This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/dabce71e-4ee4-4590-94fb-37ffd9f0d6b7/0/11489A5805B7FE2710AE32C3077C3450579D1288.mft File: 11489A5805B7FE2710AE32C3077C3450579D1288.mft (raw, json) Hash identifier: T+uzWA5Du+ts7H4gWJRs1rGrubuh3twvWulyPxFqB6A= Subject key identifier: 6F:94:65:36:AE:94:F4:75:C9:2D:A1:B7:27:31:6B:FC:3A:1D:EC:0F Authority key identifier: 11:48:9A:58:05:B7:FE:27:10:AE:32:C3:07:7C:34:50:57:9D:12:88 Certificate issuer: /CN=11489A5805B7FE2710AE32C3077C3450579D1288 Certificate serial: 3E4542C08920863F6CA07F436C6D3CAD21CC5B64 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/11489A5805B7FE2710AE32C3077C3450579D1288.cer Subject info access: rsync://repo-rpki.idnic.net/repo/dabce71e-4ee4-4590-94fb-37ffd9f0d6b7/0/11489A5805B7FE2710AE32C3077C3450579D1288.mft Manifest number: 0143 Signing time: Thu 18 Dec 2025 15:01:56 +0000 Manifest this update: Thu 18 Dec 2025 14:56:56 +0000 Manifest next update: Sun 21 Dec 2025 22:40:56 +0000 Files and hashes: 1: 3130332e3131332e32362e302f32342d3234203d3e20313337333339.roa (hash: 96bScFlvdzCB0qXA/HCwI1sZDRYZx3jWpR+NJxZy45w=) 2: 11489A5805B7FE2710AE32C3077C3450579D1288.crl (hash: F43/OKSxyN7a2Kh4714qlNBDP8tFFQFnonWsK+fxQFI=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/dabce71e-4ee4-4590-94fb-37ffd9f0d6b7/0/11489A5805B7FE2710AE32C3077C3450579D1288.crl rsync://repo-rpki.idnic.net/repo/dabce71e-4ee4-4590-94fb-37ffd9f0d6b7/0/11489A5805B7FE2710AE32C3077C3450579D1288.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/11489A5805B7FE2710AE32C3077C3450579D1288.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 21 Dec 2025 22:40:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3e:45:42:c0:89:20:86:3f:6c:a0:7f:43:6c:6d:3c:ad:21:cc:5b:64 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=11489A5805B7FE2710AE32C3077C3450579D1288 Validity Not Before: Dec 18 14:56:56 2025 GMT Not After : Dec 21 22:40:56 2025 GMT Subject: CN=6F946536AE94F475C92DA1B727316BFC3A1DEC0F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:9a:65:71:57:94:2d:02:7b:7c:cc:f5:b2:81: fe:73:b8:e7:fe:8c:34:66:1e:8f:56:5a:3f:14:91: 30:9e:d9:0a:b3:68:7e:e6:1f:d7:e7:0f:25:f9:4d: 89:10:64:d0:53:c9:0f:b8:74:70:96:d7:a8:c2:a0: 0b:fc:4e:dd:10:d1:dc:29:fd:33:73:32:2c:a2:20: 00:f8:3c:7f:a3:1d:46:1b:38:a3:61:b1:9e:8e:74: 42:33:96:19:d1:ef:60:b7:c7:72:52:da:21:aa:25: f5:94:ac:bd:3c:79:d7:b9:7b:35:f8:cb:97:8b:a1: 21:00:86:21:97:b5:26:48:15:a6:98:b1:29:ab:22: c6:e6:2d:f4:55:55:99:50:3a:45:2f:b9:45:ae:01: 16:b4:1b:16:c0:10:8d:f9:6e:6a:c2:0b:e4:9d:da: 25:d2:a6:67:c0:7e:11:6b:59:09:ad:71:dc:df:e2: 93:12:23:5e:87:85:d5:55:e4:09:80:44:3d:71:5f: cf:ee:1b:1a:bd:2c:25:b8:77:c4:8f:57:bb:db:12: e5:54:e6:d7:ca:5b:7c:65:0f:ec:e2:e7:b9:ba:db: c8:b6:3b:3c:dc:4b:61:87:9c:57:d2:ce:2a:6e:52: 1d:b0:c4:5b:11:3c:9f:a1:70:32:09:28:54:94:5b: ed:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6F:94:65:36:AE:94:F4:75:C9:2D:A1:B7:27:31:6B:FC:3A:1D:EC:0F X509v3 Authority Key Identifier: keyid:11:48:9A:58:05:B7:FE:27:10:AE:32:C3:07:7C:34:50:57:9D:12:88 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/dabce71e-4ee4-4590-94fb-37ffd9f0d6b7/0/11489A5805B7FE2710AE32C3077C3450579D1288.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/11489A5805B7FE2710AE32C3077C3450579D1288.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/dabce71e-4ee4-4590-94fb-37ffd9f0d6b7/0/11489A5805B7FE2710AE32C3077C3450579D1288.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 22:64:7b:bf:2e:7d:97:f4:99:1a:6f:53:be:ed:24:62:5f:c9: 1f:75:09:9e:a3:21:3c:0f:16:f2:d2:e9:d4:74:03:3f:4f:5f: 74:4b:cc:9b:e2:57:2e:a3:f8:68:8b:38:79:03:19:3b:44:9b: 2a:16:d4:11:ac:cb:7e:94:2c:c9:54:83:d1:ff:e6:49:65:05: bd:22:84:49:47:a6:a0:87:52:b1:ef:00:1e:e5:ee:c0:0d:75: 26:98:96:12:19:84:36:c1:35:0e:1b:01:00:8a:6d:87:dd:49: a8:08:55:26:6d:9a:98:ed:c2:46:3b:cd:94:6c:4b:b5:87:86: 8e:65:f8:9c:d5:73:41:1c:55:c6:13:d2:f2:c0:49:39:6a:18: 1a:63:e2:96:59:39:98:93:dc:b0:c6:8b:8c:cf:9a:66:b5:23: f1:f7:eb:50:9c:6e:23:50:7f:7f:93:be:bc:34:5f:71:d4:d4: 05:0c:63:52:d5:91:9c:3c:16:67:2a:c9:f1:39:4c:88:82:67: 1b:04:bd:a0:71:dd:47:28:0a:64:3d:c2:f8:38:04:19:8a:f1: 89:ba:9e:7d:53:36:f0:41:d8:ea:bd:83:08:37:61:86:1d:97: a6:4a:30:da:c3:16:37:90:2c:19:3e:dc:6f:ae:b5:dc:71:ff: 62:00:66:bc -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUPkVCwIkghj9soH9DbG08rSHMW2QwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTE0ODlBNTgwNUI3RkUyNzEwQUUzMkMzMDc3QzM0NTA1 NzlEMTI4ODAeFw0yNTEyMTgxNDU2NTZaFw0yNTEyMjEyMjQwNTZaMDMxMTAvBgNV BAMTKDZGOTQ2NTM2QUU5NEY0NzVDOTJEQTFCNzI3MzE2QkZDM0ExREVDMEYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDhmmVxV5QtAnt8zPWygf5zuOf+ jDRmHo9WWj8UkTCe2QqzaH7mH9fnDyX5TYkQZNBTyQ+4dHCW16jCoAv8Tt0Q0dwp /TNzMiyiIAD4PH+jHUYbOKNhsZ6OdEIzlhnR72C3x3JS2iGqJfWUrL08ede5ezX4 y5eLoSEAhiGXtSZIFaaYsSmrIsbmLfRVVZlQOkUvuUWuARa0GxbAEI35bmrCC+Sd 2iXSpmfAfhFrWQmtcdzf4pMSI16HhdVV5AmARD1xX8/uGxq9LCW4d8SPV7vbEuVU 5tfKW3xlD+zi57m628i2OzzcS2GHnFfSzipuUh2wxFsRPJ+hcDIJKFSUW+3zAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUb5RlNq6U9HXJLaG3JzFr/Dod7A8wHwYDVR0j BBgwFoAUEUiaWAW3/icQrjLDB3w0UFedEogwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k YWJjZTcxZS00ZWU0LTQ1OTAtOTRmYi0zN2ZmZDlmMGQ2YjcvMC8xMTQ4OUE1ODA1 QjdGRTI3MTBBRTMyQzMwNzdDMzQ1MDU3OUQxMjg4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMTE0ODlBNTgwNUI3RkUyNzEwQUUzMkMzMDc3QzM0NTA1NzlE MTI4OC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZGFiY2U3MWUtNGVlNC00NTkwLTk0 ZmItMzdmZmQ5ZjBkNmI3LzAvMTE0ODlBNTgwNUI3RkUyNzEwQUUzMkMzMDc3QzM0 NTA1NzlEMTI4OC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACJke78ufZf0mRpvU77tJGJfyR91CZ6jITwP FvLS6dR0Az9PX3RLzJviVy6j+GiLOHkDGTtEmyoW1BGsy36ULMlUg9H/5kllBb0i hElHpqCHUrHvAB7l7sANdSaYlhIZhDbBNQ4bAQCKbYfdSagIVSZtmpjtwkY7zZRs S7WHho5l+JzVc0EcVcYT0vLASTlqGBpj4pZZOZiT3LDGi4zPmma1I/H361CcbiNQ f3+Tvrw0X3HU1AUMY1LVkZw8FmcqyfE5TIiCZxsEvaBx3UcoCmQ9wvg4BBmK8Ym6 nn1TNvBB2Oq9gwg3YYYdl6ZKMNrDFjeQLBk+3G+utdxx/2IAZrw= -----END CERTIFICATE-----Generated at Fri Dec 19 11:23:43 2025 by rpki-client