This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/570c1bab-13f4-4ce6-85f7-c388737f6d19/0/00B4ECFCCAE90A9463FD71822A3CEE4C8C145AD4.mft File: 00B4ECFCCAE90A9463FD71822A3CEE4C8C145AD4.mft (raw, json) Hash identifier: gjzYNQ4Wn5BwDdj7uB8AbrEI/08LXgpGaPp5vDUxZC0= Subject key identifier: D2:5A:D8:DD:71:48:11:3C:4B:EA:72:45:10:FC:89:E2:D9:53:99:E3 Authority key identifier: 00:B4:EC:FC:CA:E9:0A:94:63:FD:71:82:2A:3C:EE:4C:8C:14:5A:D4 Certificate issuer: /CN=00B4ECFCCAE90A9463FD71822A3CEE4C8C145AD4 Certificate serial: 6F99E79C75D1BA9895AD6D4E3C7CA5FBB978F1F9 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/00B4ECFCCAE90A9463FD71822A3CEE4C8C145AD4.cer Subject info access: rsync://repo-rpki.idnic.net/repo/570c1bab-13f4-4ce6-85f7-c388737f6d19/0/00B4ECFCCAE90A9463FD71822A3CEE4C8C145AD4.mft Manifest number: E9 Signing time: Wed 17 Dec 2025 12:01:41 +0000 Manifest this update: Wed 17 Dec 2025 11:56:41 +0000 Manifest next update: Sat 20 Dec 2025 19:09:41 +0000 Files and hashes: 1: 323030313a6466323a663334303a3a2f34382d3438203d3e20313432333333.roa (hash: TsqNIUGKVArIBEGfFPOQj0RJMusrdrLAysbKak+tetA=) 2: 3130332e3136392e33322e302f32332d3234203d3e20313432333333.roa (hash: K+l/g4p9y6cTiWHXp9qbhWcap/gI8HD7/DZcp0av7uY=) 3: 00B4ECFCCAE90A9463FD71822A3CEE4C8C145AD4.crl (hash: A86xiNVganHQ528ko1LEd/1ckQXxWKGA1fFzRsEEZtg=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/570c1bab-13f4-4ce6-85f7-c388737f6d19/0/00B4ECFCCAE90A9463FD71822A3CEE4C8C145AD4.crl rsync://repo-rpki.idnic.net/repo/570c1bab-13f4-4ce6-85f7-c388737f6d19/0/00B4ECFCCAE90A9463FD71822A3CEE4C8C145AD4.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/00B4ECFCCAE90A9463FD71822A3CEE4C8C145AD4.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 20 Dec 2025 19:09:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6f:99:e7:9c:75:d1:ba:98:95:ad:6d:4e:3c:7c:a5:fb:b9:78:f1:f9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=00B4ECFCCAE90A9463FD71822A3CEE4C8C145AD4 Validity Not Before: Dec 17 11:56:41 2025 GMT Not After : Dec 20 19:09:41 2025 GMT Subject: CN=D25AD8DD7148113C4BEA724510FC89E2D95399E3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:fe:7c:a4:bf:32:dd:cd:42:d4:dc:f6:51:65: 9d:2e:7c:b7:80:00:3f:84:f6:10:ee:d6:a4:d9:ab: c5:61:c0:d3:2e:c7:3f:43:4a:af:e1:c2:48:69:0c: 31:61:16:63:10:5b:a4:56:39:d1:66:63:9d:c5:1a: d6:20:42:86:f7:64:01:6b:fb:c4:d0:ed:bc:85:2a: 00:bf:05:64:a2:7c:8b:b6:be:68:6f:40:0b:a0:5c: 60:21:dd:25:d2:4c:45:fc:4d:2e:32:aa:19:1c:d6: 04:0e:5a:98:df:f7:0e:37:64:a2:27:79:2c:12:c4: 1f:c4:57:7e:9c:4c:39:6b:3d:96:bb:61:fe:15:e2: 20:3b:b8:aa:19:5d:bc:21:19:2b:2e:c9:22:e6:ae: 15:c5:3c:c5:64:5b:e3:e4:67:8c:3a:63:cf:53:32: 67:93:db:18:7d:66:e2:02:46:3a:41:a2:40:bd:b3: 7a:e7:78:b9:68:01:4f:83:44:ee:dc:8f:21:7a:c1: d8:e5:62:65:75:b3:f0:44:83:92:21:5f:57:51:18: 80:d8:f5:58:38:50:8e:5e:40:f4:d8:1e:7a:90:e7: 83:68:ca:1f:f4:3f:f2:39:ff:a0:da:af:56:21:49: be:1d:35:18:20:7d:c1:b3:e0:26:5b:30:68:21:8d: 19:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:5A:D8:DD:71:48:11:3C:4B:EA:72:45:10:FC:89:E2:D9:53:99:E3 X509v3 Authority Key Identifier: keyid:00:B4:EC:FC:CA:E9:0A:94:63:FD:71:82:2A:3C:EE:4C:8C:14:5A:D4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/570c1bab-13f4-4ce6-85f7-c388737f6d19/0/00B4ECFCCAE90A9463FD71822A3CEE4C8C145AD4.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/00B4ECFCCAE90A9463FD71822A3CEE4C8C145AD4.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/570c1bab-13f4-4ce6-85f7-c388737f6d19/0/00B4ECFCCAE90A9463FD71822A3CEE4C8C145AD4.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 80:7d:eb:eb:f9:13:ef:aa:d1:ac:d7:41:14:4a:a1:4f:a9:8b: 2d:2b:0d:5f:39:00:2f:92:2c:80:bb:86:3d:9a:65:68:e7:1f: 0e:db:f4:07:34:ec:2d:b1:be:40:b4:52:fb:79:ab:4d:d8:57: bf:3b:2f:2c:f5:08:48:be:3b:d7:49:9d:e0:58:a2:a9:17:1c: ef:ce:ad:5d:5f:09:9b:f9:37:c0:59:66:27:5e:25:48:47:94: 4e:7d:4e:58:67:75:66:83:60:90:17:36:b7:c7:a4:a3:df:49: 56:d0:e5:54:6e:b5:26:7f:d6:5c:a6:55:17:a1:a8:7d:10:60: 3d:a2:64:9e:97:a5:d9:28:63:f6:fc:53:70:4f:ba:2d:a5:fc: ab:f7:ab:41:a3:e2:ac:e1:b4:94:fa:43:6d:a0:67:26:13:4a: 40:b7:96:c5:1e:6b:d9:c2:38:c7:dc:0e:50:04:cc:bf:7a:a1: 0c:1a:68:cb:8d:77:38:3a:af:e1:35:8a:4d:9c:32:61:ab:9a: fd:86:bd:19:66:8d:74:6b:b1:81:e5:d0:d2:3e:27:59:96:bd: a8:76:11:2f:49:de:35:dc:25:aa:c0:10:66:c4:64:ac:5e:e2: 1d:36:5a:ee:2a:2a:8b:00:ad:70:c1:55:65:0f:53:e6:af:84: 32:fd:f9:50 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUb5nnnHXRupiVrW1OPHyl+7l48fkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDBCNEVDRkNDQUU5MEE5NDYzRkQ3MTgyMkEzQ0VFNEM4 QzE0NUFENDAeFw0yNTEyMTcxMTU2NDFaFw0yNTEyMjAxOTA5NDFaMDMxMTAvBgNV BAMTKEQyNUFEOERENzE0ODExM0M0QkVBNzI0NTEwRkM4OUUyRDk1Mzk5RTMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC6/nykvzLdzULU3PZRZZ0ufLeA AD+E9hDu1qTZq8VhwNMuxz9DSq/hwkhpDDFhFmMQW6RWOdFmY53FGtYgQob3ZAFr +8TQ7byFKgC/BWSifIu2vmhvQAugXGAh3SXSTEX8TS4yqhkc1gQOWpjf9w43ZKIn eSwSxB/EV36cTDlrPZa7Yf4V4iA7uKoZXbwhGSsuySLmrhXFPMVkW+PkZ4w6Y89T MmeT2xh9ZuICRjpBokC9s3rneLloAU+DRO7cjyF6wdjlYmV1s/BEg5IhX1dRGIDY 9Vg4UI5eQPTYHnqQ54Noyh/0P/I5/6Dar1YhSb4dNRggfcGz4CZbMGghjRmLAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU0lrY3XFIETxL6nJFEPyJ4tlTmeMwHwYDVR0j BBgwFoAUALTs/MrpCpRj/XGCKjzuTIwUWtQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 NzBjMWJhYi0xM2Y0LTRjZTYtODVmNy1jMzg4NzM3ZjZkMTkvMC8wMEI0RUNGQ0NB RTkwQTk0NjNGRDcxODIyQTNDRUU0QzhDMTQ1QUQ0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMDBCNEVDRkNDQUU5MEE5NDYzRkQ3MTgyMkEzQ0VFNEM4QzE0 NUFENC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNTcwYzFiYWItMTNmNC00Y2U2LTg1 ZjctYzM4ODczN2Y2ZDE5LzAvMDBCNEVDRkNDQUU5MEE5NDYzRkQ3MTgyMkEzQ0VF NEM4QzE0NUFENC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIB96+v5E++q0azXQRRKoU+piy0rDV85AC+S LIC7hj2aZWjnHw7b9Ac07C2xvkC0Uvt5q03YV787Lyz1CEi+O9dJneBYoqkXHO/O rV1fCZv5N8BZZideJUhHlE59TlhndWaDYJAXNrfHpKPfSVbQ5VRutSZ/1lymVReh qH0QYD2iZJ6XpdkoY/b8U3BPui2l/Kv3q0Gj4qzhtJT6Q22gZyYTSkC3lsUea9nC OMfcDlAEzL96oQwaaMuNdzg6r+E1ik2cMmGrmv2GvRlmjXRrsYHl0NI+J1mWvah2 ES9J3jXcJarAEGbEZKxe4h02Wu4qKosArXDBVWUPU+avhDL9+VA= -----END CERTIFICATE-----Generated at Fri Dec 19 11:16:59 2025 by rpki-client