This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/3e87f1d1-06fb-436b-9ce6-92daa29f1f9b/0/1811CB623E9BFFB82945CA39C74C4C274914837F.mft File: 1811CB623E9BFFB82945CA39C74C4C274914837F.mft (raw, json) Hash identifier: cVE81osSwxWo/YaI0oTVBDdqxkLTzqmpZm21uddpZXw= Subject key identifier: F3:EA:9A:8D:EE:A6:4B:C1:69:42:23:F2:48:56:2E:EC:36:13:40:08 Authority key identifier: 18:11:CB:62:3E:9B:FF:B8:29:45:CA:39:C7:4C:4C:27:49:14:83:7F Certificate issuer: /CN=1811CB623E9BFFB82945CA39C74C4C274914837F Certificate serial: 57C135C52A1E1A9E022646DA9EBED990B91C5601 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1811CB623E9BFFB82945CA39C74C4C274914837F.cer Subject info access: rsync://repo-rpki.idnic.net/repo/3e87f1d1-06fb-436b-9ce6-92daa29f1f9b/0/1811CB623E9BFFB82945CA39C74C4C274914837F.mft Manifest number: 02EA Signing time: Fri 05 Dec 2025 04:30:54 +0000 Manifest this update: Fri 05 Dec 2025 04:25:54 +0000 Manifest next update: Mon 08 Dec 2025 06:59:54 +0000 Files and hashes: 1: 1811CB623E9BFFB82945CA39C74C4C274914837F.crl (hash: MfrpeUeQlY7LqvlVQPIW663Eq9wAKbpA1VhVDuCNkDY=) 2: 3130332e3137372e39362e302f32332d3234203d3e20313331313131.roa (hash: IWu36PgrlbrIyJKi1yWtOTjXE0y4uzUHTwZcjUqTWx8=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/3e87f1d1-06fb-436b-9ce6-92daa29f1f9b/0/1811CB623E9BFFB82945CA39C74C4C274914837F.crl rsync://repo-rpki.idnic.net/repo/3e87f1d1-06fb-436b-9ce6-92daa29f1f9b/0/1811CB623E9BFFB82945CA39C74C4C274914837F.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1811CB623E9BFFB82945CA39C74C4C274914837F.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 08 Dec 2025 06:59:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 57:c1:35:c5:2a:1e:1a:9e:02:26:46:da:9e:be:d9:90:b9:1c:56:01 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1811CB623E9BFFB82945CA39C74C4C274914837F Validity Not Before: Dec 5 04:25:54 2025 GMT Not After : Dec 8 06:59:54 2025 GMT Subject: CN=F3EA9A8DEEA64BC1694223F248562EEC36134008 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:57:06:00:d4:eb:ce:8c:a8:c4:c3:c5:2a:b5: ea:cb:6c:8e:43:f1:b6:7b:db:d3:f0:59:87:d1:44: 45:0e:bb:26:3e:a2:fd:9c:f3:22:e2:9c:82:bd:99: 55:d1:fe:86:a3:21:29:2c:c1:84:a2:4a:e2:9f:1e: 6a:62:b2:f0:2c:9c:6a:a4:ca:ab:8d:07:42:92:72: 69:b3:e5:2b:fc:57:13:1e:c7:dc:3c:a0:a5:f2:cc: fe:45:6b:38:fa:13:db:e5:54:ee:57:2a:e2:b1:81: 42:35:74:69:9e:50:18:96:99:e5:b4:cd:1f:e5:c5: 74:34:36:32:07:3b:99:0d:0a:9b:8d:f3:16:42:76: 58:05:c2:2c:b4:b6:43:73:e0:59:3a:41:20:d6:44: 72:9c:ef:b3:7a:d7:70:cb:f2:8d:37:84:b7:24:41: 9d:ab:4e:00:88:90:8e:9f:a8:4a:51:15:f8:7f:f8: 23:9e:ec:27:07:e0:5e:49:8f:25:3a:7f:c2:92:2d: d8:3d:b6:4f:0e:86:ec:af:1c:8a:47:75:9f:63:59: 0e:99:32:84:9a:10:c7:bb:19:6e:17:2f:2e:39:e1: 3e:7c:d5:7d:3e:d9:d5:78:f3:c1:06:10:54:06:5a: 60:f3:d2:7b:25:31:42:0d:61:08:f4:52:a8:0b:ec: dd:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F3:EA:9A:8D:EE:A6:4B:C1:69:42:23:F2:48:56:2E:EC:36:13:40:08 X509v3 Authority Key Identifier: keyid:18:11:CB:62:3E:9B:FF:B8:29:45:CA:39:C7:4C:4C:27:49:14:83:7F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/3e87f1d1-06fb-436b-9ce6-92daa29f1f9b/0/1811CB623E9BFFB82945CA39C74C4C274914837F.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1811CB623E9BFFB82945CA39C74C4C274914837F.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3e87f1d1-06fb-436b-9ce6-92daa29f1f9b/0/1811CB623E9BFFB82945CA39C74C4C274914837F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ba:b0:6d:a4:80:8d:46:8a:22:84:ae:25:79:cb:e7:61:42:39: cf:98:b0:de:9e:b7:3f:ba:b1:5a:b3:14:88:32:0a:31:4c:c8: b2:42:94:5c:62:36:9e:f5:de:a3:bf:f6:a8:63:1c:64:50:24: ad:4b:86:d5:17:0f:92:6f:b4:17:ed:af:3f:70:38:07:11:a6: ae:7a:10:22:76:bd:bb:8c:0a:db:aa:72:6f:2c:36:92:1e:39: 00:2c:08:f2:b2:a3:c6:c8:0d:b1:20:81:7d:73:6a:33:6a:12: 6e:78:39:b0:84:4b:ee:09:f6:99:57:5e:20:f5:ea:99:08:17: 4d:bb:4a:dc:ff:c1:e9:30:bc:32:ce:ff:5d:4d:19:7c:10:bc: e3:98:fb:ac:c9:44:e7:a3:3e:a8:76:cd:15:05:ea:30:ce:39: de:26:fc:44:19:35:0d:a5:8d:aa:0d:6e:d6:b2:98:f4:b8:52: 17:3b:ab:ca:91:9c:1d:b6:e2:31:45:67:88:52:57:09:25:05: 6a:1b:07:bd:46:80:61:4b:86:03:10:30:f2:7a:87:2f:d1:02: a8:b9:0a:eb:38:87:f7:63:b2:bb:f9:25:74:b5:32:9c:fb:53: 02:aa:e4:a5:96:cd:ad:73:a3:26:0f:71:15:6a:18:8a:02:46: 10:0c:8d:22 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUV8E1xSoeGp4CJkbanr7ZkLkcVgEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTgxMUNCNjIzRTlCRkZCODI5NDVDQTM5Qzc0QzRDMjc0 OTE0ODM3RjAeFw0yNTEyMDUwNDI1NTRaFw0yNTEyMDgwNjU5NTRaMDMxMTAvBgNV BAMTKEYzRUE5QThERUVBNjRCQzE2OTQyMjNGMjQ4NTYyRUVDMzYxMzQwMDgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDEVwYA1OvOjKjEw8UqterLbI5D 8bZ729PwWYfRREUOuyY+ov2c8yLinIK9mVXR/oajISkswYSiSuKfHmpisvAsnGqk yquNB0KScmmz5Sv8VxMex9w8oKXyzP5Fazj6E9vlVO5XKuKxgUI1dGmeUBiWmeW0 zR/lxXQ0NjIHO5kNCpuN8xZCdlgFwiy0tkNz4Fk6QSDWRHKc77N613DL8o03hLck QZ2rTgCIkI6fqEpRFfh/+COe7CcH4F5JjyU6f8KSLdg9tk8OhuyvHIpHdZ9jWQ6Z MoSaEMe7GW4XLy454T581X0+2dV488EGEFQGWmDz0nslMUINYQj0UqgL7N0rAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU8+qaje6mS8FpQiPySFYu7DYTQAgwHwYDVR0j BBgwFoAUGBHLYj6b/7gpRco5x0xMJ0kUg38wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z ZTg3ZjFkMS0wNmZiLTQzNmItOWNlNi05MmRhYTI5ZjFmOWIvMC8xODExQ0I2MjNF OUJGRkI4Mjk0NUNBMzlDNzRDNEMyNzQ5MTQ4MzdGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMTgxMUNCNjIzRTlCRkZCODI5NDVDQTM5Qzc0QzRDMjc0OTE0 ODM3Ri5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vM2U4N2YxZDEtMDZmYi00MzZiLTlj ZTYtOTJkYWEyOWYxZjliLzAvMTgxMUNCNjIzRTlCRkZCODI5NDVDQTM5Qzc0QzRD Mjc0OTE0ODM3Ri5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALqwbaSAjUaKIoSuJXnL52FCOc+YsN6etz+6 sVqzFIgyCjFMyLJClFxiNp713qO/9qhjHGRQJK1LhtUXD5JvtBftrz9wOAcRpq56 ECJ2vbuMCtuqcm8sNpIeOQAsCPKyo8bIDbEggX1zajNqEm54ObCES+4J9plXXiD1 6pkIF027Stz/wekwvDLO/11NGXwQvOOY+6zJROejPqh2zRUF6jDOOd4m/EQZNQ2l jaoNbtaymPS4Uhc7q8qRnB224jFFZ4hSVwklBWobB71GgGFLhgMQMPJ6hy/RAqi5 Cus4h/djsrv5JXS1Mpz7UwKq5KWWza1zoyYPcRVqGIoCRhAMjSI= -----END CERTIFICATE-----Generated at Sat Dec 6 22:34:45 2025 by rpki-client