This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/b1f87f5a-f6f9-468d-895e-314487f5e25e/0/B9BEB60CD6224D41F333A07E1820F0AF3A81FFF7.mft File: B9BEB60CD6224D41F333A07E1820F0AF3A81FFF7.mft (raw, json) Hash identifier: Ek/1h8Zu/3G9/9C0t3aRNO/7RPMiYS/BR1MWDEwEGqI= Subject key identifier: AB:E0:AA:B8:6D:45:0F:3C:DC:64:29:8C:83:AE:0B:5E:A2:E9:27:A6 Authority key identifier: B9:BE:B6:0C:D6:22:4D:41:F3:33:A0:7E:18:20:F0:AF:3A:81:FF:F7 Certificate issuer: /CN=B9BEB60CD6224D41F333A07E1820F0AF3A81FFF7 Certificate serial: 31950F22B058A96BCDE94E4F8DA0F6C4B0650717 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B9BEB60CD6224D41F333A07E1820F0AF3A81FFF7.cer Subject info access: rsync://repo-rpki.idnic.net/repo/b1f87f5a-f6f9-468d-895e-314487f5e25e/0/B9BEB60CD6224D41F333A07E1820F0AF3A81FFF7.mft Manifest number: 01BA Signing time: Fri 05 Dec 2025 00:20:40 +0000 Manifest this update: Fri 05 Dec 2025 00:15:40 +0000 Manifest next update: Mon 08 Dec 2025 02:41:40 +0000 Files and hashes: 1: 3130332e3138352e3139372e302f32342d3234203d3e20313333333535.roa (hash: PjJ5xaEmVECnvYiFxtFmdeDestY/+54rJNs+3F7mqcY=) 2: B9BEB60CD6224D41F333A07E1820F0AF3A81FFF7.crl (hash: ADGjy0NAJg5Si4me8YGTsNIeoFiP+xqqFkgLhSmqVK0=) 3: 3130332e3230392e3133312e302f32342d3234203d3e20313333333535.roa (hash: j+U4AErtYzwumrbJ7yEuFWr2i7wA+4c75xZyRtRhbQ4=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/b1f87f5a-f6f9-468d-895e-314487f5e25e/0/B9BEB60CD6224D41F333A07E1820F0AF3A81FFF7.crl rsync://repo-rpki.idnic.net/repo/b1f87f5a-f6f9-468d-895e-314487f5e25e/0/B9BEB60CD6224D41F333A07E1820F0AF3A81FFF7.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B9BEB60CD6224D41F333A07E1820F0AF3A81FFF7.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 08 Dec 2025 02:41:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 31:95:0f:22:b0:58:a9:6b:cd:e9:4e:4f:8d:a0:f6:c4:b0:65:07:17 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B9BEB60CD6224D41F333A07E1820F0AF3A81FFF7 Validity Not Before: Dec 5 00:15:40 2025 GMT Not After : Dec 8 02:41:40 2025 GMT Subject: CN=ABE0AAB86D450F3CDC64298C83AE0B5EA2E927A6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:27:bb:a8:b5:a4:1c:5d:db:cd:54:b4:1f:52: 86:6b:e2:d2:b5:25:0f:df:d8:45:4a:8d:79:0c:94: 39:b8:07:07:40:28:b4:bc:ec:9a:ae:2b:d7:df:29: a2:c6:11:2b:12:33:ea:8f:a1:41:ca:37:e7:57:4e: 0d:73:31:ff:e6:75:30:a5:58:0c:46:46:35:93:c7: b8:c4:fa:d5:45:6a:97:59:e2:1a:1c:0b:a1:93:08: 82:04:e5:36:03:ac:35:85:29:1c:fc:3e:71:e7:39: c1:26:c6:21:ce:06:a5:48:39:e2:a5:dd:99:2b:12: 91:1b:8e:a2:7e:b0:6b:a0:8e:8a:02:85:4a:7c:4c: 63:a2:1a:dd:d6:69:d0:e1:e3:c8:19:aa:7d:c0:8b: 48:d2:d5:21:59:c8:33:9b:8c:39:c6:84:19:c0:d2: cf:bb:1c:e1:4c:ff:b5:a1:0e:c8:fb:f0:96:c2:f9: 0c:b0:9c:ca:55:0a:60:d1:87:49:60:56:11:67:dd: 08:fd:e4:85:55:be:ef:e4:95:a1:7d:b3:04:7c:f5: 18:b3:f4:00:d7:72:de:ab:81:d3:7c:13:27:58:67: 7c:bb:e5:03:ba:1c:6b:d7:59:fd:36:21:23:fc:1a: 22:f2:92:98:61:5f:8a:a4:e5:13:a3:40:4f:28:b2: 53:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AB:E0:AA:B8:6D:45:0F:3C:DC:64:29:8C:83:AE:0B:5E:A2:E9:27:A6 X509v3 Authority Key Identifier: keyid:B9:BE:B6:0C:D6:22:4D:41:F3:33:A0:7E:18:20:F0:AF:3A:81:FF:F7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/b1f87f5a-f6f9-468d-895e-314487f5e25e/0/B9BEB60CD6224D41F333A07E1820F0AF3A81FFF7.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B9BEB60CD6224D41F333A07E1820F0AF3A81FFF7.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/b1f87f5a-f6f9-468d-895e-314487f5e25e/0/B9BEB60CD6224D41F333A07E1820F0AF3A81FFF7.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4e:36:88:96:d8:a6:96:ed:91:e7:b8:c9:b5:c1:1c:94:c6:d2: f1:36:da:81:f6:12:56:e7:dc:ec:52:2d:ea:37:cc:59:6b:09: 40:d6:79:da:23:bb:1d:b4:a0:c3:08:3f:bb:b3:eb:af:92:82: 43:a1:fd:13:7a:76:41:86:24:02:a4:06:c8:77:56:ad:5e:df: c4:d5:30:b6:26:82:37:f8:62:32:8f:0b:d7:93:91:5e:6d:1e: 80:b2:f8:fc:f0:60:04:99:d4:17:2f:32:1e:88:d7:8e:c4:3b: 1f:8c:35:32:e7:6e:cc:c3:e5:03:a2:77:c9:8c:18:6d:d2:83: 09:51:27:67:38:2c:c3:4f:9c:e9:b8:d5:dc:f5:d7:92:23:45: d7:41:db:28:56:fd:eb:31:06:ff:72:74:16:cb:23:88:8a:1b: 4d:fd:29:44:37:c6:47:de:c3:3c:56:c0:2a:3d:73:52:44:3e: 57:c7:79:e7:38:7a:72:b1:37:be:f3:46:4c:18:9f:74:25:aa: aa:01:84:b0:12:a8:a7:2a:ee:9c:af:c7:5d:1a:3a:3a:01:2c: ff:d2:11:30:eb:5e:ee:53:bf:a4:35:63:12:af:4b:b9:19:52: be:12:37:2b:e7:68:84:c7:46:03:4a:fd:ef:b4:b1:47:20:d4: 29:7f:f7:87 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUMZUPIrBYqWvN6U5PjaD2xLBlBxcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjlCRUI2MENENjIyNEQ0MUYzMzNBMDdFMTgyMEYwQUYz QTgxRkZGNzAeFw0yNTEyMDUwMDE1NDBaFw0yNTEyMDgwMjQxNDBaMDMxMTAvBgNV BAMTKEFCRTBBQUI4NkQ0NTBGM0NEQzY0Mjk4QzgzQUUwQjVFQTJFOTI3QTYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCyJ7uotaQcXdvNVLQfUoZr4tK1 JQ/f2EVKjXkMlDm4BwdAKLS87JquK9ffKaLGESsSM+qPoUHKN+dXTg1zMf/mdTCl WAxGRjWTx7jE+tVFapdZ4hocC6GTCIIE5TYDrDWFKRz8PnHnOcEmxiHOBqVIOeKl 3ZkrEpEbjqJ+sGugjooChUp8TGOiGt3WadDh48gZqn3Ai0jS1SFZyDObjDnGhBnA 0s+7HOFM/7WhDsj78JbC+QywnMpVCmDRh0lgVhFn3Qj95IVVvu/klaF9swR89Riz 9ADXct6rgdN8EydYZ3y75QO6HGvXWf02ISP8GiLykphhX4qk5ROjQE8oslMrAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUq+CquG1FDzzcZCmMg64LXqLpJ6YwHwYDVR0j BBgwFoAUub62DNYiTUHzM6B+GCDwrzqB//cwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i MWY4N2Y1YS1mNmY5LTQ2OGQtODk1ZS0zMTQ0ODdmNWUyNWUvMC9COUJFQjYwQ0Q2 MjI0RDQxRjMzM0EwN0UxODIwRjBBRjNBODFGRkY3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQjlCRUI2MENENjIyNEQ0MUYzMzNBMDdFMTgyMEYwQUYzQTgx RkZGNy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYjFmODdmNWEtZjZmOS00NjhkLTg5 NWUtMzE0NDg3ZjVlMjVlLzAvQjlCRUI2MENENjIyNEQ0MUYzMzNBMDdFMTgyMEYw QUYzQTgxRkZGNy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAE42iJbYppbtkee4ybXBHJTG0vE22oH2Elbn 3OxSLeo3zFlrCUDWedojux20oMMIP7uz66+SgkOh/RN6dkGGJAKkBsh3Vq1e38TV MLYmgjf4YjKPC9eTkV5tHoCy+PzwYASZ1BcvMh6I147EOx+MNTLnbszD5QOid8mM GG3SgwlRJ2c4LMNPnOm41dz115IjRddB2yhW/esxBv9ydBbLI4iKG039KUQ3xkfe wzxWwCo9c1JEPlfHeec4enKxN77zRkwYn3QlqqoBhLASqKcq7pyvx10aOjoBLP/S ETDrXu5Tv6Q1YxKvS7kZUr4SNyvnaITHRgNK/e+0sUcg1Cl/94c= -----END CERTIFICATE-----Generated at Sat Dec 6 22:57:45 2025 by rpki-client