This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/1f2f64ca-fa54-499e-bc33-4862dca794f7/0/B9A55DD123C2F224C4E245856905F78F2F354D92.mft File: B9A55DD123C2F224C4E245856905F78F2F354D92.mft (raw, json) Hash identifier: yUOPmkqj/wK1VtcrZEj6weH15quBdNEgcHNDyVbrqog= Subject key identifier: E1:63:DC:D3:C9:47:96:94:0E:E4:19:18:C5:0B:90:6B:E8:A2:8A:D3 Authority key identifier: B9:A5:5D:D1:23:C2:F2:24:C4:E2:45:85:69:05:F7:8F:2F:35:4D:92 Certificate issuer: /CN=B9A55DD123C2F224C4E245856905F78F2F354D92 Certificate serial: 43A41E2F911DC4AF1EC0598FA398D02586739988 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/B9A55DD123C2F224C4E245856905F78F2F354D92.cer Subject info access: rsync://repo-rpki.idnic.net/repo/1f2f64ca-fa54-499e-bc33-4862dca794f7/0/B9A55DD123C2F224C4E245856905F78F2F354D92.mft Manifest number: 0102 Signing time: Sun 14 Dec 2025 06:41:02 +0000 Manifest this update: Sun 14 Dec 2025 06:36:02 +0000 Manifest next update: Wed 17 Dec 2025 07:41:02 +0000 Files and hashes: 1: 3135372e31302e39372e302f32342d3234203d3e203538383231.roa (hash: UPR5y8V0jVDX7lorT6sk4sYb0YCh+EKPNMakCdOkBwI=) 2: B9A55DD123C2F224C4E245856905F78F2F354D92.crl (hash: DIyYWyYWdkqfOACmM6E3DOB4c9jxAjckyyUyd38ihVw=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/1f2f64ca-fa54-499e-bc33-4862dca794f7/0/B9A55DD123C2F224C4E245856905F78F2F354D92.crl rsync://repo-rpki.idnic.net/repo/1f2f64ca-fa54-499e-bc33-4862dca794f7/0/B9A55DD123C2F224C4E245856905F78F2F354D92.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/B9A55DD123C2F224C4E245856905F78F2F354D92.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 17 Dec 2025 07:41:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 43:a4:1e:2f:91:1d:c4:af:1e:c0:59:8f:a3:98:d0:25:86:73:99:88 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B9A55DD123C2F224C4E245856905F78F2F354D92 Validity Not Before: Dec 14 06:36:02 2025 GMT Not After : Dec 17 07:41:02 2025 GMT Subject: CN=E163DCD3C94796940EE41918C50B906BE8A28AD3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:e1:91:ca:21:a7:0d:7b:23:39:c5:4a:a0:02: 50:0b:10:02:ca:00:fd:ce:f5:e0:25:2e:0b:8f:54: c7:50:a6:06:ca:30:39:c0:fd:9d:13:1c:a2:89:86: e0:d9:a2:cb:4a:2a:73:c7:ce:fa:cd:34:42:20:72: ea:b4:94:05:7d:9d:78:e9:ab:20:7b:a1:d0:77:cd: d3:e5:92:9d:af:42:ec:f8:f3:a4:06:7a:6a:b1:c4: 96:8a:27:7c:ce:d3:23:9b:59:27:9c:17:ae:e3:c7: 67:07:8d:78:61:c0:e9:79:04:db:ec:78:68:2e:c7: af:c2:dd:ca:db:6e:da:2f:f8:dc:f7:e3:d3:54:43: 6f:63:15:3b:59:7d:c1:39:28:b6:ca:88:a1:4e:f9: 40:71:87:dd:2c:cb:a5:4b:84:29:30:99:54:94:47: 1f:dd:d0:1b:b7:4e:a1:22:8b:1c:c4:14:a0:cf:52: 80:0c:b1:52:e3:52:ca:6e:d4:c2:83:38:cc:58:71: f2:d4:b4:e9:ff:73:c8:45:31:7a:f5:57:81:bc:f3: 35:9b:07:b0:c2:40:9c:7b:1b:30:99:b6:9c:d4:f1: 69:c2:9b:79:4f:5c:f0:64:f0:8b:c6:f2:fd:a5:b2: 11:c9:dc:b0:77:a4:41:8a:80:a1:43:63:c6:04:59: 65:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E1:63:DC:D3:C9:47:96:94:0E:E4:19:18:C5:0B:90:6B:E8:A2:8A:D3 X509v3 Authority Key Identifier: keyid:B9:A5:5D:D1:23:C2:F2:24:C4:E2:45:85:69:05:F7:8F:2F:35:4D:92 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/1f2f64ca-fa54-499e-bc33-4862dca794f7/0/B9A55DD123C2F224C4E245856905F78F2F354D92.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/B9A55DD123C2F224C4E245856905F78F2F354D92.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/1f2f64ca-fa54-499e-bc33-4862dca794f7/0/B9A55DD123C2F224C4E245856905F78F2F354D92.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 53:c6:55:c1:15:d4:9f:1c:4f:6e:50:e5:8c:f0:37:24:4e:be: 55:12:b2:58:b8:16:d6:cb:ff:ce:22:06:90:a2:5b:23:d6:8f: dc:8a:27:57:95:8a:05:c0:ec:22:f2:5a:ac:4e:ce:5b:8c:92: 31:29:5e:4b:40:f8:7d:6b:6d:d6:f5:21:21:15:55:a0:89:89: bc:5e:4f:85:6f:66:dc:21:16:fa:c6:5d:dd:c3:0e:3a:4a:5a: 2f:8d:32:a9:89:21:73:98:7e:14:8d:a4:eb:bd:fe:88:70:84: 83:21:ee:e2:8c:2c:e5:a0:ed:f2:b0:9f:11:c6:13:e3:7f:e9: 36:91:c1:a3:e1:39:23:84:bd:c1:53:2e:d5:da:f1:e3:99:17: 25:57:fd:05:f0:cc:5f:d9:e8:7a:9d:d5:83:89:fb:7b:ac:26: ab:e4:08:36:80:95:f1:7d:22:a7:36:54:96:d0:4f:fa:d2:15: d1:53:cd:25:21:25:7f:9b:4a:a0:d7:02:bb:b0:da:c9:e8:a3: ff:a9:b5:78:4c:61:94:69:99:c2:86:27:cc:a3:73:91:44:b5: c2:2e:a8:c5:a4:cc:8e:ee:fc:a4:ec:74:40:87:9e:4d:9f:8d: 89:6e:0f:87:3d:a9:80:43:8e:c4:34:b5:7b:5d:6b:33:ff:f7: 6f:73:cf:25 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUQ6QeL5EdxK8ewFmPo5jQJYZzmYgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjlBNTVERDEyM0MyRjIyNEM0RTI0NTg1NjkwNUY3OEYy RjM1NEQ5MjAeFw0yNTEyMTQwNjM2MDJaFw0yNTEyMTcwNzQxMDJaMDMxMTAvBgNV BAMTKEUxNjNEQ0QzQzk0Nzk2OTQwRUU0MTkxOEM1MEI5MDZCRThBMjhBRDMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDH4ZHKIacNeyM5xUqgAlALEALK AP3O9eAlLguPVMdQpgbKMDnA/Z0THKKJhuDZostKKnPHzvrNNEIgcuq0lAV9nXjp qyB7odB3zdPlkp2vQuz486QGemqxxJaKJ3zO0yObWSecF67jx2cHjXhhwOl5BNvs eGgux6/C3crbbtov+Nz349NUQ29jFTtZfcE5KLbKiKFO+UBxh90sy6VLhCkwmVSU Rx/d0Bu3TqEiixzEFKDPUoAMsVLjUspu1MKDOMxYcfLUtOn/c8hFMXr1V4G88zWb B7DCQJx7GzCZtpzU8WnCm3lPXPBk8IvG8v2lshHJ3LB3pEGKgKFDY8YEWWUNAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU4WPc08lHlpQO5BkYxQuQa+iiitMwHwYDVR0j BBgwFoAUuaVd0SPC8iTE4kWFaQX3jy81TZIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x ZjJmNjRjYS1mYTU0LTQ5OWUtYmMzMy00ODYyZGNhNzk0ZjcvMC9COUE1NUREMTIz QzJGMjI0QzRFMjQ1ODU2OTA1Rjc4RjJGMzU0RDkyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvQjlBNTVERDEyM0MyRjIyNEM0RTI0NTg1NjkwNUY3OEYyRjM1 NEQ5Mi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMWYyZjY0Y2EtZmE1NC00OTllLWJj MzMtNDg2MmRjYTc5NGY3LzAvQjlBNTVERDEyM0MyRjIyNEM0RTI0NTg1NjkwNUY3 OEYyRjM1NEQ5Mi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFPGVcEV1J8cT25Q5YzwNyROvlUSsli4FtbL /84iBpCiWyPWj9yKJ1eVigXA7CLyWqxOzluMkjEpXktA+H1rbdb1ISEVVaCJibxe T4VvZtwhFvrGXd3DDjpKWi+NMqmJIXOYfhSNpOu9/ohwhIMh7uKMLOWg7fKwnxHG E+N/6TaRwaPhOSOEvcFTLtXa8eOZFyVX/QXwzF/Z6Hqd1YOJ+3usJqvkCDaAlfF9 Iqc2VJbQT/rSFdFTzSUhJX+bSqDXAruw2snoo/+ptXhMYZRpmcKGJ8yjc5FEtcIu qMWkzI7u/KTsdECHnk2fjYluD4c9qYBDjsQ0tXtdazP/929zzyU= -----END CERTIFICATE-----Generated at Tue Dec 16 04:03:34 2025 by rpki-client