This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/2d487360-8735-41d7-97a8-dbb34d79eff4/0/B11E5C9B4E322460FD701387F25B9EAEFE67C3EC.mft File: B11E5C9B4E322460FD701387F25B9EAEFE67C3EC.mft (raw, json) Hash identifier: jGtH/UREp2EVJsbyVW1zruvVFOG24eN3Q1R5/nkGZYo= Subject key identifier: D0:48:38:88:0F:FE:36:FD:10:F2:79:2D:1C:1F:E5:10:7A:CC:5D:63 Authority key identifier: B1:1E:5C:9B:4E:32:24:60:FD:70:13:87:F2:5B:9E:AE:FE:67:C3:EC Certificate issuer: /CN=B11E5C9B4E322460FD701387F25B9EAEFE67C3EC Certificate serial: 2067A6AD05B243458E4ABFDCF25A98D20E30B20E Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B11E5C9B4E322460FD701387F25B9EAEFE67C3EC.cer Subject info access: rsync://repo-rpki.idnic.net/repo/2d487360-8735-41d7-97a8-dbb34d79eff4/0/B11E5C9B4E322460FD701387F25B9EAEFE67C3EC.mft Manifest number: 049E Signing time: Wed 17 Dec 2025 06:40:40 +0000 Manifest this update: Wed 17 Dec 2025 06:35:40 +0000 Manifest next update: Sat 20 Dec 2025 13:52:40 +0000 Files and hashes: 1: 3130332e3231302e3132332e302f32342d3234203d3e20313334363538.roa (hash: NkQ9eWcHVREh5sfesIOFWzh9yqFj5sw8tkhu4ZxcoSQ=) 2: B11E5C9B4E322460FD701387F25B9EAEFE67C3EC.crl (hash: yufj8S5eonDIQlL9NLbs7JHoWUzXzwMpncWDC77Le0U=) 3: 3130332e3231302e3132302e302f32322d3234203d3e20313334363538.roa (hash: w/W7ZPLOwJZFB+XGZFv4rUXEnNF/+lRXZH9LftXeoZo=) 4: 323430343a366338303a3a2f33322d3438203d3e20313334363538.roa (hash: /De9PraBKQ9VNMLW73eKsHyTdK5CxUO/Ms23Vqs0bog=) 5: 3130332e3231302e3132302e302f32342d3234203d3e20313334363538.roa (hash: 9ga4Dz2S1yZEHVR/bNJu6K+f7jqkSZliYiYDlhJqlSc=) 6: 3130332e3231302e3132312e302f32342d3234203d3e20313334363538.roa (hash: LTZWN20UeEpbk3/6yOOjk81arYUEDuYxFg/WlS2mmEI=) 7: 3130332e3231302e3132322e302f32342d3234203d3e20313334363538.roa (hash: P41PFR8M2pkKOmCdUu6l5sHUIprRbj+Eb/jozno97jU=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/2d487360-8735-41d7-97a8-dbb34d79eff4/0/B11E5C9B4E322460FD701387F25B9EAEFE67C3EC.crl rsync://repo-rpki.idnic.net/repo/2d487360-8735-41d7-97a8-dbb34d79eff4/0/B11E5C9B4E322460FD701387F25B9EAEFE67C3EC.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B11E5C9B4E322460FD701387F25B9EAEFE67C3EC.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 20 Dec 2025 13:52:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 20:67:a6:ad:05:b2:43:45:8e:4a:bf:dc:f2:5a:98:d2:0e:30:b2:0e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B11E5C9B4E322460FD701387F25B9EAEFE67C3EC Validity Not Before: Dec 17 06:35:40 2025 GMT Not After : Dec 20 13:52:40 2025 GMT Subject: CN=D04838880FFE36FD10F2792D1C1FE5107ACC5D63 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:f4:70:4f:a0:2a:1c:c5:09:c5:ca:d3:f9:5e: c6:25:4d:34:ab:44:2e:9e:29:88:f5:c0:fe:40:0e: f2:f2:ed:7a:9e:49:39:73:a3:5e:22:c7:d7:fd:5d: 06:e7:50:33:d2:4a:eb:f8:3e:eb:c6:a0:be:a4:23: f7:cf:37:7d:a2:42:b3:b6:e5:90:41:19:3c:4b:26: ea:51:ee:f5:15:d4:dd:e1:00:b9:8e:f9:49:6a:54: 01:08:6e:d9:27:73:96:3c:ef:d3:eb:a0:f3:24:44: 20:c0:ba:1d:f0:e2:c9:ce:fe:17:85:1b:01:5d:36: fe:bd:be:64:98:d7:a5:04:12:df:69:5f:d6:eb:4f: 46:06:eb:6b:eb:db:25:69:2e:99:1f:e4:5d:42:ff: 33:c5:69:36:d6:f8:bc:04:0b:25:4b:2c:c4:58:43: 34:e8:d2:b9:45:9e:80:bd:56:59:49:5c:5c:89:f9: 58:3f:86:72:c4:58:c1:8a:72:00:12:a5:f5:c8:06: 1a:51:1b:b7:bc:08:d8:57:85:60:ff:d1:59:da:bf: 24:23:f7:cf:93:4c:b3:0a:97:25:f7:e7:27:c0:e8: 29:6d:c4:63:e8:2d:f6:d1:e7:50:29:8e:5c:ee:1e: bf:aa:63:1c:4c:a6:a2:77:5e:b5:45:6e:f3:a5:8b: 12:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D0:48:38:88:0F:FE:36:FD:10:F2:79:2D:1C:1F:E5:10:7A:CC:5D:63 X509v3 Authority Key Identifier: keyid:B1:1E:5C:9B:4E:32:24:60:FD:70:13:87:F2:5B:9E:AE:FE:67:C3:EC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/2d487360-8735-41d7-97a8-dbb34d79eff4/0/B11E5C9B4E322460FD701387F25B9EAEFE67C3EC.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B11E5C9B4E322460FD701387F25B9EAEFE67C3EC.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/2d487360-8735-41d7-97a8-dbb34d79eff4/0/B11E5C9B4E322460FD701387F25B9EAEFE67C3EC.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b7:bb:bc:c6:dd:74:85:f1:e4:50:04:77:b1:39:24:48:2a:3d: af:4a:b9:3d:6e:e7:a5:26:93:a8:4f:7d:6e:18:c4:0b:a1:d9: 87:a3:4f:93:05:a6:db:32:36:dd:1a:1d:23:9a:7a:ce:bc:69: bf:ae:a1:38:3a:df:73:42:ab:e8:9c:62:f4:fb:82:fd:a3:ae: 31:14:c9:93:0c:13:b7:c2:f2:b4:dc:4f:1e:7d:be:3e:37:dc: 1f:ed:c8:24:b8:a9:ae:3b:6a:b2:33:1a:77:39:64:f5:4f:55: 61:20:cc:a7:34:34:ce:89:27:a3:2e:3b:cc:16:2e:61:0f:a3: ff:88:73:9b:1e:ee:b3:ba:fb:1d:63:93:45:79:2e:b7:5f:d8: b5:ff:5d:32:7b:65:e8:fe:2e:e6:05:dc:15:a3:74:a4:e4:e7: 4c:7b:cf:96:f6:80:54:4c:a8:ce:86:87:7d:e9:d1:ca:9c:3b: d0:9f:82:74:bc:ba:a5:0c:ce:93:86:48:55:42:87:0f:d4:10: 6e:60:35:ab:8c:4d:e6:9e:86:26:7e:6d:0c:82:ed:50:bc:c0: 71:4f:15:62:de:82:14:be:11:32:13:be:10:b2:4f:e2:80:a9: a9:25:c4:71:54:84:d4:be:90:e6:db:99:70:6c:03:37:d9:3d: 53:8d:24:38 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUIGemrQWyQ0WOSr/c8lqY0g4wsg4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjExRTVDOUI0RTMyMjQ2MEZENzAxMzg3RjI1QjlFQUVG RTY3QzNFQzAeFw0yNTEyMTcwNjM1NDBaFw0yNTEyMjAxMzUyNDBaMDMxMTAvBgNV BAMTKEQwNDgzODg4MEZGRTM2RkQxMEYyNzkyRDFDMUZFNTEwN0FDQzVENjMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+9HBPoCocxQnFytP5XsYlTTSr RC6eKYj1wP5ADvLy7XqeSTlzo14ix9f9XQbnUDPSSuv4PuvGoL6kI/fPN32iQrO2 5ZBBGTxLJupR7vUV1N3hALmO+UlqVAEIbtknc5Y879ProPMkRCDAuh3w4snO/heF GwFdNv69vmSY16UEEt9pX9brT0YG62vr2yVpLpkf5F1C/zPFaTbW+LwECyVLLMRY QzTo0rlFnoC9VllJXFyJ+Vg/hnLEWMGKcgASpfXIBhpRG7e8CNhXhWD/0VnavyQj 98+TTLMKlyX35yfA6CltxGPoLfbR51ApjlzuHr+qYxxMpqJ3XrVFbvOlixIJAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU0Eg4iA/+Nv0Q8nktHB/lEHrMXWMwHwYDVR0j BBgwFoAUsR5cm04yJGD9cBOH8luerv5nw+wwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y ZDQ4NzM2MC04NzM1LTQxZDctOTdhOC1kYmIzNGQ3OWVmZjQvMC9CMTFFNUM5QjRF MzIyNDYwRkQ3MDEzODdGMjVCOUVBRUZFNjdDM0VDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQjExRTVDOUI0RTMyMjQ2MEZENzAxMzg3RjI1QjlFQUVGRTY3 QzNFQy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMmQ0ODczNjAtODczNS00MWQ3LTk3 YTgtZGJiMzRkNzllZmY0LzAvQjExRTVDOUI0RTMyMjQ2MEZENzAxMzg3RjI1QjlF QUVGRTY3QzNFQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALe7vMbddIXx5FAEd7E5JEgqPa9KuT1u56Um k6hPfW4YxAuh2YejT5MFptsyNt0aHSOaes68ab+uoTg633NCq+icYvT7gv2jrjEU yZMME7fC8rTcTx59vj433B/tyCS4qa47arIzGnc5ZPVPVWEgzKc0NM6JJ6MuO8wW LmEPo/+Ic5se7rO6+x1jk0V5Lrdf2LX/XTJ7Zej+LuYF3BWjdKTk50x7z5b2gFRM qM6Gh33p0cqcO9CfgnS8uqUMzpOGSFVChw/UEG5gNauMTeaehiZ+bQyC7VC8wHFP FWLeghS+ETITvhCyT+KAqaklxHFUhNS+kObbmXBsAzfZPVONJDg= -----END CERTIFICATE-----Generated at Thu Dec 18 06:58:46 2025 by rpki-client