This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/bf25b968-0927-4594-887e-67f53f967b12/0/131807BDDAAF97ED72214DFBC5C539ACB04FDCBE.mft File: 131807BDDAAF97ED72214DFBC5C539ACB04FDCBE.mft (raw, json) Hash identifier: z6yiORL/yZ7bHGFe3Ns2u6LC5W6EYnwqdxk525fbQ3I= Subject key identifier: 23:25:8B:F6:7B:AB:8C:05:86:5F:68:3F:E1:2F:2B:FA:61:71:BC:A4 Authority key identifier: 13:18:07:BD:DA:AF:97:ED:72:21:4D:FB:C5:C5:39:AC:B0:4F:DC:BE Certificate issuer: /CN=131807BDDAAF97ED72214DFBC5C539ACB04FDCBE Certificate serial: 2B18DFF3CD55802474CCF00AB61786F9DD1EB44E Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/131807BDDAAF97ED72214DFBC5C539ACB04FDCBE.cer Subject info access: rsync://repo-rpki.idnic.net/repo/bf25b968-0927-4594-887e-67f53f967b12/0/131807BDDAAF97ED72214DFBC5C539ACB04FDCBE.mft Manifest number: 033A Signing time: Tue 23 Dec 2025 07:21:00 +0000 Manifest this update: Tue 23 Dec 2025 07:16:00 +0000 Manifest next update: Fri 26 Dec 2025 15:31:00 +0000 Files and hashes: 1: 3130332e3137342e32342e302f32332d3234203d3e20313331313131.roa (hash: IcV/PuSEjSNsy6cbDUeXZVgPYs8xhMimlvvll5vTiXU=) 2: 131807BDDAAF97ED72214DFBC5C539ACB04FDCBE.crl (hash: PTUIb/TK0u2tAoBP11xVox8QCHPtivV9t1li/PGo/E4=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/bf25b968-0927-4594-887e-67f53f967b12/0/131807BDDAAF97ED72214DFBC5C539ACB04FDCBE.crl rsync://repo-rpki.idnic.net/repo/bf25b968-0927-4594-887e-67f53f967b12/0/131807BDDAAF97ED72214DFBC5C539ACB04FDCBE.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/131807BDDAAF97ED72214DFBC5C539ACB04FDCBE.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 26 Dec 2025 15:31:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2b:18:df:f3:cd:55:80:24:74:cc:f0:0a:b6:17:86:f9:dd:1e:b4:4e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=131807BDDAAF97ED72214DFBC5C539ACB04FDCBE Validity Not Before: Dec 23 07:16:00 2025 GMT Not After : Dec 26 15:31:00 2025 GMT Subject: CN=23258BF67BAB8C05865F683FE12F2BFA6171BCA4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:18:31:1a:e8:a4:af:4e:bb:80:d3:82:8a:b0: 60:f8:8f:e3:eb:ae:8d:74:33:fb:a2:44:e8:7a:cf: d1:f8:45:66:7c:ae:5a:20:6a:52:95:8d:10:1a:b4: 4a:bc:fc:20:dc:53:1f:dd:fc:61:9c:de:0e:e2:2f: 6b:74:5f:0c:d2:47:b0:c9:0b:ca:9b:16:ef:9f:57: 80:00:84:94:33:95:90:6f:49:84:29:2d:05:c6:8e: b9:0f:aa:d3:c2:33:4f:62:77:72:70:10:aa:e2:22: 4f:c9:c0:0c:b3:72:16:a4:91:2e:e3:48:86:b4:56: 30:54:39:70:dc:bc:72:b3:ad:d4:d1:a2:50:f6:6a: 42:5c:94:a0:19:4c:fd:b0:d5:30:29:c8:ae:0f:84: d7:54:f7:51:b4:ba:24:26:50:cd:9f:28:af:e9:3d: 9a:f0:ad:bc:68:e7:be:51:32:48:28:67:a0:f3:30: 99:a8:2a:72:87:78:2b:57:8d:03:4e:cf:b0:52:ed: 4d:19:fc:ee:f2:7c:aa:e3:09:8c:04:fc:6c:24:6c: 5b:8c:82:f4:20:ee:c2:aa:dd:8f:49:be:5d:06:37: c6:10:f7:4b:af:5d:d7:92:da:2a:e1:06:7f:cd:58: bf:50:25:f9:70:fb:4a:9f:cc:fb:7e:bc:21:15:fe: 9c:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:25:8B:F6:7B:AB:8C:05:86:5F:68:3F:E1:2F:2B:FA:61:71:BC:A4 X509v3 Authority Key Identifier: keyid:13:18:07:BD:DA:AF:97:ED:72:21:4D:FB:C5:C5:39:AC:B0:4F:DC:BE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/bf25b968-0927-4594-887e-67f53f967b12/0/131807BDDAAF97ED72214DFBC5C539ACB04FDCBE.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/131807BDDAAF97ED72214DFBC5C539ACB04FDCBE.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/bf25b968-0927-4594-887e-67f53f967b12/0/131807BDDAAF97ED72214DFBC5C539ACB04FDCBE.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8c:ec:2a:01:35:c1:be:55:bb:2d:28:0e:a2:e7:61:44:18:a5: b8:1d:db:de:07:2a:26:0f:8f:51:9e:6d:f6:ca:ed:b5:d4:57: 5c:2f:13:63:2b:2a:3d:59:99:10:24:e9:e1:2e:d0:b3:8b:41: c3:74:74:82:81:02:6a:99:fb:25:74:5e:5a:9a:8c:cd:82:3a: e2:d6:58:cf:2c:4a:57:85:00:56:e6:28:38:09:50:a5:f9:c6: 26:01:f4:c3:db:41:3f:c8:b2:af:dc:fc:f5:39:6c:59:00:43: 54:b4:78:e6:08:c4:54:ee:e0:5f:1c:3c:c4:d8:10:5c:a6:14: 16:13:a7:08:2c:8b:c6:f0:91:44:47:5a:76:a0:f0:13:b8:8a: a8:62:9f:b3:c1:1e:50:5c:30:fe:75:cc:83:99:15:a0:87:d6: 69:59:3f:5d:af:0b:fc:8a:ff:44:87:a6:45:0f:94:5f:1b:ba: e9:da:d8:2b:f4:e1:5a:c0:ee:d0:2e:21:19:25:0e:15:2c:85: d0:94:2a:0b:f8:6e:38:18:2e:dc:3e:24:37:8f:83:a2:95:11: 48:e1:a4:27:d0:60:58:de:51:c7:5f:eb:4b:e5:1a:f3:43:10: 66:31:ce:db:e5:a6:ce:bf:9d:00:4d:d9:8f:58:72:df:9d:da: 10:f2:1d:85 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUKxjf881VgCR0zPAKtheG+d0etE4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTMxODA3QkREQUFGOTdFRDcyMjE0REZCQzVDNTM5QUNC MDRGRENCRTAeFw0yNTEyMjMwNzE2MDBaFw0yNTEyMjYxNTMxMDBaMDMxMTAvBgNV BAMTKDIzMjU4QkY2N0JBQjhDMDU4NjVGNjgzRkUxMkYyQkZBNjE3MUJDQTQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDSGDEa6KSvTruA04KKsGD4j+Pr ro10M/uiROh6z9H4RWZ8rlogalKVjRAatEq8/CDcUx/d/GGc3g7iL2t0XwzSR7DJ C8qbFu+fV4AAhJQzlZBvSYQpLQXGjrkPqtPCM09id3JwEKriIk/JwAyzchakkS7j SIa0VjBUOXDcvHKzrdTRolD2akJclKAZTP2w1TApyK4PhNdU91G0uiQmUM2fKK/p PZrwrbxo575RMkgoZ6DzMJmoKnKHeCtXjQNOz7BS7U0Z/O7yfKrjCYwE/GwkbFuM gvQg7sKq3Y9Jvl0GN8YQ90uvXdeS2irhBn/NWL9QJflw+0qfzPt+vCEV/pwRAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUIyWL9nurjAWGX2g/4S8r+mFxvKQwHwYDVR0j BBgwFoAUExgHvdqvl+1yIU37xcU5rLBP3L4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i ZjI1Yjk2OC0wOTI3LTQ1OTQtODg3ZS02N2Y1M2Y5NjdiMTIvMC8xMzE4MDdCRERB QUY5N0VENzIyMTRERkJDNUM1MzlBQ0IwNEZEQ0JFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMTMxODA3QkREQUFGOTdFRDcyMjE0REZCQzVDNTM5QUNCMDRG RENCRS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYmYyNWI5NjgtMDkyNy00NTk0LTg4 N2UtNjdmNTNmOTY3YjEyLzAvMTMxODA3QkREQUFGOTdFRDcyMjE0REZCQzVDNTM5 QUNCMDRGRENCRS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIzsKgE1wb5Vuy0oDqLnYUQYpbgd294HKiYP j1GebfbK7bXUV1wvE2MrKj1ZmRAk6eEu0LOLQcN0dIKBAmqZ+yV0XlqajM2COuLW WM8sSleFAFbmKDgJUKX5xiYB9MPbQT/Isq/c/PU5bFkAQ1S0eOYIxFTu4F8cPMTY EFymFBYTpwgsi8bwkURHWnag8BO4iqhin7PBHlBcMP51zIOZFaCH1mlZP12vC/yK /0SHpkUPlF8buuna2Cv04VrA7tAuIRklDhUshdCUKgv4bjgYLtw+JDePg6KVEUjh pCfQYFjeUcdf60vlGvNDEGYxztvlps6/nQBN2Y9Yct+d2hDyHYU= -----END CERTIFICATE-----Generated at Wed Dec 24 22:07:51 2025 by rpki-client