This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/f2b30f16-e876-48cb-936b-702c3055113d/0/BB9F739640FAA3D90527D7B57D2D1D9993A42BD1.mft File: BB9F739640FAA3D90527D7B57D2D1D9993A42BD1.mft (raw, json) Hash identifier: KfAXDBtdVwHPnzP1trxlVMK1HTOQhWqosWI9E0W5vt8= Subject key identifier: BD:12:D1:FE:3D:A2:8E:45:0D:DD:F4:A1:22:9E:0C:19:68:33:2D:6A Authority key identifier: BB:9F:73:96:40:FA:A3:D9:05:27:D7:B5:7D:2D:1D:99:93:A4:2B:D1 Certificate issuer: /CN=BB9F739640FAA3D90527D7B57D2D1D9993A42BD1 Certificate serial: 21E0EE37ACCA0986F5F0849D1995BBC68120527E Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BB9F739640FAA3D90527D7B57D2D1D9993A42BD1.cer Subject info access: rsync://repo-rpki.idnic.net/repo/f2b30f16-e876-48cb-936b-702c3055113d/0/BB9F739640FAA3D90527D7B57D2D1D9993A42BD1.mft Manifest number: 01F3 Signing time: Mon 01 Dec 2025 19:00:57 +0000 Manifest this update: Mon 01 Dec 2025 18:55:57 +0000 Manifest next update: Fri 05 Dec 2025 05:51:57 +0000 Files and hashes: 1: BB9F739640FAA3D90527D7B57D2D1D9993A42BD1.crl (hash: YUGCapYMEfvdb0YFlwrcrkNoUVuGVEWgGWY0tKUFPTA=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/f2b30f16-e876-48cb-936b-702c3055113d/0/BB9F739640FAA3D90527D7B57D2D1D9993A42BD1.crl rsync://repo-rpki.idnic.net/repo/f2b30f16-e876-48cb-936b-702c3055113d/0/BB9F739640FAA3D90527D7B57D2D1D9993A42BD1.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BB9F739640FAA3D90527D7B57D2D1D9993A42BD1.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 05 Dec 2025 05:51:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 21:e0:ee:37:ac:ca:09:86:f5:f0:84:9d:19:95:bb:c6:81:20:52:7e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BB9F739640FAA3D90527D7B57D2D1D9993A42BD1 Validity Not Before: Dec 1 18:55:57 2025 GMT Not After : Dec 5 05:51:57 2025 GMT Subject: CN=BD12D1FE3DA28E450DDDF4A1229E0C1968332D6A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:a8:35:1b:00:b1:62:0a:52:50:54:97:bc:a8: 1b:0c:13:92:ed:19:dc:cd:db:33:78:2c:2d:94:6f: 27:a5:c4:61:0a:de:14:af:a6:f8:3d:8d:87:51:3a: f7:a8:2e:57:bc:d4:82:38:d1:ad:32:1f:da:0c:31: a4:3c:6e:53:db:65:59:5c:7e:15:df:16:77:70:e4: 53:7c:8c:d3:e8:14:31:89:5a:aa:eb:99:0a:8d:29: 35:bb:45:98:7b:b0:89:d5:84:89:3c:46:6d:9e:30: 6d:1f:2b:68:4f:af:bf:c2:29:aa:df:b8:93:ec:41: 37:47:bb:bf:0f:dc:a7:dd:53:c7:92:84:cf:8b:fc: 1a:db:9d:bb:0e:b8:1c:d4:e0:27:c8:60:4c:c1:c4: c7:f9:46:93:ab:e9:42:85:90:45:dc:e5:96:32:ee: 31:2c:e5:d0:26:22:76:95:99:11:e2:89:8a:df:12: 1b:d8:44:82:57:58:f2:f6:c1:a6:fb:b0:11:12:2d: d8:9e:2c:8b:b1:e6:9a:f4:a6:79:1d:61:e0:6b:3b: 79:67:ad:19:8c:cd:05:7a:44:17:8b:56:d8:27:94: 51:d9:58:0e:1a:7f:b1:15:89:f8:bd:73:ca:a9:76: 18:f2:18:5d:98:cf:cf:76:d0:4e:39:83:4b:ee:3a: 34:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:12:D1:FE:3D:A2:8E:45:0D:DD:F4:A1:22:9E:0C:19:68:33:2D:6A X509v3 Authority Key Identifier: keyid:BB:9F:73:96:40:FA:A3:D9:05:27:D7:B5:7D:2D:1D:99:93:A4:2B:D1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/f2b30f16-e876-48cb-936b-702c3055113d/0/BB9F739640FAA3D90527D7B57D2D1D9993A42BD1.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BB9F739640FAA3D90527D7B57D2D1D9993A42BD1.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f2b30f16-e876-48cb-936b-702c3055113d/0/BB9F739640FAA3D90527D7B57D2D1D9993A42BD1.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 74:36:21:ee:6a:3f:1c:9b:ab:eb:4b:d1:7d:90:24:45:6e:b5: 3d:fd:22:7d:b8:da:51:a7:ef:87:2d:8f:1f:46:af:32:7a:06: 3e:24:c2:b3:d4:2f:b6:0c:07:53:3b:2b:e2:0b:e2:1f:92:de: 28:f4:f1:0c:50:28:23:a2:d2:ec:d1:5e:42:6f:90:4d:37:eb: 2c:96:89:c9:f3:91:e8:8c:00:a3:9e:65:0e:76:d2:68:a7:d7: 73:dd:86:59:39:c3:55:8d:c8:15:2a:14:10:7b:e5:0d:44:d0: be:1d:44:3f:92:59:36:b9:d1:55:5c:3c:7f:24:11:98:ab:ac: 4d:a7:2f:f4:df:03:1d:df:f4:76:1b:79:c1:e8:d2:50:10:bc: 7e:ac:6b:10:80:b8:5d:d7:d2:8c:0b:59:93:f2:d6:15:68:8a: 4b:73:2b:2e:fa:7e:f2:ee:6e:e1:2d:2d:db:7f:84:dd:3d:d0: e7:74:1e:75:76:93:25:8f:f9:60:ca:52:f5:8a:14:13:a5:fe: e2:43:30:77:61:54:be:aa:18:d1:fb:91:88:e6:e2:c0:f1:cd: d6:9e:f3:04:e1:e3:dc:2b:ca:d0:a7:06:85:67:29:b2:c6:69: 21:40:85:72:38:1d:b9:b4:ec:30:b2:da:13:aa:bf:96:2f:8f: 9f:26:9d:d5 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUIeDuN6zKCYb18ISdGZW7xoEgUn4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkI5RjczOTY0MEZBQTNEOTA1MjdEN0I1N0QyRDFEOTk5 M0E0MkJEMTAeFw0yNTEyMDExODU1NTdaFw0yNTEyMDUwNTUxNTdaMDMxMTAvBgNV BAMTKEJEMTJEMUZFM0RBMjhFNDUwRERERjRBMTIyOUUwQzE5NjgzMzJENkEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDHqDUbALFiClJQVJe8qBsME5Lt GdzN2zN4LC2UbyelxGEK3hSvpvg9jYdROveoLle81II40a0yH9oMMaQ8blPbZVlc fhXfFndw5FN8jNPoFDGJWqrrmQqNKTW7RZh7sInVhIk8Rm2eMG0fK2hPr7/CKarf uJPsQTdHu78P3KfdU8eShM+L/BrbnbsOuBzU4CfIYEzBxMf5RpOr6UKFkEXc5ZYy 7jEs5dAmInaVmRHiiYrfEhvYRIJXWPL2wab7sBESLdieLIux5pr0pnkdYeBrO3ln rRmMzQV6RBeLVtgnlFHZWA4af7EVifi9c8qpdhjyGF2Yz8920E45g0vuOjQLAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUvRLR/j2ijkUN3fShIp4MGWgzLWowHwYDVR0j BBgwFoAUu59zlkD6o9kFJ9e1fS0dmZOkK9EwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m MmIzMGYxNi1lODc2LTQ4Y2ItOTM2Yi03MDJjMzA1NTExM2QvMC9CQjlGNzM5NjQw RkFBM0Q5MDUyN0Q3QjU3RDJEMUQ5OTkzQTQyQkQxLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQkI5RjczOTY0MEZBQTNEOTA1MjdEN0I1N0QyRDFEOTk5M0E0 MkJEMS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZjJiMzBmMTYtZTg3Ni00OGNiLTkz NmItNzAyYzMwNTUxMTNkLzAvQkI5RjczOTY0MEZBQTNEOTA1MjdEN0I1N0QyRDFE OTk5M0E0MkJEMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHQ2Ie5qPxybq+tL0X2QJEVutT39In242lGn 74ctjx9GrzJ6Bj4kwrPUL7YMB1M7K+IL4h+S3ij08QxQKCOi0uzRXkJvkE036yyW icnzkeiMAKOeZQ520min13Pdhlk5w1WNyBUqFBB75Q1E0L4dRD+SWTa50VVcPH8k EZirrE2nL/TfAx3f9HYbecHo0lAQvH6saxCAuF3X0owLWZPy1hVoiktzKy76fvLu buEtLdt/hN090Od0HnV2kyWP+WDKUvWKFBOl/uJDMHdhVL6qGNH7kYjm4sDxzdae 8wTh49wrytCnBoVnKbLGaSFAhXI4Hbm07DCy2hOqv5Yvj58mndU= -----END CERTIFICATE-----Generated at Wed Dec 3 14:44:22 2025 by rpki-client