This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/2d487360-8735-41d7-97a8-dbb34d79eff4/0/B11E5C9B4E322460FD701387F25B9EAEFE67C3EC.mft File: B11E5C9B4E322460FD701387F25B9EAEFE67C3EC.mft (raw, json) Hash identifier: qVZekeCygXswjY6V45/C7bWOLbdOcbTGNncsfCpIf4E= Subject key identifier: A1:54:F0:4F:F7:35:7E:2F:A7:4D:10:5B:A9:E6:EF:35:32:A6:EB:E6 Authority key identifier: B1:1E:5C:9B:4E:32:24:60:FD:70:13:87:F2:5B:9E:AE:FE:67:C3:EC Certificate issuer: /CN=B11E5C9B4E322460FD701387F25B9EAEFE67C3EC Certificate serial: 20A1E0D0D05861F2B95CCB07F8F343A46B470433 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B11E5C9B4E322460FD701387F25B9EAEFE67C3EC.cer Subject info access: rsync://repo-rpki.idnic.net/repo/2d487360-8735-41d7-97a8-dbb34d79eff4/0/B11E5C9B4E322460FD701387F25B9EAEFE67C3EC.mft Manifest number: 0497 Signing time: Mon 01 Dec 2025 18:10:41 +0000 Manifest this update: Mon 01 Dec 2025 18:05:41 +0000 Manifest next update: Fri 05 Dec 2025 04:16:41 +0000 Files and hashes: 1: 3130332e3231302e3132322e302f32342d3234203d3e20313334363538.roa (hash: P41PFR8M2pkKOmCdUu6l5sHUIprRbj+Eb/jozno97jU=) 2: 3130332e3231302e3132312e302f32342d3234203d3e20313334363538.roa (hash: LTZWN20UeEpbk3/6yOOjk81arYUEDuYxFg/WlS2mmEI=) 3: 3130332e3231302e3132302e302f32322d3234203d3e20313334363538.roa (hash: w/W7ZPLOwJZFB+XGZFv4rUXEnNF/+lRXZH9LftXeoZo=) 4: 3130332e3231302e3132302e302f32342d3234203d3e20313334363538.roa (hash: 9ga4Dz2S1yZEHVR/bNJu6K+f7jqkSZliYiYDlhJqlSc=) 5: 323430343a366338303a3a2f33322d3438203d3e20313334363538.roa (hash: /De9PraBKQ9VNMLW73eKsHyTdK5CxUO/Ms23Vqs0bog=) 6: B11E5C9B4E322460FD701387F25B9EAEFE67C3EC.crl (hash: phtDD5urIs10ML606WXlZ0fX83KW5ImyhGGtoxIk0yw=) 7: 3130332e3231302e3132332e302f32342d3234203d3e20313334363538.roa (hash: NkQ9eWcHVREh5sfesIOFWzh9yqFj5sw8tkhu4ZxcoSQ=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/2d487360-8735-41d7-97a8-dbb34d79eff4/0/B11E5C9B4E322460FD701387F25B9EAEFE67C3EC.crl rsync://repo-rpki.idnic.net/repo/2d487360-8735-41d7-97a8-dbb34d79eff4/0/B11E5C9B4E322460FD701387F25B9EAEFE67C3EC.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B11E5C9B4E322460FD701387F25B9EAEFE67C3EC.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 05 Dec 2025 04:16:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 20:a1:e0:d0:d0:58:61:f2:b9:5c:cb:07:f8:f3:43:a4:6b:47:04:33 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B11E5C9B4E322460FD701387F25B9EAEFE67C3EC Validity Not Before: Dec 1 18:05:41 2025 GMT Not After : Dec 5 04:16:41 2025 GMT Subject: CN=A154F04FF7357E2FA74D105BA9E6EF3532A6EBE6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:7d:15:92:4c:f6:6b:11:4f:f4:a5:2c:4b:53: 24:c5:df:bf:09:22:d8:bd:d0:ca:c7:b2:25:69:d1: dc:31:78:3d:41:ca:3c:bb:c0:83:74:5c:c0:b2:36: 90:32:60:61:76:8f:d4:8e:3b:c2:cf:20:b5:eb:18: 9d:f3:81:ec:c9:59:39:4f:1d:ee:e9:50:e3:f0:65: d6:f8:f0:17:36:2b:7d:5c:94:c2:59:e3:36:f7:5e: ab:66:c5:3a:9c:fa:aa:48:a5:64:95:b2:d3:83:08: 20:14:94:f9:c9:a2:b6:b0:f2:47:04:32:44:b9:c5: e1:bf:bb:dd:fe:92:78:c6:fd:4b:4e:fa:f4:39:4d: 21:63:bf:43:77:4f:2e:8b:d5:64:c0:25:a1:da:2c: 5d:4d:c4:a1:a0:9c:86:1a:a4:ed:3a:71:96:93:ec: e1:76:1d:57:f3:ff:ef:af:3b:72:3b:e7:e2:8f:2a: 4d:be:f3:73:ef:b0:b4:28:5f:e5:19:d1:b9:dd:a1: eb:e5:d7:88:0d:64:c4:f2:9a:69:63:7c:5f:28:f0: 7f:d9:af:a5:67:d1:93:04:66:04:48:3c:cb:54:03: ed:96:8b:9a:df:68:43:7e:84:0a:24:c2:d6:4f:02: ca:49:e1:3e:7c:78:06:f5:cd:82:df:2d:7f:98:57: 63:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:54:F0:4F:F7:35:7E:2F:A7:4D:10:5B:A9:E6:EF:35:32:A6:EB:E6 X509v3 Authority Key Identifier: keyid:B1:1E:5C:9B:4E:32:24:60:FD:70:13:87:F2:5B:9E:AE:FE:67:C3:EC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/2d487360-8735-41d7-97a8-dbb34d79eff4/0/B11E5C9B4E322460FD701387F25B9EAEFE67C3EC.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B11E5C9B4E322460FD701387F25B9EAEFE67C3EC.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/2d487360-8735-41d7-97a8-dbb34d79eff4/0/B11E5C9B4E322460FD701387F25B9EAEFE67C3EC.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 60:69:1b:2f:1e:56:93:82:3c:5a:74:2c:66:c6:62:88:f7:98: bd:b9:2c:8a:c0:84:8c:63:f6:dd:e6:e8:0e:7b:ac:48:5d:ce: 03:6c:95:77:3d:07:8c:46:a3:46:ab:37:e3:19:be:a4:18:9f: b6:67:c2:03:aa:2f:b2:0b:f1:e3:4a:b2:91:f8:b3:96:7c:74: 58:01:9e:a5:51:0e:8c:dc:16:30:5f:00:8b:d1:f7:fe:1b:b9: 84:32:30:d1:c9:89:2c:c1:76:1a:88:3b:ec:e1:21:66:2e:59: 25:4e:c9:44:34:14:51:cb:8a:a0:8b:0b:94:25:dc:79:37:98: c6:75:7d:6c:ae:c5:85:d8:04:29:9d:8c:e5:cb:fa:94:ff:9e: 9c:72:71:e3:96:5c:ba:65:18:08:78:db:97:73:01:e9:0d:64: 0f:f1:4c:cc:ed:7a:0f:03:47:9a:dc:4a:9e:e2:06:76:31:31: ab:e4:fc:60:be:4b:da:c4:b0:d6:fd:01:54:a9:9f:0d:ad:0c: 6a:48:05:b0:0c:c1:4a:0b:ad:1a:42:04:3a:22:c8:5a:63:1b: 38:0e:af:64:d3:9a:12:14:e5:62:46:ac:88:67:cb:be:a1:fe: 9e:9c:26:d3:57:f6:bc:ad:f2:a1:5e:f2:5e:d7:42:e5:0e:5b: 4b:c8:1e:ef -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUIKHg0NBYYfK5XMsH+PNDpGtHBDMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjExRTVDOUI0RTMyMjQ2MEZENzAxMzg3RjI1QjlFQUVG RTY3QzNFQzAeFw0yNTEyMDExODA1NDFaFw0yNTEyMDUwNDE2NDFaMDMxMTAvBgNV BAMTKEExNTRGMDRGRjczNTdFMkZBNzREMTA1QkE5RTZFRjM1MzJBNkVCRTYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+fRWSTPZrEU/0pSxLUyTF378J Iti90MrHsiVp0dwxeD1Byjy7wIN0XMCyNpAyYGF2j9SOO8LPILXrGJ3zgezJWTlP He7pUOPwZdb48Bc2K31clMJZ4zb3XqtmxTqc+qpIpWSVstODCCAUlPnJoraw8kcE MkS5xeG/u93+knjG/UtO+vQ5TSFjv0N3Ty6L1WTAJaHaLF1NxKGgnIYapO06cZaT 7OF2HVfz/++vO3I75+KPKk2+83PvsLQoX+UZ0bndoevl14gNZMTymmljfF8o8H/Z r6Vn0ZMEZgRIPMtUA+2Wi5rfaEN+hAokwtZPAspJ4T58eAb1zYLfLX+YV2O9AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUoVTwT/c1fi+nTRBbqebvNTKm6+YwHwYDVR0j BBgwFoAUsR5cm04yJGD9cBOH8luerv5nw+wwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y ZDQ4NzM2MC04NzM1LTQxZDctOTdhOC1kYmIzNGQ3OWVmZjQvMC9CMTFFNUM5QjRF MzIyNDYwRkQ3MDEzODdGMjVCOUVBRUZFNjdDM0VDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQjExRTVDOUI0RTMyMjQ2MEZENzAxMzg3RjI1QjlFQUVGRTY3 QzNFQy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMmQ0ODczNjAtODczNS00MWQ3LTk3 YTgtZGJiMzRkNzllZmY0LzAvQjExRTVDOUI0RTMyMjQ2MEZENzAxMzg3RjI1QjlF QUVGRTY3QzNFQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGBpGy8eVpOCPFp0LGbGYoj3mL25LIrAhIxj 9t3m6A57rEhdzgNslXc9B4xGo0arN+MZvqQYn7ZnwgOqL7IL8eNKspH4s5Z8dFgB nqVRDozcFjBfAIvR9/4buYQyMNHJiSzBdhqIO+zhIWYuWSVOyUQ0FFHLiqCLC5Ql 3Hk3mMZ1fWyuxYXYBCmdjOXL+pT/npxyceOWXLplGAh425dzAekNZA/xTMzteg8D R5rcSp7iBnYxMavk/GC+S9rEsNb9AVSpnw2tDGpIBbAMwUoLrRpCBDoiyFpjGzgO r2TTmhIU5WJGrIhny76h/p6cJtNX9ryt8qFe8l7XQuUOW0vIHu8= -----END CERTIFICATE-----Generated at Wed Dec 3 14:13:28 2025 by rpki-client