This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/dfe7dacc-2b45-4141-9775-f1bb9f052396/0/BCA0C1EF5A4AB3AEF425E15AB89A19CDE5688244.mft File: BCA0C1EF5A4AB3AEF425E15AB89A19CDE5688244.mft (raw, json) Hash identifier: 8c223FjAv1l2fhktCPmaPcrzQr1UVtbgk3mQhHvqFGA= Subject key identifier: 3A:F4:14:88:1A:DE:9F:89:F6:14:F5:62:67:8E:F0:C9:74:32:68:3A Authority key identifier: BC:A0:C1:EF:5A:4A:B3:AE:F4:25:E1:5A:B8:9A:19:CD:E5:68:82:44 Certificate issuer: /CN=BCA0C1EF5A4AB3AEF425E15AB89A19CDE5688244 Certificate serial: 5581A309E84AF43288F9F1C81A514CC142E71D5D Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/BCA0C1EF5A4AB3AEF425E15AB89A19CDE5688244.cer Subject info access: rsync://repo-rpki.idnic.net/repo/dfe7dacc-2b45-4141-9775-f1bb9f052396/0/BCA0C1EF5A4AB3AEF425E15AB89A19CDE5688244.mft Manifest number: FE Signing time: Wed 24 Dec 2025 08:10:56 +0000 Manifest this update: Wed 24 Dec 2025 08:05:56 +0000 Manifest next update: Sat 27 Dec 2025 10:29:56 +0000 Files and hashes: 1: BCA0C1EF5A4AB3AEF425E15AB89A19CDE5688244.crl (hash: XJfyRKW1LcgJKaP6GaANY7Tnqo5ommIFEWfFv89PgRw=) 2: 3136302e32302e33392e302f32342d3234203d3e20313532373637.roa (hash: pleM7zjt401D1BJf2sqrcL6s2yWcWR5KklAwpJnySCE=) 3: 3136302e32302e33382e302f32342d3234203d3e20313532373637.roa (hash: Hz+bwv5TeiqLZz4vHu5RdAv/BqFZcBIfsejW6ExngYw=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/dfe7dacc-2b45-4141-9775-f1bb9f052396/0/BCA0C1EF5A4AB3AEF425E15AB89A19CDE5688244.crl rsync://repo-rpki.idnic.net/repo/dfe7dacc-2b45-4141-9775-f1bb9f052396/0/BCA0C1EF5A4AB3AEF425E15AB89A19CDE5688244.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/BCA0C1EF5A4AB3AEF425E15AB89A19CDE5688244.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 27 Dec 2025 10:29:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 55:81:a3:09:e8:4a:f4:32:88:f9:f1:c8:1a:51:4c:c1:42:e7:1d:5d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BCA0C1EF5A4AB3AEF425E15AB89A19CDE5688244 Validity Not Before: Dec 24 08:05:56 2025 GMT Not After : Dec 27 10:29:56 2025 GMT Subject: CN=3AF414881ADE9F89F614F562678EF0C97432683A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:fd:d4:a5:10:64:f4:57:45:86:e8:39:e3:38:2b: 79:df:94:fb:59:37:99:b1:ec:69:1b:54:be:e9:b4: 88:de:a0:d3:2b:ca:9b:c4:a8:46:d0:67:fa:b9:09: e8:77:aa:98:ea:17:f3:cf:d1:18:66:6a:e8:fb:5f: 9c:77:7b:59:fa:60:33:eb:80:7f:65:c0:aa:26:fc: 6c:4e:99:6b:6d:e2:c1:e9:87:c5:2c:43:d0:1b:bd: 0e:4e:8b:bd:3a:47:64:9b:6c:87:21:8c:04:35:34: c6:8c:39:cc:5a:66:ef:74:e7:53:dc:14:c6:ee:da: dd:51:b7:ab:a9:34:8c:db:d5:07:06:4b:42:8f:13: 04:bb:f8:1b:0b:7d:23:35:32:33:45:2a:90:1b:a6: 83:e7:f0:b1:2f:d4:8d:de:cd:f5:4f:12:52:06:c1: 5f:3d:7f:49:79:2d:be:d6:04:fb:66:34:22:17:a0: 5e:b1:31:c5:ac:97:af:49:1f:81:6a:45:5a:e8:f2: 9d:90:e7:42:1b:8f:ac:86:22:72:09:10:52:31:de: c3:0e:c3:91:27:32:5e:34:48:65:01:68:07:30:c7: 4e:03:df:de:b7:ec:ef:c2:38:15:0d:9e:0d:ce:1d: 26:3c:c1:3c:fa:70:f3:23:c5:94:66:6e:48:43:5d: d3:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:F4:14:88:1A:DE:9F:89:F6:14:F5:62:67:8E:F0:C9:74:32:68:3A X509v3 Authority Key Identifier: keyid:BC:A0:C1:EF:5A:4A:B3:AE:F4:25:E1:5A:B8:9A:19:CD:E5:68:82:44 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/dfe7dacc-2b45-4141-9775-f1bb9f052396/0/BCA0C1EF5A4AB3AEF425E15AB89A19CDE5688244.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/BCA0C1EF5A4AB3AEF425E15AB89A19CDE5688244.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/dfe7dacc-2b45-4141-9775-f1bb9f052396/0/BCA0C1EF5A4AB3AEF425E15AB89A19CDE5688244.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 39:fa:ca:9e:e4:1e:e2:1d:72:44:46:a4:c7:9f:89:79:e3:d7: f1:03:a3:e4:d8:cd:7f:59:8e:f6:c1:b9:54:87:4d:5e:56:0d: f3:79:9d:09:a5:18:6a:6b:38:20:23:84:51:42:0f:83:bd:aa: b2:60:14:9f:a5:42:c3:80:db:a3:15:2b:88:cf:f5:40:7f:94: 98:bd:10:9c:25:c6:e0:04:c6:b1:76:fe:94:34:0a:3b:54:04: d9:6b:e6:39:50:f4:82:65:0f:f0:1a:5c:32:d0:5d:36:77:f7: f8:dd:62:d6:b2:bc:05:3a:37:f2:59:6d:da:b5:96:c2:90:2d: cb:ed:42:ef:1a:5b:14:86:9c:41:be:0e:2f:64:fe:ad:1e:e1: a5:50:21:48:2f:8f:db:4a:13:a6:64:6c:77:b2:d8:a0:50:48: 23:28:6e:cc:42:05:8f:09:ba:96:cf:54:b4:6b:79:50:26:ff: 26:e1:f1:64:02:87:8a:90:d6:ca:21:1b:29:e3:46:67:7a:18: 8a:81:e0:09:3f:dc:e6:e0:c6:27:92:9f:5e:69:f4:e3:0e:e3: 05:58:6b:4a:8b:d0:5e:8c:69:a9:b2:1c:2e:a3:0e:64:dd:53: 8e:a4:ff:35:59:bf:07:aa:61:d1:78:ec:e5:d7:c1:4a:da:9e: 40:45:54:e7 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUVYGjCehK9DKI+fHIGlFMwULnHV0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkNBMEMxRUY1QTRBQjNBRUY0MjVFMTVBQjg5QTE5Q0RF NTY4ODI0NDAeFw0yNTEyMjQwODA1NTZaFw0yNTEyMjcxMDI5NTZaMDMxMTAvBgNV BAMTKDNBRjQxNDg4MUFERTlGODlGNjE0RjU2MjY3OEVGMEM5NzQzMjY4M0EwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD91KUQZPRXRYboOeM4K3nflPtZ N5mx7GkbVL7ptIjeoNMrypvEqEbQZ/q5Ceh3qpjqF/PP0Rhmauj7X5x3e1n6YDPr gH9lwKom/GxOmWtt4sHph8UsQ9AbvQ5Oi706R2SbbIchjAQ1NMaMOcxaZu9051Pc FMbu2t1Rt6upNIzb1QcGS0KPEwS7+BsLfSM1MjNFKpAbpoPn8LEv1I3ezfVPElIG wV89f0l5Lb7WBPtmNCIXoF6xMcWsl69JH4FqRVro8p2Q50Ibj6yGInIJEFIx3sMO w5EnMl40SGUBaAcwx04D39637O/COBUNng3OHSY8wTz6cPMjxZRmbkhDXdMXAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUOvQUiBren4n2FPViZ47wyXQyaDowHwYDVR0j BBgwFoAUvKDB71pKs670JeFauJoZzeVogkQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k ZmU3ZGFjYy0yYjQ1LTQxNDEtOTc3NS1mMWJiOWYwNTIzOTYvMC9CQ0EwQzFFRjVB NEFCM0FFRjQyNUUxNUFCODlBMTlDREU1Njg4MjQ0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvQkNBMEMxRUY1QTRBQjNBRUY0MjVFMTVBQjg5QTE5Q0RFNTY4 ODI0NC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZGZlN2RhY2MtMmI0NS00MTQxLTk3 NzUtZjFiYjlmMDUyMzk2LzAvQkNBMEMxRUY1QTRBQjNBRUY0MjVFMTVBQjg5QTE5 Q0RFNTY4ODI0NC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADn6yp7kHuIdckRGpMefiXnj1/EDo+TYzX9Z jvbBuVSHTV5WDfN5nQmlGGprOCAjhFFCD4O9qrJgFJ+lQsOA26MVK4jP9UB/lJi9 EJwlxuAExrF2/pQ0CjtUBNlr5jlQ9IJlD/AaXDLQXTZ39/jdYtayvAU6N/JZbdq1 lsKQLcvtQu8aWxSGnEG+Di9k/q0e4aVQIUgvj9tKE6ZkbHey2KBQSCMobsxCBY8J upbPVLRreVAm/ybh8WQCh4qQ1sohGynjRmd6GIqB4Ak/3ObgxieSn15p9OMO4wVY a0qL0F6MaamyHC6jDmTdU46k/zVZvweqYdF47OXXwUrankBFVOc= -----END CERTIFICATE-----Generated at Thu Dec 25 11:07:39 2025 by rpki-client