This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/f2b30f16-e876-48cb-936b-702c3055113d/0/BB9F739640FAA3D90527D7B57D2D1D9993A42BD1.mft File: BB9F739640FAA3D90527D7B57D2D1D9993A42BD1.mft (raw, json) Hash identifier: pBj4Hsi1vIotqH9GXbliUQSzEq8P/PlNMaFDHyrYD24= Subject key identifier: CE:9F:CB:B6:2E:A8:90:25:BD:7C:94:8C:E6:17:E7:38:6E:0D:33:5F Authority key identifier: BB:9F:73:96:40:FA:A3:D9:05:27:D7:B5:7D:2D:1D:99:93:A4:2B:D1 Certificate issuer: /CN=BB9F739640FAA3D90527D7B57D2D1D9993A42BD1 Certificate serial: 425D5919C12049F0008FBE0292B628E1BD39E7E5 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BB9F739640FAA3D90527D7B57D2D1D9993A42BD1.cer Subject info access: rsync://repo-rpki.idnic.net/repo/f2b30f16-e876-48cb-936b-702c3055113d/0/BB9F739640FAA3D90527D7B57D2D1D9993A42BD1.mft Manifest number: 01F5 Signing time: Sat 06 Dec 2025 13:50:55 +0000 Manifest this update: Sat 06 Dec 2025 13:45:55 +0000 Manifest next update: Tue 09 Dec 2025 16:15:55 +0000 Files and hashes: 1: BB9F739640FAA3D90527D7B57D2D1D9993A42BD1.crl (hash: DN33TdogAUKH+2FJw3Lcdz1OohVtCCkgFLzTVGLyVFc=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/f2b30f16-e876-48cb-936b-702c3055113d/0/BB9F739640FAA3D90527D7B57D2D1D9993A42BD1.crl rsync://repo-rpki.idnic.net/repo/f2b30f16-e876-48cb-936b-702c3055113d/0/BB9F739640FAA3D90527D7B57D2D1D9993A42BD1.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BB9F739640FAA3D90527D7B57D2D1D9993A42BD1.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 09 Dec 2025 15:57:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 42:5d:59:19:c1:20:49:f0:00:8f:be:02:92:b6:28:e1:bd:39:e7:e5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BB9F739640FAA3D90527D7B57D2D1D9993A42BD1 Validity Not Before: Dec 6 13:45:55 2025 GMT Not After : Dec 9 16:15:55 2025 GMT Subject: CN=CE9FCBB62EA89025BD7C948CE617E7386E0D335F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:b0:a9:d8:11:60:8d:76:f1:ef:dc:f1:b6:b6: 12:38:03:c6:61:09:c1:1d:f6:1b:2d:04:c1:5c:54: 9f:cb:92:79:ca:99:23:39:52:6e:99:35:92:5c:e1: 6e:19:31:44:99:aa:8a:29:33:7f:ff:66:8f:03:ce: 57:22:b1:c8:0c:fe:0d:8c:0b:af:cc:45:04:82:ee: 43:3b:d7:67:d3:bf:0d:ae:7c:41:12:1f:2a:fb:0b: ee:14:08:14:5a:9b:4b:3a:c3:40:99:d7:dc:1f:5b: 36:7d:23:bc:2d:68:46:4e:97:5a:86:64:0c:7a:23: 8d:5a:3d:27:9c:66:b4:22:aa:4a:df:92:7c:77:db: e9:60:ce:0f:85:87:8e:c1:d2:30:06:68:06:e2:52: 77:1f:b2:b6:3c:15:14:46:ce:22:82:ac:f5:d7:0a: 25:6e:91:3c:64:fc:a8:b0:dd:c7:4c:19:8a:e0:56: 60:55:e9:c2:a0:ae:ac:cc:d9:89:d3:c4:a3:50:23: b8:ef:45:f5:37:d3:12:13:38:57:c2:b3:45:33:81: e8:0a:8a:81:f7:72:16:ed:ca:6d:42:f0:c1:94:22: 8d:a1:2f:a2:38:9e:e2:55:4a:1c:51:a2:55:3a:8c: dc:48:dd:3e:e3:4f:ff:90:07:d2:58:55:53:70:a8: 23:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CE:9F:CB:B6:2E:A8:90:25:BD:7C:94:8C:E6:17:E7:38:6E:0D:33:5F X509v3 Authority Key Identifier: keyid:BB:9F:73:96:40:FA:A3:D9:05:27:D7:B5:7D:2D:1D:99:93:A4:2B:D1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/f2b30f16-e876-48cb-936b-702c3055113d/0/BB9F739640FAA3D90527D7B57D2D1D9993A42BD1.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BB9F739640FAA3D90527D7B57D2D1D9993A42BD1.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f2b30f16-e876-48cb-936b-702c3055113d/0/BB9F739640FAA3D90527D7B57D2D1D9993A42BD1.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8b:d2:e6:15:69:b0:ec:70:eb:eb:f7:2b:7f:d7:50:b6:d4:09: 69:d6:17:d6:f6:c2:4a:b6:3c:7a:74:05:20:fc:38:f0:e6:7e: 5a:a6:f4:37:49:6c:03:a2:1d:bc:a5:80:20:a9:87:e0:b9:91: b1:cd:74:a3:91:25:c8:0c:95:cd:d6:69:1c:a3:f0:af:13:83: b0:a1:71:1b:08:48:04:79:db:37:44:b3:bd:86:d2:cf:39:e2: 27:47:57:5c:1c:8d:f3:29:57:ec:83:a5:62:6c:19:fe:94:34: de:73:0c:45:70:9e:e4:c6:df:09:89:e0:79:b4:88:41:b8:dd: 40:a9:4e:ee:0a:8f:bf:7c:f4:2c:4c:95:54:1b:cc:3b:bc:3d: 2c:3d:56:f6:fd:d3:1f:ac:d5:d3:ed:e9:34:49:90:59:02:d7: ce:f9:85:54:9a:65:40:86:76:63:71:5a:41:3b:ee:b8:c0:10: a9:ba:fd:5f:a4:8e:8e:e8:74:c8:c3:e5:77:02:d2:82:f4:fd: 03:7d:46:fe:f7:21:e6:21:78:6f:76:08:3d:91:ff:37:10:1a: 01:4b:b6:a9:5c:fb:0e:26:28:b5:4d:33:61:01:af:fc:50:df: b0:54:09:2a:0a:79:6c:b2:70:cd:ac:f5:c4:1e:7e:a8:4a:04: 45:f9:3f:25 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUQl1ZGcEgSfAAj74CkrYo4b055+UwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkI5RjczOTY0MEZBQTNEOTA1MjdEN0I1N0QyRDFEOTk5 M0E0MkJEMTAeFw0yNTEyMDYxMzQ1NTVaFw0yNTEyMDkxNjE1NTVaMDMxMTAvBgNV BAMTKENFOUZDQkI2MkVBODkwMjVCRDdDOTQ4Q0U2MTdFNzM4NkUwRDMzNUYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/sKnYEWCNdvHv3PG2thI4A8Zh CcEd9hstBMFcVJ/LknnKmSM5Um6ZNZJc4W4ZMUSZqoopM3//Zo8DzlciscgM/g2M C6/MRQSC7kM712fTvw2ufEESHyr7C+4UCBRam0s6w0CZ19wfWzZ9I7wtaEZOl1qG ZAx6I41aPSecZrQiqkrfknx32+lgzg+Fh47B0jAGaAbiUncfsrY8FRRGziKCrPXX CiVukTxk/Kiw3cdMGYrgVmBV6cKgrqzM2YnTxKNQI7jvRfU30xITOFfCs0UzgegK ioH3chbtym1C8MGUIo2hL6I4nuJVShxRolU6jNxI3T7jT/+QB9JYVVNwqCMrAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUzp/Lti6okCW9fJSM5hfnOG4NM18wHwYDVR0j BBgwFoAUu59zlkD6o9kFJ9e1fS0dmZOkK9EwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m MmIzMGYxNi1lODc2LTQ4Y2ItOTM2Yi03MDJjMzA1NTExM2QvMC9CQjlGNzM5NjQw RkFBM0Q5MDUyN0Q3QjU3RDJEMUQ5OTkzQTQyQkQxLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQkI5RjczOTY0MEZBQTNEOTA1MjdEN0I1N0QyRDFEOTk5M0E0 MkJEMS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZjJiMzBmMTYtZTg3Ni00OGNiLTkz NmItNzAyYzMwNTUxMTNkLzAvQkI5RjczOTY0MEZBQTNEOTA1MjdEN0I1N0QyRDFE OTk5M0E0MkJEMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIvS5hVpsOxw6+v3K3/XULbUCWnWF9b2wkq2 PHp0BSD8OPDmflqm9DdJbAOiHbylgCCph+C5kbHNdKORJcgMlc3WaRyj8K8Tg7Ch cRsISAR52zdEs72G0s854idHV1wcjfMpV+yDpWJsGf6UNN5zDEVwnuTG3wmJ4Hm0 iEG43UCpTu4Kj7989CxMlVQbzDu8PSw9Vvb90x+s1dPt6TRJkFkC1875hVSaZUCG dmNxWkE77rjAEKm6/V+kjo7odMjD5XcC0oL0/QN9Rv73IeYheG92CD2R/zcQGgFL tqlc+w4mKLVNM2EBr/xQ37BUCSoKeWyycM2s9cQefqhKBEX5PyU= -----END CERTIFICATE-----Generated at Sat Dec 6 23:51:39 2025 by rpki-client