This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/c29cceb6-a4e7-4e82-88be-bb9697bd1d01/0/BF97329188204CAD55AEC0D48286FAC81B806C71.mft File: BF97329188204CAD55AEC0D48286FAC81B806C71.mft (raw, json) Hash identifier: WuN3PFpn+VmNmhjKO/P+KltFMSDJ7CVmMn6XGMlfcdk= Subject key identifier: 84:4A:64:3A:6B:CF:D8:06:78:B6:75:6C:CC:95:68:75:5C:B7:41:97 Authority key identifier: BF:97:32:91:88:20:4C:AD:55:AE:C0:D4:82:86:FA:C8:1B:80:6C:71 Certificate issuer: /CN=BF97329188204CAD55AEC0D48286FAC81B806C71 Certificate serial: 15BB4B9A662D59DAB45C33D25F08BA54C36D0E80 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BF97329188204CAD55AEC0D48286FAC81B806C71.cer Subject info access: rsync://repo-rpki.idnic.net/repo/c29cceb6-a4e7-4e82-88be-bb9697bd1d01/0/BF97329188204CAD55AEC0D48286FAC81B806C71.mft Manifest number: 87 Signing time: Mon 22 Dec 2025 22:42:32 +0000 Manifest this update: Mon 22 Dec 2025 22:37:32 +0000 Manifest next update: Fri 26 Dec 2025 02:04:32 +0000 Files and hashes: 1: BF97329188204CAD55AEC0D48286FAC81B806C71.crl (hash: +ai8rOxHsiD4c9AlJE0vrua/VDNQnqCaa82qPrvODtw=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/c29cceb6-a4e7-4e82-88be-bb9697bd1d01/0/BF97329188204CAD55AEC0D48286FAC81B806C71.crl rsync://repo-rpki.idnic.net/repo/c29cceb6-a4e7-4e82-88be-bb9697bd1d01/0/BF97329188204CAD55AEC0D48286FAC81B806C71.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BF97329188204CAD55AEC0D48286FAC81B806C71.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 26 Dec 2025 02:04:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 15:bb:4b:9a:66:2d:59:da:b4:5c:33:d2:5f:08:ba:54:c3:6d:0e:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BF97329188204CAD55AEC0D48286FAC81B806C71 Validity Not Before: Dec 22 22:37:32 2025 GMT Not After : Dec 26 02:04:32 2025 GMT Subject: CN=844A643A6BCFD80678B6756CCC9568755CB74197 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:a1:2e:b9:93:8a:8b:fc:8e:6c:8a:83:ab:b0: 74:de:41:91:98:7b:43:4b:92:86:8f:d8:8c:4c:12: 07:de:30:01:15:bc:bd:e7:d8:23:dd:39:55:5b:4f: 21:b9:f5:3f:f9:f2:a7:8f:33:f0:b4:c2:d7:d6:66: 9a:6b:2f:1b:f0:a3:b1:c4:1d:b6:7b:19:3c:25:40: 17:df:fa:1c:c2:52:7c:b8:f1:a7:e2:46:a5:e5:fb: 59:3f:f9:52:04:03:cb:e6:c0:ec:b2:ea:ea:b0:c4: cd:a1:d3:c3:84:dd:b1:69:20:4f:66:7b:02:5a:ea: 13:0e:48:29:78:29:a0:41:89:6b:45:8e:7c:f0:a1: e3:6b:eb:75:1b:79:65:df:92:91:51:a8:ca:83:d7: 79:de:10:76:af:fb:7c:26:ea:60:67:37:f7:60:f1: f9:0c:ba:fc:8e:97:42:f4:0e:9f:47:7e:1b:02:8b: 20:9c:e8:04:02:9c:a9:75:bc:83:12:08:03:b1:45: ed:79:0d:50:a3:d4:ca:6e:c8:78:d8:6c:74:84:d5: d2:11:bb:91:ac:b5:ab:ab:8e:c1:56:aa:d7:21:4b: 25:2d:1b:d0:07:9d:19:12:4f:e2:7c:b6:03:12:64: 7a:fa:5d:30:bf:8b:f8:31:39:e2:19:83:3e:41:ca: ea:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:4A:64:3A:6B:CF:D8:06:78:B6:75:6C:CC:95:68:75:5C:B7:41:97 X509v3 Authority Key Identifier: keyid:BF:97:32:91:88:20:4C:AD:55:AE:C0:D4:82:86:FA:C8:1B:80:6C:71 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/c29cceb6-a4e7-4e82-88be-bb9697bd1d01/0/BF97329188204CAD55AEC0D48286FAC81B806C71.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BF97329188204CAD55AEC0D48286FAC81B806C71.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c29cceb6-a4e7-4e82-88be-bb9697bd1d01/0/BF97329188204CAD55AEC0D48286FAC81B806C71.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 57:92:42:d5:01:e9:e7:22:f6:d2:b9:49:96:30:9c:a3:e1:b9: 82:ef:c1:ce:5a:e8:14:28:fc:90:4c:17:9a:8b:a4:10:50:8e: c0:7a:02:0c:78:4b:cf:9c:c8:7f:4c:bb:44:64:78:f8:c9:2d: 71:ba:75:40:5f:80:03:76:ab:4f:c4:2a:70:ed:05:e3:11:6e: c4:f9:11:0e:57:38:56:61:7a:4b:db:8c:63:f3:96:f8:bc:43: 25:32:07:3f:67:97:28:98:fc:20:09:20:db:63:8b:80:10:0c: b6:ce:09:b7:fa:3e:88:a7:c7:d3:94:29:be:f8:ba:d3:1b:69: aa:37:2b:d2:dc:f4:9c:ea:41:ae:1e:7e:4f:60:a3:1d:a8:95: c2:9a:68:84:c9:38:5f:1b:76:75:7c:c1:54:d1:ca:25:98:1c: 9e:9d:39:74:a7:0e:21:c7:4d:5b:78:95:84:84:a7:c8:f0:47: 57:7d:a2:23:80:06:6d:30:13:ff:ad:3a:1d:02:81:70:0b:c6: 29:14:08:9b:d6:99:62:07:93:32:22:2e:b4:97:ff:4a:30:0f: 0c:fb:98:da:4f:00:42:c1:da:73:88:e2:48:57:05:8c:10:63: 7c:16:4f:8e:11:ab:4f:4b:77:e0:94:85:b2:ce:b5:dd:84:d9: bf:be:66:96 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUFbtLmmYtWdq0XDPSXwi6VMNtDoAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkY5NzMyOTE4ODIwNENBRDU1QUVDMEQ0ODI4NkZBQzgx QjgwNkM3MTAeFw0yNTEyMjIyMjM3MzJaFw0yNTEyMjYwMjA0MzJaMDMxMTAvBgNV BAMTKDg0NEE2NDNBNkJDRkQ4MDY3OEI2NzU2Q0NDOTU2ODc1NUNCNzQxOTcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDfoS65k4qL/I5sioOrsHTeQZGY e0NLkoaP2IxMEgfeMAEVvL3n2CPdOVVbTyG59T/58qePM/C0wtfWZpprLxvwo7HE HbZ7GTwlQBff+hzCUny48afiRqXl+1k/+VIEA8vmwOyy6uqwxM2h08OE3bFpIE9m ewJa6hMOSCl4KaBBiWtFjnzwoeNr63UbeWXfkpFRqMqD13neEHav+3wm6mBnN/dg 8fkMuvyOl0L0Dp9HfhsCiyCc6AQCnKl1vIMSCAOxRe15DVCj1MpuyHjYbHSE1dIR u5GstaurjsFWqtchSyUtG9AHnRkST+J8tgMSZHr6XTC/i/gxOeIZgz5ByuqvAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUhEpkOmvP2AZ4tnVszJVodVy3QZcwHwYDVR0j BBgwFoAUv5cykYggTK1VrsDUgob6yBuAbHEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j MjljY2ViNi1hNGU3LTRlODItODhiZS1iYjk2OTdiZDFkMDEvMC9CRjk3MzI5MTg4 MjA0Q0FENTVBRUMwRDQ4Mjg2RkFDODFCODA2QzcxLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQkY5NzMyOTE4ODIwNENBRDU1QUVDMEQ0ODI4NkZBQzgxQjgw NkM3MS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYzI5Y2NlYjYtYTRlNy00ZTgyLTg4 YmUtYmI5Njk3YmQxZDAxLzAvQkY5NzMyOTE4ODIwNENBRDU1QUVDMEQ0ODI4NkZB QzgxQjgwNkM3MS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFeSQtUB6eci9tK5SZYwnKPhuYLvwc5a6BQo /JBMF5qLpBBQjsB6Agx4S8+cyH9Mu0RkePjJLXG6dUBfgAN2q0/EKnDtBeMRbsT5 EQ5XOFZhekvbjGPzlvi8QyUyBz9nlyiY/CAJINtji4AQDLbOCbf6Poinx9OUKb74 utMbaao3K9Lc9JzqQa4efk9gox2olcKaaITJOF8bdnV8wVTRyiWYHJ6dOXSnDiHH TVt4lYSEp8jwR1d9oiOABm0wE/+tOh0CgXALxikUCJvWmWIHkzIiLrSX/0owDwz7 mNpPAELB2nOI4khXBYwQY3wWT44Rq09Ld+CUhbLOtd2E2b++ZpY= -----END CERTIFICATE-----Generated at Wed Dec 24 22:05:14 2025 by rpki-client