This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/3e87f1d1-06fb-436b-9ce6-92daa29f1f9b/0/1811CB623E9BFFB82945CA39C74C4C274914837F.mft File: 1811CB623E9BFFB82945CA39C74C4C274914837F.mft (raw, json) Hash identifier: 1wNthiDdd8gDF4JWsU6v5d4eAh3WVMWXJlmq1nAL6Vo= Subject key identifier: 10:4B:57:44:11:07:E4:C4:17:BD:0A:2C:0A:DF:A9:3F:30:C7:8A:83 Authority key identifier: 18:11:CB:62:3E:9B:FF:B8:29:45:CA:39:C7:4C:4C:27:49:14:83:7F Certificate issuer: /CN=1811CB623E9BFFB82945CA39C74C4C274914837F Certificate serial: 2B2085B710FC770EE85477C69067A67F648C949B Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1811CB623E9BFFB82945CA39C74C4C274914837F.cer Subject info access: rsync://repo-rpki.idnic.net/repo/3e87f1d1-06fb-436b-9ce6-92daa29f1f9b/0/1811CB623E9BFFB82945CA39C74C4C274914837F.mft Manifest number: 02F3 Signing time: Wed 24 Dec 2025 19:20:56 +0000 Manifest this update: Wed 24 Dec 2025 19:15:56 +0000 Manifest next update: Sat 27 Dec 2025 20:14:56 +0000 Files and hashes: 1: 3130332e3137372e39362e302f32332d3234203d3e20313331313131.roa (hash: IWu36PgrlbrIyJKi1yWtOTjXE0y4uzUHTwZcjUqTWx8=) 2: 1811CB623E9BFFB82945CA39C74C4C274914837F.crl (hash: PquCmkQyegx6jMKSHKwomWDdAq0FjaL2q+RlTjRBg7I=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/3e87f1d1-06fb-436b-9ce6-92daa29f1f9b/0/1811CB623E9BFFB82945CA39C74C4C274914837F.crl rsync://repo-rpki.idnic.net/repo/3e87f1d1-06fb-436b-9ce6-92daa29f1f9b/0/1811CB623E9BFFB82945CA39C74C4C274914837F.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1811CB623E9BFFB82945CA39C74C4C274914837F.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 27 Dec 2025 17:20:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2b:20:85:b7:10:fc:77:0e:e8:54:77:c6:90:67:a6:7f:64:8c:94:9b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1811CB623E9BFFB82945CA39C74C4C274914837F Validity Not Before: Dec 24 19:15:56 2025 GMT Not After : Dec 27 20:14:56 2025 GMT Subject: CN=104B57441107E4C417BD0A2C0ADFA93F30C78A83 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:39:51:7e:7c:71:17:3d:36:7f:c8:6a:7b:41: a7:fb:7c:1b:50:ee:5f:49:32:e9:c8:e2:48:40:ae: dd:d6:53:f3:86:8c:70:4a:48:3d:86:d1:28:0c:16: bf:75:21:c6:94:68:c2:47:4e:24:4c:05:46:ab:02: 0d:5a:be:5b:d4:05:80:af:ca:ef:d5:0d:12:ff:1c: 1b:38:66:de:76:e0:4a:db:3d:be:8f:83:f7:6a:3a: 4c:9c:79:05:e4:82:62:fc:44:d6:b4:8d:9b:e1:ed: 69:7d:bf:77:d6:6f:43:e1:42:d0:d7:9f:d2:6b:15: b6:b8:f1:bd:2c:cd:83:8f:62:60:87:68:55:90:9e: 28:24:95:8f:f1:dd:18:cf:22:63:ef:bd:c3:57:17: ce:77:f4:6c:05:19:06:f8:ac:ac:ab:74:4a:65:2b: f9:8f:1f:ab:7e:00:d9:a9:60:8d:e9:69:90:4e:1c: 32:2a:fa:32:91:34:de:df:f2:0e:60:ff:80:4d:45: 68:15:08:17:b6:e7:85:e7:8e:81:c5:5b:64:12:24: 7a:ff:26:4c:48:e4:7a:08:3e:45:6e:d6:9e:ac:3c: 4b:8d:2a:12:d9:37:17:e0:df:e7:75:b8:63:fb:02: 61:38:e6:b8:a7:98:a1:86:79:61:87:0b:c8:7d:fd: d4:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:4B:57:44:11:07:E4:C4:17:BD:0A:2C:0A:DF:A9:3F:30:C7:8A:83 X509v3 Authority Key Identifier: keyid:18:11:CB:62:3E:9B:FF:B8:29:45:CA:39:C7:4C:4C:27:49:14:83:7F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/3e87f1d1-06fb-436b-9ce6-92daa29f1f9b/0/1811CB623E9BFFB82945CA39C74C4C274914837F.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1811CB623E9BFFB82945CA39C74C4C274914837F.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3e87f1d1-06fb-436b-9ce6-92daa29f1f9b/0/1811CB623E9BFFB82945CA39C74C4C274914837F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 26:a4:55:90:5e:d3:fe:e4:97:6e:50:59:7e:74:33:60:cb:f8: 19:78:70:86:67:dc:18:08:d9:a4:3f:34:dc:db:3f:e1:8c:d4: 6b:1d:e3:8f:cf:0f:1a:6b:a6:c4:10:e9:e1:68:1a:2a:96:4a: 56:b2:9c:ed:ef:dd:f1:8b:cd:c0:43:f6:ce:dd:88:ed:69:cc: cc:c5:15:46:fe:c6:a8:bf:09:a4:f5:2d:50:a3:ec:ac:22:04: 0e:42:3d:66:f0:db:f9:53:7c:bb:fc:4e:30:cf:ed:33:00:8e: a5:e8:01:75:7c:75:b0:95:96:69:ac:06:19:b6:a3:76:36:17: 32:96:01:86:9c:82:be:9c:70:5d:7a:0e:d2:82:17:b1:e7:95: 62:39:45:75:33:c3:f1:a9:02:bb:21:30:e3:c7:c4:b1:14:dd: b0:4f:85:df:6b:71:78:38:b1:d3:f5:7d:84:c1:77:cd:b8:ab: 93:04:84:11:30:d9:bd:94:d4:8d:3e:80:7c:d5:25:99:09:b7: c2:cd:de:a8:2b:13:4e:8e:89:97:6c:fe:b9:26:b1:55:25:c1: c5:0b:b0:a2:f9:13:27:b4:d5:bf:bf:ba:a2:db:dc:25:dc:0e: 02:0e:3f:ae:bd:5c:10:56:fb:92:a3:de:c5:aa:1e:31:8e:73: 2c:ce:f5:a6 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUKyCFtxD8dw7oVHfGkGemf2SMlJswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTgxMUNCNjIzRTlCRkZCODI5NDVDQTM5Qzc0QzRDMjc0 OTE0ODM3RjAeFw0yNTEyMjQxOTE1NTZaFw0yNTEyMjcyMDE0NTZaMDMxMTAvBgNV BAMTKDEwNEI1NzQ0MTEwN0U0QzQxN0JEMEEyQzBBREZBOTNGMzBDNzhBODMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDNOVF+fHEXPTZ/yGp7Qaf7fBtQ 7l9JMunI4khArt3WU/OGjHBKSD2G0SgMFr91IcaUaMJHTiRMBUarAg1avlvUBYCv yu/VDRL/HBs4Zt524ErbPb6Pg/dqOkyceQXkgmL8RNa0jZvh7Wl9v3fWb0PhQtDX n9JrFba48b0szYOPYmCHaFWQnigklY/x3RjPImPvvcNXF8539GwFGQb4rKyrdEpl K/mPH6t+ANmpYI3paZBOHDIq+jKRNN7f8g5g/4BNRWgVCBe254XnjoHFW2QSJHr/ JkxI5HoIPkVu1p6sPEuNKhLZNxfg3+d1uGP7AmE45rinmKGGeWGHC8h9/dRzAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUEEtXRBEH5MQXvQosCt+pPzDHioMwHwYDVR0j BBgwFoAUGBHLYj6b/7gpRco5x0xMJ0kUg38wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z ZTg3ZjFkMS0wNmZiLTQzNmItOWNlNi05MmRhYTI5ZjFmOWIvMC8xODExQ0I2MjNF OUJGRkI4Mjk0NUNBMzlDNzRDNEMyNzQ5MTQ4MzdGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMTgxMUNCNjIzRTlCRkZCODI5NDVDQTM5Qzc0QzRDMjc0OTE0 ODM3Ri5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vM2U4N2YxZDEtMDZmYi00MzZiLTlj ZTYtOTJkYWEyOWYxZjliLzAvMTgxMUNCNjIzRTlCRkZCODI5NDVDQTM5Qzc0QzRD Mjc0OTE0ODM3Ri5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACakVZBe0/7kl25QWX50M2DL+Bl4cIZn3BgI 2aQ/NNzbP+GM1Gsd44/PDxprpsQQ6eFoGiqWSlaynO3v3fGLzcBD9s7diO1pzMzF FUb+xqi/CaT1LVCj7KwiBA5CPWbw2/lTfLv8TjDP7TMAjqXoAXV8dbCVlmmsBhm2 o3Y2FzKWAYacgr6ccF16DtKCF7HnlWI5RXUzw/GpArshMOPHxLEU3bBPhd9rcXg4 sdP1fYTBd824q5MEhBEw2b2U1I0+gHzVJZkJt8LN3qgrE06OiZds/rkmsVUlwcUL sKL5Eye01b+/uqLb3CXcDgIOP669XBBW+5Kj3sWqHjGOcyzO9aY= -----END CERTIFICATE-----Generated at Wed Dec 24 22:08:13 2025 by rpki-client