This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/11828067-e7c1-4964-8428-599033d74296/0/12A8210E6A91A93DDB92F594D7E47728131BC2DA.mft File: 12A8210E6A91A93DDB92F594D7E47728131BC2DA.mft (raw, json) Hash identifier: e//r3Z++UDy9mmqUF/hHMQHs/Whd281kQSSqZn0nC7w= Subject key identifier: F6:8A:82:43:5A:B8:4C:B1:E7:F2:8D:09:B9:7A:23:4D:A2:15:EC:B3 Authority key identifier: 12:A8:21:0E:6A:91:A9:3D:DB:92:F5:94:D7:E4:77:28:13:1B:C2:DA Certificate issuer: /CN=12A8210E6A91A93DDB92F594D7E47728131BC2DA Certificate serial: 0CDBD8ABECDFBEB681DCAC9317A4DD2E6580621C Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/12A8210E6A91A93DDB92F594D7E47728131BC2DA.cer Subject info access: rsync://repo-rpki.idnic.net/repo/11828067-e7c1-4964-8428-599033d74296/0/12A8210E6A91A93DDB92F594D7E47728131BC2DA.mft Manifest number: 0115 Signing time: Thu 04 Dec 2025 23:11:57 +0000 Manifest this update: Thu 04 Dec 2025 23:06:57 +0000 Manifest next update: Sun 07 Dec 2025 23:16:57 +0000 Files and hashes: 1: 12A8210E6A91A93DDB92F594D7E47728131BC2DA.crl (hash: hGlo/AcyVx1fwXqJwhN64Frouqky59xyys3K00GWWN8=) 2: 34352e3132332e3134332e302f32342d3234203d3e20343532303233.roa (hash: yFHqmwqtGwRHNbaKxqLyAMp6goM/26DKgEUgRO5CpWs=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/11828067-e7c1-4964-8428-599033d74296/0/12A8210E6A91A93DDB92F594D7E47728131BC2DA.crl rsync://repo-rpki.idnic.net/repo/11828067-e7c1-4964-8428-599033d74296/0/12A8210E6A91A93DDB92F594D7E47728131BC2DA.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/12A8210E6A91A93DDB92F594D7E47728131BC2DA.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 07 Dec 2025 23:16:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0c:db:d8:ab:ec:df:be:b6:81:dc:ac:93:17:a4:dd:2e:65:80:62:1c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=12A8210E6A91A93DDB92F594D7E47728131BC2DA Validity Not Before: Dec 4 23:06:57 2025 GMT Not After : Dec 7 23:16:57 2025 GMT Subject: CN=F68A82435AB84CB1E7F28D09B97A234DA215ECB3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:6a:85:dc:e3:a8:3a:df:65:9c:57:94:cd:ac: 18:b2:92:5e:2d:27:19:98:0f:ab:85:77:38:d1:9e: d4:1b:fb:8a:79:0a:cf:81:a2:e5:45:a1:44:bd:4e: 4d:6e:e9:d9:42:8f:82:af:64:d1:c8:b4:39:1c:f0: b1:e5:c8:cd:fd:27:83:fe:72:d0:df:b3:32:19:61: d9:70:c6:eb:81:41:7f:b6:61:ac:07:7a:17:1f:e3: 70:a9:79:a7:6c:c4:c1:14:d8:fe:e1:3f:1e:72:99: 55:7f:7f:49:e9:ea:c5:c5:54:88:1a:cd:df:91:e5: 67:9b:69:46:4a:75:ec:26:32:de:63:13:6c:a9:60: ea:fd:83:40:b7:67:7a:c5:94:dc:a1:be:4b:e6:3a: 4d:ed:d7:d0:8b:0f:6c:cb:8c:e3:ba:9f:92:ad:25: e8:2f:e1:da:1d:79:99:48:de:c5:a2:62:f5:bc:98: a2:46:c4:95:d1:f5:45:0d:57:a9:31:00:f1:ee:51: 9f:3c:40:5a:0b:65:a9:a2:61:92:c2:1a:03:12:8f: 35:35:54:77:d8:64:99:de:b3:6b:64:4c:50:68:19: ab:b9:1d:73:0e:de:05:84:ee:44:c8:df:77:13:6b: a7:ac:0f:c5:16:87:00:29:63:71:3f:44:5e:bd:d2: 40:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F6:8A:82:43:5A:B8:4C:B1:E7:F2:8D:09:B9:7A:23:4D:A2:15:EC:B3 X509v3 Authority Key Identifier: keyid:12:A8:21:0E:6A:91:A9:3D:DB:92:F5:94:D7:E4:77:28:13:1B:C2:DA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/11828067-e7c1-4964-8428-599033d74296/0/12A8210E6A91A93DDB92F594D7E47728131BC2DA.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/12A8210E6A91A93DDB92F594D7E47728131BC2DA.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/11828067-e7c1-4964-8428-599033d74296/0/12A8210E6A91A93DDB92F594D7E47728131BC2DA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0c:cd:63:90:db:e9:91:af:17:cc:53:3f:89:94:01:f3:d7:86: 4d:2b:dd:ab:d8:35:cf:34:21:7b:37:88:08:9c:47:7b:c7:b7: bf:15:fb:de:fc:5e:af:58:ee:4f:b6:74:43:b4:9b:22:5c:49: 33:5b:de:23:e9:7f:72:e1:29:ef:5b:ed:df:0e:d5:29:bc:b0: fc:6f:3a:52:d2:61:b7:71:10:6b:22:63:21:80:3a:7b:53:35: 47:c9:81:1b:60:b5:27:2c:a1:2c:75:03:94:60:1c:8f:e0:03: a6:37:30:43:2c:8e:28:f3:7d:1b:93:68:12:1c:77:2c:b9:96: 66:c0:06:f4:02:3c:35:f0:df:4a:e6:84:f3:f4:83:ae:52:22: bb:56:b1:d2:ed:61:b3:46:91:0a:a9:51:ed:f6:85:24:f0:66: 8d:fa:8b:ed:18:e8:ea:d3:1b:d1:3a:a0:52:3e:0a:d2:68:17: 3c:29:35:02:7c:44:ef:aa:7f:cb:f8:62:d9:24:62:55:75:ba: 95:4c:ad:fb:21:2a:17:f1:dd:30:0e:da:a0:80:a0:b4:d7:07: 68:e9:b9:51:b0:0e:ff:97:34:f7:50:87:a8:ef:b8:e4:57:2e: e0:9a:4b:f2:5e:75:0e:58:f9:cc:41:e6:82:df:3e:19:63:d8: 6e:e9:1d:fe -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUDNvYq+zfvraB3KyTF6TdLmWAYhwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTJBODIxMEU2QTkxQTkzRERCOTJGNTk0RDdFNDc3Mjgx MzFCQzJEQTAeFw0yNTEyMDQyMzA2NTdaFw0yNTEyMDcyMzE2NTdaMDMxMTAvBgNV BAMTKEY2OEE4MjQzNUFCODRDQjFFN0YyOEQwOUI5N0EyMzREQTIxNUVDQjMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCtaoXc46g632WcV5TNrBiykl4t JxmYD6uFdzjRntQb+4p5Cs+BouVFoUS9Tk1u6dlCj4KvZNHItDkc8LHlyM39J4P+ ctDfszIZYdlwxuuBQX+2YawHehcf43CpeadsxMEU2P7hPx5ymVV/f0np6sXFVIga zd+R5WebaUZKdewmMt5jE2ypYOr9g0C3Z3rFlNyhvkvmOk3t19CLD2zLjOO6n5Kt Jegv4dodeZlI3sWiYvW8mKJGxJXR9UUNV6kxAPHuUZ88QFoLZamiYZLCGgMSjzU1 VHfYZJnes2tkTFBoGau5HXMO3gWE7kTI33cTa6esD8UWhwApY3E/RF690kAZAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU9oqCQ1q4TLHn8o0JuXojTaIV7LMwHwYDVR0j BBgwFoAUEqghDmqRqT3bkvWU1+R3KBMbwtowDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x MTgyODA2Ny1lN2MxLTQ5NjQtODQyOC01OTkwMzNkNzQyOTYvMC8xMkE4MjEwRTZB OTFBOTNEREI5MkY1OTREN0U0NzcyODEzMUJDMkRBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMTJBODIxMEU2QTkxQTkzRERCOTJGNTk0RDdFNDc3MjgxMzFC QzJEQS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMTE4MjgwNjctZTdjMS00OTY0LTg0 MjgtNTk5MDMzZDc0Mjk2LzAvMTJBODIxMEU2QTkxQTkzRERCOTJGNTk0RDdFNDc3 MjgxMzFCQzJEQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAzNY5Db6ZGvF8xTP4mUAfPXhk0r3avYNc80 IXs3iAicR3vHt78V+978Xq9Y7k+2dEO0myJcSTNb3iPpf3LhKe9b7d8O1Sm8sPxv OlLSYbdxEGsiYyGAOntTNUfJgRtgtScsoSx1A5RgHI/gA6Y3MEMsjijzfRuTaBIc dyy5lmbABvQCPDXw30rmhPP0g65SIrtWsdLtYbNGkQqpUe32hSTwZo36i+0Y6OrT G9E6oFI+CtJoFzwpNQJ8RO+qf8v4YtkkYlV1upVMrfshKhfx3TAO2qCAoLTXB2jp uVGwDv+XNPdQh6jvuORXLuCaS/JedQ5Y+cxB5oLfPhlj2G7pHf4= -----END CERTIFICATE-----Generated at Sat Dec 6 22:53:39 2025 by rpki-client