This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/c647a6a2-1ad0-46c7-9cad-58bbd71fb5a4/0/BC18FDA249B3BD56020648E83F0B24DDBF1E66E5.mft File: BC18FDA249B3BD56020648E83F0B24DDBF1E66E5.mft (raw, json) Hash identifier: gIE243M5+IbiO3UT+ltqCkwcPyIhLQSDoJplUlMxvHM= Subject key identifier: 36:DD:9E:7D:25:29:CC:1A:FF:B9:A9:19:94:B7:19:28:53:8C:09:52 Authority key identifier: BC:18:FD:A2:49:B3:BD:56:02:06:48:E8:3F:0B:24:DD:BF:1E:66:E5 Certificate issuer: /CN=BC18FDA249B3BD56020648E83F0B24DDBF1E66E5 Certificate serial: 5279B5CEBF10D7839E9DCF5AA6659BBF751EA59A Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BC18FDA249B3BD56020648E83F0B24DDBF1E66E5.cer Subject info access: rsync://repo-rpki.idnic.net/repo/c647a6a2-1ad0-46c7-9cad-58bbd71fb5a4/0/BC18FDA249B3BD56020648E83F0B24DDBF1E66E5.mft Manifest number: 049D Signing time: Sun 21 Dec 2025 16:02:47 +0000 Manifest this update: Sun 21 Dec 2025 15:57:47 +0000 Manifest next update: Thu 25 Dec 2025 00:18:47 +0000 Files and hashes: 1: BC18FDA249B3BD56020648E83F0B24DDBF1E66E5.crl (hash: IgpKLQ7Pce+8IzXXY/EsLJ25x6Tkm6Y+vSRS0EIwaXw=) 2: 3130332e3136302e3136342e302f32342d3234203d3e203538343935.roa (hash: 16HQZb88y83aHIsJXjQBx7+/lMzUX78B/OozTUnK7s4=) 3: 3130332e3136302e3136352e302f32342d3234203d3e203538343935.roa (hash: tvbrgpnRc/Q6RgyaqccXwIS95wHSwvk+hPXU5wbUrgY=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/c647a6a2-1ad0-46c7-9cad-58bbd71fb5a4/0/BC18FDA249B3BD56020648E83F0B24DDBF1E66E5.crl rsync://repo-rpki.idnic.net/repo/c647a6a2-1ad0-46c7-9cad-58bbd71fb5a4/0/BC18FDA249B3BD56020648E83F0B24DDBF1E66E5.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BC18FDA249B3BD56020648E83F0B24DDBF1E66E5.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 24 Dec 2025 07:39:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 52:79:b5:ce:bf:10:d7:83:9e:9d:cf:5a:a6:65:9b:bf:75:1e:a5:9a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BC18FDA249B3BD56020648E83F0B24DDBF1E66E5 Validity Not Before: Dec 21 15:57:47 2025 GMT Not After : Dec 25 00:18:47 2025 GMT Subject: CN=36DD9E7D2529CC1AFFB9A91994B71928538C0952 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:9a:a5:3d:43:81:4d:dc:02:bc:69:f0:36:cd: c3:46:26:e8:66:91:16:a3:ba:02:70:f6:9d:94:cc: c2:5a:bf:f7:c4:9f:a1:e7:a6:b1:7f:c6:43:73:c1: d3:7b:86:0a:e3:49:61:59:b6:4b:54:7e:ad:1c:55: 98:ff:99:51:9c:ac:4f:1b:32:cc:ad:09:b9:76:97: e2:bb:7f:c2:ce:f2:df:93:51:54:5c:ed:e9:c0:9a: e9:06:83:a6:19:20:ec:ee:90:0d:36:da:52:f4:4a: ca:61:cb:80:73:63:35:3b:b8:e4:c5:aa:fb:df:ef: b7:af:0f:15:b8:b2:14:f9:89:48:5c:a7:e4:bc:61: 8b:fa:3f:44:bb:49:2c:db:a5:6d:84:91:44:d7:f8: 0f:d1:9f:62:7d:5c:8e:84:31:6f:d0:47:c5:4c:e5: d4:b0:a1:0b:a3:1d:06:1f:43:98:8e:f6:70:9e:45: 24:e0:f5:16:f0:14:f1:4a:82:37:44:04:83:59:cb: 9c:5b:98:cc:b9:87:a6:0b:e9:86:e3:23:5c:0c:50: c6:30:bb:b2:fc:70:e7:79:70:56:e5:7a:39:de:47: 72:b9:05:7e:42:76:99:79:9b:67:70:e9:27:db:27: a7:79:5a:50:f6:50:1a:be:5d:02:a1:44:26:53:8c: f0:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 36:DD:9E:7D:25:29:CC:1A:FF:B9:A9:19:94:B7:19:28:53:8C:09:52 X509v3 Authority Key Identifier: keyid:BC:18:FD:A2:49:B3:BD:56:02:06:48:E8:3F:0B:24:DD:BF:1E:66:E5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/c647a6a2-1ad0-46c7-9cad-58bbd71fb5a4/0/BC18FDA249B3BD56020648E83F0B24DDBF1E66E5.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BC18FDA249B3BD56020648E83F0B24DDBF1E66E5.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c647a6a2-1ad0-46c7-9cad-58bbd71fb5a4/0/BC18FDA249B3BD56020648E83F0B24DDBF1E66E5.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2e:2b:0c:9d:fe:79:ee:22:76:e6:59:5a:85:a0:a1:87:4c:4f: 7a:72:27:e0:a6:46:c1:21:5b:f1:c7:73:3a:18:02:3c:1c:be: 39:42:2b:ec:e2:1d:92:73:9c:55:80:4a:f4:ea:4a:73:47:c1: 22:e7:e7:50:6d:c0:1c:50:ce:f9:3b:a0:8a:f7:58:d8:a4:40: c9:5d:f4:f4:9e:aa:2c:d2:ec:cd:43:80:24:8b:1c:e7:16:95: c4:9a:bf:39:d3:c8:6c:20:c1:47:14:71:0a:5d:88:e5:c4:37: 18:5e:ec:f7:e1:10:e5:63:6d:33:54:c2:3f:27:23:22:eb:3c: 74:5a:1b:06:6b:a8:e3:89:cf:32:cb:cc:75:5b:61:2f:3a:52: 6b:4b:3d:a6:55:21:f1:97:05:cb:e3:5e:ff:e2:bd:94:a6:80: d3:24:38:83:1f:31:d4:dc:7c:bf:20:ce:1c:68:72:68:94:2f: 75:0a:d4:9d:82:61:8a:cf:2e:f2:10:27:0d:ec:94:14:57:6f: 63:43:d1:99:28:e7:3c:b5:23:7f:97:a0:60:4a:ff:99:45:60: 55:6b:0b:4e:5c:45:36:ea:e4:af:d5:ab:ad:9d:c9:8f:8e:47: 24:0f:52:4a:a0:2e:37:95:48:9d:33:a2:4e:e3:a7:08:be:a5: 34:31:99:2d -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUUnm1zr8Q14Oenc9apmWbv3UepZowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkMxOEZEQTI0OUIzQkQ1NjAyMDY0OEU4M0YwQjI0RERC RjFFNjZFNTAeFw0yNTEyMjExNTU3NDdaFw0yNTEyMjUwMDE4NDdaMDMxMTAvBgNV BAMTKDM2REQ5RTdEMjUyOUNDMUFGRkI5QTkxOTk0QjcxOTI4NTM4QzA5NTIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQClmqU9Q4FN3AK8afA2zcNGJuhm kRajugJw9p2UzMJav/fEn6HnprF/xkNzwdN7hgrjSWFZtktUfq0cVZj/mVGcrE8b MsytCbl2l+K7f8LO8t+TUVRc7enAmukGg6YZIOzukA022lL0Ssphy4BzYzU7uOTF qvvf77evDxW4shT5iUhcp+S8YYv6P0S7SSzbpW2EkUTX+A/Rn2J9XI6EMW/QR8VM 5dSwoQujHQYfQ5iO9nCeRSTg9RbwFPFKgjdEBINZy5xbmMy5h6YL6YbjI1wMUMYw u7L8cOd5cFblejneR3K5BX5Cdpl5m2dw6SfbJ6d5WlD2UBq+XQKhRCZTjPDbAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUNt2efSUpzBr/uakZlLcZKFOMCVIwHwYDVR0j BBgwFoAUvBj9okmzvVYCBkjoPwsk3b8eZuUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j NjQ3YTZhMi0xYWQwLTQ2YzctOWNhZC01OGJiZDcxZmI1YTQvMC9CQzE4RkRBMjQ5 QjNCRDU2MDIwNjQ4RTgzRjBCMjREREJGMUU2NkU1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQkMxOEZEQTI0OUIzQkQ1NjAyMDY0OEU4M0YwQjI0RERCRjFF NjZFNS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYzY0N2E2YTItMWFkMC00NmM3LTlj YWQtNThiYmQ3MWZiNWE0LzAvQkMxOEZEQTI0OUIzQkQ1NjAyMDY0OEU4M0YwQjI0 RERCRjFFNjZFNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAC4rDJ3+ee4iduZZWoWgoYdMT3pyJ+CmRsEh W/HHczoYAjwcvjlCK+ziHZJznFWASvTqSnNHwSLn51BtwBxQzvk7oIr3WNikQMld 9PSeqizS7M1DgCSLHOcWlcSavznTyGwgwUcUcQpdiOXENxhe7PfhEOVjbTNUwj8n IyLrPHRaGwZrqOOJzzLLzHVbYS86UmtLPaZVIfGXBcvjXv/ivZSmgNMkOIMfMdTc fL8gzhxocmiUL3UK1J2CYYrPLvIQJw3slBRXb2ND0Zko5zy1I3+XoGBK/5lFYFVr C05cRTbq5K/Vq62dyY+ORyQPUkqgLjeVSJ0zok7jpwi+pTQxmS0= -----END CERTIFICATE-----Generated at Tue Dec 23 03:47:05 2025 by rpki-client