This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/832c823d-a4b7-4005-9ab8-d3b2c8bbf763/0/9BFE3F2FE97677A590AC77278DA8666C8389D7BF.mft File: 9BFE3F2FE97677A590AC77278DA8666C8389D7BF.mft (raw, json) Hash identifier: 8SOBJ8DFMuyZvx1ofHEpAOmAa15ocFpWSF0ts7fgaYc= Subject key identifier: 60:A7:F1:E6:4B:9F:27:ED:9F:59:82:8C:EA:35:8E:67:6E:98:AD:60 Authority key identifier: 9B:FE:3F:2F:E9:76:77:A5:90:AC:77:27:8D:A8:66:6C:83:89:D7:BF Certificate issuer: /CN=9BFE3F2FE97677A590AC77278DA8666C8389D7BF Certificate serial: 480D12E888EE87C5F60B6E8910BF64CC48588AB3 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9BFE3F2FE97677A590AC77278DA8666C8389D7BF.cer Subject info access: rsync://repo-rpki.idnic.net/repo/832c823d-a4b7-4005-9ab8-d3b2c8bbf763/0/9BFE3F2FE97677A590AC77278DA8666C8389D7BF.mft Manifest number: 03A2 Signing time: Sat 06 Dec 2025 05:50:59 +0000 Manifest this update: Sat 06 Dec 2025 05:45:59 +0000 Manifest next update: Tue 09 Dec 2025 17:01:59 +0000 Files and hashes: 1: 3130332e3136392e3139352e302f32342d3234203d3e20313339393637.roa (hash: 2vX1spf0CDDLU6b57YsXR6vrWtD2IJYZSM4qYEDN34I=) 2: 9BFE3F2FE97677A590AC77278DA8666C8389D7BF.crl (hash: 1adKfXb3A3OeBw/CMeE3ZIqRHKY8qRd/1o0vwZYcIow=) 3: 3130332e3136392e3139342e302f32342d3234203d3e20313432333536.roa (hash: /JgZ/3Dc8d37h8AUWlmBK2pFzp3Z0endISYcFZpQbYk=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/832c823d-a4b7-4005-9ab8-d3b2c8bbf763/0/9BFE3F2FE97677A590AC77278DA8666C8389D7BF.crl rsync://repo-rpki.idnic.net/repo/832c823d-a4b7-4005-9ab8-d3b2c8bbf763/0/9BFE3F2FE97677A590AC77278DA8666C8389D7BF.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9BFE3F2FE97677A590AC77278DA8666C8389D7BF.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 09 Dec 2025 15:57:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 48:0d:12:e8:88:ee:87:c5:f6:0b:6e:89:10:bf:64:cc:48:58:8a:b3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9BFE3F2FE97677A590AC77278DA8666C8389D7BF Validity Not Before: Dec 6 05:45:59 2025 GMT Not After : Dec 9 17:01:59 2025 GMT Subject: CN=60A7F1E64B9F27ED9F59828CEA358E676E98AD60 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:9f:96:50:fe:99:6f:49:aa:32:c4:21:a2:b9: 57:d0:91:c5:15:b0:88:5c:5c:6e:d1:bb:47:3c:6b: 6d:58:e6:9a:67:20:bf:3a:a5:00:2b:2d:3d:7d:ea: 59:d0:39:55:9a:2c:bc:59:97:44:a2:79:77:8d:60: 1a:9a:a3:30:2a:9c:b1:29:09:fd:36:49:95:ec:f5: da:0f:69:ad:ef:77:62:7c:cb:b6:57:c1:55:53:6f: 9f:51:5c:d6:ba:9f:9b:e2:21:a2:ef:a7:8a:af:f4: a0:88:72:9d:c5:41:6d:83:d9:3a:d0:fa:ef:2a:df: 84:63:83:1b:db:fa:28:36:d3:0f:57:f6:15:7b:cb: 0a:b4:da:d7:df:16:6f:29:d9:ce:5c:8d:95:cc:99: f7:03:40:e5:f2:da:8d:a1:d7:63:c1:f0:01:85:a2: da:1a:58:d2:13:71:8a:a5:48:9f:27:6d:c4:29:06: 93:e6:a6:e1:5d:e8:ca:c4:f0:03:01:cb:fa:2e:31: 9b:61:d7:29:a9:80:5b:cc:5c:46:50:3d:d7:99:5b: 6d:b7:cf:68:e0:a5:d8:64:d7:10:09:e3:c8:e9:f8: dc:32:a3:cc:52:ee:60:e8:21:cc:3e:dd:bb:c9:95: c1:82:b3:71:c8:e5:c8:10:41:ff:a7:52:8d:63:13: 4c:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 60:A7:F1:E6:4B:9F:27:ED:9F:59:82:8C:EA:35:8E:67:6E:98:AD:60 X509v3 Authority Key Identifier: keyid:9B:FE:3F:2F:E9:76:77:A5:90:AC:77:27:8D:A8:66:6C:83:89:D7:BF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/832c823d-a4b7-4005-9ab8-d3b2c8bbf763/0/9BFE3F2FE97677A590AC77278DA8666C8389D7BF.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9BFE3F2FE97677A590AC77278DA8666C8389D7BF.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/832c823d-a4b7-4005-9ab8-d3b2c8bbf763/0/9BFE3F2FE97677A590AC77278DA8666C8389D7BF.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 26:1f:aa:47:5d:91:b9:ca:cc:52:b0:a8:83:b0:82:5a:7e:a0: 2f:9b:56:b3:d1:7a:72:3f:f3:07:57:ed:c8:43:ba:1b:7f:6c: 87:f7:0a:28:a9:62:70:a6:a4:82:41:78:75:c3:77:c5:51:86: 38:7f:20:54:fe:52:1a:b2:6f:73:f9:02:14:88:a3:56:c2:a4: ca:fa:c7:c7:e1:a2:a6:ef:21:b0:c8:4f:cb:51:2d:20:ad:43: 61:d2:86:7a:d1:06:66:34:21:60:94:7a:4d:19:bb:a5:c9:61: f9:c9:8b:e3:e0:e7:53:ef:1e:b6:88:80:b9:7e:e4:89:7c:33: 10:55:2b:49:f1:87:8b:7f:5e:4d:d5:62:93:fb:2f:4f:7e:f7: 3a:ec:b4:85:51:ee:01:f7:55:74:17:bf:2e:90:78:87:ae:f8: a9:76:ef:1c:f7:68:bb:00:0d:19:a9:f1:26:da:bd:4b:e6:ed: 0b:65:4a:31:57:fc:10:f0:6e:e3:34:9e:4b:c4:3c:04:54:f0: ca:3c:88:fb:ad:cc:be:c1:88:1e:91:a1:4a:6e:9b:9f:9f:e0: ff:ce:81:fd:e8:38:e2:a1:b7:f5:3b:76:ed:76:e8:b4:f9:d9: 8d:e9:a9:40:77:a8:0f:91:4c:4a:9e:49:bf:1a:5c:57:fc:c0: bf:71:ec:34 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUSA0S6Ijuh8X2C26JEL9kzEhYirMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUJGRTNGMkZFOTc2NzdBNTkwQUM3NzI3OERBODY2NkM4 Mzg5RDdCRjAeFw0yNTEyMDYwNTQ1NTlaFw0yNTEyMDkxNzAxNTlaMDMxMTAvBgNV BAMTKDYwQTdGMUU2NEI5RjI3RUQ5RjU5ODI4Q0VBMzU4RTY3NkU5OEFENjAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDVn5ZQ/plvSaoyxCGiuVfQkcUV sIhcXG7Ru0c8a21Y5ppnIL86pQArLT196lnQOVWaLLxZl0SieXeNYBqaozAqnLEp Cf02SZXs9doPaa3vd2J8y7ZXwVVTb59RXNa6n5viIaLvp4qv9KCIcp3FQW2D2TrQ +u8q34Rjgxvb+ig20w9X9hV7ywq02tffFm8p2c5cjZXMmfcDQOXy2o2h12PB8AGF otoaWNITcYqlSJ8nbcQpBpPmpuFd6MrE8AMBy/ouMZth1ympgFvMXEZQPdeZW223 z2jgpdhk1xAJ48jp+Nwyo8xS7mDoIcw+3bvJlcGCs3HI5cgQQf+nUo1jE0yPAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUYKfx5kufJ+2fWYKM6jWOZ26YrWAwHwYDVR0j BBgwFoAUm/4/L+l2d6WQrHcnjahmbIOJ178wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 MzJjODIzZC1hNGI3LTQwMDUtOWFiOC1kM2IyYzhiYmY3NjMvMC85QkZFM0YyRkU5 NzY3N0E1OTBBQzc3Mjc4REE4NjY2QzgzODlEN0JGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOUJGRTNGMkZFOTc2NzdBNTkwQUM3NzI3OERBODY2NkM4Mzg5 RDdCRi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vODMyYzgyM2QtYTRiNy00MDA1LTlh YjgtZDNiMmM4YmJmNzYzLzAvOUJGRTNGMkZFOTc2NzdBNTkwQUM3NzI3OERBODY2 NkM4Mzg5RDdCRi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACYfqkddkbnKzFKwqIOwglp+oC+bVrPRenI/ 8wdX7chDuht/bIf3CiipYnCmpIJBeHXDd8VRhjh/IFT+Uhqyb3P5AhSIo1bCpMr6 x8fhoqbvIbDIT8tRLSCtQ2HShnrRBmY0IWCUek0Zu6XJYfnJi+Pg51PvHraIgLl+ 5Il8MxBVK0nxh4t/Xk3VYpP7L09+9zrstIVR7gH3VXQXvy6QeIeu+Kl27xz3aLsA DRmp8SbavUvm7QtlSjFX/BDwbuM0nkvEPARU8Mo8iPutzL7BiB6RoUpum5+f4P/O gf3oOOKht/U7du126LT52Y3pqUB3qA+RTEqeSb8aXFf8wL9x7DQ= -----END CERTIFICATE-----Generated at Sun Dec 7 07:27:34 2025 by rpki-client