This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/f8fca42f-836a-40ec-a76f-b604711f3364/0/BEA8C6D5F4B424A9EABFC2F68F71B0505B7E3641.mft File: BEA8C6D5F4B424A9EABFC2F68F71B0505B7E3641.mft (raw, json) Hash identifier: LX5+Mh1YKsLPPHyeqAajaccf+eF6FYP+1uuXQS99aXg= Subject key identifier: 46:05:24:3B:46:09:F0:62:5C:1F:4F:66:D5:20:CD:46:F7:01:35:CA Authority key identifier: BE:A8:C6:D5:F4:B4:24:A9:EA:BF:C2:F6:8F:71:B0:50:5B:7E:36:41 Certificate issuer: /CN=BEA8C6D5F4B424A9EABFC2F68F71B0505B7E3641 Certificate serial: 793C47B0F90184933A5D50B088BD08442F05ADDF Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BEA8C6D5F4B424A9EABFC2F68F71B0505B7E3641.cer Subject info access: rsync://repo-rpki.idnic.net/repo/f8fca42f-836a-40ec-a76f-b604711f3364/0/BEA8C6D5F4B424A9EABFC2F68F71B0505B7E3641.mft Manifest number: FF Signing time: Thu 18 Dec 2025 08:01:57 +0000 Manifest this update: Thu 18 Dec 2025 07:56:57 +0000 Manifest next update: Sun 21 Dec 2025 19:35:57 +0000 Files and hashes: 1: 3130332e35382e3134362e302f32342d3234203d3e20313333383335.roa (hash: RZTZbSxb2PRYobjmO198JK6HQHDPb0oKEJ95ldcpw5Y=) 2: BEA8C6D5F4B424A9EABFC2F68F71B0505B7E3641.crl (hash: nMT/2f/RVSD9Xq5vhfpoNVz0Xqo+F8TDz7j9CgF2w8w=) 3: 323030313a6466343a353430303a3a2f34382d3438203d3e20313333383335.roa (hash: WVWkZoK2slUp5FXFBlvV70xmkvB8Xi8yr0ufb6QFcL0=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/f8fca42f-836a-40ec-a76f-b604711f3364/0/BEA8C6D5F4B424A9EABFC2F68F71B0505B7E3641.crl rsync://repo-rpki.idnic.net/repo/f8fca42f-836a-40ec-a76f-b604711f3364/0/BEA8C6D5F4B424A9EABFC2F68F71B0505B7E3641.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BEA8C6D5F4B424A9EABFC2F68F71B0505B7E3641.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 21 Dec 2025 19:35:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 79:3c:47:b0:f9:01:84:93:3a:5d:50:b0:88:bd:08:44:2f:05:ad:df Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BEA8C6D5F4B424A9EABFC2F68F71B0505B7E3641 Validity Not Before: Dec 18 07:56:57 2025 GMT Not After : Dec 21 19:35:57 2025 GMT Subject: CN=4605243B4609F0625C1F4F66D520CD46F70135CA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:e5:55:d0:cf:93:11:41:31:ab:4f:6f:83:d2: 2c:03:e7:c2:78:73:7a:41:b2:99:d3:de:ea:ba:1c: 42:31:77:f6:0f:c9:01:dc:11:1f:ce:9b:5f:24:5a: 12:fd:d9:ac:06:50:84:44:d6:a0:3c:b0:14:dd:6b: 3e:6b:cb:ce:d5:6b:d2:00:a7:08:c0:c7:6f:08:90: 76:4d:99:ee:3e:50:bb:1b:7d:62:b8:d7:fe:57:69: 90:f1:95:45:8a:4a:36:56:a3:df:f3:a0:b4:db:8a: 83:bd:d7:83:8f:e4:b1:ba:08:96:d1:86:cb:3f:ef: 8b:f8:8e:52:70:41:f9:86:8c:05:b0:bd:b1:d6:a1: 22:ce:0d:d5:2f:0b:32:37:58:d7:a7:74:14:20:79: b6:fd:01:39:fd:69:d7:71:d9:b4:00:a1:2e:ce:df: e6:af:5c:87:b5:25:4d:56:4d:72:6b:7f:39:15:2d: aa:95:ed:e5:b5:78:cf:16:da:e8:33:51:ba:35:7b: f0:a4:24:33:e5:cd:7a:cd:5d:fd:f0:57:95:0c:34: 37:f9:9f:c6:06:b5:be:d6:42:8d:1e:43:60:38:3e: 7f:07:39:bb:43:18:6b:6a:23:05:6d:1b:1d:82:91: 2a:b0:52:b8:f9:5f:cc:25:ab:44:da:cf:7e:0c:74: 26:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 46:05:24:3B:46:09:F0:62:5C:1F:4F:66:D5:20:CD:46:F7:01:35:CA X509v3 Authority Key Identifier: keyid:BE:A8:C6:D5:F4:B4:24:A9:EA:BF:C2:F6:8F:71:B0:50:5B:7E:36:41 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/f8fca42f-836a-40ec-a76f-b604711f3364/0/BEA8C6D5F4B424A9EABFC2F68F71B0505B7E3641.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BEA8C6D5F4B424A9EABFC2F68F71B0505B7E3641.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f8fca42f-836a-40ec-a76f-b604711f3364/0/BEA8C6D5F4B424A9EABFC2F68F71B0505B7E3641.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 53:49:ba:2e:3e:31:69:26:da:98:51:4e:16:4d:ca:94:33:f3: 11:40:e7:01:6b:f6:ef:a7:bd:29:6e:bb:b0:b3:09:f3:1a:17: 75:a6:17:5d:b7:87:29:63:93:fb:3f:db:ad:0c:25:45:30:46: 4d:50:ce:73:b4:c2:c0:af:6e:9a:b5:f9:cd:79:e4:1e:09:42: 3d:d1:8d:9a:bb:00:99:6f:a9:86:dd:09:fb:1f:8e:ba:71:4c: 69:3f:7d:72:d2:3d:75:54:b0:1a:c6:1c:4f:d1:52:46:ea:c9: 4a:b0:cd:f1:0e:37:3a:7a:f3:a9:06:5a:81:1d:b0:43:05:18: 6d:9e:d8:e9:02:af:e5:6c:bc:95:06:e7:69:67:d3:9d:91:4b: 3f:cb:bb:54:e8:7c:cd:fa:4b:e4:bf:58:dd:0d:b0:23:b0:f7: 9f:a3:e5:5f:98:96:03:9e:1d:9d:d6:3c:89:fe:45:21:f2:f9: 39:03:eb:78:b3:c9:e6:6e:97:f0:28:03:b9:7a:3c:74:16:00: 66:58:7d:42:e8:51:79:b8:81:8d:d0:89:33:d4:0d:49:10:38: cb:ec:99:b8:9b:4a:de:fd:eb:21:ce:48:a2:21:e0:07:ab:f0: 48:c0:c3:03:10:1b:41:b2:2f:e4:16:74:58:a3:4a:a0:5d:27: 6a:7f:51:58 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUeTxHsPkBhJM6XVCwiL0IRC8Frd8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkVBOEM2RDVGNEI0MjRBOUVBQkZDMkY2OEY3MUIwNTA1 QjdFMzY0MTAeFw0yNTEyMTgwNzU2NTdaFw0yNTEyMjExOTM1NTdaMDMxMTAvBgNV BAMTKDQ2MDUyNDNCNDYwOUYwNjI1QzFGNEY2NkQ1MjBDRDQ2RjcwMTM1Q0EwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCx5VXQz5MRQTGrT2+D0iwD58J4 c3pBspnT3uq6HEIxd/YPyQHcER/Om18kWhL92awGUIRE1qA8sBTdaz5ry87Va9IA pwjAx28IkHZNme4+ULsbfWK41/5XaZDxlUWKSjZWo9/zoLTbioO914OP5LG6CJbR hss/74v4jlJwQfmGjAWwvbHWoSLODdUvCzI3WNendBQgebb9ATn9addx2bQAoS7O 3+avXIe1JU1WTXJrfzkVLaqV7eW1eM8W2ugzUbo1e/CkJDPlzXrNXf3wV5UMNDf5 n8YGtb7WQo0eQ2A4Pn8HObtDGGtqIwVtGx2CkSqwUrj5X8wlq0Taz34MdCb7AgMB AAGjggI8MIICODAdBgNVHQ4EFgQURgUkO0YJ8GJcH09m1SDNRvcBNcowHwYDVR0j BBgwFoAUvqjG1fS0JKnqv8L2j3GwUFt+NkEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m OGZjYTQyZi04MzZhLTQwZWMtYTc2Zi1iNjA0NzExZjMzNjQvMC9CRUE4QzZENUY0 QjQyNEE5RUFCRkMyRjY4RjcxQjA1MDVCN0UzNjQxLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQkVBOEM2RDVGNEI0MjRBOUVBQkZDMkY2OEY3MUIwNTA1QjdF MzY0MS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZjhmY2E0MmYtODM2YS00MGVjLWE3 NmYtYjYwNDcxMWYzMzY0LzAvQkVBOEM2RDVGNEI0MjRBOUVBQkZDMkY2OEY3MUIw NTA1QjdFMzY0MS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFNJui4+MWkm2phRThZNypQz8xFA5wFr9u+n vSluu7CzCfMaF3WmF123hyljk/s/260MJUUwRk1QznO0wsCvbpq1+c155B4JQj3R jZq7AJlvqYbdCfsfjrpxTGk/fXLSPXVUsBrGHE/RUkbqyUqwzfEONzp686kGWoEd sEMFGG2e2OkCr+VsvJUG52ln052RSz/Lu1TofM36S+S/WN0NsCOw95+j5V+YlgOe HZ3WPIn+RSHy+TkD63izyeZul/AoA7l6PHQWAGZYfULoUXm4gY3QiTPUDUkQOMvs mbibSt796yHOSKIh4Aer8EjAwwMQG0GyL+QWdFijSqBdJ2p/UVg= -----END CERTIFICATE-----Generated at Fri Dec 19 11:16:53 2025 by rpki-client