This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/877b01cf-b1c9-450f-8551-4dcb4cbd4262/0/BCDF6D8F5670257F852914E87D552983AA37A3A3.mft File: BCDF6D8F5670257F852914E87D552983AA37A3A3.mft (raw, json) Hash identifier: nrkAqTlIpyUyc+nuQlcanhXPaaaUPnITk2LXuSnMRPw= Subject key identifier: 3F:45:8F:68:14:A0:74:F8:08:7B:09:6C:6B:07:F1:2C:CB:8A:DC:3A Authority key identifier: BC:DF:6D:8F:56:70:25:7F:85:29:14:E8:7D:55:29:83:AA:37:A3:A3 Certificate issuer: /CN=BCDF6D8F5670257F852914E87D552983AA37A3A3 Certificate serial: 31CFA847CD830240880022FF93134E4C6E47105D Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BCDF6D8F5670257F852914E87D552983AA37A3A3.cer Subject info access: rsync://repo-rpki.idnic.net/repo/877b01cf-b1c9-450f-8551-4dcb4cbd4262/0/BCDF6D8F5670257F852914E87D552983AA37A3A3.mft Manifest number: 048A Signing time: Wed 17 Dec 2025 19:31:01 +0000 Manifest this update: Wed 17 Dec 2025 19:26:01 +0000 Manifest next update: Sun 21 Dec 2025 06:57:01 +0000 Files and hashes: 1: 3130332e3134372e37362e302f32332d3233203d3e20313339393532.roa (hash: ZtfrmcdIDZFk5FXV0vrgffSS//LC3R042y4pGOoRFVw=) 2: 3130332e3134372e37372e302f32342d3234203d3e20313339393532.roa (hash: gks4E4RAlqsYzpMbY7s86LphrkEHlbXfODEV9a6VKSU=) 3: BCDF6D8F5670257F852914E87D552983AA37A3A3.crl (hash: ZaAESTuQFAXuU6ECBdyIq69qen2J1bREVh7oehQ/mnE=) 4: 3130332e3134372e37362e302f32342d3234203d3e20313339393532.roa (hash: 2JYulwUxi2T/jzgAmBWLWpOPU3Z1C06NLPJ2YJd9h44=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/877b01cf-b1c9-450f-8551-4dcb4cbd4262/0/BCDF6D8F5670257F852914E87D552983AA37A3A3.crl rsync://repo-rpki.idnic.net/repo/877b01cf-b1c9-450f-8551-4dcb4cbd4262/0/BCDF6D8F5670257F852914E87D552983AA37A3A3.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BCDF6D8F5670257F852914E87D552983AA37A3A3.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 21 Dec 2025 06:57:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 31:cf:a8:47:cd:83:02:40:88:00:22:ff:93:13:4e:4c:6e:47:10:5d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BCDF6D8F5670257F852914E87D552983AA37A3A3 Validity Not Before: Dec 17 19:26:01 2025 GMT Not After : Dec 21 06:57:01 2025 GMT Subject: CN=3F458F6814A074F8087B096C6B07F12CCB8ADC3A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:8f:5f:56:85:b6:cf:64:bd:2c:b1:07:ff:06: 4e:a1:b7:cd:e7:da:20:17:da:db:64:02:90:da:ca: 0e:11:03:97:4a:3e:2b:c2:57:35:fd:eb:be:0f:c1: 3f:08:0b:d1:73:4a:3e:d5:57:c8:6e:e9:64:56:84: c4:95:74:94:5a:36:c2:4f:b7:eb:6b:9f:59:bb:f7: 8a:fd:4c:a4:7b:0e:d0:84:99:ec:f7:14:40:61:85: 6f:d4:a6:23:ca:94:4d:25:1d:af:59:c2:ee:f4:db: 90:aa:80:8c:06:ca:ad:11:a7:18:b0:29:3f:31:70: 69:ba:25:47:62:94:10:85:d3:2e:e2:3e:09:a5:cb: 07:f3:41:bd:f8:1a:64:de:a0:65:66:ce:73:5a:3a: 4c:9f:e4:51:8a:11:5d:0d:c2:4e:46:74:6b:36:e8: fc:00:0a:fc:a2:9d:a1:51:b3:b3:24:54:1e:76:33: 99:e0:54:0a:af:0f:87:59:6f:38:68:b4:7c:20:ca: b0:40:b3:3b:c7:18:ba:84:93:63:28:75:18:1e:6d: da:e9:d5:71:e0:be:3b:9b:35:92:81:75:ba:d7:0b: 60:60:04:b1:06:79:3f:c9:96:b0:2b:b8:f0:bd:14: e1:45:03:c1:12:d8:3d:07:cf:e5:75:85:2c:60:56: b1:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3F:45:8F:68:14:A0:74:F8:08:7B:09:6C:6B:07:F1:2C:CB:8A:DC:3A X509v3 Authority Key Identifier: keyid:BC:DF:6D:8F:56:70:25:7F:85:29:14:E8:7D:55:29:83:AA:37:A3:A3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/877b01cf-b1c9-450f-8551-4dcb4cbd4262/0/BCDF6D8F5670257F852914E87D552983AA37A3A3.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BCDF6D8F5670257F852914E87D552983AA37A3A3.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/877b01cf-b1c9-450f-8551-4dcb4cbd4262/0/BCDF6D8F5670257F852914E87D552983AA37A3A3.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 41:de:ef:b5:d8:ca:99:0d:2d:00:13:60:eb:25:4d:8d:cf:d7: 38:22:4e:d1:5f:b2:0a:40:56:2a:d8:85:7b:ce:e9:52:96:0a: 18:06:b4:3a:84:aa:c5:9d:f2:f5:1a:a7:e7:ba:86:e1:e5:da: 28:2d:d5:5a:bc:13:01:63:f4:a6:b2:6b:d1:a2:6e:55:86:9a: 93:c1:a0:dc:95:99:00:71:65:09:d2:c7:ac:2d:ac:8b:fe:bd: f2:0f:13:86:1f:39:6c:e6:6c:a5:63:0a:91:cb:23:50:09:c5: c8:8c:f2:67:e2:75:fe:fb:ee:ad:12:82:8a:2a:6c:ec:78:49: 94:1f:c6:a6:2e:ad:4c:fe:70:dd:c3:42:d2:e7:94:4e:5c:f1: 44:93:89:4f:f4:d4:63:d9:d9:88:f8:01:f6:32:5f:b0:7a:0e: 84:39:72:f1:7f:5c:c2:c3:1f:8c:61:6a:fc:fd:d1:44:49:aa: ca:ab:a1:5b:c6:f5:23:4f:dd:e3:23:85:95:2e:5e:5b:40:1c: 67:3f:47:a1:e6:27:73:d5:91:93:57:17:ba:76:5e:ec:28:9b: 21:3d:c5:98:7a:b2:e1:6e:88:b9:99:8e:76:50:f8:1e:00:d9: aa:d0:b9:a7:59:68:92:1c:51:06:16:da:1f:ed:d9:28:9c:59: 77:0e:78:2e -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUMc+oR82DAkCIACL/kxNOTG5HEF0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkNERjZEOEY1NjcwMjU3Rjg1MjkxNEU4N0Q1NTI5ODNB QTM3QTNBMzAeFw0yNTEyMTcxOTI2MDFaFw0yNTEyMjEwNjU3MDFaMDMxMTAvBgNV BAMTKDNGNDU4RjY4MTRBMDc0RjgwODdCMDk2QzZCMDdGMTJDQ0I4QURDM0EwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDKj19WhbbPZL0ssQf/Bk6ht83n 2iAX2ttkApDayg4RA5dKPivCVzX9674PwT8IC9FzSj7VV8hu6WRWhMSVdJRaNsJP t+trn1m794r9TKR7DtCEmez3FEBhhW/UpiPKlE0lHa9Zwu7025CqgIwGyq0Rpxiw KT8xcGm6JUdilBCF0y7iPgmlywfzQb34GmTeoGVmznNaOkyf5FGKEV0Nwk5GdGs2 6PwACvyinaFRs7MkVB52M5ngVAqvD4dZbzhotHwgyrBAszvHGLqEk2ModRgebdrp 1XHgvjubNZKBdbrXC2BgBLEGeT/JlrAruPC9FOFFA8ES2D0Hz+V1hSxgVrGDAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUP0WPaBSgdPgIewlsawfxLMuK3DowHwYDVR0j BBgwFoAUvN9tj1ZwJX+FKRTofVUpg6o3o6MwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 NzdiMDFjZi1iMWM5LTQ1MGYtODU1MS00ZGNiNGNiZDQyNjIvMC9CQ0RGNkQ4RjU2 NzAyNTdGODUyOTE0RTg3RDU1Mjk4M0FBMzdBM0EzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQkNERjZEOEY1NjcwMjU3Rjg1MjkxNEU4N0Q1NTI5ODNBQTM3 QTNBMy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vODc3YjAxY2YtYjFjOS00NTBmLTg1 NTEtNGRjYjRjYmQ0MjYyLzAvQkNERjZEOEY1NjcwMjU3Rjg1MjkxNEU4N0Q1NTI5 ODNBQTM3QTNBMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEHe77XYypkNLQATYOslTY3P1zgiTtFfsgpA VirYhXvO6VKWChgGtDqEqsWd8vUap+e6huHl2igt1Vq8EwFj9Kaya9GiblWGmpPB oNyVmQBxZQnSx6wtrIv+vfIPE4YfOWzmbKVjCpHLI1AJxciM8mfidf777q0Sgooq bOx4SZQfxqYurUz+cN3DQtLnlE5c8USTiU/01GPZ2Yj4AfYyX7B6DoQ5cvF/XMLD H4xhavz90URJqsqroVvG9SNP3eMjhZUuXltAHGc/R6HmJ3PVkZNXF7p2XuwomyE9 xZh6suFuiLmZjnZQ+B4A2arQuadZaJIcUQYW2h/t2SicWXcOeC4= -----END CERTIFICATE-----Generated at Fri Dec 19 11:19:53 2025 by rpki-client