This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/85dd4f16-570e-4c8c-a992-db89ea3bad36/0/B2077B9BAF0BF3E5FCB84513B1D7445E30CE6582.mft File: B2077B9BAF0BF3E5FCB84513B1D7445E30CE6582.mft (raw, json) Hash identifier: ZQTZHxwIF6LaPWqA2fMRwUNnCXcEdEgHiASTiD4FlU8= Subject key identifier: E0:66:9B:08:CE:4A:C5:B6:49:48:37:DB:14:50:AD:CE:F3:1F:82:17 Authority key identifier: B2:07:7B:9B:AF:0B:F3:E5:FC:B8:45:13:B1:D7:44:5E:30:CE:65:82 Certificate issuer: /CN=B2077B9BAF0BF3E5FCB84513B1D7445E30CE6582 Certificate serial: 610C480D4DDD3F9DA36F9FFA49C680A260FBD0F4 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B2077B9BAF0BF3E5FCB84513B1D7445E30CE6582.cer Subject info access: rsync://repo-rpki.idnic.net/repo/85dd4f16-570e-4c8c-a992-db89ea3bad36/0/B2077B9BAF0BF3E5FCB84513B1D7445E30CE6582.mft Manifest number: 04AB Signing time: Mon 22 Dec 2025 13:22:47 +0000 Manifest this update: Mon 22 Dec 2025 13:17:47 +0000 Manifest next update: Thu 25 Dec 2025 23:19:47 +0000 Files and hashes: 1: B2077B9BAF0BF3E5FCB84513B1D7445E30CE6582.crl (hash: wjiVtxRWe5uDTNGFHK/1Vob0dCQPpuvoB8miAnGGVFo=) 2: 3130332e3135372e362e302f32342d3234203d3e20313431313036.roa (hash: 2XQOc628Et0oqO8CO0VRKDq3/7F6VNJ+Q07NK/QPZuc=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/85dd4f16-570e-4c8c-a992-db89ea3bad36/0/B2077B9BAF0BF3E5FCB84513B1D7445E30CE6582.crl rsync://repo-rpki.idnic.net/repo/85dd4f16-570e-4c8c-a992-db89ea3bad36/0/B2077B9BAF0BF3E5FCB84513B1D7445E30CE6582.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B2077B9BAF0BF3E5FCB84513B1D7445E30CE6582.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 25 Dec 2025 23:19:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 61:0c:48:0d:4d:dd:3f:9d:a3:6f:9f:fa:49:c6:80:a2:60:fb:d0:f4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B2077B9BAF0BF3E5FCB84513B1D7445E30CE6582 Validity Not Before: Dec 22 13:17:47 2025 GMT Not After : Dec 25 23:19:47 2025 GMT Subject: CN=E0669B08CE4AC5B6494837DB1450ADCEF31F8217 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:90:3b:fc:b8:5a:8b:27:60:17:c4:16:0b:47: 03:56:ec:14:a8:96:86:8d:1b:23:55:7f:94:8e:9b: 3c:23:03:88:bb:e8:d9:9f:fb:f2:22:05:88:22:42: df:75:97:b9:6b:86:20:76:ab:14:ed:6c:5c:52:f6: 04:7e:74:30:2c:0e:a6:d8:4b:a8:78:4c:03:46:06: f6:52:45:d2:5b:15:32:15:2e:a8:4f:32:b5:bb:3d: 4d:7c:00:8c:e1:de:39:ce:15:9d:78:9a:d6:db:63: 83:97:03:e5:31:e5:e4:15:c7:29:e7:d5:de:d7:33: 03:6e:b6:48:11:b7:ad:66:ae:93:39:17:f7:8b:87: 08:e6:11:41:10:92:3a:50:09:07:37:64:b2:5b:67: f1:fd:86:21:f0:ac:69:b9:11:c4:c4:35:6f:72:88: 87:44:c3:86:49:36:0e:47:7d:3d:73:49:c7:b2:d8: fe:2a:eb:b6:83:c8:8a:48:78:9b:84:49:2b:f7:76: fe:37:f6:f7:e0:be:86:d7:d5:c8:f7:d8:e0:bc:61: 16:ef:7f:f7:72:3b:5b:87:a2:82:d1:61:5c:cc:d6: 3f:63:6e:76:46:d2:3a:ac:af:34:97:c9:ec:f9:1f: 69:30:7f:e3:15:c5:26:34:16:81:c0:e5:1e:e9:26: 7c:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E0:66:9B:08:CE:4A:C5:B6:49:48:37:DB:14:50:AD:CE:F3:1F:82:17 X509v3 Authority Key Identifier: keyid:B2:07:7B:9B:AF:0B:F3:E5:FC:B8:45:13:B1:D7:44:5E:30:CE:65:82 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/85dd4f16-570e-4c8c-a992-db89ea3bad36/0/B2077B9BAF0BF3E5FCB84513B1D7445E30CE6582.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B2077B9BAF0BF3E5FCB84513B1D7445E30CE6582.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/85dd4f16-570e-4c8c-a992-db89ea3bad36/0/B2077B9BAF0BF3E5FCB84513B1D7445E30CE6582.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a0:80:78:80:b8:ae:1e:ff:fe:81:5e:74:3d:c7:85:df:7a:32: fb:dc:8a:95:b9:cd:df:84:dc:23:94:2e:cc:54:95:60:20:f2: 44:af:90:86:7b:80:f1:05:32:f9:5f:2b:74:78:81:01:e9:4c: 5b:dc:93:60:cb:1b:6a:a5:29:1d:3f:a0:f9:0e:06:00:d2:ed: fd:10:09:6a:05:23:4b:d7:2d:ad:6c:b2:55:10:59:90:4b:35: dd:1f:74:b1:75:4a:7a:0e:9e:c3:ab:5f:e9:45:56:6e:65:d4: 8f:44:2d:e3:01:e4:ea:6e:54:74:29:f1:ef:9d:cf:44:44:14: 77:75:ba:b9:9f:27:76:8c:9f:b8:8b:45:99:e6:64:89:81:49: 31:bc:f0:4d:19:d8:3d:73:ce:44:9d:37:10:04:e6:27:1b:32: c5:d9:3f:6f:b1:a1:a6:ef:1f:b4:e1:de:e9:ea:74:53:52:b5: fe:05:94:2d:53:2d:2a:e0:c0:11:72:f7:9f:8e:d1:2b:93:de: 98:35:96:1e:f5:3e:17:e0:69:a3:f2:a6:25:a8:59:e4:15:4f: 86:a7:8a:98:27:de:64:06:0c:4a:b7:45:2e:05:9b:4a:82:a9: f0:af:ea:99:7c:58:18:4b:83:bc:3f:8b:22:7e:d5:88:26:1d: 90:d3:c5:0b -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUYQxIDU3dP52jb5/6ScaAomD70PQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjIwNzdCOUJBRjBCRjNFNUZDQjg0NTEzQjFENzQ0NUUz MENFNjU4MjAeFw0yNTEyMjIxMzE3NDdaFw0yNTEyMjUyMzE5NDdaMDMxMTAvBgNV BAMTKEUwNjY5QjA4Q0U0QUM1QjY0OTQ4MzdEQjE0NTBBRENFRjMxRjgyMTcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDIkDv8uFqLJ2AXxBYLRwNW7BSo loaNGyNVf5SOmzwjA4i76Nmf+/IiBYgiQt91l7lrhiB2qxTtbFxS9gR+dDAsDqbY S6h4TANGBvZSRdJbFTIVLqhPMrW7PU18AIzh3jnOFZ14mtbbY4OXA+Ux5eQVxynn 1d7XMwNutkgRt61mrpM5F/eLhwjmEUEQkjpQCQc3ZLJbZ/H9hiHwrGm5EcTENW9y iIdEw4ZJNg5HfT1zScey2P4q67aDyIpIeJuESSv3dv439vfgvobX1cj32OC8YRbv f/dyO1uHooLRYVzM1j9jbnZG0jqsrzSXyez5H2kwf+MVxSY0FoHA5R7pJnwbAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU4GabCM5KxbZJSDfbFFCtzvMfghcwHwYDVR0j BBgwFoAUsgd7m68L8+X8uEUTsddEXjDOZYIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 NWRkNGYxNi01NzBlLTRjOGMtYTk5Mi1kYjg5ZWEzYmFkMzYvMC9CMjA3N0I5QkFG MEJGM0U1RkNCODQ1MTNCMUQ3NDQ1RTMwQ0U2NTgyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQjIwNzdCOUJBRjBCRjNFNUZDQjg0NTEzQjFENzQ0NUUzMENF NjU4Mi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vODVkZDRmMTYtNTcwZS00YzhjLWE5 OTItZGI4OWVhM2JhZDM2LzAvQjIwNzdCOUJBRjBCRjNFNUZDQjg0NTEzQjFENzQ0 NUUzMENFNjU4Mi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKCAeIC4rh7//oFedD3Hhd96MvvcipW5zd+E 3COULsxUlWAg8kSvkIZ7gPEFMvlfK3R4gQHpTFvck2DLG2qlKR0/oPkOBgDS7f0Q CWoFI0vXLa1sslUQWZBLNd0fdLF1SnoOnsOrX+lFVm5l1I9ELeMB5OpuVHQp8e+d z0REFHd1urmfJ3aMn7iLRZnmZImBSTG88E0Z2D1zzkSdNxAE5icbMsXZP2+xoabv H7Th3unqdFNStf4FlC1TLSrgwBFy95+O0SuT3pg1lh71PhfgaaPypiWoWeQVT4an ipgn3mQGDEq3RS4Fm0qCqfCv6pl8WBhLg7w/iyJ+1YgmHZDTxQs= -----END CERTIFICATE-----Generated at Wed Dec 24 22:10:53 2025 by rpki-client