This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/d5908b83-7f44-46e0-8535-6fb84b59d58a/0/0BB3D1874063172B5374865233070332233FB7B3.mft File: 0BB3D1874063172B5374865233070332233FB7B3.mft (raw, json) Hash identifier: 1gLX21HLd0Yua36O1Q+FHrH4prEBKBhOh27HMVxH4vc= Subject key identifier: C9:63:A6:32:1F:A8:79:BE:DB:BD:1A:89:37:4D:A2:07:E8:76:CE:AC Authority key identifier: 0B:B3:D1:87:40:63:17:2B:53:74:86:52:33:07:03:32:23:3F:B7:B3 Certificate issuer: /CN=0BB3D1874063172B5374865233070332233FB7B3 Certificate serial: 038F0DA927D95A80710426C2092C05CDA3A47DB3 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0BB3D1874063172B5374865233070332233FB7B3.cer Subject info access: rsync://repo-rpki.idnic.net/repo/d5908b83-7f44-46e0-8535-6fb84b59d58a/0/0BB3D1874063172B5374865233070332233FB7B3.mft Manifest number: 0532 Signing time: Wed 24 Dec 2025 12:23:52 +0000 Manifest this update: Wed 24 Dec 2025 12:18:52 +0000 Manifest next update: Sat 27 Dec 2025 14:32:52 +0000 Files and hashes: 1: 0BB3D1874063172B5374865233070332233FB7B3.crl (hash: YQhOtjjJblTqBfhAl79S9g7jLyWvxMDRWftdq8ElEB4=) 2: 3230322e3135332e31362e302f32302d3234203d3e203233363636.roa (hash: 5FOROrvQq+0t+Mk/ACrrEVqg06jInBJCBz0qroNhCeU=) 3: 3131372e3130342e3139322e302f31392d3234203d3e203233363636.roa (hash: zCm8uejNjkpY+DjdGXgrEnekcPvtN86UHanFShqlM6g=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/d5908b83-7f44-46e0-8535-6fb84b59d58a/0/0BB3D1874063172B5374865233070332233FB7B3.crl rsync://repo-rpki.idnic.net/repo/d5908b83-7f44-46e0-8535-6fb84b59d58a/0/0BB3D1874063172B5374865233070332233FB7B3.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0BB3D1874063172B5374865233070332233FB7B3.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 27 Dec 2025 14:32:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 03:8f:0d:a9:27:d9:5a:80:71:04:26:c2:09:2c:05:cd:a3:a4:7d:b3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0BB3D1874063172B5374865233070332233FB7B3 Validity Not Before: Dec 24 12:18:52 2025 GMT Not After : Dec 27 14:32:52 2025 GMT Subject: CN=C963A6321FA879BEDBBD1A89374DA207E876CEAC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:24:b5:cd:77:23:fd:2c:e0:9f:8a:2d:d4:9a: 23:cc:73:dc:70:68:ef:60:6d:15:6a:69:e0:58:38: be:e0:7f:41:bc:8b:d7:26:9e:16:c4:3a:1f:eb:53: 82:c5:3d:50:90:39:2a:17:09:77:8e:fd:60:49:22: d7:8d:5c:13:94:6b:a1:2a:a7:1c:90:05:61:e5:4d: 43:a5:70:4a:29:b7:93:34:5d:ad:5f:cb:5d:2d:4c: a8:59:75:57:00:76:2b:9e:32:ab:19:a7:92:5b:93: 5f:e2:e9:ca:c8:c6:83:02:b1:19:18:7d:d9:07:46: 21:ae:af:4c:62:dc:5e:9d:bb:09:b3:64:b9:85:06: dc:1f:71:1f:26:7a:c0:b0:d1:c1:91:87:66:e7:3e: 2f:3d:1c:9c:3e:78:09:aa:a3:ab:16:bb:7f:90:76: a9:00:6b:96:88:fa:a3:ef:95:ef:0d:bd:af:2a:07: bc:98:5c:8e:b1:77:50:c0:44:9b:bf:ef:f5:c6:9f: d8:fa:e8:51:66:25:06:83:98:cc:aa:6a:3d:ad:ab: c8:bd:67:17:57:55:ce:a9:f2:3b:ae:fa:dd:a5:c8: 33:b2:88:2d:ec:22:67:ef:d2:5d:b1:28:7e:cb:c8: 01:2a:a8:aa:19:2e:4c:59:4a:a1:0b:90:a7:eb:f9: 86:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:63:A6:32:1F:A8:79:BE:DB:BD:1A:89:37:4D:A2:07:E8:76:CE:AC X509v3 Authority Key Identifier: keyid:0B:B3:D1:87:40:63:17:2B:53:74:86:52:33:07:03:32:23:3F:B7:B3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/d5908b83-7f44-46e0-8535-6fb84b59d58a/0/0BB3D1874063172B5374865233070332233FB7B3.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0BB3D1874063172B5374865233070332233FB7B3.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d5908b83-7f44-46e0-8535-6fb84b59d58a/0/0BB3D1874063172B5374865233070332233FB7B3.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 21:11:cc:e2:3e:68:4f:4d:67:69:ec:a4:95:57:49:bd:ad:3a: 21:ae:5e:5b:c8:90:06:d1:ea:8f:85:0d:54:0b:88:b5:38:7d: d1:d9:2e:d5:74:45:ba:8d:a5:1f:53:b7:08:e0:7d:a3:0b:16: 8c:dc:b6:4d:c4:e0:23:9e:12:09:26:16:c1:e8:b8:54:c2:40: 6a:08:bd:75:67:6d:aa:80:7e:76:a6:79:61:a1:3d:a7:7b:62: 28:51:fa:18:9e:c0:28:54:f3:27:5e:a2:4d:dc:03:29:fe:94: f1:f3:fa:71:cc:4a:04:ee:42:59:7e:87:5b:3c:84:88:38:05: 68:d2:75:cb:8b:ce:96:7b:92:ef:96:50:09:71:90:c7:ef:f9: 95:3b:4a:2c:57:05:8c:26:8f:f3:30:cc:99:46:da:40:fe:61: 92:4a:d5:74:c6:5b:a9:dc:8f:33:86:46:62:73:67:fb:59:64: 03:42:ae:42:c2:80:09:ee:3a:dc:8f:52:6e:48:7c:c3:a1:89: cc:ce:16:ac:20:40:f8:1b:70:19:81:42:ca:b5:5e:8a:6d:ad: a1:9e:26:96:e5:c0:a5:5a:86:fd:77:35:65:cd:e6:c2:ec:e0: 08:53:8a:b8:f0:bc:ea:1d:84:3a:8b:fc:2a:5c:2c:d8:5c:bd: 04:09:b7:03 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUA48NqSfZWoBxBCbCCSwFzaOkfbMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMEJCM0QxODc0MDYzMTcyQjUzNzQ4NjUyMzMwNzAzMzIy MzNGQjdCMzAeFw0yNTEyMjQxMjE4NTJaFw0yNTEyMjcxNDMyNTJaMDMxMTAvBgNV BAMTKEM5NjNBNjMyMUZBODc5QkVEQkJEMUE4OTM3NERBMjA3RTg3NkNFQUMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC8JLXNdyP9LOCfii3UmiPMc9xw aO9gbRVqaeBYOL7gf0G8i9cmnhbEOh/rU4LFPVCQOSoXCXeO/WBJIteNXBOUa6Eq pxyQBWHlTUOlcEopt5M0Xa1fy10tTKhZdVcAdiueMqsZp5Jbk1/i6crIxoMCsRkY fdkHRiGur0xi3F6duwmzZLmFBtwfcR8mesCw0cGRh2bnPi89HJw+eAmqo6sWu3+Q dqkAa5aI+qPvle8Nva8qB7yYXI6xd1DARJu/7/XGn9j66FFmJQaDmMyqaj2tq8i9 ZxdXVc6p8juu+t2lyDOyiC3sImfv0l2xKH7LyAEqqKoZLkxZSqELkKfr+YblAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUyWOmMh+oeb7bvRqJN02iB+h2zqwwHwYDVR0j BBgwFoAUC7PRh0BjFytTdIZSMwcDMiM/t7MwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k NTkwOGI4My03ZjQ0LTQ2ZTAtODUzNS02ZmI4NGI1OWQ1OGEvMC8wQkIzRDE4NzQw NjMxNzJCNTM3NDg2NTIzMzA3MDMzMjIzM0ZCN0IzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMEJCM0QxODc0MDYzMTcyQjUzNzQ4NjUyMzMwNzAzMzIyMzNG QjdCMy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZDU5MDhiODMtN2Y0NC00NmUwLTg1 MzUtNmZiODRiNTlkNThhLzAvMEJCM0QxODc0MDYzMTcyQjUzNzQ4NjUyMzMwNzAz MzIyMzNGQjdCMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACERzOI+aE9NZ2nspJVXSb2tOiGuXlvIkAbR 6o+FDVQLiLU4fdHZLtV0RbqNpR9TtwjgfaMLFozctk3E4COeEgkmFsHouFTCQGoI vXVnbaqAfnameWGhPad7YihR+hiewChU8ydeok3cAyn+lPHz+nHMSgTuQll+h1s8 hIg4BWjSdcuLzpZ7ku+WUAlxkMfv+ZU7SixXBYwmj/MwzJlG2kD+YZJK1XTGW6nc jzOGRmJzZ/tZZANCrkLCgAnuOtyPUm5IfMOhiczOFqwgQPgbcBmBQsq1XoptraGe JpblwKVahv13NWXN5sLs4AhTirjwvOodhDqL/CpcLNhcvQQJtwM= -----END CERTIFICATE-----Generated at Wed Dec 24 20:25:17 2025 by rpki-client