This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/bcb9ba7f-efd1-4994-a2a3-77993338b242/0/9FB9D7ED833E1CA6E4053773AC164214889108CB.mft File: 9FB9D7ED833E1CA6E4053773AC164214889108CB.mft (raw, json) Hash identifier: Kw4Sd7BuB42yQye8T/pSepRCGhJZ0rBFyiPOQzBBLFM= Subject key identifier: E1:4F:FD:CA:B5:65:F8:7F:A1:32:F8:E9:5D:91:CD:4D:3B:ED:C0:1B Authority key identifier: 9F:B9:D7:ED:83:3E:1C:A6:E4:05:37:73:AC:16:42:14:88:91:08:CB Certificate issuer: /CN=9FB9D7ED833E1CA6E4053773AC164214889108CB Certificate serial: 6619D67BA6877FBB6CD0D9D0F3EFDB62427350C2 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9FB9D7ED833E1CA6E4053773AC164214889108CB.cer Subject info access: rsync://repo-rpki.idnic.net/repo/bcb9ba7f-efd1-4994-a2a3-77993338b242/0/9FB9D7ED833E1CA6E4053773AC164214889108CB.mft Manifest number: 02BB Signing time: Fri 26 Dec 2025 22:30:43 +0000 Manifest this update: Fri 26 Dec 2025 22:25:43 +0000 Manifest next update: Tue 30 Dec 2025 01:04:43 +0000 Files and hashes: 1: 3130332e3134382e3139342e302f32342d3234203d3e20313430303033.roa (hash: NWZFKnhcY/aoMWV+2zpR3+GU8xiBKXVASrcCEyuCBhE=) 2: 9FB9D7ED833E1CA6E4053773AC164214889108CB.crl (hash: RqZ8LLXO74zlcFB0YPYqrbI8QoiEm5Eavv5qb9XTGfY=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/bcb9ba7f-efd1-4994-a2a3-77993338b242/0/9FB9D7ED833E1CA6E4053773AC164214889108CB.crl rsync://repo-rpki.idnic.net/repo/bcb9ba7f-efd1-4994-a2a3-77993338b242/0/9FB9D7ED833E1CA6E4053773AC164214889108CB.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9FB9D7ED833E1CA6E4053773AC164214889108CB.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 29 Dec 2025 11:33:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 66:19:d6:7b:a6:87:7f:bb:6c:d0:d9:d0:f3:ef:db:62:42:73:50:c2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9FB9D7ED833E1CA6E4053773AC164214889108CB Validity Not Before: Dec 26 22:25:43 2025 GMT Not After : Dec 30 01:04:43 2025 GMT Subject: CN=E14FFDCAB565F87FA132F8E95D91CD4D3BEDC01B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:bc:26:6c:a3:fc:0a:35:8a:50:a0:79:4c:24: 8c:d9:8b:27:b8:70:11:20:b3:e0:f5:2c:6d:e4:18: 2f:40:e7:e9:dd:82:8a:be:5a:d8:f0:04:be:13:8c: 71:0a:ea:c7:68:6f:c0:a1:70:67:35:98:c4:0d:89: 12:df:82:56:ed:94:61:a5:5a:7b:a9:5d:2a:a7:8f: 87:64:d1:06:15:9e:37:35:98:bf:e9:8b:44:8f:a0: 4b:24:f8:0b:41:a6:8b:1e:81:1a:36:93:c4:53:0d: d8:d9:f1:36:89:5b:e6:ae:77:c8:df:e1:a6:19:d4: 69:a7:bc:3a:3d:87:c2:c8:0e:95:40:06:9d:97:08: 3b:a0:61:32:d4:4c:6d:31:5e:39:e6:01:df:98:f4: 49:5a:44:c8:b8:4b:b3:9a:33:d1:77:14:cb:19:a9: fd:54:93:9a:94:d3:c8:8e:bd:71:76:f4:42:d4:1a: b4:f9:18:98:95:01:7a:8a:8e:b7:b1:b4:1d:07:e3: 91:1a:1f:e8:03:51:50:3c:69:d9:b0:ed:20:59:e3: 78:b1:4e:67:0a:2e:e1:fd:70:f6:82:fb:66:c6:55: b0:82:dc:27:6e:5e:f8:5e:a8:ee:4f:03:1c:3b:dc: e7:48:36:cf:6e:c2:2c:da:18:e2:f0:e5:80:80:48: 25:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E1:4F:FD:CA:B5:65:F8:7F:A1:32:F8:E9:5D:91:CD:4D:3B:ED:C0:1B X509v3 Authority Key Identifier: keyid:9F:B9:D7:ED:83:3E:1C:A6:E4:05:37:73:AC:16:42:14:88:91:08:CB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/bcb9ba7f-efd1-4994-a2a3-77993338b242/0/9FB9D7ED833E1CA6E4053773AC164214889108CB.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9FB9D7ED833E1CA6E4053773AC164214889108CB.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/bcb9ba7f-efd1-4994-a2a3-77993338b242/0/9FB9D7ED833E1CA6E4053773AC164214889108CB.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ab:6a:8b:95:2d:e2:37:cc:3f:eb:b2:02:60:cf:b8:80:76:43: 90:40:56:c4:43:2c:59:c0:5f:fd:aa:c1:a9:eb:fd:40:2d:e6: 3c:24:ca:5a:f2:5b:59:f4:b5:0f:52:c1:cd:09:54:59:16:02: 5a:51:28:cb:ce:f8:a8:ac:da:db:23:35:9c:43:a9:5a:60:4f: 8f:fd:07:e4:46:04:9d:48:9d:07:94:b9:c4:60:b1:b5:48:5f: c3:b4:18:a2:ea:60:7a:83:4c:5f:ca:53:d1:40:8c:54:4e:32: 3c:b7:b5:a4:26:f7:7d:ca:0c:89:a7:6e:84:36:19:74:ad:21: 9f:01:b0:8a:6c:ba:f5:21:bf:de:81:11:14:cc:aa:ff:2a:2e: dd:f0:86:ce:14:80:47:11:f2:d4:b7:55:2e:de:17:a3:a8:c6: 7e:6d:ad:16:72:d7:b8:91:fa:5d:97:e9:53:45:51:6a:46:71: 22:48:b7:7c:31:a9:f0:96:0a:35:ba:e0:95:bd:81:89:f3:13: b6:9c:e4:0d:25:4b:1e:30:b1:54:6c:f5:80:fb:93:5b:c8:4a: 3b:99:0f:60:40:21:92:52:32:ba:96:a8:6a:d5:d5:fd:1b:9f: 08:24:df:a2:07:81:58:d0:49:13:29:92:7b:fb:6a:fd:7a:ac: 2c:fd:f0:05 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUZhnWe6aHf7ts0NnQ8+/bYkJzUMIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUZCOUQ3RUQ4MzNFMUNBNkU0MDUzNzczQUMxNjQyMTQ4 ODkxMDhDQjAeFw0yNTEyMjYyMjI1NDNaFw0yNTEyMzAwMTA0NDNaMDMxMTAvBgNV BAMTKEUxNEZGRENBQjU2NUY4N0ZBMTMyRjhFOTVEOTFDRDREM0JFREMwMUIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCsvCZso/wKNYpQoHlMJIzZiye4 cBEgs+D1LG3kGC9A5+ndgoq+WtjwBL4TjHEK6sdob8ChcGc1mMQNiRLfglbtlGGl WnupXSqnj4dk0QYVnjc1mL/pi0SPoEsk+AtBposegRo2k8RTDdjZ8TaJW+aud8jf 4aYZ1GmnvDo9h8LIDpVABp2XCDugYTLUTG0xXjnmAd+Y9ElaRMi4S7OaM9F3FMsZ qf1Uk5qU08iOvXF29ELUGrT5GJiVAXqKjrextB0H45EaH+gDUVA8admw7SBZ43ix TmcKLuH9cPaC+2bGVbCC3CduXvheqO5PAxw73OdINs9uwizaGOLw5YCASCUlAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU4U/9yrVl+H+hMvjpXZHNTTvtwBswHwYDVR0j BBgwFoAUn7nX7YM+HKbkBTdzrBZCFIiRCMswDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i Y2I5YmE3Zi1lZmQxLTQ5OTQtYTJhMy03Nzk5MzMzOGIyNDIvMC85RkI5RDdFRDgz M0UxQ0E2RTQwNTM3NzNBQzE2NDIxNDg4OTEwOENCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOUZCOUQ3RUQ4MzNFMUNBNkU0MDUzNzczQUMxNjQyMTQ4ODkx MDhDQi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYmNiOWJhN2YtZWZkMS00OTk0LWEy YTMtNzc5OTMzMzhiMjQyLzAvOUZCOUQ3RUQ4MzNFMUNBNkU0MDUzNzczQUMxNjQy MTQ4ODkxMDhDQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKtqi5Ut4jfMP+uyAmDPuIB2Q5BAVsRDLFnA X/2qwanr/UAt5jwkylryW1n0tQ9Swc0JVFkWAlpRKMvO+Kis2tsjNZxDqVpgT4/9 B+RGBJ1InQeUucRgsbVIX8O0GKLqYHqDTF/KU9FAjFROMjy3taQm933KDImnboQ2 GXStIZ8BsIpsuvUhv96BERTMqv8qLt3whs4UgEcR8tS3VS7eF6Ooxn5trRZy17iR +l2X6VNFUWpGcSJIt3wxqfCWCjW64JW9gYnzE7ac5A0lSx4wsVRs9YD7k1vISjuZ D2BAIZJSMrqWqGrV1f0bnwgk36IHgVjQSRMpknv7av16rCz98AU= -----END CERTIFICATE-----Generated at Sun Dec 28 06:25:19 2025 by rpki-client