This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/0f00228f-6e25-4c96-9ce5-2d50229a1d18/0/9FC1BED6B099F4E57BAD9FA6F092421927472311.mft File: 9FC1BED6B099F4E57BAD9FA6F092421927472311.mft (raw, json) Hash identifier: bFlKdNd6TnosLJ37BE/XaZmB67rUJKitpzFglOSXj8Y= Subject key identifier: B7:4F:73:04:BD:CF:95:97:12:D1:76:1A:CF:5B:7B:70:F6:D8:1C:03 Authority key identifier: 9F:C1:BE:D6:B0:99:F4:E5:7B:AD:9F:A6:F0:92:42:19:27:47:23:11 Certificate issuer: /CN=9FC1BED6B099F4E57BAD9FA6F092421927472311 Certificate serial: 66E0994B7450E6DC8AF04DFBEDBF1E6F30F3CDF4 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9FC1BED6B099F4E57BAD9FA6F092421927472311.cer Subject info access: rsync://repo-rpki.idnic.net/repo/0f00228f-6e25-4c96-9ce5-2d50229a1d18/0/9FC1BED6B099F4E57BAD9FA6F092421927472311.mft Manifest number: 01F3 Signing time: Mon 22 Dec 2025 12:21:53 +0000 Manifest this update: Mon 22 Dec 2025 12:16:53 +0000 Manifest next update: Thu 25 Dec 2025 16:22:53 +0000 Files and hashes: 1: 3130332e3133342e31382e302f32342d3234203d3e20313332363334.roa (hash: AttvGV4O/1B/aUmLf5/YCnus3/1ekcJKD7ekYUKTwvA=) 2: 9FC1BED6B099F4E57BAD9FA6F092421927472311.crl (hash: b3pq8OUHPT0zeKMYoQ1uy85G1HLXs5RGthuQ2Mdh4M4=) 3: 3130332e3133342e31392e302f32342d3234203d3e20313332363334.roa (hash: YCkWOxawN0RGuY2hzkUip8qxnY1jDAzpOn1kRfTzsBQ=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/0f00228f-6e25-4c96-9ce5-2d50229a1d18/0/9FC1BED6B099F4E57BAD9FA6F092421927472311.crl rsync://repo-rpki.idnic.net/repo/0f00228f-6e25-4c96-9ce5-2d50229a1d18/0/9FC1BED6B099F4E57BAD9FA6F092421927472311.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9FC1BED6B099F4E57BAD9FA6F092421927472311.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 24 Dec 2025 07:39:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 66:e0:99:4b:74:50:e6:dc:8a:f0:4d:fb:ed:bf:1e:6f:30:f3:cd:f4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9FC1BED6B099F4E57BAD9FA6F092421927472311 Validity Not Before: Dec 22 12:16:53 2025 GMT Not After : Dec 25 16:22:53 2025 GMT Subject: CN=B74F7304BDCF959712D1761ACF5B7B70F6D81C03 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f5:9e:02:b5:1a:3b:f6:cc:77:f9:c1:04:ad:98: bc:c0:3b:a9:4d:31:59:1a:25:e1:8f:0d:27:3a:7a: e9:86:02:af:06:00:ef:be:c9:97:bd:2a:c0:b4:b8: 53:c0:db:29:1f:91:c8:22:ff:5f:98:9d:f8:13:d4: 7d:22:c3:d6:76:3a:a7:44:8a:7a:a6:95:e5:30:fe: af:38:82:61:d2:b8:cd:03:f0:a0:d2:5a:7c:5e:3e: a6:f6:44:98:ed:d5:6f:34:f7:61:6e:a4:e5:63:f8: ba:d5:5f:83:27:ef:93:0c:2d:2c:46:63:b7:85:cc: 4b:5f:76:05:1e:58:fd:26:e1:4a:63:40:18:75:34: 01:4e:eb:de:21:eb:d1:23:b1:89:f0:b4:61:88:76: 7f:85:43:d5:0c:a0:75:ba:4f:ee:74:3f:a3:68:15: 30:b7:05:51:17:ac:8d:30:84:4c:f9:a1:8f:90:7e: fa:63:1f:bd:88:a0:7a:73:a2:c9:59:0b:0c:2c:a5: 4f:98:4c:da:0e:0f:88:a6:36:ea:38:78:76:f5:eb: f0:2f:3d:b0:ea:0b:6e:34:71:96:5b:91:fa:77:3a: d3:be:40:f2:f5:2a:17:70:f1:97:9e:be:0a:ff:37: cf:20:4e:d3:50:7e:b1:53:ae:fc:62:1e:e4:62:c2: 98:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B7:4F:73:04:BD:CF:95:97:12:D1:76:1A:CF:5B:7B:70:F6:D8:1C:03 X509v3 Authority Key Identifier: keyid:9F:C1:BE:D6:B0:99:F4:E5:7B:AD:9F:A6:F0:92:42:19:27:47:23:11 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/0f00228f-6e25-4c96-9ce5-2d50229a1d18/0/9FC1BED6B099F4E57BAD9FA6F092421927472311.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9FC1BED6B099F4E57BAD9FA6F092421927472311.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/0f00228f-6e25-4c96-9ce5-2d50229a1d18/0/9FC1BED6B099F4E57BAD9FA6F092421927472311.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 41:a0:52:a9:99:e2:52:21:20:a9:eb:79:c7:4a:5c:22:04:a7: 31:1d:93:07:b6:4f:49:cd:e3:c1:48:71:58:9e:9b:9f:aa:7e: 9e:a1:aa:03:0a:a8:7b:08:a0:2b:79:f3:0a:12:45:38:06:2b: 1d:89:41:54:e3:4f:ad:a5:a0:19:55:0c:fa:60:85:05:8e:8b: 99:76:a6:d6:6a:63:c7:96:e9:b7:2d:76:a6:85:43:88:c9:c8: 4d:c5:8b:d3:d6:c3:db:7e:27:d4:b3:43:bb:77:2c:2c:a9:2a: 81:37:d7:25:a3:d9:c0:df:89:33:8b:b6:e6:e6:6d:9b:f1:17: 85:55:72:b7:56:96:98:08:60:bd:4d:42:f0:fd:66:d4:56:bb: 28:9c:15:bb:76:92:ab:16:90:cc:d7:7d:77:c6:ea:bf:8d:1c: af:51:9a:7f:7d:38:78:6a:32:d9:67:ce:0f:63:00:5b:1b:a7: a9:d3:b1:9c:29:00:3d:37:0a:7b:14:1d:1c:8b:a0:02:29:8a: 22:79:22:04:bd:bc:dd:5c:fa:15:df:db:94:08:66:cd:28:b6: 67:5f:c3:ba:3d:35:60:18:10:68:19:b9:ff:cc:de:9a:b5:9d: 8e:f1:d9:e9:5b:d9:e0:c2:b1:eb:f3:c7:cc:12:90:24:6b:2e: a1:a3:2c:35 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUZuCZS3RQ5tyK8E377b8ebzDzzfQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUZDMUJFRDZCMDk5RjRFNTdCQUQ5RkE2RjA5MjQyMTky NzQ3MjMxMTAeFw0yNTEyMjIxMjE2NTNaFw0yNTEyMjUxNjIyNTNaMDMxMTAvBgNV BAMTKEI3NEY3MzA0QkRDRjk1OTcxMkQxNzYxQUNGNUI3QjcwRjZEODFDMDMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD1ngK1Gjv2zHf5wQStmLzAO6lN MVkaJeGPDSc6eumGAq8GAO++yZe9KsC0uFPA2ykfkcgi/1+YnfgT1H0iw9Z2OqdE inqmleUw/q84gmHSuM0D8KDSWnxePqb2RJjt1W8092FupOVj+LrVX4Mn75MMLSxG Y7eFzEtfdgUeWP0m4UpjQBh1NAFO694h69EjsYnwtGGIdn+FQ9UMoHW6T+50P6No FTC3BVEXrI0whEz5oY+QfvpjH72IoHpzoslZCwwspU+YTNoOD4imNuo4eHb16/Av PbDqC240cZZbkfp3OtO+QPL1Khdw8Zeevgr/N88gTtNQfrFTrvxiHuRiwpijAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUt09zBL3PlZcS0XYaz1t7cPbYHAMwHwYDVR0j BBgwFoAUn8G+1rCZ9OV7rZ+m8JJCGSdHIxEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w ZjAwMjI4Zi02ZTI1LTRjOTYtOWNlNS0yZDUwMjI5YTFkMTgvMC85RkMxQkVENkIw OTlGNEU1N0JBRDlGQTZGMDkyNDIxOTI3NDcyMzExLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOUZDMUJFRDZCMDk5RjRFNTdCQUQ5RkE2RjA5MjQyMTkyNzQ3 MjMxMS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMGYwMDIyOGYtNmUyNS00Yzk2LTlj ZTUtMmQ1MDIyOWExZDE4LzAvOUZDMUJFRDZCMDk5RjRFNTdCQUQ5RkE2RjA5MjQy MTkyNzQ3MjMxMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEGgUqmZ4lIhIKnrecdKXCIEpzEdkwe2T0nN 48FIcViem5+qfp6hqgMKqHsIoCt58woSRTgGKx2JQVTjT62loBlVDPpghQWOi5l2 ptZqY8eW6bctdqaFQ4jJyE3Fi9PWw9t+J9SzQ7t3LCypKoE31yWj2cDfiTOLtubm bZvxF4VVcrdWlpgIYL1NQvD9ZtRWuyicFbt2kqsWkMzXfXfG6r+NHK9Rmn99OHhq Mtlnzg9jAFsbp6nTsZwpAD03CnsUHRyLoAIpiiJ5IgS9vN1c+hXf25QIZs0otmdf w7o9NWAYEGgZuf/M3pq1nY7x2elb2eDCsevzx8wSkCRrLqGjLDU= -----END CERTIFICATE-----Generated at Tue Dec 23 03:48:15 2025 by rpki-client