This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/bcb9ba7f-efd1-4994-a2a3-77993338b242/0/9FB9D7ED833E1CA6E4053773AC164214889108CB.mft File: 9FB9D7ED833E1CA6E4053773AC164214889108CB.mft (raw, json) Hash identifier: xqAi8KwnXJ7b1pJPmbO0kJPgol4jf5jYYmXqQ4uOmWg= Subject key identifier: A5:AC:51:D9:DA:6C:F5:3A:97:60:80:9D:EC:4D:54:64:AF:5C:A6:90 Authority key identifier: 9F:B9:D7:ED:83:3E:1C:A6:E4:05:37:73:AC:16:42:14:88:91:08:CB Certificate issuer: /CN=9FB9D7ED833E1CA6E4053773AC164214889108CB Certificate serial: 51A18DBBF00E2594A2BF412A13020F62F30844BB Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9FB9D7ED833E1CA6E4053773AC164214889108CB.cer Subject info access: rsync://repo-rpki.idnic.net/repo/bcb9ba7f-efd1-4994-a2a3-77993338b242/0/9FB9D7ED833E1CA6E4053773AC164214889108CB.mft Manifest number: 02B9 Signing time: Mon 22 Dec 2025 17:00:42 +0000 Manifest this update: Mon 22 Dec 2025 16:55:42 +0000 Manifest next update: Thu 25 Dec 2025 21:02:42 +0000 Files and hashes: 1: 9FB9D7ED833E1CA6E4053773AC164214889108CB.crl (hash: T8f0l4L0CS13Uib5ecoNckrIGofB7wSJapA+F7wHWpQ=) 2: 3130332e3134382e3139342e302f32342d3234203d3e20313430303033.roa (hash: NWZFKnhcY/aoMWV+2zpR3+GU8xiBKXVASrcCEyuCBhE=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/bcb9ba7f-efd1-4994-a2a3-77993338b242/0/9FB9D7ED833E1CA6E4053773AC164214889108CB.crl rsync://repo-rpki.idnic.net/repo/bcb9ba7f-efd1-4994-a2a3-77993338b242/0/9FB9D7ED833E1CA6E4053773AC164214889108CB.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9FB9D7ED833E1CA6E4053773AC164214889108CB.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 25 Dec 2025 21:02:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 51:a1:8d:bb:f0:0e:25:94:a2:bf:41:2a:13:02:0f:62:f3:08:44:bb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9FB9D7ED833E1CA6E4053773AC164214889108CB Validity Not Before: Dec 22 16:55:42 2025 GMT Not After : Dec 25 21:02:42 2025 GMT Subject: CN=A5AC51D9DA6CF53A9760809DEC4D5464AF5CA690 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:be:bb:43:cc:c0:b4:68:e4:75:a0:dd:19:69: 9b:9f:e0:a5:96:f9:1b:90:c1:58:c9:06:3c:1b:64: 7f:cc:0e:fc:37:c5:4a:64:d6:b4:85:eb:5a:2a:66: c4:30:b2:3b:0d:6f:2a:8d:96:86:7d:51:8a:53:67: 42:29:68:b8:63:82:cd:f6:99:86:ec:21:20:af:4f: d2:c9:f8:55:67:86:c7:99:73:b5:1c:ff:3e:7c:26: b8:b2:c9:b5:43:6e:c5:3e:7a:f0:28:a4:75:bc:44: 19:cb:d8:fc:59:06:8c:e6:fd:64:55:52:b4:3d:0f: 49:b7:60:31:08:28:04:5d:f6:98:c5:ae:84:b1:5e: ef:5b:57:2c:03:94:e6:b0:12:f2:76:f6:df:d6:95: ef:9d:06:45:2c:59:9a:e9:34:cf:9d:d5:18:64:05: 12:a2:db:c2:97:42:09:ff:df:36:b7:2f:9e:a3:37: c0:e5:5b:64:ea:10:52:35:91:4e:f3:b7:fe:08:a7: 14:75:40:60:67:e1:54:ef:84:52:89:50:bf:e7:86: 32:87:d3:fe:10:2b:11:53:c2:52:41:39:51:d1:29: 35:f1:de:97:60:14:e4:30:95:0d:b9:ae:69:1f:b1: 96:7a:dc:76:12:c8:e8:07:7e:29:2a:8b:3c:3d:ae: 0b:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:AC:51:D9:DA:6C:F5:3A:97:60:80:9D:EC:4D:54:64:AF:5C:A6:90 X509v3 Authority Key Identifier: keyid:9F:B9:D7:ED:83:3E:1C:A6:E4:05:37:73:AC:16:42:14:88:91:08:CB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/bcb9ba7f-efd1-4994-a2a3-77993338b242/0/9FB9D7ED833E1CA6E4053773AC164214889108CB.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9FB9D7ED833E1CA6E4053773AC164214889108CB.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/bcb9ba7f-efd1-4994-a2a3-77993338b242/0/9FB9D7ED833E1CA6E4053773AC164214889108CB.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 46:86:ad:9b:3b:22:ab:64:af:8d:c0:d7:0e:3e:ba:2e:82:0c: 8e:b8:40:48:9a:27:53:7f:e2:8c:93:f5:f2:46:e1:bf:a9:23: a0:45:97:b0:f6:12:e0:6c:f4:34:a0:cd:8c:4e:d5:82:c4:4b: ee:29:ce:c5:5e:d7:ba:bb:71:77:83:6a:30:cf:9d:21:21:f9: 2d:b1:83:7b:14:2d:99:f7:35:36:57:17:7f:cc:4f:b1:8c:31: 26:d1:3f:55:70:ad:5e:62:55:6b:56:e5:b9:ed:4c:fb:5f:34: 48:a2:f5:1e:2e:40:20:4c:bf:c8:34:99:7e:3c:54:ae:73:d3: 85:5d:f3:ac:5f:e8:7d:71:8e:ed:52:5c:ba:2f:2c:a9:73:ef: 98:20:52:db:5a:db:3e:cf:2a:cf:23:4f:c0:f9:c1:2c:aa:68: 13:31:1a:8c:5c:c2:8e:6d:2b:1c:38:e8:04:17:a8:f3:3e:8a: 8b:12:80:c8:ad:fa:67:f4:9f:c1:ee:6e:19:28:02:50:38:28: e9:55:60:85:01:ce:be:0e:a5:77:e0:2e:2b:5e:74:8b:94:46: 4e:58:e4:f3:d7:6b:02:14:ba:cd:99:75:71:f3:a6:68:b7:20: 95:77:60:b1:69:37:61:8b:af:6e:b2:2e:37:f1:e2:6f:2e:b7: 5d:94:ce:28 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUUaGNu/AOJZSiv0EqEwIPYvMIRLswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUZCOUQ3RUQ4MzNFMUNBNkU0MDUzNzczQUMxNjQyMTQ4 ODkxMDhDQjAeFw0yNTEyMjIxNjU1NDJaFw0yNTEyMjUyMTAyNDJaMDMxMTAvBgNV BAMTKEE1QUM1MUQ5REE2Q0Y1M0E5NzYwODA5REVDNEQ1NDY0QUY1Q0E2OTAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCovrtDzMC0aOR1oN0ZaZuf4KWW +RuQwVjJBjwbZH/MDvw3xUpk1rSF61oqZsQwsjsNbyqNloZ9UYpTZ0IpaLhjgs32 mYbsISCvT9LJ+FVnhseZc7Uc/z58JriyybVDbsU+evAopHW8RBnL2PxZBozm/WRV UrQ9D0m3YDEIKARd9pjFroSxXu9bVywDlOawEvJ29t/Wle+dBkUsWZrpNM+d1Rhk BRKi28KXQgn/3za3L56jN8DlW2TqEFI1kU7zt/4IpxR1QGBn4VTvhFKJUL/nhjKH 0/4QKxFTwlJBOVHRKTXx3pdgFOQwlQ25rmkfsZZ63HYSyOgHfikqizw9rgvxAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUpaxR2dps9TqXYICd7E1UZK9cppAwHwYDVR0j BBgwFoAUn7nX7YM+HKbkBTdzrBZCFIiRCMswDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i Y2I5YmE3Zi1lZmQxLTQ5OTQtYTJhMy03Nzk5MzMzOGIyNDIvMC85RkI5RDdFRDgz M0UxQ0E2RTQwNTM3NzNBQzE2NDIxNDg4OTEwOENCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOUZCOUQ3RUQ4MzNFMUNBNkU0MDUzNzczQUMxNjQyMTQ4ODkx MDhDQi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYmNiOWJhN2YtZWZkMS00OTk0LWEy YTMtNzc5OTMzMzhiMjQyLzAvOUZCOUQ3RUQ4MzNFMUNBNkU0MDUzNzczQUMxNjQy MTQ4ODkxMDhDQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEaGrZs7Iqtkr43A1w4+ui6CDI64QEiaJ1N/ 4oyT9fJG4b+pI6BFl7D2EuBs9DSgzYxO1YLES+4pzsVe17q7cXeDajDPnSEh+S2x g3sULZn3NTZXF3/MT7GMMSbRP1VwrV5iVWtW5bntTPtfNEii9R4uQCBMv8g0mX48 VK5z04Vd86xf6H1xju1SXLovLKlz75ggUtta2z7PKs8jT8D5wSyqaBMxGoxcwo5t Kxw46AQXqPM+iosSgMit+mf0n8HubhkoAlA4KOlVYIUBzr4OpXfgLitedIuURk5Y 5PPXawIUus2ZdXHzpmi3IJV3YLFpN2GLr26yLjfx4m8ut12Uzig= -----END CERTIFICATE-----Generated at Wed Dec 24 20:23:41 2025 by rpki-client