This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/bcb9ba7f-efd1-4994-a2a3-77993338b242/0/9FB9D7ED833E1CA6E4053773AC164214889108CB.mft File: 9FB9D7ED833E1CA6E4053773AC164214889108CB.mft (raw, json) Hash identifier: n8QOFtXVKLtm7+LN1x9+u0CyHYMGoiPQMM3usOlvlgU= Subject key identifier: 9B:CD:AA:6A:D5:10:AA:07:0A:51:D5:65:F1:41:E9:82:E4:27:3F:D9 Authority key identifier: 9F:B9:D7:ED:83:3E:1C:A6:E4:05:37:73:AC:16:42:14:88:91:08:CB Certificate issuer: /CN=9FB9D7ED833E1CA6E4053773AC164214889108CB Certificate serial: 4A233311BCB8CCF930818EBE1BEFC326990A6948 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9FB9D7ED833E1CA6E4053773AC164214889108CB.cer Subject info access: rsync://repo-rpki.idnic.net/repo/bcb9ba7f-efd1-4994-a2a3-77993338b242/0/9FB9D7ED833E1CA6E4053773AC164214889108CB.mft Manifest number: 02B0 Signing time: Tue 02 Dec 2025 00:40:43 +0000 Manifest this update: Tue 02 Dec 2025 00:35:43 +0000 Manifest next update: Fri 05 Dec 2025 12:28:43 +0000 Files and hashes: 1: 9FB9D7ED833E1CA6E4053773AC164214889108CB.crl (hash: 3IOcrLkDymu0kw/C2esOM4Jof3U+0iRympzfuBjmQMs=) 2: 3130332e3134382e3139342e302f32342d3234203d3e20313430303033.roa (hash: NWZFKnhcY/aoMWV+2zpR3+GU8xiBKXVASrcCEyuCBhE=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/bcb9ba7f-efd1-4994-a2a3-77993338b242/0/9FB9D7ED833E1CA6E4053773AC164214889108CB.crl rsync://repo-rpki.idnic.net/repo/bcb9ba7f-efd1-4994-a2a3-77993338b242/0/9FB9D7ED833E1CA6E4053773AC164214889108CB.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9FB9D7ED833E1CA6E4053773AC164214889108CB.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 05 Dec 2025 12:28:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4a:23:33:11:bc:b8:cc:f9:30:81:8e:be:1b:ef:c3:26:99:0a:69:48 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9FB9D7ED833E1CA6E4053773AC164214889108CB Validity Not Before: Dec 2 00:35:43 2025 GMT Not After : Dec 5 12:28:43 2025 GMT Subject: CN=9BCDAA6AD510AA070A51D565F141E982E4273FD9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:6e:32:ea:8e:8e:98:b0:c2:2b:06:37:b9:45: 7b:71:3d:ce:67:46:31:28:2b:a1:9e:12:95:40:85: cf:f3:6b:82:dd:22:59:a5:51:29:40:a3:6e:18:ad: f1:f6:be:c0:5c:d6:87:30:85:ea:b9:48:af:70:3b: 49:c6:7d:8e:47:0d:aa:aa:ac:e9:6a:90:e7:23:a8: 7b:70:a4:db:6a:7f:e7:7e:5f:78:68:72:07:8d:e6: 58:52:0c:7c:c0:0b:30:38:4f:5e:c0:67:58:19:72: a5:65:f0:89:1a:3f:72:ca:d5:ea:7c:09:e5:1e:23: 52:25:45:25:46:c0:0c:d8:8e:a1:e7:21:f5:c8:99: 95:f0:2b:6a:19:f4:47:b2:15:93:43:be:a2:72:db: ae:77:c8:4b:43:55:40:b5:4f:44:98:a0:a0:02:0e: 83:7c:94:3a:59:0f:1e:4d:8d:4b:a7:54:8a:27:7e: cf:e3:06:95:1e:7a:10:8b:20:81:af:e0:b6:8a:62: c7:9a:93:2a:1f:2c:9a:3e:a3:e5:9d:26:5c:0c:6b: 1b:5b:27:1d:10:1f:e7:b1:82:eb:95:5d:06:b2:48: 35:b2:3c:bf:73:a7:35:42:79:aa:0d:0c:02:4f:44: 8d:69:5a:9a:36:7f:58:1d:69:69:65:93:03:01:5e: 99:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9B:CD:AA:6A:D5:10:AA:07:0A:51:D5:65:F1:41:E9:82:E4:27:3F:D9 X509v3 Authority Key Identifier: keyid:9F:B9:D7:ED:83:3E:1C:A6:E4:05:37:73:AC:16:42:14:88:91:08:CB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/bcb9ba7f-efd1-4994-a2a3-77993338b242/0/9FB9D7ED833E1CA6E4053773AC164214889108CB.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9FB9D7ED833E1CA6E4053773AC164214889108CB.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/bcb9ba7f-efd1-4994-a2a3-77993338b242/0/9FB9D7ED833E1CA6E4053773AC164214889108CB.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 30:ba:eb:55:d7:e4:8f:62:f5:67:14:e3:60:e9:31:98:2b:4c: 0e:09:f0:80:26:99:d7:2e:88:07:ba:cf:41:65:86:bc:80:75: c7:89:b9:62:40:a7:a8:01:16:1a:11:f6:70:ff:3d:04:1a:6a: 01:e3:68:9b:eb:26:97:63:8f:35:6f:df:5f:e4:e0:69:ce:59: ef:2a:0d:55:da:6d:d4:93:9a:26:1b:28:c4:c7:3b:97:6f:3b: 88:da:92:f2:80:3b:da:2a:22:d3:58:bf:c9:d0:d5:22:75:22: cd:74:63:a7:51:7b:fd:aa:27:aa:e6:6d:7d:ca:40:b7:71:c0: cd:51:d1:91:30:36:d1:b8:05:67:04:0f:87:ab:76:e7:b3:e3: 85:4e:30:db:d6:ee:b9:0e:a1:4b:da:b0:76:88:77:f9:b6:c2: 1a:da:47:d5:9a:75:55:23:6c:94:e0:8f:11:c8:8e:c3:40:c7: e0:30:3d:ec:73:05:d7:27:1f:ab:a9:1d:9b:10:7c:ef:24:4b: d9:7a:d6:d8:24:f7:61:8d:49:c0:50:e1:c2:a0:91:24:50:28: 34:f2:f8:19:7f:be:ee:f6:3c:07:fc:5f:85:65:ab:73:ac:03: fe:e9:5b:fb:44:4d:dd:36:6b:9c:39:6c:f5:5f:7f:45:ac:ed: 72:9b:3c:52 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUSiMzEby4zPkwgY6+G+/DJpkKaUgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUZCOUQ3RUQ4MzNFMUNBNkU0MDUzNzczQUMxNjQyMTQ4 ODkxMDhDQjAeFw0yNTEyMDIwMDM1NDNaFw0yNTEyMDUxMjI4NDNaMDMxMTAvBgNV BAMTKDlCQ0RBQTZBRDUxMEFBMDcwQTUxRDU2NUYxNDFFOTgyRTQyNzNGRDkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDdbjLqjo6YsMIrBje5RXtxPc5n RjEoK6GeEpVAhc/za4LdIlmlUSlAo24YrfH2vsBc1ocwheq5SK9wO0nGfY5HDaqq rOlqkOcjqHtwpNtqf+d+X3hocgeN5lhSDHzACzA4T17AZ1gZcqVl8IkaP3LK1ep8 CeUeI1IlRSVGwAzYjqHnIfXImZXwK2oZ9EeyFZNDvqJy2653yEtDVUC1T0SYoKAC DoN8lDpZDx5NjUunVIonfs/jBpUeehCLIIGv4LaKYseakyofLJo+o+WdJlwMaxtb Jx0QH+exguuVXQaySDWyPL9zpzVCeaoNDAJPRI1pWpo2f1gdaWllkwMBXpnlAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUm82qatUQqgcKUdVl8UHpguQnP9kwHwYDVR0j BBgwFoAUn7nX7YM+HKbkBTdzrBZCFIiRCMswDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i Y2I5YmE3Zi1lZmQxLTQ5OTQtYTJhMy03Nzk5MzMzOGIyNDIvMC85RkI5RDdFRDgz M0UxQ0E2RTQwNTM3NzNBQzE2NDIxNDg4OTEwOENCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOUZCOUQ3RUQ4MzNFMUNBNkU0MDUzNzczQUMxNjQyMTQ4ODkx MDhDQi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYmNiOWJhN2YtZWZkMS00OTk0LWEy YTMtNzc5OTMzMzhiMjQyLzAvOUZCOUQ3RUQ4MzNFMUNBNkU0MDUzNzczQUMxNjQy MTQ4ODkxMDhDQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADC661XX5I9i9WcU42DpMZgrTA4J8IAmmdcu iAe6z0FlhryAdceJuWJAp6gBFhoR9nD/PQQaagHjaJvrJpdjjzVv31/k4GnOWe8q DVXabdSTmiYbKMTHO5dvO4jakvKAO9oqItNYv8nQ1SJ1Is10Y6dRe/2qJ6rmbX3K QLdxwM1R0ZEwNtG4BWcED4erduez44VOMNvW7rkOoUvasHaId/m2whraR9WadVUj bJTgjxHIjsNAx+AwPexzBdcnH6upHZsQfO8kS9l61tgk92GNScBQ4cKgkSRQKDTy +Bl/vu72PAf8X4Vlq3OsA/7pW/tETd02a5w5bPVff0Ws7XKbPFI= -----END CERTIFICATE-----Generated at Wed Dec 3 13:59:57 2025 by rpki-client