This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/d3925388-35c6-41d7-9dc4-db4d118d135a/0/B891A45840F824B9F116CBEAA3574A68343F5538.mft File: B891A45840F824B9F116CBEAA3574A68343F5538.mft (raw, json) Hash identifier: RJKSJwi0O6XSnkW/h+vKyBkNFuKmVg1m53uESYsMQ+s= Subject key identifier: 59:1F:59:35:3B:93:BF:CA:00:AD:B7:FC:D5:68:8D:8C:B2:5E:89:0D Authority key identifier: B8:91:A4:58:40:F8:24:B9:F1:16:CB:EA:A3:57:4A:68:34:3F:55:38 Certificate issuer: /CN=B891A45840F824B9F116CBEAA3574A68343F5538 Certificate serial: 0101C3803CC98126EB8E72A7349D937A54808883 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B891A45840F824B9F116CBEAA3574A68343F5538.cer Subject info access: rsync://repo-rpki.idnic.net/repo/d3925388-35c6-41d7-9dc4-db4d118d135a/0/B891A45840F824B9F116CBEAA3574A68343F5538.mft Manifest number: A7 Signing time: Wed 17 Dec 2025 22:22:18 +0000 Manifest this update: Wed 17 Dec 2025 22:17:18 +0000 Manifest next update: Sun 21 Dec 2025 05:26:18 +0000 Files and hashes: 1: B891A45840F824B9F116CBEAA3574A68343F5538.crl (hash: DrPBLFGS2xkyLJxzWsrV3T+fNieXPHM6hom2vEofuVs=) 2: 3130332e32382e3231382e302f32342d3234203d3e203538333835.roa (hash: LRVa/+g9Phm4DS1KM+ftjtti7KXy6ccI0ROhTKpj7KU=) 3: 3130332e3234362e3136392e302f32342d3234203d3e203538333835.roa (hash: M7vZQHPEWxI5UNs6yi6gKlm3olQkDzTXBE8xEqwNtQY=) 4: 3130332e32332e3131362e302f32332d3234203d3e203538333835.roa (hash: GOKg9RSCe07Sx9GP7mLWYk+y2Rm870vCrIk4OhiKGTc=) 5: 3131302e39322e37342e302f32332d3234203d3e203538333835.roa (hash: XhWdokRSZKsmkPslfMXYqoYsZmB36DXqHyY6n5ueEW4=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/d3925388-35c6-41d7-9dc4-db4d118d135a/0/B891A45840F824B9F116CBEAA3574A68343F5538.crl rsync://repo-rpki.idnic.net/repo/d3925388-35c6-41d7-9dc4-db4d118d135a/0/B891A45840F824B9F116CBEAA3574A68343F5538.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B891A45840F824B9F116CBEAA3574A68343F5538.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 21 Dec 2025 05:26:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:01:c3:80:3c:c9:81:26:eb:8e:72:a7:34:9d:93:7a:54:80:88:83 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B891A45840F824B9F116CBEAA3574A68343F5538 Validity Not Before: Dec 17 22:17:18 2025 GMT Not After : Dec 21 05:26:18 2025 GMT Subject: CN=591F59353B93BFCA00ADB7FCD5688D8CB25E890D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:d3:fc:c5:49:6e:bb:5f:8c:54:15:41:e7:e8: 33:cc:49:37:96:8a:aa:01:11:07:2f:23:b6:dc:6d: 37:0e:b1:5b:b0:5e:0d:b0:40:74:e9:4d:63:b5:81: 67:bd:c8:33:c4:df:02:bf:86:7d:0b:1f:12:09:35: 02:0b:ea:ed:15:bd:7a:86:22:6d:d6:bd:cd:72:88: 91:f4:5d:ca:5e:72:09:49:8f:86:ab:b5:0c:a5:f5: 31:03:fe:4b:77:9a:ca:33:62:06:f3:ab:b8:16:31: 30:1a:f3:61:08:9c:d0:f6:ab:22:2e:2a:d3:c7:01: ba:89:99:16:02:f6:4b:f8:3c:23:2e:36:ed:f5:24: 8d:a4:74:1e:63:f9:5a:67:22:9c:5e:d1:7c:f4:e1: 81:82:79:60:12:e4:dd:3c:ed:17:0d:a2:bd:66:84: 3b:dc:07:63:0f:5a:a2:44:15:85:85:64:e5:06:25: c9:16:b5:2f:fa:80:1b:f6:89:a1:18:b6:51:ca:8e: 30:13:9f:29:78:14:d7:24:09:ad:a6:08:10:93:65: ec:ce:fc:78:f7:ae:fc:89:0f:ee:6c:cc:63:34:6a: 75:85:81:f8:71:ee:19:1b:60:15:41:b6:81:11:00: 81:25:d3:7b:e9:33:42:50:95:32:a1:e8:23:c4:b1: 87:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 59:1F:59:35:3B:93:BF:CA:00:AD:B7:FC:D5:68:8D:8C:B2:5E:89:0D X509v3 Authority Key Identifier: keyid:B8:91:A4:58:40:F8:24:B9:F1:16:CB:EA:A3:57:4A:68:34:3F:55:38 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/d3925388-35c6-41d7-9dc4-db4d118d135a/0/B891A45840F824B9F116CBEAA3574A68343F5538.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B891A45840F824B9F116CBEAA3574A68343F5538.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d3925388-35c6-41d7-9dc4-db4d118d135a/0/B891A45840F824B9F116CBEAA3574A68343F5538.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 72:b5:7c:60:77:22:98:b4:cc:41:77:93:24:b4:1c:a9:90:30: b1:0c:dc:54:58:db:98:1e:14:ab:2c:75:fa:02:e0:36:ee:a1: b8:fa:d6:1b:8b:02:94:95:4f:71:f4:14:36:bb:96:97:4b:13: 7e:be:59:68:7d:57:48:9f:18:b3:41:df:5f:2f:de:65:bb:58: ee:e7:88:ea:7f:f4:a4:22:5c:2c:28:1d:b6:78:2b:cc:a3:10: e6:d5:b5:df:bf:20:8d:ea:fb:27:84:72:ab:a1:a7:62:29:d6: 06:5d:d9:9b:cd:93:2e:ce:66:db:48:89:7b:a0:c8:2a:0d:98: 40:87:7b:bd:b4:78:64:0a:8e:5d:fc:48:b5:0a:1c:0b:ce:59: e5:f2:43:8e:fa:f7:a7:8a:fd:9a:47:34:b5:54:6e:1d:50:35: 83:e4:a9:d8:73:ed:32:75:0c:4e:9c:a8:6a:3e:45:0f:f1:64: 0d:7a:88:c8:b8:41:5d:47:35:8b:eb:90:8e:88:11:bf:38:bf: 0b:3e:a7:b1:3b:72:12:11:7a:69:df:1a:14:a6:bb:c7:fc:a3: 2b:93:21:e5:6f:48:0b:cc:35:e5:7f:b5:e1:e1:59:3d:eb:09: d8:9f:76:d9:51:1b:06:93:2e:53:31:d0:15:36:c5:37:84:69: c3:03:c9:1f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUAQHDgDzJgSbrjnKnNJ2TelSAiIMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjg5MUE0NTg0MEY4MjRCOUYxMTZDQkVBQTM1NzRBNjgz NDNGNTUzODAeFw0yNTEyMTcyMjE3MThaFw0yNTEyMjEwNTI2MThaMDMxMTAvBgNV BAMTKDU5MUY1OTM1M0I5M0JGQ0EwMEFEQjdGQ0Q1Njg4RDhDQjI1RTg5MEQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC20/zFSW67X4xUFUHn6DPMSTeW iqoBEQcvI7bcbTcOsVuwXg2wQHTpTWO1gWe9yDPE3wK/hn0LHxIJNQIL6u0VvXqG Im3Wvc1yiJH0XcpecglJj4artQyl9TED/kt3msozYgbzq7gWMTAa82EInND2qyIu KtPHAbqJmRYC9kv4PCMuNu31JI2kdB5j+VpnIpxe0Xz04YGCeWAS5N087RcNor1m hDvcB2MPWqJEFYWFZOUGJckWtS/6gBv2iaEYtlHKjjATnyl4FNckCa2mCBCTZezO /Hj3rvyJD+5szGM0anWFgfhx7hkbYBVBtoERAIEl03vpM0JQlTKh6CPEsYfnAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUWR9ZNTuTv8oArbf81WiNjLJeiQ0wHwYDVR0j BBgwFoAUuJGkWED4JLnxFsvqo1dKaDQ/VTgwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k MzkyNTM4OC0zNWM2LTQxZDctOWRjNC1kYjRkMTE4ZDEzNWEvMC9CODkxQTQ1ODQw RjgyNEI5RjExNkNCRUFBMzU3NEE2ODM0M0Y1NTM4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQjg5MUE0NTg0MEY4MjRCOUYxMTZDQkVBQTM1NzRBNjgzNDNG NTUzOC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZDM5MjUzODgtMzVjNi00MWQ3LTlk YzQtZGI0ZDExOGQxMzVhLzAvQjg5MUE0NTg0MEY4MjRCOUYxMTZDQkVBQTM1NzRB NjgzNDNGNTUzOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHK1fGB3Ipi0zEF3kyS0HKmQMLEM3FRY25ge FKssdfoC4Dbuobj61huLApSVT3H0FDa7lpdLE36+WWh9V0ifGLNB318v3mW7WO7n iOp/9KQiXCwoHbZ4K8yjEObVtd+/II3q+yeEcquhp2Ip1gZd2ZvNky7OZttIiXug yCoNmECHe720eGQKjl38SLUKHAvOWeXyQ47696eK/ZpHNLVUbh1QNYPkqdhz7TJ1 DE6cqGo+RQ/xZA16iMi4QV1HNYvrkI6IEb84vws+p7E7chIRemnfGhSmu8f8oyuT IeVvSAvMNeV/teHhWT3rCdifdtlRGwaTLlMx0BU2xTeEacMDyR8= -----END CERTIFICATE-----Generated at Sat Dec 20 21:13:43 2025 by rpki-client