This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/46cbb6ae-138e-4d2b-93f1-e6b23e6fe8fb/0/BF00BBF622014234CC4A26C23F64AC5C143802B6.mft File: BF00BBF622014234CC4A26C23F64AC5C143802B6.mft (raw, json) Hash identifier: cI64KY73oBlhvGlf+TSbJYAvs8GwkLvjrarGUa69Flk= Subject key identifier: 30:D7:EB:86:C9:2F:75:08:0C:10:F0:0A:23:CB:E1:6E:4B:06:AD:2F Authority key identifier: BF:00:BB:F6:22:01:42:34:CC:4A:26:C2:3F:64:AC:5C:14:38:02:B6 Certificate issuer: /CN=BF00BBF622014234CC4A26C23F64AC5C143802B6 Certificate serial: 12813BC0664AB67C6C54C11F4DECC471CE86848D Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BF00BBF622014234CC4A26C23F64AC5C143802B6.cer Subject info access: rsync://repo-rpki.idnic.net/repo/46cbb6ae-138e-4d2b-93f1-e6b23e6fe8fb/0/BF00BBF622014234CC4A26C23F64AC5C143802B6.mft Manifest number: 0238 Signing time: Tue 16 Dec 2025 21:01:59 +0000 Manifest this update: Tue 16 Dec 2025 20:56:59 +0000 Manifest next update: Sat 20 Dec 2025 08:50:59 +0000 Files and hashes: 1: 3130332e3136392e382e302f32332d3234203d3e20313432333436.roa (hash: /hhYO5wRSFrwibEJunDDF1qr8Z/wP92fyPsYfBATpiA=) 2: BF00BBF622014234CC4A26C23F64AC5C143802B6.crl (hash: l5wMwkcBa9mzeeNv0gnvC0aTFuczFt2FWi0F/WFuWlg=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/46cbb6ae-138e-4d2b-93f1-e6b23e6fe8fb/0/BF00BBF622014234CC4A26C23F64AC5C143802B6.crl rsync://repo-rpki.idnic.net/repo/46cbb6ae-138e-4d2b-93f1-e6b23e6fe8fb/0/BF00BBF622014234CC4A26C23F64AC5C143802B6.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BF00BBF622014234CC4A26C23F64AC5C143802B6.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 20 Dec 2025 08:50:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 12:81:3b:c0:66:4a:b6:7c:6c:54:c1:1f:4d:ec:c4:71:ce:86:84:8d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BF00BBF622014234CC4A26C23F64AC5C143802B6 Validity Not Before: Dec 16 20:56:59 2025 GMT Not After : Dec 20 08:50:59 2025 GMT Subject: CN=30D7EB86C92F75080C10F00A23CBE16E4B06AD2F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:d3:11:9a:c1:03:01:84:1a:10:3a:10:a7:c2: 1c:8f:ed:83:f2:0d:49:d6:a4:bf:01:6c:67:8b:2b: 13:db:3f:e6:b4:79:b8:3a:45:c2:12:5b:8b:cb:f1: ca:51:5f:6f:75:19:64:d6:8e:d1:af:2b:38:e4:0e: fe:b2:db:1e:ba:98:e8:db:24:d0:eb:e5:9c:0c:ef: a8:a4:77:55:ac:2a:c0:a4:06:5c:81:e9:e5:17:3a: 58:7f:42:0d:2a:29:53:70:13:c7:0d:53:6a:5b:39: e9:71:5f:84:01:d3:6b:19:40:90:c4:6b:d5:2c:4c: 67:ce:cd:a9:7e:0a:af:1a:5c:1d:41:48:1c:c4:49: 55:10:f1:31:be:f1:b3:31:df:d6:36:0c:00:f9:ce: f2:7e:c5:99:9e:87:19:47:eb:fc:eb:42:47:ba:10: 48:41:2f:01:48:e5:30:f1:90:38:6a:72:3c:90:a7: 3a:ba:c2:dd:54:6c:d0:37:49:fc:e4:7f:73:60:ac: 6d:b5:53:1d:e6:7d:db:4a:0c:1a:4a:35:96:cd:63: 8f:24:26:64:78:7d:db:98:1d:28:72:64:77:4b:a5: a3:b3:98:d6:c2:e6:fc:31:36:70:aa:06:85:b4:a8: 9f:82:e4:59:36:c5:15:70:93:a5:6f:32:86:1a:d9: b5:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 30:D7:EB:86:C9:2F:75:08:0C:10:F0:0A:23:CB:E1:6E:4B:06:AD:2F X509v3 Authority Key Identifier: keyid:BF:00:BB:F6:22:01:42:34:CC:4A:26:C2:3F:64:AC:5C:14:38:02:B6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/46cbb6ae-138e-4d2b-93f1-e6b23e6fe8fb/0/BF00BBF622014234CC4A26C23F64AC5C143802B6.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BF00BBF622014234CC4A26C23F64AC5C143802B6.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/46cbb6ae-138e-4d2b-93f1-e6b23e6fe8fb/0/BF00BBF622014234CC4A26C23F64AC5C143802B6.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 31:e7:3d:cf:01:64:73:6c:31:3c:4e:7c:7f:8b:e3:76:7c:94: 70:fc:10:e6:2a:f7:ee:d0:14:54:db:dc:98:d3:8c:1e:2d:2e: d7:77:f7:93:7e:39:7f:d0:4d:10:a4:e7:a3:ee:8b:f5:e4:12: 2a:c8:33:1f:88:a3:12:d5:dd:79:a7:ca:25:d5:6d:07:b1:16: 3a:7d:42:eb:5d:b5:68:3d:d8:46:cf:fd:9e:1d:7d:6a:c4:ae: 7f:36:e4:64:08:60:25:4d:31:c9:56:cf:4e:58:3c:07:b9:a5: 2e:8c:25:f5:0f:02:ef:42:7b:f6:da:1d:34:95:bc:39:f7:8d: c7:1f:f9:17:6c:66:1e:2b:81:c0:6a:5a:13:12:55:d7:80:76: b3:43:54:91:e1:b6:38:20:c8:e5:9b:df:4b:17:f3:63:b3:aa: 91:2d:38:33:e3:d1:d3:be:c2:7f:4d:c5:f2:24:f9:dd:47:0b: db:f0:aa:e0:ac:9b:d6:65:87:72:21:2a:7b:6e:e3:9a:af:80: 44:e2:86:e8:1d:6d:4f:a0:5f:34:3c:92:21:89:f6:55:8c:dd: a4:33:3e:68:fb:39:8a:98:da:e3:b3:67:bf:6c:8d:0e:2b:85: 82:cd:a2:57:cd:a1:be:9b:d7:cc:90:0c:13:36:73:12:46:f2: a8:49:a9:2f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUEoE7wGZKtnxsVMEfTezEcc6GhI0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkYwMEJCRjYyMjAxNDIzNENDNEEyNkMyM0Y2NEFDNUMx NDM4MDJCNjAeFw0yNTEyMTYyMDU2NTlaFw0yNTEyMjAwODUwNTlaMDMxMTAvBgNV BAMTKDMwRDdFQjg2QzkyRjc1MDgwQzEwRjAwQTIzQ0JFMTZFNEIwNkFEMkYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCV0xGawQMBhBoQOhCnwhyP7YPy DUnWpL8BbGeLKxPbP+a0ebg6RcISW4vL8cpRX291GWTWjtGvKzjkDv6y2x66mOjb JNDr5ZwM76ikd1WsKsCkBlyB6eUXOlh/Qg0qKVNwE8cNU2pbOelxX4QB02sZQJDE a9UsTGfOzal+Cq8aXB1BSBzESVUQ8TG+8bMx39Y2DAD5zvJ+xZmehxlH6/zrQke6 EEhBLwFI5TDxkDhqcjyQpzq6wt1UbNA3Sfzkf3NgrG21Ux3mfdtKDBpKNZbNY48k JmR4fduYHShyZHdLpaOzmNbC5vwxNnCqBoW0qJ+C5Fk2xRVwk6VvMoYa2bVHAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUMNfrhskvdQgMEPAKI8vhbksGrS8wHwYDVR0j BBgwFoAUvwC79iIBQjTMSibCP2SsXBQ4ArYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 NmNiYjZhZS0xMzhlLTRkMmItOTNmMS1lNmIyM2U2ZmU4ZmIvMC9CRjAwQkJGNjIy MDE0MjM0Q0M0QTI2QzIzRjY0QUM1QzE0MzgwMkI2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQkYwMEJCRjYyMjAxNDIzNENDNEEyNkMyM0Y2NEFDNUMxNDM4 MDJCNi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNDZjYmI2YWUtMTM4ZS00ZDJiLTkz ZjEtZTZiMjNlNmZlOGZiLzAvQkYwMEJCRjYyMjAxNDIzNENDNEEyNkMyM0Y2NEFD NUMxNDM4MDJCNi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADHnPc8BZHNsMTxOfH+L43Z8lHD8EOYq9+7Q FFTb3JjTjB4tLtd395N+OX/QTRCk56Pui/XkEirIMx+IoxLV3XmnyiXVbQexFjp9 QutdtWg92EbP/Z4dfWrErn825GQIYCVNMclWz05YPAe5pS6MJfUPAu9Ce/baHTSV vDn3jccf+RdsZh4rgcBqWhMSVdeAdrNDVJHhtjggyOWb30sX82OzqpEtODPj0dO+ wn9NxfIk+d1HC9vwquCsm9Zlh3IhKntu45qvgETihugdbU+gXzQ8kiGJ9lWM3aQz Pmj7OYqY2uOzZ79sjQ4rhYLNolfNob6b18yQDBM2cxJG8qhJqS8= -----END CERTIFICATE-----Generated at Fri Dec 19 11:23:51 2025 by rpki-client