This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/d7dd2519-3078-47d3-9e86-48fd3bde76c8/0/9B2DB6A80E8A5860943D5E249BCF6F2C47D48549.mft File: 9B2DB6A80E8A5860943D5E249BCF6F2C47D48549.mft (raw, json) Hash identifier: aNpZI8695EygteXtbz9wtE9O1We4pk+5C0tk5MJsrVw= Subject key identifier: 43:85:25:AB:22:8C:66:07:F9:92:5E:23:67:AB:54:6A:AA:99:37:AF Authority key identifier: 9B:2D:B6:A8:0E:8A:58:60:94:3D:5E:24:9B:CF:6F:2C:47:D4:85:49 Certificate issuer: /CN=9B2DB6A80E8A5860943D5E249BCF6F2C47D48549 Certificate serial: 2FCF5365A9C425A8DEC85095AB7B61936945D954 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/9B2DB6A80E8A5860943D5E249BCF6F2C47D48549.cer Subject info access: rsync://repo-rpki.idnic.net/repo/d7dd2519-3078-47d3-9e86-48fd3bde76c8/0/9B2DB6A80E8A5860943D5E249BCF6F2C47D48549.mft Manifest number: B6 Signing time: Tue 23 Dec 2025 11:40:52 +0000 Manifest this update: Tue 23 Dec 2025 11:35:52 +0000 Manifest next update: Fri 26 Dec 2025 14:43:52 +0000 Files and hashes: 1: 3135372e36362e3233392e302f32342d3234203d3e20313532373538.roa (hash: M0X+RxU47itayQ/XNChUFKjZL2Z8BgvfCZ6jiqN1z0I=) 2: 9B2DB6A80E8A5860943D5E249BCF6F2C47D48549.crl (hash: xJNiN7JCv2mqwZ7RF0nOjGB4uqSBP90zQ/CbKP4u94k=) 3: 3135372e36362e3233382e302f32342d3234203d3e20313532373538.roa (hash: Mfu0+PMIaMHgeu7vJ5ATI3uA0Ov6u+uix1eTRPcgQIY=) 4: 3135372e36362e3233382e302f32332d3233203d3e20313532373538.roa (hash: p3DpYgemTsXSVOH+PUaAJGeFQs3bjVbh/jL7f1e5HC4=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/d7dd2519-3078-47d3-9e86-48fd3bde76c8/0/9B2DB6A80E8A5860943D5E249BCF6F2C47D48549.crl rsync://repo-rpki.idnic.net/repo/d7dd2519-3078-47d3-9e86-48fd3bde76c8/0/9B2DB6A80E8A5860943D5E249BCF6F2C47D48549.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/9B2DB6A80E8A5860943D5E249BCF6F2C47D48549.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 26 Dec 2025 14:43:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2f:cf:53:65:a9:c4:25:a8:de:c8:50:95:ab:7b:61:93:69:45:d9:54 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9B2DB6A80E8A5860943D5E249BCF6F2C47D48549 Validity Not Before: Dec 23 11:35:52 2025 GMT Not After : Dec 26 14:43:52 2025 GMT Subject: CN=438525AB228C6607F9925E2367AB546AAA9937AF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:33:60:2f:f2:54:f3:51:d2:30:39:13:56:de: 4e:6a:ac:ba:df:ed:d8:f3:11:de:e8:6f:a7:a0:6b: 42:35:7a:8f:50:34:a7:3c:ba:9b:58:b7:47:98:3a: bf:52:40:43:17:c2:58:37:3c:60:0e:62:04:ca:e0: 49:6c:18:86:a2:aa:22:5e:17:ed:b3:80:07:62:a8: d3:e4:49:fd:0d:e7:13:74:cc:2c:ad:d7:d1:70:ff: 80:14:68:8f:f6:48:49:c8:bd:35:fb:99:8f:67:06: 94:85:55:cf:a3:93:a3:19:5c:52:2f:b8:30:d7:90: 3e:ca:31:3c:b5:72:a9:dd:c5:bb:e4:84:73:75:98: 7b:7c:e5:22:a4:58:1f:68:71:21:61:f7:fa:9c:b1: c4:23:91:38:9a:ce:83:6b:d0:51:aa:45:ab:20:b7: 08:3d:56:16:c0:23:76:69:9d:a7:d5:ee:36:b1:af: bf:ad:d7:17:0f:a5:b4:56:a2:04:57:26:04:68:d4: 01:6f:87:1d:fd:1b:ae:41:fe:ad:8a:34:1b:3a:eb: 61:d9:2e:c6:34:6c:6e:19:1c:f9:20:3a:66:c6:02: 16:33:74:13:25:cd:45:39:0f:b5:10:b9:53:5a:60: 0d:a3:1c:b7:88:bd:57:a9:d9:d8:6c:f1:47:cf:be: ad:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:85:25:AB:22:8C:66:07:F9:92:5E:23:67:AB:54:6A:AA:99:37:AF X509v3 Authority Key Identifier: keyid:9B:2D:B6:A8:0E:8A:58:60:94:3D:5E:24:9B:CF:6F:2C:47:D4:85:49 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/d7dd2519-3078-47d3-9e86-48fd3bde76c8/0/9B2DB6A80E8A5860943D5E249BCF6F2C47D48549.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/9B2DB6A80E8A5860943D5E249BCF6F2C47D48549.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d7dd2519-3078-47d3-9e86-48fd3bde76c8/0/9B2DB6A80E8A5860943D5E249BCF6F2C47D48549.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption dd:d8:25:8e:aa:fa:ed:92:34:33:4f:0d:3c:27:14:80:42:04: 15:b5:7a:12:8b:10:95:9b:98:20:14:18:09:16:6f:03:3c:fc: ad:db:dd:f0:1e:fe:fc:b4:97:0a:31:fd:b3:43:b4:81:5e:f7: 6e:fa:76:69:7d:99:92:45:30:6e:81:42:93:a1:5c:93:1d:7f: 21:05:ea:8f:c2:4a:0d:41:d7:80:23:00:86:ad:0e:c0:8e:31: f9:c7:30:e5:96:9e:aa:f0:8f:63:aa:7a:b8:fc:df:3e:ec:e1: 72:9d:b4:68:ef:07:65:51:f4:05:2e:8e:f8:b1:0b:57:ac:ce: 92:b9:34:5d:a6:9d:2c:cf:89:35:5e:9f:bd:e2:6b:2b:c5:44: 28:6c:c0:70:a8:7c:f4:d7:43:3e:33:4f:2a:f7:36:6d:cc:27: 4e:28:02:ba:07:09:ec:e1:ec:75:c8:80:88:0b:06:77:87:59: 60:2c:fe:60:45:b0:8c:90:fc:be:41:ea:2d:7d:d8:e5:b9:1b: 64:d5:ba:38:4e:32:f5:04:bc:69:6c:28:68:ba:09:09:e6:f4: 1e:16:88:ac:86:7a:d3:f4:af:80:1b:a5:63:31:1b:f0:da:71: e2:e5:82:fe:64:5a:4d:8e:73:e7:e5:f1:80:5c:92:4e:7a:36: 04:16:51:f0 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUL89TZanEJajeyFCVq3thk2lF2VQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUIyREI2QTgwRThBNTg2MDk0M0Q1RTI0OUJDRjZGMkM0 N0Q0ODU0OTAeFw0yNTEyMjMxMTM1NTJaFw0yNTEyMjYxNDQzNTJaMDMxMTAvBgNV BAMTKDQzODUyNUFCMjI4QzY2MDdGOTkyNUUyMzY3QUI1NDZBQUE5OTM3QUYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCmM2Av8lTzUdIwORNW3k5qrLrf 7djzEd7ob6ega0I1eo9QNKc8uptYt0eYOr9SQEMXwlg3PGAOYgTK4ElsGIaiqiJe F+2zgAdiqNPkSf0N5xN0zCyt19Fw/4AUaI/2SEnIvTX7mY9nBpSFVc+jk6MZXFIv uDDXkD7KMTy1cqndxbvkhHN1mHt85SKkWB9ocSFh9/qcscQjkTiazoNr0FGqRasg twg9VhbAI3ZpnafV7jaxr7+t1xcPpbRWogRXJgRo1AFvhx39G65B/q2KNBs662HZ LsY0bG4ZHPkgOmbGAhYzdBMlzUU5D7UQuVNaYA2jHLeIvVep2dhs8UfPvq3BAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUQ4UlqyKMZgf5kl4jZ6tUaqqZN68wHwYDVR0j BBgwFoAUmy22qA6KWGCUPV4km89vLEfUhUkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k N2RkMjUxOS0zMDc4LTQ3ZDMtOWU4Ni00OGZkM2JkZTc2YzgvMC85QjJEQjZBODBF OEE1ODYwOTQzRDVFMjQ5QkNGNkYyQzQ3RDQ4NTQ5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvOUIyREI2QTgwRThBNTg2MDk0M0Q1RTI0OUJDRjZGMkM0N0Q0 ODU0OS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZDdkZDI1MTktMzA3OC00N2QzLTll ODYtNDhmZDNiZGU3NmM4LzAvOUIyREI2QTgwRThBNTg2MDk0M0Q1RTI0OUJDRjZG MkM0N0Q0ODU0OS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAN3YJY6q+u2SNDNPDTwnFIBCBBW1ehKLEJWb mCAUGAkWbwM8/K3b3fAe/vy0lwox/bNDtIFe9276dml9mZJFMG6BQpOhXJMdfyEF 6o/CSg1B14AjAIatDsCOMfnHMOWWnqrwj2Oqerj83z7s4XKdtGjvB2VR9AUujvix C1eszpK5NF2mnSzPiTVen73iayvFRChswHCofPTXQz4zTyr3Nm3MJ04oAroHCezh 7HXIgIgLBneHWWAs/mBFsIyQ/L5B6i192OW5G2TVujhOMvUEvGlsKGi6CQnm9B4W iKyGetP0r4AbpWMxG/DaceLlgv5kWk2Oc+fl8YBckk56NgQWUfA= -----END CERTIFICATE-----Generated at Wed Dec 24 10:32:23 2025 by rpki-client