This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/b1f87f5a-f6f9-468d-895e-314487f5e25e/0/B9BEB60CD6224D41F333A07E1820F0AF3A81FFF7.mft File: B9BEB60CD6224D41F333A07E1820F0AF3A81FFF7.mft (raw, json) Hash identifier: h0kZ/+lOby/Uk9yyGUCMXZloT3+xdEFeQB7EZrOHU8A= Subject key identifier: C9:A8:E8:0B:1D:E7:C1:8A:8B:89:CE:70:CF:7E:A9:E5:BA:93:E4:DA Authority key identifier: B9:BE:B6:0C:D6:22:4D:41:F3:33:A0:7E:18:20:F0:AF:3A:81:FF:F7 Certificate issuer: /CN=B9BEB60CD6224D41F333A07E1820F0AF3A81FFF7 Certificate serial: 14E224AED1AA855AC31F078F24CA2626874F4E59 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B9BEB60CD6224D41F333A07E1820F0AF3A81FFF7.cer Subject info access: rsync://repo-rpki.idnic.net/repo/b1f87f5a-f6f9-468d-895e-314487f5e25e/0/B9BEB60CD6224D41F333A07E1820F0AF3A81FFF7.mft Manifest number: 01B9 Signing time: Tue 02 Dec 2025 14:51:06 +0000 Manifest this update: Tue 02 Dec 2025 14:46:06 +0000 Manifest next update: Sat 06 Dec 2025 00:16:06 +0000 Files and hashes: 1: 3130332e3138352e3139372e302f32342d3234203d3e20313333333535.roa (hash: PjJ5xaEmVECnvYiFxtFmdeDestY/+54rJNs+3F7mqcY=) 2: 3130332e3230392e3133312e302f32342d3234203d3e20313333333535.roa (hash: j+U4AErtYzwumrbJ7yEuFWr2i7wA+4c75xZyRtRhbQ4=) 3: B9BEB60CD6224D41F333A07E1820F0AF3A81FFF7.crl (hash: 2TArgkZBpX0rGSeqiYs80zJxcC8ZbI4hKUIflbYSF14=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/b1f87f5a-f6f9-468d-895e-314487f5e25e/0/B9BEB60CD6224D41F333A07E1820F0AF3A81FFF7.crl rsync://repo-rpki.idnic.net/repo/b1f87f5a-f6f9-468d-895e-314487f5e25e/0/B9BEB60CD6224D41F333A07E1820F0AF3A81FFF7.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B9BEB60CD6224D41F333A07E1820F0AF3A81FFF7.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 06 Dec 2025 00:16:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 14:e2:24:ae:d1:aa:85:5a:c3:1f:07:8f:24:ca:26:26:87:4f:4e:59 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B9BEB60CD6224D41F333A07E1820F0AF3A81FFF7 Validity Not Before: Dec 2 14:46:06 2025 GMT Not After : Dec 6 00:16:06 2025 GMT Subject: CN=C9A8E80B1DE7C18A8B89CE70CF7EA9E5BA93E4DA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:fc:50:b6:db:d4:1e:9c:23:7e:63:be:83:6f: f0:fd:51:7f:8e:9d:bb:fc:61:90:22:c0:65:d3:47: b7:77:72:c6:44:99:de:5e:26:2b:1c:be:83:b5:28: fa:02:42:8b:dc:0b:ad:cf:1a:10:af:56:7e:95:40: 33:73:1b:df:09:03:d6:c4:3b:10:c6:ba:dd:f2:7f: 1e:72:0e:cc:87:fa:4f:ae:3d:2b:c7:7a:95:8b:56: 8d:d4:2e:6e:72:05:33:d6:ad:5e:76:49:66:30:ee: 07:3f:21:d4:6c:00:1f:9c:5a:d3:5d:28:fd:a4:0e: 46:ec:bc:83:01:34:14:a1:69:10:93:51:fd:d2:be: d3:85:15:06:2e:fd:f3:5b:e4:43:c9:a9:39:d8:b8: c0:8c:83:1c:03:79:d4:dd:87:fc:7d:33:78:4a:d7: 3a:42:da:01:ce:f1:ca:7d:1f:8e:77:c0:fb:be:53: 8a:d9:29:ed:d3:c2:93:2d:35:9a:06:0b:87:d1:37: e3:ed:32:00:a6:a4:05:a2:b3:0d:f7:be:2a:4d:33: b7:f4:2a:ee:87:7f:f0:3a:f9:63:18:80:9b:f5:52: c5:28:70:2d:ad:65:94:16:29:aa:90:49:ff:b3:e9: 8e:e0:60:30:f5:ac:13:98:d6:1f:f5:6e:00:cd:40: 63:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:A8:E8:0B:1D:E7:C1:8A:8B:89:CE:70:CF:7E:A9:E5:BA:93:E4:DA X509v3 Authority Key Identifier: keyid:B9:BE:B6:0C:D6:22:4D:41:F3:33:A0:7E:18:20:F0:AF:3A:81:FF:F7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/b1f87f5a-f6f9-468d-895e-314487f5e25e/0/B9BEB60CD6224D41F333A07E1820F0AF3A81FFF7.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B9BEB60CD6224D41F333A07E1820F0AF3A81FFF7.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/b1f87f5a-f6f9-468d-895e-314487f5e25e/0/B9BEB60CD6224D41F333A07E1820F0AF3A81FFF7.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4a:65:85:2d:e3:12:c8:51:08:a2:24:a4:2b:f9:07:3a:38:8d: 7c:0b:bf:0b:d9:ea:65:59:88:9e:c2:6c:4c:21:e7:48:5e:4f: d9:1e:8b:57:41:36:d6:f9:b4:ad:b3:3f:6a:49:5a:09:8a:1b: 7a:04:85:2a:ce:06:4a:c8:82:8b:66:37:4c:53:b1:f0:52:ec: 17:ac:b9:28:d9:05:cc:12:99:50:93:cd:2f:f9:20:6c:79:ca: b0:be:7e:93:90:df:8a:6c:c5:e7:f8:03:0f:3f:b2:2e:a4:e0: c9:dc:36:99:ed:fc:20:77:b7:46:ee:18:8b:1a:66:fe:fd:78: cb:42:3f:e5:21:f5:a8:6a:90:61:1d:66:2c:95:4d:f2:c7:66: 88:ff:e4:76:bd:49:ad:dc:ef:27:d6:84:a6:68:57:6d:bf:82: 7b:59:d5:71:1f:61:9d:70:a1:fc:0a:a7:0e:f6:6b:2b:34:e2: 93:a8:45:7f:bb:0a:f5:14:5c:68:2d:d4:2a:40:1b:7b:75:9d: 79:62:6d:71:f9:0e:00:a4:76:a5:52:01:92:9e:f9:93:e0:5a: b5:42:67:69:35:67:db:11:82:4a:2f:99:43:26:36:ab:b7:5d: 6d:19:4e:7a:b8:90:03:16:14:8b:4a:6c:50:55:f6:9c:f5:5f: 84:df:18:7e -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUFOIkrtGqhVrDHwePJMomJodPTlkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjlCRUI2MENENjIyNEQ0MUYzMzNBMDdFMTgyMEYwQUYz QTgxRkZGNzAeFw0yNTEyMDIxNDQ2MDZaFw0yNTEyMDYwMDE2MDZaMDMxMTAvBgNV BAMTKEM5QThFODBCMURFN0MxOEE4Qjg5Q0U3MENGN0VBOUU1QkE5M0U0REEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCm/FC229QenCN+Y76Db/D9UX+O nbv8YZAiwGXTR7d3csZEmd5eJiscvoO1KPoCQovcC63PGhCvVn6VQDNzG98JA9bE OxDGut3yfx5yDsyH+k+uPSvHepWLVo3ULm5yBTPWrV52SWYw7gc/IdRsAB+cWtNd KP2kDkbsvIMBNBShaRCTUf3SvtOFFQYu/fNb5EPJqTnYuMCMgxwDedTdh/x9M3hK 1zpC2gHO8cp9H453wPu+U4rZKe3TwpMtNZoGC4fRN+PtMgCmpAWisw33vipNM7f0 Ku6Hf/A6+WMYgJv1UsUocC2tZZQWKaqQSf+z6Y7gYDD1rBOY1h/1bgDNQGOXAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUyajoCx3nwYqLic5wz36p5bqT5NowHwYDVR0j BBgwFoAUub62DNYiTUHzM6B+GCDwrzqB//cwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i MWY4N2Y1YS1mNmY5LTQ2OGQtODk1ZS0zMTQ0ODdmNWUyNWUvMC9COUJFQjYwQ0Q2 MjI0RDQxRjMzM0EwN0UxODIwRjBBRjNBODFGRkY3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQjlCRUI2MENENjIyNEQ0MUYzMzNBMDdFMTgyMEYwQUYzQTgx RkZGNy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYjFmODdmNWEtZjZmOS00NjhkLTg5 NWUtMzE0NDg3ZjVlMjVlLzAvQjlCRUI2MENENjIyNEQ0MUYzMzNBMDdFMTgyMEYw QUYzQTgxRkZGNy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEplhS3jEshRCKIkpCv5Bzo4jXwLvwvZ6mVZ iJ7CbEwh50heT9kei1dBNtb5tK2zP2pJWgmKG3oEhSrOBkrIgotmN0xTsfBS7Bes uSjZBcwSmVCTzS/5IGx5yrC+fpOQ34psxef4Aw8/si6k4MncNpnt/CB3t0buGIsa Zv79eMtCP+Uh9ahqkGEdZiyVTfLHZoj/5Ha9Sa3c7yfWhKZoV22/gntZ1XEfYZ1w ofwKpw72ays04pOoRX+7CvUUXGgt1CpAG3t1nXlibXH5DgCkdqVSAZKe+ZPgWrVC Z2k1Z9sRgkovmUMmNqu3XW0ZTnq4kAMWFItKbFBV9pz1X4TfGH4= -----END CERTIFICATE-----Generated at Wed Dec 3 16:06:55 2025 by rpki-client