This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/f86a13bd-b79a-450e-9be3-3d5a03ab93b1/0/BC0ECFDDD081CE5132BEC9CFDC1A390A9AF3BCBE.mft File: BC0ECFDDD081CE5132BEC9CFDC1A390A9AF3BCBE.mft (raw, json) Hash identifier: Qi0VJ9m9C42n2UQOTCG/mjz7ANJTJi/Q0gmg3zM1ijQ= Subject key identifier: B0:C8:00:71:E7:C5:92:D5:F1:2B:B9:6B:4A:C4:32:CE:71:FD:5D:06 Authority key identifier: BC:0E:CF:DD:D0:81:CE:51:32:BE:C9:CF:DC:1A:39:0A:9A:F3:BC:BE Certificate issuer: /CN=BC0ECFDDD081CE5132BEC9CFDC1A390A9AF3BCBE Certificate serial: 37DED215EB9ED1D7B4A0C5A67E875661B43B23B2 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BC0ECFDDD081CE5132BEC9CFDC1A390A9AF3BCBE.cer Subject info access: rsync://repo-rpki.idnic.net/repo/f86a13bd-b79a-450e-9be3-3d5a03ab93b1/0/BC0ECFDDD081CE5132BEC9CFDC1A390A9AF3BCBE.mft Manifest number: 0223 Signing time: Tue 16 Dec 2025 19:11:32 +0000 Manifest this update: Tue 16 Dec 2025 19:06:32 +0000 Manifest next update: Sat 20 Dec 2025 04:26:32 +0000 Files and hashes: 1: BC0ECFDDD081CE5132BEC9CFDC1A390A9AF3BCBE.crl (hash: yOueOBPEoQ6ohWx/qb8mMIOS33Iluk5GYR5fqiOraoc=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/f86a13bd-b79a-450e-9be3-3d5a03ab93b1/0/BC0ECFDDD081CE5132BEC9CFDC1A390A9AF3BCBE.crl rsync://repo-rpki.idnic.net/repo/f86a13bd-b79a-450e-9be3-3d5a03ab93b1/0/BC0ECFDDD081CE5132BEC9CFDC1A390A9AF3BCBE.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BC0ECFDDD081CE5132BEC9CFDC1A390A9AF3BCBE.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 20 Dec 2025 04:26:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 37:de:d2:15:eb:9e:d1:d7:b4:a0:c5:a6:7e:87:56:61:b4:3b:23:b2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BC0ECFDDD081CE5132BEC9CFDC1A390A9AF3BCBE Validity Not Before: Dec 16 19:06:32 2025 GMT Not After : Dec 20 04:26:32 2025 GMT Subject: CN=B0C80071E7C592D5F12BB96B4AC432CE71FD5D06 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:61:db:7e:f6:4f:1a:30:48:4a:94:f4:6f:bf: 63:0b:2c:4e:96:c7:a9:65:59:41:9f:f9:57:b7:8b: e6:58:1d:61:bf:02:8c:a2:12:28:ea:dd:72:f9:92: c9:a2:26:c5:c4:79:40:f2:0f:65:ec:32:e3:3e:4b: b0:2e:eb:99:0d:70:2f:f9:d0:f3:01:ae:21:e6:0f: 46:69:6c:9f:05:54:d7:6a:b3:98:45:fb:b6:9c:c3: 4a:cc:e6:5a:08:24:88:50:cc:98:89:8f:b2:63:67: 29:c3:a0:d4:54:7c:61:02:29:9d:c6:dc:c1:2b:80: da:35:e3:72:d4:12:80:64:c5:72:ba:61:66:57:0b: 15:67:15:5c:73:ff:1d:99:f2:df:54:f6:41:8c:c5: 07:51:e6:8a:d8:01:96:3f:cd:ad:c5:e5:3a:25:30: 37:23:07:c1:0b:0e:30:e4:ee:bf:67:56:4c:5b:fe: 33:9b:87:af:25:63:26:e0:aa:bc:68:5f:b9:47:43: 2c:d6:a9:b2:8c:67:83:be:c8:61:aa:ce:74:e6:93: e8:75:72:b9:d2:f8:e2:48:d2:ae:b1:4d:cd:9c:f9: 3d:a9:af:12:1f:a9:21:fb:58:1e:30:26:e7:0e:3f: b8:10:bf:6d:4e:24:dc:de:4e:5e:a9:11:b7:9a:02: 3b:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B0:C8:00:71:E7:C5:92:D5:F1:2B:B9:6B:4A:C4:32:CE:71:FD:5D:06 X509v3 Authority Key Identifier: keyid:BC:0E:CF:DD:D0:81:CE:51:32:BE:C9:CF:DC:1A:39:0A:9A:F3:BC:BE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/f86a13bd-b79a-450e-9be3-3d5a03ab93b1/0/BC0ECFDDD081CE5132BEC9CFDC1A390A9AF3BCBE.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BC0ECFDDD081CE5132BEC9CFDC1A390A9AF3BCBE.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f86a13bd-b79a-450e-9be3-3d5a03ab93b1/0/BC0ECFDDD081CE5132BEC9CFDC1A390A9AF3BCBE.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 58:e8:e4:a6:8d:d7:61:d7:7a:79:71:23:67:5a:e7:e9:5e:3c: c4:31:3f:49:38:a6:31:4a:7a:e3:8a:97:d3:7e:41:33:5d:51: d8:fa:ed:11:17:77:48:61:b1:ab:9b:86:17:82:2d:09:06:82: 62:17:9c:72:73:ea:0c:f1:27:9b:83:f6:b0:75:a6:13:cc:ec: 09:d3:5c:7c:c6:c1:ec:02:fb:a8:59:70:62:e2:c9:e4:6d:da: 50:85:10:de:e8:4b:5a:3e:e0:ce:bd:c1:14:fe:02:93:d1:76: 19:91:da:63:d2:f3:a7:36:11:fc:f2:aa:55:bc:bd:67:15:28: 40:c7:88:88:c2:dd:61:cf:66:5f:40:06:3a:17:20:a1:f1:a4: 31:fb:4d:cf:45:05:f3:83:9d:c6:6b:c3:df:d3:be:d8:29:22: 41:73:cd:36:ec:ce:be:ea:28:59:01:84:99:94:b1:93:43:cf: 71:51:0d:21:58:44:e1:6b:08:e9:7c:ca:48:4e:c4:ac:5d:77: 52:87:f0:15:0d:f8:9b:6c:0d:77:ce:be:74:92:25:f4:af:f8: cd:2c:eb:31:78:fa:23:a7:32:c6:bf:97:39:60:f5:28:d5:55: a2:56:b1:b8:7e:31:17:8d:73:7d:d6:71:e4:bb:9f:2e:aa:d8: 1b:43:e0:39 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUN97SFeue0de0oMWmfodWYbQ7I7IwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkMwRUNGREREMDgxQ0U1MTMyQkVDOUNGREMxQTM5MEE5 QUYzQkNCRTAeFw0yNTEyMTYxOTA2MzJaFw0yNTEyMjAwNDI2MzJaMDMxMTAvBgNV BAMTKEIwQzgwMDcxRTdDNTkyRDVGMTJCQjk2QjRBQzQzMkNFNzFGRDVEMDYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCyYdt+9k8aMEhKlPRvv2MLLE6W x6llWUGf+Ve3i+ZYHWG/AoyiEijq3XL5ksmiJsXEeUDyD2XsMuM+S7Au65kNcC/5 0PMBriHmD0ZpbJ8FVNdqs5hF+7acw0rM5loIJIhQzJiJj7JjZynDoNRUfGECKZ3G 3MErgNo143LUEoBkxXK6YWZXCxVnFVxz/x2Z8t9U9kGMxQdR5orYAZY/za3F5Tol MDcjB8ELDjDk7r9nVkxb/jObh68lYybgqrxoX7lHQyzWqbKMZ4O+yGGqznTmk+h1 crnS+OJI0q6xTc2c+T2prxIfqSH7WB4wJucOP7gQv21OJNzeTl6pEbeaAjujAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUsMgAcefFktXxK7lrSsQyznH9XQYwHwYDVR0j BBgwFoAUvA7P3dCBzlEyvsnP3Bo5CprzvL4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m ODZhMTNiZC1iNzlhLTQ1MGUtOWJlMy0zZDVhMDNhYjkzYjEvMC9CQzBFQ0ZEREQw ODFDRTUxMzJCRUM5Q0ZEQzFBMzkwQTlBRjNCQ0JFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQkMwRUNGREREMDgxQ0U1MTMyQkVDOUNGREMxQTM5MEE5QUYz QkNCRS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZjg2YTEzYmQtYjc5YS00NTBlLTli ZTMtM2Q1YTAzYWI5M2IxLzAvQkMwRUNGREREMDgxQ0U1MTMyQkVDOUNGREMxQTM5 MEE5QUYzQkNCRS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFjo5KaN12HXenlxI2da5+lePMQxP0k4pjFK euOKl9N+QTNdUdj67REXd0hhsaubhheCLQkGgmIXnHJz6gzxJ5uD9rB1phPM7AnT XHzGwewC+6hZcGLiyeRt2lCFEN7oS1o+4M69wRT+ApPRdhmR2mPS86c2EfzyqlW8 vWcVKEDHiIjC3WHPZl9ABjoXIKHxpDH7Tc9FBfODncZrw9/TvtgpIkFzzTbszr7q KFkBhJmUsZNDz3FRDSFYROFrCOl8ykhOxKxdd1KH8BUN+JtsDXfOvnSSJfSv+M0s 6zF4+iOnMsa/lzlg9SjVVaJWsbh+MReNc33WceS7ny6q2BtD4Dk= -----END CERTIFICATE-----Generated at Fri Dec 19 17:55:20 2025 by rpki-client