This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/832c823d-a4b7-4005-9ab8-d3b2c8bbf763/0/9BFE3F2FE97677A590AC77278DA8666C8389D7BF.mft File: 9BFE3F2FE97677A590AC77278DA8666C8389D7BF.mft (raw, json) Hash identifier: ObU1hNagL4abnfGlxTvMZ2to2uq23CZFwqS2B3T5mlM= Subject key identifier: C7:77:65:77:5E:B1:38:1D:0F:6A:66:A7:D0:4C:E4:E7:97:F8:CA:B5 Authority key identifier: 9B:FE:3F:2F:E9:76:77:A5:90:AC:77:27:8D:A8:66:6C:83:89:D7:BF Certificate issuer: /CN=9BFE3F2FE97677A590AC77278DA8666C8389D7BF Certificate serial: 3669229879CB8DDF9217D044805AFCDDCDF8F35B Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9BFE3F2FE97677A590AC77278DA8666C8389D7BF.cer Subject info access: rsync://repo-rpki.idnic.net/repo/832c823d-a4b7-4005-9ab8-d3b2c8bbf763/0/9BFE3F2FE97677A590AC77278DA8666C8389D7BF.mft Manifest number: 03A8 Signing time: Sat 20 Dec 2025 07:41:45 +0000 Manifest this update: Sat 20 Dec 2025 07:36:45 +0000 Manifest next update: Tue 23 Dec 2025 19:32:45 +0000 Files and hashes: 1: 3130332e3136392e3139352e302f32342d3234203d3e20313339393637.roa (hash: 2vX1spf0CDDLU6b57YsXR6vrWtD2IJYZSM4qYEDN34I=) 2: 3130332e3136392e3139342e302f32342d3234203d3e20313432333536.roa (hash: /JgZ/3Dc8d37h8AUWlmBK2pFzp3Z0endISYcFZpQbYk=) 3: 9BFE3F2FE97677A590AC77278DA8666C8389D7BF.crl (hash: VuX1AT4fEmeUyZfQj7Q+Agg2PhegK9XrTq2Cp1Mi7qY=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/832c823d-a4b7-4005-9ab8-d3b2c8bbf763/0/9BFE3F2FE97677A590AC77278DA8666C8389D7BF.crl rsync://repo-rpki.idnic.net/repo/832c823d-a4b7-4005-9ab8-d3b2c8bbf763/0/9BFE3F2FE97677A590AC77278DA8666C8389D7BF.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9BFE3F2FE97677A590AC77278DA8666C8389D7BF.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 23 Dec 2025 19:32:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 36:69:22:98:79:cb:8d:df:92:17:d0:44:80:5a:fc:dd:cd:f8:f3:5b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9BFE3F2FE97677A590AC77278DA8666C8389D7BF Validity Not Before: Dec 20 07:36:45 2025 GMT Not After : Dec 23 19:32:45 2025 GMT Subject: CN=C77765775EB1381D0F6A66A7D04CE4E797F8CAB5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:38:49:b7:62:d8:2b:52:c9:49:ee:cb:2e:50: b5:06:b8:f4:16:50:d1:69:0f:c9:2a:d6:bc:0c:cf: 8e:12:17:40:2c:75:0e:66:80:ea:84:b2:3a:53:c9: 30:ff:c6:1f:28:1f:e4:4a:02:44:b9:9b:86:97:de: e8:2c:5b:93:11:d4:bf:0f:00:92:a8:6f:fc:bb:50: 4d:9f:00:8e:a0:92:47:e1:a2:c8:6c:5a:7b:bc:cd: 6e:c7:26:91:6c:a5:1d:61:87:39:ba:8f:d6:08:83: f1:00:e1:5d:f8:0b:71:19:c4:3d:86:94:59:6e:55: b7:f3:f5:59:14:ad:63:92:d2:34:0c:7f:37:82:26: 2f:94:a3:d2:aa:00:9a:ea:49:60:aa:9c:1d:96:8c: ac:04:c6:db:e9:c8:ee:a5:7d:10:28:44:31:bb:1d: 49:72:97:f5:6b:8c:fa:22:6c:eb:40:44:3c:92:51: 55:59:33:67:0f:a0:c3:66:f2:0e:f6:9d:20:9a:c7: cb:21:de:eb:e7:05:0f:3f:b9:c1:ff:db:a8:c7:31: 5e:47:81:75:81:a2:f4:eb:a1:09:75:a7:80:1c:2a: d7:2d:7d:bb:03:94:b7:49:cd:15:6f:bf:4b:fe:6d: e3:2c:0c:cd:be:93:85:da:df:ed:c8:6d:76:35:e7: 85:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:77:65:77:5E:B1:38:1D:0F:6A:66:A7:D0:4C:E4:E7:97:F8:CA:B5 X509v3 Authority Key Identifier: keyid:9B:FE:3F:2F:E9:76:77:A5:90:AC:77:27:8D:A8:66:6C:83:89:D7:BF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/832c823d-a4b7-4005-9ab8-d3b2c8bbf763/0/9BFE3F2FE97677A590AC77278DA8666C8389D7BF.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9BFE3F2FE97677A590AC77278DA8666C8389D7BF.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/832c823d-a4b7-4005-9ab8-d3b2c8bbf763/0/9BFE3F2FE97677A590AC77278DA8666C8389D7BF.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0f:82:c8:78:85:fe:dd:31:eb:81:fb:74:51:6d:71:1d:54:f3: 47:69:a4:cb:ce:a7:2a:69:b2:6f:07:6f:68:c2:57:ee:9f:e7: cf:a9:12:4f:39:21:9a:99:40:ca:33:dd:05:f7:39:3c:80:4d: 89:24:19:e6:ed:4b:fc:f7:34:97:06:6b:c4:95:cc:53:f6:2b: dd:c4:e5:4e:9d:db:f0:ab:17:4a:ae:0e:cc:85:4c:c0:b8:14: 39:1c:7b:46:61:cc:ff:79:76:c7:d7:38:b0:82:e1:34:c9:82: 0f:fd:fd:94:39:a4:a6:fa:e9:3d:f1:fe:de:19:7e:fe:c1:51: fe:12:87:84:1f:19:35:e9:56:82:be:ee:15:96:4a:fd:9b:71: ca:63:bd:ee:12:2e:52:a1:bd:68:04:d5:d8:30:ae:3d:b7:b0: 65:bb:97:0f:06:2e:b0:85:3a:b7:f1:86:2f:50:e9:b1:8a:ec: bd:1d:a9:b7:db:2a:ef:51:cd:f3:9c:56:3e:ca:9e:4f:56:c9: 26:32:f5:cb:8b:76:18:de:ba:99:47:d6:de:c7:68:5c:c7:d2: 6a:92:35:40:52:e8:d8:d6:dc:69:c6:d2:42:df:c5:6b:95:6a: 8c:9b:5a:e6:73:b2:1c:20:cb:06:09:a0:a0:86:96:ef:60:56: ab:50:f8:1e -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUNmkimHnLjd+SF9BEgFr83c3481swDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUJGRTNGMkZFOTc2NzdBNTkwQUM3NzI3OERBODY2NkM4 Mzg5RDdCRjAeFw0yNTEyMjAwNzM2NDVaFw0yNTEyMjMxOTMyNDVaMDMxMTAvBgNV BAMTKEM3Nzc2NTc3NUVCMTM4MUQwRjZBNjZBN0QwNENFNEU3OTdGOENBQjUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCqOEm3YtgrUslJ7ssuULUGuPQW UNFpD8kq1rwMz44SF0AsdQ5mgOqEsjpTyTD/xh8oH+RKAkS5m4aX3ugsW5MR1L8P AJKob/y7UE2fAI6gkkfhoshsWnu8zW7HJpFspR1hhzm6j9YIg/EA4V34C3EZxD2G lFluVbfz9VkUrWOS0jQMfzeCJi+Uo9KqAJrqSWCqnB2WjKwExtvpyO6lfRAoRDG7 HUlyl/VrjPoibOtARDySUVVZM2cPoMNm8g72nSCax8sh3uvnBQ8/ucH/26jHMV5H gXWBovTroQl1p4AcKtctfbsDlLdJzRVvv0v+beMsDM2+k4Xa3+3IbXY154VxAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUx3dld16xOB0Paman0Ezk55f4yrUwHwYDVR0j BBgwFoAUm/4/L+l2d6WQrHcnjahmbIOJ178wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 MzJjODIzZC1hNGI3LTQwMDUtOWFiOC1kM2IyYzhiYmY3NjMvMC85QkZFM0YyRkU5 NzY3N0E1OTBBQzc3Mjc4REE4NjY2QzgzODlEN0JGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOUJGRTNGMkZFOTc2NzdBNTkwQUM3NzI3OERBODY2NkM4Mzg5 RDdCRi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vODMyYzgyM2QtYTRiNy00MDA1LTlh YjgtZDNiMmM4YmJmNzYzLzAvOUJGRTNGMkZFOTc2NzdBNTkwQUM3NzI3OERBODY2 NkM4Mzg5RDdCRi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAA+CyHiF/t0x64H7dFFtcR1U80dppMvOpypp sm8Hb2jCV+6f58+pEk85IZqZQMoz3QX3OTyATYkkGebtS/z3NJcGa8SVzFP2K93E 5U6d2/CrF0quDsyFTMC4FDkce0ZhzP95dsfXOLCC4TTJgg/9/ZQ5pKb66T3x/t4Z fv7BUf4Sh4QfGTXpVoK+7hWWSv2bccpjve4SLlKhvWgE1dgwrj23sGW7lw8GLrCF Orfxhi9Q6bGK7L0dqbfbKu9RzfOcVj7Knk9WySYy9cuLdhjeuplH1t7HaFzH0mqS NUBS6NjW3GnG0kLfxWuVaoybWuZzshwgywYJoKCGlu9gVqtQ+B4= -----END CERTIFICATE-----Generated at Sun Dec 21 10:33:52 2025 by rpki-client