This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/11828067-e7c1-4964-8428-599033d74296/0/12A8210E6A91A93DDB92F594D7E47728131BC2DA.mft File: 12A8210E6A91A93DDB92F594D7E47728131BC2DA.mft (raw, json) Hash identifier: mfByGy56IXfoSVy1mrakaqKF0LHdm8g97iiS2+it2bw= Subject key identifier: CE:E6:62:27:99:28:58:66:43:A6:22:B2:86:43:1F:1C:82:29:5B:31 Authority key identifier: 12:A8:21:0E:6A:91:A9:3D:DB:92:F5:94:D7:E4:77:28:13:1B:C2:DA Certificate issuer: /CN=12A8210E6A91A93DDB92F594D7E47728131BC2DA Certificate serial: 4903106D4411480B087E966A34FF10571CF0981E Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/12A8210E6A91A93DDB92F594D7E47728131BC2DA.cer Subject info access: rsync://repo-rpki.idnic.net/repo/11828067-e7c1-4964-8428-599033d74296/0/12A8210E6A91A93DDB92F594D7E47728131BC2DA.mft Manifest number: 0114 Signing time: Tue 02 Dec 2025 12:32:01 +0000 Manifest this update: Tue 02 Dec 2025 12:27:01 +0000 Manifest next update: Fri 05 Dec 2025 23:05:01 +0000 Files and hashes: 1: 12A8210E6A91A93DDB92F594D7E47728131BC2DA.crl (hash: KMpaMIkgQavN4extecNgD85DeABqP7OYNL1jRX2DZOQ=) 2: 34352e3132332e3134332e302f32342d3234203d3e20343532303233.roa (hash: yFHqmwqtGwRHNbaKxqLyAMp6goM/26DKgEUgRO5CpWs=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/11828067-e7c1-4964-8428-599033d74296/0/12A8210E6A91A93DDB92F594D7E47728131BC2DA.crl rsync://repo-rpki.idnic.net/repo/11828067-e7c1-4964-8428-599033d74296/0/12A8210E6A91A93DDB92F594D7E47728131BC2DA.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/12A8210E6A91A93DDB92F594D7E47728131BC2DA.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 05 Dec 2025 23:05:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 49:03:10:6d:44:11:48:0b:08:7e:96:6a:34:ff:10:57:1c:f0:98:1e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=12A8210E6A91A93DDB92F594D7E47728131BC2DA Validity Not Before: Dec 2 12:27:01 2025 GMT Not After : Dec 5 23:05:01 2025 GMT Subject: CN=CEE662279928586643A622B286431F1C82295B31 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:1b:a3:34:8a:6b:ba:f2:f4:a5:ee:30:ed:4a: 82:2a:30:3c:dc:31:ae:e9:72:98:cc:16:36:f9:67: 10:7e:32:9a:8c:61:00:c2:bd:76:9d:df:c5:d0:75: fc:5d:32:62:bf:a8:6c:30:7d:9c:0e:b7:10:5d:91: d1:f0:dc:bb:2d:19:99:49:5c:ae:65:67:3d:81:ff: 9f:74:e1:fc:8e:5b:29:d3:91:68:51:77:e5:9c:02: b2:fd:f7:75:da:c0:9a:36:10:d0:2e:f2:bc:36:26: 79:1e:ee:4b:89:4f:23:59:9b:55:34:2e:4c:e0:0f: ad:3a:0a:06:4a:36:29:a6:b7:09:66:22:3a:cb:0e: f4:09:bf:05:c6:52:32:86:5f:63:cd:f0:58:66:42: 37:76:e6:42:fe:59:50:86:46:92:52:2d:b3:44:62: ae:ce:de:b1:8e:14:9c:1f:51:a3:30:22:52:ba:c0: 3b:31:45:f1:64:61:ad:e1:8c:a2:f9:ec:d8:9f:cd: d2:19:1d:58:e6:17:23:63:00:6d:0f:0c:ec:4f:4f: 5c:8b:87:33:65:ab:19:0d:ce:8a:49:59:e0:a1:f6: 8e:85:47:32:05:2c:1c:27:4e:ca:63:3d:d7:a3:1f: 58:95:ed:f2:24:f1:9b:cc:96:ea:58:fb:2d:89:fe: f3:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CE:E6:62:27:99:28:58:66:43:A6:22:B2:86:43:1F:1C:82:29:5B:31 X509v3 Authority Key Identifier: keyid:12:A8:21:0E:6A:91:A9:3D:DB:92:F5:94:D7:E4:77:28:13:1B:C2:DA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/11828067-e7c1-4964-8428-599033d74296/0/12A8210E6A91A93DDB92F594D7E47728131BC2DA.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/12A8210E6A91A93DDB92F594D7E47728131BC2DA.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/11828067-e7c1-4964-8428-599033d74296/0/12A8210E6A91A93DDB92F594D7E47728131BC2DA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 58:0a:58:61:e8:3e:44:eb:69:aa:8e:c5:25:0f:dc:9f:5e:65: 4b:4d:31:2b:84:49:47:d7:4f:f6:e4:3d:f1:1d:2b:dc:6b:ba: e2:c4:a4:7f:b5:98:16:56:1c:de:dd:9b:76:01:66:63:4a:10: 31:5f:24:82:4f:18:9b:54:b9:9f:ef:58:67:b7:8a:a3:98:ea: 59:fb:46:9c:7d:54:39:ac:e1:b6:b6:90:72:38:4a:6e:89:84: 0d:61:6c:d6:a9:ce:cd:c7:ca:7a:d4:dc:d2:79:7b:8e:7e:35: a0:e5:89:e6:ba:79:ac:fb:92:bf:47:04:be:15:f6:98:dc:f6: f3:3b:08:f6:2f:03:73:ba:4d:64:b4:6f:b9:9c:72:1a:52:ae: 88:23:ae:96:05:4c:1b:ab:2a:a1:5b:dd:29:eb:52:07:9f:1c: 7f:ca:f4:d8:b0:80:24:30:39:b3:97:26:b4:89:32:a9:80:d0: 96:23:b1:7a:09:f8:6f:98:c9:4d:46:61:15:b4:5d:ce:74:67: e4:43:20:3f:95:d8:1b:e6:24:5e:11:21:7e:48:0a:d6:5f:bf: 9f:b4:73:d3:d6:e4:41:ec:d4:ee:f6:7d:13:4c:ed:d7:22:7c: bd:69:d2:aa:3f:58:c8:f1:a0:72:01:e3:6e:27:46:f7:5e:94: 3f:ae:b5:b4 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUSQMQbUQRSAsIfpZqNP8QVxzwmB4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTJBODIxMEU2QTkxQTkzRERCOTJGNTk0RDdFNDc3Mjgx MzFCQzJEQTAeFw0yNTEyMDIxMjI3MDFaFw0yNTEyMDUyMzA1MDFaMDMxMTAvBgNV BAMTKENFRTY2MjI3OTkyODU4NjY0M0E2MjJCMjg2NDMxRjFDODIyOTVCMzEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDVG6M0imu68vSl7jDtSoIqMDzc Ma7pcpjMFjb5ZxB+MpqMYQDCvXad38XQdfxdMmK/qGwwfZwOtxBdkdHw3LstGZlJ XK5lZz2B/5904fyOWynTkWhRd+WcArL993XawJo2ENAu8rw2Jnke7kuJTyNZm1U0 LkzgD606CgZKNimmtwlmIjrLDvQJvwXGUjKGX2PN8FhmQjd25kL+WVCGRpJSLbNE Yq7O3rGOFJwfUaMwIlK6wDsxRfFkYa3hjKL57NifzdIZHVjmFyNjAG0PDOxPT1yL hzNlqxkNzopJWeCh9o6FRzIFLBwnTspjPdejH1iV7fIk8ZvMlupY+y2J/vMhAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUzuZiJ5koWGZDpiKyhkMfHIIpWzEwHwYDVR0j BBgwFoAUEqghDmqRqT3bkvWU1+R3KBMbwtowDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x MTgyODA2Ny1lN2MxLTQ5NjQtODQyOC01OTkwMzNkNzQyOTYvMC8xMkE4MjEwRTZB OTFBOTNEREI5MkY1OTREN0U0NzcyODEzMUJDMkRBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMTJBODIxMEU2QTkxQTkzRERCOTJGNTk0RDdFNDc3MjgxMzFC QzJEQS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMTE4MjgwNjctZTdjMS00OTY0LTg0 MjgtNTk5MDMzZDc0Mjk2LzAvMTJBODIxMEU2QTkxQTkzRERCOTJGNTk0RDdFNDc3 MjgxMzFCQzJEQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFgKWGHoPkTraaqOxSUP3J9eZUtNMSuESUfX T/bkPfEdK9xruuLEpH+1mBZWHN7dm3YBZmNKEDFfJIJPGJtUuZ/vWGe3iqOY6ln7 Rpx9VDms4ba2kHI4Sm6JhA1hbNapzs3HynrU3NJ5e45+NaDliea6eaz7kr9HBL4V 9pjc9vM7CPYvA3O6TWS0b7mcchpSrogjrpYFTBurKqFb3SnrUgefHH/K9NiwgCQw ObOXJrSJMqmA0JYjsXoJ+G+YyU1GYRW0Xc50Z+RDID+V2BvmJF4RIX5ICtZfv5+0 c9PW5EHs1O72fRNM7dcifL1p0qo/WMjxoHIB424nRvdelD+utbQ= -----END CERTIFICATE-----Generated at Wed Dec 3 13:57:26 2025 by rpki-client