This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repo-rpki.idnic.net/repo/c8e8ff49-f70a-4b6f-aae6-8c77769c5dee/0/BB69F13D2CEDC5F348CEA1C1BBF6E1DC24B1D981.mft
File: BB69F13D2CEDC5F348CEA1C1BBF6E1DC24B1D981.mft (raw, json)
Hash identifier: DYxEbg7srr5vQC8bhDh3u+anI4iXwkAsdHbLycbhJtY=
Subject key identifier: AE:C6:A1:79:A4:17:3F:8D:F0:C8:0F:50:5D:AD:57:4D:B2:90:AB:65
Authority key identifier: BB:69:F1:3D:2C:ED:C5:F3:48:CE:A1:C1:BB:F6:E1:DC:24:B1:D9:81
Certificate issuer: /CN=BB69F13D2CEDC5F348CEA1C1BBF6E1DC24B1D981
Certificate serial: 18A47BD590268374D4DF64FEB8810535B74E2E84
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BB69F13D2CEDC5F348CEA1C1BBF6E1DC24B1D981.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/c8e8ff49-f70a-4b6f-aae6-8c77769c5dee/0/BB69F13D2CEDC5F348CEA1C1BBF6E1DC24B1D981.mft
Manifest number: 051B
Signing time: Thu 25 Dec 2025 11:02:18 +0000
Manifest this update: Thu 25 Dec 2025 10:57:18 +0000
Manifest next update: Sun 28 Dec 2025 19:54:18 +0000
Files and hashes: 1: BB69F13D2CEDC5F348CEA1C1BBF6E1DC24B1D981.crl (hash: Fok0u3V5Iwv+luGfGM3b9/+vwlgZXDpRkUV1BUze3s4=)
2: 3130332e3134362e3230322e302f32332d3234203d3e20313336303532.roa (hash: 3qk3I2sPJGrqwIZSGGvefDpSgj0jalLHjTWubW6XWCI=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/c8e8ff49-f70a-4b6f-aae6-8c77769c5dee/0/BB69F13D2CEDC5F348CEA1C1BBF6E1DC24B1D981.crl
rsync://repo-rpki.idnic.net/repo/c8e8ff49-f70a-4b6f-aae6-8c77769c5dee/0/BB69F13D2CEDC5F348CEA1C1BBF6E1DC24B1D981.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BB69F13D2CEDC5F348CEA1C1BBF6E1DC24B1D981.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 28 Dec 2025 19:54:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
18:a4:7b:d5:90:26:83:74:d4:df:64:fe:b8:81:05:35:b7:4e:2e:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BB69F13D2CEDC5F348CEA1C1BBF6E1DC24B1D981
Validity
Not Before: Dec 25 10:57:18 2025 GMT
Not After : Dec 28 19:54:18 2025 GMT
Subject: CN=AEC6A179A4173F8DF0C80F505DAD574DB290AB65
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:cc:b6:28:76:47:0d:dd:06:f1:61:65:56:28:
58:e3:6e:26:ac:75:0f:66:3b:5d:b8:63:e8:cd:0e:
f9:04:ae:6d:53:d1:c2:33:e7:29:f2:91:16:9f:fc:
27:8f:4d:4b:01:9b:11:c7:ea:42:14:8b:08:3b:bc:
5b:4c:fb:4c:7b:df:23:13:01:51:81:c1:59:9a:90:
83:f5:8a:6b:fb:da:1f:2b:d9:71:34:2e:88:aa:6d:
b5:3c:d9:a0:c3:8a:9a:e6:0e:32:b3:73:dc:c6:88:
6f:e6:a7:30:f3:cf:34:fd:62:96:b0:09:da:10:a6:
22:eb:72:7b:c9:8b:e8:1c:ab:77:e7:59:42:f3:ee:
ff:f8:8e:7a:18:1a:ff:3c:88:24:58:eb:c8:b8:2f:
c5:a2:7c:6c:2d:99:bc:be:4e:ef:0c:d0:f2:b2:c2:
e7:ce:63:d3:52:76:71:8a:b9:79:31:62:3f:57:74:
75:f9:c1:bf:6a:b9:e4:92:7c:b7:d4:ff:41:a2:01:
3f:24:cc:12:f6:93:a6:56:78:de:d0:47:8d:e9:8d:
8f:bd:f7:66:51:48:fb:ac:89:87:3c:08:71:6b:03:
5f:f8:ea:d1:09:30:df:9f:80:bb:e9:0b:31:7f:ee:
cc:d1:5d:66:2d:6e:f0:f8:81:3f:d0:90:dd:35:28:
68:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:C6:A1:79:A4:17:3F:8D:F0:C8:0F:50:5D:AD:57:4D:B2:90:AB:65
X509v3 Authority Key Identifier:
keyid:BB:69:F1:3D:2C:ED:C5:F3:48:CE:A1:C1:BB:F6:E1:DC:24:B1:D9:81
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/c8e8ff49-f70a-4b6f-aae6-8c77769c5dee/0/BB69F13D2CEDC5F348CEA1C1BBF6E1DC24B1D981.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BB69F13D2CEDC5F348CEA1C1BBF6E1DC24B1D981.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c8e8ff49-f70a-4b6f-aae6-8c77769c5dee/0/BB69F13D2CEDC5F348CEA1C1BBF6E1DC24B1D981.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ae:61:a2:27:e5:35:83:b6:c4:70:a2:34:09:f6:86:fb:54:0c:
8d:40:bb:15:01:0d:08:cd:90:d8:92:fb:9b:04:cb:ca:25:25:
a9:54:b4:19:8a:14:93:e7:05:eb:8a:c1:27:00:ea:95:18:41:
47:90:4f:8a:08:83:f1:6f:06:73:c3:29:9f:83:73:6f:f3:b8:
bd:45:ad:88:dc:5c:ad:6e:9c:c8:06:4c:0c:a5:df:7f:f9:9d:
17:d9:e4:ff:e0:50:f7:23:33:90:1f:9e:29:fc:91:42:1b:ab:
ae:5d:6f:15:52:cf:bd:ca:93:b7:b5:34:be:54:f8:02:d7:5f:
70:dd:7c:2d:da:6e:67:17:2b:c1:42:e5:63:c3:df:89:dc:e7:
f5:ec:6a:78:57:e5:33:04:c5:46:79:f5:53:e3:ed:0e:54:2a:
8b:f1:50:a8:2c:bc:c2:b9:88:39:02:13:1f:ca:b7:5d:60:41:
09:31:e5:34:1c:03:eb:b8:8a:ca:02:a7:66:6b:cd:bc:92:d3:
94:77:13:0c:7d:fe:a2:1d:b5:b1:df:02:33:ae:73:8b:84:83:
d2:b8:59:ab:50:01:aa:ac:4c:c6:53:c5:21:95:d1:b2:bf:55:
a4:22:c6:c2:a3:f6:28:d2:23:27:bc:39:5e:9d:10:e3:ef:60:
c1:9f:fd:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 27 17:49:50 2025 by rpki-client