This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/7467ec33-5a72-4c65-9fd3-66ef8479394d/0/1154D920B6A4209131871530AEE1F8B8A3D303D6.mft File: 1154D920B6A4209131871530AEE1F8B8A3D303D6.mft (raw, json) Hash identifier: wHObLOL0IcqcUsHpU7DjXxw15wQe9P9jX0uhqrzI95k= Subject key identifier: 87:9B:09:E7:63:29:6C:E6:76:E0:7D:D6:5F:07:97:98:3B:71:BF:3C Authority key identifier: 11:54:D9:20:B6:A4:20:91:31:87:15:30:AE:E1:F8:B8:A3:D3:03:D6 Certificate issuer: /CN=1154D920B6A4209131871530AEE1F8B8A3D303D6 Certificate serial: 60FEEB4AF120A197F8E6A997ACCAAC45BCE09536 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1154D920B6A4209131871530AEE1F8B8A3D303D6.cer Subject info access: rsync://repo-rpki.idnic.net/repo/7467ec33-5a72-4c65-9fd3-66ef8479394d/0/1154D920B6A4209131871530AEE1F8B8A3D303D6.mft Manifest number: 022B Signing time: Fri 05 Dec 2025 12:11:11 +0000 Manifest this update: Fri 05 Dec 2025 12:06:11 +0000 Manifest next update: Mon 08 Dec 2025 14:46:11 +0000 Files and hashes: 1: 3130332e3138382e3234392e302f32342d3234203d3e20313439393038.roa (hash: Pil6JjAZAhk6oGR6yVNwjzUnJBqxVVzN/QVFAe7clnM=) 2: 1154D920B6A4209131871530AEE1F8B8A3D303D6.crl (hash: +LJ69PcBaaJ9RrfU3s9fOoQH/bkPPvHu1aolLSE4fDw=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/7467ec33-5a72-4c65-9fd3-66ef8479394d/0/1154D920B6A4209131871530AEE1F8B8A3D303D6.crl rsync://repo-rpki.idnic.net/repo/7467ec33-5a72-4c65-9fd3-66ef8479394d/0/1154D920B6A4209131871530AEE1F8B8A3D303D6.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1154D920B6A4209131871530AEE1F8B8A3D303D6.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 08 Dec 2025 14:46:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 60:fe:eb:4a:f1:20:a1:97:f8:e6:a9:97:ac:ca:ac:45:bc:e0:95:36 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1154D920B6A4209131871530AEE1F8B8A3D303D6 Validity Not Before: Dec 5 12:06:11 2025 GMT Not After : Dec 8 14:46:11 2025 GMT Subject: CN=879B09E763296CE676E07DD65F0797983B71BF3C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:a3:df:7b:05:4b:fa:68:f4:d2:7a:59:99:3f: 82:0d:3e:87:42:cc:3d:fc:3f:a8:71:f5:3c:5f:9e: f0:1e:87:22:c1:be:84:51:cf:22:f7:b1:e1:d9:72: fc:54:66:7d:4f:34:87:92:3a:0e:d3:32:42:10:30: 86:0e:ba:dd:98:7a:36:19:06:b4:74:b5:ce:d1:2e: aa:7a:5c:8e:a0:30:4f:dd:4f:88:a2:6c:5d:4a:83: 96:fb:8f:b7:92:b7:90:04:88:f6:d7:20:ca:d3:bc: 98:62:03:e4:4d:4c:44:95:91:aa:35:8e:b7:1a:f2: 0f:84:3d:da:ca:43:ed:93:76:c9:7d:2b:8b:57:a2: 31:65:85:0e:cd:7f:ce:28:f8:4c:51:ab:d6:83:d0: f9:4b:53:86:b7:ef:2b:5f:3d:a3:0b:ab:75:96:5b: f8:1c:93:cc:23:82:10:52:4e:cb:5e:26:f0:50:d8: 31:2b:22:c7:ee:40:4b:59:fe:b5:37:7a:64:3b:13: ff:17:09:ca:63:d0:76:9b:d3:55:6c:38:61:b7:0c: 04:20:f7:e3:27:b3:63:93:a8:0a:6e:c8:35:8b:37: 89:63:6e:14:53:0c:66:eb:38:2b:52:cd:f5:51:f5: 7d:0c:1f:54:e0:7f:e1:ef:05:68:94:bb:93:47:aa: 05:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:9B:09:E7:63:29:6C:E6:76:E0:7D:D6:5F:07:97:98:3B:71:BF:3C X509v3 Authority Key Identifier: keyid:11:54:D9:20:B6:A4:20:91:31:87:15:30:AE:E1:F8:B8:A3:D3:03:D6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/7467ec33-5a72-4c65-9fd3-66ef8479394d/0/1154D920B6A4209131871530AEE1F8B8A3D303D6.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1154D920B6A4209131871530AEE1F8B8A3D303D6.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7467ec33-5a72-4c65-9fd3-66ef8479394d/0/1154D920B6A4209131871530AEE1F8B8A3D303D6.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 87:c3:27:a4:35:6f:b7:bd:54:6a:31:96:29:a1:f8:a5:d1:52: 5e:05:3e:d1:3d:38:1c:56:39:43:37:a2:e4:1d:9c:f5:47:fa: 16:c2:6a:93:1f:6c:03:b6:a2:2d:ab:ac:b3:12:e4:c9:36:b1: ed:22:1b:de:35:37:39:20:31:61:8d:e7:0c:8e:2f:bb:54:1e: be:47:99:ec:47:5a:f2:e3:35:50:04:3d:3c:26:6c:f4:57:ea: ff:38:d7:93:3c:a5:b4:c9:35:51:00:3c:2f:11:3b:63:fd:9c: 47:f3:6c:5b:70:ca:2e:71:58:8c:0a:e5:02:3b:2f:ab:ee:64: b9:57:0f:08:9f:b2:dd:3e:9b:3a:3d:b6:53:b4:a0:10:d5:a5: d2:c1:cd:2e:6e:24:1f:d9:07:33:c4:92:f8:bd:8c:7c:3b:7d: 5c:0c:f3:1b:6c:47:60:7d:47:33:f7:5e:dd:20:ee:55:23:33: a1:29:d7:19:5a:2f:9d:17:db:51:cb:17:d8:a2:23:52:9c:34: 9f:50:d8:21:9c:1b:c7:90:10:fe:28:b5:aa:27:9f:5f:e5:27: e4:bc:42:d9:c5:e3:3e:d5:cb:80:19:91:18:e1:52:46:d8:63: d6:bf:da:8c:42:f8:fb:23:e1:b2:16:2a:b0:90:8e:e5:ec:6e: 98:5e:78:be -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUYP7rSvEgoZf45qmXrMqsRbzglTYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTE1NEQ5MjBCNkE0MjA5MTMxODcxNTMwQUVFMUY4QjhB M0QzMDNENjAeFw0yNTEyMDUxMjA2MTFaFw0yNTEyMDgxNDQ2MTFaMDMxMTAvBgNV BAMTKDg3OUIwOUU3NjMyOTZDRTY3NkUwN0RENjVGMDc5Nzk4M0I3MUJGM0MwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDjo997BUv6aPTSelmZP4INPodC zD38P6hx9TxfnvAehyLBvoRRzyL3seHZcvxUZn1PNIeSOg7TMkIQMIYOut2YejYZ BrR0tc7RLqp6XI6gME/dT4iibF1Kg5b7j7eSt5AEiPbXIMrTvJhiA+RNTESVkao1 jrca8g+EPdrKQ+2Tdsl9K4tXojFlhQ7Nf84o+ExRq9aD0PlLU4a37ytfPaMLq3WW W/gck8wjghBSTsteJvBQ2DErIsfuQEtZ/rU3emQ7E/8XCcpj0Hab01VsOGG3DAQg 9+Mns2OTqApuyDWLN4ljbhRTDGbrOCtSzfVR9X0MH1Tgf+HvBWiUu5NHqgV5AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUh5sJ52MpbOZ24H3WXweXmDtxvzwwHwYDVR0j BBgwFoAUEVTZILakIJExhxUwruH4uKPTA9YwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 NDY3ZWMzMy01YTcyLTRjNjUtOWZkMy02NmVmODQ3OTM5NGQvMC8xMTU0RDkyMEI2 QTQyMDkxMzE4NzE1MzBBRUUxRjhCOEEzRDMwM0Q2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMTE1NEQ5MjBCNkE0MjA5MTMxODcxNTMwQUVFMUY4QjhBM0Qz MDNENi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNzQ2N2VjMzMtNWE3Mi00YzY1LTlm ZDMtNjZlZjg0NzkzOTRkLzAvMTE1NEQ5MjBCNkE0MjA5MTMxODcxNTMwQUVFMUY4 QjhBM0QzMDNENi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIfDJ6Q1b7e9VGoxlimh+KXRUl4FPtE9OBxW OUM3ouQdnPVH+hbCapMfbAO2oi2rrLMS5Mk2se0iG941NzkgMWGN5wyOL7tUHr5H mexHWvLjNVAEPTwmbPRX6v8415M8pbTJNVEAPC8RO2P9nEfzbFtwyi5xWIwK5QI7 L6vuZLlXDwifst0+mzo9tlO0oBDVpdLBzS5uJB/ZBzPEkvi9jHw7fVwM8xtsR2B9 RzP3Xt0g7lUjM6Ep1xlaL50X21HLF9iiI1KcNJ9Q2CGcG8eQEP4otaonn1/lJ+S8 QtnF4z7Vy4AZkRjhUkbYY9a/2oxC+Psj4bIWKrCQjuXsbpheeL4= -----END CERTIFICATE-----Generated at Sun Dec 7 05:20:05 2025 by rpki-client