This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/5124b4b5-7813-46cd-9db4-a3cd585e0ed4/0/BEE36AB8351AFE80F1B0CE8F12AA40089829BB6F.mft File: BEE36AB8351AFE80F1B0CE8F12AA40089829BB6F.mft (raw, json) Hash identifier: MuOjWLDRzF3doANyye4AyM85loKqwu4eBOf2fgZFlO8= Subject key identifier: E0:24:13:6E:38:15:CB:B9:8D:21:63:F8:10:A1:A8:64:70:01:8B:69 Authority key identifier: BE:E3:6A:B8:35:1A:FE:80:F1:B0:CE:8F:12:AA:40:08:98:29:BB:6F Certificate issuer: /CN=BEE36AB8351AFE80F1B0CE8F12AA40089829BB6F Certificate serial: 2FB2CC67A062F7972240A03ED13D576850FC05E6 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BEE36AB8351AFE80F1B0CE8F12AA40089829BB6F.cer Subject info access: rsync://repo-rpki.idnic.net/repo/5124b4b5-7813-46cd-9db4-a3cd585e0ed4/0/BEE36AB8351AFE80F1B0CE8F12AA40089829BB6F.mft Manifest number: 01E9 Signing time: Thu 18 Dec 2025 08:21:48 +0000 Manifest this update: Thu 18 Dec 2025 08:16:48 +0000 Manifest next update: Sun 21 Dec 2025 19:11:48 +0000 Files and hashes: 1: BEE36AB8351AFE80F1B0CE8F12AA40089829BB6F.crl (hash: 5/GeffnyrLbuEAXAE0ZzQr3QVlH3pdWry/Y1awTdoSQ=) 2: 3130332e34332e32362e302f32342d3234203d3e20313530323832.roa (hash: 8mtJt2S7FnH2XqMpaERqdd8mg9cEUzD1SQhfJKt7rjM=) 3: 3130332e34332e32372e302f32342d3234203d3e20313530323832.roa (hash: BlULhi+TctVeKV8dE0CflZMYmvk41Sd1spCHrO2rX3k=) 4: 3130332e34332e32362e302f32332d3233203d3e20313530323832.roa (hash: ex+21fBaSyiItm2OS+YOTqm89deCqSKEYL8AQYAgtY0=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/5124b4b5-7813-46cd-9db4-a3cd585e0ed4/0/BEE36AB8351AFE80F1B0CE8F12AA40089829BB6F.crl rsync://repo-rpki.idnic.net/repo/5124b4b5-7813-46cd-9db4-a3cd585e0ed4/0/BEE36AB8351AFE80F1B0CE8F12AA40089829BB6F.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BEE36AB8351AFE80F1B0CE8F12AA40089829BB6F.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 21 Dec 2025 19:11:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2f:b2:cc:67:a0:62:f7:97:22:40:a0:3e:d1:3d:57:68:50:fc:05:e6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BEE36AB8351AFE80F1B0CE8F12AA40089829BB6F Validity Not Before: Dec 18 08:16:48 2025 GMT Not After : Dec 21 19:11:48 2025 GMT Subject: CN=E024136E3815CBB98D2163F810A1A86470018B69 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:16:e8:ee:39:c9:38:f7:e3:8a:78:a5:62:a0: 5b:ed:2c:42:50:65:e0:5d:92:b6:34:a2:95:f8:74: f6:80:fe:82:3e:fd:07:ea:41:69:8a:e6:88:e2:76: 2b:33:d2:74:56:c9:70:f4:1f:bb:f6:e7:ee:d0:a1: 88:93:1b:d4:74:28:f6:1b:15:45:e9:10:3a:bc:f7: 31:73:19:a6:58:20:0d:9f:bf:77:cd:4e:ad:1f:dc: 47:79:e8:af:a0:36:21:cb:e0:36:1a:10:cf:23:4d: b2:ef:1f:1e:44:2a:eb:e8:67:dd:9f:00:ca:9a:c0: d0:1d:ce:12:93:4f:ff:84:44:d7:25:14:d3:02:0a: 00:e4:22:19:c3:cf:ae:e3:d5:37:65:91:ed:22:cd: 39:99:53:a9:b6:6d:e9:ed:b4:04:b9:c9:79:59:b8: c0:b3:bb:74:de:08:67:e6:15:ea:07:62:df:d0:1d: 1d:92:3b:ae:b7:a1:16:7d:12:c3:29:c5:d8:20:ea: 23:db:f2:57:eb:83:c1:dd:45:93:74:78:aa:93:b3: b7:0e:6e:ed:28:e3:49:6d:69:b8:60:2a:38:c4:c8: af:07:74:bd:51:b2:a4:c4:a3:68:a5:3b:59:65:8a: 26:52:ec:b3:2c:9b:7e:b9:21:d2:29:57:aa:41:63: 78:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E0:24:13:6E:38:15:CB:B9:8D:21:63:F8:10:A1:A8:64:70:01:8B:69 X509v3 Authority Key Identifier: keyid:BE:E3:6A:B8:35:1A:FE:80:F1:B0:CE:8F:12:AA:40:08:98:29:BB:6F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/5124b4b5-7813-46cd-9db4-a3cd585e0ed4/0/BEE36AB8351AFE80F1B0CE8F12AA40089829BB6F.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BEE36AB8351AFE80F1B0CE8F12AA40089829BB6F.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/5124b4b5-7813-46cd-9db4-a3cd585e0ed4/0/BEE36AB8351AFE80F1B0CE8F12AA40089829BB6F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4d:f2:90:01:1a:16:2c:06:36:6e:eb:83:4f:42:2d:a1:3c:18: 4d:04:d4:ec:05:82:42:0b:50:78:49:19:0e:d0:70:1f:a7:4c: c2:77:5d:35:14:88:f7:50:6a:2e:46:2c:68:3b:90:3f:8d:a3: cf:51:63:6a:66:51:5c:70:3b:aa:d6:d5:6d:c5:e7:72:8f:61: 97:46:6c:c0:b5:18:91:81:28:45:d7:10:95:4e:24:aa:4f:9f: 81:69:4a:6f:f1:da:c5:db:3e:e6:2b:4b:64:15:93:b7:85:c6: 5e:5b:1b:c3:4c:02:ec:25:28:a3:c3:58:ec:67:54:7f:27:97: 39:81:62:72:e9:97:48:1c:cd:6e:d6:df:3e:40:5f:ba:27:83: 9e:22:46:50:07:f1:0f:bb:cf:65:d2:69:f9:d5:68:39:ca:13: d9:1c:f1:67:83:62:9e:1f:da:ee:bb:7e:9c:cf:28:43:ea:3f: 1e:f5:a6:59:76:c1:8b:22:6b:2a:5d:f1:68:98:7a:b1:af:f1: 89:51:db:a7:83:cd:81:3f:e0:66:b7:b2:ef:36:97:7c:d3:b0: 82:67:9c:0f:bb:b3:b0:9d:38:eb:49:44:c2:13:3c:6b:cc:b6: 74:af:56:97:ae:6f:91:89:9f:39:c4:3f:0d:6e:36:a3:db:08: 37:42:5d:ae -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUL7LMZ6Bi95ciQKA+0T1XaFD8BeYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkVFMzZBQjgzNTFBRkU4MEYxQjBDRThGMTJBQTQwMDg5 ODI5QkI2RjAeFw0yNTEyMTgwODE2NDhaFw0yNTEyMjExOTExNDhaMDMxMTAvBgNV BAMTKEUwMjQxMzZFMzgxNUNCQjk4RDIxNjNGODEwQTFBODY0NzAwMThCNjkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDpFujuOck49+OKeKVioFvtLEJQ ZeBdkrY0opX4dPaA/oI+/QfqQWmK5ojidisz0nRWyXD0H7v25+7QoYiTG9R0KPYb FUXpEDq89zFzGaZYIA2fv3fNTq0f3Ed56K+gNiHL4DYaEM8jTbLvHx5EKuvoZ92f AMqawNAdzhKTT/+ERNclFNMCCgDkIhnDz67j1Tdlke0izTmZU6m2benttAS5yXlZ uMCzu3TeCGfmFeoHYt/QHR2SO663oRZ9EsMpxdgg6iPb8lfrg8HdRZN0eKqTs7cO bu0o40ltabhgKjjEyK8HdL1RsqTEo2ilO1lliiZS7LMsm365IdIpV6pBY3iHAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU4CQTbjgVy7mNIWP4EKGoZHABi2kwHwYDVR0j BBgwFoAUvuNquDUa/oDxsM6PEqpACJgpu28wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 MTI0YjRiNS03ODEzLTQ2Y2QtOWRiNC1hM2NkNTg1ZTBlZDQvMC9CRUUzNkFCODM1 MUFGRTgwRjFCMENFOEYxMkFBNDAwODk4MjlCQjZGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQkVFMzZBQjgzNTFBRkU4MEYxQjBDRThGMTJBQTQwMDg5ODI5 QkI2Ri5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNTEyNGI0YjUtNzgxMy00NmNkLTlk YjQtYTNjZDU4NWUwZWQ0LzAvQkVFMzZBQjgzNTFBRkU4MEYxQjBDRThGMTJBQTQw MDg5ODI5QkI2Ri5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAE3ykAEaFiwGNm7rg09CLaE8GE0E1OwFgkIL UHhJGQ7QcB+nTMJ3XTUUiPdQai5GLGg7kD+No89RY2pmUVxwO6rW1W3F53KPYZdG bMC1GJGBKEXXEJVOJKpPn4FpSm/x2sXbPuYrS2QVk7eFxl5bG8NMAuwlKKPDWOxn VH8nlzmBYnLpl0gczW7W3z5AX7ong54iRlAH8Q+7z2XSafnVaDnKE9kc8WeDYp4f 2u67fpzPKEPqPx71pll2wYsiaypd8WiYerGv8YlR26eDzYE/4Ga3su82l3zTsIJn nA+7s7CdOOtJRMITPGvMtnSvVpeub5GJnznEPw1uNqPbCDdCXa4= -----END CERTIFICATE-----Generated at Fri Dec 19 11:19:38 2025 by rpki-client