd6-b7ab-02060d65d09a/0/B605D71FEB5A1DBE5676CFACB394ABBA37C83A86.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B605D71FEB5A1DBE5676CFACB394ABBA37C83A86.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/45dff9b3-9041-4dd6-b7ab-02060d65d09a/0/B605D71FEB5A1DBE5676CFACB394ABBA37C83A86.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a7:6e:7b:63:35:6a:cc:6a:9e:bc:54:05:6c:b2:3e:01:90:22: a4:f7:34:7a:53:46:8b:3e:ef:6a:56:10:8f:2b:be:16:7f:1f: 51:93:9f:f1:7e:2f:45:99:5f:e4:a1:ac:91:5e:1c:02:89:8f: 3b:2a:82:b6:a1:0f:96:91:67:51:71:ef:ad:31:41:ef:c8:e2: c2:06:44:c4:b0:da:bb:96:7b:94:4d:48:eb:e8:07:5f:3a:3c: 9d:45:43:50:a1:e3:c5:bd:47:a7:39:e4:85:fd:75:db:fa:23: 01:d2:ba:52:b1:81:83:a8:ea:e4:4b:ed:78:da:f5:09:07:6f: 9d:1e:93:63:9a:c9:44:aa:d1:f8:7b:d1:c2:24:14:75:84:2c: 79:9f:7b:ea:95:01:b7:3f:4a:5e:4d:08:a7:b5:66:42:dd:61: 3c:c8:64:3c:a7:50:df:9f:8a:97:9e:56:d4:35:ad:46:af:d1: f0:66:47:82:c1:b9:fe:d5:a1:e2:14:97:9d:e0:46:fe:5f:2f: a1:4d:17:34:ba:ac:1b:a0:a4:95:15:eb:dd:8d:bb:38:92:41: 7e:90:3a:23:61:01:18:51:0d:02:17:4b:0c:b4:8c:dc:7a:b9: 4d:1a:03:1b:f6:ec:e1:87:3c:40:2f:c2:19:b1:9a:c5:2e:5a: 7b:45:e0:b7 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUTe02i1oWHsGqimsjdmJJ5bq2kPgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjYwNUQ3MUZFQjVBMURCRTU2NzZDRkFDQjM5NEFCQkEz N0M4M0E4NjAeFw0yNTEyMTcxMTQ3MTRaFw0yNTEyMjAyMjIwMTRaMDMxMTAvBgNV BAMTKEU0RkU5RTA4NTU1REU0QTU3RThGNzlDRTQ5NkE0OTFEOTlGNzI1OEIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCkMqdCXyUtP2VmgIiAIGRYrVa0 k2AY1939qpY3f2Aedg9ng/0jJ0Fjr6NvxuVjbg5F3Vm6zhgMRg2J697qx1hXWa6k FdZbcaE9rCHGZikIA/PUl/5ct8UMVHtc39qr+JTZDAs8rA0lgDexhLu4JjrDO39g Iit1aW0kqEJn2PR+bHj+0Jdur8aZWf2JHUT5v7DyyeeFIoiwaRCPxYDC0jrUfQ5z gnQzOkAB/t3kzmwvxbDiIKaOsrDKhbye5uFF5zbjpJCOS0KlTeAocA1KxvqRli8L 4szsNEflBcaQnRMy9jNB+OA5RE9+E+aK9V3r2uy91gQfDpZbPIppoaCxOJ1XAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU5P6eCFVd5KV+j3nOSWpJHZn3JYswHwYDVR0j BBgwFoAUtgXXH+taHb5Wds+ss5SrujfIOoYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 NWRmZjliMy05MDQxLTRkZDYtYjdhYi0wMjA2MGQ2NWQwOWEvMC9CNjA1RDcxRkVC NUExREJFNTY3NkNGQUNCMzk0QUJCQTM3QzgzQTg2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQjYwNUQ3MUZFQjVBMURCRTU2NzZDRkFDQjM5NEFCQkEzN0M4 M0E4Ni5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNDVkZmY5YjMtOTA0MS00ZGQ2LWI3 YWItMDIwNjBkNjVkMDlhLzAvQjYwNUQ3MUZFQjVBMURCRTU2NzZDRkFDQjM5NEFC QkEzN0M4M0E4Ni5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKdue2M1asxqnrxUBWyyPgGQIqT3NHpTRos+ 72pWEI8rvhZ/H1GTn/F+L0WZX+ShrJFeHAKJjzsqgrahD5aRZ1Fx760xQe/I4sIG RMSw2ruWe5RNSOvoB186PJ1FQ1Ch48W9R6c55IX9ddv6IwHSulKxgYOo6uRL7Xja 9QkHb50ek2OayUSq0fh70cIkFHWELHmfe+qVAbc/Sl5NCKe1ZkLdYTzIZDynUN+f ipeeVtQ1rUav0fBmR4LBuf7VoeIUl53gRv5fL6FNFzS6rBugpJUV692NuziSQX6Q OiNhARhRDQIXSwy0jNx6uU0aAxv27OGHPEAvwhmxmsUuWntF4Lc= -----END CERTIFICATE-----Generated at Fri Dec 19 10:53:16 2025 by rpki-client