This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/f0bfd65e-2d68-43a0-bb11-db5668dae812/0/9BE3C799BA370880CEAD4C8A8D1C0889C2733535.mft File: 9BE3C799BA370880CEAD4C8A8D1C0889C2733535.mft (raw, json) Hash identifier: lnvXNAOnAJq4EjxBZoXOweoXig1L+Q5rVioemWJAzW0= Subject key identifier: F8:D3:D0:3C:2B:FF:C0:10:76:21:61:3C:E3:E3:23:6E:F1:5F:5D:28 Authority key identifier: 9B:E3:C7:99:BA:37:08:80:CE:AD:4C:8A:8D:1C:08:89:C2:73:35:35 Certificate issuer: /CN=9BE3C799BA370880CEAD4C8A8D1C0889C2733535 Certificate serial: 781C49E466118297BD3E183783836FFA26B0BDCB Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9BE3C799BA370880CEAD4C8A8D1C0889C2733535.cer Subject info access: rsync://repo-rpki.idnic.net/repo/f0bfd65e-2d68-43a0-bb11-db5668dae812/0/9BE3C799BA370880CEAD4C8A8D1C0889C2733535.mft Manifest number: 013B Signing time: Fri 05 Dec 2025 21:52:24 +0000 Manifest this update: Fri 05 Dec 2025 21:47:24 +0000 Manifest next update: Tue 09 Dec 2025 09:36:24 +0000 Files and hashes: 1: 9BE3C799BA370880CEAD4C8A8D1C0889C2733535.crl (hash: kKAiD+8g0e5s9JZTMFYB+iLAow0p7ogElC+o6c9iNpA=) 2: 3130332e33352e3134302e302f32332d3234203d3e203633383834.roa (hash: 2aBF3TlPpZvgBg8RcuAyt7db252emxas0qRgZU5RuEU=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/f0bfd65e-2d68-43a0-bb11-db5668dae812/0/9BE3C799BA370880CEAD4C8A8D1C0889C2733535.crl rsync://repo-rpki.idnic.net/repo/f0bfd65e-2d68-43a0-bb11-db5668dae812/0/9BE3C799BA370880CEAD4C8A8D1C0889C2733535.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9BE3C799BA370880CEAD4C8A8D1C0889C2733535.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 09 Dec 2025 09:36:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 78:1c:49:e4:66:11:82:97:bd:3e:18:37:83:83:6f:fa:26:b0:bd:cb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9BE3C799BA370880CEAD4C8A8D1C0889C2733535 Validity Not Before: Dec 5 21:47:24 2025 GMT Not After : Dec 9 09:36:24 2025 GMT Subject: CN=F8D3D03C2BFFC0107621613CE3E3236EF15F5D28 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:6e:b8:d0:b5:b3:69:3c:ec:37:78:0b:0b:54: ff:76:52:fb:fe:45:8a:c8:f3:9a:09:dd:67:ea:e4: 0a:f1:f4:7d:03:d1:f6:05:ba:bf:db:a9:fa:69:99: 7b:7e:aa:72:b7:f6:fe:b7:41:2a:56:ee:e2:ac:9b: 5e:94:31:af:73:12:41:f2:58:c0:21:a1:4a:da:c5: e8:45:0d:62:1a:da:bd:3e:29:88:2b:7e:bc:7f:37: 15:ff:6e:94:25:df:b1:3b:c4:fb:1f:3b:5f:af:98: e1:07:9c:f0:f9:21:66:c4:a1:17:8f:61:ee:d9:61: 56:89:0f:c5:54:92:7e:c5:1c:a3:93:33:4d:89:7e: 5c:14:26:e4:1c:eb:2a:63:06:bc:e2:d1:38:ef:a1: 22:9b:f3:18:8f:fb:50:c9:43:a2:4a:71:d7:be:a4: 2b:8b:ea:c2:c2:16:f5:bc:67:2a:9a:6c:0f:f8:cc: 8c:a4:dc:12:73:67:c6:75:e5:88:76:cb:24:41:df: 4e:c8:00:98:af:e3:00:24:5d:35:3d:28:4a:81:9a: a6:50:ac:69:00:0a:f2:96:d6:b7:fd:26:94:24:85: 05:74:24:c9:c0:12:21:cc:d3:63:53:7e:4b:53:a3: a7:2c:ce:01:f8:6e:f1:17:25:00:92:ca:04:f8:9e: 01:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:D3:D0:3C:2B:FF:C0:10:76:21:61:3C:E3:E3:23:6E:F1:5F:5D:28 X509v3 Authority Key Identifier: keyid:9B:E3:C7:99:BA:37:08:80:CE:AD:4C:8A:8D:1C:08:89:C2:73:35:35 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/f0bfd65e-2d68-43a0-bb11-db5668dae812/0/9BE3C799BA370880CEAD4C8A8D1C0889C2733535.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9BE3C799BA370880CEAD4C8A8D1C0889C2733535.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f0bfd65e-2d68-43a0-bb11-db5668dae812/0/9BE3C799BA370880CEAD4C8A8D1C0889C2733535.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3e:94:5e:38:15:56:ba:9a:44:51:e5:ce:7d:08:6b:de:94:b9: df:ae:06:9d:09:b6:ae:51:17:36:52:1f:39:b6:79:d3:3b:7c: 1f:13:a5:b6:1e:3a:53:21:2e:0c:41:c5:60:ce:d2:1c:cd:7b: f3:f8:dc:4b:ed:2b:c3:e9:92:e3:96:c8:04:b1:0f:c9:4c:fc: 25:b7:a6:8f:9a:00:13:b7:80:f0:e8:09:80:49:83:0f:d9:f8: c1:b9:a3:e8:9f:52:e2:80:43:90:9f:9b:65:ec:10:90:5f:e6: 75:f9:21:69:c1:38:cb:0c:c7:d0:15:d4:d3:12:07:f0:21:e4: 0a:21:17:9c:82:24:e8:f7:7c:bf:d1:49:ff:7f:6d:1a:48:ec: b1:af:92:62:7a:17:88:3b:8e:79:e7:73:ac:bf:31:1f:e5:71: c2:c6:51:93:31:19:e1:79:fe:86:50:e1:12:38:e1:d5:76:04: a5:9a:bc:5a:04:49:b9:bc:dd:1a:4d:9b:ac:97:bf:f4:00:16: 4a:87:ee:37:17:6e:66:f2:31:f8:65:95:a7:97:55:d9:8c:5f: b3:29:7d:df:cd:50:03:e9:9b:ef:bf:53:d3:a9:59:ed:d3:a5: ee:9c:3e:0d:21:39:1a:96:41:6b:ed:dc:94:27:34:fd:fc:97: 72:cf:26:57 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUeBxJ5GYRgpe9Phg3g4Nv+iawvcswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUJFM0M3OTlCQTM3MDg4MENFQUQ0QzhBOEQxQzA4ODlD MjczMzUzNTAeFw0yNTEyMDUyMTQ3MjRaFw0yNTEyMDkwOTM2MjRaMDMxMTAvBgNV BAMTKEY4RDNEMDNDMkJGRkMwMTA3NjIxNjEzQ0UzRTMyMzZFRjE1RjVEMjgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCvbrjQtbNpPOw3eAsLVP92Uvv+ RYrI85oJ3Wfq5Arx9H0D0fYFur/bqfppmXt+qnK39v63QSpW7uKsm16UMa9zEkHy WMAhoUraxehFDWIa2r0+KYgrfrx/NxX/bpQl37E7xPsfO1+vmOEHnPD5IWbEoReP Ye7ZYVaJD8VUkn7FHKOTM02JflwUJuQc6ypjBrzi0TjvoSKb8xiP+1DJQ6JKcde+ pCuL6sLCFvW8ZyqabA/4zIyk3BJzZ8Z15Yh2yyRB307IAJiv4wAkXTU9KEqBmqZQ rGkACvKW1rf9JpQkhQV0JMnAEiHM02NTfktTo6cszgH4bvEXJQCSygT4ngFbAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU+NPQPCv/wBB2IWE84+MjbvFfXSgwHwYDVR0j BBgwFoAUm+PHmbo3CIDOrUyKjRwIicJzNTUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m MGJmZDY1ZS0yZDY4LTQzYTAtYmIxMS1kYjU2NjhkYWU4MTIvMC85QkUzQzc5OUJB MzcwODgwQ0VBRDRDOEE4RDFDMDg4OUMyNzMzNTM1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOUJFM0M3OTlCQTM3MDg4MENFQUQ0QzhBOEQxQzA4ODlDMjcz MzUzNS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZjBiZmQ2NWUtMmQ2OC00M2EwLWJi MTEtZGI1NjY4ZGFlODEyLzAvOUJFM0M3OTlCQTM3MDg4MENFQUQ0QzhBOEQxQzA4 ODlDMjczMzUzNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAD6UXjgVVrqaRFHlzn0Ia96Uud+uBp0Jtq5R FzZSHzm2edM7fB8TpbYeOlMhLgxBxWDO0hzNe/P43EvtK8PpkuOWyASxD8lM/CW3 po+aABO3gPDoCYBJgw/Z+MG5o+ifUuKAQ5Cfm2XsEJBf5nX5IWnBOMsMx9AV1NMS B/Ah5AohF5yCJOj3fL/RSf9/bRpI7LGvkmJ6F4g7jnnnc6y/MR/lccLGUZMxGeF5 /oZQ4RI44dV2BKWavFoESbm83RpNm6yXv/QAFkqH7jcXbmbyMfhllaeXVdmMX7Mp fd/NUAPpm++/U9OpWe3Tpe6cPg0hORqWQWvt3JQnNP38l3LPJlc= -----END CERTIFICATE-----Generated at Sat Dec 6 22:52:35 2025 by rpki-client