This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/1f2f64ca-fa54-499e-bc33-4862dca794f7/0/B9A55DD123C2F224C4E245856905F78F2F354D92.mft File: B9A55DD123C2F224C4E245856905F78F2F354D92.mft (raw, json) Hash identifier: U+B4yc/HprAV2TP7ot2gsJHdnf+2GC5kvGFFQddrwd4= Subject key identifier: 8E:0C:75:29:AD:4C:13:83:17:3E:DD:8C:A9:11:5E:B3:AA:18:F3:74 Authority key identifier: B9:A5:5D:D1:23:C2:F2:24:C4:E2:45:85:69:05:F7:8F:2F:35:4D:92 Certificate issuer: /CN=B9A55DD123C2F224C4E245856905F78F2F354D92 Certificate serial: 7C81B49A6092FC956B5CEA5AF81A419954E89DC9 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/B9A55DD123C2F224C4E245856905F78F2F354D92.cer Subject info access: rsync://repo-rpki.idnic.net/repo/1f2f64ca-fa54-499e-bc33-4862dca794f7/0/B9A55DD123C2F224C4E245856905F78F2F354D92.mft Manifest number: 0105 Signing time: Sat 20 Dec 2025 23:31:05 +0000 Manifest this update: Sat 20 Dec 2025 23:26:05 +0000 Manifest next update: Wed 24 Dec 2025 04:46:05 +0000 Files and hashes: 1: B9A55DD123C2F224C4E245856905F78F2F354D92.crl (hash: 40+W4ciqA88LYCq09Iuvgu3e3/YlbcTKvMA0+u3NYGM=) 2: 3135372e31302e39372e302f32342d3234203d3e203538383231.roa (hash: UPR5y8V0jVDX7lorT6sk4sYb0YCh+EKPNMakCdOkBwI=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/1f2f64ca-fa54-499e-bc33-4862dca794f7/0/B9A55DD123C2F224C4E245856905F78F2F354D92.crl rsync://repo-rpki.idnic.net/repo/1f2f64ca-fa54-499e-bc33-4862dca794f7/0/B9A55DD123C2F224C4E245856905F78F2F354D92.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/B9A55DD123C2F224C4E245856905F78F2F354D92.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 23 Dec 2025 15:37:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7c:81:b4:9a:60:92:fc:95:6b:5c:ea:5a:f8:1a:41:99:54:e8:9d:c9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B9A55DD123C2F224C4E245856905F78F2F354D92 Validity Not Before: Dec 20 23:26:05 2025 GMT Not After : Dec 24 04:46:05 2025 GMT Subject: CN=8E0C7529AD4C1383173EDD8CA9115EB3AA18F374 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ec:e3:15:a9:e4:de:0f:d0:db:9f:c5:b5:e3:2d: 0b:5d:dc:a4:cd:eb:73:20:88:ee:61:02:cb:b7:a9: b3:a1:a7:d2:f1:22:3d:32:90:41:49:1a:c6:5e:16: f1:18:40:b5:2e:3f:f2:f8:9c:f5:01:16:c3:07:ee: ff:3d:09:71:56:34:9f:5a:6d:92:00:80:6e:3c:e4: c1:8b:26:7d:87:f1:19:9f:cc:b8:da:75:04:07:61: 6a:66:c1:09:0a:08:cc:2b:64:e7:6d:da:69:d8:0f: 67:6f:c0:50:e8:ae:ca:1b:b9:ce:1a:b5:40:70:5b: 31:af:6f:23:23:76:45:45:98:36:e4:89:9c:51:5e: 58:dd:c3:5c:ae:a0:49:d7:21:23:a1:6e:f1:e0:a7: d1:77:56:38:1c:69:2a:94:65:21:09:fd:2b:ef:e3: 44:f8:41:af:21:44:56:ef:b9:cc:9b:e3:c1:58:6d: ad:da:b9:e8:a5:05:77:38:91:d1:b5:15:57:be:0b: 9c:0a:4a:ad:70:d9:ce:02:a0:b9:03:8f:87:ac:b1: cc:04:0b:ca:83:4c:7b:e0:18:42:ba:c0:1b:02:82: 94:c9:79:dc:c5:f5:67:0b:6e:f8:cc:9d:5d:3e:48: 79:86:72:9d:86:a7:93:8c:14:99:94:a2:e2:7d:fc: a9:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:0C:75:29:AD:4C:13:83:17:3E:DD:8C:A9:11:5E:B3:AA:18:F3:74 X509v3 Authority Key Identifier: keyid:B9:A5:5D:D1:23:C2:F2:24:C4:E2:45:85:69:05:F7:8F:2F:35:4D:92 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/1f2f64ca-fa54-499e-bc33-4862dca794f7/0/B9A55DD123C2F224C4E245856905F78F2F354D92.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/B9A55DD123C2F224C4E245856905F78F2F354D92.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/1f2f64ca-fa54-499e-bc33-4862dca794f7/0/B9A55DD123C2F224C4E245856905F78F2F354D92.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 98:1d:6a:62:35:dd:98:e7:77:8b:3b:16:a7:c4:f9:0e:93:1f: 03:aa:34:8c:22:63:c2:20:36:c9:4c:1c:19:0c:60:92:2e:42: 87:92:ec:99:74:a1:8f:da:71:42:47:4f:6a:ab:5f:d1:71:3f: 62:e8:19:27:a3:c4:45:b8:78:73:7b:f6:6c:92:91:6d:cf:01: 04:c7:03:39:f2:e3:ba:00:26:2e:fe:cd:d0:21:67:b8:8e:b0: 25:1b:8f:2f:ca:20:dd:65:fe:5d:9d:4c:54:69:fd:f1:76:66: 05:43:17:84:46:c0:96:01:cf:e8:14:6c:a6:41:12:79:b8:4e: 12:c3:42:54:24:3c:37:4f:d6:74:40:f2:e5:94:dd:b9:f7:37: ce:2b:48:cb:d0:e0:0d:48:79:83:10:36:e5:2f:b8:e8:63:7f: 64:9f:64:94:d6:c4:0d:55:5e:d0:69:85:5c:c0:a5:84:81:3c: ae:c2:df:a2:f1:bb:a8:85:f7:b0:6f:79:70:52:56:a1:34:b0: 72:07:ee:20:fb:ca:02:83:67:7a:61:e9:29:01:73:09:35:d5: e5:23:c8:d7:65:f3:4c:d2:6e:27:a2:17:79:f5:b1:1c:5a:38: c9:01:82:af:e9:86:af:b0:33:3a:56:4a:a8:12:67:98:88:89: 83:ed:fd:67 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUfIG0mmCS/JVrXOpa+BpBmVTonckwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjlBNTVERDEyM0MyRjIyNEM0RTI0NTg1NjkwNUY3OEYy RjM1NEQ5MjAeFw0yNTEyMjAyMzI2MDVaFw0yNTEyMjQwNDQ2MDVaMDMxMTAvBgNV BAMTKDhFMEM3NTI5QUQ0QzEzODMxNzNFREQ4Q0E5MTE1RUIzQUExOEYzNzQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDs4xWp5N4P0NufxbXjLQtd3KTN 63MgiO5hAsu3qbOhp9LxIj0ykEFJGsZeFvEYQLUuP/L4nPUBFsMH7v89CXFWNJ9a bZIAgG485MGLJn2H8RmfzLjadQQHYWpmwQkKCMwrZOdt2mnYD2dvwFDorsobuc4a tUBwWzGvbyMjdkVFmDbkiZxRXljdw1yuoEnXISOhbvHgp9F3VjgcaSqUZSEJ/Svv 40T4Qa8hRFbvucyb48FYba3aueilBXc4kdG1FVe+C5wKSq1w2c4CoLkDj4esscwE C8qDTHvgGEK6wBsCgpTJedzF9WcLbvjMnV0+SHmGcp2Gp5OMFJmUouJ9/KntAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUjgx1Ka1ME4MXPt2MqRFes6oY83QwHwYDVR0j BBgwFoAUuaVd0SPC8iTE4kWFaQX3jy81TZIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x ZjJmNjRjYS1mYTU0LTQ5OWUtYmMzMy00ODYyZGNhNzk0ZjcvMC9COUE1NUREMTIz QzJGMjI0QzRFMjQ1ODU2OTA1Rjc4RjJGMzU0RDkyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvQjlBNTVERDEyM0MyRjIyNEM0RTI0NTg1NjkwNUY3OEYyRjM1 NEQ5Mi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMWYyZjY0Y2EtZmE1NC00OTllLWJj MzMtNDg2MmRjYTc5NGY3LzAvQjlBNTVERDEyM0MyRjIyNEM0RTI0NTg1NjkwNUY3 OEYyRjM1NEQ5Mi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJgdamI13Zjnd4s7FqfE+Q6THwOqNIwiY8Ig NslMHBkMYJIuQoeS7Jl0oY/acUJHT2qrX9FxP2LoGSejxEW4eHN79mySkW3PAQTH Azny47oAJi7+zdAhZ7iOsCUbjy/KIN1l/l2dTFRp/fF2ZgVDF4RGwJYBz+gUbKZB Enm4ThLDQlQkPDdP1nRA8uWU3bn3N84rSMvQ4A1IeYMQNuUvuOhjf2SfZJTWxA1V XtBphVzApYSBPK7C36Lxu6iF97BveXBSVqE0sHIH7iD7ygKDZ3ph6SkBcwk11eUj yNdl80zSbieiF3n1sRxaOMkBgq/phq+wMzpWSqgSZ5iIiYPt/Wc= -----END CERTIFICATE-----Generated at Sun Dec 21 09:45:24 2025 by rpki-client