This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/832c823d-a4b7-4005-9ab8-d3b2c8bbf763/0/9BFE3F2FE97677A590AC77278DA8666C8389D7BF.mft File: 9BFE3F2FE97677A590AC77278DA8666C8389D7BF.mft (raw, json) Hash identifier: IpNzjR17qx1XYTRQJt9xtlprApOcR+Hhgeqglytss+c= Subject key identifier: 1A:D8:06:AD:68:43:48:16:67:6C:4C:88:7B:26:7C:23:E7:76:2C:8A Authority key identifier: 9B:FE:3F:2F:E9:76:77:A5:90:AC:77:27:8D:A8:66:6C:83:89:D7:BF Certificate issuer: /CN=9BFE3F2FE97677A590AC77278DA8666C8389D7BF Certificate serial: 1AC4AF0C3763D2CF47BA4E121CD62BA04E8E4D86 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9BFE3F2FE97677A590AC77278DA8666C8389D7BF.cer Subject info access: rsync://repo-rpki.idnic.net/repo/832c823d-a4b7-4005-9ab8-d3b2c8bbf763/0/9BFE3F2FE97677A590AC77278DA8666C8389D7BF.mft Manifest number: 03A7 Signing time: Wed 17 Dec 2025 22:10:56 +0000 Manifest this update: Wed 17 Dec 2025 22:05:56 +0000 Manifest next update: Sun 21 Dec 2025 07:37:56 +0000 Files and hashes: 1: 3130332e3136392e3139342e302f32342d3234203d3e20313432333536.roa (hash: /JgZ/3Dc8d37h8AUWlmBK2pFzp3Z0endISYcFZpQbYk=) 2: 3130332e3136392e3139352e302f32342d3234203d3e20313339393637.roa (hash: 2vX1spf0CDDLU6b57YsXR6vrWtD2IJYZSM4qYEDN34I=) 3: 9BFE3F2FE97677A590AC77278DA8666C8389D7BF.crl (hash: H3nG/oU20arpH+Tc+K01TFogBiMdo9x+9hGEZl9ibwE=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/832c823d-a4b7-4005-9ab8-d3b2c8bbf763/0/9BFE3F2FE97677A590AC77278DA8666C8389D7BF.crl rsync://repo-rpki.idnic.net/repo/832c823d-a4b7-4005-9ab8-d3b2c8bbf763/0/9BFE3F2FE97677A590AC77278DA8666C8389D7BF.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9BFE3F2FE97677A590AC77278DA8666C8389D7BF.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 21 Dec 2025 07:37:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1a:c4:af:0c:37:63:d2:cf:47:ba:4e:12:1c:d6:2b:a0:4e:8e:4d:86 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9BFE3F2FE97677A590AC77278DA8666C8389D7BF Validity Not Before: Dec 17 22:05:56 2025 GMT Not After : Dec 21 07:37:56 2025 GMT Subject: CN=1AD806AD68434816676C4C887B267C23E7762C8A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:3f:5b:8a:f3:af:93:cd:35:66:a7:ed:37:c8: 7d:83:ed:d2:95:95:2a:4b:86:0f:40:9a:e5:b4:42: e6:d5:f6:d4:79:0f:c9:81:e7:d8:c1:b4:dc:97:fd: 48:e7:6f:7d:9e:23:ca:21:15:26:8e:d1:bb:8e:ea: e6:22:dc:a7:a2:26:3b:d7:d2:e1:a7:b8:a1:e8:cd: ac:4c:c0:6a:fe:2b:f4:8c:3a:7b:f4:10:03:38:44: 61:b0:cb:af:a5:6a:0b:5d:63:21:f6:88:aa:4e:14: e3:e0:9a:43:0b:7e:18:ed:f8:ae:96:6d:bb:e3:45: b2:15:80:24:fe:cd:bc:57:b7:1f:ed:34:ad:68:ca: e0:61:2f:73:33:b9:d4:e8:4e:f5:78:91:8e:a3:24: 5f:62:cf:d8:db:a1:70:ec:00:d3:f1:0e:ad:d9:86: f8:26:56:36:b4:a4:2e:11:04:9a:b4:30:60:a4:38: 21:2e:ae:f9:e1:9d:c8:1a:ad:c9:6d:17:4b:c7:c1: c6:6a:4c:2a:02:00:52:eb:0b:fb:74:d1:5d:f9:6a: cb:13:9c:2b:b9:f3:0c:f9:81:87:03:9c:e6:38:56: e3:0b:fe:06:ed:c6:3b:ee:04:5e:63:e1:38:84:c5: db:af:b2:71:64:b3:19:4e:47:46:2e:2f:7f:2f:0e: ce:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:D8:06:AD:68:43:48:16:67:6C:4C:88:7B:26:7C:23:E7:76:2C:8A X509v3 Authority Key Identifier: keyid:9B:FE:3F:2F:E9:76:77:A5:90:AC:77:27:8D:A8:66:6C:83:89:D7:BF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/832c823d-a4b7-4005-9ab8-d3b2c8bbf763/0/9BFE3F2FE97677A590AC77278DA8666C8389D7BF.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9BFE3F2FE97677A590AC77278DA8666C8389D7BF.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/832c823d-a4b7-4005-9ab8-d3b2c8bbf763/0/9BFE3F2FE97677A590AC77278DA8666C8389D7BF.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 02:53:a7:34:6c:f3:00:c8:17:4d:f4:46:c9:34:fa:72:d9:02: 0a:c7:5a:03:eb:d2:7a:7b:70:ed:6f:bc:28:e5:2d:3a:44:8a: ac:1a:82:c0:4c:21:3c:c0:27:3a:72:0d:77:19:ef:cd:d1:af: 6a:ee:c0:e0:5b:d3:a3:d8:2d:5c:c8:0f:c4:28:8b:0b:6b:21: 7e:eb:1a:91:7e:a7:b5:05:86:fb:7e:bf:59:7e:b2:00:0e:34: bf:41:b2:54:b8:2f:63:bf:39:a2:ca:b4:45:23:32:38:88:66: 9f:de:ba:f5:a3:74:c6:72:d2:ba:2c:67:81:7f:35:eb:12:20: 63:3c:6a:fb:39:5b:f7:6e:b4:49:47:53:f4:41:c3:1d:ac:68: 6d:73:c7:46:ba:3b:d7:e7:23:35:7a:af:fc:26:fa:8e:cb:0c: 1b:dc:c4:05:59:cf:33:95:fe:75:ad:2c:35:10:ea:83:c8:03: 2d:54:5e:c5:52:c2:a1:50:f8:bb:ed:65:01:8c:0f:33:db:07: 75:0a:48:d5:6a:85:94:53:b1:35:fb:a6:53:b9:22:15:96:e9: 12:47:50:f2:cd:c3:f3:a7:55:9e:40:62:4d:d7:32:67:d6:e9: 40:cd:3c:7a:70:9c:2d:7b:0e:76:05:76:58:0d:72:27:de:22: f2:42:b3:86 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUGsSvDDdj0s9Huk4SHNYroE6OTYYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUJGRTNGMkZFOTc2NzdBNTkwQUM3NzI3OERBODY2NkM4 Mzg5RDdCRjAeFw0yNTEyMTcyMjA1NTZaFw0yNTEyMjEwNzM3NTZaMDMxMTAvBgNV BAMTKDFBRDgwNkFENjg0MzQ4MTY2NzZDNEM4ODdCMjY3QzIzRTc3NjJDOEEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+P1uK86+TzTVmp+03yH2D7dKV lSpLhg9AmuW0QubV9tR5D8mB59jBtNyX/Ujnb32eI8ohFSaO0buO6uYi3KeiJjvX 0uGnuKHozaxMwGr+K/SMOnv0EAM4RGGwy6+lagtdYyH2iKpOFOPgmkMLfhjt+K6W bbvjRbIVgCT+zbxXtx/tNK1oyuBhL3MzudToTvV4kY6jJF9iz9jboXDsANPxDq3Z hvgmVja0pC4RBJq0MGCkOCEurvnhncgarcltF0vHwcZqTCoCAFLrC/t00V35assT nCu58wz5gYcDnOY4VuML/gbtxjvuBF5j4TiExduvsnFksxlOR0YuL38vDs5zAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUGtgGrWhDSBZnbEyIeyZ8I+d2LIowHwYDVR0j BBgwFoAUm/4/L+l2d6WQrHcnjahmbIOJ178wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 MzJjODIzZC1hNGI3LTQwMDUtOWFiOC1kM2IyYzhiYmY3NjMvMC85QkZFM0YyRkU5 NzY3N0E1OTBBQzc3Mjc4REE4NjY2QzgzODlEN0JGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOUJGRTNGMkZFOTc2NzdBNTkwQUM3NzI3OERBODY2NkM4Mzg5 RDdCRi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vODMyYzgyM2QtYTRiNy00MDA1LTlh YjgtZDNiMmM4YmJmNzYzLzAvOUJGRTNGMkZFOTc2NzdBNTkwQUM3NzI3OERBODY2 NkM4Mzg5RDdCRi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAJTpzRs8wDIF030Rsk0+nLZAgrHWgPr0np7 cO1vvCjlLTpEiqwagsBMITzAJzpyDXcZ783Rr2ruwOBb06PYLVzID8QoiwtrIX7r GpF+p7UFhvt+v1l+sgAONL9BslS4L2O/OaLKtEUjMjiIZp/euvWjdMZy0rosZ4F/ NesSIGM8avs5W/dutElHU/RBwx2saG1zx0a6O9fnIzV6r/wm+o7LDBvcxAVZzzOV /nWtLDUQ6oPIAy1UXsVSwqFQ+LvtZQGMDzPbB3UKSNVqhZRTsTX7plO5IhWW6RJH UPLNw/OnVZ5AYk3XMmfW6UDNPHpwnC17DnYFdlgNcifeIvJCs4Y= -----END CERTIFICATE-----Generated at Thu Dec 18 14:24:26 2025 by rpki-client