This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/b4bf8641-bf70-4e3f-9871-ee26a33db3a2/0/BD685C24FF8F432543C3E583484044A44E53067B.mft File: BD685C24FF8F432543C3E583484044A44E53067B.mft (raw, json) Hash identifier: FFzM5s4z2+0QmycnWRAI42Ku5ag8uXZznR62sRrqBtc= Subject key identifier: 50:19:35:2B:92:C0:0C:D6:3D:0C:F5:15:65:AB:B8:76:50:A3:B9:71 Authority key identifier: BD:68:5C:24:FF:8F:43:25:43:C3:E5:83:48:40:44:A4:4E:53:06:7B Certificate issuer: /CN=BD685C24FF8F432543C3E583484044A44E53067B Certificate serial: 056A764DEEFB3D5FB053325BAE150EF7891EFD38 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BD685C24FF8F432543C3E583484044A44E53067B.cer Subject info access: rsync://repo-rpki.idnic.net/repo/b4bf8641-bf70-4e3f-9871-ee26a33db3a2/0/BD685C24FF8F432543C3E583484044A44E53067B.mft Manifest number: 18 Signing time: Thu 18 Dec 2025 07:31:20 +0000 Manifest this update: Thu 18 Dec 2025 07:26:20 +0000 Manifest next update: Sun 21 Dec 2025 17:28:20 +0000 Files and hashes: 1: BD685C24FF8F432543C3E583484044A44E53067B.crl (hash: KHWqMh2E0lEqplaqkp21XWGfAjVN1IkbAFmP0JJ97eY=) 2: 3130332e38332e3139382e302f32342d3234203d3e20313336303931.roa (hash: dhpkhk04ab2tWVnfTiYy7HAwnFkFS5/nKq6B26Ta2Ao=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/b4bf8641-bf70-4e3f-9871-ee26a33db3a2/0/BD685C24FF8F432543C3E583484044A44E53067B.crl rsync://repo-rpki.idnic.net/repo/b4bf8641-bf70-4e3f-9871-ee26a33db3a2/0/BD685C24FF8F432543C3E583484044A44E53067B.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BD685C24FF8F432543C3E583484044A44E53067B.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 21 Dec 2025 17:28:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 05:6a:76:4d:ee:fb:3d:5f:b0:53:32:5b:ae:15:0e:f7:89:1e:fd:38 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BD685C24FF8F432543C3E583484044A44E53067B Validity Not Before: Dec 18 07:26:20 2025 GMT Not After : Dec 21 17:28:20 2025 GMT Subject: CN=5019352B92C00CD63D0CF51565ABB87650A3B971 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:f0:17:34:66:55:93:c8:ed:d1:22:e0:9a:8d: 82:4a:9b:ad:aa:99:26:fe:ba:50:d0:7d:0b:4d:16: 9c:22:3f:b1:e1:93:1d:09:67:b7:0b:f9:1d:59:a2: fb:e3:89:8b:af:41:16:92:bd:c7:4e:c1:9f:a9:a0: 51:89:a7:0d:19:01:14:5c:31:46:00:b6:94:28:e7: 72:44:63:4d:0d:79:70:4d:c4:77:65:d1:7b:8d:99: e1:29:22:8d:9c:65:5a:97:27:1c:77:c0:91:37:b3: b7:2d:a6:1c:47:e9:b8:a3:a6:1f:ad:cb:13:e1:05: ef:c8:cc:ab:e4:e1:41:f3:6f:01:57:01:59:e1:3c: 37:84:d5:ba:07:c1:35:2d:6f:62:fc:0f:b8:56:74: 12:b4:35:6f:d2:57:4f:0d:7a:e1:4e:39:c9:ae:41: 34:33:74:6d:09:4d:94:d8:68:bf:eb:17:79:19:c0: 9e:52:09:68:9c:d6:4b:0f:a3:1e:b1:66:7d:4d:bc: 4b:af:13:20:93:c4:e3:27:bb:0e:c2:99:9a:45:25: 39:6b:e1:f2:d2:07:f6:93:4d:8d:e3:f9:bc:66:6d: fc:97:58:76:d8:77:51:64:27:3e:62:91:f8:58:e8: 2c:29:ce:96:d4:91:dd:62:e5:2f:dc:bf:90:54:5c: ec:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 50:19:35:2B:92:C0:0C:D6:3D:0C:F5:15:65:AB:B8:76:50:A3:B9:71 X509v3 Authority Key Identifier: keyid:BD:68:5C:24:FF:8F:43:25:43:C3:E5:83:48:40:44:A4:4E:53:06:7B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/b4bf8641-bf70-4e3f-9871-ee26a33db3a2/0/BD685C24FF8F432543C3E583484044A44E53067B.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BD685C24FF8F432543C3E583484044A44E53067B.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/b4bf8641-bf70-4e3f-9871-ee26a33db3a2/0/BD685C24FF8F432543C3E583484044A44E53067B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 86:f2:6a:0f:71:40:54:49:b4:22:ef:5c:c0:ab:a5:16:93:7f: f9:cf:ff:66:50:67:a1:ff:61:0d:fe:b0:1e:70:31:75:cb:6c: 90:b7:a3:91:87:ba:a9:ff:69:42:0d:ca:1d:90:da:0a:f6:16: 9f:99:00:f2:46:f8:ee:02:0b:1a:9a:5c:d9:84:e3:68:13:a3: b1:bf:1a:7f:17:0f:5e:d4:dd:20:71:ea:26:b5:3b:8a:30:01: 82:94:72:1c:28:b5:ca:c5:09:9f:3a:97:e0:a6:6d:26:4a:c3: 6c:52:20:dd:91:ab:f3:47:78:26:f6:ac:f4:9a:be:5c:e6:2a: 60:98:ca:7a:88:2e:fa:5b:4f:86:14:5b:2a:ff:89:f3:9a:d0: 5c:53:5b:3d:f2:60:28:b3:97:e5:5d:8c:cc:e9:1d:8f:ce:81: 94:3e:08:35:a4:13:44:71:d9:3b:51:bb:04:27:02:77:02:a9: 77:47:cf:15:3c:15:9a:6e:da:89:5c:60:c8:b3:78:ab:09:56: b3:69:c8:b3:68:51:e2:68:fd:22:19:12:38:b9:a0:57:51:ff: 70:04:91:2b:c2:cb:67:55:f6:91:5a:a8:b1:af:1a:62:db:60: cf:f8:bf:27:3c:08:21:57:74:2b:50:56:01:fe:5b:9f:19:30: ae:67:2e:da -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUBWp2Te77PV+wUzJbrhUO94ke/TgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkQ2ODVDMjRGRjhGNDMyNTQzQzNFNTgzNDg0MDQ0QTQ0 RTUzMDY3QjAeFw0yNTEyMTgwNzI2MjBaFw0yNTEyMjExNzI4MjBaMDMxMTAvBgNV BAMTKDUwMTkzNTJCOTJDMDBDRDYzRDBDRjUxNTY1QUJCODc2NTBBM0I5NzEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCj8Bc0ZlWTyO3RIuCajYJKm62q mSb+ulDQfQtNFpwiP7Hhkx0JZ7cL+R1ZovvjiYuvQRaSvcdOwZ+poFGJpw0ZARRc MUYAtpQo53JEY00NeXBNxHdl0XuNmeEpIo2cZVqXJxx3wJE3s7ctphxH6bijph+t yxPhBe/IzKvk4UHzbwFXAVnhPDeE1boHwTUtb2L8D7hWdBK0NW/SV08NeuFOOcmu QTQzdG0JTZTYaL/rF3kZwJ5SCWic1ksPox6xZn1NvEuvEyCTxOMnuw7CmZpFJTlr 4fLSB/aTTY3j+bxmbfyXWHbYd1FkJz5ikfhY6CwpzpbUkd1i5S/cv5BUXOxnAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUUBk1K5LADNY9DPUVZau4dlCjuXEwHwYDVR0j BBgwFoAUvWhcJP+PQyVDw+WDSEBEpE5TBnswDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i NGJmODY0MS1iZjcwLTRlM2YtOTg3MS1lZTI2YTMzZGIzYTIvMC9CRDY4NUMyNEZG OEY0MzI1NDNDM0U1ODM0ODQwNDRBNDRFNTMwNjdCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQkQ2ODVDMjRGRjhGNDMyNTQzQzNFNTgzNDg0MDQ0QTQ0RTUz MDY3Qi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYjRiZjg2NDEtYmY3MC00ZTNmLTk4 NzEtZWUyNmEzM2RiM2EyLzAvQkQ2ODVDMjRGRjhGNDMyNTQzQzNFNTgzNDg0MDQ0 QTQ0RTUzMDY3Qi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIbyag9xQFRJtCLvXMCrpRaTf/nP/2ZQZ6H/ YQ3+sB5wMXXLbJC3o5GHuqn/aUINyh2Q2gr2Fp+ZAPJG+O4CCxqaXNmE42gTo7G/ Gn8XD17U3SBx6ia1O4owAYKUchwotcrFCZ86l+CmbSZKw2xSIN2Rq/NHeCb2rPSa vlzmKmCYynqILvpbT4YUWyr/ifOa0FxTWz3yYCizl+VdjMzpHY/OgZQ+CDWkE0Rx 2TtRuwQnAncCqXdHzxU8FZpu2olcYMizeKsJVrNpyLNoUeJo/SIZEji5oFdR/3AE kSvCy2dV9pFaqLGvGmLbYM/4vyc8CCFXdCtQVgH+W58ZMK5nLto= -----END CERTIFICATE-----Generated at Fri Dec 19 11:16:59 2025 by rpki-client