This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repo-rpki.idnic.net/repo/66926c82-c8e5-4f97-8994-2c40653817ce/0/9BEEED1DCEE081F653A0D37A8175E2C40BB82B23.mft
File: 9BEEED1DCEE081F653A0D37A8175E2C40BB82B23.mft (raw, json)
Hash identifier: bIlFqqBRxxP7rjiG2FNdkfGgrECqScinbTxIVjzbXZM=
Subject key identifier: 87:95:7E:DE:70:39:8E:31:55:05:96:0F:9A:38:AD:23:13:06:99:59
Authority key identifier: 9B:EE:ED:1D:CE:E0:81:F6:53:A0:D3:7A:81:75:E2:C4:0B:B8:2B:23
Certificate issuer: /CN=9BEEED1DCEE081F653A0D37A8175E2C40BB82B23
Certificate serial: 7A8245EB5AB94F837E201410580EBD59B2645F31
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9BEEED1DCEE081F653A0D37A8175E2C40BB82B23.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/66926c82-c8e5-4f97-8994-2c40653817ce/0/9BEEED1DCEE081F653A0D37A8175E2C40BB82B23.mft
Manifest number: 01FD
Signing time: Thu 18 Dec 2025 06:12:01 +0000
Manifest this update: Thu 18 Dec 2025 06:07:01 +0000
Manifest next update: Sun 21 Dec 2025 15:53:01 +0000
Files and hashes: 1: 9BEEED1DCEE081F653A0D37A8175E2C40BB82B23.crl (hash: UnNSsV6QYW4o1t03/7AwIeuHBAkOoM6L7DxSFI6ArRs=)
2: 3130332e32362e3139302e302f32342d3234203d3e203536323836.roa (hash: i0HuNTLfQDOrpSQS9//DmLXkPRXfxAWy4FCWZTlf46A=)
3: 3130332e32362e3139312e302f32342d3234203d3e20313530323639.roa (hash: LiqrFpCZi9jjQ9ExuAGMLd7TL59TSrfkrGld2vDA3ec=)
4: 3130332e32362e3139302e302f32332d3234203d3e203536323836.roa (hash: 2AfHqO9heo5Z0jXbgmEkhELWS6FN1LPkikP7RRxHBrw=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/66926c82-c8e5-4f97-8994-2c40653817ce/0/9BEEED1DCEE081F653A0D37A8175E2C40BB82B23.crl
rsync://repo-rpki.idnic.net/repo/66926c82-c8e5-4f97-8994-2c40653817ce/0/9BEEED1DCEE081F653A0D37A8175E2C40BB82B23.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9BEEED1DCEE081F653A0D37A8175E2C40BB82B23.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 21 Dec 2025 15:53:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7a:82:45:eb:5a:b9:4f:83:7e:20:14:10:58:0e:bd:59:b2:64:5f:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9BEEED1DCEE081F653A0D37A8175E2C40BB82B23
Validity
Not Before: Dec 18 06:07:01 2025 GMT
Not After : Dec 21 15:53:01 2025 GMT
Subject: CN=87957EDE70398E315505960F9A38AD2313069959
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:0a:cc:f0:33:64:35:95:f8:48:f5:92:cf:7e:
2f:ff:89:f1:6a:d8:7d:fd:81:e6:65:c9:ee:56:61:
7c:72:73:67:e9:d0:f1:92:68:9a:48:b9:4a:2e:0b:
23:d2:97:78:da:20:4c:2c:51:d2:3d:47:80:ea:b3:
33:ad:5f:06:b0:3f:51:ee:0f:81:8b:bf:2d:7d:d2:
24:cb:12:68:0d:bb:5a:5d:42:47:32:8f:60:7e:67:
e3:10:49:9a:69:40:59:47:ae:3e:f1:e5:48:4e:c9:
f4:99:c2:a3:d6:7d:98:5a:0f:0d:b8:8b:87:10:17:
0b:6e:b9:c3:6c:3f:cb:39:9f:de:b3:a8:a8:bc:60:
ed:36:e2:dd:0f:1f:62:c8:8f:7a:2e:35:da:fa:6a:
57:f1:03:6d:bf:9c:79:a2:9b:9d:24:f3:8f:a9:18:
19:74:a3:94:55:2f:d8:f7:32:a1:9b:f5:d2:8a:0f:
37:e5:0a:60:d1:d5:84:9e:b7:ae:6e:cb:7e:6f:0b:
c1:14:86:66:4c:7b:27:ee:22:3f:7d:0f:bc:34:27:
7c:28:8c:7a:36:99:5b:4f:92:77:a1:3b:57:2d:e8:
10:11:1d:13:ec:f4:a6:50:5d:07:0a:21:2d:28:e8:
c8:6f:12:96:ea:d4:82:97:9c:5c:d7:8e:4e:49:91:
d1:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:95:7E:DE:70:39:8E:31:55:05:96:0F:9A:38:AD:23:13:06:99:59
X509v3 Authority Key Identifier:
keyid:9B:EE:ED:1D:CE:E0:81:F6:53:A0:D3:7A:81:75:E2:C4:0B:B8:2B:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/66926c82-c8e5-4f97-8994-2c40653817ce/0/9BEEED1DCEE081F653A0D37A8175E2C40BB82B23.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9BEEED1DCEE081F653A0D37A8175E2C40BB82B23.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/66926c82-c8e5-4f97-8994-2c40653817ce/0/9BEEED1DCEE081F653A0D37A8175E2C40BB82B23.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9f:90:7e:12:95:86:51:c5:ce:4c:35:ba:a3:71:42:34:52:2b:
84:47:76:2a:35:e6:1b:ad:68:cb:94:a9:a0:cf:3f:b8:ba:82:
82:d2:2d:65:f2:36:9a:d0:af:d8:52:00:ac:6f:5b:60:f5:9b:
70:8f:01:87:ee:7d:52:ff:b0:b6:d5:46:ac:32:4a:72:76:80:
59:e4:19:bc:a2:3a:ad:34:cb:cc:0b:9e:96:bd:2a:95:97:90:
9f:58:fc:fa:7e:a9:86:37:9c:52:a1:63:09:6d:3e:1e:60:2c:
27:d5:37:72:1e:75:f4:5b:a5:70:b1:3c:77:ea:8e:40:ea:59:
c0:f4:4b:b9:9e:bf:01:89:78:1a:b0:c3:29:3a:f8:81:ac:69:
5e:6d:6e:da:b0:1f:0a:6d:7f:72:e2:27:94:3e:90:ec:94:b2:
fb:26:c1:c6:47:1d:fc:33:e4:03:96:67:8f:db:2c:2f:55:31:
53:91:a5:93:91:46:e8:1a:18:7a:1c:76:44:61:d9:02:7d:7b:
e4:54:c9:1b:0d:34:14:20:b0:26:4d:f2:54:b7:58:26:6b:1f:
af:50:f3:22:9d:bb:00:21:a6:31:f5:b3:40:f4:2c:00:e5:71:
16:7f:bf:c2:07:e0:c0:4c:e5:7b:e1:d4:66:65:c6:9f:7b:90:
e5:7e:b0:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 20 05:14:00 2025 by rpki-client