This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/46a84de5-61d1-4618-9fb4-43f631a1289a/0/B911D34F2E80140D63AE02F4CBE719E7D972C6F6.mft File: B911D34F2E80140D63AE02F4CBE719E7D972C6F6.mft (raw, json) Hash identifier: PFixXHstqyR5X47OxILPnE2Oim8S071F9Sz/DXG9k2k= Subject key identifier: 84:96:9A:0A:69:66:F0:16:59:F1:0B:7F:5C:77:DA:E0:3C:87:13:E2 Authority key identifier: B9:11:D3:4F:2E:80:14:0D:63:AE:02:F4:CB:E7:19:E7:D9:72:C6:F6 Certificate issuer: /CN=B911D34F2E80140D63AE02F4CBE719E7D972C6F6 Certificate serial: 5A615F2C6EF9BD45B172659416470D34375491EA Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B911D34F2E80140D63AE02F4CBE719E7D972C6F6.cer Subject info access: rsync://repo-rpki.idnic.net/repo/46a84de5-61d1-4618-9fb4-43f631a1289a/0/B911D34F2E80140D63AE02F4CBE719E7D972C6F6.mft Manifest number: E2 Signing time: Sat 06 Dec 2025 00:31:15 +0000 Manifest this update: Sat 06 Dec 2025 00:26:15 +0000 Manifest next update: Tue 09 Dec 2025 10:00:15 +0000 Files and hashes: 1: 3130332e3135302e32322e302f32342d3234203d3e20313430333938.roa (hash: obby+PvQrLWYC3NU3QI0xYtZDC2hJcWlETHv+KWDEWM=) 2: B911D34F2E80140D63AE02F4CBE719E7D972C6F6.crl (hash: A/Cwlr0YEY3EMM0P8eMVw7LghpNAi2+s4LQzqCFDhDE=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/46a84de5-61d1-4618-9fb4-43f631a1289a/0/B911D34F2E80140D63AE02F4CBE719E7D972C6F6.crl rsync://repo-rpki.idnic.net/repo/46a84de5-61d1-4618-9fb4-43f631a1289a/0/B911D34F2E80140D63AE02F4CBE719E7D972C6F6.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B911D34F2E80140D63AE02F4CBE719E7D972C6F6.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 09 Dec 2025 10:00:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5a:61:5f:2c:6e:f9:bd:45:b1:72:65:94:16:47:0d:34:37:54:91:ea Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B911D34F2E80140D63AE02F4CBE719E7D972C6F6 Validity Not Before: Dec 6 00:26:15 2025 GMT Not After : Dec 9 10:00:15 2025 GMT Subject: CN=84969A0A6966F01659F10B7F5C77DAE03C8713E2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:08:cc:dc:87:45:57:c5:5f:ad:bb:66:2a:19: 6b:46:3c:8d:bb:46:39:30:54:87:03:d0:74:ba:ed: 71:0d:12:19:53:76:bd:42:f0:e6:60:49:8d:70:8e: 56:62:db:66:6b:d2:f5:bb:b3:57:a6:e1:c1:47:e6: de:db:85:a0:7f:f4:a5:1f:97:bc:82:83:35:b1:6b: 58:fd:17:5d:67:44:3e:bd:af:1e:a0:89:f9:a4:f4: eb:f7:89:e9:f7:38:db:ee:d8:a2:54:09:3c:96:f9: 67:2e:4b:83:6e:06:5e:ae:6f:67:d5:e6:2e:70:3c: 83:f8:10:01:3b:54:64:ca:eb:54:7e:9d:52:95:92: 0c:fd:ca:98:99:cc:64:c5:ea:3c:06:29:54:5b:40: a0:d7:36:c4:bc:be:d8:d4:35:66:5d:e2:2e:ae:5c: cd:5f:61:c3:38:f8:59:92:30:f8:49:69:1e:57:8c: 8f:fc:5b:7c:46:34:ad:b2:be:97:1a:c0:b2:5a:fe: f8:d0:dd:ac:46:5f:74:93:e5:32:49:4a:f8:0f:f1: dc:5a:4c:0f:16:dc:a7:be:8b:87:e3:db:9c:ce:00: 27:e0:9d:da:5f:da:9c:14:b8:05:6b:62:fa:fd:a7: d9:e1:24:a8:94:f4:44:16:ea:5d:ea:91:69:2b:19: 6e:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:96:9A:0A:69:66:F0:16:59:F1:0B:7F:5C:77:DA:E0:3C:87:13:E2 X509v3 Authority Key Identifier: keyid:B9:11:D3:4F:2E:80:14:0D:63:AE:02:F4:CB:E7:19:E7:D9:72:C6:F6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/46a84de5-61d1-4618-9fb4-43f631a1289a/0/B911D34F2E80140D63AE02F4CBE719E7D972C6F6.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B911D34F2E80140D63AE02F4CBE719E7D972C6F6.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/46a84de5-61d1-4618-9fb4-43f631a1289a/0/B911D34F2E80140D63AE02F4CBE719E7D972C6F6.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 43:77:34:0c:23:38:96:83:da:39:c5:b3:13:5e:16:e4:20:8a: 7d:75:34:ae:a7:67:bc:c9:ec:c1:c8:11:d8:38:81:63:1a:81: fb:6b:9d:a7:7b:16:69:51:bf:a6:d4:50:29:aa:d9:9a:98:37: 2a:78:93:5c:ea:a5:50:48:ae:c1:ca:40:fe:fd:4d:69:78:16: 58:8e:3f:e3:9e:42:79:4d:64:72:15:b2:f6:8a:73:f0:af:46: 4a:15:3f:2b:25:14:2b:6b:d3:30:b6:f0:25:cb:55:f6:4a:74: de:f8:55:25:67:45:fe:95:b6:af:ce:e4:a7:97:39:89:42:94: f8:98:43:d2:12:a0:e8:46:0c:4d:20:61:e2:a5:11:6c:3d:4d: 8a:a0:f2:db:ef:21:4c:d5:bb:85:26:71:2d:52:c3:fa:ed:43: 8b:dc:ce:ca:f7:4a:89:d8:58:ef:6c:be:06:58:08:9d:d6:00: 29:51:73:92:5b:6a:60:0f:ab:1b:a2:b1:88:53:5f:84:b7:ff: 89:b6:b1:de:f8:34:f5:5e:01:62:65:f3:f3:72:cc:ab:34:3f: b3:19:5c:b3:35:70:d3:27:31:53:6f:93:f0:34:90:3a:f4:3a: b0:f1:f6:52:8b:06:49:c2:83:5e:2e:3e:dd:f8:42:da:c7:d2: bf:1f:eb:7f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUWmFfLG75vUWxcmWUFkcNNDdUkeowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjkxMUQzNEYyRTgwMTQwRDYzQUUwMkY0Q0JFNzE5RTdE OTcyQzZGNjAeFw0yNTEyMDYwMDI2MTVaFw0yNTEyMDkxMDAwMTVaMDMxMTAvBgNV BAMTKDg0OTY5QTBBNjk2NkYwMTY1OUYxMEI3RjVDNzdEQUUwM0M4NzEzRTIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC8CMzch0VXxV+tu2YqGWtGPI27 RjkwVIcD0HS67XENEhlTdr1C8OZgSY1wjlZi22Zr0vW7s1em4cFH5t7bhaB/9KUf l7yCgzWxa1j9F11nRD69rx6gifmk9Ov3ien3ONvu2KJUCTyW+WcuS4NuBl6ub2fV 5i5wPIP4EAE7VGTK61R+nVKVkgz9ypiZzGTF6jwGKVRbQKDXNsS8vtjUNWZd4i6u XM1fYcM4+FmSMPhJaR5XjI/8W3xGNK2yvpcawLJa/vjQ3axGX3ST5TJJSvgP8dxa TA8W3Ke+i4fj25zOACfgndpf2pwUuAVrYvr9p9nhJKiU9EQW6l3qkWkrGW63AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUhJaaCmlm8BZZ8Qt/XHfa4DyHE+IwHwYDVR0j BBgwFoAUuRHTTy6AFA1jrgL0y+cZ59lyxvYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 NmE4NGRlNS02MWQxLTQ2MTgtOWZiNC00M2Y2MzFhMTI4OWEvMC9COTExRDM0RjJF ODAxNDBENjNBRTAyRjRDQkU3MTlFN0Q5NzJDNkY2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQjkxMUQzNEYyRTgwMTQwRDYzQUUwMkY0Q0JFNzE5RTdEOTcy QzZGNi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNDZhODRkZTUtNjFkMS00NjE4LTlm YjQtNDNmNjMxYTEyODlhLzAvQjkxMUQzNEYyRTgwMTQwRDYzQUUwMkY0Q0JFNzE5 RTdEOTcyQzZGNi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEN3NAwjOJaD2jnFsxNeFuQgin11NK6nZ7zJ 7MHIEdg4gWMagftrnad7FmlRv6bUUCmq2ZqYNyp4k1zqpVBIrsHKQP79TWl4FliO P+OeQnlNZHIVsvaKc/CvRkoVPyslFCtr0zC28CXLVfZKdN74VSVnRf6Vtq/O5KeX OYlClPiYQ9ISoOhGDE0gYeKlEWw9TYqg8tvvIUzVu4UmcS1Sw/rtQ4vczsr3SonY WO9svgZYCJ3WAClRc5JbamAPqxuisYhTX4S3/4m2sd74NPVeAWJl8/NyzKs0P7MZ XLM1cNMnMVNvk/A0kDr0OrDx9lKLBknCg14uPt34QtrH0r8f638= -----END CERTIFICATE-----Generated at Sun Dec 7 04:57:49 2025 by rpki-client