This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/f7cc5ffa-5f62-44e5-8fe2-ee8750f2221d/0/E511E1480615E7AFC915B8E0430D70CA0B31D0F0.mft File: E511E1480615E7AFC915B8E0430D70CA0B31D0F0.mft (raw, json) Hash identifier: qc3upUBekiYub0Xa1UYGTh9ymXfp8VtL7fU2W2Mi7WU= Subject key identifier: 12:77:3A:BA:B5:6A:97:50:29:C1:53:08:C1:EF:82:DD:A8:2C:A7:5C Authority key identifier: E5:11:E1:48:06:15:E7:AF:C9:15:B8:E0:43:0D:70:CA:0B:31:D0:F0 Certificate issuer: /CN=E511E1480615E7AFC915B8E0430D70CA0B31D0F0 Certificate serial: 648126BE2C66815BCE5F6F6A983390543DF0416F Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E511E1480615E7AFC915B8E0430D70CA0B31D0F0.cer Subject info access: rsync://repo-rpki.idnic.net/repo/f7cc5ffa-5f62-44e5-8fe2-ee8750f2221d/0/E511E1480615E7AFC915B8E0430D70CA0B31D0F0.mft Manifest number: 0529 Signing time: Mon 01 Dec 2025 15:30:42 +0000 Manifest this update: Mon 01 Dec 2025 15:25:42 +0000 Manifest next update: Fri 05 Dec 2025 01:46:42 +0000 Files and hashes: 1: 3130332e35312e34342e302f32322d3234203d3e20313333383139.roa (hash: SXrkhdImUQOOYfFjSDTXHsQonvkd7MTnrISJrdKtg94=) 2: E511E1480615E7AFC915B8E0430D70CA0B31D0F0.crl (hash: mXVa0K2A0CeM6JliLMB7/A8M6wrESsLlEByFWSIdN9U=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/f7cc5ffa-5f62-44e5-8fe2-ee8750f2221d/0/E511E1480615E7AFC915B8E0430D70CA0B31D0F0.crl rsync://repo-rpki.idnic.net/repo/f7cc5ffa-5f62-44e5-8fe2-ee8750f2221d/0/E511E1480615E7AFC915B8E0430D70CA0B31D0F0.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E511E1480615E7AFC915B8E0430D70CA0B31D0F0.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 05 Dec 2025 01:46:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 64:81:26:be:2c:66:81:5b:ce:5f:6f:6a:98:33:90:54:3d:f0:41:6f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E511E1480615E7AFC915B8E0430D70CA0B31D0F0 Validity Not Before: Dec 1 15:25:42 2025 GMT Not After : Dec 5 01:46:42 2025 GMT Subject: CN=12773ABAB56A975029C15308C1EF82DDA82CA75C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:84:57:0d:fc:ac:e3:f3:16:c1:a8:a5:97:1f: ad:3c:6d:d7:17:ea:d3:27:dd:79:9c:12:0c:28:4d: b6:d0:13:95:f3:eb:53:e7:d6:52:55:45:95:d7:c2: 57:19:26:ab:49:49:62:73:bd:a6:b2:75:a1:07:b1: 97:82:ba:da:9d:09:73:66:bb:2b:e0:0f:4a:b3:59: e9:6f:75:e3:c2:69:d8:4b:9a:d1:5f:11:1c:70:0c: 84:cc:ba:81:88:98:73:19:26:9f:17:c8:25:ef:fc: fa:33:c0:24:b0:15:cb:f7:b6:07:f6:e8:94:6b:8d: a7:fd:43:a5:bb:71:56:49:4a:53:9d:da:d0:6e:3d: 72:6e:ee:0e:a3:ce:dc:e8:0e:74:08:9e:02:bd:b1: b5:4b:3a:37:ca:4b:1d:6b:40:6d:60:5c:ea:8c:b6: c4:44:82:3b:0a:16:de:21:53:b0:16:aa:77:88:f1: 9c:80:bf:28:2a:4b:09:7b:d6:49:96:78:94:fa:f4: 86:0a:b5:ae:88:ce:5d:d9:f8:cf:71:9b:bc:73:e0: b6:42:69:d9:72:8d:68:aa:23:19:15:65:6e:43:b7: 01:6f:cb:5c:bc:bd:e1:5a:50:e2:b2:16:1e:43:32: 30:fa:06:65:e1:48:55:10:6f:05:94:d5:30:d7:89: 82:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:77:3A:BA:B5:6A:97:50:29:C1:53:08:C1:EF:82:DD:A8:2C:A7:5C X509v3 Authority Key Identifier: keyid:E5:11:E1:48:06:15:E7:AF:C9:15:B8:E0:43:0D:70:CA:0B:31:D0:F0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/f7cc5ffa-5f62-44e5-8fe2-ee8750f2221d/0/E511E1480615E7AFC915B8E0430D70CA0B31D0F0.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E511E1480615E7AFC915B8E0430D70CA0B31D0F0.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f7cc5ffa-5f62-44e5-8fe2-ee8750f2221d/0/E511E1480615E7AFC915B8E0430D70CA0B31D0F0.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6e:41:3a:f1:fe:88:01:b9:72:0d:ba:cc:73:79:27:10:ec:15: 4b:b2:60:19:a9:ce:89:50:01:17:8a:5c:5d:f7:0f:1c:f3:24: 7d:58:6b:f0:b9:9c:5d:e6:43:91:c7:19:a1:cb:f7:9a:08:f1: dc:29:5b:e1:1c:d6:68:3c:96:06:6a:a7:c8:d2:b0:eb:13:1f: 02:9d:49:50:59:98:fd:93:cf:0d:d6:fd:02:dc:5b:e0:3b:e4: 1b:08:86:59:2f:b7:5b:a2:d3:1a:fd:e8:41:0f:b1:6a:ab:1f: db:42:c4:19:af:b6:17:9d:bc:ef:bc:27:61:4e:03:4d:28:2f: 86:98:36:8d:91:9c:e4:cf:de:66:ce:80:fd:d8:64:b2:10:ba: ce:9b:f2:86:24:b1:22:bc:bd:62:6f:cb:d1:5f:f1:47:de:78: af:f7:d8:dc:25:d4:0a:1f:e8:19:1c:4e:0c:08:73:ca:a0:e4: 87:fb:5b:4d:0b:6b:9e:76:f2:69:4c:08:6e:1a:19:c0:87:dd: 8d:80:c5:b6:07:7f:35:56:95:f2:8d:84:8e:2a:9a:01:f3:86: a2:11:b6:b5:04:92:fd:9b:39:60:10:af:7e:c8:36:42:aa:35: 3b:95:ff:e9:59:c0:c7:d7:f8:99:3a:40:07:bb:e6:f9:43:30: 88:35:f3:b5 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUZIEmvixmgVvOX29qmDOQVD3wQW8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRTUxMUUxNDgwNjE1RTdBRkM5MTVCOEUwNDMwRDcwQ0Ew QjMxRDBGMDAeFw0yNTEyMDExNTI1NDJaFw0yNTEyMDUwMTQ2NDJaMDMxMTAvBgNV BAMTKDEyNzczQUJBQjU2QTk3NTAyOUMxNTMwOEMxRUY4MkREQTgyQ0E3NUMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+hFcN/Kzj8xbBqKWXH608bdcX 6tMn3XmcEgwoTbbQE5Xz61Pn1lJVRZXXwlcZJqtJSWJzvaaydaEHsZeCutqdCXNm uyvgD0qzWelvdePCadhLmtFfERxwDITMuoGImHMZJp8XyCXv/PozwCSwFcv3tgf2 6JRrjaf9Q6W7cVZJSlOd2tBuPXJu7g6jztzoDnQIngK9sbVLOjfKSx1rQG1gXOqM tsREgjsKFt4hU7AWqneI8ZyAvygqSwl71kmWeJT69IYKta6Izl3Z+M9xm7xz4LZC adlyjWiqIxkVZW5DtwFvy1y8veFaUOKyFh5DMjD6BmXhSFUQbwWU1TDXiYJrAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUEnc6urVql1ApwVMIwe+C3agsp1wwHwYDVR0j BBgwFoAU5RHhSAYV56/JFbjgQw1wygsx0PAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m N2NjNWZmYS01ZjYyLTQ0ZTUtOGZlMi1lZTg3NTBmMjIyMWQvMC9FNTExRTE0ODA2 MTVFN0FGQzkxNUI4RTA0MzBENzBDQTBCMzFEMEYwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRTUxMUUxNDgwNjE1RTdBRkM5MTVCOEUwNDMwRDcwQ0EwQjMx RDBGMC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZjdjYzVmZmEtNWY2Mi00NGU1LThm ZTItZWU4NzUwZjIyMjFkLzAvRTUxMUUxNDgwNjE1RTdBRkM5MTVCOEUwNDMwRDcw Q0EwQjMxRDBGMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAG5BOvH+iAG5cg26zHN5JxDsFUuyYBmpzolQ AReKXF33DxzzJH1Ya/C5nF3mQ5HHGaHL95oI8dwpW+Ec1mg8lgZqp8jSsOsTHwKd SVBZmP2Tzw3W/QLcW+A75BsIhlkvt1ui0xr96EEPsWqrH9tCxBmvthedvO+8J2FO A00oL4aYNo2RnOTP3mbOgP3YZLIQus6b8oYksSK8vWJvy9Ff8UfeeK/32Nwl1Aof 6BkcTgwIc8qg5If7W00La5528mlMCG4aGcCH3Y2AxbYHfzVWlfKNhI4qmgHzhqIR trUEkv2bOWAQr37INkKqNTuV/+lZwMfX+Jk6QAe75vlDMIg187U= -----END CERTIFICATE-----Generated at Wed Dec 3 16:08:28 2025 by rpki-client