This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/d924fa9a-e5f3-4265-9e1d-84e4535961d0/0/BD5D46B5BFE72F2AA1188A9096B10E01474244B1.mft File: BD5D46B5BFE72F2AA1188A9096B10E01474244B1.mft (raw, json) Hash identifier: MhVrdWjb9fxA/HwtrR1g0cBHbMDETNJDT+riAyle/s4= Subject key identifier: 71:3F:75:E8:CE:09:37:D5:9A:77:3A:7E:1B:89:BD:40:2D:FD:A0:6C Authority key identifier: BD:5D:46:B5:BF:E7:2F:2A:A1:18:8A:90:96:B1:0E:01:47:42:44:B1 Certificate issuer: /CN=BD5D46B5BFE72F2AA1188A9096B10E01474244B1 Certificate serial: 5B474B16E614EE03ECDD4AAF01662D2682EAE74C Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BD5D46B5BFE72F2AA1188A9096B10E01474244B1.cer Subject info access: rsync://repo-rpki.idnic.net/repo/d924fa9a-e5f3-4265-9e1d-84e4535961d0/0/BD5D46B5BFE72F2AA1188A9096B10E01474244B1.mft Manifest number: 0280 Signing time: Wed 17 Dec 2025 00:31:32 +0000 Manifest this update: Wed 17 Dec 2025 00:26:32 +0000 Manifest next update: Sat 20 Dec 2025 01:17:32 +0000 Files and hashes: 1: 3130332e3130352e3139332e302f32342d3234203d3e20313337333136.roa (hash: CbT0hYzhheMonOPehO3no/mVI5bpvSbduL61mPpJvUQ=) 2: 3130332e3130352e3139322e302f32342d3234203d3e20313336383738.roa (hash: w0xMtSXTcSCSqsp69YKeThLLGPMrf9e1AjwvZ9mn/V0=) 3: 3130332e3130352e3139342e302f32342d3234203d3e20313336383738.roa (hash: sGPkr82UUN2m0p5Z6EeIkVlWIj/RwlmetOwmRgGSsB8=) 4: BD5D46B5BFE72F2AA1188A9096B10E01474244B1.crl (hash: o2MzRZVAU9RuNs6bU6qEg8htFAaHB3hMS3SpRPlRRKs=) 5: 3130332e3130352e3139352e302f32342d3234203d3e20313336383738.roa (hash: O8lklXAV7vvG+v+hANkUO5KIwzG98mC/eIBJJgrAC6Y=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/d924fa9a-e5f3-4265-9e1d-84e4535961d0/0/BD5D46B5BFE72F2AA1188A9096B10E01474244B1.crl rsync://repo-rpki.idnic.net/repo/d924fa9a-e5f3-4265-9e1d-84e4535961d0/0/BD5D46B5BFE72F2AA1188A9096B10E01474244B1.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BD5D46B5BFE72F2AA1188A9096B10E01474244B1.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 20 Dec 2025 01:17:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5b:47:4b:16:e6:14:ee:03:ec:dd:4a:af:01:66:2d:26:82:ea:e7:4c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BD5D46B5BFE72F2AA1188A9096B10E01474244B1 Validity Not Before: Dec 17 00:26:32 2025 GMT Not After : Dec 20 01:17:32 2025 GMT Subject: CN=713F75E8CE0937D59A773A7E1B89BD402DFDA06C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:ba:bf:5f:c7:7b:82:93:3e:3d:6a:7f:33:e6: 35:f0:d6:af:fb:f4:4d:df:93:82:68:f4:b7:3b:a3: e6:15:23:14:d4:1a:1e:ee:81:bb:87:b0:57:03:8d: 19:17:6a:69:2c:d0:c2:d8:47:86:2e:ad:04:b0:75: e6:ba:27:df:ba:48:0e:20:4f:23:e1:09:eb:05:43: 4d:71:56:b2:1d:90:02:b9:dc:b5:c4:d9:28:6e:df: a2:5d:4d:61:50:8a:4f:47:73:1b:d2:04:51:7d:3e: 18:5d:b7:dc:96:fb:d8:43:67:1b:14:76:34:a5:53: 10:84:05:68:60:da:80:fc:dd:cf:28:47:a1:7e:ad: fd:82:35:6a:cf:a9:4c:67:59:c8:cf:f7:e9:33:92: af:c1:23:c7:fd:14:81:d4:a1:51:69:12:48:2e:e5: 6b:a6:ac:30:4e:e6:a9:bf:80:31:bf:9d:44:51:cb: 59:15:28:61:fb:cd:0d:dc:a6:b5:d4:33:ec:19:60: e7:a3:19:b2:4c:58:21:76:ce:e1:60:b6:06:17:ca: 97:5e:d0:3a:cd:3b:eb:2b:f8:45:f4:b9:86:94:90: da:29:c9:c3:6d:6c:09:8b:f5:d9:af:5a:3a:c3:82: 1c:e1:23:9c:a5:d1:a2:eb:6a:af:be:99:c2:1e:e9: 02:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:3F:75:E8:CE:09:37:D5:9A:77:3A:7E:1B:89:BD:40:2D:FD:A0:6C X509v3 Authority Key Identifier: keyid:BD:5D:46:B5:BF:E7:2F:2A:A1:18:8A:90:96:B1:0E:01:47:42:44:B1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/d924fa9a-e5f3-4265-9e1d-84e4535961d0/0/BD5D46B5BFE72F2AA1188A9096B10E01474244B1.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BD5D46B5BFE72F2AA1188A9096B10E01474244B1.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d924fa9a-e5f3-4265-9e1d-84e4535961d0/0/BD5D46B5BFE72F2AA1188A9096B10E01474244B1.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6c:45:25:c8:47:88:a3:ed:6a:71:88:81:e6:cf:b6:2d:d6:7c: 25:b9:de:c6:12:50:97:26:5d:ab:bc:00:b0:af:5d:77:fc:72: 0f:3d:f6:a8:53:47:f6:ce:fe:1d:39:05:b3:55:be:29:1b:1b: b5:11:2a:66:70:0b:a2:16:5c:da:e5:30:58:00:cb:68:6c:14: 2b:b2:70:7a:43:90:8d:dd:5f:4d:0d:ef:bb:f9:eb:15:14:7f: 2d:62:2d:3e:d1:65:e4:29:cd:37:21:c4:8d:69:2e:d1:b5:a6: 05:e0:9f:7b:b5:b6:86:4e:20:00:60:52:67:ab:44:59:69:65: 78:9a:c4:1e:7f:8e:1e:30:8d:69:06:3f:09:c7:59:42:78:6b: 60:f4:84:58:2e:ab:cc:60:6c:b6:33:d3:3b:61:1f:e3:00:b8: 4f:85:b0:07:93:ad:e8:93:38:99:46:1b:d8:b5:db:bd:a3:c0: 30:85:60:99:14:1d:a6:d7:1c:83:78:20:5f:73:fa:08:fa:31: 6b:39:cc:e3:81:0a:ae:b0:3c:b8:f2:fd:9d:b6:08:b2:2f:4a: e9:50:fc:7d:da:a7:89:ad:a0:8b:d7:a4:46:e8:fd:15:2b:01: b8:69:b4:5e:76:fd:e1:d9:ed:eb:31:cf:36:61:06:f6:48:d2: 0b:c8:0b:1f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUW0dLFuYU7gPs3UqvAWYtJoLq50wwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkQ1RDQ2QjVCRkU3MkYyQUExMTg4QTkwOTZCMTBFMDE0 NzQyNDRCMTAeFw0yNTEyMTcwMDI2MzJaFw0yNTEyMjAwMTE3MzJaMDMxMTAvBgNV BAMTKDcxM0Y3NUU4Q0UwOTM3RDU5QTc3M0E3RTFCODlCRDQwMkRGREEwNkMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC2ur9fx3uCkz49an8z5jXw1q/7 9E3fk4Jo9Lc7o+YVIxTUGh7ugbuHsFcDjRkXamks0MLYR4YurQSwdea6J9+6SA4g TyPhCesFQ01xVrIdkAK53LXE2Shu36JdTWFQik9HcxvSBFF9Phhdt9yW+9hDZxsU djSlUxCEBWhg2oD83c8oR6F+rf2CNWrPqUxnWcjP9+kzkq/BI8f9FIHUoVFpEkgu 5WumrDBO5qm/gDG/nURRy1kVKGH7zQ3cprXUM+wZYOejGbJMWCF2zuFgtgYXypde 0DrNO+sr+EX0uYaUkNopycNtbAmL9dmvWjrDghzhI5yl0aLraq++mcIe6QI7AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUcT916M4JN9Wadzp+G4m9QC39oGwwHwYDVR0j BBgwFoAUvV1Gtb/nLyqhGIqQlrEOAUdCRLEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k OTI0ZmE5YS1lNWYzLTQyNjUtOWUxZC04NGU0NTM1OTYxZDAvMC9CRDVENDZCNUJG RTcyRjJBQTExODhBOTA5NkIxMEUwMTQ3NDI0NEIxLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQkQ1RDQ2QjVCRkU3MkYyQUExMTg4QTkwOTZCMTBFMDE0NzQy NDRCMS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZDkyNGZhOWEtZTVmMy00MjY1LTll MWQtODRlNDUzNTk2MWQwLzAvQkQ1RDQ2QjVCRkU3MkYyQUExMTg4QTkwOTZCMTBF MDE0NzQyNDRCMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGxFJchHiKPtanGIgebPti3WfCW53sYSUJcm Xau8ALCvXXf8cg899qhTR/bO/h05BbNVvikbG7URKmZwC6IWXNrlMFgAy2hsFCuy cHpDkI3dX00N77v56xUUfy1iLT7RZeQpzTchxI1pLtG1pgXgn3u1toZOIABgUmer RFlpZXiaxB5/jh4wjWkGPwnHWUJ4a2D0hFguq8xgbLYz0zthH+MAuE+FsAeTreiT OJlGG9i1272jwDCFYJkUHabXHIN4IF9z+gj6MWs5zOOBCq6wPLjy/Z22CLIvSulQ /H3ap4mtoIvXpEbo/RUrAbhptF52/eHZ7esxzzZhBvZI0gvICx8= -----END CERTIFICATE-----Generated at Fri Dec 19 11:19:36 2025 by rpki-client