This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/7cd323be-837d-4244-846c-7d2393a9a009/0/B0928A45D014D8D5FAD50314E828086F12B15610.mft File: B0928A45D014D8D5FAD50314E828086F12B15610.mft (raw, json) Hash identifier: /ZHJLdRYZ17G5vcNTZHFATn36pMjFXRXsMqH+9J4V4c= Subject key identifier: 56:72:C7:40:76:B4:5A:69:59:24:9A:AB:59:5E:D5:CE:BA:73:AC:37 Authority key identifier: B0:92:8A:45:D0:14:D8:D5:FA:D5:03:14:E8:28:08:6F:12:B1:56:10 Certificate issuer: /CN=B0928A45D014D8D5FAD50314E828086F12B15610 Certificate serial: 108BE512CF1A148DE0FF47642B3DE4A57FBEB4D2 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B0928A45D014D8D5FAD50314E828086F12B15610.cer Subject info access: rsync://repo-rpki.idnic.net/repo/7cd323be-837d-4244-846c-7d2393a9a009/0/B0928A45D014D8D5FAD50314E828086F12B15610.mft Manifest number: 0335 Signing time: Tue 16 Dec 2025 20:51:20 +0000 Manifest this update: Tue 16 Dec 2025 20:46:20 +0000 Manifest next update: Sat 20 Dec 2025 05:35:20 +0000 Files and hashes: 1: 3230322e3132352e38322e302f32332d3233203d3e20313430343433.roa (hash: g4b6/Xa0b41J+1gc8Xz+JaVY6mTt5QNosbt82K9ZCLY=) 2: 3230322e3132352e38322e302f32342d3234203d3e20313430343433.roa (hash: svi5IuXnIA+13Wc0eQrV3WQdaOBiVClli1PIWM+ewGc=) 3: 3230322e37302e3133322e302f32342d3234203d3e20313430343433.roa (hash: hnSe2L9heULKYvVeefFY6CeCDXE6iTWu+s4r/qCo/4o=) 4: 3230322e37302e3133322e302f32332d3233203d3e20313430343433.roa (hash: unxNSSNtfbW/QtJSHv1+Jppsd16Z88+qlZSg2ZXLUc0=) 5: 3230322e3132352e38332e302f32342d3234203d3e20313430343433.roa (hash: Ky8MrLU9AvVMvZfrLkoaRO/9X/2qSweH3weFbcGoV3c=) 6: B0928A45D014D8D5FAD50314E828086F12B15610.crl (hash: BK4NjMvcK1nxwDZRoF9dnVS77Fnw+CxRH68RTCE+PfM=) 7: 3230322e37302e3133332e302f32342d3234203d3e20313430343433.roa (hash: wdtK/qmLPSYK98usl8We2OAmclE1Y5QskILTtOqsrh0=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/7cd323be-837d-4244-846c-7d2393a9a009/0/B0928A45D014D8D5FAD50314E828086F12B15610.crl rsync://repo-rpki.idnic.net/repo/7cd323be-837d-4244-846c-7d2393a9a009/0/B0928A45D014D8D5FAD50314E828086F12B15610.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B0928A45D014D8D5FAD50314E828086F12B15610.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 20 Dec 2025 05:35:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10:8b:e5:12:cf:1a:14:8d:e0:ff:47:64:2b:3d:e4:a5:7f:be:b4:d2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B0928A45D014D8D5FAD50314E828086F12B15610 Validity Not Before: Dec 16 20:46:20 2025 GMT Not After : Dec 20 05:35:20 2025 GMT Subject: CN=5672C74076B45A6959249AAB595ED5CEBA73AC37 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:bf:77:cb:aa:9e:a8:18:03:bd:76:4b:17:db: 9d:f8:85:fe:6b:c7:41:dd:4c:82:f2:70:f8:6f:22: 5e:b4:da:c8:0f:15:96:8b:d2:5d:6d:f6:e1:fd:65: af:d7:25:fb:5c:ab:49:bc:3b:e3:11:71:cd:0c:b5: ce:51:aa:e2:7d:ff:10:0a:31:0b:b0:20:28:cb:44: 59:62:5a:69:ec:ee:4c:02:36:52:10:f3:d8:9b:7d: 41:cb:22:7a:4f:7a:4d:db:54:98:0b:46:2e:6b:43: 58:39:5a:30:21:81:03:37:c6:55:96:00:20:64:bc: 74:f9:c0:0a:54:c5:ec:57:01:55:84:0d:0b:46:38: 81:ae:68:6d:ad:e5:ab:fc:79:5f:0b:e0:16:14:1e: 70:21:90:76:59:a5:51:df:5b:66:46:fa:96:fb:55: 07:96:96:7f:70:55:63:d7:85:b9:a8:45:c7:fc:f5: ed:0e:43:5c:5e:c4:41:02:be:48:48:55:48:e8:f8: 7f:56:09:8e:37:18:87:d7:33:2b:76:5c:96:a4:df: e9:96:0c:96:6b:5b:05:f6:9a:a9:f0:af:26:48:bc: 78:5b:df:d9:c5:10:7c:39:3d:42:62:1c:4e:d3:b3: 0d:28:48:76:03:60:a7:80:4f:c8:1a:e8:5b:f9:a7: d9:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 56:72:C7:40:76:B4:5A:69:59:24:9A:AB:59:5E:D5:CE:BA:73:AC:37 X509v3 Authority Key Identifier: keyid:B0:92:8A:45:D0:14:D8:D5:FA:D5:03:14:E8:28:08:6F:12:B1:56:10 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/7cd323be-837d-4244-846c-7d2393a9a009/0/B0928A45D014D8D5FAD50314E828086F12B15610.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B0928A45D014D8D5FAD50314E828086F12B15610.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7cd323be-837d-4244-846c-7d2393a9a009/0/B0928A45D014D8D5FAD50314E828086F12B15610.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 74:77:d3:cd:c3:7e:d7:3c:e6:3b:1f:19:1d:a8:86:5f:02:1e: ad:aa:6a:19:b5:c7:ba:cd:8f:a9:98:4e:51:a2:1a:47:78:20: c2:f1:0c:88:f1:6e:e5:c1:f3:1a:2d:b8:89:e3:bb:df:df:55: 63:2d:d6:af:20:f2:5c:b8:48:0c:05:70:15:6a:5e:22:a1:01: a1:fe:7d:b9:90:bd:57:ce:a2:40:e8:8b:b8:20:b9:01:de:d7: c6:2c:da:29:1c:02:76:2e:aa:53:36:f4:cd:e7:07:ac:bf:fe: 7e:d8:d4:1b:95:de:24:f7:b1:82:65:5b:bf:32:b7:59:53:17: 1a:fd:38:6c:e6:17:76:f9:69:f3:d1:53:05:9e:08:39:61:c3: f5:b4:1d:c0:4b:3d:c7:f5:cc:30:a4:d5:74:57:33:c2:84:09: ff:3e:a5:5d:53:19:e1:6f:b6:6b:0a:cc:92:cb:3d:b3:c8:7d: 43:d8:11:bd:f6:2c:76:c7:4a:00:26:56:d0:90:bd:4a:8a:bb: 05:7b:e7:7d:2d:05:42:91:39:57:3b:3f:e0:19:dd:26:7f:17: f2:c7:7f:e6:7f:64:b2:8c:e6:f2:b3:5e:99:0e:6d:9b:23:82: 50:b2:8c:c2:bb:17:df:99:eb:fe:00:3d:87:1d:82:66:28:5f: df:ad:fe:e5 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUEIvlEs8aFI3g/0dkKz3kpX++tNIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjA5MjhBNDVEMDE0RDhENUZBRDUwMzE0RTgyODA4NkYx MkIxNTYxMDAeFw0yNTEyMTYyMDQ2MjBaFw0yNTEyMjAwNTM1MjBaMDMxMTAvBgNV BAMTKDU2NzJDNzQwNzZCNDVBNjk1OTI0OUFBQjU5NUVENUNFQkE3M0FDMzcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDHv3fLqp6oGAO9dksX2534hf5r x0HdTILycPhvIl602sgPFZaL0l1t9uH9Za/XJftcq0m8O+MRcc0Mtc5RquJ9/xAK MQuwICjLRFliWmns7kwCNlIQ89ibfUHLInpPek3bVJgLRi5rQ1g5WjAhgQM3xlWW ACBkvHT5wApUxexXAVWEDQtGOIGuaG2t5av8eV8L4BYUHnAhkHZZpVHfW2ZG+pb7 VQeWln9wVWPXhbmoRcf89e0OQ1xexEECvkhIVUjo+H9WCY43GIfXMyt2XJak3+mW DJZrWwX2mqnwryZIvHhb39nFEHw5PUJiHE7Tsw0oSHYDYKeAT8ga6Fv5p9nTAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUVnLHQHa0WmlZJJqrWV7VzrpzrDcwHwYDVR0j BBgwFoAUsJKKRdAU2NX61QMU6CgIbxKxVhAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 Y2QzMjNiZS04MzdkLTQyNDQtODQ2Yy03ZDIzOTNhOWEwMDkvMC9CMDkyOEE0NUQw MTREOEQ1RkFENTAzMTRFODI4MDg2RjEyQjE1NjEwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQjA5MjhBNDVEMDE0RDhENUZBRDUwMzE0RTgyODA4NkYxMkIx NTYxMC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vN2NkMzIzYmUtODM3ZC00MjQ0LTg0 NmMtN2QyMzkzYTlhMDA5LzAvQjA5MjhBNDVEMDE0RDhENUZBRDUwMzE0RTgyODA4 NkYxMkIxNTYxMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHR3083Dftc85jsfGR2ohl8CHq2qahm1x7rN j6mYTlGiGkd4IMLxDIjxbuXB8xotuInju9/fVWMt1q8g8ly4SAwFcBVqXiKhAaH+ fbmQvVfOokDoi7gguQHe18Ys2ikcAnYuqlM29M3nB6y//n7Y1BuV3iT3sYJlW78y t1lTFxr9OGzmF3b5afPRUwWeCDlhw/W0HcBLPcf1zDCk1XRXM8KECf8+pV1TGeFv tmsKzJLLPbPIfUPYEb32LHbHSgAmVtCQvUqKuwV7530tBUKROVc7P+AZ3SZ/F/LH f+Z/ZLKM5vKzXpkObZsjglCyjMK7F9+Z6/4APYcdgmYoX9+t/uU= -----END CERTIFICATE-----Generated at Fri Dec 19 11:19:37 2025 by rpki-client