This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/5fb808eb-c98e-4036-be9a-193bbcc64892/1/11A839F5FB6B345FB1586C56F146C0D80026AB7E.mft
File:                     11A839F5FB6B345FB1586C56F146C0D80026AB7E.mft (raw, json)
Hash identifier:          NIulkTaff2kMNtZRChUQGLDA9xLPDxDTBqqrfTl52mo=
Subject key identifier:   0E:78:56:2D:7E:28:6D:02:B8:01:6C:70:0E:CE:42:5F:09:3C:4B:60
Authority key identifier: 11:A8:39:F5:FB:6B:34:5F:B1:58:6C:56:F1:46:C0:D8:00:26:AB:7E
Certificate issuer:       /CN=11A839F5FB6B345FB1586C56F146C0D80026AB7E
Certificate serial:       787C285289E07E8D0EB2A26BC54BC112A3BE7913
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/11A839F5FB6B345FB1586C56F146C0D80026AB7E.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/5fb808eb-c98e-4036-be9a-193bbcc64892/1/11A839F5FB6B345FB1586C56F146C0D80026AB7E.mft
Manifest number:          F7
Signing time:             Sat 06 Dec 2025 06:40:52 +0000
Manifest this update:     Sat 06 Dec 2025 06:35:52 +0000
Manifest next update:     Tue 09 Dec 2025 08:19:52 +0000
Files and hashes:         1: 11A839F5FB6B345FB1586C56F146C0D80026AB7E.crl (hash: 4VMFkCf6ymtkjd3FiY4Y41n+dcT5Ck2yDyrD1e0fS88=)
                          2: 323030313a6466333a633234303a3a2f34382d3438203d3e20313532343430.roa (hash: 2T9LVqRaEUG/PyNEPNkJKeM+yCzpYg+aQeXewlr7el8=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/5fb808eb-c98e-4036-be9a-193bbcc64892/1/11A839F5FB6B345FB1586C56F146C0D80026AB7E.crl
                          rsync://repo-rpki.idnic.net/repo/5fb808eb-c98e-4036-be9a-193bbcc64892/1/11A839F5FB6B345FB1586C56F146C0D80026AB7E.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/11A839F5FB6B345FB1586C56F146C0D80026AB7E.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 09 Dec 2025 08:19:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            78:7c:28:52:89:e0:7e:8d:0e:b2:a2:6b:c5:4b:c1:12:a3:be:79:13
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11A839F5FB6B345FB1586C56F146C0D80026AB7E
        Validity
            Not Before: Dec  6 06:35:52 2025 GMT
            Not After : Dec  9 08:19:52 2025 GMT
        Subject: CN=0E78562D7E286D02B8016C700ECE425F093C4B60
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:0d:f6:37:85:13:2d:4d:e9:b1:d9:74:da:78:
                    01:24:3b:03:b1:46:72:75:9d:b6:8b:b9:b3:22:62:
                    97:30:9f:56:8b:53:1c:4e:88:36:c5:d0:fd:e6:c7:
                    54:d8:77:49:70:bb:1e:10:db:72:d7:4a:3e:ad:33:
                    d0:37:31:72:f8:74:1f:0a:97:ca:9f:66:69:19:ef:
                    3e:42:7f:e2:fe:17:a5:ac:a6:22:2f:38:00:1b:e5:
                    95:3d:6a:37:17:68:a5:2a:87:b5:be:90:56:1d:a6:
                    83:37:3b:34:2a:94:2f:ee:7c:3c:2a:82:0f:90:5c:
                    cd:b8:94:bd:c6:de:3c:a7:f9:61:d9:81:f4:10:53:
                    7f:7e:c1:0b:6d:26:a1:21:8d:27:44:9f:7f:6b:4d:
                    f8:d4:fd:eb:08:49:bc:7a:25:72:d7:d8:66:f4:c1:
                    24:2c:3a:47:b9:36:ef:1b:3b:36:33:b3:83:4c:66:
                    7b:bd:b6:e2:38:25:35:7c:bd:aa:5f:6c:4b:37:3c:
                    3b:32:9b:6b:17:81:5b:db:4f:f5:a9:cc:77:db:8b:
                    b5:0b:c2:9c:52:cc:35:d4:a7:40:6b:eb:bd:df:88:
                    72:e1:24:02:f9:21:9c:78:ac:2f:3e:43:01:c2:c9:
                    95:a7:3c:a9:f3:11:80:ea:da:73:b4:ec:9e:52:b2:
                    89:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:78:56:2D:7E:28:6D:02:B8:01:6C:70:0E:CE:42:5F:09:3C:4B:60
            X509v3 Authority Key Identifier:
                keyid:11:A8:39:F5:FB:6B:34:5F:B1:58:6C:56:F1:46:C0:D8:00:26:AB:7E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/5fb808eb-c98e-4036-be9a-193bbcc64892/1/11A839F5FB6B345FB1586C56F146C0D80026AB7E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/11A839F5FB6B345FB1586C56F146C0D80026AB7E.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/5fb808eb-c98e-4036-be9a-193bbcc64892/1/11A839F5FB6B345FB1586C56F146C0D80026AB7E.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b9:0f:1a:6c:91:73:8c:a9:1c:8a:36:32:fb:01:ae:26:1e:a8:
         59:26:e7:ed:b8:09:ec:c6:96:57:15:7e:33:c2:6a:90:4b:0a:
         13:82:f2:43:1f:2e:5e:e8:16:15:4c:1d:dd:2d:23:b9:a3:6c:
         c5:7d:b8:3a:30:ab:31:e0:42:87:5e:fe:fa:1b:91:a2:81:18:
         87:47:60:c5:8c:2d:2a:2d:75:30:fb:eb:fe:1a:e2:17:aa:1a:
         9b:6e:06:2a:5d:6e:8e:e8:58:09:fb:85:f3:27:93:da:07:2b:
         b3:b8:e3:ed:0c:35:ea:bb:f1:af:e9:c0:15:b0:3d:76:65:24:
         ba:bc:c3:6c:ba:be:76:f9:c6:bf:0d:73:cb:89:60:de:37:98:
         f7:1d:96:92:5f:50:1e:a3:c4:fd:a7:9c:02:fc:0a:bb:0b:87:
         bf:f6:4f:a5:ba:23:b4:e1:8f:17:c3:97:5f:6e:b3:9d:95:77:
         37:e5:27:41:e3:f8:f0:d6:c1:85:55:51:0e:1e:01:64:48:1e:
         ca:bf:6c:f8:1a:ca:1a:fb:a5:82:27:d1:ae:d6:40:42:5f:5d:
         95:6c:8d:f2:59:28:8b:3c:14:13:27:1b:8b:05:21:66:60:b9:
         ef:d2:e5:2c:21:12:32:58:83:b9:4f:23:4a:90:dc:5c:be:79:
         bc:d7:f0:6b
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUeHwoUongfo0OsqJrxUvBEqO+eRMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMTFBODM5RjVGQjZCMzQ1RkIxNTg2QzU2RjE0NkMwRDgw
MDI2QUI3RTAeFw0yNTEyMDYwNjM1NTJaFw0yNTEyMDkwODE5NTJaMDMxMTAvBgNV
BAMTKDBFNzg1NjJEN0UyODZEMDJCODAxNkM3MDBFQ0U0MjVGMDkzQzRCNjAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC4DfY3hRMtTemx2XTaeAEkOwOx
RnJ1nbaLubMiYpcwn1aLUxxOiDbF0P3mx1TYd0lwux4Q23LXSj6tM9A3MXL4dB8K
l8qfZmkZ7z5Cf+L+F6WspiIvOAAb5ZU9ajcXaKUqh7W+kFYdpoM3OzQqlC/ufDwq
gg+QXM24lL3G3jyn+WHZgfQQU39+wQttJqEhjSdEn39rTfjU/esISbx6JXLX2Gb0
wSQsOke5Nu8bOzYzs4NMZnu9tuI4JTV8vapfbEs3PDsym2sXgVvbT/WpzHfbi7UL
wpxSzDXUp0Br673fiHLhJAL5IZx4rC8+QwHCyZWnPKnzEYDq2nO07J5SsokFAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQUDnhWLX4obQK4AWxwDs5CXwk8S2AwHwYDVR0j
BBgwFoAUEag59ftrNF+xWGxW8UbA2AAmq34wDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81
ZmI4MDhlYi1jOThlLTQwMzYtYmU5YS0xOTNiYmNjNjQ4OTIvMS8xMUE4MzlGNUZC
NkIzNDVGQjE1ODZDNTZGMTQ2QzBEODAwMjZBQjdFLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvMTFBODM5RjVGQjZCMzQ1RkIxNTg2QzU2RjE0NkMwRDgwMDI2
QUI3RS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6
Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNWZiODA4ZWItYzk4ZS00MDM2LWJl
OWEtMTkzYmJjYzY0ODkyLzEvMTFBODM5RjVGQjZCMzQ1RkIxNTg2QzU2RjE0NkMw
RDgwMDI2QUI3RS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBALkPGmyRc4ypHIo2MvsBriYeqFkm5+24CezG
llcVfjPCapBLChOC8kMfLl7oFhVMHd0tI7mjbMV9uDowqzHgQode/vobkaKBGIdH
YMWMLSotdTD76/4a4heqGptuBipdbo7oWAn7hfMnk9oHK7O44+0MNeq78a/pwBWw
PXZlJLq8w2y6vnb5xr8Nc8uJYN43mPcdlpJfUB6jxP2nnAL8CrsLh7/2T6W6I7Th
jxfDl19us52VdzflJ0Hj+PDWwYVVUQ4eAWRIHsq/bPgayhr7pYIn0a7WQEJfXZVs
jfJZKIs8FBMnG4sFIWZgue/S5SwhEjJYg7lPI0qQ3Fy+ebzX8Gs=
-----END CERTIFICATE-----
Generated at Sun Dec 7 01:02:43 2025 by rpki-client