This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/5fb808eb-c98e-4036-be9a-193bbcc64892/1/11A839F5FB6B345FB1586C56F146C0D80026AB7E.mft File: 11A839F5FB6B345FB1586C56F146C0D80026AB7E.mft (raw, json) Hash identifier: CyWnvBc83BpBSR/lELHtOBNv/3DQXZRjdPOYLWEkt0c= Subject key identifier: 52:BF:7C:2D:9B:B4:30:B3:FF:D1:4E:72:FE:67:33:9A:A9:D8:66:3C Authority key identifier: 11:A8:39:F5:FB:6B:34:5F:B1:58:6C:56:F1:46:C0:D8:00:26:AB:7E Certificate issuer: /CN=11A839F5FB6B345FB1586C56F146C0D80026AB7E Certificate serial: 65B70861732049F26B942A632C09E6C5D37EEE4E Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/11A839F5FB6B345FB1586C56F146C0D80026AB7E.cer Subject info access: rsync://repo-rpki.idnic.net/repo/5fb808eb-c98e-4036-be9a-193bbcc64892/1/11A839F5FB6B345FB1586C56F146C0D80026AB7E.mft Manifest number: FE Signing time: Mon 22 Dec 2025 01:00:56 +0000 Manifest this update: Mon 22 Dec 2025 00:55:56 +0000 Manifest next update: Thu 25 Dec 2025 03:56:56 +0000 Files and hashes: 1: 11A839F5FB6B345FB1586C56F146C0D80026AB7E.crl (hash: YTr7eGChW6CpFeDkXD8bJCdwwJZHncg+sKqmMZMmyn4=) 2: 323030313a6466333a633234303a3a2f34382d3438203d3e20313532343430.roa (hash: 2T9LVqRaEUG/PyNEPNkJKeM+yCzpYg+aQeXewlr7el8=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/5fb808eb-c98e-4036-be9a-193bbcc64892/1/11A839F5FB6B345FB1586C56F146C0D80026AB7E.crl rsync://repo-rpki.idnic.net/repo/5fb808eb-c98e-4036-be9a-193bbcc64892/1/11A839F5FB6B345FB1586C56F146C0D80026AB7E.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/11A839F5FB6B345FB1586C56F146C0D80026AB7E.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 24 Dec 2025 07:39:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 65:b7:08:61:73:20:49:f2:6b:94:2a:63:2c:09:e6:c5:d3:7e:ee:4e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=11A839F5FB6B345FB1586C56F146C0D80026AB7E Validity Not Before: Dec 22 00:55:56 2025 GMT Not After : Dec 25 03:56:56 2025 GMT Subject: CN=52BF7C2D9BB430B3FFD14E72FE67339AA9D8663C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ef:93:f8:0a:39:76:ac:d2:9f:72:62:8c:cd:c2: 4d:4e:12:8f:14:bc:3c:69:24:2b:87:64:fe:92:65: 60:8c:6c:40:e1:8d:42:42:74:05:8d:80:27:82:b1: 6e:dc:3e:a5:80:c3:76:88:42:4d:0e:59:d5:a5:a2: 46:d8:18:07:a2:d9:75:fe:39:a9:ab:5b:34:5b:81: 4d:af:33:14:08:26:34:29:41:77:1e:08:c8:cf:5e: b6:26:6e:33:bb:f2:7c:0c:2c:30:de:05:3f:9c:e5: 34:5c:43:9a:38:0e:61:95:8d:40:73:50:a9:d8:31: 5b:08:9f:0d:e8:4c:98:ac:65:e5:60:16:13:96:8b: 32:0c:2a:d6:eb:35:97:58:ba:bc:17:fa:1a:33:55: e4:85:1f:64:de:5b:69:77:da:d5:13:38:41:db:e3: 5d:b7:9c:61:7a:c9:dc:97:f2:f6:fb:3b:07:6f:ce: 78:23:5e:58:5a:42:ef:c6:2e:0d:00:24:2a:ab:97: df:be:8f:e6:70:5e:8e:ce:d0:6d:91:4d:2f:bb:e4: a5:f4:33:60:64:cc:b2:f9:ec:ac:5b:2d:6e:bb:bd: 26:2e:6f:5c:67:f5:24:be:5c:ea:6f:00:ff:7d:bd: 32:38:a4:94:10:10:53:fd:86:42:28:b4:8e:46:1b: 5c:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:BF:7C:2D:9B:B4:30:B3:FF:D1:4E:72:FE:67:33:9A:A9:D8:66:3C X509v3 Authority Key Identifier: keyid:11:A8:39:F5:FB:6B:34:5F:B1:58:6C:56:F1:46:C0:D8:00:26:AB:7E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/5fb808eb-c98e-4036-be9a-193bbcc64892/1/11A839F5FB6B345FB1586C56F146C0D80026AB7E.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/11A839F5FB6B345FB1586C56F146C0D80026AB7E.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/5fb808eb-c98e-4036-be9a-193bbcc64892/1/11A839F5FB6B345FB1586C56F146C0D80026AB7E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a6:fb:8a:68:31:7b:47:40:85:19:b0:1b:d9:7c:ff:75:5e:f7: 82:fc:48:c7:ef:4b:52:f1:97:80:f3:18:fe:d2:64:96:f8:a3: 15:e7:64:6d:a7:d5:d0:a6:08:76:dc:8f:b6:70:98:0f:52:a8: fa:22:05:98:c0:da:71:0b:0d:ac:ce:02:ca:b8:95:39:e0:a1: 1e:37:c1:8d:a8:34:ab:e4:c4:11:66:45:41:e5:38:46:26:2f: 96:fc:24:e7:a9:5c:1f:89:f4:a7:b2:47:00:51:37:ab:44:bd: 7f:2f:54:4c:4c:ee:40:59:5d:03:f7:3d:ad:02:6c:b6:56:94: 9d:0a:e9:85:62:53:56:03:ee:84:20:5e:0f:cb:69:7b:4e:89: fc:ac:d0:a4:3d:f5:87:04:3f:d5:c1:b4:e8:3d:7a:ec:61:f1: df:15:4a:dd:9f:f4:d6:d1:52:2e:3d:25:56:e2:ba:98:71:eb: b2:ea:db:64:44:02:00:f9:14:b0:f1:0c:78:94:a8:77:1f:10: 5d:76:5e:d3:90:a5:51:6b:07:72:28:f5:85:af:9f:99:86:5e: 51:b0:cf:ae:5e:57:e1:bf:93:ea:b8:bc:90:3f:6d:89:88:2b: 73:0e:e3:c1:c6:28:b2:b7:a8:86:6c:b7:5f:61:eb:73:9d:72: 1e:c5:a8:36 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUZbcIYXMgSfJrlCpjLAnmxdN+7k4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTFBODM5RjVGQjZCMzQ1RkIxNTg2QzU2RjE0NkMwRDgw MDI2QUI3RTAeFw0yNTEyMjIwMDU1NTZaFw0yNTEyMjUwMzU2NTZaMDMxMTAvBgNV BAMTKDUyQkY3QzJEOUJCNDMwQjNGRkQxNEU3MkZFNjczMzlBQTlEODY2M0MwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDvk/gKOXas0p9yYozNwk1OEo8U vDxpJCuHZP6SZWCMbEDhjUJCdAWNgCeCsW7cPqWAw3aIQk0OWdWlokbYGAei2XX+ OamrWzRbgU2vMxQIJjQpQXceCMjPXrYmbjO78nwMLDDeBT+c5TRcQ5o4DmGVjUBz UKnYMVsInw3oTJisZeVgFhOWizIMKtbrNZdYurwX+hozVeSFH2TeW2l32tUTOEHb 4123nGF6ydyX8vb7OwdvzngjXlhaQu/GLg0AJCqrl9++j+ZwXo7O0G2RTS+75KX0 M2BkzLL57KxbLW67vSYub1xn9SS+XOpvAP99vTI4pJQQEFP9hkIotI5GG1z1AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUUr98LZu0MLP/0U5y/mczmqnYZjwwHwYDVR0j BBgwFoAUEag59ftrNF+xWGxW8UbA2AAmq34wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 ZmI4MDhlYi1jOThlLTQwMzYtYmU5YS0xOTNiYmNjNjQ4OTIvMS8xMUE4MzlGNUZC NkIzNDVGQjE1ODZDNTZGMTQ2QzBEODAwMjZBQjdFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMTFBODM5RjVGQjZCMzQ1RkIxNTg2QzU2RjE0NkMwRDgwMDI2 QUI3RS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNWZiODA4ZWItYzk4ZS00MDM2LWJl OWEtMTkzYmJjYzY0ODkyLzEvMTFBODM5RjVGQjZCMzQ1RkIxNTg2QzU2RjE0NkMw RDgwMDI2QUI3RS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKb7imgxe0dAhRmwG9l8/3Ve94L8SMfvS1Lx l4DzGP7SZJb4oxXnZG2n1dCmCHbcj7ZwmA9SqPoiBZjA2nELDazOAsq4lTngoR43 wY2oNKvkxBFmRUHlOEYmL5b8JOepXB+J9KeyRwBRN6tEvX8vVExM7kBZXQP3Pa0C bLZWlJ0K6YViU1YD7oQgXg/LaXtOifys0KQ99YcEP9XBtOg9euxh8d8VSt2f9NbR Ui49JVbiuphx67Lq22REAgD5FLDxDHiUqHcfEF12XtOQpVFrB3Io9YWvn5mGXlGw z65eV+G/k+q4vJA/bYmIK3MO48HGKLK3qIZst19h63Odch7FqDY= -----END CERTIFICATE-----Generated at Tue Dec 23 22:24:39 2025 by rpki-client