This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/f2b30f16-e876-48cb-936b-702c3055113d/0/BB9F739640FAA3D90527D7B57D2D1D9993A42BD1.mft File: BB9F739640FAA3D90527D7B57D2D1D9993A42BD1.mft (raw, json) Hash identifier: i4JcG0xLFgDYOs+l6E9l4v52heFVbHwudT/M0+fGOjM= Subject key identifier: EE:AF:6B:4E:E8:CD:FE:2E:D5:E3:FE:94:42:C0:28:CD:B5:5B:82:BF Authority key identifier: BB:9F:73:96:40:FA:A3:D9:05:27:D7:B5:7D:2D:1D:99:93:A4:2B:D1 Certificate issuer: /CN=BB9F739640FAA3D90527D7B57D2D1D9993A42BD1 Certificate serial: 6DF7C31A695842EAAF8FEF507F75F02FB508B624 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BB9F739640FAA3D90527D7B57D2D1D9993A42BD1.cer Subject info access: rsync://repo-rpki.idnic.net/repo/f2b30f16-e876-48cb-936b-702c3055113d/0/BB9F739640FAA3D90527D7B57D2D1D9993A42BD1.mft Manifest number: 01FA Signing time: Wed 17 Dec 2025 19:40:57 +0000 Manifest this update: Wed 17 Dec 2025 19:35:57 +0000 Manifest next update: Sun 21 Dec 2025 04:54:57 +0000 Files and hashes: 1: BB9F739640FAA3D90527D7B57D2D1D9993A42BD1.crl (hash: eQXLDBitDQz5tVCCqFK1NMqLCqdlTK4fhanM7qqOnT8=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/f2b30f16-e876-48cb-936b-702c3055113d/0/BB9F739640FAA3D90527D7B57D2D1D9993A42BD1.crl rsync://repo-rpki.idnic.net/repo/f2b30f16-e876-48cb-936b-702c3055113d/0/BB9F739640FAA3D90527D7B57D2D1D9993A42BD1.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BB9F739640FAA3D90527D7B57D2D1D9993A42BD1.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 21 Dec 2025 04:54:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6d:f7:c3:1a:69:58:42:ea:af:8f:ef:50:7f:75:f0:2f:b5:08:b6:24 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BB9F739640FAA3D90527D7B57D2D1D9993A42BD1 Validity Not Before: Dec 17 19:35:57 2025 GMT Not After : Dec 21 04:54:57 2025 GMT Subject: CN=EEAF6B4EE8CDFE2ED5E3FE9442C028CDB55B82BF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:e1:8e:1d:e8:7a:f8:0c:68:e5:ab:d3:0a:4a: f8:f5:b5:dc:93:39:7a:c7:e6:c3:8a:44:96:0d:10: ec:02:41:79:d9:67:8b:46:4e:44:15:51:f4:45:e3: 7a:7f:cc:4b:b7:0b:66:2d:c9:ef:b1:a3:de:f3:62: 60:44:e7:bc:b4:6e:8f:b2:5a:ee:80:17:6e:b4:f4: 55:b7:63:56:f1:82:33:90:66:ec:8b:98:2a:ec:43: 97:97:aa:f8:93:d4:41:5a:18:ad:ac:63:85:d9:11: 6d:a6:87:f8:1d:cd:95:33:93:c1:60:28:f2:ad:85: 61:5c:89:9b:1b:10:e9:f8:49:6b:33:3b:76:f7:79: c4:55:26:af:4e:09:fe:f8:35:35:c7:27:b5:3e:e6: 6a:a8:bf:a0:73:ed:ca:39:7b:ed:14:cb:a7:5f:17: ca:ef:17:b5:1a:e3:1d:c4:f9:00:61:36:c2:7f:65: d1:ce:2e:df:f0:a7:51:e2:68:3d:8f:ce:90:14:d8: 2d:45:c7:91:6b:73:43:13:50:12:50:ce:ce:32:7e: fd:3f:2e:27:d8:52:93:76:47:11:9e:94:10:61:dc: bb:b7:28:8b:b4:28:c0:94:9c:5b:5c:29:96:9e:a4: 20:5f:fe:13:be:53:0c:9f:97:05:40:55:10:5f:f2: fb:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EE:AF:6B:4E:E8:CD:FE:2E:D5:E3:FE:94:42:C0:28:CD:B5:5B:82:BF X509v3 Authority Key Identifier: keyid:BB:9F:73:96:40:FA:A3:D9:05:27:D7:B5:7D:2D:1D:99:93:A4:2B:D1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/f2b30f16-e876-48cb-936b-702c3055113d/0/BB9F739640FAA3D90527D7B57D2D1D9993A42BD1.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BB9F739640FAA3D90527D7B57D2D1D9993A42BD1.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f2b30f16-e876-48cb-936b-702c3055113d/0/BB9F739640FAA3D90527D7B57D2D1D9993A42BD1.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 06:09:da:20:81:b9:f8:0f:b2:a2:7a:db:9a:9b:33:65:ec:3f: 09:2a:e0:7f:6f:a4:3d:d5:4f:49:d5:f7:a1:ea:54:c2:d8:04: 72:d4:c5:61:d3:fd:a7:fd:54:8b:dc:4f:3d:92:95:c6:89:4d: 92:89:f7:df:2d:3d:e5:4b:8b:09:03:9f:a3:1f:2d:c7:88:a3: aa:b2:7a:e2:82:b2:64:c2:39:f5:67:f5:28:7a:d3:c6:ee:af: 1a:54:b9:a8:01:0e:86:f1:2b:67:c4:fd:6d:d7:16:36:6e:1b: 8c:f0:84:73:22:7d:a1:bb:7d:0b:3f:72:1b:f7:74:9b:db:53: 91:bc:f9:1c:58:ce:d3:2b:d9:09:54:46:80:21:56:99:ba:5f: 07:2a:6a:21:b1:c4:ac:35:60:a2:c3:17:1e:fa:c8:b7:da:1c: af:6e:96:60:59:95:5a:16:75:07:32:00:68:8c:40:70:6b:21: 40:a6:97:3d:a7:61:ec:a8:2a:8d:4d:9b:51:7f:2a:27:f6:0f: b5:36:be:6c:d7:19:cc:c8:3d:79:25:9f:23:02:4b:80:1a:63: 00:f4:2a:a8:1a:01:6b:6c:dc:05:b9:be:07:b4:11:cd:b2:23: fb:94:38:4e:00:67:5e:99:e4:89:fa:90:84:c6:67:39:d8:91: 7d:b1:d6:f6 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUbffDGmlYQuqvj+9Qf3XwL7UItiQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkI5RjczOTY0MEZBQTNEOTA1MjdEN0I1N0QyRDFEOTk5 M0E0MkJEMTAeFw0yNTEyMTcxOTM1NTdaFw0yNTEyMjEwNDU0NTdaMDMxMTAvBgNV BAMTKEVFQUY2QjRFRThDREZFMkVENUUzRkU5NDQyQzAyOENEQjU1QjgyQkYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDk4Y4d6Hr4DGjlq9MKSvj1tdyT OXrH5sOKRJYNEOwCQXnZZ4tGTkQVUfRF43p/zEu3C2Ytye+xo97zYmBE57y0bo+y Wu6AF2609FW3Y1bxgjOQZuyLmCrsQ5eXqviT1EFaGK2sY4XZEW2mh/gdzZUzk8Fg KPKthWFciZsbEOn4SWszO3b3ecRVJq9OCf74NTXHJ7U+5mqov6Bz7co5e+0Uy6df F8rvF7Ua4x3E+QBhNsJ/ZdHOLt/wp1HiaD2PzpAU2C1Fx5Frc0MTUBJQzs4yfv0/ LifYUpN2RxGelBBh3Lu3KIu0KMCUnFtcKZaepCBf/hO+UwyflwVAVRBf8vuVAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU7q9rTujN/i7V4/6UQsAozbVbgr8wHwYDVR0j BBgwFoAUu59zlkD6o9kFJ9e1fS0dmZOkK9EwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m MmIzMGYxNi1lODc2LTQ4Y2ItOTM2Yi03MDJjMzA1NTExM2QvMC9CQjlGNzM5NjQw RkFBM0Q5MDUyN0Q3QjU3RDJEMUQ5OTkzQTQyQkQxLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQkI5RjczOTY0MEZBQTNEOTA1MjdEN0I1N0QyRDFEOTk5M0E0 MkJEMS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZjJiMzBmMTYtZTg3Ni00OGNiLTkz NmItNzAyYzMwNTUxMTNkLzAvQkI5RjczOTY0MEZBQTNEOTA1MjdEN0I1N0QyRDFE OTk5M0E0MkJEMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAYJ2iCBufgPsqJ625qbM2XsPwkq4H9vpD3V T0nV96HqVMLYBHLUxWHT/af9VIvcTz2SlcaJTZKJ998tPeVLiwkDn6MfLceIo6qy euKCsmTCOfVn9Sh608burxpUuagBDobxK2fE/W3XFjZuG4zwhHMifaG7fQs/chv3 dJvbU5G8+RxYztMr2QlURoAhVpm6XwcqaiGxxKw1YKLDFx76yLfaHK9ulmBZlVoW dQcyAGiMQHBrIUCmlz2nYeyoKo1Nm1F/Kif2D7U2vmzXGczIPXklnyMCS4AaYwD0 KqgaAWts3AW5vge0Ec2yI/uUOE4AZ16Z5In6kITGZznYkX2x1vY= -----END CERTIFICATE-----Generated at Fri Dec 19 03:06:40 2025 by rpki-client