This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/fae24907-a6f2-4a55-aa6f-18c7db143fe8/0/BD6194D3C25B637B15DAEB654B288A451054ABE0.mft File: BD6194D3C25B637B15DAEB654B288A451054ABE0.mft (raw, json) Hash identifier: v50yYG/XB7GFUqebrEuCSXPS39xWLKZfPcLYSz0Bz4g= Subject key identifier: 41:A6:11:A6:18:B6:C0:67:F0:20:DC:B5:65:C2:23:7C:0C:CE:0C:02 Authority key identifier: BD:61:94:D3:C2:5B:63:7B:15:DA:EB:65:4B:28:8A:45:10:54:AB:E0 Certificate issuer: /CN=BD6194D3C25B637B15DAEB654B288A451054ABE0 Certificate serial: 1F1A495941A26BE99542043DFB4241121A2B4D5D Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BD6194D3C25B637B15DAEB654B288A451054ABE0.cer Subject info access: rsync://repo-rpki.idnic.net/repo/fae24907-a6f2-4a55-aa6f-18c7db143fe8/0/BD6194D3C25B637B15DAEB654B288A451054ABE0.mft Manifest number: 01D4 Signing time: Thu 18 Dec 2025 21:21:38 +0000 Manifest this update: Thu 18 Dec 2025 21:16:38 +0000 Manifest next update: Mon 22 Dec 2025 03:23:38 +0000 Files and hashes: 1: BD6194D3C25B637B15DAEB654B288A451054ABE0.crl (hash: DNeEgfezJCM788mdr5KsN1klbr2nO1fBdMkr6i1Xe7k=) 2: 3130332e37392e3133302e302f32332d3233203d3e20313430343433.roa (hash: RNdh1+r+BNYLHAu4V1jupY7hG6iYrh06nO6HbqG1vXI=) 3: 3130332e37392e3133312e302f32342d3234203d3e20313430343433.roa (hash: 10mUGoiah4HNNhQPC/xIeaHPveRue0pYK34O0LI+OcA=) 4: 3130332e37392e3133302e302f32342d3234203d3e20313430343433.roa (hash: BlB54vUebVCTB7wA7qoqMH+xgyxkQDhZWNMRec/AbvE=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/fae24907-a6f2-4a55-aa6f-18c7db143fe8/0/BD6194D3C25B637B15DAEB654B288A451054ABE0.crl rsync://repo-rpki.idnic.net/repo/fae24907-a6f2-4a55-aa6f-18c7db143fe8/0/BD6194D3C25B637B15DAEB654B288A451054ABE0.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BD6194D3C25B637B15DAEB654B288A451054ABE0.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 22 Dec 2025 03:23:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1f:1a:49:59:41:a2:6b:e9:95:42:04:3d:fb:42:41:12:1a:2b:4d:5d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BD6194D3C25B637B15DAEB654B288A451054ABE0 Validity Not Before: Dec 18 21:16:38 2025 GMT Not After : Dec 22 03:23:38 2025 GMT Subject: CN=41A611A618B6C067F020DCB565C2237C0CCE0C02 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:6b:26:ec:87:3f:32:32:fb:bd:eb:74:81:4c: 1e:9f:c0:1c:35:dd:58:3a:a3:75:b1:33:85:fd:38: ce:58:5b:2b:82:38:cb:09:78:52:7b:b4:e8:ad:63: 41:e8:2f:6e:1d:e2:b0:81:4e:4c:9b:d7:e6:26:7e: 3b:6b:78:25:7e:30:70:41:e3:44:f2:fe:a3:40:af: 05:f4:e4:61:af:ae:a0:db:3b:4e:ee:ee:52:b0:57: f2:d8:44:b7:78:17:d2:bf:e7:95:04:cb:8a:42:fc: e2:80:14:16:40:ba:68:bc:85:08:96:5a:6b:03:2c: 66:7b:cf:28:e4:00:ef:95:32:10:e1:0e:8c:0a:cd: 3d:28:36:44:b5:d3:30:f9:98:0d:94:68:1a:f1:a2: 20:5d:49:26:25:b2:c6:02:0c:fe:0f:ce:5a:82:33: 7c:1b:5e:38:d3:6a:f1:0d:64:ce:af:9b:30:1f:75: 21:f8:82:cb:4a:61:ad:6d:6e:79:9f:9b:88:3e:a0: 1f:d5:8a:da:cc:86:de:08:4c:21:d1:f3:a3:ce:ba: 76:44:e0:5b:06:fe:66:e1:c6:3d:0b:c8:45:6c:63: 53:f2:e0:00:83:c3:00:f1:27:64:cf:e9:ad:c9:54: f5:49:76:b1:75:ac:75:3c:0a:82:43:77:b2:2c:ff: 0e:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:A6:11:A6:18:B6:C0:67:F0:20:DC:B5:65:C2:23:7C:0C:CE:0C:02 X509v3 Authority Key Identifier: keyid:BD:61:94:D3:C2:5B:63:7B:15:DA:EB:65:4B:28:8A:45:10:54:AB:E0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/fae24907-a6f2-4a55-aa6f-18c7db143fe8/0/BD6194D3C25B637B15DAEB654B288A451054ABE0.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BD6194D3C25B637B15DAEB654B288A451054ABE0.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/fae24907-a6f2-4a55-aa6f-18c7db143fe8/0/BD6194D3C25B637B15DAEB654B288A451054ABE0.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 65:1c:a7:c3:50:ed:0f:2d:8a:9d:42:3d:72:de:8a:99:88:a6: 9e:e8:eb:3d:c5:1e:df:89:e9:65:c8:b0:b7:80:21:41:a8:a3: 4c:85:70:be:41:9e:06:87:35:90:67:11:76:a8:d2:9b:d6:30: 04:d2:11:ab:23:14:6b:d2:0f:1e:14:ae:16:87:64:ba:4e:b3: e7:36:ab:0b:32:a4:60:d5:ec:9e:76:ed:cd:34:e3:8b:e6:ed: 65:e7:84:d7:8b:e2:8a:35:68:de:77:fb:02:b9:72:2e:e6:1b: 18:bb:21:59:4c:72:f0:8a:91:01:be:b7:39:9d:f8:5b:f1:f5: 8f:ff:d1:50:0e:42:9b:2a:61:4d:99:8a:24:23:89:49:6c:af: 54:52:d3:eb:bf:af:2c:c4:f1:62:f8:36:8f:e5:ec:13:b5:b5: 16:5a:6c:0a:6b:5f:c0:84:94:ef:fa:63:20:67:41:f7:11:44: 96:ab:61:bc:f4:d4:2e:7c:05:73:9d:61:74:6c:bf:a9:36:1e: 97:b5:d6:fa:5e:39:66:39:fd:dd:7f:e0:66:e3:76:cc:57:a6: a7:29:9e:7e:2e:2f:c7:7a:cb:bf:4f:d1:a2:e1:d3:5c:4c:58: ab:76:f1:3e:d0:90:8c:66:ae:1d:ee:12:d2:52:fa:73:e1:25: 0d:c5:4e:4c -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUHxpJWUGia+mVQgQ9+0JBEhorTV0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkQ2MTk0RDNDMjVCNjM3QjE1REFFQjY1NEIyODhBNDUx MDU0QUJFMDAeFw0yNTEyMTgyMTE2MzhaFw0yNTEyMjIwMzIzMzhaMDMxMTAvBgNV BAMTKDQxQTYxMUE2MThCNkMwNjdGMDIwRENCNTY1QzIyMzdDMENDRTBDMDIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQChaybshz8yMvu963SBTB6fwBw1 3Vg6o3WxM4X9OM5YWyuCOMsJeFJ7tOitY0HoL24d4rCBTkyb1+YmfjtreCV+MHBB 40Ty/qNArwX05GGvrqDbO07u7lKwV/LYRLd4F9K/55UEy4pC/OKAFBZAumi8hQiW WmsDLGZ7zyjkAO+VMhDhDowKzT0oNkS10zD5mA2UaBrxoiBdSSYlssYCDP4PzlqC M3wbXjjTavENZM6vmzAfdSH4gstKYa1tbnmfm4g+oB/VitrMht4ITCHR86POunZE 4FsG/mbhxj0LyEVsY1Py4ACDwwDxJ2TP6a3JVPVJdrF1rHU8CoJDd7Is/w43AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUQaYRphi2wGfwINy1ZcIjfAzODAIwHwYDVR0j BBgwFoAUvWGU08JbY3sV2utlSyiKRRBUq+AwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m YWUyNDkwNy1hNmYyLTRhNTUtYWE2Zi0xOGM3ZGIxNDNmZTgvMC9CRDYxOTREM0My NUI2MzdCMTVEQUVCNjU0QjI4OEE0NTEwNTRBQkUwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQkQ2MTk0RDNDMjVCNjM3QjE1REFFQjY1NEIyODhBNDUxMDU0 QUJFMC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZmFlMjQ5MDctYTZmMi00YTU1LWFh NmYtMThjN2RiMTQzZmU4LzAvQkQ2MTk0RDNDMjVCNjM3QjE1REFFQjY1NEIyODhB NDUxMDU0QUJFMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGUcp8NQ7Q8tip1CPXLeipmIpp7o6z3FHt+J 6WXIsLeAIUGoo0yFcL5BngaHNZBnEXao0pvWMATSEasjFGvSDx4UrhaHZLpOs+c2 qwsypGDV7J527c0044vm7WXnhNeL4oo1aN53+wK5ci7mGxi7IVlMcvCKkQG+tzmd +Fvx9Y//0VAOQpsqYU2ZiiQjiUlsr1RS0+u/ryzE8WL4No/l7BO1tRZabAprX8CE lO/6YyBnQfcRRJarYbz01C58BXOdYXRsv6k2Hpe11vpeOWY5/d1/4GbjdsxXpqcp nn4uL8d6y79P0aLh01xMWKt28T7QkIxmrh3uEtJS+nPhJQ3FTkw= -----END CERTIFICATE-----Generated at Fri Dec 19 11:23:47 2025 by rpki-client