This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/1f2f64ca-fa54-499e-bc33-4862dca794f7/0/B9A55DD123C2F224C4E245856905F78F2F354D92.mft File: B9A55DD123C2F224C4E245856905F78F2F354D92.mft (raw, json) Hash identifier: iInQoMYIfZHiIm5pdGDiCAxDxkmYxyc8U7niqMXj5VY= Subject key identifier: 0D:C0:73:B7:4B:41:CE:52:7A:15:ED:D7:A4:86:2F:EF:55:16:FB:8A Authority key identifier: B9:A5:5D:D1:23:C2:F2:24:C4:E2:45:85:69:05:F7:8F:2F:35:4D:92 Certificate issuer: /CN=B9A55DD123C2F224C4E245856905F78F2F354D92 Certificate serial: 03EFC0C7E93C9883298C4E67C657E901A5C6DB42 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/B9A55DD123C2F224C4E245856905F78F2F354D92.cer Subject info access: rsync://repo-rpki.idnic.net/repo/1f2f64ca-fa54-499e-bc33-4862dca794f7/0/B9A55DD123C2F224C4E245856905F78F2F354D92.mft Manifest number: 0104 Signing time: Thu 18 Dec 2025 15:21:01 +0000 Manifest this update: Thu 18 Dec 2025 15:16:01 +0000 Manifest next update: Sun 21 Dec 2025 23:23:01 +0000 Files and hashes: 1: 3135372e31302e39372e302f32342d3234203d3e203538383231.roa (hash: UPR5y8V0jVDX7lorT6sk4sYb0YCh+EKPNMakCdOkBwI=) 2: B9A55DD123C2F224C4E245856905F78F2F354D92.crl (hash: eNNxRfmV8lN1Ju8F/yaD4g85MUosW/pqF/YZiS3zYEM=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/1f2f64ca-fa54-499e-bc33-4862dca794f7/0/B9A55DD123C2F224C4E245856905F78F2F354D92.crl rsync://repo-rpki.idnic.net/repo/1f2f64ca-fa54-499e-bc33-4862dca794f7/0/B9A55DD123C2F224C4E245856905F78F2F354D92.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/B9A55DD123C2F224C4E245856905F78F2F354D92.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 20 Dec 2025 09:41:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 03:ef:c0:c7:e9:3c:98:83:29:8c:4e:67:c6:57:e9:01:a5:c6:db:42 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B9A55DD123C2F224C4E245856905F78F2F354D92 Validity Not Before: Dec 18 15:16:01 2025 GMT Not After : Dec 21 23:23:01 2025 GMT Subject: CN=0DC073B74B41CE527A15EDD7A4862FEF5516FB8A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:1f:39:d3:8f:02:d0:1d:d8:44:da:d5:ab:a0: 6f:de:1e:77:60:54:33:52:7c:62:d8:6e:05:d0:65: 51:11:50:57:18:91:45:cf:62:73:31:9c:80:3f:49: 6c:ed:63:46:e8:7a:e6:34:5d:c3:d9:da:5a:6d:23: 52:78:50:8a:73:82:6b:58:5e:ae:69:68:bc:22:15: 2b:04:49:58:77:27:0a:96:61:8e:52:17:47:cb:d4: e0:aa:4b:74:7b:65:d8:b6:ea:88:35:a7:8c:c3:98: 50:4c:46:7f:1b:c2:87:0f:aa:f3:a1:b9:06:6f:20: cc:eb:22:01:52:0a:d2:c9:d6:59:c4:a7:ea:58:21: b1:9e:dd:d0:e5:5f:f8:cf:56:47:20:21:d3:66:99: 85:e0:51:7b:04:08:25:cd:f3:5a:aa:c7:db:90:6f: 9d:f2:0d:ed:13:9a:10:2f:c0:1f:a0:af:82:53:cf: 53:1f:49:21:2c:53:ca:f6:b8:41:ca:cc:6f:1f:6b: 33:fd:e7:93:04:c7:1b:53:50:7f:3a:27:d5:07:52: c5:b5:c9:67:b1:55:fb:82:6c:f2:77:0f:b2:e2:e0: 22:49:ca:84:f3:ee:66:48:dd:06:c0:56:8a:9b:4b: b3:37:f9:42:09:81:dc:96:b5:b0:c3:00:c1:bd:41: d9:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0D:C0:73:B7:4B:41:CE:52:7A:15:ED:D7:A4:86:2F:EF:55:16:FB:8A X509v3 Authority Key Identifier: keyid:B9:A5:5D:D1:23:C2:F2:24:C4:E2:45:85:69:05:F7:8F:2F:35:4D:92 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/1f2f64ca-fa54-499e-bc33-4862dca794f7/0/B9A55DD123C2F224C4E245856905F78F2F354D92.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/B9A55DD123C2F224C4E245856905F78F2F354D92.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/1f2f64ca-fa54-499e-bc33-4862dca794f7/0/B9A55DD123C2F224C4E245856905F78F2F354D92.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5a:16:6d:85:bd:2b:66:d5:93:c2:51:1b:11:f7:16:f7:e6:0f: 29:c7:7c:2f:37:f4:ba:4d:b4:75:e1:ad:f1:71:1f:76:f8:72: 2c:67:82:ee:1f:4f:6b:74:78:01:43:9d:e5:f6:d8:21:b8:ec: f8:9b:d0:1f:e0:85:8f:1a:93:ab:ed:ac:f4:ff:ae:04:ec:82: 33:21:1e:b2:20:4c:3d:43:fe:90:09:ce:5c:59:d3:da:1b:36: 66:5e:2b:4c:7c:43:a8:c2:10:44:40:63:99:77:5f:d4:d4:9c: 77:50:6a:dd:28:bb:64:d2:4d:e8:56:e5:34:77:97:b8:9e:b2: d6:a8:90:6d:25:80:3f:c5:93:34:1b:ee:e6:7b:42:db:7a:78: 35:6c:34:db:77:cb:53:8a:03:92:62:16:c7:6b:fe:bd:4b:9a: 66:42:c7:1c:6f:9b:f8:d7:3a:8e:73:cb:cb:b1:ca:39:34:f4: 9e:32:6f:74:cd:39:be:51:b2:70:48:a5:42:fd:bf:54:b3:61: 36:5f:a6:87:73:f3:12:25:6e:4a:04:fe:f3:31:9d:21:7b:a3: 96:f7:5a:73:62:ae:28:da:78:1a:31:15:aa:13:b2:36:79:ec: ec:a7:4f:23:9c:17:bc:39:ed:4c:85:ed:73:6e:7d:ad:7f:05: a9:be:47:0a -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUA+/Ax+k8mIMpjE5nxlfpAaXG20IwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjlBNTVERDEyM0MyRjIyNEM0RTI0NTg1NjkwNUY3OEYy RjM1NEQ5MjAeFw0yNTEyMTgxNTE2MDFaFw0yNTEyMjEyMzIzMDFaMDMxMTAvBgNV BAMTKDBEQzA3M0I3NEI0MUNFNTI3QTE1RUREN0E0ODYyRkVGNTUxNkZCOEEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC2HznTjwLQHdhE2tWroG/eHndg VDNSfGLYbgXQZVERUFcYkUXPYnMxnIA/SWztY0boeuY0XcPZ2lptI1J4UIpzgmtY Xq5paLwiFSsESVh3JwqWYY5SF0fL1OCqS3R7Zdi26og1p4zDmFBMRn8bwocPqvOh uQZvIMzrIgFSCtLJ1lnEp+pYIbGe3dDlX/jPVkcgIdNmmYXgUXsECCXN81qqx9uQ b53yDe0TmhAvwB+gr4JTz1MfSSEsU8r2uEHKzG8fazP955MExxtTUH86J9UHUsW1 yWexVfuCbPJ3D7Li4CJJyoTz7mZI3QbAVoqbS7M3+UIJgdyWtbDDAMG9QdlNAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUDcBzt0tBzlJ6Fe3XpIYv71UW+4owHwYDVR0j BBgwFoAUuaVd0SPC8iTE4kWFaQX3jy81TZIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x ZjJmNjRjYS1mYTU0LTQ5OWUtYmMzMy00ODYyZGNhNzk0ZjcvMC9COUE1NUREMTIz QzJGMjI0QzRFMjQ1ODU2OTA1Rjc4RjJGMzU0RDkyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvQjlBNTVERDEyM0MyRjIyNEM0RTI0NTg1NjkwNUY3OEYyRjM1 NEQ5Mi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMWYyZjY0Y2EtZmE1NC00OTllLWJj MzMtNDg2MmRjYTc5NGY3LzAvQjlBNTVERDEyM0MyRjIyNEM0RTI0NTg1NjkwNUY3 OEYyRjM1NEQ5Mi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFoWbYW9K2bVk8JRGxH3FvfmDynHfC839LpN tHXhrfFxH3b4cixngu4fT2t0eAFDneX22CG47Pib0B/ghY8ak6vtrPT/rgTsgjMh HrIgTD1D/pAJzlxZ09obNmZeK0x8Q6jCEERAY5l3X9TUnHdQat0ou2TSTehW5TR3 l7iestaokG0lgD/FkzQb7uZ7Qtt6eDVsNNt3y1OKA5JiFsdr/r1LmmZCxxxvm/jX Oo5zy8uxyjk09J4yb3TNOb5RsnBIpUL9v1SzYTZfpodz8xIlbkoE/vMxnSF7o5b3 WnNirijaeBoxFaoTsjZ57OynTyOcF7w57UyF7XNufa1/Bam+Rwo= -----END CERTIFICATE-----Generated at Thu Dec 18 21:54:29 2025 by rpki-client