This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/f77eccff-ce9b-41da-b98a-abcfe49253af/0/11D0290B4630192458231FFEA93A463483E71D15.mft
File:                     11D0290B4630192458231FFEA93A463483E71D15.mft (raw, json)
Hash identifier:          n8VkFF/zxhNmsWQ9xDdgGuOVVhy4PsxcqsTMzWp2gk0=
Subject key identifier:   86:9A:92:D7:B9:09:47:98:32:6F:8F:BF:5E:45:45:E7:0D:CA:35:A1
Authority key identifier: 11:D0:29:0B:46:30:19:24:58:23:1F:FE:A9:3A:46:34:83:E7:1D:15
Certificate issuer:       /CN=11D0290B4630192458231FFEA93A463483E71D15
Certificate serial:       0115DF6A371BC41537C4D898C128CB42EF6950A7
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/11D0290B4630192458231FFEA93A463483E71D15.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/f77eccff-ce9b-41da-b98a-abcfe49253af/0/11D0290B4630192458231FFEA93A463483E71D15.mft
Manifest number:          01D6
Signing time:             Wed 17 Dec 2025 00:02:12 +0000
Manifest this update:     Tue 16 Dec 2025 23:57:12 +0000
Manifest next update:     Sat 20 Dec 2025 03:32:12 +0000
Files and hashes:         1: 3130332e38322e39322e302f32332d3234203d3e20313336303532.roa (hash: u+vUasuo+Igy3NmWXga5XKWPQhhkbM5VIPkZA+eRxSc=)
                          2: 11D0290B4630192458231FFEA93A463483E71D15.crl (hash: K2wHgyljXRF4BHs8OGZI1ynS9gexu590GkTM2bUqW7w=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/f77eccff-ce9b-41da-b98a-abcfe49253af/0/11D0290B4630192458231FFEA93A463483E71D15.crl
                          rsync://repo-rpki.idnic.net/repo/f77eccff-ce9b-41da-b98a-abcfe49253af/0/11D0290B4630192458231FFEA93A463483E71D15.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/11D0290B4630192458231FFEA93A463483E71D15.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 20 Dec 2025 03:32:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:15:df:6a:37:1b:c4:15:37:c4:d8:98:c1:28:cb:42:ef:69:50:a7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11D0290B4630192458231FFEA93A463483E71D15
        Validity
            Not Before: Dec 16 23:57:12 2025 GMT
            Not After : Dec 20 03:32:12 2025 GMT
        Subject: CN=869A92D7B9094798326F8FBF5E4545E70DCA35A1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:f6:ae:c1:2e:d9:a7:e5:4e:f1:ca:fb:64:62:
                    85:ec:52:49:34:fe:d4:97:0a:7d:e7:54:0a:08:78:
                    39:55:c8:bb:80:bb:aa:0e:36:f2:4a:df:97:8e:bb:
                    5b:14:46:3e:3c:29:2a:34:21:4f:cb:35:f3:f6:be:
                    ba:1a:21:ec:13:f7:43:b1:d8:65:ec:e3:77:8b:10:
                    68:28:97:17:35:46:ef:a5:75:bf:4e:f1:69:a7:b1:
                    db:4a:ed:59:37:e2:a1:90:05:c4:b0:3f:75:d8:46:
                    c1:4b:84:3a:0b:5d:22:43:f8:c5:be:1f:ab:f7:22:
                    b9:3d:b7:7c:e0:ab:88:4a:f7:80:d6:22:0f:82:0f:
                    8f:73:0b:1e:3a:a0:8c:62:6a:b0:0f:f3:b6:b2:9c:
                    7f:d5:a8:80:01:f8:14:fc:36:66:a5:48:24:7d:e2:
                    a0:fe:24:3f:6f:ac:fa:3e:dd:cc:5f:4c:68:57:85:
                    88:3b:23:47:e3:1f:a2:5a:67:44:de:20:1e:50:9d:
                    71:2d:8c:95:ae:12:a1:93:e1:c1:09:1a:ee:16:dd:
                    b1:3f:27:ea:e7:2a:18:6d:1d:fe:df:2c:df:0e:bd:
                    78:b7:45:73:aa:d5:46:8d:80:f1:1f:de:d7:9d:cf:
                    01:42:fd:fc:d3:71:60:a6:85:40:00:5a:58:46:e0:
                    01:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:9A:92:D7:B9:09:47:98:32:6F:8F:BF:5E:45:45:E7:0D:CA:35:A1
            X509v3 Authority Key Identifier:
                keyid:11:D0:29:0B:46:30:19:24:58:23:1F:FE:A9:3A:46:34:83:E7:1D:15

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/f77eccff-ce9b-41da-b98a-abcfe49253af/0/11D0290B4630192458231FFEA93A463483E71D15.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/11D0290B4630192458231FFEA93A463483E71D15.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f77eccff-ce9b-41da-b98a-abcfe49253af/0/11D0290B4630192458231FFEA93A463483E71D15.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         09:60:39:6b:62:6d:29:50:5e:c7:89:31:75:4d:b2:5b:7c:03:
         74:05:98:21:80:46:97:15:17:74:0e:04:c5:9f:9e:44:05:67:
         a4:e9:67:20:f3:9f:ee:ee:b2:ed:bd:d0:fc:73:7b:b4:e9:94:
         65:f2:c8:d7:18:dc:e7:a1:de:72:1f:f3:ea:18:90:71:3b:e4:
         9d:65:6e:a6:57:6c:4c:a0:08:ac:d9:53:b2:81:ea:9f:64:64:
         58:d6:a9:47:9a:ca:27:63:b7:3e:4d:16:da:73:e1:ef:54:6c:
         e5:e9:c0:6e:70:2a:6c:e5:72:1b:18:8d:48:58:fa:c3:cd:ac:
         cd:90:79:0e:53:81:f4:77:80:eb:e9:97:29:28:42:71:a3:d0:
         e4:55:46:24:85:2a:9a:75:e0:b4:dd:b1:b1:81:09:fa:42:83:
         00:ec:aa:20:95:6b:ab:c7:70:98:b6:82:c4:0c:ec:1f:87:b7:
         16:66:a4:e5:b7:d9:d4:7b:06:84:7e:76:b3:3c:7a:f9:ee:56:
         4c:f1:a1:27:d9:33:91:5b:d5:9f:d9:87:62:47:d9:16:2d:1e:
         f1:c3:20:a9:68:91:0f:b7:1d:c0:a1:f7:0e:6e:6c:bf:aa:de:
         db:0f:0e:a1:86:78:e6:3c:36:f7:59:1b:20:69:21:74:c6:eb:
         f0:36:69:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Dec 18 15:44:43 2025 by rpki-client