This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/b4a02d37-3b9d-453a-8c81-328e540141fd/0/BB64FDB64281947C3567104C08735A011C6210F4.mft File: BB64FDB64281947C3567104C08735A011C6210F4.mft (raw, json) Hash identifier: KQ1sZiG4tcPgEG66OS1foBj4dIzkhsVY9fPZXI0HnBQ= Subject key identifier: E3:9E:07:9B:29:F1:8B:A9:4D:90:AE:8F:F9:74:83:63:C9:3C:86:4F Authority key identifier: BB:64:FD:B6:42:81:94:7C:35:67:10:4C:08:73:5A:01:1C:62:10:F4 Certificate issuer: /CN=BB64FDB64281947C3567104C08735A011C6210F4 Certificate serial: 6AE5112F3B73899127DAADA8AFDC198B07788C54 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BB64FDB64281947C3567104C08735A011C6210F4.cer Subject info access: rsync://repo-rpki.idnic.net/repo/b4a02d37-3b9d-453a-8c81-328e540141fd/0/BB64FDB64281947C3567104C08735A011C6210F4.mft Manifest number: 03BC Signing time: Mon 22 Dec 2025 21:02:26 +0000 Manifest this update: Mon 22 Dec 2025 20:57:26 +0000 Manifest next update: Fri 26 Dec 2025 01:05:26 +0000 Files and hashes: 1: 3130332e3136392e3139322e302f32332d3234203d3e20313432333438.roa (hash: WO1pfWHoqTdWNx4bevNPCtJdd2Sq+t2I2uTA3HBPJBM=) 2: BB64FDB64281947C3567104C08735A011C6210F4.crl (hash: ZthS5Ltvy6+A5HZXWTJUkOPplKcqkG7v05mwL1VHnkw=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/b4a02d37-3b9d-453a-8c81-328e540141fd/0/BB64FDB64281947C3567104C08735A011C6210F4.crl rsync://repo-rpki.idnic.net/repo/b4a02d37-3b9d-453a-8c81-328e540141fd/0/BB64FDB64281947C3567104C08735A011C6210F4.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BB64FDB64281947C3567104C08735A011C6210F4.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 26 Dec 2025 01:05:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6a:e5:11:2f:3b:73:89:91:27:da:ad:a8:af:dc:19:8b:07:78:8c:54 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BB64FDB64281947C3567104C08735A011C6210F4 Validity Not Before: Dec 22 20:57:26 2025 GMT Not After : Dec 26 01:05:26 2025 GMT Subject: CN=E39E079B29F18BA94D90AE8FF9748363C93C864F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:e4:9d:bc:b7:7f:3e:4c:20:2a:7d:5b:9a:2b: 85:9e:4e:25:4f:b5:4a:d3:be:73:a3:96:a5:3b:4f: 22:ba:35:2a:d9:be:0e:c4:f6:f5:66:01:50:8e:6e: 44:30:e5:17:0c:36:c9:65:78:83:bc:fe:f3:a5:a9: 1e:c6:64:6b:cc:78:ad:84:09:e4:32:d5:28:70:8b: 3b:ef:17:dc:21:04:d0:73:ba:de:b7:90:28:2c:18: d3:f4:10:34:97:61:a9:65:74:44:3f:1f:f9:fd:0e: 62:94:25:28:26:10:99:a7:1f:b0:52:c2:e8:e6:e1: a5:cd:92:55:f2:06:cd:91:27:33:e3:1a:5c:06:0f: 2b:05:8a:d8:db:1d:14:85:fb:11:0c:37:85:30:b8: 53:fa:da:a2:5d:89:4b:4d:88:5b:35:09:9a:bb:a2: ad:62:19:5f:a5:a0:ef:ca:3d:7f:ff:f3:32:b9:1e: c0:4f:4b:92:60:f2:19:ce:54:d0:62:4a:8e:4b:60: b6:b6:31:db:15:3e:3e:2a:f1:3f:eb:01:a0:c1:ae: 1a:16:7a:f8:db:70:b5:d2:95:0c:0a:a8:f6:47:67: 34:52:c6:81:3d:84:00:0b:a8:f8:39:72:5e:aa:b0: bc:77:5f:a3:a2:05:6d:60:68:38:f9:48:c0:26:a8: 4a:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E3:9E:07:9B:29:F1:8B:A9:4D:90:AE:8F:F9:74:83:63:C9:3C:86:4F X509v3 Authority Key Identifier: keyid:BB:64:FD:B6:42:81:94:7C:35:67:10:4C:08:73:5A:01:1C:62:10:F4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/b4a02d37-3b9d-453a-8c81-328e540141fd/0/BB64FDB64281947C3567104C08735A011C6210F4.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BB64FDB64281947C3567104C08735A011C6210F4.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/b4a02d37-3b9d-453a-8c81-328e540141fd/0/BB64FDB64281947C3567104C08735A011C6210F4.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4c:ab:c3:d8:5a:98:9f:55:df:2f:38:bb:b2:e6:52:f5:66:19: b7:06:55:f8:27:59:c0:c8:2e:31:5d:7c:12:49:df:78:cf:f6: 2a:13:9e:57:c8:94:87:e8:bd:8f:53:2c:19:2a:63:3e:89:ad: a6:c6:a4:8e:73:36:77:82:58:4c:27:d0:cb:eb:74:e2:95:fe: 5a:02:20:f8:fd:6d:b2:22:89:f0:d8:95:c8:da:90:dd:08:b2: 65:7b:bb:ec:a4:63:29:73:0b:e3:fd:80:89:57:7e:bc:25:3b: 61:ee:2c:db:e1:96:ef:be:e5:bf:39:15:80:0b:22:b8:ed:e1: b1:4c:25:14:e1:b5:b2:27:08:61:b9:22:4b:bb:79:09:b4:de: 8c:85:42:8e:28:93:71:1c:3a:10:6f:99:be:e9:e8:83:65:16: c5:cd:83:bb:21:b7:ed:25:31:f7:19:dd:75:e3:9a:f3:e8:3c: 53:d4:a5:7e:7c:24:64:dc:78:f0:da:37:33:d5:c8:f4:5d:90: 4d:a5:a1:39:94:00:29:aa:93:61:0e:26:3a:58:43:c6:a3:72: dd:06:fe:63:87:2d:a9:9f:eb:52:d9:fc:1f:58:13:4c:48:ca: c9:93:d3:e5:69:84:40:b8:8c:ba:0a:ac:55:65:58:a0:aa:20: e4:e1:cc:3f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUauURLztziZEn2q2or9wZiwd4jFQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkI2NEZEQjY0MjgxOTQ3QzM1NjcxMDRDMDg3MzVBMDEx QzYyMTBGNDAeFw0yNTEyMjIyMDU3MjZaFw0yNTEyMjYwMTA1MjZaMDMxMTAvBgNV BAMTKEUzOUUwNzlCMjlGMThCQTk0RDkwQUU4RkY5NzQ4MzYzQzkzQzg2NEYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDF5J28t38+TCAqfVuaK4WeTiVP tUrTvnOjlqU7TyK6NSrZvg7E9vVmAVCObkQw5RcMNslleIO8/vOlqR7GZGvMeK2E CeQy1ShwizvvF9whBNBzut63kCgsGNP0EDSXYalldEQ/H/n9DmKUJSgmEJmnH7BS wujm4aXNklXyBs2RJzPjGlwGDysFitjbHRSF+xEMN4UwuFP62qJdiUtNiFs1CZq7 oq1iGV+loO/KPX//8zK5HsBPS5Jg8hnOVNBiSo5LYLa2MdsVPj4q8T/rAaDBrhoW evjbcLXSlQwKqPZHZzRSxoE9hAALqPg5cl6qsLx3X6OiBW1gaDj5SMAmqEr7AgMB AAGjggI8MIICODAdBgNVHQ4EFgQU454Hmynxi6lNkK6P+XSDY8k8hk8wHwYDVR0j BBgwFoAUu2T9tkKBlHw1ZxBMCHNaARxiEPQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i NGEwMmQzNy0zYjlkLTQ1M2EtOGM4MS0zMjhlNTQwMTQxZmQvMC9CQjY0RkRCNjQy ODE5NDdDMzU2NzEwNEMwODczNUEwMTFDNjIxMEY0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQkI2NEZEQjY0MjgxOTQ3QzM1NjcxMDRDMDg3MzVBMDExQzYy MTBGNC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYjRhMDJkMzctM2I5ZC00NTNhLThj ODEtMzI4ZTU0MDE0MWZkLzAvQkI2NEZEQjY0MjgxOTQ3QzM1NjcxMDRDMDg3MzVB MDExQzYyMTBGNC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEyrw9hamJ9V3y84u7LmUvVmGbcGVfgnWcDI LjFdfBJJ33jP9ioTnlfIlIfovY9TLBkqYz6JrabGpI5zNneCWEwn0MvrdOKV/loC IPj9bbIiifDYlcjakN0IsmV7u+ykYylzC+P9gIlXfrwlO2HuLNvhlu++5b85FYAL Irjt4bFMJRThtbInCGG5Iku7eQm03oyFQo4ok3EcOhBvmb7p6INlFsXNg7sht+0l MfcZ3XXjmvPoPFPUpX58JGTcePDaNzPVyPRdkE2loTmUACmqk2EOJjpYQ8ajct0G /mOHLamf61LZ/B9YE0xIysmT0+VphEC4jLoKrFVlWKCqIOThzD8= -----END CERTIFICATE-----Generated at Thu Dec 25 00:39:51 2025 by rpki-client