This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/c647a6a2-1ad0-46c7-9cad-58bbd71fb5a4/0/BC18FDA249B3BD56020648E83F0B24DDBF1E66E5.mft File: BC18FDA249B3BD56020648E83F0B24DDBF1E66E5.mft (raw, json) Hash identifier: PTf8Gz0oA++ensYgmo+w0DSxp70SKyQl5uZZpoRwKIw= Subject key identifier: 19:5C:A3:B6:4E:5B:AD:F9:F5:AD:E7:3B:15:04:C0:1D:90:B8:82:36 Authority key identifier: BC:18:FD:A2:49:B3:BD:56:02:06:48:E8:3F:0B:24:DD:BF:1E:66:E5 Certificate issuer: /CN=BC18FDA249B3BD56020648E83F0B24DDBF1E66E5 Certificate serial: 438AA442882164C7FCAC9D5ADD56EB8C7C3EF94D Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BC18FDA249B3BD56020648E83F0B24DDBF1E66E5.cer Subject info access: rsync://repo-rpki.idnic.net/repo/c647a6a2-1ad0-46c7-9cad-58bbd71fb5a4/0/BC18FDA249B3BD56020648E83F0B24DDBF1E66E5.mft Manifest number: 049B Signing time: Wed 17 Dec 2025 08:02:10 +0000 Manifest this update: Wed 17 Dec 2025 07:57:10 +0000 Manifest next update: Sat 20 Dec 2025 11:27:10 +0000 Files and hashes: 1: 3130332e3136302e3136352e302f32342d3234203d3e203538343935.roa (hash: tvbrgpnRc/Q6RgyaqccXwIS95wHSwvk+hPXU5wbUrgY=) 2: 3130332e3136302e3136342e302f32342d3234203d3e203538343935.roa (hash: 16HQZb88y83aHIsJXjQBx7+/lMzUX78B/OozTUnK7s4=) 3: BC18FDA249B3BD56020648E83F0B24DDBF1E66E5.crl (hash: +s8mQnjpKze8K8+xNSrFlFchsyMVli0N4W0mTM+XuBg=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/c647a6a2-1ad0-46c7-9cad-58bbd71fb5a4/0/BC18FDA249B3BD56020648E83F0B24DDBF1E66E5.crl rsync://repo-rpki.idnic.net/repo/c647a6a2-1ad0-46c7-9cad-58bbd71fb5a4/0/BC18FDA249B3BD56020648E83F0B24DDBF1E66E5.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BC18FDA249B3BD56020648E83F0B24DDBF1E66E5.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 20 Dec 2025 11:27:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 43:8a:a4:42:88:21:64:c7:fc:ac:9d:5a:dd:56:eb:8c:7c:3e:f9:4d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BC18FDA249B3BD56020648E83F0B24DDBF1E66E5 Validity Not Before: Dec 17 07:57:10 2025 GMT Not After : Dec 20 11:27:10 2025 GMT Subject: CN=195CA3B64E5BADF9F5ADE73B1504C01D90B88236 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f4:5e:08:55:ef:6a:42:8e:25:95:10:3e:7e:9d: 66:7f:7d:dd:11:34:6c:f7:67:6f:22:ed:15:f4:be: 54:85:08:be:e7:a4:bb:df:b5:ac:c0:59:2e:75:6c: 2a:e3:50:84:4c:8f:a8:ee:27:48:5a:01:00:f4:97: e0:92:49:70:dd:39:e7:b9:f8:88:33:4a:44:32:75: 73:cb:fa:34:c3:6b:fb:d5:a5:09:bf:2b:44:ec:bf: b0:d3:76:5d:73:53:01:f3:02:48:4f:40:a6:63:8a: 50:c9:ed:c1:fc:51:cb:7e:d7:3b:d1:ed:3c:4c:36: 3c:58:02:b2:ce:a6:b7:44:cb:3f:d4:b9:92:fb:15: 9f:1f:f6:cc:bd:75:3c:7d:8f:59:66:b7:af:c8:1d: b3:3f:38:b0:41:fd:fe:1d:44:09:8e:76:fd:f9:01: 70:57:c7:c7:fc:db:fb:ab:84:46:02:1f:b1:da:f2: 2c:f3:c1:ea:89:bd:3a:21:83:39:04:18:69:c1:49: 92:e4:95:b6:2d:d8:1b:54:68:c1:e4:54:5a:13:85: 60:1e:74:04:53:e4:00:f3:2f:d3:bb:ee:3a:55:34: a5:11:0a:79:15:63:17:50:1f:f5:0b:99:e6:3c:f3: a4:16:cb:72:b7:44:8f:71:4e:49:a4:69:9d:17:d4: 0c:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 19:5C:A3:B6:4E:5B:AD:F9:F5:AD:E7:3B:15:04:C0:1D:90:B8:82:36 X509v3 Authority Key Identifier: keyid:BC:18:FD:A2:49:B3:BD:56:02:06:48:E8:3F:0B:24:DD:BF:1E:66:E5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/c647a6a2-1ad0-46c7-9cad-58bbd71fb5a4/0/BC18FDA249B3BD56020648E83F0B24DDBF1E66E5.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BC18FDA249B3BD56020648E83F0B24DDBF1E66E5.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c647a6a2-1ad0-46c7-9cad-58bbd71fb5a4/0/BC18FDA249B3BD56020648E83F0B24DDBF1E66E5.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7b:8a:67:c7:67:7b:2d:b0:d0:31:ce:9f:35:55:9f:22:1a:98: 11:aa:e9:92:48:7f:94:b7:68:81:eb:6a:e0:ee:42:ad:ae:33: f4:23:e7:84:7d:e8:47:62:9c:17:a2:a6:35:9b:6a:dc:6a:d0: a4:55:66:a8:21:79:53:59:fb:1a:0f:5d:9a:b8:c1:cb:be:8e: fa:7d:10:7c:ea:85:c9:cc:96:08:49:63:83:4c:40:24:7a:5a: ce:15:b6:f2:c1:18:86:5f:32:9f:b4:aa:a1:34:18:63:40:be: a4:8a:61:d4:8d:44:74:0a:4f:89:81:0e:ae:9f:0e:e6:e5:49: f9:2f:74:40:9a:52:e4:d6:72:14:4f:6b:79:75:7f:30:9c:ba: dd:d4:c7:cc:f7:71:cf:2f:09:d3:4c:36:73:94:41:dd:3f:e2: c2:d8:9d:1b:bf:35:eb:41:09:95:31:3b:81:25:00:e0:28:61: 7e:45:d4:dd:74:3e:3e:ce:72:52:18:39:a4:82:30:91:62:11: a9:a2:73:ca:f2:6b:9e:01:18:31:5f:40:6a:26:52:9c:da:fc: a0:cc:5b:9f:dc:77:3f:0e:fa:1f:83:29:0d:11:25:83:f8:39: 60:2b:6b:2a:c1:f5:5e:58:33:56:47:e4:e5:7c:77:f7:bb:e1: 90:58:25:8e -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUQ4qkQoghZMf8rJ1a3VbrjHw++U0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkMxOEZEQTI0OUIzQkQ1NjAyMDY0OEU4M0YwQjI0RERC RjFFNjZFNTAeFw0yNTEyMTcwNzU3MTBaFw0yNTEyMjAxMTI3MTBaMDMxMTAvBgNV BAMTKDE5NUNBM0I2NEU1QkFERjlGNUFERTczQjE1MDRDMDFEOTBCODgyMzYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD0XghV72pCjiWVED5+nWZ/fd0R NGz3Z28i7RX0vlSFCL7npLvftazAWS51bCrjUIRMj6juJ0haAQD0l+CSSXDdOee5 +IgzSkQydXPL+jTDa/vVpQm/K0Tsv7DTdl1zUwHzAkhPQKZjilDJ7cH8Uct+1zvR 7TxMNjxYArLOprdEyz/UuZL7FZ8f9sy9dTx9j1lmt6/IHbM/OLBB/f4dRAmOdv35 AXBXx8f82/urhEYCH7Ha8izzweqJvTohgzkEGGnBSZLklbYt2BtUaMHkVFoThWAe dART5ADzL9O77jpVNKURCnkVYxdQH/ULmeY886QWy3K3RI9xTkmkaZ0X1AyrAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUGVyjtk5brfn1rec7FQTAHZC4gjYwHwYDVR0j BBgwFoAUvBj9okmzvVYCBkjoPwsk3b8eZuUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j NjQ3YTZhMi0xYWQwLTQ2YzctOWNhZC01OGJiZDcxZmI1YTQvMC9CQzE4RkRBMjQ5 QjNCRDU2MDIwNjQ4RTgzRjBCMjREREJGMUU2NkU1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQkMxOEZEQTI0OUIzQkQ1NjAyMDY0OEU4M0YwQjI0RERCRjFF NjZFNS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYzY0N2E2YTItMWFkMC00NmM3LTlj YWQtNThiYmQ3MWZiNWE0LzAvQkMxOEZEQTI0OUIzQkQ1NjAyMDY0OEU4M0YwQjI0 RERCRjFFNjZFNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHuKZ8dney2w0DHOnzVVnyIamBGq6ZJIf5S3 aIHrauDuQq2uM/Qj54R96EdinBeipjWbatxq0KRVZqgheVNZ+xoPXZq4wcu+jvp9 EHzqhcnMlghJY4NMQCR6Ws4VtvLBGIZfMp+0qqE0GGNAvqSKYdSNRHQKT4mBDq6f DublSfkvdECaUuTWchRPa3l1fzCcut3Ux8z3cc8vCdNMNnOUQd0/4sLYnRu/NetB CZUxO4ElAOAoYX5F1N10Pj7OclIYOaSCMJFiEamic8rya54BGDFfQGomUpza/KDM W5/cdz8O+h+DKQ0RJYP4OWArayrB9V5YM1ZH5OV8d/e74ZBYJY4= -----END CERTIFICATE-----Generated at Fri Dec 19 14:00:09 2025 by rpki-client