This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/f0bfd65e-2d68-43a0-bb11-db5668dae812/0/9BE3C799BA370880CEAD4C8A8D1C0889C2733535.mft File: 9BE3C799BA370880CEAD4C8A8D1C0889C2733535.mft (raw, json) Hash identifier: SlR/p90QM935wwGF568i7XGughGIVmDhpSpn8C8nLFU= Subject key identifier: 69:94:6D:8B:8D:AD:B6:F2:87:B8:5B:85:B4:33:D6:1C:DA:A9:F6:9B Authority key identifier: 9B:E3:C7:99:BA:37:08:80:CE:AD:4C:8A:8D:1C:08:89:C2:73:35:35 Certificate issuer: /CN=9BE3C799BA370880CEAD4C8A8D1C0889C2733535 Certificate serial: 13B742B817DE7122A759A3EBEE8D3172522F55FF Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9BE3C799BA370880CEAD4C8A8D1C0889C2733535.cer Subject info access: rsync://repo-rpki.idnic.net/repo/f0bfd65e-2d68-43a0-bb11-db5668dae812/0/9BE3C799BA370880CEAD4C8A8D1C0889C2733535.mft Manifest number: 013A Signing time: Wed 03 Dec 2025 12:12:28 +0000 Manifest this update: Wed 03 Dec 2025 12:07:28 +0000 Manifest next update: Sat 06 Dec 2025 21:45:28 +0000 Files and hashes: 1: 9BE3C799BA370880CEAD4C8A8D1C0889C2733535.crl (hash: Kw9QKPdBnYgbC8dR2Vus6bCiB+MViJd8TXKBUfkRGAE=) 2: 3130332e33352e3134302e302f32332d3234203d3e203633383834.roa (hash: 2aBF3TlPpZvgBg8RcuAyt7db252emxas0qRgZU5RuEU=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/f0bfd65e-2d68-43a0-bb11-db5668dae812/0/9BE3C799BA370880CEAD4C8A8D1C0889C2733535.crl rsync://repo-rpki.idnic.net/repo/f0bfd65e-2d68-43a0-bb11-db5668dae812/0/9BE3C799BA370880CEAD4C8A8D1C0889C2733535.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9BE3C799BA370880CEAD4C8A8D1C0889C2733535.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 06 Dec 2025 12:07:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13:b7:42:b8:17:de:71:22:a7:59:a3:eb:ee:8d:31:72:52:2f:55:ff Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9BE3C799BA370880CEAD4C8A8D1C0889C2733535 Validity Not Before: Dec 3 12:07:28 2025 GMT Not After : Dec 6 21:45:28 2025 GMT Subject: CN=69946D8B8DADB6F287B85B85B433D61CDAA9F69B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:2c:0a:2f:c0:5c:7a:53:ee:c0:66:df:c3:d0: e3:a4:45:d2:99:7d:47:05:96:ae:1f:0e:d9:80:86: 62:e4:d9:19:c1:f6:ff:64:86:e8:4c:06:7b:3e:c8: 0e:1f:89:76:fa:bc:37:fc:6e:6d:8c:18:ec:eb:a8: 21:26:48:fb:43:9b:bf:25:de:9e:38:39:ae:7c:90: a8:c8:a1:05:47:aa:6f:fe:23:bf:4b:43:5f:b7:a0: ee:cd:5d:a2:55:4f:66:4e:d0:0e:0d:87:0d:b8:bb: 9a:c3:eb:ec:0b:df:c1:dc:1b:d3:7c:42:db:30:25: 57:28:25:16:a6:d9:63:98:0a:8f:e7:a0:be:90:76: 26:ae:6b:1b:3e:d3:18:49:f3:3f:5e:92:ad:f5:66: 55:0e:1a:a5:d9:b6:60:f5:bd:72:5c:b5:04:27:56: 92:20:23:c5:cf:12:99:0b:15:0e:5d:78:b3:6c:70: dc:fa:bf:c0:4c:b6:72:75:81:0a:ad:f1:09:d6:12: 45:cd:5f:ea:bf:b2:2b:22:41:13:4c:ce:1e:d7:b5: 8e:34:73:33:c9:b7:ca:88:4c:7f:51:93:7c:bb:0a: a1:90:3a:0a:dc:c9:55:00:8c:b1:18:23:b3:f4:cb: f0:fb:9e:c7:fb:b8:2e:d3:28:84:b6:5d:3b:ed:ce: 0e:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 69:94:6D:8B:8D:AD:B6:F2:87:B8:5B:85:B4:33:D6:1C:DA:A9:F6:9B X509v3 Authority Key Identifier: keyid:9B:E3:C7:99:BA:37:08:80:CE:AD:4C:8A:8D:1C:08:89:C2:73:35:35 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/f0bfd65e-2d68-43a0-bb11-db5668dae812/0/9BE3C799BA370880CEAD4C8A8D1C0889C2733535.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9BE3C799BA370880CEAD4C8A8D1C0889C2733535.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f0bfd65e-2d68-43a0-bb11-db5668dae812/0/9BE3C799BA370880CEAD4C8A8D1C0889C2733535.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 34:f9:20:1f:86:f8:f5:13:16:5b:f6:91:37:c2:34:98:50:d9: 67:23:29:34:89:00:92:5a:df:39:a1:cb:89:20:43:a6:55:55: e2:22:8b:a1:cc:b4:92:41:30:46:da:13:f4:51:5c:96:ea:3b: 05:d6:39:f1:51:2e:70:52:7b:66:17:2b:97:f5:1b:33:d6:bf: 9a:9d:16:ea:74:c8:c5:7f:96:c1:d1:74:85:f5:49:d6:d2:b3: ad:67:d6:dd:a8:c3:ae:1e:31:f5:ab:8e:23:56:43:b1:72:a7: 5e:59:72:92:66:db:ba:f5:77:65:70:fa:49:94:84:c5:b0:9f: fc:78:af:fe:bb:33:c2:ef:b7:6c:f2:67:ae:ea:02:ba:2d:f3: 66:28:2c:cd:5e:c1:05:8b:68:f9:6e:a2:a7:66:3a:69:b1:b9: 72:6f:84:0d:08:53:dc:24:62:87:fb:33:52:76:bb:8f:93:4e: 7f:2d:e1:12:e6:b1:1a:74:34:c2:f4:3e:c8:bd:07:37:fe:1f: 5d:6d:f8:18:02:34:14:ef:4c:1c:83:3e:19:e6:bb:ed:e1:5c: 40:e7:f6:01:03:29:0a:a4:b1:19:36:7b:8d:17:3b:f1:95:a2: e4:36:86:99:73:8a:99:21:84:15:4d:d6:e9:98:28:39:ec:58: 4d:6a:61:29 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUE7dCuBfecSKnWaPr7o0xclIvVf8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUJFM0M3OTlCQTM3MDg4MENFQUQ0QzhBOEQxQzA4ODlD MjczMzUzNTAeFw0yNTEyMDMxMjA3MjhaFw0yNTEyMDYyMTQ1MjhaMDMxMTAvBgNV BAMTKDY5OTQ2RDhCOERBREI2RjI4N0I4NUI4NUI0MzNENjFDREFBOUY2OUIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDXLAovwFx6U+7AZt/D0OOkRdKZ fUcFlq4fDtmAhmLk2RnB9v9khuhMBns+yA4fiXb6vDf8bm2MGOzrqCEmSPtDm78l 3p44Oa58kKjIoQVHqm/+I79LQ1+3oO7NXaJVT2ZO0A4Nhw24u5rD6+wL38HcG9N8 QtswJVcoJRam2WOYCo/noL6Qdiauaxs+0xhJ8z9ekq31ZlUOGqXZtmD1vXJctQQn VpIgI8XPEpkLFQ5deLNscNz6v8BMtnJ1gQqt8QnWEkXNX+q/sisiQRNMzh7XtY40 czPJt8qITH9Rk3y7CqGQOgrcyVUAjLEYI7P0y/D7nsf7uC7TKIS2XTvtzg4tAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUaZRti42ttvKHuFuFtDPWHNqp9pswHwYDVR0j BBgwFoAUm+PHmbo3CIDOrUyKjRwIicJzNTUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m MGJmZDY1ZS0yZDY4LTQzYTAtYmIxMS1kYjU2NjhkYWU4MTIvMC85QkUzQzc5OUJB MzcwODgwQ0VBRDRDOEE4RDFDMDg4OUMyNzMzNTM1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOUJFM0M3OTlCQTM3MDg4MENFQUQ0QzhBOEQxQzA4ODlDMjcz MzUzNS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZjBiZmQ2NWUtMmQ2OC00M2EwLWJi MTEtZGI1NjY4ZGFlODEyLzAvOUJFM0M3OTlCQTM3MDg4MENFQUQ0QzhBOEQxQzA4 ODlDMjczMzUzNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADT5IB+G+PUTFlv2kTfCNJhQ2WcjKTSJAJJa 3zmhy4kgQ6ZVVeIii6HMtJJBMEbaE/RRXJbqOwXWOfFRLnBSe2YXK5f1GzPWv5qd Fup0yMV/lsHRdIX1SdbSs61n1t2ow64eMfWrjiNWQ7Fyp15ZcpJm27r1d2Vw+kmU hMWwn/x4r/67M8Lvt2zyZ67qArot82YoLM1ewQWLaPluoqdmOmmxuXJvhA0IU9wk Yof7M1J2u4+TTn8t4RLmsRp0NML0Psi9Bzf+H11t+BgCNBTvTByDPhnmu+3hXEDn 9gEDKQqksRk2e40XO/GVouQ2hplzipkhhBVN1umYKDnsWE1qYSk= -----END CERTIFICATE-----Generated at Wed Dec 3 13:59:00 2025 by rpki-client