This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/21db6c9b-d8fc-4d8c-80cb-fd2241208dde/0/9BF72C8BB7CA359BE46741ABCE4EB69F056DF094.mft File: 9BF72C8BB7CA359BE46741ABCE4EB69F056DF094.mft (raw, json) Hash identifier: QtGNksWq/d1d+0QNscT6ywukm/LOLeUYlAshCr/DE/c= Subject key identifier: 56:4D:F1:C2:C2:82:7D:F0:21:F7:7A:91:E4:36:B9:66:70:6E:D2:36 Authority key identifier: 9B:F7:2C:8B:B7:CA:35:9B:E4:67:41:AB:CE:4E:B6:9F:05:6D:F0:94 Certificate issuer: /CN=9BF72C8BB7CA359BE46741ABCE4EB69F056DF094 Certificate serial: 5894992876A89ED26EBB00F7C0A1424AEE88DB76 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9BF72C8BB7CA359BE46741ABCE4EB69F056DF094.cer Subject info access: rsync://repo-rpki.idnic.net/repo/21db6c9b-d8fc-4d8c-80cb-fd2241208dde/0/9BF72C8BB7CA359BE46741ABCE4EB69F056DF094.mft Manifest number: 0339 Signing time: Mon 15 Dec 2025 19:41:48 +0000 Manifest this update: Mon 15 Dec 2025 19:36:48 +0000 Manifest next update: Fri 19 Dec 2025 02:29:48 +0000 Files and hashes: 1: 3130332e3137322e3137302e302f32332d3233203d3e20313432333936.roa (hash: kkQvEgsJeO+CrA3Ye9kDXGk01vieQEZNvkHA4XJOOhQ=) 2: 3130332e3137322e3137312e302f32342d3234203d3e20313432333936.roa (hash: 9s1ITUmg2kGqf5Jx5LPfpxTxCb9voDIi9IZi6C1ddpU=) 3: 9BF72C8BB7CA359BE46741ABCE4EB69F056DF094.crl (hash: o9K0C4YBxTltUvH9ygqOyTeohHjk2pMPZU9G5IKFeVk=) 4: 3130332e3137322e3137302e302f32342d3234203d3e20313432333936.roa (hash: SPW5Gl3BeUVHO5fIh7gLc9Co4QXzBznSK3/ByXd6mfU=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/21db6c9b-d8fc-4d8c-80cb-fd2241208dde/0/9BF72C8BB7CA359BE46741ABCE4EB69F056DF094.crl rsync://repo-rpki.idnic.net/repo/21db6c9b-d8fc-4d8c-80cb-fd2241208dde/0/9BF72C8BB7CA359BE46741ABCE4EB69F056DF094.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9BF72C8BB7CA359BE46741ABCE4EB69F056DF094.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 19 Dec 2025 02:29:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 58:94:99:28:76:a8:9e:d2:6e:bb:00:f7:c0:a1:42:4a:ee:88:db:76 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9BF72C8BB7CA359BE46741ABCE4EB69F056DF094 Validity Not Before: Dec 15 19:36:48 2025 GMT Not After : Dec 19 02:29:48 2025 GMT Subject: CN=564DF1C2C2827DF021F77A91E436B966706ED236 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:80:e5:89:1e:54:1d:ef:6b:ff:9e:6a:09:a2: 4a:21:50:95:08:8b:81:3f:76:fd:ae:25:7c:d6:cd: 52:29:88:0d:e7:c0:0c:4c:e8:9c:3a:a8:f5:c9:55: db:95:d9:31:0f:65:bf:19:84:80:30:f8:4f:e7:96: ef:f8:af:0c:15:a5:a6:1e:48:bb:46:6b:ac:55:3b: 0c:22:5a:2d:7e:b7:65:aa:86:3a:ab:1b:c4:31:61: 7f:21:c4:e3:52:fa:f0:ab:a5:6f:74:29:e8:be:43: 29:2f:41:a9:c9:21:a7:f7:33:96:54:56:8a:06:34: e7:40:ce:96:8e:92:69:11:5c:ef:fc:53:85:66:2e: cb:31:40:49:c6:03:3d:11:e3:54:31:bc:ee:2a:68: 20:60:ba:8c:7c:d7:ff:24:65:76:52:5a:f8:b0:57: 1c:b1:92:c9:07:19:3a:13:35:f7:c5:8d:7c:ad:c2: f1:09:a3:2b:e6:4d:a5:7c:cb:01:ed:44:52:54:14: 03:66:4a:9b:92:65:82:bf:57:4a:41:c7:1f:c6:a1: 38:f7:18:22:1c:2a:11:eb:f0:27:b3:88:69:3c:04: 55:a5:7b:ee:fd:b9:23:ac:1b:fa:29:46:2a:b0:ef: de:fe:f3:f8:2e:74:f5:ba:bb:7d:7f:61:4e:a8:0f: 7d:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 56:4D:F1:C2:C2:82:7D:F0:21:F7:7A:91:E4:36:B9:66:70:6E:D2:36 X509v3 Authority Key Identifier: keyid:9B:F7:2C:8B:B7:CA:35:9B:E4:67:41:AB:CE:4E:B6:9F:05:6D:F0:94 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/21db6c9b-d8fc-4d8c-80cb-fd2241208dde/0/9BF72C8BB7CA359BE46741ABCE4EB69F056DF094.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9BF72C8BB7CA359BE46741ABCE4EB69F056DF094.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/21db6c9b-d8fc-4d8c-80cb-fd2241208dde/0/9BF72C8BB7CA359BE46741ABCE4EB69F056DF094.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8b:03:a7:e9:9e:cd:39:e1:00:6d:7b:ea:4f:ef:34:5a:86:d5: 14:e7:d5:5c:1a:96:11:95:86:51:d8:78:ea:ad:7d:42:2d:1b: 5d:c6:52:6f:3a:d3:5c:ab:07:9f:f0:f4:11:ce:f6:44:5e:88: e4:12:b7:2f:09:84:a3:b8:1a:1e:f8:83:b2:a6:40:99:b1:2a: c1:e4:94:b8:47:40:ea:14:e4:b1:33:da:1f:a2:dc:60:30:04: 63:34:6e:94:59:66:44:cb:13:1d:73:42:f2:ab:e5:2b:c7:3e: 81:eb:55:34:63:0d:ad:5f:7b:aa:a3:67:be:86:7f:9b:a3:75: e9:28:ed:38:8e:2e:c3:7c:2e:37:82:45:80:00:a5:d7:8d:0f: 0f:04:92:e0:fb:6b:09:8c:97:59:cb:e4:31:84:a0:22:01:2b: 97:9c:8e:30:e0:fe:0a:4e:7d:f9:a3:82:6b:99:68:a8:ed:cb: 0f:0e:3f:9e:e4:63:3c:e3:b4:59:19:84:e2:13:62:e0:5e:7f: 07:cd:62:a7:8a:d8:be:35:be:26:3c:9f:c4:0d:86:b3:42:a7: c8:7f:39:2b:b6:93:48:d6:24:7d:cd:68:c0:bc:63:bc:a6:c6: a0:4e:37:aa:c9:ad:74:3d:b5:15:9d:f8:2d:31:df:66:0c:cf: 63:cd:38:69 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUWJSZKHaontJuuwD3wKFCSu6I23YwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUJGNzJDOEJCN0NBMzU5QkU0Njc0MUFCQ0U0RUI2OUYw NTZERjA5NDAeFw0yNTEyMTUxOTM2NDhaFw0yNTEyMTkwMjI5NDhaMDMxMTAvBgNV BAMTKDU2NERGMUMyQzI4MjdERjAyMUY3N0E5MUU0MzZCOTY2NzA2RUQyMzYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCqgOWJHlQd72v/nmoJokohUJUI i4E/dv2uJXzWzVIpiA3nwAxM6Jw6qPXJVduV2TEPZb8ZhIAw+E/nlu/4rwwVpaYe SLtGa6xVOwwiWi1+t2WqhjqrG8QxYX8hxONS+vCrpW90Kei+QykvQanJIaf3M5ZU VooGNOdAzpaOkmkRXO/8U4VmLssxQEnGAz0R41QxvO4qaCBguox81/8kZXZSWviw VxyxkskHGToTNffFjXytwvEJoyvmTaV8ywHtRFJUFANmSpuSZYK/V0pBxx/GoTj3 GCIcKhHr8CeziGk8BFWle+79uSOsG/opRiqw797+8/gudPW6u31/YU6oD33zAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUVk3xwsKCffAh93qR5Da5ZnBu0jYwHwYDVR0j BBgwFoAUm/csi7fKNZvkZ0Grzk62nwVt8JQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y MWRiNmM5Yi1kOGZjLTRkOGMtODBjYi1mZDIyNDEyMDhkZGUvMC85QkY3MkM4QkI3 Q0EzNTlCRTQ2NzQxQUJDRTRFQjY5RjA1NkRGMDk0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOUJGNzJDOEJCN0NBMzU5QkU0Njc0MUFCQ0U0RUI2OUYwNTZE RjA5NC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMjFkYjZjOWItZDhmYy00ZDhjLTgw Y2ItZmQyMjQxMjA4ZGRlLzAvOUJGNzJDOEJCN0NBMzU5QkU0Njc0MUFCQ0U0RUI2 OUYwNTZERjA5NC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIsDp+mezTnhAG176k/vNFqG1RTn1VwalhGV hlHYeOqtfUItG13GUm8601yrB5/w9BHO9kReiOQSty8JhKO4Gh74g7KmQJmxKsHk lLhHQOoU5LEz2h+i3GAwBGM0bpRZZkTLEx1zQvKr5SvHPoHrVTRjDa1fe6qjZ76G f5ujdeko7TiOLsN8LjeCRYAApdeNDw8EkuD7awmMl1nL5DGEoCIBK5ecjjDg/gpO ffmjgmuZaKjtyw8OP57kYzzjtFkZhOITYuBefwfNYqeK2L41viY8n8QNhrNCp8h/ OSu2k0jWJH3NaMC8Y7ymxqBON6rJrXQ9tRWd+C0x32YMz2PNOGk= -----END CERTIFICATE-----Generated at Tue Dec 16 07:08:27 2025 by rpki-client