This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/2e0962f7-67ea-470e-a524-7ae1e40fd5b7/0/11B369E1CF41EB03E35A2711FF1FE0F687242467.mft File: 11B369E1CF41EB03E35A2711FF1FE0F687242467.mft (raw, json) Hash identifier: 2ozC+tn4Ly5+yQyWoTKO6ycFhnmmTi9f9D4lWL5BTfA= Subject key identifier: 62:91:A0:C3:9A:0B:BC:5D:7E:44:15:9B:04:E8:A2:B9:36:9B:0F:40 Authority key identifier: 11:B3:69:E1:CF:41:EB:03:E3:5A:27:11:FF:1F:E0:F6:87:24:24:67 Certificate issuer: /CN=11B369E1CF41EB03E35A2711FF1FE0F687242467 Certificate serial: 7D783F5D82CB6C6465A2B058E86BE548EB8ABE1A Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/11B369E1CF41EB03E35A2711FF1FE0F687242467.cer Subject info access: rsync://repo-rpki.idnic.net/repo/2e0962f7-67ea-470e-a524-7ae1e40fd5b7/0/11B369E1CF41EB03E35A2711FF1FE0F687242467.mft Manifest number: 0241 Signing time: Tue 02 Dec 2025 03:40:01 +0000 Manifest this update: Tue 02 Dec 2025 03:35:01 +0000 Manifest next update: Fri 05 Dec 2025 14:00:01 +0000 Files and hashes: 1: 11B369E1CF41EB03E35A2711FF1FE0F687242467.crl (hash: 4mCv2tGkHe3aK3X6m9+xLlgsSLlhrCcviNP8wBNIv64=) 2: 3130332e3138342e3137382e302f32332d3234203d3e20313439363632.roa (hash: nafgZnAsM444PZpRUGJ2jDID9gOrDEkaukgW0FDatiE=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/2e0962f7-67ea-470e-a524-7ae1e40fd5b7/0/11B369E1CF41EB03E35A2711FF1FE0F687242467.crl rsync://repo-rpki.idnic.net/repo/2e0962f7-67ea-470e-a524-7ae1e40fd5b7/0/11B369E1CF41EB03E35A2711FF1FE0F687242467.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/11B369E1CF41EB03E35A2711FF1FE0F687242467.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 05 Dec 2025 14:00:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7d:78:3f:5d:82:cb:6c:64:65:a2:b0:58:e8:6b:e5:48:eb:8a:be:1a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=11B369E1CF41EB03E35A2711FF1FE0F687242467 Validity Not Before: Dec 2 03:35:01 2025 GMT Not After : Dec 5 14:00:01 2025 GMT Subject: CN=6291A0C39A0BBC5D7E44159B04E8A2B9369B0F40 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:58:47:58:bd:35:bd:fd:95:4a:ea:ab:de:61: 9c:75:16:8b:6a:2b:41:bb:d1:4a:0d:1a:aa:5f:14: 15:84:03:0f:22:72:d8:72:22:4e:68:4b:23:7d:22: 1e:f6:d4:a9:19:b5:fd:48:d6:7b:5f:4a:56:fd:3d: 9c:c8:d6:e1:c5:a4:a0:7f:7e:b2:73:da:db:97:ac: 99:fc:10:25:9a:cd:50:df:f7:c6:cd:b2:69:4e:98: 5c:52:46:fb:99:c4:fd:d9:eb:ea:be:2a:55:3b:23: c8:33:33:af:f6:5f:36:f2:4f:37:29:ca:de:b6:29: fb:19:a6:a2:98:1f:85:8e:13:f5:12:bf:e8:7d:6b: fe:d8:83:84:2b:b4:de:9f:e3:e0:9e:38:d0:8b:23: ae:93:d3:9e:c2:0c:6c:7e:a4:a2:e7:47:a6:f7:4d: f6:7c:82:fc:98:f4:de:e6:df:e1:71:f9:4d:79:76: 28:3e:94:fb:ed:9d:58:0b:a3:47:06:e8:a1:d6:8e: 29:d7:3e:d4:da:f4:78:38:95:c3:8b:5b:b9:8e:9c: d4:aa:e5:62:47:57:4f:71:b3:88:8c:fe:a2:f7:98: 6e:f7:85:51:d7:d1:57:3e:ed:17:71:57:61:22:4d: c4:61:a2:ab:5d:9b:38:06:8a:88:1f:01:7a:df:67: 49:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 62:91:A0:C3:9A:0B:BC:5D:7E:44:15:9B:04:E8:A2:B9:36:9B:0F:40 X509v3 Authority Key Identifier: keyid:11:B3:69:E1:CF:41:EB:03:E3:5A:27:11:FF:1F:E0:F6:87:24:24:67 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/2e0962f7-67ea-470e-a524-7ae1e40fd5b7/0/11B369E1CF41EB03E35A2711FF1FE0F687242467.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/11B369E1CF41EB03E35A2711FF1FE0F687242467.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/2e0962f7-67ea-470e-a524-7ae1e40fd5b7/0/11B369E1CF41EB03E35A2711FF1FE0F687242467.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4a:59:de:f5:4b:ba:1e:93:bc:dc:bf:dc:5e:e9:a7:27:8b:94: 31:3a:e7:f8:8f:f5:55:1c:34:cd:fd:1e:d8:fc:87:87:b8:5a: 38:15:65:9e:94:30:72:b2:4f:75:81:f4:d9:2c:18:01:8a:62: f5:8f:84:8e:ad:7b:fc:b0:56:8d:3a:00:f0:2b:88:f6:ca:a5: 1e:9d:94:98:26:c2:dd:d3:90:f7:fe:3a:68:b5:88:f0:22:0e: da:4f:57:7c:f9:0c:95:50:bb:ff:98:95:d2:2f:18:be:8a:46: 7f:6b:75:9a:04:bf:c3:a2:22:a5:41:0b:12:f7:ed:1f:50:c7: 00:24:c3:5b:03:9b:95:ac:78:3c:27:8b:31:bd:06:27:d2:c5: cf:85:82:bc:eb:8d:78:1f:fc:25:e3:0b:4c:9c:5d:f5:c2:ee: 45:f4:df:a9:5e:2e:6d:85:12:2c:05:86:54:b0:33:70:81:f4: 06:c7:75:2c:e6:ed:b4:a5:b3:a2:e5:a9:aa:f4:37:25:8d:a6: 93:5a:81:12:c8:fa:ce:56:3f:e2:25:7b:e8:99:e3:5d:c9:95: 6b:98:7b:1a:87:5c:77:6c:48:5d:c2:5e:78:2d:41:35:6b:91: e9:ef:59:5d:58:77:f7:e0:66:5a:73:3d:92:f2:19:58:ed:9a: 19:69:cc:6d -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUfXg/XYLLbGRlorBY6GvlSOuKvhowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTFCMzY5RTFDRjQxRUIwM0UzNUEyNzExRkYxRkUwRjY4 NzI0MjQ2NzAeFw0yNTEyMDIwMzM1MDFaFw0yNTEyMDUxNDAwMDFaMDMxMTAvBgNV BAMTKDYyOTFBMEMzOUEwQkJDNUQ3RTQ0MTU5QjA0RThBMkI5MzY5QjBGNDAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDoWEdYvTW9/ZVK6qveYZx1Fotq K0G70UoNGqpfFBWEAw8icthyIk5oSyN9Ih721KkZtf1I1ntfSlb9PZzI1uHFpKB/ frJz2tuXrJn8ECWazVDf98bNsmlOmFxSRvuZxP3Z6+q+KlU7I8gzM6/2XzbyTzcp yt62KfsZpqKYH4WOE/USv+h9a/7Yg4QrtN6f4+CeONCLI66T057CDGx+pKLnR6b3 TfZ8gvyY9N7m3+Fx+U15dig+lPvtnVgLo0cG6KHWjinXPtTa9Hg4lcOLW7mOnNSq 5WJHV09xs4iM/qL3mG73hVHX0Vc+7RdxV2EiTcRhoqtdmzgGiogfAXrfZ0n/AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUYpGgw5oLvF1+RBWbBOiiuTabD0AwHwYDVR0j BBgwFoAUEbNp4c9B6wPjWicR/x/g9ockJGcwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y ZTA5NjJmNy02N2VhLTQ3MGUtYTUyNC03YWUxZTQwZmQ1YjcvMC8xMUIzNjlFMUNG NDFFQjAzRTM1QTI3MTFGRjFGRTBGNjg3MjQyNDY3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMTFCMzY5RTFDRjQxRUIwM0UzNUEyNzExRkYxRkUwRjY4NzI0 MjQ2Ny5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMmUwOTYyZjctNjdlYS00NzBlLWE1 MjQtN2FlMWU0MGZkNWI3LzAvMTFCMzY5RTFDRjQxRUIwM0UzNUEyNzExRkYxRkUw RjY4NzI0MjQ2Ny5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEpZ3vVLuh6TvNy/3F7ppyeLlDE65/iP9VUc NM39Htj8h4e4WjgVZZ6UMHKyT3WB9NksGAGKYvWPhI6te/ywVo06APAriPbKpR6d lJgmwt3TkPf+Omi1iPAiDtpPV3z5DJVQu/+YldIvGL6KRn9rdZoEv8OiIqVBCxL3 7R9QxwAkw1sDm5WseDwnizG9BifSxc+FgrzrjXgf/CXjC0ycXfXC7kX036leLm2F EiwFhlSwM3CB9AbHdSzm7bSls6Llqar0NyWNppNagRLI+s5WP+Ile+iZ413JlWuY exqHXHdsSF3CXngtQTVrkenvWV1Yd/fgZlpzPZLyGVjtmhlpzG0= -----END CERTIFICATE-----Generated at Wed Dec 3 14:57:33 2025 by rpki-client