This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/5da4ef71-f0e0-4252-8160-505321fa5089/0/BB8E14FCAD3AF2EF30A8F5696339D6F7DF5D735B.mft File: BB8E14FCAD3AF2EF30A8F5696339D6F7DF5D735B.mft (raw, json) Hash identifier: 1ia7WoPD/okF2PS9EJpF6ky0eMJ2Cb6cNBQVoirtOhY= Subject key identifier: FD:D4:7D:4D:0E:E0:A1:F2:66:BA:31:DF:B0:5A:8F:53:BA:36:EA:DA Authority key identifier: BB:8E:14:FC:AD:3A:F2:EF:30:A8:F5:69:63:39:D6:F7:DF:5D:73:5B Certificate issuer: /CN=BB8E14FCAD3AF2EF30A8F5696339D6F7DF5D735B Certificate serial: 5B62473E629240F9ECA3560DEC911459FACFE8EE Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BB8E14FCAD3AF2EF30A8F5696339D6F7DF5D735B.cer Subject info access: rsync://repo-rpki.idnic.net/repo/5da4ef71-f0e0-4252-8160-505321fa5089/0/BB8E14FCAD3AF2EF30A8F5696339D6F7DF5D735B.mft Manifest number: 0230 Signing time: Wed 17 Dec 2025 20:52:01 +0000 Manifest this update: Wed 17 Dec 2025 20:47:01 +0000 Manifest next update: Sun 21 Dec 2025 02:06:01 +0000 Files and hashes: 1: BB8E14FCAD3AF2EF30A8F5696339D6F7DF5D735B.crl (hash: y2JehOcN707rw8qMDSxEzmwOgSZUxS4pZ9hcCRc3i5g=) 2: 3130332e3133352e3135322e302f32322d3234203d3e203338333230.roa (hash: YAXBiP1Tn35BvKpuF6xhlnff/qb6fyDlzJRGhETAkV8=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/5da4ef71-f0e0-4252-8160-505321fa5089/0/BB8E14FCAD3AF2EF30A8F5696339D6F7DF5D735B.crl rsync://repo-rpki.idnic.net/repo/5da4ef71-f0e0-4252-8160-505321fa5089/0/BB8E14FCAD3AF2EF30A8F5696339D6F7DF5D735B.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BB8E14FCAD3AF2EF30A8F5696339D6F7DF5D735B.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 21 Dec 2025 02:06:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5b:62:47:3e:62:92:40:f9:ec:a3:56:0d:ec:91:14:59:fa:cf:e8:ee Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BB8E14FCAD3AF2EF30A8F5696339D6F7DF5D735B Validity Not Before: Dec 17 20:47:01 2025 GMT Not After : Dec 21 02:06:01 2025 GMT Subject: CN=FDD47D4D0EE0A1F266BA31DFB05A8F53BA36EADA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:a9:62:2f:9a:8d:6a:4b:1b:75:4f:51:3f:63: 8c:a3:7c:52:d6:ec:61:46:f8:40:1d:5f:03:1c:3d: ec:2b:48:58:39:9d:8c:e1:fc:4b:ec:18:e8:58:b2: 18:ec:ef:02:9e:cd:fe:44:a8:04:7e:17:c4:18:42: a2:4e:24:1c:1c:2a:d9:c6:68:3e:94:1c:d9:38:28: 2e:86:63:40:c3:ed:d1:b7:0e:0b:7d:59:4c:b6:90: e6:55:58:37:0c:b2:33:af:ed:b2:23:d7:43:68:d2: f7:67:9c:d9:f8:f9:ce:f9:7c:3f:e1:5e:1a:ac:05: 15:ab:14:ae:ad:45:44:71:d2:b6:93:91:4d:47:34: d1:d8:9a:53:41:8e:41:9a:66:8c:dd:8e:cb:79:28: 47:39:e1:d9:4f:8a:b7:28:fc:e7:7c:8c:2d:3b:32: f3:cd:96:ea:2c:04:c7:9c:82:4d:a3:e5:8d:01:7d: dc:e0:d8:96:d1:6a:d2:4f:1b:73:fe:0c:91:cf:0a: 42:1e:0a:ae:ef:23:23:a0:2d:6e:d8:ec:bb:45:26: 29:f8:5e:41:bb:4c:21:17:de:63:d4:32:eb:73:81: ec:f0:3e:a5:78:aa:c6:bb:56:99:2a:14:93:db:2a: 28:30:1c:27:0f:1c:c0:4a:5b:f0:c7:cf:00:ca:31: d4:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FD:D4:7D:4D:0E:E0:A1:F2:66:BA:31:DF:B0:5A:8F:53:BA:36:EA:DA X509v3 Authority Key Identifier: keyid:BB:8E:14:FC:AD:3A:F2:EF:30:A8:F5:69:63:39:D6:F7:DF:5D:73:5B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/5da4ef71-f0e0-4252-8160-505321fa5089/0/BB8E14FCAD3AF2EF30A8F5696339D6F7DF5D735B.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BB8E14FCAD3AF2EF30A8F5696339D6F7DF5D735B.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/5da4ef71-f0e0-4252-8160-505321fa5089/0/BB8E14FCAD3AF2EF30A8F5696339D6F7DF5D735B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 81:65:bc:9b:0e:19:df:34:b3:52:cc:00:04:68:e9:87:56:65: 7d:5f:c2:d5:4d:38:ea:d7:60:c2:a7:6f:e4:a3:47:1d:d0:8a: e6:f3:82:c1:53:5a:1b:22:93:41:79:b0:7a:9c:f1:44:3f:dc: 0f:29:46:23:26:2e:d1:7f:6d:60:8b:c8:22:11:ba:c8:27:9c: 54:8d:46:ab:f5:52:78:a0:da:b6:36:04:f2:1b:b9:5a:0e:f0: 25:dd:08:e9:3f:25:eb:d0:e2:74:93:65:36:94:16:2f:34:c9: 8e:b9:8d:58:3b:35:28:07:8b:d8:21:f9:c9:86:93:4e:66:d5: 9a:95:27:7f:74:9a:f5:2a:30:d6:b4:b4:18:76:e6:03:73:7b: 39:df:7f:10:cc:90:65:44:64:6a:18:e0:63:30:87:42:5c:e4: 25:47:0e:ad:6f:41:af:74:07:d3:d7:c6:b1:6a:c7:fb:b8:65: c4:c9:59:db:8c:b6:36:44:9b:f8:53:6b:ed:7b:b6:24:06:f2: 02:e6:9e:54:5e:a6:96:cc:59:ab:45:b0:f8:e4:58:8e:22:cd: 2f:10:75:be:8e:ea:0d:ae:ec:84:c5:9d:1e:a1:39:55:56:9c: 7d:2a:23:5b:11:b7:9e:f8:2a:ff:47:7b:5c:0b:22:6d:7f:d3: 7c:3d:02:bf -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUW2JHPmKSQPnso1YN7JEUWfrP6O4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkI4RTE0RkNBRDNBRjJFRjMwQThGNTY5NjMzOUQ2RjdE RjVENzM1QjAeFw0yNTEyMTcyMDQ3MDFaFw0yNTEyMjEwMjA2MDFaMDMxMTAvBgNV BAMTKEZERDQ3RDREMEVFMEExRjI2NkJBMzFERkIwNUE4RjUzQkEzNkVBREEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDXqWIvmo1qSxt1T1E/Y4yjfFLW 7GFG+EAdXwMcPewrSFg5nYzh/EvsGOhYshjs7wKezf5EqAR+F8QYQqJOJBwcKtnG aD6UHNk4KC6GY0DD7dG3Dgt9WUy2kOZVWDcMsjOv7bIj10No0vdnnNn4+c75fD/h XhqsBRWrFK6tRURx0raTkU1HNNHYmlNBjkGaZozdjst5KEc54dlPirco/Od8jC07 MvPNluosBMecgk2j5Y0Bfdzg2JbRatJPG3P+DJHPCkIeCq7vIyOgLW7Y7LtFJin4 XkG7TCEX3mPUMutzgezwPqV4qsa7VpkqFJPbKigwHCcPHMBKW/DHzwDKMdRjAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU/dR9TQ7gofJmujHfsFqPU7o26towHwYDVR0j BBgwFoAUu44U/K068u8wqPVpYznW999dc1swDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 ZGE0ZWY3MS1mMGUwLTQyNTItODE2MC01MDUzMjFmYTUwODkvMC9CQjhFMTRGQ0FE M0FGMkVGMzBBOEY1Njk2MzM5RDZGN0RGNUQ3MzVCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQkI4RTE0RkNBRDNBRjJFRjMwQThGNTY5NjMzOUQ2RjdERjVE NzM1Qi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNWRhNGVmNzEtZjBlMC00MjUyLTgx NjAtNTA1MzIxZmE1MDg5LzAvQkI4RTE0RkNBRDNBRjJFRjMwQThGNTY5NjMzOUQ2 RjdERjVENzM1Qi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIFlvJsOGd80s1LMAARo6YdWZX1fwtVNOOrX YMKnb+SjRx3QiubzgsFTWhsik0F5sHqc8UQ/3A8pRiMmLtF/bWCLyCIRusgnnFSN Rqv1Unig2rY2BPIbuVoO8CXdCOk/JevQ4nSTZTaUFi80yY65jVg7NSgHi9gh+cmG k05m1ZqVJ390mvUqMNa0tBh25gNzeznffxDMkGVEZGoY4GMwh0Jc5CVHDq1vQa90 B9PXxrFqx/u4ZcTJWduMtjZEm/hTa+17tiQG8gLmnlReppbMWatFsPjkWI4izS8Q db6O6g2u7ITFnR6hOVVWnH0qI1sRt574Kv9He1wLIm1/03w9Ar8= -----END CERTIFICATE-----Generated at Sun Dec 21 00:56:22 2025 by rpki-client