This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/05e603e3-f23e-4c6a-bb3c-06409d65c838/0/011400263413DE61A797AA22B58664ACD84FD8DF.mft File: 011400263413DE61A797AA22B58664ACD84FD8DF.mft (raw, json) Hash identifier: lgfJcfgmaAco6ziEcaJ8+fBVBrQbno4z77KJwEtDWOs= Subject key identifier: CE:95:9C:65:AC:62:00:6A:81:86:DB:AC:19:C1:16:65:27:89:23:AC Authority key identifier: 01:14:00:26:34:13:DE:61:A7:97:AA:22:B5:86:64:AC:D8:4F:D8:DF Certificate issuer: /CN=011400263413DE61A797AA22B58664ACD84FD8DF Certificate serial: 078BA9C231EA91407D7D1CD42052DB6E150DDB0D Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/011400263413DE61A797AA22B58664ACD84FD8DF.cer Subject info access: rsync://repo-rpki.idnic.net/repo/05e603e3-f23e-4c6a-bb3c-06409d65c838/0/011400263413DE61A797AA22B58664ACD84FD8DF.mft Manifest number: 010E Signing time: Mon 01 Dec 2025 10:20:41 +0000 Manifest this update: Mon 01 Dec 2025 10:15:41 +0000 Manifest next update: Thu 04 Dec 2025 15:17:41 +0000 Files and hashes: 1: 3130332e3136362e302e302f32332d3233203d3e20313431393238.roa (hash: Oie9FfzxAUFeEWo0lOSHSrXoitg3kaiPf131UbGR7DM=) 2: 3130332e3136362e302e302f32342d3234203d3e20313431393238.roa (hash: meaRs6wyk1QjNIKGW41CEEaArTRNShkA67gAO4asuCg=) 3: 011400263413DE61A797AA22B58664ACD84FD8DF.crl (hash: nk6D1y3Zw+c94ugThPnm5lC2shr5kIcHb7atxqRjk5Y=) 4: 3130332e3136362e312e302f32342d3234203d3e20313431393238.roa (hash: xzEL+y0BJIItneMMeHfN4auA7BVJMCe6TjNvsIm3a8c=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/05e603e3-f23e-4c6a-bb3c-06409d65c838/0/011400263413DE61A797AA22B58664ACD84FD8DF.crl rsync://repo-rpki.idnic.net/repo/05e603e3-f23e-4c6a-bb3c-06409d65c838/0/011400263413DE61A797AA22B58664ACD84FD8DF.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/011400263413DE61A797AA22B58664ACD84FD8DF.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 04 Dec 2025 15:17:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 07:8b:a9:c2:31:ea:91:40:7d:7d:1c:d4:20:52:db:6e:15:0d:db:0d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=011400263413DE61A797AA22B58664ACD84FD8DF Validity Not Before: Dec 1 10:15:41 2025 GMT Not After : Dec 4 15:17:41 2025 GMT Subject: CN=CE959C65AC62006A8186DBAC19C11665278923AC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:26:9c:16:87:fd:7e:ad:da:66:71:49:9e:9b: 86:46:f5:73:c3:35:54:c6:2f:cb:f3:38:bf:5d:ee: e3:1b:fa:3c:2b:eb:b0:d3:a2:84:1d:4e:8d:e4:f5: c5:6d:04:72:f9:00:0f:c2:33:66:01:13:ac:96:e3: fb:18:da:88:57:ce:5b:62:c9:d4:87:65:79:e1:19: 9e:a3:7f:26:45:95:a9:58:59:ad:08:ac:f1:e7:19: fe:f7:9e:b1:ca:64:9f:ca:aa:64:0d:aa:4e:e4:da: 46:68:d6:6c:73:ce:fc:9f:92:6a:d9:db:4f:61:a0: 4a:bf:56:4e:20:5d:cc:60:97:e8:2f:56:7d:89:4d: 98:72:9d:03:e6:fa:14:d9:ff:4e:1e:cd:1f:fc:7e: ff:ed:d0:1c:25:4e:c6:cd:31:04:c7:af:bb:a2:0c: 25:92:4c:ad:c0:6c:23:75:d1:15:f7:b7:62:fb:be: ac:29:7a:f4:85:f4:a1:20:71:fc:b0:dd:3d:27:2e: 1b:eb:55:03:e8:2d:34:36:a2:ec:51:16:ea:10:fe: 7f:b1:8a:4e:86:ea:3f:6a:63:d7:72:51:82:f6:90: e1:d9:1d:82:6b:f9:d3:f1:a6:08:b3:91:ee:82:98: f6:bc:1f:d8:7b:fe:c3:bb:92:6b:06:fd:59:1b:d0: cb:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CE:95:9C:65:AC:62:00:6A:81:86:DB:AC:19:C1:16:65:27:89:23:AC X509v3 Authority Key Identifier: keyid:01:14:00:26:34:13:DE:61:A7:97:AA:22:B5:86:64:AC:D8:4F:D8:DF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/05e603e3-f23e-4c6a-bb3c-06409d65c838/0/011400263413DE61A797AA22B58664ACD84FD8DF.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/011400263413DE61A797AA22B58664ACD84FD8DF.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/05e603e3-f23e-4c6a-bb3c-06409d65c838/0/011400263413DE61A797AA22B58664ACD84FD8DF.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 43:1b:7e:b6:cd:f3:d3:0e:a3:4f:48:ee:e5:42:c6:b6:22:78: 60:f2:24:ff:d4:35:78:33:d9:c3:2f:52:5d:7a:42:56:74:7d: aa:f7:db:08:f4:71:d1:57:ad:e9:0f:6c:7c:d1:66:ed:0a:87: 5a:ea:0a:64:7b:07:bc:81:79:47:6b:14:a6:70:c9:ea:fa:b5: 6e:29:38:b7:df:6f:28:1a:7d:03:6c:4a:5d:ab:ae:b4:a5:5d: 10:2e:65:f6:48:97:5b:de:3c:7b:e9:cc:51:a6:d0:f5:5a:27: 94:16:fd:7c:5c:8c:55:ca:0f:41:3a:bb:06:58:cf:6b:a7:9c: ed:c4:40:0f:e2:76:f1:ef:3c:4c:41:90:d1:98:79:3f:bc:4a: c5:85:08:8f:6a:0d:b1:39:98:b6:33:c9:d1:7e:db:36:d9:4a: 3f:e8:41:4d:1f:b6:4b:ba:a8:34:0a:ba:f3:50:00:a1:5b:6c: bf:34:ed:b9:96:23:9f:5b:2f:38:8e:eb:b6:a2:1e:79:e2:8a: f3:f2:5a:30:af:0a:21:6e:28:02:d3:ca:b8:6e:0b:86:79:5e: c7:91:45:b4:de:cd:54:ae:d9:29:f9:fd:cb:f0:86:a6:a0:a1: d0:11:9e:99:e2:bf:b5:10:62:5e:2b:d7:d9:d6:29:7b:f2:9b: f0:e6:54:7c -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUB4upwjHqkUB9fRzUIFLbbhUN2w0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDExNDAwMjYzNDEzREU2MUE3OTdBQTIyQjU4NjY0QUNE ODRGRDhERjAeFw0yNTEyMDExMDE1NDFaFw0yNTEyMDQxNTE3NDFaMDMxMTAvBgNV BAMTKENFOTU5QzY1QUM2MjAwNkE4MTg2REJBQzE5QzExNjY1Mjc4OTIzQUMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDfJpwWh/1+rdpmcUmem4ZG9XPD NVTGL8vzOL9d7uMb+jwr67DTooQdTo3k9cVtBHL5AA/CM2YBE6yW4/sY2ohXzlti ydSHZXnhGZ6jfyZFlalYWa0IrPHnGf73nrHKZJ/KqmQNqk7k2kZo1mxzzvyfkmrZ 209hoEq/Vk4gXcxgl+gvVn2JTZhynQPm+hTZ/04ezR/8fv/t0BwlTsbNMQTHr7ui DCWSTK3AbCN10RX3t2L7vqwpevSF9KEgcfyw3T0nLhvrVQPoLTQ2ouxRFuoQ/n+x ik6G6j9qY9dyUYL2kOHZHYJr+dPxpgizke6CmPa8H9h7/sO7kmsG/Vkb0MvFAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUzpWcZaxiAGqBhtusGcEWZSeJI6wwHwYDVR0j BBgwFoAUARQAJjQT3mGnl6oitYZkrNhP2N8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w NWU2MDNlMy1mMjNlLTRjNmEtYmIzYy0wNjQwOWQ2NWM4MzgvMC8wMTE0MDAyNjM0 MTNERTYxQTc5N0FBMjJCNTg2NjRBQ0Q4NEZEOERGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMDExNDAwMjYzNDEzREU2MUE3OTdBQTIyQjU4NjY0QUNEODRG RDhERi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMDVlNjAzZTMtZjIzZS00YzZhLWJi M2MtMDY0MDlkNjVjODM4LzAvMDExNDAwMjYzNDEzREU2MUE3OTdBQTIyQjU4NjY0 QUNEODRGRDhERi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEMbfrbN89MOo09I7uVCxrYieGDyJP/UNXgz 2cMvUl16QlZ0far32wj0cdFXrekPbHzRZu0Kh1rqCmR7B7yBeUdrFKZwyer6tW4p OLffbygafQNsSl2rrrSlXRAuZfZIl1vePHvpzFGm0PVaJ5QW/XxcjFXKD0E6uwZY z2unnO3EQA/idvHvPExBkNGYeT+8SsWFCI9qDbE5mLYzydF+2zbZSj/oQU0ftku6 qDQKuvNQAKFbbL807bmWI59bLziO67aiHnniivPyWjCvCiFuKALTyrhuC4Z5XseR RbTezVSu2Sn5/cvwhqagodARnpniv7UQYl4r19nWKXvym/DmVHw= -----END CERTIFICATE-----Generated at Wed Dec 3 14:42:43 2025 by rpki-client