This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/1f2f64ca-fa54-499e-bc33-4862dca794f7/0/B9A55DD123C2F224C4E245856905F78F2F354D92.mft File: B9A55DD123C2F224C4E245856905F78F2F354D92.mft (raw, json) Hash identifier: HxSPn5Y56CWgVoFnYX7kw5BtMUcJki3xE+QVz/980Zc= Subject key identifier: 6B:85:9F:97:C8:25:9C:E5:DE:9C:1B:D1:D6:1A:7B:99:5A:2F:41:77 Authority key identifier: B9:A5:5D:D1:23:C2:F2:24:C4:E2:45:85:69:05:F7:8F:2F:35:4D:92 Certificate issuer: /CN=B9A55DD123C2F224C4E245856905F78F2F354D92 Certificate serial: 338124DF8C7E7E08274E706657573372ACFEA09A Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/B9A55DD123C2F224C4E245856905F78F2F354D92.cer Subject info access: rsync://repo-rpki.idnic.net/repo/1f2f64ca-fa54-499e-bc33-4862dca794f7/0/B9A55DD123C2F224C4E245856905F78F2F354D92.mft Manifest number: FE Signing time: Fri 05 Dec 2025 10:41:03 +0000 Manifest this update: Fri 05 Dec 2025 10:36:03 +0000 Manifest next update: Mon 08 Dec 2025 13:46:03 +0000 Files and hashes: 1: 3135372e31302e39372e302f32342d3234203d3e203538383231.roa (hash: UPR5y8V0jVDX7lorT6sk4sYb0YCh+EKPNMakCdOkBwI=) 2: B9A55DD123C2F224C4E245856905F78F2F354D92.crl (hash: KGb5Uh1f1k5ddZYZyigYcCalgh4vJAYUzj0qO/MAeWM=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/1f2f64ca-fa54-499e-bc33-4862dca794f7/0/B9A55DD123C2F224C4E245856905F78F2F354D92.crl rsync://repo-rpki.idnic.net/repo/1f2f64ca-fa54-499e-bc33-4862dca794f7/0/B9A55DD123C2F224C4E245856905F78F2F354D92.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/B9A55DD123C2F224C4E245856905F78F2F354D92.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 08 Dec 2025 13:46:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 33:81:24:df:8c:7e:7e:08:27:4e:70:66:57:57:33:72:ac:fe:a0:9a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B9A55DD123C2F224C4E245856905F78F2F354D92 Validity Not Before: Dec 5 10:36:03 2025 GMT Not After : Dec 8 13:46:03 2025 GMT Subject: CN=6B859F97C8259CE5DE9C1BD1D61A7B995A2F4177 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:e6:b1:40:e9:c8:f2:81:fa:85:9f:cd:ba:6b: d9:15:c9:a4:cd:82:f6:da:3e:52:9c:3b:5f:82:6f: cd:32:5a:6c:b6:28:6f:18:0f:73:6f:84:1d:80:9b: 6c:8e:c6:4d:2e:60:32:08:f0:53:49:7d:0d:6b:c2: 40:1a:f6:49:41:5a:58:19:f2:d7:35:0e:27:0a:d3: f1:32:e0:14:6f:84:9f:01:4e:19:01:d9:ad:fd:2e: 12:75:ab:97:26:df:51:06:85:23:71:d5:59:7a:69: 3c:ce:86:cf:96:f1:17:05:f0:dd:ea:db:8d:5c:13: b9:8f:34:ca:23:ec:70:44:af:c9:68:4c:0a:39:90: 64:80:ba:e3:7f:8f:cd:2c:c1:2f:0f:dc:25:92:14: fa:68:67:1d:1b:ac:5e:1d:ea:da:9e:a7:1b:90:eb: 8e:9a:05:62:39:6b:cd:5f:d4:e1:9d:26:f1:08:cd: 6b:ba:14:1b:b8:3a:22:c0:94:de:97:de:6a:ee:ac: 5f:27:39:21:58:ee:b4:82:b6:89:2f:d6:ae:fe:b5: 11:6b:1e:2c:4f:33:5c:4b:41:5a:a0:04:79:99:d0: 42:7a:f1:70:47:39:31:14:c9:4e:a6:e7:ca:6f:18: 4b:c4:b4:d0:1a:30:52:b6:0c:68:cd:8d:e0:3a:3b: 58:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6B:85:9F:97:C8:25:9C:E5:DE:9C:1B:D1:D6:1A:7B:99:5A:2F:41:77 X509v3 Authority Key Identifier: keyid:B9:A5:5D:D1:23:C2:F2:24:C4:E2:45:85:69:05:F7:8F:2F:35:4D:92 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/1f2f64ca-fa54-499e-bc33-4862dca794f7/0/B9A55DD123C2F224C4E245856905F78F2F354D92.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/B9A55DD123C2F224C4E245856905F78F2F354D92.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/1f2f64ca-fa54-499e-bc33-4862dca794f7/0/B9A55DD123C2F224C4E245856905F78F2F354D92.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 01:9b:58:8b:eb:04:b9:25:5b:18:6c:0b:24:92:ac:6f:f6:69: 6f:18:03:0d:0a:6d:ee:11:f1:09:74:5b:63:7c:00:15:e3:b0: 48:d2:5b:49:c2:2d:f3:6f:11:40:b2:c4:d4:12:db:52:1b:0b: 09:09:27:77:91:31:4f:ec:5d:6a:d1:27:9f:92:16:e1:29:76: 32:bb:9d:e6:dd:73:04:ad:23:fa:63:5e:97:d1:32:21:4a:0f: 64:d3:2a:f5:2f:c8:6f:9c:ef:81:33:99:94:1f:a5:75:36:70: 32:a9:cd:15:31:dc:6a:b2:c9:ab:e7:22:a3:b2:01:f9:a5:bf: 38:ad:ae:14:f5:3e:da:d8:e7:54:e1:53:77:eb:a0:58:bb:2b: 1a:3d:f3:97:2a:b5:a1:eb:af:f4:8d:98:9a:a5:19:ea:d8:2b: c4:10:5e:9c:b3:20:c4:47:6b:65:96:83:a8:a3:4c:ff:f7:25: f8:4e:4b:88:37:dd:a3:77:06:7a:6f:35:a1:9a:e6:97:a1:22: c7:83:a8:b7:f5:47:6d:94:a3:83:c7:22:4a:c0:7f:34:b6:af: e7:fc:98:1f:97:fe:08:55:b1:eb:cc:cf:74:c6:91:24:bb:b4: 8a:29:11:18:9f:33:c4:89:87:cf:49:8b:ec:44:c1:4d:85:78: 58:50:b3:cc -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUM4Ek34x+fggnTnBmV1czcqz+oJowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjlBNTVERDEyM0MyRjIyNEM0RTI0NTg1NjkwNUY3OEYy RjM1NEQ5MjAeFw0yNTEyMDUxMDM2MDNaFw0yNTEyMDgxMzQ2MDNaMDMxMTAvBgNV BAMTKDZCODU5Rjk3QzgyNTlDRTVERTlDMUJEMUQ2MUE3Qjk5NUEyRjQxNzcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC25rFA6cjygfqFn826a9kVyaTN gvbaPlKcO1+Cb80yWmy2KG8YD3NvhB2Am2yOxk0uYDII8FNJfQ1rwkAa9klBWlgZ 8tc1DicK0/Ey4BRvhJ8BThkB2a39LhJ1q5cm31EGhSNx1Vl6aTzOhs+W8RcF8N3q 241cE7mPNMoj7HBEr8loTAo5kGSAuuN/j80swS8P3CWSFPpoZx0brF4d6tqepxuQ 646aBWI5a81f1OGdJvEIzWu6FBu4OiLAlN6X3mrurF8nOSFY7rSCtokv1q7+tRFr HixPM1xLQVqgBHmZ0EJ68XBHOTEUyU6m58pvGEvEtNAaMFK2DGjNjeA6O1gLAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUa4Wfl8glnOXenBvR1hp7mVovQXcwHwYDVR0j BBgwFoAUuaVd0SPC8iTE4kWFaQX3jy81TZIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x ZjJmNjRjYS1mYTU0LTQ5OWUtYmMzMy00ODYyZGNhNzk0ZjcvMC9COUE1NUREMTIz QzJGMjI0QzRFMjQ1ODU2OTA1Rjc4RjJGMzU0RDkyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvQjlBNTVERDEyM0MyRjIyNEM0RTI0NTg1NjkwNUY3OEYyRjM1 NEQ5Mi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMWYyZjY0Y2EtZmE1NC00OTllLWJj MzMtNDg2MmRjYTc5NGY3LzAvQjlBNTVERDEyM0MyRjIyNEM0RTI0NTg1NjkwNUY3 OEYyRjM1NEQ5Mi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAGbWIvrBLklWxhsCySSrG/2aW8YAw0Kbe4R 8Ql0W2N8ABXjsEjSW0nCLfNvEUCyxNQS21IbCwkJJ3eRMU/sXWrRJ5+SFuEpdjK7 nebdcwStI/pjXpfRMiFKD2TTKvUvyG+c74EzmZQfpXU2cDKpzRUx3GqyyavnIqOy AfmlvzitrhT1PtrY51ThU3froFi7Kxo985cqtaHrr/SNmJqlGerYK8QQXpyzIMRH a2WWg6ijTP/3JfhOS4g33aN3BnpvNaGa5pehIseDqLf1R22Uo4PHIkrAfzS2r+f8 mB+X/ghVsevMz3TGkSS7tIopERifM8SJh89Ji+xEwU2FeFhQs8w= -----END CERTIFICATE-----Generated at Sat Dec 6 23:53:04 2025 by rpki-client