This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/f7418013-1679-496b-80f6-2d05cc5be72f/0/BC8BD5485C9B01D176F3FAA8F381E5ECED8CD3B8.mft File: BC8BD5485C9B01D176F3FAA8F381E5ECED8CD3B8.mft (raw, json) Hash identifier: UFwpKzqCnKP+Uh2Wo67nLsWn22786QyGXC54SqnWuFQ= Subject key identifier: 3D:9C:9E:78:0F:DC:70:0F:8F:46:61:7A:DA:4D:5F:CE:61:52:32:DA Authority key identifier: BC:8B:D5:48:5C:9B:01:D1:76:F3:FA:A8:F3:81:E5:EC:ED:8C:D3:B8 Certificate issuer: /CN=BC8BD5485C9B01D176F3FAA8F381E5ECED8CD3B8 Certificate serial: 4090ED809558DD4D3DAD0EC76C7BB71ABE5DD1FA Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BC8BD5485C9B01D176F3FAA8F381E5ECED8CD3B8.cer Subject info access: rsync://repo-rpki.idnic.net/repo/f7418013-1679-496b-80f6-2d05cc5be72f/0/BC8BD5485C9B01D176F3FAA8F381E5ECED8CD3B8.mft Manifest number: 0235 Signing time: Fri 19 Dec 2025 00:50:45 +0000 Manifest this update: Fri 19 Dec 2025 00:45:45 +0000 Manifest next update: Mon 22 Dec 2025 08:52:45 +0000 Files and hashes: 1: 3130332e37332e3139322e302f32342d3234203d3e20313439393434.roa (hash: kygHr26DqsY5AyJfGENb/AiH0P8fZ+v+8xcM4ekCjqw=) 2: 3130332e37332e3139332e302f32342d3234203d3e20313439393434.roa (hash: 0uJHSCFsdwdZP1NKhkt1f+yFu68JksGMAuDEtBg71VE=) 3: BC8BD5485C9B01D176F3FAA8F381E5ECED8CD3B8.crl (hash: eHQoWko1XGz2yIRTxFwlRMX0J2ggJH0NsMOPge5mA4M=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/f7418013-1679-496b-80f6-2d05cc5be72f/0/BC8BD5485C9B01D176F3FAA8F381E5ECED8CD3B8.crl rsync://repo-rpki.idnic.net/repo/f7418013-1679-496b-80f6-2d05cc5be72f/0/BC8BD5485C9B01D176F3FAA8F381E5ECED8CD3B8.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BC8BD5485C9B01D176F3FAA8F381E5ECED8CD3B8.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 22 Dec 2025 03:43:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 40:90:ed:80:95:58:dd:4d:3d:ad:0e:c7:6c:7b:b7:1a:be:5d:d1:fa Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BC8BD5485C9B01D176F3FAA8F381E5ECED8CD3B8 Validity Not Before: Dec 19 00:45:45 2025 GMT Not After : Dec 22 08:52:45 2025 GMT Subject: CN=3D9C9E780FDC700F8F46617ADA4D5FCE615232DA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:d9:d1:83:ed:e6:cf:87:33:ad:da:cd:53:b5: d5:4b:7b:6d:3e:17:2b:f9:3e:93:b3:17:54:55:63: 29:96:3d:50:a0:e8:42:bd:47:63:99:67:eb:df:1e: 53:bc:fe:17:18:f4:a9:c8:6d:7b:0c:0f:f8:e3:5e: 4d:27:3e:f3:ea:36:3d:09:9e:4b:1d:1e:33:a2:1a: 3f:db:5e:ef:8c:a0:e4:42:04:aa:9f:e2:c4:d1:47: 62:26:8d:1a:c0:53:42:f3:f4:54:39:66:70:b3:3f: 8e:85:f2:f5:1f:09:46:e4:85:b1:f4:97:2b:fa:f6: 1d:34:1b:8a:7d:bb:af:19:f9:9b:47:00:6c:8b:f9: 6a:7f:1c:05:fd:69:a6:16:ba:54:1e:9c:11:88:2a: 09:d3:73:00:e2:6b:52:51:e1:ca:c5:04:e4:a5:28: c3:4b:d6:c7:b2:dd:5b:6d:2e:24:a9:05:8d:a2:30: 40:a2:8c:59:12:19:04:a0:33:2a:42:23:25:d0:64: 5e:34:8c:c3:8f:f5:9b:92:ff:4e:86:4f:fd:ed:ba: 20:56:84:9b:a6:1f:e7:e5:40:6f:3b:a3:ef:3b:b3: f6:ea:f1:31:a3:36:c0:d2:d8:9a:fc:2d:c4:b2:7a: f3:61:ab:6e:91:06:09:da:0d:be:47:f9:99:79:25: a9:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:9C:9E:78:0F:DC:70:0F:8F:46:61:7A:DA:4D:5F:CE:61:52:32:DA X509v3 Authority Key Identifier: keyid:BC:8B:D5:48:5C:9B:01:D1:76:F3:FA:A8:F3:81:E5:EC:ED:8C:D3:B8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/f7418013-1679-496b-80f6-2d05cc5be72f/0/BC8BD5485C9B01D176F3FAA8F381E5ECED8CD3B8.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BC8BD5485C9B01D176F3FAA8F381E5ECED8CD3B8.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f7418013-1679-496b-80f6-2d05cc5be72f/0/BC8BD5485C9B01D176F3FAA8F381E5ECED8CD3B8.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 26:40:c3:6f:1b:c7:fb:5a:68:3f:ec:73:51:40:bc:2d:96:7f: e4:24:8c:f1:25:18:db:c5:56:3b:6f:36:70:d0:eb:c7:91:87: 25:a3:1f:47:c2:db:2a:8e:04:04:0c:9c:3c:d6:fc:aa:2a:9b: 16:46:b9:83:ce:51:fd:79:4c:12:f6:78:fa:b4:b5:84:de:56: 91:be:9b:b0:77:6b:f9:b8:21:69:c1:ac:f2:ba:c9:a9:c7:1b: 6a:76:58:1e:a4:4a:15:dc:cc:92:4d:2f:39:d4:01:7e:ac:ab: ac:e6:b8:c2:cd:c3:14:69:d2:01:cf:64:5e:6d:e2:49:0c:a9: e7:81:04:7e:5f:bb:28:f6:30:4b:c8:cb:ca:18:3b:48:72:ac: 9b:32:84:0a:6d:12:f3:c6:41:16:19:6a:ee:61:26:5d:55:e9: f5:e6:6d:79:a0:7e:89:99:29:08:3b:e0:f9:89:70:59:72:4b: 27:d9:43:f2:31:47:00:26:ca:9a:81:72:92:5d:23:2c:fa:05: 3c:46:32:a2:84:50:03:e0:2a:31:7c:83:3f:1a:aa:50:85:76: 45:1d:a7:d0:5c:c3:07:3b:ef:f1:6c:b3:2d:c2:c2:80:b6:0d: fb:45:4e:f2:94:f3:dd:58:21:ee:fc:aa:92:d5:2c:80:de:85: 78:a5:0a:bc -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUQJDtgJVY3U09rQ7HbHu3Gr5d0fowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkM4QkQ1NDg1QzlCMDFEMTc2RjNGQUE4RjM4MUU1RUNF RDhDRDNCODAeFw0yNTEyMTkwMDQ1NDVaFw0yNTEyMjIwODUyNDVaMDMxMTAvBgNV BAMTKDNEOUM5RTc4MEZEQzcwMEY4RjQ2NjE3QURBNEQ1RkNFNjE1MjMyREEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCf2dGD7ebPhzOt2s1TtdVLe20+ Fyv5PpOzF1RVYymWPVCg6EK9R2OZZ+vfHlO8/hcY9KnIbXsMD/jjXk0nPvPqNj0J nksdHjOiGj/bXu+MoORCBKqf4sTRR2ImjRrAU0Lz9FQ5ZnCzP46F8vUfCUbkhbH0 lyv69h00G4p9u68Z+ZtHAGyL+Wp/HAX9aaYWulQenBGIKgnTcwDia1JR4crFBOSl KMNL1sey3VttLiSpBY2iMECijFkSGQSgMypCIyXQZF40jMOP9ZuS/06GT/3tuiBW hJumH+flQG87o+87s/bq8TGjNsDS2Jr8LcSyevNhq26RBgnaDb5H+Zl5JamDAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUPZyeeA/ccA+PRmF62k1fzmFSMtowHwYDVR0j BBgwFoAUvIvVSFybAdF28/qo84Hl7O2M07gwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m NzQxODAxMy0xNjc5LTQ5NmItODBmNi0yZDA1Y2M1YmU3MmYvMC9CQzhCRDU0ODVD OUIwMUQxNzZGM0ZBQThGMzgxRTVFQ0VEOENEM0I4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQkM4QkQ1NDg1QzlCMDFEMTc2RjNGQUE4RjM4MUU1RUNFRDhD RDNCOC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZjc0MTgwMTMtMTY3OS00OTZiLTgw ZjYtMmQwNWNjNWJlNzJmLzAvQkM4QkQ1NDg1QzlCMDFEMTc2RjNGQUE4RjM4MUU1 RUNFRDhDRDNCOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACZAw28bx/taaD/sc1FAvC2Wf+QkjPElGNvF VjtvNnDQ68eRhyWjH0fC2yqOBAQMnDzW/KoqmxZGuYPOUf15TBL2ePq0tYTeVpG+ m7B3a/m4IWnBrPK6yanHG2p2WB6kShXczJJNLznUAX6sq6zmuMLNwxRp0gHPZF5t 4kkMqeeBBH5fuyj2MEvIy8oYO0hyrJsyhAptEvPGQRYZau5hJl1V6fXmbXmgfomZ KQg74PmJcFlySyfZQ/IxRwAmypqBcpJdIyz6BTxGMqKEUAPgKjF8gz8aqlCFdkUd p9Bcwwc77/Fssy3CwoC2DftFTvKU891YIe78qpLVLIDehXilCrw= -----END CERTIFICATE-----Generated at Fri Dec 19 18:17:06 2025 by rpki-client