This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/c8e8ff49-f70a-4b6f-aae6-8c77769c5dee/0/BB69F13D2CEDC5F348CEA1C1BBF6E1DC24B1D981.mft File: BB69F13D2CEDC5F348CEA1C1BBF6E1DC24B1D981.mft (raw, json) Hash identifier: Oc4L70dy8XTCotQ3CaJDMHQ1ZntqmliQ3XRHlqQEEnE= Subject key identifier: 3F:32:43:4F:50:28:C2:AC:69:8A:D1:37:93:50:BB:0E:A5:03:C3:DA Authority key identifier: BB:69:F1:3D:2C:ED:C5:F3:48:CE:A1:C1:BB:F6:E1:DC:24:B1:D9:81 Certificate issuer: /CN=BB69F13D2CEDC5F348CEA1C1BBF6E1DC24B1D981 Certificate serial: 1A5CE8AAD12B41B7D5F3A51E0F02F41E031EBA8F Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BB69F13D2CEDC5F348CEA1C1BBF6E1DC24B1D981.cer Subject info access: rsync://repo-rpki.idnic.net/repo/c8e8ff49-f70a-4b6f-aae6-8c77769c5dee/0/BB69F13D2CEDC5F348CEA1C1BBF6E1DC24B1D981.mft Manifest number: 0518 Signing time: Thu 18 Dec 2025 12:02:19 +0000 Manifest this update: Thu 18 Dec 2025 11:57:19 +0000 Manifest next update: Sun 21 Dec 2025 23:07:19 +0000 Files and hashes: 1: BB69F13D2CEDC5F348CEA1C1BBF6E1DC24B1D981.crl (hash: Myv9AtP+I3JNw6oaIBEzlbRPIY1RIibb7hl1MP5qNZw=) 2: 3130332e3134362e3230322e302f32332d3234203d3e20313336303532.roa (hash: 3qk3I2sPJGrqwIZSGGvefDpSgj0jalLHjTWubW6XWCI=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/c8e8ff49-f70a-4b6f-aae6-8c77769c5dee/0/BB69F13D2CEDC5F348CEA1C1BBF6E1DC24B1D981.crl rsync://repo-rpki.idnic.net/repo/c8e8ff49-f70a-4b6f-aae6-8c77769c5dee/0/BB69F13D2CEDC5F348CEA1C1BBF6E1DC24B1D981.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BB69F13D2CEDC5F348CEA1C1BBF6E1DC24B1D981.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 21 Dec 2025 23:07:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1a:5c:e8:aa:d1:2b:41:b7:d5:f3:a5:1e:0f:02:f4:1e:03:1e:ba:8f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BB69F13D2CEDC5F348CEA1C1BBF6E1DC24B1D981 Validity Not Before: Dec 18 11:57:19 2025 GMT Not After : Dec 21 23:07:19 2025 GMT Subject: CN=3F32434F5028C2AC698AD1379350BB0EA503C3DA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:41:ce:7a:56:41:ee:fe:d1:22:bb:7f:8d:51: af:a0:1b:5a:df:50:48:1e:1b:8b:a3:aa:03:c2:73: e9:43:55:94:ec:81:8f:76:2c:08:fc:23:5b:2f:18: b4:ee:42:4a:1a:fc:63:60:3d:ca:09:9b:1e:9c:54: 63:3b:c3:7e:5a:8c:ba:22:e2:e6:77:89:d3:b8:52: 61:4d:1d:20:d5:48:ac:06:a0:56:23:42:19:fc:a6: a7:26:a3:bd:9f:11:e2:60:a7:64:ce:3b:5d:46:1d: 09:b3:7c:cc:57:57:94:56:4a:4f:28:e3:bd:6d:d2: df:20:1e:eb:57:cb:1e:9e:0b:0b:a9:c1:c1:9f:5c: f6:16:1f:dc:95:0d:49:66:a2:5e:c3:f5:35:4f:a8: 23:da:c6:f0:e6:e7:2a:aa:df:a1:3c:80:1f:a3:96: a1:60:61:79:71:1e:24:45:3e:eb:08:10:71:fa:84: 83:88:67:06:49:43:9c:e1:7f:d8:a7:d7:1f:3b:49: 20:ae:3b:98:32:19:9d:32:5a:69:ee:60:d2:69:c0: 62:d4:e1:5c:44:72:52:01:95:5c:77:f3:21:48:2e: e7:ee:9f:44:31:e4:a9:89:d4:18:56:f6:25:26:c6: 53:62:c3:ce:8c:e4:f7:c0:a8:f3:9e:af:b7:a4:f7: 08:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3F:32:43:4F:50:28:C2:AC:69:8A:D1:37:93:50:BB:0E:A5:03:C3:DA X509v3 Authority Key Identifier: keyid:BB:69:F1:3D:2C:ED:C5:F3:48:CE:A1:C1:BB:F6:E1:DC:24:B1:D9:81 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/c8e8ff49-f70a-4b6f-aae6-8c77769c5dee/0/BB69F13D2CEDC5F348CEA1C1BBF6E1DC24B1D981.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BB69F13D2CEDC5F348CEA1C1BBF6E1DC24B1D981.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c8e8ff49-f70a-4b6f-aae6-8c77769c5dee/0/BB69F13D2CEDC5F348CEA1C1BBF6E1DC24B1D981.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1b:b3:cd:16:1b:48:01:54:ab:b2:47:0f:70:99:3a:e1:fc:7d: d3:0b:09:12:d1:9d:26:70:d3:3f:81:b4:c3:ce:49:6a:c5:de: 82:03:fc:f3:8f:e7:82:e0:1f:c3:88:90:fc:e9:87:0f:8e:3f: 42:c5:97:19:24:56:d7:4f:48:5e:aa:1b:a2:9f:b1:62:99:60: ea:1d:e1:7a:11:a8:14:59:84:f2:b7:47:2f:37:35:1c:1e:93: e4:ef:1b:3b:0b:29:b7:bd:9a:66:7d:a4:3f:d7:50:bf:28:6d: 06:57:cb:c0:e8:0a:28:eb:05:e8:06:d7:bc:97:c1:d7:b4:d3: 36:ac:b6:87:ff:5f:3f:00:4a:66:f4:33:82:1f:89:91:62:da: 59:6c:d9:75:36:19:0c:0e:f2:32:0b:04:d4:ad:c0:bb:80:0d: 86:a4:1d:f7:24:d9:26:c2:c1:8e:3b:65:36:c4:fb:fc:a9:c1: bf:7d:a9:91:64:73:04:6f:ea:33:4f:c6:ec:29:c2:59:9c:0b: 0d:48:8f:fd:9d:ab:c8:c9:c0:09:5c:8f:14:bc:63:8b:ae:2d: bd:19:7b:50:8b:d8:9d:66:4e:70:2d:9f:29:cd:15:d3:5f:da: 4d:ac:18:4d:b2:c5:85:fc:9e:01:b4:02:98:a9:aa:c0:f8:d9: 86:6c:18:5b -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUGlzoqtErQbfV86UeDwL0HgMeuo8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkI2OUYxM0QyQ0VEQzVGMzQ4Q0VBMUMxQkJGNkUxREMy NEIxRDk4MTAeFw0yNTEyMTgxMTU3MTlaFw0yNTEyMjEyMzA3MTlaMDMxMTAvBgNV BAMTKDNGMzI0MzRGNTAyOEMyQUM2OThBRDEzNzkzNTBCQjBFQTUwM0MzREEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC5Qc56VkHu/tEiu3+NUa+gG1rf UEgeG4ujqgPCc+lDVZTsgY92LAj8I1svGLTuQkoa/GNgPcoJmx6cVGM7w35ajLoi 4uZ3idO4UmFNHSDVSKwGoFYjQhn8pqcmo72fEeJgp2TOO11GHQmzfMxXV5RWSk8o 471t0t8gHutXyx6eCwupwcGfXPYWH9yVDUlmol7D9TVPqCPaxvDm5yqq36E8gB+j lqFgYXlxHiRFPusIEHH6hIOIZwZJQ5zhf9in1x87SSCuO5gyGZ0yWmnuYNJpwGLU 4VxEclIBlVx38yFILufun0Qx5KmJ1BhW9iUmxlNiw86M5PfAqPOer7ek9whlAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUPzJDT1AowqxpitE3k1C7DqUDw9owHwYDVR0j BBgwFoAUu2nxPSztxfNIzqHBu/bh3CSx2YEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j OGU4ZmY0OS1mNzBhLTRiNmYtYWFlNi04Yzc3NzY5YzVkZWUvMC9CQjY5RjEzRDJD RURDNUYzNDhDRUExQzFCQkY2RTFEQzI0QjFEOTgxLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQkI2OUYxM0QyQ0VEQzVGMzQ4Q0VBMUMxQkJGNkUxREMyNEIx RDk4MS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYzhlOGZmNDktZjcwYS00YjZmLWFh ZTYtOGM3Nzc2OWM1ZGVlLzAvQkI2OUYxM0QyQ0VEQzVGMzQ4Q0VBMUMxQkJGNkUx REMyNEIxRDk4MS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABuzzRYbSAFUq7JHD3CZOuH8fdMLCRLRnSZw 0z+BtMPOSWrF3oID/POP54LgH8OIkPzphw+OP0LFlxkkVtdPSF6qG6KfsWKZYOod 4XoRqBRZhPK3Ry83NRwek+TvGzsLKbe9mmZ9pD/XUL8obQZXy8DoCijrBegG17yX wde00zastof/Xz8ASmb0M4IfiZFi2lls2XU2GQwO8jILBNStwLuADYakHfck2SbC wY47ZTbE+/ypwb99qZFkcwRv6jNPxuwpwlmcCw1Ij/2dq8jJwAlcjxS8Y4uuLb0Z e1CL2J1mTnAtnynNFdNf2k2sGE2yxYX8ngG0ApipqsD42YZsGFs= -----END CERTIFICATE-----Generated at Sat Dec 20 03:13:58 2025 by rpki-client