This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/11828067-e7c1-4964-8428-599033d74296/0/12A8210E6A91A93DDB92F594D7E47728131BC2DA.mft File: 12A8210E6A91A93DDB92F594D7E47728131BC2DA.mft (raw, json) Hash identifier: xCgz4m5Gkc/7yDkN1oNgzi89KZG5EzXqiHVEM/dfxGk= Subject key identifier: F4:42:F6:7C:0B:20:44:D5:F0:95:5F:44:59:76:09:1B:36:0B:A2:EF Authority key identifier: 12:A8:21:0E:6A:91:A9:3D:DB:92:F5:94:D7:E4:77:28:13:1B:C2:DA Certificate issuer: /CN=12A8210E6A91A93DDB92F594D7E47728131BC2DA Certificate serial: 02BE99FF0737E0CDF1C185F3E4C9621FC41F7B5E Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/12A8210E6A91A93DDB92F594D7E47728131BC2DA.cer Subject info access: rsync://repo-rpki.idnic.net/repo/11828067-e7c1-4964-8428-599033d74296/0/12A8210E6A91A93DDB92F594D7E47728131BC2DA.mft Manifest number: 011B Signing time: Thu 18 Dec 2025 07:11:56 +0000 Manifest this update: Thu 18 Dec 2025 07:06:56 +0000 Manifest next update: Sun 21 Dec 2025 08:37:56 +0000 Files and hashes: 1: 12A8210E6A91A93DDB92F594D7E47728131BC2DA.crl (hash: EfxjeQWWa+lSqMIg4QTBJ4/F4Iv2gfsZJjVpSBYxZb4=) 2: 34352e3132332e3134332e302f32342d3234203d3e20343532303233.roa (hash: yFHqmwqtGwRHNbaKxqLyAMp6goM/26DKgEUgRO5CpWs=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/11828067-e7c1-4964-8428-599033d74296/0/12A8210E6A91A93DDB92F594D7E47728131BC2DA.crl rsync://repo-rpki.idnic.net/repo/11828067-e7c1-4964-8428-599033d74296/0/12A8210E6A91A93DDB92F594D7E47728131BC2DA.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/12A8210E6A91A93DDB92F594D7E47728131BC2DA.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 21 Dec 2025 08:37:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 02:be:99:ff:07:37:e0:cd:f1:c1:85:f3:e4:c9:62:1f:c4:1f:7b:5e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=12A8210E6A91A93DDB92F594D7E47728131BC2DA Validity Not Before: Dec 18 07:06:56 2025 GMT Not After : Dec 21 08:37:56 2025 GMT Subject: CN=F442F67C0B2044D5F0955F445976091B360BA2EF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:f2:c5:d8:17:06:22:38:3c:39:64:47:88:73: 98:fb:70:26:52:ca:69:9c:25:4e:61:58:c0:d1:84: 25:1a:7d:db:21:f7:cd:af:a1:db:ef:dd:e0:e5:a5: f7:5d:4d:e3:58:83:98:a8:24:55:e5:f1:4b:fd:ef: 97:eb:ed:dc:28:ef:d3:c0:f3:52:2e:cb:b2:f7:9c: be:00:4c:52:9b:4f:a5:89:8d:63:57:fa:b7:0e:3e: 86:3d:07:28:b4:81:4e:d4:c6:77:66:e3:a4:58:3e: 49:fa:63:f5:c7:91:f6:d3:2b:55:c5:9a:1e:66:ff: 36:9e:bb:67:ea:1c:46:e6:67:f2:14:fc:3b:6f:d0: b6:54:61:92:61:50:90:b9:51:7d:63:c2:c4:06:a7: 68:32:bf:b6:68:a0:3f:de:08:6b:29:aa:36:5b:66: 1b:8d:3d:70:fd:17:a1:78:28:68:95:3c:c6:28:1e: 8f:0f:b4:f2:e9:63:77:ee:cf:03:ad:a6:74:8b:04: e0:d5:32:45:2c:a9:4a:1b:d9:c7:92:f7:a8:52:98: 45:3f:6d:68:18:87:95:b7:5d:b0:55:3f:df:4a:3a: cd:e8:ef:de:39:78:69:e1:b3:9f:fe:2f:4e:b1:39: af:a8:51:e1:97:43:ff:ad:ec:94:60:78:0e:a6:4b: 86:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F4:42:F6:7C:0B:20:44:D5:F0:95:5F:44:59:76:09:1B:36:0B:A2:EF X509v3 Authority Key Identifier: keyid:12:A8:21:0E:6A:91:A9:3D:DB:92:F5:94:D7:E4:77:28:13:1B:C2:DA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/11828067-e7c1-4964-8428-599033d74296/0/12A8210E6A91A93DDB92F594D7E47728131BC2DA.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/12A8210E6A91A93DDB92F594D7E47728131BC2DA.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/11828067-e7c1-4964-8428-599033d74296/0/12A8210E6A91A93DDB92F594D7E47728131BC2DA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0f:d6:25:00:ab:8b:90:21:a5:22:0f:c8:36:51:41:e4:5f:f4: f3:44:c7:80:9c:b2:c8:df:15:81:9c:1c:69:29:30:a2:68:f1: 3b:24:9e:83:26:d7:65:30:19:df:17:85:12:36:f9:ce:33:70: e4:da:9a:4a:29:20:79:37:e4:7a:99:26:40:c3:c1:8f:e1:21: 81:70:68:20:0f:4b:9f:a6:24:be:b8:54:16:db:6b:8a:79:1d: 42:57:52:6a:45:67:3e:6f:0c:e3:7f:fc:e4:ed:cf:40:eb:85: c5:13:8d:33:f7:34:eb:ac:3a:63:f9:fa:d3:6c:c1:f9:e1:f5: 2b:46:8a:b5:11:ad:55:a7:87:28:85:56:79:9f:9b:61:10:1a: c0:5f:58:03:25:02:82:0d:35:99:ea:29:79:47:58:2b:1a:bb: f7:44:0e:c5:5b:f8:69:a5:77:39:13:18:f9:82:90:24:dc:58: 61:76:99:38:57:c5:93:73:69:e0:07:a6:a2:8f:27:1f:6f:0d: d4:00:82:98:32:68:6a:67:69:50:db:e7:ff:7c:81:e2:70:00: f2:8c:be:38:49:3c:69:a4:54:e2:3e:e8:96:4f:d6:ae:a7:81: f4:6a:d2:7d:d9:27:f8:30:f5:cd:5b:3c:52:33:0e:e8:25:c0: 6b:24:97:40 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUAr6Z/wc34M3xwYXz5MliH8Qfe14wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTJBODIxMEU2QTkxQTkzRERCOTJGNTk0RDdFNDc3Mjgx MzFCQzJEQTAeFw0yNTEyMTgwNzA2NTZaFw0yNTEyMjEwODM3NTZaMDMxMTAvBgNV BAMTKEY0NDJGNjdDMEIyMDQ0RDVGMDk1NUY0NDU5NzYwOTFCMzYwQkEyRUYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDK8sXYFwYiODw5ZEeIc5j7cCZS ymmcJU5hWMDRhCUafdsh982vodvv3eDlpfddTeNYg5ioJFXl8Uv975fr7dwo79PA 81Iuy7L3nL4ATFKbT6WJjWNX+rcOPoY9Byi0gU7Uxndm46RYPkn6Y/XHkfbTK1XF mh5m/zaeu2fqHEbmZ/IU/Dtv0LZUYZJhUJC5UX1jwsQGp2gyv7ZooD/eCGspqjZb ZhuNPXD9F6F4KGiVPMYoHo8PtPLpY3fuzwOtpnSLBODVMkUsqUob2ceS96hSmEU/ bWgYh5W3XbBVP99KOs3o7945eGnhs5/+L06xOa+oUeGXQ/+t7JRgeA6mS4ZdAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU9EL2fAsgRNXwlV9EWXYJGzYLou8wHwYDVR0j BBgwFoAUEqghDmqRqT3bkvWU1+R3KBMbwtowDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x MTgyODA2Ny1lN2MxLTQ5NjQtODQyOC01OTkwMzNkNzQyOTYvMC8xMkE4MjEwRTZB OTFBOTNEREI5MkY1OTREN0U0NzcyODEzMUJDMkRBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMTJBODIxMEU2QTkxQTkzRERCOTJGNTk0RDdFNDc3MjgxMzFC QzJEQS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMTE4MjgwNjctZTdjMS00OTY0LTg0 MjgtNTk5MDMzZDc0Mjk2LzAvMTJBODIxMEU2QTkxQTkzRERCOTJGNTk0RDdFNDc3 MjgxMzFCQzJEQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAA/WJQCri5AhpSIPyDZRQeRf9PNEx4Ccssjf FYGcHGkpMKJo8TsknoMm12UwGd8XhRI2+c4zcOTamkopIHk35HqZJkDDwY/hIYFw aCAPS5+mJL64VBbba4p5HUJXUmpFZz5vDON//OTtz0DrhcUTjTP3NOusOmP5+tNs wfnh9StGirURrVWnhyiFVnmfm2EQGsBfWAMlAoINNZnqKXlHWCsau/dEDsVb+Gml dzkTGPmCkCTcWGF2mThXxZNzaeAHpqKPJx9vDdQAgpgyaGpnaVDb5/98geJwAPKM vjhJPGmkVOI+6JZP1q6ngfRq0n3ZJ/gw9c1bPFIzDuglwGskl0A= -----END CERTIFICATE-----Generated at Thu Dec 18 14:09:27 2025 by rpki-client