This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repo-rpki.idnic.net/repo/f77eccff-ce9b-41da-b98a-abcfe49253af/0/11D0290B4630192458231FFEA93A463483E71D15.mft
File: 11D0290B4630192458231FFEA93A463483E71D15.mft (raw, json)
Hash identifier: n8VkFF/zxhNmsWQ9xDdgGuOVVhy4PsxcqsTMzWp2gk0=
Subject key identifier: 86:9A:92:D7:B9:09:47:98:32:6F:8F:BF:5E:45:45:E7:0D:CA:35:A1
Authority key identifier: 11:D0:29:0B:46:30:19:24:58:23:1F:FE:A9:3A:46:34:83:E7:1D:15
Certificate issuer: /CN=11D0290B4630192458231FFEA93A463483E71D15
Certificate serial: 0115DF6A371BC41537C4D898C128CB42EF6950A7
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/11D0290B4630192458231FFEA93A463483E71D15.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/f77eccff-ce9b-41da-b98a-abcfe49253af/0/11D0290B4630192458231FFEA93A463483E71D15.mft
Manifest number: 01D6
Signing time: Wed 17 Dec 2025 00:02:12 +0000
Manifest this update: Tue 16 Dec 2025 23:57:12 +0000
Manifest next update: Sat 20 Dec 2025 03:32:12 +0000
Files and hashes: 1: 3130332e38322e39322e302f32332d3234203d3e20313336303532.roa (hash: u+vUasuo+Igy3NmWXga5XKWPQhhkbM5VIPkZA+eRxSc=)
2: 11D0290B4630192458231FFEA93A463483E71D15.crl (hash: K2wHgyljXRF4BHs8OGZI1ynS9gexu590GkTM2bUqW7w=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/f77eccff-ce9b-41da-b98a-abcfe49253af/0/11D0290B4630192458231FFEA93A463483E71D15.crl
rsync://repo-rpki.idnic.net/repo/f77eccff-ce9b-41da-b98a-abcfe49253af/0/11D0290B4630192458231FFEA93A463483E71D15.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/11D0290B4630192458231FFEA93A463483E71D15.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 20 Dec 2025 03:32:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:15:df:6a:37:1b:c4:15:37:c4:d8:98:c1:28:cb:42:ef:69:50:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=11D0290B4630192458231FFEA93A463483E71D15
Validity
Not Before: Dec 16 23:57:12 2025 GMT
Not After : Dec 20 03:32:12 2025 GMT
Subject: CN=869A92D7B9094798326F8FBF5E4545E70DCA35A1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:f6:ae:c1:2e:d9:a7:e5:4e:f1:ca:fb:64:62:
85:ec:52:49:34:fe:d4:97:0a:7d:e7:54:0a:08:78:
39:55:c8:bb:80:bb:aa:0e:36:f2:4a:df:97:8e:bb:
5b:14:46:3e:3c:29:2a:34:21:4f:cb:35:f3:f6:be:
ba:1a:21:ec:13:f7:43:b1:d8:65:ec:e3:77:8b:10:
68:28:97:17:35:46:ef:a5:75:bf:4e:f1:69:a7:b1:
db:4a:ed:59:37:e2:a1:90:05:c4:b0:3f:75:d8:46:
c1:4b:84:3a:0b:5d:22:43:f8:c5:be:1f:ab:f7:22:
b9:3d:b7:7c:e0:ab:88:4a:f7:80:d6:22:0f:82:0f:
8f:73:0b:1e:3a:a0:8c:62:6a:b0:0f:f3:b6:b2:9c:
7f:d5:a8:80:01:f8:14:fc:36:66:a5:48:24:7d:e2:
a0:fe:24:3f:6f:ac:fa:3e:dd:cc:5f:4c:68:57:85:
88:3b:23:47:e3:1f:a2:5a:67:44:de:20:1e:50:9d:
71:2d:8c:95:ae:12:a1:93:e1:c1:09:1a:ee:16:dd:
b1:3f:27:ea:e7:2a:18:6d:1d:fe:df:2c:df:0e:bd:
78:b7:45:73:aa:d5:46:8d:80:f1:1f:de:d7:9d:cf:
01:42:fd:fc:d3:71:60:a6:85:40:00:5a:58:46:e0:
01:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:9A:92:D7:B9:09:47:98:32:6F:8F:BF:5E:45:45:E7:0D:CA:35:A1
X509v3 Authority Key Identifier:
keyid:11:D0:29:0B:46:30:19:24:58:23:1F:FE:A9:3A:46:34:83:E7:1D:15
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/f77eccff-ce9b-41da-b98a-abcfe49253af/0/11D0290B4630192458231FFEA93A463483E71D15.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/11D0290B4630192458231FFEA93A463483E71D15.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f77eccff-ce9b-41da-b98a-abcfe49253af/0/11D0290B4630192458231FFEA93A463483E71D15.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
09:60:39:6b:62:6d:29:50:5e:c7:89:31:75:4d:b2:5b:7c:03:
74:05:98:21:80:46:97:15:17:74:0e:04:c5:9f:9e:44:05:67:
a4:e9:67:20:f3:9f:ee:ee:b2:ed:bd:d0:fc:73:7b:b4:e9:94:
65:f2:c8:d7:18:dc:e7:a1:de:72:1f:f3:ea:18:90:71:3b:e4:
9d:65:6e:a6:57:6c:4c:a0:08:ac:d9:53:b2:81:ea:9f:64:64:
58:d6:a9:47:9a:ca:27:63:b7:3e:4d:16:da:73:e1:ef:54:6c:
e5:e9:c0:6e:70:2a:6c:e5:72:1b:18:8d:48:58:fa:c3:cd:ac:
cd:90:79:0e:53:81:f4:77:80:eb:e9:97:29:28:42:71:a3:d0:
e4:55:46:24:85:2a:9a:75:e0:b4:dd:b1:b1:81:09:fa:42:83:
00:ec:aa:20:95:6b:ab:c7:70:98:b6:82:c4:0c:ec:1f:87:b7:
16:66:a4:e5:b7:d9:d4:7b:06:84:7e:76:b3:3c:7a:f9:ee:56:
4c:f1:a1:27:d9:33:91:5b:d5:9f:d9:87:62:47:d9:16:2d:1e:
f1:c3:20:a9:68:91:0f:b7:1d:c0:a1:f7:0e:6e:6c:bf:aa:de:
db:0f:0e:a1:86:78:e6:3c:36:f7:59:1b:20:69:21:74:c6:eb:
f0:36:69:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Dec 18 15:44:43 2025 by rpki-client