This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repo-rpki.idnic.net/repo/b606718f-f4c6-4775-8957-99d2bd666363/0/9B2F00476D6AC1BAAB05C5A625DC00C2A59F99D7.mft
File: 9B2F00476D6AC1BAAB05C5A625DC00C2A59F99D7.mft (raw, json)
Hash identifier: X/FBc5X9bhtKTzXdq1bizzVMvnDeIirc+yInIUXqwgU=
Subject key identifier: 62:9A:C2:57:89:FF:E4:58:5F:52:51:B9:96:1F:24:D1:3C:D1:0B:6A
Authority key identifier: 9B:2F:00:47:6D:6A:C1:BA:AB:05:C5:A6:25:DC:00:C2:A5:9F:99:D7
Certificate issuer: /CN=9B2F00476D6AC1BAAB05C5A625DC00C2A59F99D7
Certificate serial: 368DC5040587259422239D6D40562AD2398A0CCD
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9B2F00476D6AC1BAAB05C5A625DC00C2A59F99D7.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/b606718f-f4c6-4775-8957-99d2bd666363/0/9B2F00476D6AC1BAAB05C5A625DC00C2A59F99D7.mft
Manifest number: 0237
Signing time: Thu 18 Dec 2025 03:01:08 +0000
Manifest this update: Thu 18 Dec 2025 02:56:08 +0000
Manifest next update: Sun 21 Dec 2025 07:26:08 +0000
Files and hashes: 1: 3131332e35392e3233322e302f32322d3234203d3e203435323936.roa (hash: kqGfNPGo8vr6qEuioNQey/aEeNu4t6Mg5faJoQyQKYs=)
2: 3131332e35392e3233332e302f32342d3234203d3e203435323936.roa (hash: L+chPyitKggq6YV3uJXNnAD2SduLB4kVYgMaedVJt6w=)
3: 3131332e35392e3233352e302f32342d3234203d3e203435323936.roa (hash: Rl+vIZHqpKLQ+zEdVxcDzBikcA2vcYpw3IxauTfHLDQ=)
4: 323430303a623038303a343532393a3a2f34382d3438203d3e203435323936.roa (hash: nQIMnNv0zD1kzZE1OsmGchXVsI7eh3j6LWcU1vJtAB8=)
5: 323430303a623038303a3a2f33322d3332203d3e203435323936.roa (hash: mAhuKWaZwCU2ddZVNRemmjaIEoWPi+10pFfmb3yzyIg=)
6: 3131332e35392e3233322e302f32332d3234203d3e203435323936.roa (hash: o92oWma+qVg7kDpp1dBbsZyfIxt7kWwBQcOjSnqRqMk=)
7: 3131332e35392e3233342e302f32332d3234203d3e203435323936.roa (hash: tNlmP7pZ6Y/fxhCmjBMnla95rEILFfMcM572+/x8IhI=)
8: 3131332e35392e3233322e302f32342d3234203d3e203435323936.roa (hash: FvX6HOu240BmC0Xjx609uR2xk59ob67iwFxIeabyR18=)
9: 9B2F00476D6AC1BAAB05C5A625DC00C2A59F99D7.crl (hash: iRLWqvfC1nOGBmoS7bosAykQLMlYw+4kcilGhvlsWIw=)
10: 3131332e35392e3233342e302f32342d3234203d3e203435323936.roa (hash: lEeS6vsNWcZ17S5/mxWNgu2oa8p6QhZGfAbhq4nCm2A=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/b606718f-f4c6-4775-8957-99d2bd666363/0/9B2F00476D6AC1BAAB05C5A625DC00C2A59F99D7.crl
rsync://repo-rpki.idnic.net/repo/b606718f-f4c6-4775-8957-99d2bd666363/0/9B2F00476D6AC1BAAB05C5A625DC00C2A59F99D7.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9B2F00476D6AC1BAAB05C5A625DC00C2A59F99D7.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 21 Dec 2025 07:09:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
36:8d:c5:04:05:87:25:94:22:23:9d:6d:40:56:2a:d2:39:8a:0c:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9B2F00476D6AC1BAAB05C5A625DC00C2A59F99D7
Validity
Not Before: Dec 18 02:56:08 2025 GMT
Not After : Dec 21 07:26:08 2025 GMT
Subject: CN=629AC25789FFE4585F5251B9961F24D13CD10B6A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:f2:85:ba:e1:03:90:b1:ea:f9:bc:48:12:af:
42:d8:cf:39:29:90:0c:9c:1c:95:a1:7c:53:58:54:
17:c8:0f:3b:00:8d:e1:b4:4a:49:85:52:78:54:46:
d0:ff:10:18:9f:fc:ec:a2:cd:8e:a8:4e:22:4a:61:
e7:0d:ff:a5:e4:1e:44:dc:a9:c8:0d:6e:29:98:b1:
0b:7d:82:63:db:6d:0b:5c:5c:68:95:00:48:af:68:
d2:ab:4c:8d:18:aa:4d:e6:6a:22:15:0a:09:6d:05:
f8:b7:ce:c1:48:be:a0:d1:a0:8e:30:0b:2a:ce:cd:
c7:c3:d9:b8:56:6c:ab:03:74:df:cb:82:4b:a8:3b:
09:eb:de:4e:d9:23:17:86:6e:27:53:b7:84:ec:61:
50:0f:e5:83:db:56:ad:21:f4:9a:07:13:29:80:7f:
a8:4d:de:84:7e:13:e1:4c:91:ed:c3:7e:40:89:87:
21:50:d3:25:ae:c5:5a:42:2b:c7:d6:37:cf:94:35:
5d:2a:ec:83:cd:3f:e1:8f:bc:c6:81:67:d9:f8:27:
66:32:3f:92:ce:0c:a4:ab:80:ed:46:8a:54:dd:27:
39:ff:95:9d:ff:48:e0:01:ad:fc:66:c3:f0:04:a0:
f7:00:80:9d:6d:f1:26:8b:5e:99:4d:18:ea:b6:88:
a6:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:9A:C2:57:89:FF:E4:58:5F:52:51:B9:96:1F:24:D1:3C:D1:0B:6A
X509v3 Authority Key Identifier:
keyid:9B:2F:00:47:6D:6A:C1:BA:AB:05:C5:A6:25:DC:00:C2:A5:9F:99:D7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/b606718f-f4c6-4775-8957-99d2bd666363/0/9B2F00476D6AC1BAAB05C5A625DC00C2A59F99D7.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9B2F00476D6AC1BAAB05C5A625DC00C2A59F99D7.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/b606718f-f4c6-4775-8957-99d2bd666363/0/9B2F00476D6AC1BAAB05C5A625DC00C2A59F99D7.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
83:bc:6c:89:42:0d:22:93:f8:57:12:1b:b9:d1:6a:b4:41:d1:
23:eb:0c:97:a0:87:47:0b:39:6b:43:10:d5:ee:56:0f:11:03:
49:f5:16:b4:ea:a6:72:42:f6:30:3d:06:5b:dd:dc:1c:fe:48:
03:04:c9:43:91:bf:9f:d8:64:a0:13:a2:09:ad:03:39:4e:7b:
76:62:13:cd:f1:9b:7b:3a:6e:35:7b:fd:83:68:b0:db:5d:a6:
a8:b0:e8:fc:bf:0f:80:47:ca:5d:06:45:23:04:8b:a3:a1:2b:
33:0a:e0:41:33:b3:08:47:eb:01:03:d1:fe:36:83:f7:a5:3d:
e7:31:e2:3c:71:ec:94:a1:db:b9:c8:b1:0f:a2:69:71:80:bb:
d9:fb:d7:fb:ec:1d:00:41:c0:7d:fc:76:f7:d1:1a:38:6f:84:
96:5f:be:66:8f:d1:98:44:17:c7:f4:ea:5b:ab:58:ad:82:6c:
9d:0f:24:ca:f4:ee:3e:9c:c5:47:35:7b:89:c3:bb:b4:70:04:
17:d6:9b:48:89:b0:10:2c:72:15:4a:59:cc:72:1d:91:07:24:
f1:d7:a8:a6:1b:5c:1e:20:41:93:0a:c9:ae:c5:d2:97:81:b9:
ea:d4:ce:12:07:7a:4e:ae:13:32:32:ac:12:9b:b0:fb:cd:45:
ef:0d:13:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Dec 18 05:44:37 2025 by rpki-client