This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/e1fd351e-2bd7-4191-9106-53f875016f0e/0/BFE0F552446CE5C263D85414C72E8DD74CBC5EE9.mft File: BFE0F552446CE5C263D85414C72E8DD74CBC5EE9.mft (raw, json) Hash identifier: 5XoUtSH6ZltSgPWQwGtN+WdhrElcAqnQQR6hEtZjME0= Subject key identifier: F7:8C:F6:BE:C9:51:4E:EB:40:74:00:C9:57:24:03:0D:87:0E:B9:59 Authority key identifier: BF:E0:F5:52:44:6C:E5:C2:63:D8:54:14:C7:2E:8D:D7:4C:BC:5E:E9 Certificate issuer: /CN=BFE0F552446CE5C263D85414C72E8DD74CBC5EE9 Certificate serial: 422D5CEC9225E3507A1FF985667C33FF4D41869F Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BFE0F552446CE5C263D85414C72E8DD74CBC5EE9.cer Subject info access: rsync://repo-rpki.idnic.net/repo/e1fd351e-2bd7-4191-9106-53f875016f0e/0/BFE0F552446CE5C263D85414C72E8DD74CBC5EE9.mft Manifest number: 032E Signing time: Thu 18 Dec 2025 00:11:55 +0000 Manifest this update: Thu 18 Dec 2025 00:06:55 +0000 Manifest next update: Sun 21 Dec 2025 06:56:55 +0000 Files and hashes: 1: BFE0F552446CE5C263D85414C72E8DD74CBC5EE9.crl (hash: vH5wZPwQEiQgD7hsdGCLYk9/myCSRNLkq55RK5kA2w4=) 2: 3130332e3231302e3131362e302f32342d3234203d3e203634303234.roa (hash: yMj7uFI234xCcazZ5UUXhaecBl1WVAuun+atXN8IBlQ=) 3: 3130332e3231302e3131392e302f32342d3234203d3e203634303234.roa (hash: Ytr8LGrcIz/5Ip4kUA/P8vtfeNKUZXIGazNVZyLvVDY=) 4: 3130332e3231302e3131372e302f32342d3234203d3e203634303234.roa (hash: rvryrNsii8p5FWEuXQ/ZA1z3QEXlw8MezShqHde9HFo=) 5: 3130332e3231302e3131382e302f32342d3234203d3e203634303234.roa (hash: tavtmJbAGyPVyKNkS1yIlicvomGLqf7gKFQGKl+8wbg=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/e1fd351e-2bd7-4191-9106-53f875016f0e/0/BFE0F552446CE5C263D85414C72E8DD74CBC5EE9.crl rsync://repo-rpki.idnic.net/repo/e1fd351e-2bd7-4191-9106-53f875016f0e/0/BFE0F552446CE5C263D85414C72E8DD74CBC5EE9.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BFE0F552446CE5C263D85414C72E8DD74CBC5EE9.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 21 Dec 2025 06:56:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 42:2d:5c:ec:92:25:e3:50:7a:1f:f9:85:66:7c:33:ff:4d:41:86:9f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BFE0F552446CE5C263D85414C72E8DD74CBC5EE9 Validity Not Before: Dec 18 00:06:55 2025 GMT Not After : Dec 21 06:56:55 2025 GMT Subject: CN=F78CF6BEC9514EEB407400C95724030D870EB959 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:ca:53:3c:87:0b:d5:0e:01:f8:2e:72:21:1b: cf:a0:53:d1:17:26:c3:b2:65:1d:d4:70:09:44:af: fe:74:25:83:26:0e:b5:af:43:6a:fd:4e:dd:c3:01: b2:06:e7:26:14:e3:4a:48:01:89:67:9e:12:93:e7: 2c:0f:88:1d:05:52:dc:c1:bb:82:07:42:29:2e:ec: 5d:79:a5:21:48:87:ed:41:f1:84:de:85:48:f1:9d: 72:cb:e5:27:97:88:be:77:9f:e0:bf:66:f8:1d:af: 7b:af:bf:19:3f:0c:80:47:cc:59:8d:89:f1:b7:2c: 82:f6:90:16:02:71:0b:d9:32:e3:94:4c:1e:0c:9b: 0d:2e:3c:22:0c:63:17:30:86:a3:63:4c:6d:12:d8: 74:81:ae:db:30:77:7a:6d:a4:a8:78:42:a1:c6:58: 78:2d:f1:55:a9:ed:98:c7:d9:91:9b:cf:cd:58:1c: 64:76:85:2c:c7:38:4a:18:f8:6f:05:c0:8a:6a:29: e1:51:68:fe:30:98:5a:6c:f8:81:8a:9f:bd:f9:72: af:d6:f5:cd:08:d3:2b:82:f7:e2:83:f6:26:4b:96: ae:04:56:f9:bd:f4:bf:1e:98:ab:35:c6:ac:f7:83: 4f:ca:59:3d:d5:66:9f:d8:57:44:ac:2b:de:95:db: df:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F7:8C:F6:BE:C9:51:4E:EB:40:74:00:C9:57:24:03:0D:87:0E:B9:59 X509v3 Authority Key Identifier: keyid:BF:E0:F5:52:44:6C:E5:C2:63:D8:54:14:C7:2E:8D:D7:4C:BC:5E:E9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/e1fd351e-2bd7-4191-9106-53f875016f0e/0/BFE0F552446CE5C263D85414C72E8DD74CBC5EE9.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BFE0F552446CE5C263D85414C72E8DD74CBC5EE9.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e1fd351e-2bd7-4191-9106-53f875016f0e/0/BFE0F552446CE5C263D85414C72E8DD74CBC5EE9.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2f:3f:04:aa:82:15:42:0d:61:14:31:44:99:8d:87:1d:f0:2c: a1:7a:88:2f:5e:49:df:7b:08:65:19:bb:a1:2f:88:05:81:2c: cd:c6:c7:d3:51:0a:93:4a:43:3b:9d:82:84:95:02:be:a0:a0: c9:44:ce:0e:87:d8:35:07:a6:9b:4f:e3:19:fd:c0:ff:2d:4c: ee:52:7e:22:fb:7e:a5:a7:f8:73:7c:c5:07:91:84:35:c4:37: 66:7a:bc:b8:c0:33:35:11:e1:53:69:f7:52:ef:b8:d0:58:31: ce:1b:38:eb:b9:d5:49:5b:18:1f:41:71:b3:67:3a:3b:fb:78: 4b:5f:d0:81:fa:89:9a:0f:6c:1f:6b:c8:8c:06:2e:91:55:9f: 61:d6:03:db:34:b4:23:8c:42:49:32:b1:6e:9f:4a:22:dc:27: 7f:b4:38:9f:52:36:51:0e:03:93:40:45:75:78:21:c5:56:46: 93:61:83:3b:ed:25:e4:9c:2f:58:d2:c3:c1:82:57:c5:3f:6c: b8:e3:53:64:e5:e5:fc:0f:d3:63:95:f0:5a:b3:7a:4d:ec:ac: 6a:39:fe:0e:ac:b3:ed:00:49:5c:c9:5a:fb:f1:6b:c8:84:f9: 75:1e:96:6c:93:9a:72:57:f2:91:42:cd:d2:ab:f0:37:1f:8c: 95:99:95:d2 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUQi1c7JIl41B6H/mFZnwz/01Bhp8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkZFMEY1NTI0NDZDRTVDMjYzRDg1NDE0QzcyRThERDc0 Q0JDNUVFOTAeFw0yNTEyMTgwMDA2NTVaFw0yNTEyMjEwNjU2NTVaMDMxMTAvBgNV BAMTKEY3OENGNkJFQzk1MTRFRUI0MDc0MDBDOTU3MjQwMzBEODcwRUI5NTkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDBylM8hwvVDgH4LnIhG8+gU9EX JsOyZR3UcAlEr/50JYMmDrWvQ2r9Tt3DAbIG5yYU40pIAYlnnhKT5ywPiB0FUtzB u4IHQiku7F15pSFIh+1B8YTehUjxnXLL5SeXiL53n+C/Zvgdr3uvvxk/DIBHzFmN ifG3LIL2kBYCcQvZMuOUTB4Mmw0uPCIMYxcwhqNjTG0S2HSBrtswd3ptpKh4QqHG WHgt8VWp7ZjH2ZGbz81YHGR2hSzHOEoY+G8FwIpqKeFRaP4wmFps+IGKn735cq/W 9c0I0yuC9+KD9iZLlq4EVvm99L8emKs1xqz3g0/KWT3VZp/YV0SsK96V298FAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU94z2vslRTutAdADJVyQDDYcOuVkwHwYDVR0j BBgwFoAUv+D1UkRs5cJj2FQUxy6N10y8XukwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l MWZkMzUxZS0yYmQ3LTQxOTEtOTEwNi01M2Y4NzUwMTZmMGUvMC9CRkUwRjU1MjQ0 NkNFNUMyNjNEODU0MTRDNzJFOERENzRDQkM1RUU5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQkZFMEY1NTI0NDZDRTVDMjYzRDg1NDE0QzcyRThERDc0Q0JD NUVFOS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZTFmZDM1MWUtMmJkNy00MTkxLTkx MDYtNTNmODc1MDE2ZjBlLzAvQkZFMEY1NTI0NDZDRTVDMjYzRDg1NDE0QzcyRThE RDc0Q0JDNUVFOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAC8/BKqCFUINYRQxRJmNhx3wLKF6iC9eSd97 CGUZu6EviAWBLM3Gx9NRCpNKQzudgoSVAr6goMlEzg6H2DUHpptP4xn9wP8tTO5S fiL7fqWn+HN8xQeRhDXEN2Z6vLjAMzUR4VNp91LvuNBYMc4bOOu51UlbGB9BcbNn Ojv7eEtf0IH6iZoPbB9ryIwGLpFVn2HWA9s0tCOMQkkysW6fSiLcJ3+0OJ9SNlEO A5NARXV4IcVWRpNhgzvtJeScL1jSw8GCV8U/bLjjU2Tl5fwP02OV8Fqzek3srGo5 /g6ss+0ASVzJWvvxa8iE+XUelmyTmnJX8pFCzdKr8DcfjJWZldI= -----END CERTIFICATE-----Generated at Fri Dec 19 11:19:01 2025 by rpki-client