This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/e6f75021-8368-4481-9269-5980d6f7295e/0/BDB1195D404F153801E5124B65F15BD6EA02C52F.mft File: BDB1195D404F153801E5124B65F15BD6EA02C52F.mft (raw, json) Hash identifier: VBEhx/20yCM8D4lWPDtlRFTwwc5JdKC6ady623sWU2A= Subject key identifier: 4A:3E:55:3D:87:A3:A3:8E:D9:C4:58:3F:D9:30:FB:F8:B4:FB:E1:13 Authority key identifier: BD:B1:19:5D:40:4F:15:38:01:E5:12:4B:65:F1:5B:D6:EA:02:C5:2F Certificate issuer: /CN=BDB1195D404F153801E5124B65F15BD6EA02C52F Certificate serial: 168CAB71B48477793D4A3716CE583F2135BA7D53 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BDB1195D404F153801E5124B65F15BD6EA02C52F.cer Subject info access: rsync://repo-rpki.idnic.net/repo/e6f75021-8368-4481-9269-5980d6f7295e/0/BDB1195D404F153801E5124B65F15BD6EA02C52F.mft Manifest number: 01FA Signing time: Sat 20 Dec 2025 10:01:15 +0000 Manifest this update: Sat 20 Dec 2025 09:56:15 +0000 Manifest next update: Tue 23 Dec 2025 14:04:15 +0000 Files and hashes: 1: BDB1195D404F153801E5124B65F15BD6EA02C52F.crl (hash: oYKy8PjQgqtLkMUSQ2vIogwrCcQIm0oP6RvFym+fNuM=) 2: 3130332e33312e3131382e302f32342d3234203d3e20313530323633.roa (hash: knELQbaTEPHuXbMghBcUKz4fGE1lGdQ7WaV2RTog838=) 3: 3130332e33312e3131392e302f32342d3234203d3e20313530323633.roa (hash: 8d+23ta1YltwoezbqxP6Mlaw6mLGoxMCRijjIiVbtCU=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/e6f75021-8368-4481-9269-5980d6f7295e/0/BDB1195D404F153801E5124B65F15BD6EA02C52F.crl rsync://repo-rpki.idnic.net/repo/e6f75021-8368-4481-9269-5980d6f7295e/0/BDB1195D404F153801E5124B65F15BD6EA02C52F.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BDB1195D404F153801E5124B65F15BD6EA02C52F.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 23 Dec 2025 14:04:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 16:8c:ab:71:b4:84:77:79:3d:4a:37:16:ce:58:3f:21:35:ba:7d:53 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BDB1195D404F153801E5124B65F15BD6EA02C52F Validity Not Before: Dec 20 09:56:15 2025 GMT Not After : Dec 23 14:04:15 2025 GMT Subject: CN=4A3E553D87A3A38ED9C4583FD930FBF8B4FBE113 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:41:b6:6d:7f:6f:ae:b6:51:91:49:49:ac:60: 90:e5:48:d1:cf:6a:19:10:94:40:32:d3:c3:11:0c: 16:18:a9:77:29:6f:f9:83:87:60:41:b8:b7:7d:9d: 9d:b6:7c:68:e3:70:6e:58:33:b9:cf:2e:de:d9:10: 95:2b:1f:8d:ef:fc:5d:88:41:b1:5c:1d:a2:41:ab: a6:16:ad:aa:be:16:db:7b:47:95:37:26:90:7d:89: 13:df:2c:73:c7:32:91:72:da:1e:08:ec:a9:f4:32: ed:47:a2:bb:0a:2a:d0:80:e4:0a:5e:f9:6b:f4:06: 19:1e:1d:bb:53:01:dc:c4:67:4b:9a:c8:a1:43:2e: 85:15:25:b2:e8:55:41:56:d4:fd:79:34:1b:88:98: d3:54:c7:63:fb:07:4a:94:70:f2:f0:98:3a:03:05: d3:a8:89:34:9c:6a:0c:c5:93:4a:91:22:1c:fa:df: 35:0b:63:aa:38:71:55:d7:e4:3d:e5:ed:d7:9a:af: 74:96:97:a9:15:75:af:91:bf:b3:cc:ff:83:24:74: 9f:80:37:24:39:9d:30:d9:c4:0b:4e:59:e0:2b:ae: 16:62:f2:ec:62:15:e2:11:73:cf:aa:ac:1f:2f:ef: 36:b0:fc:2b:20:a9:82:00:0d:fb:3e:37:8b:47:02: 24:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:3E:55:3D:87:A3:A3:8E:D9:C4:58:3F:D9:30:FB:F8:B4:FB:E1:13 X509v3 Authority Key Identifier: keyid:BD:B1:19:5D:40:4F:15:38:01:E5:12:4B:65:F1:5B:D6:EA:02:C5:2F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/e6f75021-8368-4481-9269-5980d6f7295e/0/BDB1195D404F153801E5124B65F15BD6EA02C52F.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BDB1195D404F153801E5124B65F15BD6EA02C52F.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e6f75021-8368-4481-9269-5980d6f7295e/0/BDB1195D404F153801E5124B65F15BD6EA02C52F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 00:e1:68:13:c6:71:ed:82:fd:40:43:73:70:96:d4:ec:1e:f3: 75:92:45:d7:b8:ff:56:65:ad:a9:dd:1d:6b:0f:b6:a7:0a:4e: 11:c6:10:c1:ba:83:8b:04:f1:96:f4:8c:09:68:4a:f7:2e:8a: 52:8a:a4:9c:01:2d:dc:e4:34:ee:cc:eb:48:1c:88:79:ff:dc: 5e:e2:5b:08:38:70:06:f5:d7:2a:2c:eb:b0:74:b8:50:17:1f: 4a:87:2c:54:dc:75:6a:7a:be:4b:58:17:f5:1c:fe:44:ce:0a: d6:51:23:c1:07:bc:dd:43:75:7b:46:ba:47:83:95:6a:b3:f8: 78:59:ab:99:ce:d1:87:fb:45:4f:22:d7:72:29:9c:0c:60:81: 13:4c:0e:71:08:d4:64:30:bb:c8:c7:f5:56:1b:60:f1:a1:21: b1:19:93:fd:1c:7f:57:76:2c:29:12:1e:f7:d2:07:18:0a:d4: df:e7:77:5e:79:ae:8e:55:9c:82:93:1c:a4:28:7b:be:17:eb: ae:58:5f:98:1b:71:cd:24:e2:ec:2a:13:af:78:d3:4d:e2:2a: 08:81:b2:45:34:bc:b6:12:b0:77:05:81:5a:6e:af:d1:76:5a: e1:8e:01:a0:b9:66:28:b9:4e:90:b1:51:c9:d9:99:aa:0b:1e: 90:40:8c:99 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUFoyrcbSEd3k9SjcWzlg/ITW6fVMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkRCMTE5NUQ0MDRGMTUzODAxRTUxMjRCNjVGMTVCRDZF QTAyQzUyRjAeFw0yNTEyMjAwOTU2MTVaFw0yNTEyMjMxNDA0MTVaMDMxMTAvBgNV BAMTKDRBM0U1NTNEODdBM0EzOEVEOUM0NTgzRkQ5MzBGQkY4QjRGQkUxMTMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCoQbZtf2+utlGRSUmsYJDlSNHP ahkQlEAy08MRDBYYqXcpb/mDh2BBuLd9nZ22fGjjcG5YM7nPLt7ZEJUrH43v/F2I QbFcHaJBq6YWraq+Ftt7R5U3JpB9iRPfLHPHMpFy2h4I7Kn0Mu1HorsKKtCA5Ape +Wv0BhkeHbtTAdzEZ0uayKFDLoUVJbLoVUFW1P15NBuImNNUx2P7B0qUcPLwmDoD BdOoiTScagzFk0qRIhz63zULY6o4cVXX5D3l7dear3SWl6kVda+Rv7PM/4MkdJ+A NyQ5nTDZxAtOWeArrhZi8uxiFeIRc8+qrB8v7zaw/CsgqYIADfs+N4tHAiRhAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUSj5VPYejo47ZxFg/2TD7+LT74RMwHwYDVR0j BBgwFoAUvbEZXUBPFTgB5RJLZfFb1uoCxS8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l NmY3NTAyMS04MzY4LTQ0ODEtOTI2OS01OTgwZDZmNzI5NWUvMC9CREIxMTk1RDQw NEYxNTM4MDFFNTEyNEI2NUYxNUJENkVBMDJDNTJGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQkRCMTE5NUQ0MDRGMTUzODAxRTUxMjRCNjVGMTVCRDZFQTAy QzUyRi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZTZmNzUwMjEtODM2OC00NDgxLTky NjktNTk4MGQ2ZjcyOTVlLzAvQkRCMTE5NUQ0MDRGMTUzODAxRTUxMjRCNjVGMTVC RDZFQTAyQzUyRi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAADhaBPGce2C/UBDc3CW1Owe83WSRde4/1Zl randHWsPtqcKThHGEMG6g4sE8Zb0jAloSvcuilKKpJwBLdzkNO7M60gciHn/3F7i Wwg4cAb11yos67B0uFAXH0qHLFTcdWp6vktYF/Uc/kTOCtZRI8EHvN1DdXtGukeD lWqz+HhZq5nO0Yf7RU8i13IpnAxggRNMDnEI1GQwu8jH9VYbYPGhIbEZk/0cf1d2 LCkSHvfSBxgK1N/nd155ro5VnIKTHKQoe74X665YX5gbcc0k4uwqE694003iKgiB skU0vLYSsHcFgVpur9F2WuGOAaC5Zii5TpCxUcnZmaoLHpBAjJk= -----END CERTIFICATE-----Generated at Mon Dec 22 18:59:36 2025 by rpki-client