This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/d7dd2519-3078-47d3-9e86-48fd3bde76c8/0/9B2DB6A80E8A5860943D5E249BCF6F2C47D48549.mft File: 9B2DB6A80E8A5860943D5E249BCF6F2C47D48549.mft (raw, json) Hash identifier: A6aY9FGbVVWEIZ7pG45oCgLIVkOaD0NROWUxwYWbYek= Subject key identifier: D6:2B:E7:0E:C6:3A:87:4A:51:E6:0B:B2:08:14:C2:62:F2:79:64:50 Authority key identifier: 9B:2D:B6:A8:0E:8A:58:60:94:3D:5E:24:9B:CF:6F:2C:47:D4:85:49 Certificate issuer: /CN=9B2DB6A80E8A5860943D5E249BCF6F2C47D48549 Certificate serial: 02DB8F6CBAAD5F258AE0BCD546950D2897B5418F Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/9B2DB6A80E8A5860943D5E249BCF6F2C47D48549.cer Subject info access: rsync://repo-rpki.idnic.net/repo/d7dd2519-3078-47d3-9e86-48fd3bde76c8/0/9B2DB6A80E8A5860943D5E249BCF6F2C47D48549.mft Manifest number: AE Signing time: Fri 05 Dec 2025 02:10:51 +0000 Manifest this update: Fri 05 Dec 2025 02:05:51 +0000 Manifest next update: Mon 08 Dec 2025 06:22:51 +0000 Files and hashes: 1: 3135372e36362e3233382e302f32332d3233203d3e20313532373538.roa (hash: p3DpYgemTsXSVOH+PUaAJGeFQs3bjVbh/jL7f1e5HC4=) 2: 9B2DB6A80E8A5860943D5E249BCF6F2C47D48549.crl (hash: qPjROjqdXcSWviDs2+DRpo30V7qtBwcfg4v5sWn8SZU=) 3: 3135372e36362e3233392e302f32342d3234203d3e20313532373538.roa (hash: M0X+RxU47itayQ/XNChUFKjZL2Z8BgvfCZ6jiqN1z0I=) 4: 3135372e36362e3233382e302f32342d3234203d3e20313532373538.roa (hash: Mfu0+PMIaMHgeu7vJ5ATI3uA0Ov6u+uix1eTRPcgQIY=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/d7dd2519-3078-47d3-9e86-48fd3bde76c8/0/9B2DB6A80E8A5860943D5E249BCF6F2C47D48549.crl rsync://repo-rpki.idnic.net/repo/d7dd2519-3078-47d3-9e86-48fd3bde76c8/0/9B2DB6A80E8A5860943D5E249BCF6F2C47D48549.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/9B2DB6A80E8A5860943D5E249BCF6F2C47D48549.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 08 Dec 2025 06:22:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 02:db:8f:6c:ba:ad:5f:25:8a:e0:bc:d5:46:95:0d:28:97:b5:41:8f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9B2DB6A80E8A5860943D5E249BCF6F2C47D48549 Validity Not Before: Dec 5 02:05:51 2025 GMT Not After : Dec 8 06:22:51 2025 GMT Subject: CN=D62BE70EC63A874A51E60BB20814C262F2796450 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:5d:cc:ee:95:b5:3b:06:e6:5d:98:65:5a:89: 55:3b:d9:a4:7c:44:d7:28:ff:56:06:2c:2a:dd:a5: 4c:60:46:2a:d8:22:fd:df:85:e0:68:4a:9f:bb:69: 3c:63:09:18:91:9b:a3:b2:aa:65:51:de:cd:de:d1: 70:70:28:dd:28:0c:4e:94:1f:a7:eb:7e:0e:00:96: 1c:6f:10:e4:e0:00:8e:4f:89:55:0f:d9:26:7b:b3: 41:4c:82:51:42:ea:c0:4e:cb:b1:3d:2e:96:89:bb: 57:e9:b2:49:97:aa:a2:52:72:95:93:0e:7f:f2:64: 8a:99:10:fd:e2:a9:48:c7:c0:8e:42:cd:5c:c9:11: be:58:f6:ae:28:5e:33:93:18:a2:57:0d:f3:99:a6: e4:4e:62:01:43:dd:a1:e2:d3:d3:46:64:ea:ed:19: c2:9f:66:eb:12:d6:f6:00:e2:3c:54:cc:1c:27:06: 71:13:7f:56:05:4e:19:8f:ad:9b:a3:24:26:08:1f: aa:ab:22:74:6d:50:31:d5:92:f4:02:9f:cb:47:4e: da:25:ea:59:03:60:05:52:98:8b:ba:42:08:d7:db: a4:e0:51:d9:89:ff:4b:dd:13:22:99:24:44:15:ba: 05:81:dd:db:9f:74:4c:76:8f:57:c0:13:64:08:18: c5:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D6:2B:E7:0E:C6:3A:87:4A:51:E6:0B:B2:08:14:C2:62:F2:79:64:50 X509v3 Authority Key Identifier: keyid:9B:2D:B6:A8:0E:8A:58:60:94:3D:5E:24:9B:CF:6F:2C:47:D4:85:49 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/d7dd2519-3078-47d3-9e86-48fd3bde76c8/0/9B2DB6A80E8A5860943D5E249BCF6F2C47D48549.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/9B2DB6A80E8A5860943D5E249BCF6F2C47D48549.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d7dd2519-3078-47d3-9e86-48fd3bde76c8/0/9B2DB6A80E8A5860943D5E249BCF6F2C47D48549.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 06:ca:ac:87:03:50:66:69:e0:c1:b0:87:b8:90:d4:4c:2e:27: f2:3a:c5:36:1b:83:86:b5:20:fc:76:f0:2b:aa:57:06:f8:e2: 48:d3:41:e6:85:77:00:0d:3b:65:21:15:18:8d:f9:54:d7:71: 5d:61:c7:b2:b1:f2:fe:0d:e6:25:95:33:e1:d5:07:c2:5e:07: ad:6e:a5:7f:f9:ff:8c:99:4d:b4:11:55:d6:ea:05:3e:c4:47: 11:41:61:19:f6:71:1e:1e:51:91:47:0f:48:4c:cd:bb:15:d6: 14:5a:c8:83:6e:0b:4f:fd:20:f5:fc:51:a1:ed:0f:5f:31:66: a7:06:83:96:fa:4c:76:10:2f:ff:6b:02:f4:ac:88:41:81:ca: 9e:e7:ee:75:bc:b0:08:95:bd:62:1a:05:b3:3d:27:a9:66:68: 3f:49:2f:85:b2:2e:57:bd:80:23:c6:82:bc:fb:c1:55:9f:a3: f6:d0:75:4e:c9:e5:61:58:a3:96:f7:f0:71:8a:0f:6d:ad:b2: a0:60:e4:3d:2e:90:af:4b:6d:6f:90:b3:82:53:3b:59:00:f0: 40:66:77:82:2f:98:9f:49:d6:27:6d:25:cc:57:4c:36:88:73: c2:d9:1d:21:54:f2:43:0c:df:f7:96:83:c5:4a:b2:2f:51:0f: 40:45:0b:bd -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUAtuPbLqtXyWK4LzVRpUNKJe1QY8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUIyREI2QTgwRThBNTg2MDk0M0Q1RTI0OUJDRjZGMkM0 N0Q0ODU0OTAeFw0yNTEyMDUwMjA1NTFaFw0yNTEyMDgwNjIyNTFaMDMxMTAvBgNV BAMTKEQ2MkJFNzBFQzYzQTg3NEE1MUU2MEJCMjA4MTRDMjYyRjI3OTY0NTAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC1XczulbU7BuZdmGVaiVU72aR8 RNco/1YGLCrdpUxgRirYIv3fheBoSp+7aTxjCRiRm6OyqmVR3s3e0XBwKN0oDE6U H6frfg4AlhxvEOTgAI5PiVUP2SZ7s0FMglFC6sBOy7E9LpaJu1fpskmXqqJScpWT Dn/yZIqZEP3iqUjHwI5CzVzJEb5Y9q4oXjOTGKJXDfOZpuROYgFD3aHi09NGZOrt GcKfZusS1vYA4jxUzBwnBnETf1YFThmPrZujJCYIH6qrInRtUDHVkvQCn8tHTtol 6lkDYAVSmIu6QgjX26TgUdmJ/0vdEyKZJEQVugWB3dufdEx2j1fAE2QIGMVjAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU1ivnDsY6h0pR5guyCBTCYvJ5ZFAwHwYDVR0j BBgwFoAUmy22qA6KWGCUPV4km89vLEfUhUkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k N2RkMjUxOS0zMDc4LTQ3ZDMtOWU4Ni00OGZkM2JkZTc2YzgvMC85QjJEQjZBODBF OEE1ODYwOTQzRDVFMjQ5QkNGNkYyQzQ3RDQ4NTQ5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvOUIyREI2QTgwRThBNTg2MDk0M0Q1RTI0OUJDRjZGMkM0N0Q0 ODU0OS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZDdkZDI1MTktMzA3OC00N2QzLTll ODYtNDhmZDNiZGU3NmM4LzAvOUIyREI2QTgwRThBNTg2MDk0M0Q1RTI0OUJDRjZG MkM0N0Q0ODU0OS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAbKrIcDUGZp4MGwh7iQ1EwuJ/I6xTYbg4a1 IPx28CuqVwb44kjTQeaFdwANO2UhFRiN+VTXcV1hx7Kx8v4N5iWVM+HVB8JeB61u pX/5/4yZTbQRVdbqBT7ERxFBYRn2cR4eUZFHD0hMzbsV1hRayINuC0/9IPX8UaHt D18xZqcGg5b6THYQL/9rAvSsiEGByp7n7nW8sAiVvWIaBbM9J6lmaD9JL4WyLle9 gCPGgrz7wVWfo/bQdU7J5WFYo5b38HGKD22tsqBg5D0ukK9LbW+Qs4JTO1kA8EBm d4IvmJ9J1idtJcxXTDaIc8LZHSFU8kMM3/eWg8VKsi9RD0BFC70= -----END CERTIFICATE-----Generated at Sat Dec 6 23:13:45 2025 by rpki-client