This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/f0bfd65e-2d68-43a0-bb11-db5668dae812/0/9BE3C799BA370880CEAD4C8A8D1C0889C2733535.mft File: 9BE3C799BA370880CEAD4C8A8D1C0889C2733535.mft (raw, json) Hash identifier: 9HbZA0OIcy12nI6msyipqlsyg6L+eHJmWrYj9IbzAbQ= Subject key identifier: 17:17:BC:0E:D5:18:CD:F3:2B:D6:A8:42:FA:8A:F5:ED:7B:B5:2F:6E Authority key identifier: 9B:E3:C7:99:BA:37:08:80:CE:AD:4C:8A:8D:1C:08:89:C2:73:35:35 Certificate issuer: /CN=9BE3C799BA370880CEAD4C8A8D1C0889C2733535 Certificate serial: 7AADF5486A463B1C2C687E8323C5F58FDCD04586 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9BE3C799BA370880CEAD4C8A8D1C0889C2733535.cer Subject info access: rsync://repo-rpki.idnic.net/repo/f0bfd65e-2d68-43a0-bb11-db5668dae812/0/9BE3C799BA370880CEAD4C8A8D1C0889C2733535.mft Manifest number: 0143 Signing time: Wed 24 Dec 2025 19:12:24 +0000 Manifest this update: Wed 24 Dec 2025 19:07:24 +0000 Manifest next update: Sun 28 Dec 2025 02:09:24 +0000 Files and hashes: 1: 9BE3C799BA370880CEAD4C8A8D1C0889C2733535.crl (hash: MArit2CLjPsBW9uwbFPOZlzvoce25srwgtfUU6qudE4=) 2: 3130332e33352e3134302e302f32332d3234203d3e203633383834.roa (hash: 2aBF3TlPpZvgBg8RcuAyt7db252emxas0qRgZU5RuEU=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/f0bfd65e-2d68-43a0-bb11-db5668dae812/0/9BE3C799BA370880CEAD4C8A8D1C0889C2733535.crl rsync://repo-rpki.idnic.net/repo/f0bfd65e-2d68-43a0-bb11-db5668dae812/0/9BE3C799BA370880CEAD4C8A8D1C0889C2733535.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9BE3C799BA370880CEAD4C8A8D1C0889C2733535.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 27 Dec 2025 17:20:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7a:ad:f5:48:6a:46:3b:1c:2c:68:7e:83:23:c5:f5:8f:dc:d0:45:86 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9BE3C799BA370880CEAD4C8A8D1C0889C2733535 Validity Not Before: Dec 24 19:07:24 2025 GMT Not After : Dec 28 02:09:24 2025 GMT Subject: CN=1717BC0ED518CDF32BD6A842FA8AF5ED7BB52F6E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:17:41:e4:43:b8:15:2a:5a:91:c1:17:2d:86: 42:18:51:bd:5f:58:15:3e:29:3d:89:3b:d9:09:08: d8:49:15:02:bf:09:ba:0d:48:f7:cc:1f:bd:ba:0a: 72:5e:88:30:65:4f:e9:82:b2:f9:8e:bc:df:5f:08: 06:3b:ce:18:64:c4:a0:35:b5:41:2d:75:79:d4:f5: 16:2f:72:1a:3f:f0:e3:f2:bc:ba:ab:52:b1:f7:32: 13:e8:b9:af:2e:c2:2f:14:73:51:af:77:a7:a5:e2: d4:42:58:46:55:d7:7c:a1:d1:0a:6e:3e:e5:f4:e0: 6c:34:f3:ca:56:ab:f4:e6:d4:96:76:73:0f:3f:4a: 6c:1f:3a:4e:8e:5b:65:0c:51:e4:6c:c7:a5:94:84: 25:2c:da:9e:a2:c9:32:fe:e2:62:30:e9:b8:39:ed: b5:9f:7d:1a:93:e2:cf:9e:55:f8:17:6b:4f:79:c8: 80:d4:01:9d:f2:ae:57:54:17:f7:36:cb:fe:f2:d2: 22:1b:2e:19:fe:23:7e:7e:81:12:8a:f2:23:dd:23: 6f:f1:1a:ea:a9:95:02:ae:1b:a8:ab:39:bf:24:90: 44:96:8b:ab:0c:db:19:fa:30:74:a9:90:c5:3b:a3: 71:be:49:03:6f:53:ad:de:71:9e:64:12:97:19:1a: 54:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:17:BC:0E:D5:18:CD:F3:2B:D6:A8:42:FA:8A:F5:ED:7B:B5:2F:6E X509v3 Authority Key Identifier: keyid:9B:E3:C7:99:BA:37:08:80:CE:AD:4C:8A:8D:1C:08:89:C2:73:35:35 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/f0bfd65e-2d68-43a0-bb11-db5668dae812/0/9BE3C799BA370880CEAD4C8A8D1C0889C2733535.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9BE3C799BA370880CEAD4C8A8D1C0889C2733535.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f0bfd65e-2d68-43a0-bb11-db5668dae812/0/9BE3C799BA370880CEAD4C8A8D1C0889C2733535.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1c:6d:8a:af:7a:a6:97:c1:21:84:7c:21:0f:19:cf:e3:29:41: d4:2b:e2:42:14:7c:dc:59:f7:4a:b9:98:78:52:83:4d:bf:6e: f8:23:6f:d9:f3:a4:47:c7:41:f9:b0:23:63:66:b9:f9:92:18: 00:16:3d:82:6d:36:b4:a1:b2:6f:e9:35:b5:64:c2:fc:e4:4b: 74:c4:0b:9d:fc:c2:59:83:9a:f8:5e:e3:d7:7c:f1:c5:4c:05: 6a:21:f7:1d:98:39:19:3f:02:ef:10:b2:ee:fe:cb:13:61:2d: 80:7d:de:b5:d9:63:06:7a:5d:1f:73:bb:34:ab:e4:1f:e5:66: d1:b2:3c:79:5c:d2:87:cc:00:e3:dc:cf:28:83:f6:68:51:d5: 70:2c:1f:36:3b:fe:2c:73:ac:98:99:c2:96:22:7e:bd:4e:49: 93:6f:56:b0:9a:3b:4c:ab:c8:66:a8:16:38:52:4b:68:1e:b3: 5d:73:5c:35:45:4d:be:06:f7:c6:c2:bc:d1:b6:f2:1a:d2:73: 66:a1:dd:01:d5:21:55:67:24:a3:62:ea:c9:0d:4b:ee:31:5c: b0:41:04:a1:9d:e5:ab:91:73:9a:58:c0:df:cc:8b:40:f4:16: c7:71:f3:a8:03:50:8d:c9:cb:cb:4b:dd:53:b0:68:e1:8b:1e: 22:9b:46:dc -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUeq31SGpGOxwsaH6DI8X1j9zQRYYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUJFM0M3OTlCQTM3MDg4MENFQUQ0QzhBOEQxQzA4ODlD MjczMzUzNTAeFw0yNTEyMjQxOTA3MjRaFw0yNTEyMjgwMjA5MjRaMDMxMTAvBgNV BAMTKDE3MTdCQzBFRDUxOENERjMyQkQ2QTg0MkZBOEFGNUVEN0JCNTJGNkUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDSF0HkQ7gVKlqRwRcthkIYUb1f WBU+KT2JO9kJCNhJFQK/CboNSPfMH726CnJeiDBlT+mCsvmOvN9fCAY7zhhkxKA1 tUEtdXnU9RYvcho/8OPyvLqrUrH3MhPoua8uwi8Uc1Gvd6el4tRCWEZV13yh0Qpu PuX04Gw088pWq/Tm1JZ2cw8/SmwfOk6OW2UMUeRsx6WUhCUs2p6iyTL+4mIw6bg5 7bWffRqT4s+eVfgXa095yIDUAZ3yrldUF/c2y/7y0iIbLhn+I35+gRKK8iPdI2/x GuqplQKuG6irOb8kkESWi6sM2xn6MHSpkMU7o3G+SQNvU63ecZ5kEpcZGlRrAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUFxe8DtUYzfMr1qhC+or17Xu1L24wHwYDVR0j BBgwFoAUm+PHmbo3CIDOrUyKjRwIicJzNTUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m MGJmZDY1ZS0yZDY4LTQzYTAtYmIxMS1kYjU2NjhkYWU4MTIvMC85QkUzQzc5OUJB MzcwODgwQ0VBRDRDOEE4RDFDMDg4OUMyNzMzNTM1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOUJFM0M3OTlCQTM3MDg4MENFQUQ0QzhBOEQxQzA4ODlDMjcz MzUzNS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZjBiZmQ2NWUtMmQ2OC00M2EwLWJi MTEtZGI1NjY4ZGFlODEyLzAvOUJFM0M3OTlCQTM3MDg4MENFQUQ0QzhBOEQxQzA4 ODlDMjczMzUzNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABxtiq96ppfBIYR8IQ8Zz+MpQdQr4kIUfNxZ 90q5mHhSg02/bvgjb9nzpEfHQfmwI2NmufmSGAAWPYJtNrShsm/pNbVkwvzkS3TE C538wlmDmvhe49d88cVMBWoh9x2YORk/Au8Qsu7+yxNhLYB93rXZYwZ6XR9zuzSr 5B/lZtGyPHlc0ofMAOPczyiD9mhR1XAsHzY7/ixzrJiZwpYifr1OSZNvVrCaO0yr yGaoFjhSS2ges11zXDVFTb4G98bCvNG28hrSc2ah3QHVIVVnJKNi6skNS+4xXLBB BKGd5auRc5pYwN/Mi0D0Fsdx86gDUI3Jy8tL3VOwaOGLHiKbRtw= -----END CERTIFICATE-----Generated at Wed Dec 24 22:05:58 2025 by rpki-client