This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/21db6c9b-d8fc-4d8c-80cb-fd2241208dde/0/9BF72C8BB7CA359BE46741ABCE4EB69F056DF094.mft File: 9BF72C8BB7CA359BE46741ABCE4EB69F056DF094.mft (raw, json) Hash identifier: 91qJUjjWAGit//m2E0w/h1tHYF5Ecu4X6s0yPap5iUU= Subject key identifier: AD:50:30:BA:17:8F:AA:84:3F:B3:47:13:24:04:59:D0:32:56:CD:93 Authority key identifier: 9B:F7:2C:8B:B7:CA:35:9B:E4:67:41:AB:CE:4E:B6:9F:05:6D:F0:94 Certificate issuer: /CN=9BF72C8BB7CA359BE46741ABCE4EB69F056DF094 Certificate serial: 4A12C5D48FEEAC350EAB3243B95AFE89F017EAE2 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9BF72C8BB7CA359BE46741ABCE4EB69F056DF094.cer Subject info access: rsync://repo-rpki.idnic.net/repo/21db6c9b-d8fc-4d8c-80cb-fd2241208dde/0/9BF72C8BB7CA359BE46741ABCE4EB69F056DF094.mft Manifest number: 0335 Signing time: Sat 06 Dec 2025 21:01:46 +0000 Manifest this update: Sat 06 Dec 2025 20:56:46 +0000 Manifest next update: Wed 10 Dec 2025 01:28:46 +0000 Files and hashes: 1: 3130332e3137322e3137302e302f32342d3234203d3e20313432333936.roa (hash: SPW5Gl3BeUVHO5fIh7gLc9Co4QXzBznSK3/ByXd6mfU=) 2: 3130332e3137322e3137312e302f32342d3234203d3e20313432333936.roa (hash: 9s1ITUmg2kGqf5Jx5LPfpxTxCb9voDIi9IZi6C1ddpU=) 3: 3130332e3137322e3137302e302f32332d3233203d3e20313432333936.roa (hash: kkQvEgsJeO+CrA3Ye9kDXGk01vieQEZNvkHA4XJOOhQ=) 4: 9BF72C8BB7CA359BE46741ABCE4EB69F056DF094.crl (hash: nzzSEj4Kw4CftpLygXS2WT8YIVhyzF9WAgjBfwnAgx8=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/21db6c9b-d8fc-4d8c-80cb-fd2241208dde/0/9BF72C8BB7CA359BE46741ABCE4EB69F056DF094.crl rsync://repo-rpki.idnic.net/repo/21db6c9b-d8fc-4d8c-80cb-fd2241208dde/0/9BF72C8BB7CA359BE46741ABCE4EB69F056DF094.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9BF72C8BB7CA359BE46741ABCE4EB69F056DF094.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 09 Dec 2025 15:57:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4a:12:c5:d4:8f:ee:ac:35:0e:ab:32:43:b9:5a:fe:89:f0:17:ea:e2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9BF72C8BB7CA359BE46741ABCE4EB69F056DF094 Validity Not Before: Dec 6 20:56:46 2025 GMT Not After : Dec 10 01:28:46 2025 GMT Subject: CN=AD5030BA178FAA843FB34713240459D03256CD93 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f5:f1:9c:06:4a:21:93:9a:6e:47:bd:0c:ef:2d: b2:ee:46:dc:8e:74:f8:9a:f2:28:17:42:05:fe:8d: 48:59:42:36:6e:e6:83:aa:a3:7b:ea:cd:14:7b:9f: bf:05:3b:06:cd:fc:c6:35:40:70:90:85:cb:24:ac: 9b:47:5b:78:da:c3:2c:c5:b3:3d:b4:5f:48:b5:41: d7:3c:0e:bf:37:7f:33:b1:7d:12:34:9d:bf:4f:77: 69:5b:87:84:15:83:5a:68:53:6c:fe:c1:11:ee:4a: c8:41:78:18:54:eb:af:9d:71:0f:3b:07:07:bf:6f: 9e:af:3a:4e:30:db:52:0c:58:64:82:12:0e:68:a0: 5c:4a:2b:59:fa:ee:fa:22:f4:b9:f1:af:a0:dc:fe: fc:ee:da:69:44:3b:2e:a1:73:ce:9f:cf:12:85:8d: 8b:ce:a8:de:74:90:d8:ea:94:e0:b9:39:92:35:3a: e0:c7:4c:20:f1:07:76:82:86:0a:22:b3:57:95:d1: f8:dc:11:e8:64:8b:fe:f1:0a:46:6a:8b:1f:f8:49: d1:55:36:21:d7:cd:14:0d:2c:62:63:00:dc:c5:7d: 75:0d:2c:78:5b:65:8d:cc:85:f2:6f:4e:cb:06:21: 9b:3d:84:fc:63:9f:32:94:0b:09:22:2d:2b:32:d9: a1:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AD:50:30:BA:17:8F:AA:84:3F:B3:47:13:24:04:59:D0:32:56:CD:93 X509v3 Authority Key Identifier: keyid:9B:F7:2C:8B:B7:CA:35:9B:E4:67:41:AB:CE:4E:B6:9F:05:6D:F0:94 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/21db6c9b-d8fc-4d8c-80cb-fd2241208dde/0/9BF72C8BB7CA359BE46741ABCE4EB69F056DF094.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9BF72C8BB7CA359BE46741ABCE4EB69F056DF094.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/21db6c9b-d8fc-4d8c-80cb-fd2241208dde/0/9BF72C8BB7CA359BE46741ABCE4EB69F056DF094.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption af:75:81:76:17:0c:23:c3:a5:37:7e:2f:12:01:fe:ab:d9:67: a2:c1:d2:02:42:cc:4a:20:d8:0a:eb:8a:b6:62:9f:55:1d:b6: 6c:85:28:32:24:57:bb:de:27:13:f9:88:0b:03:00:a9:52:99: bb:84:1f:26:60:50:cc:61:aa:c7:de:4d:27:f6:01:2c:69:49: e4:fe:f0:56:5d:52:f5:af:ae:c0:a2:3e:85:fe:00:34:2c:f1: da:4a:0c:0f:05:66:d9:b9:13:ae:f8:fe:1b:81:0d:e0:6c:8f: 46:f4:a2:19:1b:f2:0b:77:04:23:20:de:17:59:50:00:07:33: 58:c7:e6:d4:f8:92:e0:e9:48:6d:d6:d1:a0:53:a6:95:bb:29: d9:38:c9:e9:31:60:48:e9:31:7c:7d:65:14:e8:21:94:13:09: 48:b5:6d:04:c8:23:0b:ce:4e:05:56:be:21:a2:36:f2:78:67: 02:ac:d2:59:96:2e:59:63:77:27:1f:71:49:25:17:5d:4c:76: 19:be:7d:c8:6a:b6:90:c9:fc:c6:ac:ac:be:ba:75:a9:12:57: 56:7d:8b:a9:68:f6:aa:33:13:76:1b:04:8d:91:c8:72:24:b8: 3c:cc:f4:7f:d2:88:9d:cd:66:32:0f:a5:99:df:6d:63:29:f1: e9:89:f7:8a -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUShLF1I/urDUOqzJDuVr+ifAX6uIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUJGNzJDOEJCN0NBMzU5QkU0Njc0MUFCQ0U0RUI2OUYw NTZERjA5NDAeFw0yNTEyMDYyMDU2NDZaFw0yNTEyMTAwMTI4NDZaMDMxMTAvBgNV BAMTKEFENTAzMEJBMTc4RkFBODQzRkIzNDcxMzI0MDQ1OUQwMzI1NkNEOTMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD18ZwGSiGTmm5HvQzvLbLuRtyO dPia8igXQgX+jUhZQjZu5oOqo3vqzRR7n78FOwbN/MY1QHCQhcskrJtHW3jawyzF sz20X0i1Qdc8Dr83fzOxfRI0nb9Pd2lbh4QVg1poU2z+wRHuSshBeBhU66+dcQ87 Bwe/b56vOk4w21IMWGSCEg5ooFxKK1n67voi9Lnxr6Dc/vzu2mlEOy6hc86fzxKF jYvOqN50kNjqlOC5OZI1OuDHTCDxB3aChgois1eV0fjcEehki/7xCkZqix/4SdFV NiHXzRQNLGJjANzFfXUNLHhbZY3MhfJvTssGIZs9hPxjnzKUCwkiLSsy2aHnAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUrVAwuhePqoQ/s0cTJARZ0DJWzZMwHwYDVR0j BBgwFoAUm/csi7fKNZvkZ0Grzk62nwVt8JQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y MWRiNmM5Yi1kOGZjLTRkOGMtODBjYi1mZDIyNDEyMDhkZGUvMC85QkY3MkM4QkI3 Q0EzNTlCRTQ2NzQxQUJDRTRFQjY5RjA1NkRGMDk0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOUJGNzJDOEJCN0NBMzU5QkU0Njc0MUFCQ0U0RUI2OUYwNTZE RjA5NC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMjFkYjZjOWItZDhmYy00ZDhjLTgw Y2ItZmQyMjQxMjA4ZGRlLzAvOUJGNzJDOEJCN0NBMzU5QkU0Njc0MUFCQ0U0RUI2 OUYwNTZERjA5NC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAK91gXYXDCPDpTd+LxIB/qvZZ6LB0gJCzEog 2ArrirZin1UdtmyFKDIkV7veJxP5iAsDAKlSmbuEHyZgUMxhqsfeTSf2ASxpSeT+ 8FZdUvWvrsCiPoX+ADQs8dpKDA8FZtm5E674/huBDeBsj0b0ohkb8gt3BCMg3hdZ UAAHM1jH5tT4kuDpSG3W0aBTppW7Kdk4yekxYEjpMXx9ZRToIZQTCUi1bQTIIwvO TgVWviGiNvJ4ZwKs0lmWLlljdycfcUklF11Mdhm+fchqtpDJ/MasrL66dakSV1Z9 i6lo9qozE3YbBI2RyHIkuDzM9H/SiJ3NZjIPpZnfbWMp8emJ94o= -----END CERTIFICATE-----Generated at Sat Dec 6 22:51:08 2025 by rpki-client