This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/b606718f-f4c6-4775-8957-99d2bd666363/0/9B2F00476D6AC1BAAB05C5A625DC00C2A59F99D7.mft File: 9B2F00476D6AC1BAAB05C5A625DC00C2A59F99D7.mft (raw, json) Hash identifier: BEYQGzYOwpYMzoTuAHzRG0bBhEkA2ZznruK4KkI6i8M= Subject key identifier: BF:B4:76:2E:33:13:4C:3B:BC:B5:A2:8B:F7:65:85:C3:38:58:DA:8B Authority key identifier: 9B:2F:00:47:6D:6A:C1:BA:AB:05:C5:A6:25:DC:00:C2:A5:9F:99:D7 Certificate issuer: /CN=9B2F00476D6AC1BAAB05C5A625DC00C2A59F99D7 Certificate serial: 2E2A59641C767422CB9D13CC5E302E3F0A676CDF Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9B2F00476D6AC1BAAB05C5A625DC00C2A59F99D7.cer Subject info access: rsync://repo-rpki.idnic.net/repo/b606718f-f4c6-4775-8957-99d2bd666363/0/9B2F00476D6AC1BAAB05C5A625DC00C2A59F99D7.mft Manifest number: 0231 Signing time: Thu 04 Dec 2025 12:21:09 +0000 Manifest this update: Thu 04 Dec 2025 12:16:09 +0000 Manifest next update: Sun 07 Dec 2025 16:51:09 +0000 Files and hashes: 1: 3131332e35392e3233342e302f32332d3234203d3e203435323936.roa (hash: tNlmP7pZ6Y/fxhCmjBMnla95rEILFfMcM572+/x8IhI=) 2: 3131332e35392e3233322e302f32332d3234203d3e203435323936.roa (hash: o92oWma+qVg7kDpp1dBbsZyfIxt7kWwBQcOjSnqRqMk=) 3: 3131332e35392e3233332e302f32342d3234203d3e203435323936.roa (hash: L+chPyitKggq6YV3uJXNnAD2SduLB4kVYgMaedVJt6w=) 4: 3131332e35392e3233352e302f32342d3234203d3e203435323936.roa (hash: Rl+vIZHqpKLQ+zEdVxcDzBikcA2vcYpw3IxauTfHLDQ=) 5: 323430303a623038303a343532393a3a2f34382d3438203d3e203435323936.roa (hash: nQIMnNv0zD1kzZE1OsmGchXVsI7eh3j6LWcU1vJtAB8=) 6: 3131332e35392e3233342e302f32342d3234203d3e203435323936.roa (hash: lEeS6vsNWcZ17S5/mxWNgu2oa8p6QhZGfAbhq4nCm2A=) 7: 323430303a623038303a3a2f33322d3332203d3e203435323936.roa (hash: mAhuKWaZwCU2ddZVNRemmjaIEoWPi+10pFfmb3yzyIg=) 8: 3131332e35392e3233322e302f32322d3234203d3e203435323936.roa (hash: kqGfNPGo8vr6qEuioNQey/aEeNu4t6Mg5faJoQyQKYs=) 9: 3131332e35392e3233322e302f32342d3234203d3e203435323936.roa (hash: FvX6HOu240BmC0Xjx609uR2xk59ob67iwFxIeabyR18=) 10: 9B2F00476D6AC1BAAB05C5A625DC00C2A59F99D7.crl (hash: mhsac6rSGMeMuYXXJVeSd8Ujz9BYefmO6B6Y78IP/Sg=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/b606718f-f4c6-4775-8957-99d2bd666363/0/9B2F00476D6AC1BAAB05C5A625DC00C2A59F99D7.crl rsync://repo-rpki.idnic.net/repo/b606718f-f4c6-4775-8957-99d2bd666363/0/9B2F00476D6AC1BAAB05C5A625DC00C2A59F99D7.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9B2F00476D6AC1BAAB05C5A625DC00C2A59F99D7.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 07 Dec 2025 16:51:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2e:2a:59:64:1c:76:74:22:cb:9d:13:cc:5e:30:2e:3f:0a:67:6c:df Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9B2F00476D6AC1BAAB05C5A625DC00C2A59F99D7 Validity Not Before: Dec 4 12:16:09 2025 GMT Not After : Dec 7 16:51:09 2025 GMT Subject: CN=BFB4762E33134C3BBCB5A28BF76585C33858DA8B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:09:5a:52:e7:02:e3:2d:75:c9:47:7b:e2:a6: 01:b1:3b:d9:3e:e3:7e:ba:bc:71:34:c0:c8:6e:62: 02:8b:78:cb:1b:4e:71:ee:63:0b:1b:71:c4:8c:45: 0a:20:fc:f2:27:3c:80:d4:ec:0c:6d:c4:ad:9e:ea: fc:4c:08:bb:a5:46:0f:08:77:90:de:56:b4:58:82: df:15:91:b2:aa:28:01:83:4e:03:1a:97:01:4a:7f: fa:2d:b8:93:ad:89:96:5c:e9:d0:12:c8:56:60:37: e1:15:cb:f3:ae:9c:20:78:17:24:d3:06:70:f4:9f: 57:cc:4b:f6:4e:2b:d7:2f:81:1f:2f:ab:e4:47:d7: 83:c0:77:dd:0f:e7:cc:13:58:d4:dc:5f:72:a7:b9: c4:b1:f3:93:46:f5:56:05:ec:ea:03:78:cb:59:44: f7:53:37:5d:23:b2:b3:fd:6f:1c:1e:34:9b:76:d0: 8f:8d:d4:c8:4f:c4:1e:b7:bb:aa:77:5d:ee:c5:f7: b2:c4:73:8c:fb:71:ce:71:7a:8b:b4:4f:4d:3c:40: ad:6b:b3:03:5f:95:93:ec:f1:62:1b:98:e1:ab:21: 8d:2c:fc:a5:87:83:89:e7:cc:72:88:85:ac:69:4d: e3:b7:c2:7e:b2:19:d7:4c:fe:95:b0:9a:e1:a0:46: ca:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:B4:76:2E:33:13:4C:3B:BC:B5:A2:8B:F7:65:85:C3:38:58:DA:8B X509v3 Authority Key Identifier: keyid:9B:2F:00:47:6D:6A:C1:BA:AB:05:C5:A6:25:DC:00:C2:A5:9F:99:D7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/b606718f-f4c6-4775-8957-99d2bd666363/0/9B2F00476D6AC1BAAB05C5A625DC00C2A59F99D7.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9B2F00476D6AC1BAAB05C5A625DC00C2A59F99D7.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/b606718f-f4c6-4775-8957-99d2bd666363/0/9B2F00476D6AC1BAAB05C5A625DC00C2A59F99D7.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ac:1b:64:5a:18:84:c5:a9:c6:f0:26:62:ef:4e:d9:c1:7f:e9: 3b:2b:80:4d:cd:7b:8d:07:b3:17:6f:1e:56:bf:ae:90:ce:8e: 8b:d3:20:38:26:6e:95:7a:aa:02:c9:73:e1:ca:c6:05:17:27: 10:6c:e7:5a:92:44:7b:29:1d:73:c0:6a:11:c8:f5:6f:eb:83: 2c:fd:2f:f5:ba:18:94:6d:9c:8a:72:90:1f:ee:89:9a:e7:5c: fc:6b:8d:f2:78:a2:07:47:42:67:1c:eb:d9:63:20:01:a6:1e: 72:2f:32:80:1f:52:18:a4:f1:96:b3:0e:8f:34:ad:78:b1:d6: 73:b7:fa:06:5d:7f:a2:a0:b4:bb:be:d7:03:77:ca:53:89:a1: 1a:f2:57:0e:36:82:b5:ad:3c:26:1d:99:0f:38:6a:75:25:bb: aa:62:c3:7b:87:24:2b:f1:5a:ec:32:2d:7f:17:6b:a2:dd:c8: d2:b2:d8:66:c1:0b:4e:14:09:02:ae:44:03:00:cc:97:af:e6: 25:37:10:a7:9b:bc:96:89:c7:43:17:39:93:86:2b:dc:fd:3a: e8:25:81:5e:fe:37:39:d3:f3:79:3e:d4:35:ef:36:a2:d9:5a: 94:4f:d5:c2:eb:cc:cc:13:18:c1:d5:c8:81:15:18:46:56:24: a3:65:35:9e -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIULipZZBx2dCLLnRPMXjAuPwpnbN8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUIyRjAwNDc2RDZBQzFCQUFCMDVDNUE2MjVEQzAwQzJB NTlGOTlENzAeFw0yNTEyMDQxMjE2MDlaFw0yNTEyMDcxNjUxMDlaMDMxMTAvBgNV BAMTKEJGQjQ3NjJFMzMxMzRDM0JCQ0I1QTI4QkY3NjU4NUMzMzg1OERBOEIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/CVpS5wLjLXXJR3vipgGxO9k+ 4366vHE0wMhuYgKLeMsbTnHuYwsbccSMRQog/PInPIDU7AxtxK2e6vxMCLulRg8I d5DeVrRYgt8VkbKqKAGDTgMalwFKf/otuJOtiZZc6dASyFZgN+EVy/OunCB4FyTT BnD0n1fMS/ZOK9cvgR8vq+RH14PAd90P58wTWNTcX3KnucSx85NG9VYF7OoDeMtZ RPdTN10jsrP9bxweNJt20I+N1MhPxB63u6p3Xe7F97LEc4z7cc5xeou0T008QK1r swNflZPs8WIbmOGrIY0s/KWHg4nnzHKIhaxpTeO3wn6yGddM/pWwmuGgRso9AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUv7R2LjMTTDu8taKL92WFwzhY2oswHwYDVR0j BBgwFoAUmy8AR21qwbqrBcWmJdwAwqWfmdcwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i NjA2NzE4Zi1mNGM2LTQ3NzUtODk1Ny05OWQyYmQ2NjYzNjMvMC85QjJGMDA0NzZE NkFDMUJBQUIwNUM1QTYyNURDMDBDMkE1OUY5OUQ3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOUIyRjAwNDc2RDZBQzFCQUFCMDVDNUE2MjVEQzAwQzJBNTlG OTlENy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYjYwNjcxOGYtZjRjNi00Nzc1LTg5 NTctOTlkMmJkNjY2MzYzLzAvOUIyRjAwNDc2RDZBQzFCQUFCMDVDNUE2MjVEQzAw QzJBNTlGOTlENy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKwbZFoYhMWpxvAmYu9O2cF/6TsrgE3Ne40H sxdvHla/rpDOjovTIDgmbpV6qgLJc+HKxgUXJxBs51qSRHspHXPAahHI9W/rgyz9 L/W6GJRtnIpykB/uiZrnXPxrjfJ4ogdHQmcc69ljIAGmHnIvMoAfUhik8ZazDo80 rXix1nO3+gZdf6KgtLu+1wN3ylOJoRryVw42grWtPCYdmQ84anUlu6piw3uHJCvx WuwyLX8Xa6LdyNKy2GbBC04UCQKuRAMAzJev5iU3EKebvJaJx0MXOZOGK9z9Ougl gV7+NznT83k+1DXvNqLZWpRP1cLrzMwTGMHVyIEVGEZWJKNlNZ4= -----END CERTIFICATE-----Generated at Sat Dec 6 14:01:55 2025 by rpki-client