This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/5a54a8ce-18f4-4988-a951-9664dd176cd9/0/BB27EAD4CC6FFF52F5BAAF4A875308D8CDE7CDAA.mft File: BB27EAD4CC6FFF52F5BAAF4A875308D8CDE7CDAA.mft (raw, json) Hash identifier: f9futF+kYgsbm3Hvuj67KREXyhjoRsEmu4LMiKgAydw= Subject key identifier: 8B:33:B4:FE:B3:89:2D:46:B9:21:76:7C:74:53:C2:E0:B7:88:0C:14 Authority key identifier: BB:27:EA:D4:CC:6F:FF:52:F5:BA:AF:4A:87:53:08:D8:CD:E7:CD:AA Certificate issuer: /CN=BB27EAD4CC6FFF52F5BAAF4A875308D8CDE7CDAA Certificate serial: 39EA495CA7897B1ACD3A8F0736F078D1F792ED4E Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BB27EAD4CC6FFF52F5BAAF4A875308D8CDE7CDAA.cer Subject info access: rsync://repo-rpki.idnic.net/repo/5a54a8ce-18f4-4988-a951-9664dd176cd9/0/BB27EAD4CC6FFF52F5BAAF4A875308D8CDE7CDAA.mft Manifest number: 0313 Signing time: Wed 17 Dec 2025 05:32:00 +0000 Manifest this update: Wed 17 Dec 2025 05:27:00 +0000 Manifest next update: Sat 20 Dec 2025 10:43:00 +0000 Files and hashes: 1: BB27EAD4CC6FFF52F5BAAF4A875308D8CDE7CDAA.crl (hash: LlfaQShagf+jOOUI1zJKU/JdIStawOA77esdmBFlPNs=) 2: 3130332e3136392e3139392e302f32342d3234203d3e20313437313132.roa (hash: m681LM1ItdW4dx+wPJxInCtAMds6i/b/AFLjGDvuwL4=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/5a54a8ce-18f4-4988-a951-9664dd176cd9/0/BB27EAD4CC6FFF52F5BAAF4A875308D8CDE7CDAA.crl rsync://repo-rpki.idnic.net/repo/5a54a8ce-18f4-4988-a951-9664dd176cd9/0/BB27EAD4CC6FFF52F5BAAF4A875308D8CDE7CDAA.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BB27EAD4CC6FFF52F5BAAF4A875308D8CDE7CDAA.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 20 Dec 2025 10:43:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 39:ea:49:5c:a7:89:7b:1a:cd:3a:8f:07:36:f0:78:d1:f7:92:ed:4e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BB27EAD4CC6FFF52F5BAAF4A875308D8CDE7CDAA Validity Not Before: Dec 17 05:27:00 2025 GMT Not After : Dec 20 10:43:00 2025 GMT Subject: CN=8B33B4FEB3892D46B921767C7453C2E0B7880C14 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:e8:d6:86:41:89:ab:c6:8b:f2:ab:91:55:ec: 84:9a:c9:cc:e3:3e:de:93:de:ee:c2:78:aa:e9:cf: 8a:da:6c:cc:72:c3:aa:8d:23:e7:6f:93:c7:51:49: e5:2d:bb:3d:c9:61:4a:aa:f7:f4:4c:e7:66:68:0c: 81:e0:90:7a:a9:8e:db:01:26:00:0d:7e:07:92:44: 58:79:9d:b9:2b:c9:d4:7d:da:00:05:11:95:44:f0: 7b:72:7f:e1:1a:37:c4:cc:d8:e9:34:20:e1:ca:c9: 5f:8d:80:aa:53:92:a9:44:f4:ed:a7:96:11:81:2b: 0f:eb:f4:40:39:3a:a4:f3:0d:f6:38:48:a5:2a:c4: 2a:d5:f2:9d:43:6e:df:1f:ce:d8:b4:5b:27:6f:07: 1a:ac:f0:e4:54:3f:d1:7b:9d:8f:67:5e:7f:04:e4: 70:6f:cd:58:f6:b8:63:51:e9:10:87:da:7b:7d:7f: 0e:ff:d5:dd:65:da:0b:b0:03:69:37:f5:78:71:82: d1:c4:95:af:c7:8b:74:36:9f:7a:79:39:0a:36:4d: 8d:7b:78:66:65:ce:bc:11:17:6d:a8:81:63:b9:26: 41:a1:a1:19:09:b2:39:db:44:72:8c:e7:05:2f:65: f5:54:a3:52:70:07:3e:b6:2c:04:9e:8d:00:81:b1: b4:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8B:33:B4:FE:B3:89:2D:46:B9:21:76:7C:74:53:C2:E0:B7:88:0C:14 X509v3 Authority Key Identifier: keyid:BB:27:EA:D4:CC:6F:FF:52:F5:BA:AF:4A:87:53:08:D8:CD:E7:CD:AA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/5a54a8ce-18f4-4988-a951-9664dd176cd9/0/BB27EAD4CC6FFF52F5BAAF4A875308D8CDE7CDAA.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BB27EAD4CC6FFF52F5BAAF4A875308D8CDE7CDAA.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/5a54a8ce-18f4-4988-a951-9664dd176cd9/0/BB27EAD4CC6FFF52F5BAAF4A875308D8CDE7CDAA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 32:03:95:15:31:fa:4d:84:e7:fc:f8:ba:1a:9a:ad:de:10:38: 21:a4:62:4d:a0:bb:d8:53:d4:03:8a:fb:46:5d:4e:2a:77:20: 36:5b:d7:67:25:19:f1:5f:af:f4:96:e8:16:31:b4:21:e8:d3: 5a:d0:d5:55:b5:bb:14:b7:db:2e:e9:d4:4e:29:52:28:b8:49: 33:96:c1:1e:57:2e:dc:7c:eb:58:e0:0f:64:78:c6:25:c9:93: 9d:d8:97:c1:47:6c:5f:be:67:36:6f:57:27:9c:80:25:a0:6f: 80:2c:05:20:b9:95:af:c8:ad:9a:86:61:41:55:13:70:8f:fd: c5:88:fa:93:6c:c0:84:c2:61:ab:f1:e7:1d:ee:c7:e5:b6:7b: 55:19:1b:fe:39:64:13:92:09:fb:48:e9:b4:48:1a:f7:40:4d: b7:69:76:d8:6a:0c:26:9f:ba:6e:52:32:0c:5d:75:d6:3f:9a: 2b:a8:ee:ce:2f:7d:76:6b:8b:98:75:2b:d7:ac:a0:0f:e1:ee: b9:4a:f0:78:59:16:c3:79:de:3a:d5:4b:5b:38:21:e2:c5:46: 89:40:f1:59:e3:e4:17:1e:1f:41:c9:04:51:0d:01:68:39:b9: df:57:06:f3:9b:71:c1:1d:5e:c8:f2:06:13:89:4e:7d:43:ed: 8f:75:1d:13 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUOepJXKeJexrNOo8HNvB40feS7U4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkIyN0VBRDRDQzZGRkY1MkY1QkFBRjRBODc1MzA4RDhD REU3Q0RBQTAeFw0yNTEyMTcwNTI3MDBaFw0yNTEyMjAxMDQzMDBaMDMxMTAvBgNV BAMTKDhCMzNCNEZFQjM4OTJENDZCOTIxNzY3Qzc0NTNDMkUwQjc4ODBDMTQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDI6NaGQYmrxovyq5FV7ISayczj Pt6T3u7CeKrpz4rabMxyw6qNI+dvk8dRSeUtuz3JYUqq9/RM52ZoDIHgkHqpjtsB JgANfgeSRFh5nbkrydR92gAFEZVE8Htyf+EaN8TM2Ok0IOHKyV+NgKpTkqlE9O2n lhGBKw/r9EA5OqTzDfY4SKUqxCrV8p1Dbt8fzti0WydvBxqs8ORUP9F7nY9nXn8E 5HBvzVj2uGNR6RCH2nt9fw7/1d1l2guwA2k39XhxgtHEla/Hi3Q2n3p5OQo2TY17 eGZlzrwRF22ogWO5JkGhoRkJsjnbRHKM5wUvZfVUo1JwBz62LASejQCBsbQrAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUizO0/rOJLUa5IXZ8dFPC4LeIDBQwHwYDVR0j BBgwFoAUuyfq1Mxv/1L1uq9Kh1MI2M3nzaowDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 YTU0YThjZS0xOGY0LTQ5ODgtYTk1MS05NjY0ZGQxNzZjZDkvMC9CQjI3RUFENEND NkZGRjUyRjVCQUFGNEE4NzUzMDhEOENERTdDREFBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQkIyN0VBRDRDQzZGRkY1MkY1QkFBRjRBODc1MzA4RDhDREU3 Q0RBQS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNWE1NGE4Y2UtMThmNC00OTg4LWE5 NTEtOTY2NGRkMTc2Y2Q5LzAvQkIyN0VBRDRDQzZGRkY1MkY1QkFBRjRBODc1MzA4 RDhDREU3Q0RBQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADIDlRUx+k2E5/z4uhqard4QOCGkYk2gu9hT 1AOK+0ZdTip3IDZb12clGfFfr/SW6BYxtCHo01rQ1VW1uxS32y7p1E4pUii4STOW wR5XLtx861jgD2R4xiXJk53Yl8FHbF++ZzZvVyecgCWgb4AsBSC5la/IrZqGYUFV E3CP/cWI+pNswITCYavx5x3ux+W2e1UZG/45ZBOSCftI6bRIGvdATbdpdthqDCaf um5SMgxdddY/miuo7s4vfXZri5h1K9esoA/h7rlK8HhZFsN53jrVS1s4IeLFRolA 8Vnj5BceH0HJBFENAWg5ud9XBvObccEdXsjyBhOJTn1D7Y91HRM= -----END CERTIFICATE-----Generated at Fri Dec 19 11:19:05 2025 by rpki-client