This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/5fb808eb-c98e-4036-be9a-193bbcc64892/1/11A839F5FB6B345FB1586C56F146C0D80026AB7E.mft File: 11A839F5FB6B345FB1586C56F146C0D80026AB7E.mft (raw, json) Hash identifier: 0Qu0QJRQlBd6w8Pb7QEl/idVzHKMhfEF4HSV/Tr8VHg= Subject key identifier: 00:E1:34:49:68:8B:F6:B2:0D:05:DB:EA:F4:AD:76:D5:60:FE:BE:30 Authority key identifier: 11:A8:39:F5:FB:6B:34:5F:B1:58:6C:56:F1:46:C0:D8:00:26:AB:7E Certificate issuer: /CN=11A839F5FB6B345FB1586C56F146C0D80026AB7E Certificate serial: 0DC6B84D027495D8D86A259004509B0079F9F1CA Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/11A839F5FB6B345FB1586C56F146C0D80026AB7E.cer Subject info access: rsync://repo-rpki.idnic.net/repo/5fb808eb-c98e-4036-be9a-193bbcc64892/1/11A839F5FB6B345FB1586C56F146C0D80026AB7E.mft Manifest number: F5 Signing time: Tue 02 Dec 2025 02:10:55 +0000 Manifest this update: Tue 02 Dec 2025 02:05:55 +0000 Manifest next update: Fri 05 Dec 2025 06:15:55 +0000 Files and hashes: 1: 11A839F5FB6B345FB1586C56F146C0D80026AB7E.crl (hash: Fe2cGdJNz3Xki0uNJGHnk5jXIR3Q9UsGfxARQLBbN4M=) 2: 323030313a6466333a633234303a3a2f34382d3438203d3e20313532343430.roa (hash: 2T9LVqRaEUG/PyNEPNkJKeM+yCzpYg+aQeXewlr7el8=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/5fb808eb-c98e-4036-be9a-193bbcc64892/1/11A839F5FB6B345FB1586C56F146C0D80026AB7E.crl rsync://repo-rpki.idnic.net/repo/5fb808eb-c98e-4036-be9a-193bbcc64892/1/11A839F5FB6B345FB1586C56F146C0D80026AB7E.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/11A839F5FB6B345FB1586C56F146C0D80026AB7E.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 05 Dec 2025 06:15:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0d:c6:b8:4d:02:74:95:d8:d8:6a:25:90:04:50:9b:00:79:f9:f1:ca Signature Algorithm: sha256WithRSAEncryption Issuer: CN=11A839F5FB6B345FB1586C56F146C0D80026AB7E Validity Not Before: Dec 2 02:05:55 2025 GMT Not After : Dec 5 06:15:55 2025 GMT Subject: CN=00E13449688BF6B20D05DBEAF4AD76D560FEBE30 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:94:88:5f:86:5a:e4:31:d3:cb:f4:7f:06:76: 47:2c:e6:e0:b9:ec:a2:05:db:c1:81:0c:77:ef:ad: 40:c5:1b:23:68:16:ac:c2:62:2b:0e:7c:b3:f1:71: c5:36:ea:66:ce:26:15:6e:54:50:5a:d8:32:76:2f: 40:61:e0:10:88:6a:6b:eb:10:b9:67:62:e9:4e:00: 8a:58:ab:d5:8c:80:1b:fb:b4:52:31:4f:61:b4:eb: f2:f4:47:01:43:d3:fa:46:72:ce:c5:91:ad:ff:f4: 62:e1:68:88:92:38:dc:a8:b6:4e:0f:72:5c:83:9f: c8:2c:b9:9f:b0:90:fc:bb:96:6f:f2:89:ad:ac:59: 1d:a5:e1:76:65:28:82:7b:d9:8f:c2:72:c1:92:08: 43:70:ec:3f:2f:05:6e:ed:1d:4b:f3:32:14:cf:a8: 54:e3:83:76:e5:2b:8a:6f:c0:7d:e8:5f:60:23:f0: 3e:55:ba:c5:bb:e9:84:d8:e5:72:6f:80:02:44:2e: ce:ce:7b:03:fa:1b:13:67:39:e7:24:b9:3c:f5:64: 71:82:1d:b7:a5:04:3f:35:6a:b4:5a:d2:4b:36:67: c0:b9:73:0e:30:97:db:0f:4a:0e:d4:36:4f:ab:32: 37:76:0f:fb:ea:eb:3a:d4:f2:77:2b:78:8a:11:a9: 8c:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:E1:34:49:68:8B:F6:B2:0D:05:DB:EA:F4:AD:76:D5:60:FE:BE:30 X509v3 Authority Key Identifier: keyid:11:A8:39:F5:FB:6B:34:5F:B1:58:6C:56:F1:46:C0:D8:00:26:AB:7E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/5fb808eb-c98e-4036-be9a-193bbcc64892/1/11A839F5FB6B345FB1586C56F146C0D80026AB7E.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/11A839F5FB6B345FB1586C56F146C0D80026AB7E.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/5fb808eb-c98e-4036-be9a-193bbcc64892/1/11A839F5FB6B345FB1586C56F146C0D80026AB7E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3d:10:e4:68:da:2b:0d:d4:bf:6e:d2:35:bb:fa:38:73:67:33: 93:f1:e6:6b:ab:79:00:5f:ac:8e:bd:05:42:16:3a:53:b6:80: 5c:21:2f:cf:5b:c5:60:4e:c1:47:bc:22:fb:b4:d6:52:50:c8: db:f2:ee:69:e6:a0:55:14:55:4c:5b:3e:3f:c6:d1:a2:ad:6a: 9e:8b:fc:04:44:eb:80:7d:6d:4e:83:36:6e:4b:a5:f4:70:ea: 5c:e2:4a:03:7c:4f:36:e1:73:a9:9d:ab:c9:9f:d0:0d:2d:1d: fa:79:42:0c:b3:c6:1e:1a:1c:ba:07:54:f5:32:da:cc:a7:a0: 98:a8:69:db:24:7f:e7:e5:16:1d:79:b9:6b:f3:57:c0:ff:52: ec:50:1c:8c:9d:4a:06:c2:7c:82:3a:b5:ca:cc:10:ca:4c:14: 1c:b3:84:8f:82:d1:25:e4:81:26:40:8e:c1:21:fd:61:e9:d0: 0d:af:a5:0b:c9:1f:11:59:6d:f4:ad:e7:8a:7f:85:b4:e3:c0: 9b:99:88:f9:90:36:eb:af:96:c1:0c:0d:98:0c:af:3a:f5:d6: 3d:29:80:27:b2:22:80:d3:22:82:fa:c0:45:cd:2d:bc:d2:88: d9:ca:1d:21:37:85:34:1d:e1:99:0e:fb:53:88:22:49:e7:40: 1d:de:b3:9b -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUDca4TQJ0ldjYaiWQBFCbAHn58cowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTFBODM5RjVGQjZCMzQ1RkIxNTg2QzU2RjE0NkMwRDgw MDI2QUI3RTAeFw0yNTEyMDIwMjA1NTVaFw0yNTEyMDUwNjE1NTVaMDMxMTAvBgNV BAMTKDAwRTEzNDQ5Njg4QkY2QjIwRDA1REJFQUY0QUQ3NkQ1NjBGRUJFMzAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDJlIhfhlrkMdPL9H8Gdkcs5uC5 7KIF28GBDHfvrUDFGyNoFqzCYisOfLPxccU26mbOJhVuVFBa2DJ2L0Bh4BCIamvr ELlnYulOAIpYq9WMgBv7tFIxT2G06/L0RwFD0/pGcs7Fka3/9GLhaIiSONyotk4P clyDn8gsuZ+wkPy7lm/yia2sWR2l4XZlKIJ72Y/CcsGSCENw7D8vBW7tHUvzMhTP qFTjg3blK4pvwH3oX2Aj8D5VusW76YTY5XJvgAJELs7OewP6GxNnOeckuTz1ZHGC HbelBD81arRa0ks2Z8C5cw4wl9sPSg7UNk+rMjd2D/vq6zrU8ncreIoRqYwhAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUAOE0SWiL9rINBdvq9K121WD+vjAwHwYDVR0j BBgwFoAUEag59ftrNF+xWGxW8UbA2AAmq34wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 ZmI4MDhlYi1jOThlLTQwMzYtYmU5YS0xOTNiYmNjNjQ4OTIvMS8xMUE4MzlGNUZC NkIzNDVGQjE1ODZDNTZGMTQ2QzBEODAwMjZBQjdFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMTFBODM5RjVGQjZCMzQ1RkIxNTg2QzU2RjE0NkMwRDgwMDI2 QUI3RS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNWZiODA4ZWItYzk4ZS00MDM2LWJl OWEtMTkzYmJjYzY0ODkyLzEvMTFBODM5RjVGQjZCMzQ1RkIxNTg2QzU2RjE0NkMw RDgwMDI2QUI3RS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAD0Q5GjaKw3Uv27SNbv6OHNnM5Px5mureQBf rI69BUIWOlO2gFwhL89bxWBOwUe8Ivu01lJQyNvy7mnmoFUUVUxbPj/G0aKtap6L /ARE64B9bU6DNm5LpfRw6lziSgN8Tzbhc6mdq8mf0A0tHfp5Qgyzxh4aHLoHVPUy 2synoJioadskf+flFh15uWvzV8D/UuxQHIydSgbCfII6tcrMEMpMFByzhI+C0SXk gSZAjsEh/WHp0A2vpQvJHxFZbfSt54p/hbTjwJuZiPmQNuuvlsEMDZgMrzr11j0p gCeyIoDTIoL6wEXNLbzSiNnKHSE3hTQd4ZkO+1OIIknnQB3es5s= -----END CERTIFICATE-----Generated at Wed Dec 3 14:44:23 2025 by rpki-client