This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/21db6c9b-d8fc-4d8c-80cb-fd2241208dde/0/9BF72C8BB7CA359BE46741ABCE4EB69F056DF094.mft File: 9BF72C8BB7CA359BE46741ABCE4EB69F056DF094.mft (raw, json) Hash identifier: Dw2HVNlOI3wMJXnpbyaQB1Bxw/QZslJt3pBl+yFWVBk= Subject key identifier: EA:9D:4C:DD:E8:36:D3:36:09:5B:27:94:CB:2C:F5:C5:22:F7:48:CD Authority key identifier: 9B:F7:2C:8B:B7:CA:35:9B:E4:67:41:AB:CE:4E:B6:9F:05:6D:F0:94 Certificate issuer: /CN=9BF72C8BB7CA359BE46741ABCE4EB69F056DF094 Certificate serial: 0C68EC8A9E28C95E32453E863FF528495AF6C809 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9BF72C8BB7CA359BE46741ABCE4EB69F056DF094.cer Subject info access: rsync://repo-rpki.idnic.net/repo/21db6c9b-d8fc-4d8c-80cb-fd2241208dde/0/9BF72C8BB7CA359BE46741ABCE4EB69F056DF094.mft Manifest number: 033A Signing time: Thu 18 Dec 2025 02:31:46 +0000 Manifest this update: Thu 18 Dec 2025 02:26:46 +0000 Manifest next update: Sun 21 Dec 2025 09:21:46 +0000 Files and hashes: 1: 3130332e3137322e3137312e302f32342d3234203d3e20313432333936.roa (hash: 9s1ITUmg2kGqf5Jx5LPfpxTxCb9voDIi9IZi6C1ddpU=) 2: 3130332e3137322e3137302e302f32332d3233203d3e20313432333936.roa (hash: kkQvEgsJeO+CrA3Ye9kDXGk01vieQEZNvkHA4XJOOhQ=) 3: 9BF72C8BB7CA359BE46741ABCE4EB69F056DF094.crl (hash: RxN05gTXOh+kJJiVoZdflnDwQvON4IItYcx0deO3iHI=) 4: 3130332e3137322e3137302e302f32342d3234203d3e20313432333936.roa (hash: SPW5Gl3BeUVHO5fIh7gLc9Co4QXzBznSK3/ByXd6mfU=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/21db6c9b-d8fc-4d8c-80cb-fd2241208dde/0/9BF72C8BB7CA359BE46741ABCE4EB69F056DF094.crl rsync://repo-rpki.idnic.net/repo/21db6c9b-d8fc-4d8c-80cb-fd2241208dde/0/9BF72C8BB7CA359BE46741ABCE4EB69F056DF094.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9BF72C8BB7CA359BE46741ABCE4EB69F056DF094.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 21 Dec 2025 09:21:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0c:68:ec:8a:9e:28:c9:5e:32:45:3e:86:3f:f5:28:49:5a:f6:c8:09 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9BF72C8BB7CA359BE46741ABCE4EB69F056DF094 Validity Not Before: Dec 18 02:26:46 2025 GMT Not After : Dec 21 09:21:46 2025 GMT Subject: CN=EA9D4CDDE836D336095B2794CB2CF5C522F748CD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:0c:af:f9:0a:ba:b3:b6:3f:b2:5b:f6:cc:fd: ed:6c:64:07:8c:c4:a1:72:d5:c6:8a:74:cf:a7:99: 74:05:41:06:eb:ff:ed:f5:12:e6:b9:fe:65:29:aa: 83:60:7f:d7:62:35:35:60:5b:f4:5a:a1:59:c3:eb: bd:10:dd:e7:76:4e:33:ee:4b:d6:dd:c8:e6:4b:1e: fd:1a:b7:6f:3f:d2:9b:7d:8a:2e:35:cc:b3:2c:48: 01:8a:aa:6d:35:a4:07:18:9f:6d:2d:d8:73:92:0e: b0:87:e4:1a:5d:7a:9f:77:42:32:a6:23:87:ba:12: a6:7c:26:ee:80:25:c8:a8:e0:2e:90:86:19:d3:0f: a1:3a:b0:c4:c4:3e:74:15:f5:8f:e5:fb:aa:b1:f4: a2:0f:a3:4a:4c:40:e7:70:cc:c7:aa:17:bf:39:34: e8:84:35:19:0e:42:2f:57:d4:dc:61:88:ab:f5:28: 59:e1:a5:0b:c5:ae:0f:46:59:8a:b0:5c:4c:f0:0f: 12:08:43:a8:44:b6:3b:99:9f:40:09:a9:26:36:3d: a3:26:2b:14:23:e0:13:65:6b:e6:80:80:eb:47:66: 70:55:28:6b:4a:ec:89:75:88:29:0b:2c:7d:f6:37: 95:24:44:3f:5b:ec:44:be:1e:c5:3e:84:16:b4:da: 98:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EA:9D:4C:DD:E8:36:D3:36:09:5B:27:94:CB:2C:F5:C5:22:F7:48:CD X509v3 Authority Key Identifier: keyid:9B:F7:2C:8B:B7:CA:35:9B:E4:67:41:AB:CE:4E:B6:9F:05:6D:F0:94 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/21db6c9b-d8fc-4d8c-80cb-fd2241208dde/0/9BF72C8BB7CA359BE46741ABCE4EB69F056DF094.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9BF72C8BB7CA359BE46741ABCE4EB69F056DF094.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/21db6c9b-d8fc-4d8c-80cb-fd2241208dde/0/9BF72C8BB7CA359BE46741ABCE4EB69F056DF094.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 78:17:ea:b1:a9:2f:1e:9d:97:6e:f1:a0:a1:c9:8a:46:28:17: 44:ff:40:fe:1c:e7:ee:ab:a6:b8:82:ae:40:83:65:b2:2c:51: bc:5e:77:f5:25:9f:e4:f5:f6:7b:78:e0:2f:bc:97:7b:22:d3: 2b:16:d9:76:61:f3:7c:23:4f:54:68:5e:69:fa:32:4b:65:29: 61:d0:fb:d6:c4:8e:7a:8d:29:92:74:97:01:c2:69:fd:e3:5b: 46:d9:2c:21:c1:2c:ba:cc:7b:8d:67:e9:9c:9e:55:15:fb:02: 3d:5e:0b:60:2d:32:73:6f:1d:29:92:c2:36:a1:0d:65:88:07: 97:d2:9a:eb:f2:ce:08:61:39:a0:6e:07:72:18:41:29:81:bb: 2c:6a:f6:53:54:56:18:54:ea:8e:75:0f:32:2b:0c:1c:6a:65: 19:2f:a3:2c:e6:96:2a:32:61:8d:1a:ec:74:df:26:b2:ca:c5: 6a:bf:0b:39:61:99:0a:82:63:cc:7c:4f:7a:d9:7c:ca:8b:b6: 26:9e:a4:09:d0:e5:29:94:82:c0:ca:67:78:4e:53:e4:1f:b2: 23:66:54:37:d8:4b:d1:b0:0c:2a:8d:35:50:19:a3:32:69:05: 67:a1:14:9c:6c:04:3e:e3:32:97:f0:63:3e:67:6a:8c:d5:c2: b8:16:c9:fa -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUDGjsip4oyV4yRT6GP/UoSVr2yAkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUJGNzJDOEJCN0NBMzU5QkU0Njc0MUFCQ0U0RUI2OUYw NTZERjA5NDAeFw0yNTEyMTgwMjI2NDZaFw0yNTEyMjEwOTIxNDZaMDMxMTAvBgNV BAMTKEVBOUQ0Q0RERTgzNkQzMzYwOTVCMjc5NENCMkNGNUM1MjJGNzQ4Q0QwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDJDK/5Crqztj+yW/bM/e1sZAeM xKFy1caKdM+nmXQFQQbr/+31Eua5/mUpqoNgf9diNTVgW/RaoVnD670Q3ed2TjPu S9bdyOZLHv0at28/0pt9ii41zLMsSAGKqm01pAcYn20t2HOSDrCH5Bpdep93QjKm I4e6EqZ8Ju6AJcio4C6QhhnTD6E6sMTEPnQV9Y/l+6qx9KIPo0pMQOdwzMeqF785 NOiENRkOQi9X1NxhiKv1KFnhpQvFrg9GWYqwXEzwDxIIQ6hEtjuZn0AJqSY2PaMm KxQj4BNla+aAgOtHZnBVKGtK7Il1iCkLLH32N5UkRD9b7ES+HsU+hBa02pi7AgMB AAGjggI8MIICODAdBgNVHQ4EFgQU6p1M3eg20zYJWyeUyyz1xSL3SM0wHwYDVR0j BBgwFoAUm/csi7fKNZvkZ0Grzk62nwVt8JQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y MWRiNmM5Yi1kOGZjLTRkOGMtODBjYi1mZDIyNDEyMDhkZGUvMC85QkY3MkM4QkI3 Q0EzNTlCRTQ2NzQxQUJDRTRFQjY5RjA1NkRGMDk0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOUJGNzJDOEJCN0NBMzU5QkU0Njc0MUFCQ0U0RUI2OUYwNTZE RjA5NC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMjFkYjZjOWItZDhmYy00ZDhjLTgw Y2ItZmQyMjQxMjA4ZGRlLzAvOUJGNzJDOEJCN0NBMzU5QkU0Njc0MUFCQ0U0RUI2 OUYwNTZERjA5NC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHgX6rGpLx6dl27xoKHJikYoF0T/QP4c5+6r priCrkCDZbIsUbxed/Uln+T19nt44C+8l3si0ysW2XZh83wjT1RoXmn6MktlKWHQ +9bEjnqNKZJ0lwHCaf3jW0bZLCHBLLrMe41n6ZyeVRX7Aj1eC2AtMnNvHSmSwjah DWWIB5fSmuvyzghhOaBuB3IYQSmBuyxq9lNUVhhU6o51DzIrDBxqZRkvoyzmlioy YY0a7HTfJrLKxWq/CzlhmQqCY8x8T3rZfMqLtiaepAnQ5SmUgsDKZ3hOU+QfsiNm VDfYS9GwDCqNNVAZozJpBWehFJxsBD7jMpfwYz5naozVwrgWyfo= -----END CERTIFICATE-----Generated at Fri Dec 19 03:05:40 2025 by rpki-client