This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/50cb5c9b-f383-4e81-812c-0e227ad46b1b/0/BEB3B35BA1C3DACA59C6C525EA9823FF902AF998.mft File: BEB3B35BA1C3DACA59C6C525EA9823FF902AF998.mft (raw, json) Hash identifier: +BBSRKyfFa8XwJO1R+fvIN14PxOTc7Y5B926s8sQZ9Y= Subject key identifier: 9B:AE:5D:82:AD:8B:25:EB:85:03:58:84:E7:05:A5:A2:6A:65:42:28 Authority key identifier: BE:B3:B3:5B:A1:C3:DA:CA:59:C6:C5:25:EA:98:23:FF:90:2A:F9:98 Certificate issuer: /CN=BEB3B35BA1C3DACA59C6C525EA9823FF902AF998 Certificate serial: 4AE232FEDCFE4BB0F61EB25839C8843E5A9B4EE0 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BEB3B35BA1C3DACA59C6C525EA9823FF902AF998.cer Subject info access: rsync://repo-rpki.idnic.net/repo/50cb5c9b-f383-4e81-812c-0e227ad46b1b/0/BEB3B35BA1C3DACA59C6C525EA9823FF902AF998.mft Manifest number: 0533 Signing time: Wed 24 Dec 2025 15:21:40 +0000 Manifest this update: Wed 24 Dec 2025 15:16:40 +0000 Manifest next update: Sat 27 Dec 2025 15:40:40 +0000 Files and hashes: 1: BEB3B35BA1C3DACA59C6C525EA9823FF902AF998.crl (hash: Vvxtg/NdM2h+wOM4NFxgI7YLa7YfFeG7JP/CnjFf7UM=) 2: 3130332e3135312e32322e302f32332d3233203d3e20313430343034.roa (hash: 7A1iTDrwk8kXb580V7UHZYGVNfXcQ2O63NbSELLsFpc=) 3: 3130332e3135312e32322e302f32342d3234203d3e20313430343034.roa (hash: 2DJXbY7xN8WlOd/aLrW1rEx9vxnt9jS/uQOEXM2RB4s=) 4: 3130332e3135312e32332e302f32342d3234203d3e20313430343034.roa (hash: bYtdH3bHM7U4F7bJ3T9zU9hXlE72l+eUu+9la3AGBTU=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/50cb5c9b-f383-4e81-812c-0e227ad46b1b/0/BEB3B35BA1C3DACA59C6C525EA9823FF902AF998.crl rsync://repo-rpki.idnic.net/repo/50cb5c9b-f383-4e81-812c-0e227ad46b1b/0/BEB3B35BA1C3DACA59C6C525EA9823FF902AF998.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BEB3B35BA1C3DACA59C6C525EA9823FF902AF998.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 27 Dec 2025 15:40:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4a:e2:32:fe:dc:fe:4b:b0:f6:1e:b2:58:39:c8:84:3e:5a:9b:4e:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BEB3B35BA1C3DACA59C6C525EA9823FF902AF998 Validity Not Before: Dec 24 15:16:40 2025 GMT Not After : Dec 27 15:40:40 2025 GMT Subject: CN=9BAE5D82AD8B25EB85035884E705A5A26A654228 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:76:1b:44:4e:d8:8a:7e:e6:97:5f:96:04:76: c5:94:55:6c:d0:94:b9:e6:fd:47:63:b7:c6:f1:86: 8d:c6:23:d8:33:9e:91:dc:90:65:03:72:f5:7b:65: be:77:2d:58:28:8b:cf:a4:f1:17:76:f1:c8:76:96: 0c:7d:51:96:87:4f:35:2d:14:62:0c:04:15:e9:45: c9:2b:84:4a:ca:ed:4b:f9:9b:dd:09:6e:d1:9b:68: a0:0d:40:a4:26:62:a9:30:55:23:01:91:9e:b0:df: 09:15:cd:6c:d9:2b:4e:c5:2d:6d:86:09:21:46:64: 89:71:bc:7a:69:e1:4d:ad:34:56:7f:07:c3:8b:66: c4:e6:47:fc:73:05:29:12:13:93:7b:3a:ae:1c:8a: d0:18:24:ea:79:48:1c:f0:02:16:a0:a3:23:85:8c: c8:f9:15:00:13:c8:79:3c:66:25:9b:40:1c:e3:dd: 9a:4e:f7:4e:16:a5:ce:3a:57:e2:aa:7a:97:43:98: 81:0b:42:fd:d5:a3:e3:24:5e:73:af:ac:64:4a:7c: e2:5b:92:6f:fb:41:7b:e6:21:38:46:b6:45:14:91: 5c:85:79:f3:3c:62:44:a7:35:12:10:8b:99:7d:60: 0c:56:7c:30:ca:ee:8a:3e:cd:83:9c:18:a5:4e:57: a4:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9B:AE:5D:82:AD:8B:25:EB:85:03:58:84:E7:05:A5:A2:6A:65:42:28 X509v3 Authority Key Identifier: keyid:BE:B3:B3:5B:A1:C3:DA:CA:59:C6:C5:25:EA:98:23:FF:90:2A:F9:98 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/50cb5c9b-f383-4e81-812c-0e227ad46b1b/0/BEB3B35BA1C3DACA59C6C525EA9823FF902AF998.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BEB3B35BA1C3DACA59C6C525EA9823FF902AF998.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/50cb5c9b-f383-4e81-812c-0e227ad46b1b/0/BEB3B35BA1C3DACA59C6C525EA9823FF902AF998.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 90:6f:0f:0f:f8:2f:77:2d:37:27:ca:1e:49:de:0d:05:92:5b: f6:3b:b8:f5:03:8e:88:ac:4f:91:44:05:56:ab:f4:c6:65:04: fe:f0:1f:64:6e:57:98:db:a2:1c:24:42:bf:1b:54:ce:01:bd: 3e:7b:d0:d0:6c:03:ce:30:b1:51:f4:79:dc:9b:be:4e:3d:8c: e9:eb:2f:b2:2d:82:a3:75:d3:48:76:1f:95:bc:4f:67:49:3f: b2:c4:04:cc:54:ed:34:e6:b9:83:28:45:53:62:44:f8:a8:79: b6:e8:a9:74:8b:ca:69:95:f1:8e:a1:a0:b1:7f:d5:b0:d7:8d: 94:84:58:53:b8:30:95:02:1f:36:e6:db:05:5a:c9:b3:9b:d4: 51:9f:1d:02:e6:33:ac:68:a8:88:77:db:32:00:33:33:79:db: 0c:d8:69:5c:58:a8:be:3b:3d:e3:25:e1:5a:7e:ae:e0:70:a1: 99:eb:ad:22:66:5e:1e:c7:e8:06:c4:1e:27:59:94:25:27:8c: 5f:37:ce:d6:32:3e:33:1b:42:81:27:79:9a:5d:83:45:5c:09: 28:30:e8:a7:c9:96:93:8f:f0:96:bd:0c:c4:5f:37:ff:16:31: 03:04:13:7d:8f:e2:04:75:14:93:ea:be:99:b8:f5:fc:d9:a0: 02:01:e0:9d -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUSuIy/tz+S7D2HrJYOciEPlqbTuAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkVCM0IzNUJBMUMzREFDQTU5QzZDNTI1RUE5ODIzRkY5 MDJBRjk5ODAeFw0yNTEyMjQxNTE2NDBaFw0yNTEyMjcxNTQwNDBaMDMxMTAvBgNV BAMTKDlCQUU1RDgyQUQ4QjI1RUI4NTAzNTg4NEU3MDVBNUEyNkE2NTQyMjgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDGdhtETtiKfuaXX5YEdsWUVWzQ lLnm/Udjt8bxho3GI9gznpHckGUDcvV7Zb53LVgoi8+k8Rd28ch2lgx9UZaHTzUt FGIMBBXpRckrhErK7Uv5m90JbtGbaKANQKQmYqkwVSMBkZ6w3wkVzWzZK07FLW2G CSFGZIlxvHpp4U2tNFZ/B8OLZsTmR/xzBSkSE5N7Oq4citAYJOp5SBzwAhagoyOF jMj5FQATyHk8ZiWbQBzj3ZpO904Wpc46V+KqepdDmIELQv3Vo+MkXnOvrGRKfOJb km/7QXvmIThGtkUUkVyFefM8YkSnNRIQi5l9YAxWfDDK7oo+zYOcGKVOV6TBAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUm65dgq2LJeuFA1iE5wWlomplQigwHwYDVR0j BBgwFoAUvrOzW6HD2spZxsUl6pgj/5Aq+ZgwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 MGNiNWM5Yi1mMzgzLTRlODEtODEyYy0wZTIyN2FkNDZiMWIvMC9CRUIzQjM1QkEx QzNEQUNBNTlDNkM1MjVFQTk4MjNGRjkwMkFGOTk4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQkVCM0IzNUJBMUMzREFDQTU5QzZDNTI1RUE5ODIzRkY5MDJB Rjk5OC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNTBjYjVjOWItZjM4My00ZTgxLTgx MmMtMGUyMjdhZDQ2YjFiLzAvQkVCM0IzNUJBMUMzREFDQTU5QzZDNTI1RUE5ODIz RkY5MDJBRjk5OC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJBvDw/4L3ctNyfKHkneDQWSW/Y7uPUDjois T5FEBVar9MZlBP7wH2RuV5jbohwkQr8bVM4BvT570NBsA84wsVH0edybvk49jOnr L7ItgqN100h2H5W8T2dJP7LEBMxU7TTmuYMoRVNiRPioebboqXSLymmV8Y6hoLF/ 1bDXjZSEWFO4MJUCHzbm2wVaybOb1FGfHQLmM6xoqIh32zIAMzN52wzYaVxYqL47 PeMl4Vp+ruBwoZnrrSJmXh7H6AbEHidZlCUnjF83ztYyPjMbQoEneZpdg0VcCSgw 6KfJlpOP8Ja9DMRfN/8WMQMEE32P4gR1FJPqvpm49fzZoAIB4J0= -----END CERTIFICATE-----Generated at Thu Dec 25 06:35:03 2025 by rpki-client