This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/b1f87f5a-f6f9-468d-895e-314487f5e25e/0/B9BEB60CD6224D41F333A07E1820F0AF3A81FFF7.mft File: B9BEB60CD6224D41F333A07E1820F0AF3A81FFF7.mft (raw, json) Hash identifier: S/e/z3+MTjrSa+dHuspb1kSX+TS8SYOc1ileUbml43Q= Subject key identifier: C8:35:DB:E9:0B:2A:36:21:4E:39:24:1B:C5:36:B2:76:41:8C:39:EC Authority key identifier: B9:BE:B6:0C:D6:22:4D:41:F3:33:A0:7E:18:20:F0:AF:3A:81:FF:F7 Certificate issuer: /CN=B9BEB60CD6224D41F333A07E1820F0AF3A81FFF7 Certificate serial: 4942E7C25954B1D68C771009ED6AEB34F190EBA2 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B9BEB60CD6224D41F333A07E1820F0AF3A81FFF7.cer Subject info access: rsync://repo-rpki.idnic.net/repo/b1f87f5a-f6f9-468d-895e-314487f5e25e/0/B9BEB60CD6224D41F333A07E1820F0AF3A81FFF7.mft Manifest number: 01C3 Signing time: Wed 24 Dec 2025 03:21:24 +0000 Manifest this update: Wed 24 Dec 2025 03:16:24 +0000 Manifest next update: Sat 27 Dec 2025 13:09:24 +0000 Files and hashes: 1: 3130332e3138352e3139372e302f32342d3234203d3e20313333333535.roa (hash: PjJ5xaEmVECnvYiFxtFmdeDestY/+54rJNs+3F7mqcY=) 2: B9BEB60CD6224D41F333A07E1820F0AF3A81FFF7.crl (hash: ssy1e48XcQqnkCHXKeuVBmTGDy01ywBpXBN5GDw4vls=) 3: 3130332e3230392e3133312e302f32342d3234203d3e20313333333535.roa (hash: j+U4AErtYzwumrbJ7yEuFWr2i7wA+4c75xZyRtRhbQ4=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/b1f87f5a-f6f9-468d-895e-314487f5e25e/0/B9BEB60CD6224D41F333A07E1820F0AF3A81FFF7.crl rsync://repo-rpki.idnic.net/repo/b1f87f5a-f6f9-468d-895e-314487f5e25e/0/B9BEB60CD6224D41F333A07E1820F0AF3A81FFF7.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B9BEB60CD6224D41F333A07E1820F0AF3A81FFF7.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 27 Dec 2025 13:09:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 49:42:e7:c2:59:54:b1:d6:8c:77:10:09:ed:6a:eb:34:f1:90:eb:a2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B9BEB60CD6224D41F333A07E1820F0AF3A81FFF7 Validity Not Before: Dec 24 03:16:24 2025 GMT Not After : Dec 27 13:09:24 2025 GMT Subject: CN=C835DBE90B2A36214E39241BC536B276418C39EC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:ca:22:ae:2c:38:56:0d:4d:95:99:0b:b7:c7: 03:38:4b:c5:5f:f4:24:68:20:2f:74:fd:b8:c0:ef: 95:a4:78:66:d8:f5:c0:f0:05:6f:95:a8:a2:f6:21: 64:db:ed:0a:21:60:2a:3a:67:16:41:cf:4c:db:32: e5:87:89:f4:2b:b3:f5:f4:35:37:5c:b0:c3:85:6a: 97:ea:a8:ed:7f:c8:8b:38:08:04:99:e7:c4:16:35: c6:ef:a5:43:03:56:16:9c:9e:67:12:6b:06:4f:1e: c3:5b:39:9d:45:c6:98:c4:91:c2:7b:12:88:5c:de: 55:52:69:e1:2b:35:17:8d:7e:ec:99:fd:e2:6e:19: 1d:e9:25:3e:2b:66:f2:a8:60:0f:c1:56:4e:b4:29: 86:67:78:0b:96:01:bb:ac:a1:04:bc:d0:8f:88:13: f0:8a:da:34:74:9b:47:43:94:5d:88:7d:8e:44:86: 31:e3:27:77:92:ab:47:1b:a1:ec:24:7e:e6:7b:c7: f6:4f:47:18:7f:8f:63:33:9f:b8:4c:17:6c:b6:d2: d1:df:50:0e:59:bf:a7:d0:8f:6d:de:8f:a2:3c:3a: fd:b7:3c:4b:0e:51:e4:1a:89:a9:e9:04:c2:06:ea: 47:6b:3b:72:dd:b0:c3:96:c8:1d:d1:20:d0:f4:cd: 64:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:35:DB:E9:0B:2A:36:21:4E:39:24:1B:C5:36:B2:76:41:8C:39:EC X509v3 Authority Key Identifier: keyid:B9:BE:B6:0C:D6:22:4D:41:F3:33:A0:7E:18:20:F0:AF:3A:81:FF:F7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/b1f87f5a-f6f9-468d-895e-314487f5e25e/0/B9BEB60CD6224D41F333A07E1820F0AF3A81FFF7.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B9BEB60CD6224D41F333A07E1820F0AF3A81FFF7.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/b1f87f5a-f6f9-468d-895e-314487f5e25e/0/B9BEB60CD6224D41F333A07E1820F0AF3A81FFF7.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1b:6a:bf:cf:25:da:ad:c4:d2:c7:4e:f4:e1:a9:a0:e6:cf:e0: 08:3d:0e:af:b9:53:bb:13:30:79:1b:ec:53:d7:c2:11:6c:c6: c6:5f:dd:c7:22:29:a5:16:23:f1:1d:b7:d9:de:5e:6e:02:83: 93:60:91:17:5c:bc:b2:af:88:b4:ee:81:3e:14:3c:90:d9:75: cb:fe:c8:1c:7e:40:b8:55:48:35:fa:01:95:49:84:bb:79:83: a4:64:37:21:63:c5:3d:7a:ec:a1:db:f9:f4:06:c3:2a:54:90: e3:cf:85:d2:eb:d5:05:08:b8:d2:1d:21:34:46:7f:22:fb:ba: a2:b7:99:b7:a2:d0:8d:11:bf:39:66:4d:4a:c3:c2:0e:de:5a: 3d:a8:0f:03:fb:f9:54:84:30:88:1e:a2:f9:ad:96:37:38:f0: 61:8a:71:74:7a:e5:38:d7:8a:d9:92:63:7c:d9:8b:66:42:6a: 59:89:1a:33:04:3a:2c:c4:61:73:cf:fe:31:ed:ef:72:4c:6f: 7e:02:bc:ea:1a:b7:4f:7c:34:b6:b1:14:6d:dc:41:9a:18:57: 02:5c:d4:ce:a4:5d:a7:a5:70:13:30:10:20:38:e0:f8:cb:9c: b0:0a:81:b0:86:4a:6c:78:bb:c5:3f:a9:69:a2:87:a6:e1:26: 65:28:cc:1f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUSULnwllUsdaMdxAJ7WrrNPGQ66IwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjlCRUI2MENENjIyNEQ0MUYzMzNBMDdFMTgyMEYwQUYz QTgxRkZGNzAeFw0yNTEyMjQwMzE2MjRaFw0yNTEyMjcxMzA5MjRaMDMxMTAvBgNV BAMTKEM4MzVEQkU5MEIyQTM2MjE0RTM5MjQxQkM1MzZCMjc2NDE4QzM5RUMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQClyiKuLDhWDU2VmQu3xwM4S8Vf 9CRoIC90/bjA75WkeGbY9cDwBW+VqKL2IWTb7QohYCo6ZxZBz0zbMuWHifQrs/X0 NTdcsMOFapfqqO1/yIs4CASZ58QWNcbvpUMDVhacnmcSawZPHsNbOZ1FxpjEkcJ7 Eohc3lVSaeErNReNfuyZ/eJuGR3pJT4rZvKoYA/BVk60KYZneAuWAbusoQS80I+I E/CK2jR0m0dDlF2IfY5EhjHjJ3eSq0cboewkfuZ7x/ZPRxh/j2Mzn7hMF2y20tHf UA5Zv6fQj23ej6I8Ov23PEsOUeQaianpBMIG6kdrO3LdsMOWyB3RIND0zWTLAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUyDXb6QsqNiFOOSQbxTaydkGMOewwHwYDVR0j BBgwFoAUub62DNYiTUHzM6B+GCDwrzqB//cwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i MWY4N2Y1YS1mNmY5LTQ2OGQtODk1ZS0zMTQ0ODdmNWUyNWUvMC9COUJFQjYwQ0Q2 MjI0RDQxRjMzM0EwN0UxODIwRjBBRjNBODFGRkY3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQjlCRUI2MENENjIyNEQ0MUYzMzNBMDdFMTgyMEYwQUYzQTgx RkZGNy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYjFmODdmNWEtZjZmOS00NjhkLTg5 NWUtMzE0NDg3ZjVlMjVlLzAvQjlCRUI2MENENjIyNEQ0MUYzMzNBMDdFMTgyMEYw QUYzQTgxRkZGNy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABtqv88l2q3E0sdO9OGpoObP4Ag9Dq+5U7sT MHkb7FPXwhFsxsZf3cciKaUWI/Edt9neXm4Cg5NgkRdcvLKviLTugT4UPJDZdcv+ yBx+QLhVSDX6AZVJhLt5g6RkNyFjxT167KHb+fQGwypUkOPPhdLr1QUIuNIdITRG fyL7uqK3mbei0I0RvzlmTUrDwg7eWj2oDwP7+VSEMIgeovmtljc48GGKcXR65TjX itmSY3zZi2ZCalmJGjMEOizEYXPP/jHt73JMb34CvOoat098NLaxFG3cQZoYVwJc 1M6kXaelcBMwECA44PjLnLAKgbCGSmx4u8U/qWmih6bhJmUozB8= -----END CERTIFICATE-----Generated at Wed Dec 24 22:06:58 2025 by rpki-client