This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/3e87f1d1-06fb-436b-9ce6-92daa29f1f9b/0/1811CB623E9BFFB82945CA39C74C4C274914837F.mft File: 1811CB623E9BFFB82945CA39C74C4C274914837F.mft (raw, json) Hash identifier: VVpADCstE84Yn8y+FzXf9nBoX7tbRSy4R4i2dMvIvvM= Subject key identifier: 62:FD:19:50:21:CA:D2:8B:2A:6F:A1:73:AD:9A:A1:75:F7:B7:24:47 Authority key identifier: 18:11:CB:62:3E:9B:FF:B8:29:45:CA:39:C7:4C:4C:27:49:14:83:7F Certificate issuer: /CN=1811CB623E9BFFB82945CA39C74C4C274914837F Certificate serial: 5DC32B3B59D9614A1A80DC8A1B3ABA8B9ED85706 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1811CB623E9BFFB82945CA39C74C4C274914837F.cer Subject info access: rsync://repo-rpki.idnic.net/repo/3e87f1d1-06fb-436b-9ce6-92daa29f1f9b/0/1811CB623E9BFFB82945CA39C74C4C274914837F.mft Manifest number: 02F0 Signing time: Thu 18 Dec 2025 04:30:52 +0000 Manifest this update: Thu 18 Dec 2025 04:25:52 +0000 Manifest next update: Sun 21 Dec 2025 10:34:52 +0000 Files and hashes: 1: 1811CB623E9BFFB82945CA39C74C4C274914837F.crl (hash: pkY1JkjITeieRsIkxpvtzYBkjA5hJIabAA91Fq0r4eM=) 2: 3130332e3137372e39362e302f32332d3234203d3e20313331313131.roa (hash: IWu36PgrlbrIyJKi1yWtOTjXE0y4uzUHTwZcjUqTWx8=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/3e87f1d1-06fb-436b-9ce6-92daa29f1f9b/0/1811CB623E9BFFB82945CA39C74C4C274914837F.crl rsync://repo-rpki.idnic.net/repo/3e87f1d1-06fb-436b-9ce6-92daa29f1f9b/0/1811CB623E9BFFB82945CA39C74C4C274914837F.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1811CB623E9BFFB82945CA39C74C4C274914837F.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 21 Dec 2025 10:34:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5d:c3:2b:3b:59:d9:61:4a:1a:80:dc:8a:1b:3a:ba:8b:9e:d8:57:06 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1811CB623E9BFFB82945CA39C74C4C274914837F Validity Not Before: Dec 18 04:25:52 2025 GMT Not After : Dec 21 10:34:52 2025 GMT Subject: CN=62FD195021CAD28B2A6FA173AD9AA175F7B72447 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:0d:3f:35:3a:30:a6:f2:79:74:9d:cd:6a:4c: 99:b4:f0:41:94:23:42:21:95:b8:d9:3e:9f:b6:ca: 69:44:08:fa:bb:83:c7:f2:9b:92:70:40:12:16:2f: 15:c0:2a:ce:22:6e:7e:a5:d4:84:92:30:03:d7:72: 7d:a8:55:7d:f4:f6:8e:79:7f:44:c0:90:6a:eb:ac: 64:4e:e7:c1:d8:4b:f6:cc:00:25:33:da:2d:ce:98: fe:a9:a6:ac:b1:d7:ee:22:94:bd:60:f0:9a:b5:75: 7a:e7:89:e9:a5:d3:82:e4:d9:f7:b6:6e:0c:32:16: a8:22:62:93:55:e8:e8:36:4b:df:96:70:2a:23:01: f1:59:59:9c:5c:2a:33:2a:9b:83:fd:97:03:c7:bd: be:56:73:70:bf:e5:9b:b8:25:74:81:32:fd:ce:eb: 25:77:61:09:d4:66:52:fa:e1:56:c7:e8:37:90:38: 24:48:b0:97:69:b4:de:32:b8:5c:6d:39:5a:f0:54: e2:23:dc:d1:d3:86:8e:e2:ae:9c:82:0f:b3:e1:ff: 65:fa:a8:45:88:a0:29:6b:79:1a:9c:a9:b6:4d:0c: 1d:22:c2:e0:78:14:76:a3:c0:84:eb:5c:64:c5:b8: c7:00:44:d0:e6:d4:cf:e4:9a:4a:e8:10:c8:6f:63: 0e:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 62:FD:19:50:21:CA:D2:8B:2A:6F:A1:73:AD:9A:A1:75:F7:B7:24:47 X509v3 Authority Key Identifier: keyid:18:11:CB:62:3E:9B:FF:B8:29:45:CA:39:C7:4C:4C:27:49:14:83:7F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/3e87f1d1-06fb-436b-9ce6-92daa29f1f9b/0/1811CB623E9BFFB82945CA39C74C4C274914837F.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1811CB623E9BFFB82945CA39C74C4C274914837F.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3e87f1d1-06fb-436b-9ce6-92daa29f1f9b/0/1811CB623E9BFFB82945CA39C74C4C274914837F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5a:15:36:40:94:61:ac:26:08:83:b8:43:b4:e8:9d:27:95:b0: 21:0a:6d:68:fe:f5:fb:a8:93:68:fa:68:1d:86:73:a3:45:e8: c8:54:99:8d:d7:22:31:c9:f7:97:14:40:8b:a6:83:2b:a9:a4: cb:da:6f:a4:54:b5:ca:73:3c:a5:a6:f9:5d:a7:91:60:76:ea: da:48:c4:c1:92:bc:9e:55:fc:e7:0d:1f:86:21:fe:f9:96:99: c2:40:ed:b9:6a:06:37:af:10:0b:bf:e7:15:98:51:84:81:0f: f8:3e:f3:74:a9:c5:bd:5f:b1:d3:cb:91:36:6c:0b:d3:68:44: a7:e7:4b:10:99:db:01:0d:5c:a1:e2:16:81:d0:ed:c0:3a:91: c6:6e:02:dd:35:82:a0:5f:c8:d8:0c:91:be:01:b2:18:37:d9: 6f:f3:a5:a2:84:82:29:71:76:19:16:a8:18:2c:e3:3b:fb:fa: 71:7a:be:a4:de:f2:80:cc:5a:b6:b2:b6:ea:f2:f7:71:45:18: 20:13:e8:4b:be:dd:79:3b:0c:a7:19:04:57:c6:99:a6:12:0e: d9:11:0b:6f:c2:f9:ba:08:86:62:78:29:d0:bd:95:5b:10:88: ce:04:31:50:44:4b:98:60:3d:70:e6:37:99:a5:c3:7e:d9:66: e0:7e:1a:c9 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUXcMrO1nZYUoagNyKGzq6i57YVwYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTgxMUNCNjIzRTlCRkZCODI5NDVDQTM5Qzc0QzRDMjc0 OTE0ODM3RjAeFw0yNTEyMTgwNDI1NTJaFw0yNTEyMjExMDM0NTJaMDMxMTAvBgNV BAMTKDYyRkQxOTUwMjFDQUQyOEIyQTZGQTE3M0FEOUFBMTc1RjdCNzI0NDcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDODT81OjCm8nl0nc1qTJm08EGU I0IhlbjZPp+2ymlECPq7g8fym5JwQBIWLxXAKs4ibn6l1ISSMAPXcn2oVX309o55 f0TAkGrrrGRO58HYS/bMACUz2i3OmP6ppqyx1+4ilL1g8Jq1dXrnieml04Lk2fe2 bgwyFqgiYpNV6Og2S9+WcCojAfFZWZxcKjMqm4P9lwPHvb5Wc3C/5Zu4JXSBMv3O 6yV3YQnUZlL64VbH6DeQOCRIsJdptN4yuFxtOVrwVOIj3NHTho7irpyCD7Ph/2X6 qEWIoClreRqcqbZNDB0iwuB4FHajwITrXGTFuMcARNDm1M/kmkroEMhvYw53AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUYv0ZUCHK0osqb6FzrZqhdfe3JEcwHwYDVR0j BBgwFoAUGBHLYj6b/7gpRco5x0xMJ0kUg38wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z ZTg3ZjFkMS0wNmZiLTQzNmItOWNlNi05MmRhYTI5ZjFmOWIvMC8xODExQ0I2MjNF OUJGRkI4Mjk0NUNBMzlDNzRDNEMyNzQ5MTQ4MzdGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMTgxMUNCNjIzRTlCRkZCODI5NDVDQTM5Qzc0QzRDMjc0OTE0 ODM3Ri5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vM2U4N2YxZDEtMDZmYi00MzZiLTlj ZTYtOTJkYWEyOWYxZjliLzAvMTgxMUNCNjIzRTlCRkZCODI5NDVDQTM5Qzc0QzRD Mjc0OTE0ODM3Ri5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFoVNkCUYawmCIO4Q7TonSeVsCEKbWj+9fuo k2j6aB2Gc6NF6MhUmY3XIjHJ95cUQIumgyuppMvab6RUtcpzPKWm+V2nkWB26tpI xMGSvJ5V/OcNH4Yh/vmWmcJA7blqBjevEAu/5xWYUYSBD/g+83Spxb1fsdPLkTZs C9NoRKfnSxCZ2wENXKHiFoHQ7cA6kcZuAt01gqBfyNgMkb4Bshg32W/zpaKEgilx dhkWqBgs4zv7+nF6vqTe8oDMWraytury93FFGCAT6Eu+3Xk7DKcZBFfGmaYSDtkR C2/C+boIhmJ4KdC9lVsQiM4EMVBES5hgPXDmN5mlw37ZZuB+Gsk= -----END CERTIFICATE-----Generated at Thu Dec 18 09:56:52 2025 by rpki-client