This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/af6d185e-d4f4-4820-b4b6-798c307ad7e5/0/B877CD1C542C3DE2CBB8EF151F179B857E9376E4.mft File: B877CD1C542C3DE2CBB8EF151F179B857E9376E4.mft (raw, json) Hash identifier: X0lzaQFUY5zmT3GPtnzBVnTPVbYAU9cHp5DrFwU3qSM= Subject key identifier: 9B:F1:3C:16:09:7B:9C:87:5D:8B:50:B3:86:E7:B7:1E:F2:91:B4:4C Authority key identifier: B8:77:CD:1C:54:2C:3D:E2:CB:B8:EF:15:1F:17:9B:85:7E:93:76:E4 Certificate issuer: /CN=B877CD1C542C3DE2CBB8EF151F179B857E9376E4 Certificate serial: 2B8347055E7D3960E5471D169E15F0E12834EC2C Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B877CD1C542C3DE2CBB8EF151F179B857E9376E4.cer Subject info access: rsync://repo-rpki.idnic.net/repo/af6d185e-d4f4-4820-b4b6-798c307ad7e5/0/B877CD1C542C3DE2CBB8EF151F179B857E9376E4.mft Manifest number: 01B2 Signing time: Fri 19 Dec 2025 19:53:58 +0000 Manifest this update: Fri 19 Dec 2025 19:48:58 +0000 Manifest next update: Mon 22 Dec 2025 21:25:58 +0000 Files and hashes: 1: 3130332e3133302e3139382e302f32332d3234203d3e20313338303737.roa (hash: GBdm9qQ0p29KR8e28QB9UjrYbB7/EDKaMJEitqFkR/M=) 2: 3131372e3130332e3131362e302f32342d3234203d3e20313338303737.roa (hash: XZBWXgwi6/bY0uActUG5TDU+WKOBs9TQUHXitVU+Zwk=) 3: 3136302e32302e3232322e302f32342d3234203d3e20313338303737.roa (hash: qNVUMuIrsRym1al7QBcjtB+KpEbJtW/3ayQKIjCttbA=) 4: B877CD1C542C3DE2CBB8EF151F179B857E9376E4.crl (hash: 6GnSvCaDZ++jjLMDFGevkZXx0FEojeD58uQmh0ThH6U=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/af6d185e-d4f4-4820-b4b6-798c307ad7e5/0/B877CD1C542C3DE2CBB8EF151F179B857E9376E4.crl rsync://repo-rpki.idnic.net/repo/af6d185e-d4f4-4820-b4b6-798c307ad7e5/0/B877CD1C542C3DE2CBB8EF151F179B857E9376E4.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B877CD1C542C3DE2CBB8EF151F179B857E9376E4.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 22 Dec 2025 21:25:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2b:83:47:05:5e:7d:39:60:e5:47:1d:16:9e:15:f0:e1:28:34:ec:2c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B877CD1C542C3DE2CBB8EF151F179B857E9376E4 Validity Not Before: Dec 19 19:48:58 2025 GMT Not After : Dec 22 21:25:58 2025 GMT Subject: CN=9BF13C16097B9C875D8B50B386E7B71EF291B44C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:50:2d:71:9f:f5:4c:f3:49:85:e7:ca:52:5e: 19:1e:9b:5f:3c:c0:1f:0c:db:62:eb:73:d5:d5:ef: bf:8a:41:92:cb:0e:90:8d:98:ba:06:90:c9:bb:86: 7a:e7:1b:a9:c4:9f:2a:78:0f:f9:89:e1:33:73:c8: 70:bc:2d:0b:f3:2d:53:c6:25:5d:69:c2:e1:c2:78: 1f:f4:c1:83:24:31:80:2d:a7:44:06:53:ec:97:98: 06:dd:43:03:07:e1:de:97:64:82:7b:81:04:9e:b5: bc:dc:fe:27:56:b0:49:16:5b:03:d7:2d:7a:40:e4: bc:01:f9:31:9e:a3:e1:c1:9a:f2:9e:cf:89:e4:2b: 52:f3:62:80:83:d0:dc:95:d9:16:17:bc:00:c2:59: 19:59:1e:5e:cd:79:c8:2c:32:af:cc:71:04:ed:cb: b9:93:5c:3b:f2:14:0a:86:af:da:0a:0a:0b:a5:1b: 0f:93:2e:18:e2:09:82:d2:1f:67:5c:07:90:47:ed: 95:69:8d:58:56:40:32:92:79:7c:39:b0:c7:3e:a9: 2b:e8:62:dc:4a:d9:b0:b1:5d:8e:c9:cc:27:ac:e1: 96:3a:d3:ab:14:12:9c:17:29:7c:f9:94:84:44:d5: 82:a7:e7:ed:0b:04:12:72:59:81:16:d0:8c:8e:6c: 8e:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9B:F1:3C:16:09:7B:9C:87:5D:8B:50:B3:86:E7:B7:1E:F2:91:B4:4C X509v3 Authority Key Identifier: keyid:B8:77:CD:1C:54:2C:3D:E2:CB:B8:EF:15:1F:17:9B:85:7E:93:76:E4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/af6d185e-d4f4-4820-b4b6-798c307ad7e5/0/B877CD1C542C3DE2CBB8EF151F179B857E9376E4.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B877CD1C542C3DE2CBB8EF151F179B857E9376E4.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/af6d185e-d4f4-4820-b4b6-798c307ad7e5/0/B877CD1C542C3DE2CBB8EF151F179B857E9376E4.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 03:bf:53:a7:08:9a:e4:d5:6e:88:94:ce:64:f4:73:02:64:ac: e1:13:1d:49:69:62:56:06:4a:13:d6:88:ad:0f:94:47:61:f3: b1:d9:c8:4f:7f:ca:39:5d:44:80:79:7d:10:97:3a:80:07:09: db:88:c8:96:45:b8:7c:63:ab:81:d7:9e:36:f1:e5:ac:01:07: 57:f8:78:a8:56:c3:a4:d7:7b:ec:9a:64:8f:0c:97:6e:5a:f2: d0:0e:4b:0d:fa:69:d8:93:ac:c5:d7:30:9c:f9:44:87:67:35: 61:76:a6:a9:2e:15:e2:f6:7b:b9:6d:15:84:91:e3:a2:ca:97: 5b:48:bb:34:2f:1c:54:cc:c1:cb:68:41:bb:4b:32:65:a2:4d: a8:53:9e:f1:fb:3c:eb:49:04:f6:02:6e:b3:67:64:dc:fd:ff: ed:ad:a6:da:09:85:ca:2a:5d:59:b1:bf:bb:3f:da:ba:25:5e: 41:45:73:3b:c7:e6:a2:0e:ba:0c:19:31:62:c9:22:46:db:3c: 16:eb:32:7b:64:51:f3:0d:28:96:1b:01:ee:82:17:41:62:dd: 3b:4c:14:c1:7e:de:84:72:9d:83:09:1b:91:d2:c8:67:a7:c5: 11:27:60:a1:7b:3e:24:b2:24:39:53:70:7f:50:68:e2:ab:eb: e5:e5:e7:46 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUK4NHBV59OWDlRx0WnhXw4Sg07CwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjg3N0NEMUM1NDJDM0RFMkNCQjhFRjE1MUYxNzlCODU3 RTkzNzZFNDAeFw0yNTEyMTkxOTQ4NThaFw0yNTEyMjIyMTI1NThaMDMxMTAvBgNV BAMTKDlCRjEzQzE2MDk3QjlDODc1RDhCNTBCMzg2RTdCNzFFRjI5MUI0NEMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDGUC1xn/VM80mF58pSXhkem188 wB8M22Lrc9XV77+KQZLLDpCNmLoGkMm7hnrnG6nEnyp4D/mJ4TNzyHC8LQvzLVPG JV1pwuHCeB/0wYMkMYAtp0QGU+yXmAbdQwMH4d6XZIJ7gQSetbzc/idWsEkWWwPX LXpA5LwB+TGeo+HBmvKez4nkK1LzYoCD0NyV2RYXvADCWRlZHl7NecgsMq/McQTt y7mTXDvyFAqGr9oKCgulGw+TLhjiCYLSH2dcB5BH7ZVpjVhWQDKSeXw5sMc+qSvo YtxK2bCxXY7JzCes4ZY606sUEpwXKXz5lIRE1YKn5+0LBBJyWYEW0IyObI6zAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUm/E8Fgl7nIddi1Czhue3HvKRtEwwHwYDVR0j BBgwFoAUuHfNHFQsPeLLuO8VHxebhX6TduQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h ZjZkMTg1ZS1kNGY0LTQ4MjAtYjRiNi03OThjMzA3YWQ3ZTUvMC9CODc3Q0QxQzU0 MkMzREUyQ0JCOEVGMTUxRjE3OUI4NTdFOTM3NkU0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQjg3N0NEMUM1NDJDM0RFMkNCQjhFRjE1MUYxNzlCODU3RTkz NzZFNC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYWY2ZDE4NWUtZDRmNC00ODIwLWI0 YjYtNzk4YzMwN2FkN2U1LzAvQjg3N0NEMUM1NDJDM0RFMkNCQjhFRjE1MUYxNzlC ODU3RTkzNzZFNC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAO/U6cImuTVboiUzmT0cwJkrOETHUlpYlYG ShPWiK0PlEdh87HZyE9/yjldRIB5fRCXOoAHCduIyJZFuHxjq4HXnjbx5awBB1f4 eKhWw6TXe+yaZI8Ml25a8tAOSw36adiTrMXXMJz5RIdnNWF2pqkuFeL2e7ltFYSR 46LKl1tIuzQvHFTMwctoQbtLMmWiTahTnvH7POtJBPYCbrNnZNz9/+2tptoJhcoq XVmxv7s/2rolXkFFczvH5qIOugwZMWLJIkbbPBbrMntkUfMNKJYbAe6CF0Fi3TtM FMF+3oRynYMJG5HSyGenxREnYKF7PiSyJDlTcH9QaOKr6+Xl50Y= -----END CERTIFICATE-----Generated at Sat Dec 20 19:10:59 2025 by rpki-client