This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/ae921917-13af-4403-97ab-9adaf5104c12/0/BCBEAD4672B19E91248E58DD91C4ECD894A7A3A8.mft File: BCBEAD4672B19E91248E58DD91C4ECD894A7A3A8.mft (raw, json) Hash identifier: pbJ7kilqMQQImBGVLgvVqwrKh+3tqQjdBZwKNSfN5IU= Subject key identifier: 59:B6:75:8B:F4:D5:82:83:5D:F4:43:BB:52:67:D9:A9:C8:A5:6F:6B Authority key identifier: BC:BE:AD:46:72:B1:9E:91:24:8E:58:DD:91:C4:EC:D8:94:A7:A3:A8 Certificate issuer: /CN=BCBEAD4672B19E91248E58DD91C4ECD894A7A3A8 Certificate serial: 7F2CE26E8915851259561F1D9BEDFF6B30881D78 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BCBEAD4672B19E91248E58DD91C4ECD894A7A3A8.cer Subject info access: rsync://repo-rpki.idnic.net/repo/ae921917-13af-4403-97ab-9adaf5104c12/0/BCBEAD4672B19E91248E58DD91C4ECD894A7A3A8.mft Manifest number: F4 Signing time: Wed 24 Dec 2025 01:31:11 +0000 Manifest this update: Wed 24 Dec 2025 01:26:11 +0000 Manifest next update: Sat 27 Dec 2025 02:30:11 +0000 Files and hashes: 1: 3130332e3134322e39302e302f32332d3234203d3e20313339333734.roa (hash: BCR4399uDrDPTCg+MIbL26PuI+e2Uq0NkSYBiX921Hw=) 2: BCBEAD4672B19E91248E58DD91C4ECD894A7A3A8.crl (hash: pVr1d9xD/B20uNjyvIZcmad8FGCtNZzirJ7hUSgx0HY=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/ae921917-13af-4403-97ab-9adaf5104c12/0/BCBEAD4672B19E91248E58DD91C4ECD894A7A3A8.crl rsync://repo-rpki.idnic.net/repo/ae921917-13af-4403-97ab-9adaf5104c12/0/BCBEAD4672B19E91248E58DD91C4ECD894A7A3A8.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BCBEAD4672B19E91248E58DD91C4ECD894A7A3A8.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 27 Dec 2025 02:30:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7f:2c:e2:6e:89:15:85:12:59:56:1f:1d:9b:ed:ff:6b:30:88:1d:78 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BCBEAD4672B19E91248E58DD91C4ECD894A7A3A8 Validity Not Before: Dec 24 01:26:11 2025 GMT Not After : Dec 27 02:30:11 2025 GMT Subject: CN=59B6758BF4D582835DF443BB5267D9A9C8A56F6B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:d0:2b:1b:b3:e4:6a:e1:ec:86:1c:6a:5a:d3: 8c:0d:c2:dd:c3:2b:23:4f:68:4d:5e:c2:a3:42:7d: 56:4f:65:12:e9:8f:ad:c5:6b:67:a8:e6:c4:4c:eb: ea:70:e3:e6:56:b3:3b:30:dc:5b:8d:9d:0c:eb:0b: 31:b0:fe:86:c2:1d:b8:46:4a:38:c4:b2:b9:c0:b6: 92:da:b3:f5:c1:99:2b:e9:b3:0c:5d:28:95:83:27: 64:3d:be:03:a8:36:7d:97:4f:9e:33:0f:cb:70:0e: e9:f9:3f:ea:4b:14:9d:2d:fe:40:22:1b:06:31:d3: e6:19:62:f2:3b:94:de:85:18:bc:d4:5f:e0:00:73: b8:9a:ab:f3:9b:6f:d3:ca:b1:d0:76:0a:11:14:87: 69:1c:9d:10:08:d0:82:cd:ab:33:b8:a3:2d:ec:f7: b1:fb:24:35:7a:60:f5:6a:02:26:72:81:d5:45:c0: d7:af:48:ea:17:8b:b8:94:ed:ea:7a:8e:33:fe:6f: cb:cd:72:53:24:14:f6:e0:b6:59:38:4e:73:d0:35: 85:5c:e2:c1:78:91:84:0c:c5:db:99:d8:68:f8:d3: a5:51:3b:53:9a:fc:19:7d:0a:cb:db:fc:0e:d3:62: b3:1e:c2:fd:8f:5a:51:40:9d:5f:02:cd:ab:32:ee: a9:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 59:B6:75:8B:F4:D5:82:83:5D:F4:43:BB:52:67:D9:A9:C8:A5:6F:6B X509v3 Authority Key Identifier: keyid:BC:BE:AD:46:72:B1:9E:91:24:8E:58:DD:91:C4:EC:D8:94:A7:A3:A8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/ae921917-13af-4403-97ab-9adaf5104c12/0/BCBEAD4672B19E91248E58DD91C4ECD894A7A3A8.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BCBEAD4672B19E91248E58DD91C4ECD894A7A3A8.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ae921917-13af-4403-97ab-9adaf5104c12/0/BCBEAD4672B19E91248E58DD91C4ECD894A7A3A8.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6a:54:7e:42:dc:30:a9:15:7a:d8:eb:65:d8:e1:b1:6c:85:37: 42:e6:bf:7c:d9:33:b6:92:c4:a5:45:89:9a:96:48:27:37:84: 8f:a8:cc:96:4f:80:56:7b:b5:42:01:8d:53:79:05:fd:53:d4: 70:93:e6:47:3b:11:35:c4:0b:6f:ea:66:31:4e:29:d3:12:e6: e5:a8:fc:53:6d:5b:63:d1:9b:92:c5:97:55:d7:15:88:c1:3d: 57:d6:7d:7b:14:a0:cd:1f:6f:f4:f1:76:59:3d:8e:37:20:c9: a1:bb:df:18:17:8c:ce:32:d3:0b:a9:de:3a:bb:35:76:00:42: bc:b4:87:bd:d1:4e:e3:b9:0b:e6:54:b9:15:45:fd:b5:f1:e7: ef:57:c0:6f:19:23:94:0b:e1:55:3f:61:29:4a:ae:b0:d3:98: 4d:e6:ca:f3:fb:cf:67:70:37:b0:e5:f7:02:21:be:0a:55:50: 1b:7b:58:ff:20:96:b5:51:bf:a8:92:c7:0a:35:ef:f7:ab:9e: c5:62:2c:0f:69:14:e7:46:dd:a8:4e:98:5b:cb:15:37:fe:20: 33:95:da:4a:7f:d2:31:bf:b2:71:66:fe:9b:34:ff:15:ff:5c: b9:c5:73:ee:7f:0b:10:3a:02:1d:ed:e8:a6:49:34:56:6b:cf: 6e:90:85:e0 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUfyzibokVhRJZVh8dm+3/azCIHXgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkNCRUFENDY3MkIxOUU5MTI0OEU1OEREOTFDNEVDRDg5 NEE3QTNBODAeFw0yNTEyMjQwMTI2MTFaFw0yNTEyMjcwMjMwMTFaMDMxMTAvBgNV BAMTKDU5QjY3NThCRjRENTgyODM1REY0NDNCQjUyNjdEOUE5QzhBNTZGNkIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDO0Csbs+Rq4eyGHGpa04wNwt3D KyNPaE1ewqNCfVZPZRLpj63Fa2eo5sRM6+pw4+ZWszsw3FuNnQzrCzGw/obCHbhG SjjEsrnAtpLas/XBmSvpswxdKJWDJ2Q9vgOoNn2XT54zD8twDun5P+pLFJ0t/kAi GwYx0+YZYvI7lN6FGLzUX+AAc7iaq/Obb9PKsdB2ChEUh2kcnRAI0ILNqzO4oy3s 97H7JDV6YPVqAiZygdVFwNevSOoXi7iU7ep6jjP+b8vNclMkFPbgtlk4TnPQNYVc 4sF4kYQMxduZ2Gj406VRO1Oa/Bl9Csvb/A7TYrMewv2PWlFAnV8Czasy7qlBAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUWbZ1i/TVgoNd9EO7UmfZqcilb2swHwYDVR0j BBgwFoAUvL6tRnKxnpEkjljdkcTs2JSno6gwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h ZTkyMTkxNy0xM2FmLTQ0MDMtOTdhYi05YWRhZjUxMDRjMTIvMC9CQ0JFQUQ0Njcy QjE5RTkxMjQ4RTU4REQ5MUM0RUNEODk0QTdBM0E4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQkNCRUFENDY3MkIxOUU5MTI0OEU1OEREOTFDNEVDRDg5NEE3 QTNBOC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYWU5MjE5MTctMTNhZi00NDAzLTk3 YWItOWFkYWY1MTA0YzEyLzAvQkNCRUFENDY3MkIxOUU5MTI0OEU1OEREOTFDNEVD RDg5NEE3QTNBOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGpUfkLcMKkVetjrZdjhsWyFN0Lmv3zZM7aS xKVFiZqWSCc3hI+ozJZPgFZ7tUIBjVN5Bf1T1HCT5kc7ETXEC2/qZjFOKdMS5uWo /FNtW2PRm5LFl1XXFYjBPVfWfXsUoM0fb/Txdlk9jjcgyaG73xgXjM4y0wup3jq7 NXYAQry0h73RTuO5C+ZUuRVF/bXx5+9XwG8ZI5QL4VU/YSlKrrDTmE3myvP7z2dw N7Dl9wIhvgpVUBt7WP8glrVRv6iSxwo17/ernsViLA9pFOdG3ahOmFvLFTf+IDOV 2kp/0jG/snFm/ps0/xX/XLnFc+5/CxA6Ah3t6KZJNFZrz26QheA= -----END CERTIFICATE-----Generated at Thu Dec 25 21:08:00 2025 by rpki-client