This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/dabce71e-4ee4-4590-94fb-37ffd9f0d6b7/0/11489A5805B7FE2710AE32C3077C3450579D1288.mft File: 11489A5805B7FE2710AE32C3077C3450579D1288.mft (raw, json) Hash identifier: bduWu6AsPxlA292iIXMEE2mtZIDt1pLZL7PGcV26a40= Subject key identifier: F9:F8:EA:D0:54:5F:4D:62:52:30:D1:D7:AB:5F:84:AC:88:D9:58:6B Authority key identifier: 11:48:9A:58:05:B7:FE:27:10:AE:32:C3:07:7C:34:50:57:9D:12:88 Certificate issuer: /CN=11489A5805B7FE2710AE32C3077C3450579D1288 Certificate serial: 5F8F00B2B863F101F5E1E9C49526A0D003BF3028 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/11489A5805B7FE2710AE32C3077C3450579D1288.cer Subject info access: rsync://repo-rpki.idnic.net/repo/dabce71e-4ee4-4590-94fb-37ffd9f0d6b7/0/11489A5805B7FE2710AE32C3077C3450579D1288.mft Manifest number: 013C Signing time: Tue 02 Dec 2025 11:32:09 +0000 Manifest this update: Tue 02 Dec 2025 11:27:09 +0000 Manifest next update: Fri 05 Dec 2025 19:47:09 +0000 Files and hashes: 1: 3130332e3131332e32362e302f32342d3234203d3e20313337333339.roa (hash: 96bScFlvdzCB0qXA/HCwI1sZDRYZx3jWpR+NJxZy45w=) 2: 11489A5805B7FE2710AE32C3077C3450579D1288.crl (hash: 8oe94UbUGXLccJuPNc8TsI6YPu/sbzW021bS2hlsvd4=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/dabce71e-4ee4-4590-94fb-37ffd9f0d6b7/0/11489A5805B7FE2710AE32C3077C3450579D1288.crl rsync://repo-rpki.idnic.net/repo/dabce71e-4ee4-4590-94fb-37ffd9f0d6b7/0/11489A5805B7FE2710AE32C3077C3450579D1288.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/11489A5805B7FE2710AE32C3077C3450579D1288.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 05 Dec 2025 19:47:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5f:8f:00:b2:b8:63:f1:01:f5:e1:e9:c4:95:26:a0:d0:03:bf:30:28 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=11489A5805B7FE2710AE32C3077C3450579D1288 Validity Not Before: Dec 2 11:27:09 2025 GMT Not After : Dec 5 19:47:09 2025 GMT Subject: CN=F9F8EAD0545F4D625230D1D7AB5F84AC88D9586B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:55:9b:83:c2:fb:1f:44:57:64:76:76:cd:71: e0:be:2b:91:c2:52:29:a3:8e:ef:b6:d2:8c:a7:17: 22:a7:69:63:9f:c8:cb:89:b4:86:24:52:0e:6a:4d: 51:16:62:51:94:c5:6c:70:f2:f4:1a:6e:5d:17:c9: 71:35:23:4b:9b:d6:11:26:ff:4f:2b:e5:92:9b:55: a0:73:f2:ad:44:8b:6f:02:dc:16:b8:3b:62:6f:29: f2:fa:45:38:45:65:71:b3:da:b5:0a:31:2c:4c:48: 31:ba:5b:62:32:69:13:2b:b0:2c:c2:8f:42:61:82: 7c:a9:05:8e:85:5a:c2:f1:e3:e7:4c:ff:4f:bb:ae: e2:eb:5d:53:5a:13:38:ad:4f:3b:47:4d:3c:82:97: 6c:ac:21:73:e0:0c:83:d1:5a:ac:07:1a:86:bd:4e: c4:c2:dd:75:0d:20:4f:ef:4f:e0:91:72:46:30:0c: 83:68:d6:92:10:42:97:62:90:b8:91:59:04:af:39: 08:ad:58:13:0c:27:14:f0:de:47:2b:af:6c:d1:78: be:3c:d0:4c:54:2d:e8:d9:42:b9:65:88:dc:f5:45: 81:6f:e0:be:43:2c:75:f6:83:44:bd:19:6a:f9:38: 06:f1:04:72:54:2b:85:85:ef:39:d3:ff:84:a3:45: 73:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F9:F8:EA:D0:54:5F:4D:62:52:30:D1:D7:AB:5F:84:AC:88:D9:58:6B X509v3 Authority Key Identifier: keyid:11:48:9A:58:05:B7:FE:27:10:AE:32:C3:07:7C:34:50:57:9D:12:88 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/dabce71e-4ee4-4590-94fb-37ffd9f0d6b7/0/11489A5805B7FE2710AE32C3077C3450579D1288.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/11489A5805B7FE2710AE32C3077C3450579D1288.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/dabce71e-4ee4-4590-94fb-37ffd9f0d6b7/0/11489A5805B7FE2710AE32C3077C3450579D1288.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8c:0a:e9:3e:7b:25:71:57:44:2b:db:97:23:04:14:cd:02:51: d2:eb:0b:e1:5a:31:d4:88:19:66:0d:91:60:d2:56:22:15:83: 12:9b:23:ba:cf:36:02:4f:dd:ef:b5:1b:8a:11:fc:64:7a:d9: eb:a9:f1:23:b5:48:85:0b:99:34:96:e8:31:01:e7:fb:fa:4e: 28:f1:95:e9:6b:68:52:b9:65:b4:41:10:25:73:ef:61:8d:58: a8:af:e2:74:41:d9:3b:62:78:53:d8:81:4e:33:a3:a0:06:e9: 02:8a:2c:87:b1:32:c9:69:ee:81:17:41:dd:c7:1b:63:77:68: 9d:da:da:0e:53:8a:3c:3f:c6:7f:44:0c:fe:80:2a:a0:02:e3: ea:09:80:4c:dc:fa:ce:8e:4a:48:90:2e:6a:39:d2:10:e8:46: 54:f6:17:63:1d:38:65:f5:b5:1b:da:a1:ef:e5:6f:25:11:3d: 2c:92:67:56:a6:7d:42:c6:66:4a:37:a2:44:d6:26:f4:b7:57: 25:b5:a4:7e:77:47:a7:bb:d0:cf:44:df:e0:47:12:1f:51:33: c8:ae:69:b9:48:3d:d0:b4:57:db:34:cf:e7:6b:0d:a5:ef:25: 46:8e:91:61:94:2a:25:d0:26:6a:1a:4f:8d:c7:f3:9b:3b:f0: ac:52:d1:06 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUX48Asrhj8QH14enElSag0AO/MCgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTE0ODlBNTgwNUI3RkUyNzEwQUUzMkMzMDc3QzM0NTA1 NzlEMTI4ODAeFw0yNTEyMDIxMTI3MDlaFw0yNTEyMDUxOTQ3MDlaMDMxMTAvBgNV BAMTKEY5RjhFQUQwNTQ1RjRENjI1MjMwRDFEN0FCNUY4NEFDODhEOTU4NkIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+VZuDwvsfRFdkdnbNceC+K5HC Uimjju+20oynFyKnaWOfyMuJtIYkUg5qTVEWYlGUxWxw8vQabl0XyXE1I0ub1hEm /08r5ZKbVaBz8q1Ei28C3Ba4O2JvKfL6RThFZXGz2rUKMSxMSDG6W2IyaRMrsCzC j0JhgnypBY6FWsLx4+dM/0+7ruLrXVNaEzitTztHTTyCl2ysIXPgDIPRWqwHGoa9 TsTC3XUNIE/vT+CRckYwDINo1pIQQpdikLiRWQSvOQitWBMMJxTw3kcrr2zReL48 0ExULejZQrlliNz1RYFv4L5DLHX2g0S9GWr5OAbxBHJUK4WF7znT/4SjRXOLAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU+fjq0FRfTWJSMNHXq1+ErIjZWGswHwYDVR0j BBgwFoAUEUiaWAW3/icQrjLDB3w0UFedEogwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k YWJjZTcxZS00ZWU0LTQ1OTAtOTRmYi0zN2ZmZDlmMGQ2YjcvMC8xMTQ4OUE1ODA1 QjdGRTI3MTBBRTMyQzMwNzdDMzQ1MDU3OUQxMjg4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMTE0ODlBNTgwNUI3RkUyNzEwQUUzMkMzMDc3QzM0NTA1NzlE MTI4OC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZGFiY2U3MWUtNGVlNC00NTkwLTk0 ZmItMzdmZmQ5ZjBkNmI3LzAvMTE0ODlBNTgwNUI3RkUyNzEwQUUzMkMzMDc3QzM0 NTA1NzlEMTI4OC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIwK6T57JXFXRCvblyMEFM0CUdLrC+FaMdSI GWYNkWDSViIVgxKbI7rPNgJP3e+1G4oR/GR62eup8SO1SIULmTSW6DEB5/v6Tijx lelraFK5ZbRBECVz72GNWKiv4nRB2TtieFPYgU4zo6AG6QKKLIexMslp7oEXQd3H G2N3aJ3a2g5Tijw/xn9EDP6AKqAC4+oJgEzc+s6OSkiQLmo50hDoRlT2F2MdOGX1 tRvaoe/lbyURPSySZ1amfULGZko3okTWJvS3VyW1pH53R6e70M9E3+BHEh9RM8iu ablIPdC0V9s0z+drDaXvJUaOkWGUKiXQJmoaT43H85s78KxS0QY= -----END CERTIFICATE-----Generated at Wed Dec 3 16:21:00 2025 by rpki-client