This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/e1fd351e-2bd7-4191-9106-53f875016f0e/0/BFE0F552446CE5C263D85414C72E8DD74CBC5EE9.mft File: BFE0F552446CE5C263D85414C72E8DD74CBC5EE9.mft (raw, json) Hash identifier: cQm6pobmgtLL9UyZ/5hAWVcMwhBoYpkjJqywKbiH3WM= Subject key identifier: 2C:F4:78:6B:D4:D4:DE:85:E5:56:2E:9C:A5:51:46:8E:94:31:A9:EA Authority key identifier: BF:E0:F5:52:44:6C:E5:C2:63:D8:54:14:C7:2E:8D:D7:4C:BC:5E:E9 Certificate issuer: /CN=BFE0F552446CE5C263D85414C72E8DD74CBC5EE9 Certificate serial: 58EE72CAE9A8656B9854367BBCE725F2B7460039 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BFE0F552446CE5C263D85414C72E8DD74CBC5EE9.cer Subject info access: rsync://repo-rpki.idnic.net/repo/e1fd351e-2bd7-4191-9106-53f875016f0e/0/BFE0F552446CE5C263D85414C72E8DD74CBC5EE9.mft Manifest number: 032F Signing time: Sat 20 Dec 2025 07:02:32 +0000 Manifest this update: Sat 20 Dec 2025 06:57:32 +0000 Manifest next update: Tue 23 Dec 2025 11:36:32 +0000 Files and hashes: 1: 3130332e3231302e3131362e302f32342d3234203d3e203634303234.roa (hash: yMj7uFI234xCcazZ5UUXhaecBl1WVAuun+atXN8IBlQ=) 2: 3130332e3231302e3131372e302f32342d3234203d3e203634303234.roa (hash: rvryrNsii8p5FWEuXQ/ZA1z3QEXlw8MezShqHde9HFo=) 3: 3130332e3231302e3131382e302f32342d3234203d3e203634303234.roa (hash: tavtmJbAGyPVyKNkS1yIlicvomGLqf7gKFQGKl+8wbg=) 4: BFE0F552446CE5C263D85414C72E8DD74CBC5EE9.crl (hash: GE+JZJV6AnB7uHBly4z9b6BIX9XTLz0MrPmEyfZcdaU=) 5: 3130332e3231302e3131392e302f32342d3234203d3e203634303234.roa (hash: Ytr8LGrcIz/5Ip4kUA/P8vtfeNKUZXIGazNVZyLvVDY=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/e1fd351e-2bd7-4191-9106-53f875016f0e/0/BFE0F552446CE5C263D85414C72E8DD74CBC5EE9.crl rsync://repo-rpki.idnic.net/repo/e1fd351e-2bd7-4191-9106-53f875016f0e/0/BFE0F552446CE5C263D85414C72E8DD74CBC5EE9.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BFE0F552446CE5C263D85414C72E8DD74CBC5EE9.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 23 Dec 2025 11:36:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 58:ee:72:ca:e9:a8:65:6b:98:54:36:7b:bc:e7:25:f2:b7:46:00:39 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BFE0F552446CE5C263D85414C72E8DD74CBC5EE9 Validity Not Before: Dec 20 06:57:32 2025 GMT Not After : Dec 23 11:36:32 2025 GMT Subject: CN=2CF4786BD4D4DE85E5562E9CA551468E9431A9EA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:45:05:83:d7:54:77:81:25:55:8f:21:5c:6e: 37:e9:bc:71:da:4d:85:bc:7b:5f:1a:0d:b1:93:1e: 3b:a3:54:0a:4a:28:34:9e:cd:0e:7b:b2:1a:e3:d5: 66:9b:ec:88:8e:7b:bd:c6:ea:59:96:bc:40:2f:0d: ce:4d:b3:0b:ee:fa:50:da:34:91:ff:fa:3d:f0:a1: bb:01:e4:a6:13:70:84:4e:ef:d0:cc:ec:02:64:e1: 5e:2e:ff:82:18:40:aa:e3:14:5d:25:fa:fc:a5:1e: b4:0c:a3:cf:07:77:7c:01:93:75:8b:42:73:43:30: 0b:47:90:19:e4:4f:02:51:c6:db:f9:0b:50:d7:7b: b8:0d:5a:53:f5:aa:bf:29:a8:d0:05:a2:e7:5c:04: f7:27:6f:63:68:ef:1f:43:87:7e:11:e8:c7:24:7c: 49:fb:47:68:fd:12:08:42:b5:ff:98:e4:75:38:ec: 1a:9f:32:f9:e4:29:88:91:9d:28:a8:e8:43:78:18: ef:3e:87:80:3d:3c:12:ba:a6:13:e4:77:69:86:09: 67:a3:02:e5:81:c4:04:f4:8b:c3:52:75:00:6d:33: 2b:3c:d4:ca:04:ab:8d:65:6d:f5:7b:2e:f6:d8:a5: d3:9c:c5:88:bf:c6:8a:ac:87:ac:1f:2c:d0:dd:4a: 5a:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:F4:78:6B:D4:D4:DE:85:E5:56:2E:9C:A5:51:46:8E:94:31:A9:EA X509v3 Authority Key Identifier: keyid:BF:E0:F5:52:44:6C:E5:C2:63:D8:54:14:C7:2E:8D:D7:4C:BC:5E:E9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/e1fd351e-2bd7-4191-9106-53f875016f0e/0/BFE0F552446CE5C263D85414C72E8DD74CBC5EE9.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BFE0F552446CE5C263D85414C72E8DD74CBC5EE9.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e1fd351e-2bd7-4191-9106-53f875016f0e/0/BFE0F552446CE5C263D85414C72E8DD74CBC5EE9.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 90:74:12:9f:d7:2e:bb:ed:a8:c6:83:4d:ea:38:7c:62:55:ac: 0c:bb:64:4e:51:4a:17:2a:23:33:b8:33:72:e7:b3:c3:28:6f: ce:e7:fa:25:a4:76:08:d1:33:61:a1:aa:e2:62:de:a6:74:be: f4:4a:e1:ed:69:ca:2d:8c:2a:55:f3:61:ce:43:97:99:c2:b6: 72:b7:9e:b4:9c:ed:b8:3c:62:67:79:e9:39:1b:4b:ff:ea:73: e4:6c:67:8d:4f:26:b8:60:4b:c1:7c:d2:cf:fe:2b:15:01:58: a0:d1:08:5b:42:c5:75:36:e3:f1:a8:2b:8d:cc:6f:09:a5:89: 15:2d:f4:39:a6:73:91:94:13:47:35:94:fb:e6:94:ff:cb:eb: d9:e6:0d:f0:25:b8:e3:17:99:67:59:0d:ad:70:b7:e9:52:96: 1f:ee:f0:5e:a2:70:a8:24:1e:b8:27:ea:ae:fa:8d:a1:21:11: e2:af:c1:63:96:ec:df:09:ba:8f:3f:b1:d8:c0:15:80:19:ff: 50:45:6b:cb:7c:d6:f4:44:47:32:1b:71:35:ba:8b:0c:19:3c: f4:57:a7:60:44:4e:fe:70:af:1a:2b:1b:0b:22:4c:65:f0:b3: bb:bf:8c:51:bb:84:7e:c2:31:e0:45:f7:4b:8e:b9:e0:c4:40: a3:32:70:e5 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUWO5yyumoZWuYVDZ7vOcl8rdGADkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkZFMEY1NTI0NDZDRTVDMjYzRDg1NDE0QzcyRThERDc0 Q0JDNUVFOTAeFw0yNTEyMjAwNjU3MzJaFw0yNTEyMjMxMTM2MzJaMDMxMTAvBgNV BAMTKDJDRjQ3ODZCRDRENERFODVFNTU2MkU5Q0E1NTE0NjhFOTQzMUE5RUEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDiRQWD11R3gSVVjyFcbjfpvHHa TYW8e18aDbGTHjujVApKKDSezQ57shrj1Wab7IiOe73G6lmWvEAvDc5Nswvu+lDa NJH/+j3wobsB5KYTcIRO79DM7AJk4V4u/4IYQKrjFF0l+vylHrQMo88Hd3wBk3WL QnNDMAtHkBnkTwJRxtv5C1DXe7gNWlP1qr8pqNAFoudcBPcnb2No7x9Dh34R6Mck fEn7R2j9EghCtf+Y5HU47BqfMvnkKYiRnSio6EN4GO8+h4A9PBK6phPkd2mGCWej AuWBxAT0i8NSdQBtMys81MoEq41lbfV7LvbYpdOcxYi/xoqsh6wfLNDdSlqpAgMB AAGjggI8MIICODAdBgNVHQ4EFgQULPR4a9TU3oXlVi6cpVFGjpQxqeowHwYDVR0j BBgwFoAUv+D1UkRs5cJj2FQUxy6N10y8XukwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l MWZkMzUxZS0yYmQ3LTQxOTEtOTEwNi01M2Y4NzUwMTZmMGUvMC9CRkUwRjU1MjQ0 NkNFNUMyNjNEODU0MTRDNzJFOERENzRDQkM1RUU5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQkZFMEY1NTI0NDZDRTVDMjYzRDg1NDE0QzcyRThERDc0Q0JD NUVFOS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZTFmZDM1MWUtMmJkNy00MTkxLTkx MDYtNTNmODc1MDE2ZjBlLzAvQkZFMEY1NTI0NDZDRTVDMjYzRDg1NDE0QzcyRThE RDc0Q0JDNUVFOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJB0Ep/XLrvtqMaDTeo4fGJVrAy7ZE5RShcq IzO4M3Lns8Mob87n+iWkdgjRM2GhquJi3qZ0vvRK4e1pyi2MKlXzYc5Dl5nCtnK3 nrSc7bg8Ymd56TkbS//qc+RsZ41PJrhgS8F80s/+KxUBWKDRCFtCxXU24/GoK43M bwmliRUt9Dmmc5GUE0c1lPvmlP/L69nmDfAluOMXmWdZDa1wt+lSlh/u8F6icKgk Hrgn6q76jaEhEeKvwWOW7N8Juo8/sdjAFYAZ/1BFa8t81vRERzIbcTW6iwwZPPRX p2BETv5wrxorGwsiTGXws7u/jFG7hH7CMeBF90uOueDEQKMycOU= -----END CERTIFICATE-----Generated at Mon Dec 22 06:32:18 2025 by rpki-client