This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/f77eccff-ce9b-41da-b98a-abcfe49253af/0/11D0290B4630192458231FFEA93A463483E71D15.mft File: 11D0290B4630192458231FFEA93A463483E71D15.mft (raw, json) Hash identifier: pgJ5AiMqoqLsSKMFAqtdt1SeNYnFFtunpYAc0j/yKS8= Subject key identifier: A0:0B:F6:5B:76:44:A2:C4:08:31:69:97:06:53:DF:0A:FD:03:D5:97 Authority key identifier: 11:D0:29:0B:46:30:19:24:58:23:1F:FE:A9:3A:46:34:83:E7:1D:15 Certificate issuer: /CN=11D0290B4630192458231FFEA93A463483E71D15 Certificate serial: 2B9142F7BCC3646D3D111B7DF7548AB4029D18E9 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/11D0290B4630192458231FFEA93A463483E71D15.cer Subject info access: rsync://repo-rpki.idnic.net/repo/f77eccff-ce9b-41da-b98a-abcfe49253af/0/11D0290B4630192458231FFEA93A463483E71D15.mft Manifest number: 01D1 Signing time: Fri 05 Dec 2025 15:12:09 +0000 Manifest this update: Fri 05 Dec 2025 15:07:09 +0000 Manifest next update: Mon 08 Dec 2025 23:27:09 +0000 Files and hashes: 1: 3130332e38322e39322e302f32332d3234203d3e20313336303532.roa (hash: u+vUasuo+Igy3NmWXga5XKWPQhhkbM5VIPkZA+eRxSc=) 2: 11D0290B4630192458231FFEA93A463483E71D15.crl (hash: yiWwkhuQA68xCP4NRLBMedZrDGMPHJNiWtL9A11tHZA=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/f77eccff-ce9b-41da-b98a-abcfe49253af/0/11D0290B4630192458231FFEA93A463483E71D15.crl rsync://repo-rpki.idnic.net/repo/f77eccff-ce9b-41da-b98a-abcfe49253af/0/11D0290B4630192458231FFEA93A463483E71D15.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/11D0290B4630192458231FFEA93A463483E71D15.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 08 Dec 2025 23:27:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2b:91:42:f7:bc:c3:64:6d:3d:11:1b:7d:f7:54:8a:b4:02:9d:18:e9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=11D0290B4630192458231FFEA93A463483E71D15 Validity Not Before: Dec 5 15:07:09 2025 GMT Not After : Dec 8 23:27:09 2025 GMT Subject: CN=A00BF65B7644A2C4083169970653DF0AFD03D597 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:c4:2e:e0:9e:bc:d7:8a:4a:de:c0:7d:48:8a: 49:e8:79:98:08:00:75:1e:ed:5a:fa:b9:be:17:07: ef:72:12:21:54:ec:38:1a:12:03:b2:2d:60:a7:f2: fb:f0:58:46:a6:6b:06:c7:19:f3:af:9d:66:b7:e9: 0a:a3:5f:0e:91:4a:8a:04:d2:0f:3f:34:40:5a:c4: 2c:7e:3c:69:72:2e:55:05:aa:20:99:13:28:40:30: e5:26:49:37:4f:93:9e:e2:2b:eb:f2:4c:89:5a:a6: 25:0c:e9:15:1d:04:c8:aa:ea:95:d1:bf:a0:59:85: e0:7c:27:89:41:73:d0:d6:c8:fb:0c:2a:8c:e9:dd: 40:66:b8:b7:d5:06:b5:77:7a:59:e2:f4:91:0e:36: b9:51:5e:14:d7:4c:de:43:48:43:1c:f5:32:06:95: f0:f9:29:04:9f:d1:43:44:74:f2:7b:42:2f:66:57: f9:cb:69:88:3b:78:5a:f2:a2:34:00:f6:a2:a6:29: f8:2b:b7:cb:9d:f0:28:38:48:46:85:77:c9:69:0c: 95:c3:73:d5:03:f5:98:90:ae:e3:44:be:14:2f:fa: 80:8c:ff:ce:d8:e7:de:b6:56:05:a8:db:6e:90:a3: e8:a0:dc:bb:ea:c4:23:ff:a7:2b:2b:c1:7c:a1:da: de:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:0B:F6:5B:76:44:A2:C4:08:31:69:97:06:53:DF:0A:FD:03:D5:97 X509v3 Authority Key Identifier: keyid:11:D0:29:0B:46:30:19:24:58:23:1F:FE:A9:3A:46:34:83:E7:1D:15 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/f77eccff-ce9b-41da-b98a-abcfe49253af/0/11D0290B4630192458231FFEA93A463483E71D15.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/11D0290B4630192458231FFEA93A463483E71D15.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f77eccff-ce9b-41da-b98a-abcfe49253af/0/11D0290B4630192458231FFEA93A463483E71D15.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 37:8d:40:2d:e1:d5:c7:7a:19:05:1d:93:1f:d5:7b:7b:60:1a: 74:a4:21:a5:09:03:bf:68:1a:67:b7:53:d6:47:19:15:53:7a: 01:86:a5:46:d3:1b:56:5a:df:7f:f7:de:34:b8:01:35:6f:c6: 52:cb:69:26:c6:53:cd:e7:ea:61:4b:15:f7:43:af:d7:aa:d3: 8a:75:ba:36:b9:de:c9:19:ae:97:5f:12:aa:11:80:de:b5:40: b9:46:d7:27:8a:38:3b:d9:0f:9d:75:c5:99:11:d0:55:a3:cf: 0e:2c:6c:f2:e9:90:61:6a:e9:cb:52:55:e0:23:a7:2d:80:35: 3e:9b:5c:bc:52:ff:c4:35:9e:d2:d9:89:e2:a7:52:21:9c:9a: b2:cd:14:9b:6e:49:19:86:fb:f1:da:b0:d1:73:99:07:c0:9a: cc:17:ac:39:94:64:a0:ea:4f:34:51:88:ae:89:f5:56:fa:00: c1:e2:2d:b9:ed:cf:9b:77:c9:54:46:dd:8f:87:35:79:96:d9: e3:8e:94:4e:28:a9:a1:83:b7:ad:af:c3:4e:cd:75:14:b5:2a: 57:5a:b1:5b:e0:7b:a4:ce:3c:82:ed:5b:d3:01:62:05:d4:bb: 3c:56:40:b5:c6:83:67:a9:71:af:b4:46:62:8b:49:12:57:97: ad:d4:6f:7d -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUK5FC97zDZG09ERt991SKtAKdGOkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTFEMDI5MEI0NjMwMTkyNDU4MjMxRkZFQTkzQTQ2MzQ4 M0U3MUQxNTAeFw0yNTEyMDUxNTA3MDlaFw0yNTEyMDgyMzI3MDlaMDMxMTAvBgNV BAMTKEEwMEJGNjVCNzY0NEEyQzQwODMxNjk5NzA2NTNERjBBRkQwM0Q1OTcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC7xC7gnrzXikrewH1IiknoeZgI AHUe7Vr6ub4XB+9yEiFU7DgaEgOyLWCn8vvwWEamawbHGfOvnWa36QqjXw6RSooE 0g8/NEBaxCx+PGlyLlUFqiCZEyhAMOUmSTdPk57iK+vyTIlapiUM6RUdBMiq6pXR v6BZheB8J4lBc9DWyPsMKozp3UBmuLfVBrV3elni9JEONrlRXhTXTN5DSEMc9TIG lfD5KQSf0UNEdPJ7Qi9mV/nLaYg7eFryojQA9qKmKfgrt8ud8Cg4SEaFd8lpDJXD c9UD9ZiQruNEvhQv+oCM/87Y5962VgWo226Qo+ig3LvqxCP/pysrwXyh2t7tAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUoAv2W3ZEosQIMWmXBlPfCv0D1ZcwHwYDVR0j BBgwFoAUEdApC0YwGSRYIx/+qTpGNIPnHRUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m NzdlY2NmZi1jZTliLTQxZGEtYjk4YS1hYmNmZTQ5MjUzYWYvMC8xMUQwMjkwQjQ2 MzAxOTI0NTgyMzFGRkVBOTNBNDYzNDgzRTcxRDE1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMTFEMDI5MEI0NjMwMTkyNDU4MjMxRkZFQTkzQTQ2MzQ4M0U3 MUQxNS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZjc3ZWNjZmYtY2U5Yi00MWRhLWI5 OGEtYWJjZmU0OTI1M2FmLzAvMTFEMDI5MEI0NjMwMTkyNDU4MjMxRkZFQTkzQTQ2 MzQ4M0U3MUQxNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADeNQC3h1cd6GQUdkx/Ve3tgGnSkIaUJA79o Gme3U9ZHGRVTegGGpUbTG1Za33/33jS4ATVvxlLLaSbGU83n6mFLFfdDr9eq04p1 uja53skZrpdfEqoRgN61QLlG1yeKODvZD511xZkR0FWjzw4sbPLpkGFq6ctSVeAj py2ANT6bXLxS/8Q1ntLZieKnUiGcmrLNFJtuSRmG+/HasNFzmQfAmswXrDmUZKDq TzRRiK6J9Vb6AMHiLbntz5t3yVRG3Y+HNXmW2eOOlE4oqaGDt62vw07NdRS1Klda sVvge6TOPILtW9MBYgXUuzxWQLXGg2epca+0RmKLSRJXl63Ub30= -----END CERTIFICATE-----Generated at Sat Dec 6 22:57:12 2025 by rpki-client