This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/2e0962f7-67ea-470e-a524-7ae1e40fd5b7/0/11B369E1CF41EB03E35A2711FF1FE0F687242467.mft File: 11B369E1CF41EB03E35A2711FF1FE0F687242467.mft (raw, json) Hash identifier: 5j92oz/DSWE5I5ecQHOmg3qZ0buGk+QGYfYgeQ+m1+I= Subject key identifier: A5:3D:BC:4B:22:17:57:3A:6F:57:BF:D4:60:62:D9:8B:13:2A:EC:EA Authority key identifier: 11:B3:69:E1:CF:41:EB:03:E3:5A:27:11:FF:1F:E0:F6:87:24:24:67 Certificate issuer: /CN=11B369E1CF41EB03E35A2711FF1FE0F687242467 Certificate serial: 63D70DEEC900ADA3FF202F11B0256C52DB62AC4F Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/11B369E1CF41EB03E35A2711FF1FE0F687242467.cer Subject info access: rsync://repo-rpki.idnic.net/repo/2e0962f7-67ea-470e-a524-7ae1e40fd5b7/0/11B369E1CF41EB03E35A2711FF1FE0F687242467.mft Manifest number: 024A Signing time: Tue 23 Dec 2025 01:50:01 +0000 Manifest this update: Tue 23 Dec 2025 01:45:01 +0000 Manifest next update: Fri 26 Dec 2025 02:14:01 +0000 Files and hashes: 1: 11B369E1CF41EB03E35A2711FF1FE0F687242467.crl (hash: ir0w3NX6EWD1QNkmesGo8UAIQqHBLoI1ZTaD2M25nOI=) 2: 3130332e3138342e3137382e302f32332d3234203d3e20313439363632.roa (hash: nafgZnAsM444PZpRUGJ2jDID9gOrDEkaukgW0FDatiE=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/2e0962f7-67ea-470e-a524-7ae1e40fd5b7/0/11B369E1CF41EB03E35A2711FF1FE0F687242467.crl rsync://repo-rpki.idnic.net/repo/2e0962f7-67ea-470e-a524-7ae1e40fd5b7/0/11B369E1CF41EB03E35A2711FF1FE0F687242467.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/11B369E1CF41EB03E35A2711FF1FE0F687242467.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 26 Dec 2025 02:14:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 63:d7:0d:ee:c9:00:ad:a3:ff:20:2f:11:b0:25:6c:52:db:62:ac:4f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=11B369E1CF41EB03E35A2711FF1FE0F687242467 Validity Not Before: Dec 23 01:45:01 2025 GMT Not After : Dec 26 02:14:01 2025 GMT Subject: CN=A53DBC4B2217573A6F57BFD46062D98B132AECEA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ef:fc:eb:6a:fd:36:12:6f:ae:55:8f:5d:8d:f0: 7f:32:ae:55:b4:4b:85:a8:51:a0:54:23:27:7a:be: 85:9d:91:3e:6f:40:dc:eb:f6:2f:2c:46:37:a2:8c: f8:df:9f:c3:86:0f:35:be:26:de:7d:63:a7:5f:7c: 36:a0:94:6a:34:ee:db:ce:16:4c:07:55:57:35:a5: ce:13:a4:a5:ad:15:70:aa:67:fe:53:13:66:d7:b7: 46:bc:ef:9f:60:3a:9e:3e:eb:de:09:05:65:44:a2: a4:a9:ab:4a:73:76:aa:0b:52:e9:d1:45:94:be:7c: a9:e7:76:ff:a1:27:01:87:ad:aa:f9:76:57:1d:ff: 08:30:cc:92:0f:4d:28:15:ea:00:9a:08:fc:0d:ec: b9:33:6c:15:a8:51:65:17:35:f9:45:e1:93:77:91: 91:64:cb:62:9e:43:35:1e:16:6e:9b:2a:a8:3a:1a: ef:ab:ab:cc:6b:3a:58:21:76:d3:ca:a6:e7:63:fe: 21:f3:fd:68:2c:c3:5b:86:f1:0f:09:5f:5e:71:b2: 8d:1c:81:32:70:b5:e1:64:c9:53:28:a6:3e:57:95: 9b:52:9f:e3:49:97:f4:f4:0b:f9:b5:a9:ff:a9:44: 16:2c:31:85:ab:7c:df:ca:35:23:72:c8:4e:fa:40: 08:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:3D:BC:4B:22:17:57:3A:6F:57:BF:D4:60:62:D9:8B:13:2A:EC:EA X509v3 Authority Key Identifier: keyid:11:B3:69:E1:CF:41:EB:03:E3:5A:27:11:FF:1F:E0:F6:87:24:24:67 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/2e0962f7-67ea-470e-a524-7ae1e40fd5b7/0/11B369E1CF41EB03E35A2711FF1FE0F687242467.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/11B369E1CF41EB03E35A2711FF1FE0F687242467.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/2e0962f7-67ea-470e-a524-7ae1e40fd5b7/0/11B369E1CF41EB03E35A2711FF1FE0F687242467.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 51:43:ad:29:9e:11:93:47:38:d0:b5:67:0c:81:a3:9d:90:fd: c7:22:92:4a:2c:a9:0e:06:a9:20:e4:75:6b:37:9a:cd:cb:c2: f0:0a:bc:6a:e5:9a:4b:4f:ff:3f:bc:40:fa:61:b7:43:40:7f: 73:63:52:b0:71:26:10:2c:43:0c:90:74:79:b4:47:db:85:a7: 05:97:33:80:bb:78:93:e4:0d:41:8a:c4:2f:14:95:09:6f:97: c1:78:09:03:e1:e9:bc:8f:97:b2:7f:82:ad:68:60:c2:7f:2f: f0:87:13:d5:c5:12:8c:da:1e:5b:0b:98:8e:0c:65:53:1e:2d: 64:48:85:db:56:2d:b2:1a:24:73:85:ae:8b:26:e0:3a:3c:5f: 87:4e:d4:3b:50:a4:d0:41:50:f1:3a:89:24:dd:cb:96:50:e7: 5f:a0:0a:4a:dd:ac:5c:47:f5:aa:5f:cb:c2:fe:b6:2e:94:98: 1f:af:e3:14:2d:f6:38:e4:a2:d7:32:d7:04:e5:33:07:b2:83: f2:dd:9c:1a:96:d7:95:94:5a:3a:2c:2f:5e:39:b8:7c:42:3f: d3:88:84:52:48:67:ec:5d:b0:e5:81:0d:26:e1:8f:76:32:79: b7:45:59:80:80:0d:bd:31:a3:26:c5:de:bd:f4:d9:57:e8:3a: d8:f6:9f:b5 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUY9cN7skAraP/IC8RsCVsUttirE8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTFCMzY5RTFDRjQxRUIwM0UzNUEyNzExRkYxRkUwRjY4 NzI0MjQ2NzAeFw0yNTEyMjMwMTQ1MDFaFw0yNTEyMjYwMjE0MDFaMDMxMTAvBgNV BAMTKEE1M0RCQzRCMjIxNzU3M0E2RjU3QkZENDYwNjJEOThCMTMyQUVDRUEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDv/Otq/TYSb65Vj12N8H8yrlW0 S4WoUaBUIyd6voWdkT5vQNzr9i8sRjeijPjfn8OGDzW+Jt59Y6dffDaglGo07tvO FkwHVVc1pc4TpKWtFXCqZ/5TE2bXt0a8759gOp4+694JBWVEoqSpq0pzdqoLUunR RZS+fKnndv+hJwGHrar5dlcd/wgwzJIPTSgV6gCaCPwN7LkzbBWoUWUXNflF4ZN3 kZFky2KeQzUeFm6bKqg6Gu+rq8xrOlghdtPKpudj/iHz/Wgsw1uG8Q8JX15xso0c gTJwteFkyVMopj5XlZtSn+NJl/T0C/m1qf+pRBYsMYWrfN/KNSNyyE76QAgTAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUpT28SyIXVzpvV7/UYGLZixMq7OowHwYDVR0j BBgwFoAUEbNp4c9B6wPjWicR/x/g9ockJGcwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y ZTA5NjJmNy02N2VhLTQ3MGUtYTUyNC03YWUxZTQwZmQ1YjcvMC8xMUIzNjlFMUNG NDFFQjAzRTM1QTI3MTFGRjFGRTBGNjg3MjQyNDY3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMTFCMzY5RTFDRjQxRUIwM0UzNUEyNzExRkYxRkUwRjY4NzI0 MjQ2Ny5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMmUwOTYyZjctNjdlYS00NzBlLWE1 MjQtN2FlMWU0MGZkNWI3LzAvMTFCMzY5RTFDRjQxRUIwM0UzNUEyNzExRkYxRkUw RjY4NzI0MjQ2Ny5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFFDrSmeEZNHONC1ZwyBo52Q/ccikkosqQ4G qSDkdWs3ms3LwvAKvGrlmktP/z+8QPpht0NAf3NjUrBxJhAsQwyQdHm0R9uFpwWX M4C7eJPkDUGKxC8UlQlvl8F4CQPh6byPl7J/gq1oYMJ/L/CHE9XFEozaHlsLmI4M ZVMeLWRIhdtWLbIaJHOFrosm4Do8X4dO1DtQpNBBUPE6iSTdy5ZQ51+gCkrdrFxH 9apfy8L+ti6UmB+v4xQt9jjkotcy1wTlMweyg/LdnBqW15WUWjosL145uHxCP9OI hFJIZ+xdsOWBDSbhj3YyebdFWYCADb0xoybF3r302VfoOtj2n7U= -----END CERTIFICATE-----Generated at Wed Dec 24 21:33:33 2025 by rpki-client