This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/f77eccff-ce9b-41da-b98a-abcfe49253af/0/11D0290B4630192458231FFEA93A463483E71D15.mft File: 11D0290B4630192458231FFEA93A463483E71D15.mft (raw, json) Hash identifier: wV9nzKD5Ci2vmVazRJoFjElOEzVB7B3UFO8amI73CaY= Subject key identifier: 97:FA:FD:84:D7:A7:DD:90:EF:32:2B:66:04:A6:51:7D:5E:36:26:90 Authority key identifier: 11:D0:29:0B:46:30:19:24:58:23:1F:FE:A9:3A:46:34:83:E7:1D:15 Certificate issuer: /CN=11D0290B4630192458231FFEA93A463483E71D15 Certificate serial: 6F37B6622BC57A493DF6621A6AAF9C4DD0AF3B0A Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/11D0290B4630192458231FFEA93A463483E71D15.cer Subject info access: rsync://repo-rpki.idnic.net/repo/f77eccff-ce9b-41da-b98a-abcfe49253af/0/11D0290B4630192458231FFEA93A463483E71D15.mft Manifest number: 01D0 Signing time: Wed 03 Dec 2025 10:42:11 +0000 Manifest this update: Wed 03 Dec 2025 10:37:11 +0000 Manifest next update: Sat 06 Dec 2025 15:10:11 +0000 Files and hashes: 1: 11D0290B4630192458231FFEA93A463483E71D15.crl (hash: o/adSg0UEykxMe8J1+p1EHYhFWPXKyjVaADn6BDBwbU=) 2: 3130332e38322e39322e302f32332d3234203d3e20313336303532.roa (hash: u+vUasuo+Igy3NmWXga5XKWPQhhkbM5VIPkZA+eRxSc=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/f77eccff-ce9b-41da-b98a-abcfe49253af/0/11D0290B4630192458231FFEA93A463483E71D15.crl rsync://repo-rpki.idnic.net/repo/f77eccff-ce9b-41da-b98a-abcfe49253af/0/11D0290B4630192458231FFEA93A463483E71D15.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/11D0290B4630192458231FFEA93A463483E71D15.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 06 Dec 2025 15:10:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6f:37:b6:62:2b:c5:7a:49:3d:f6:62:1a:6a:af:9c:4d:d0:af:3b:0a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=11D0290B4630192458231FFEA93A463483E71D15 Validity Not Before: Dec 3 10:37:11 2025 GMT Not After : Dec 6 15:10:11 2025 GMT Subject: CN=97FAFD84D7A7DD90EF322B6604A6517D5E362690 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:5b:dc:2a:ba:38:34:35:8d:7b:5b:4f:10:14: aa:8c:eb:9b:08:90:27:2e:e8:15:3d:5c:93:f9:0f: c2:08:22:2e:1c:39:e1:be:2a:67:40:08:f9:4d:b0: fa:cf:58:3c:7b:c0:b8:db:a0:cd:bf:4c:33:37:2f: 40:0a:f7:e5:8b:0e:2e:39:b0:39:ab:ed:df:52:49: 1c:fe:85:6c:e4:79:78:11:33:7e:eb:7e:6b:f6:a7: c7:96:5b:b5:85:2f:3a:13:9a:9f:cf:a2:71:32:e5: 4e:96:d3:c6:20:4c:44:b0:91:90:3b:18:e9:32:c0: f4:38:9a:b1:a9:e8:bc:25:10:d2:fe:85:47:dc:62: 31:c9:e1:8c:6b:a6:60:39:2d:d1:c7:7e:7c:1c:17: 8e:68:74:12:c2:ac:26:0d:5f:87:dd:99:b8:19:b0: db:2c:53:05:8b:75:52:38:27:66:b7:64:ed:f5:f0: 16:c6:8a:02:1d:82:ce:74:e4:35:4f:06:19:20:32: a4:69:03:92:f9:77:46:3e:1d:c3:9d:ac:f5:38:4f: d6:98:55:c0:50:6c:f9:08:bf:b8:8e:76:cf:18:61: c4:de:b7:eb:e0:f6:ab:40:36:19:8a:5d:36:64:b2: 68:d5:6e:f5:25:e3:46:7d:a1:94:b8:35:06:b1:ec: d4:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 97:FA:FD:84:D7:A7:DD:90:EF:32:2B:66:04:A6:51:7D:5E:36:26:90 X509v3 Authority Key Identifier: keyid:11:D0:29:0B:46:30:19:24:58:23:1F:FE:A9:3A:46:34:83:E7:1D:15 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/f77eccff-ce9b-41da-b98a-abcfe49253af/0/11D0290B4630192458231FFEA93A463483E71D15.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/11D0290B4630192458231FFEA93A463483E71D15.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f77eccff-ce9b-41da-b98a-abcfe49253af/0/11D0290B4630192458231FFEA93A463483E71D15.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 09:29:8b:f7:bc:1e:c2:62:59:ff:74:9f:9a:c8:13:11:ad:f1: f3:3f:c8:9d:d8:0b:73:b3:fb:50:34:d4:72:f4:a3:76:bc:96: 34:68:71:82:2b:59:37:3d:ed:5d:dc:40:39:e3:15:d2:8e:6e: 08:5d:8e:d2:3d:34:09:04:46:d6:e9:c3:f9:9f:ee:a2:6a:85: 28:5b:58:ff:48:51:b6:d1:74:82:52:cb:e8:be:49:e1:85:dd: b6:e5:eb:ca:f8:a4:f9:08:88:f9:ac:c4:58:3d:a9:5a:04:50: c2:e0:d8:0d:ca:3d:a0:3b:03:ac:6f:7d:ec:47:66:8f:90:a6: a3:0f:58:ce:74:a9:9c:0b:1f:00:ed:6d:14:67:db:8f:64:d0: f6:fa:27:05:a1:59:2e:10:8f:06:63:bf:bf:68:90:13:f3:28: ed:1d:05:95:aa:e7:8e:84:f8:57:6f:52:4e:97:cd:76:b2:33: 04:71:64:ba:e4:42:72:f7:05:93:fe:cc:28:63:74:15:6e:35: fb:1f:4b:5d:5a:cb:f1:6e:bb:b7:a9:f9:c1:a5:7a:43:0e:44: f9:cc:3b:1f:d0:50:4a:9d:24:c7:db:90:fc:5c:40:e0:70:7b: 67:83:63:75:d1:a2:9c:72:af:4b:34:c1:04:9f:14:97:4a:95: 5f:31:38:81 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUbze2YivFekk99mIaaq+cTdCvOwowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTFEMDI5MEI0NjMwMTkyNDU4MjMxRkZFQTkzQTQ2MzQ4 M0U3MUQxNTAeFw0yNTEyMDMxMDM3MTFaFw0yNTEyMDYxNTEwMTFaMDMxMTAvBgNV BAMTKDk3RkFGRDg0RDdBN0REOTBFRjMyMkI2NjA0QTY1MTdENUUzNjI2OTAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCmW9wqujg0NY17W08QFKqM65sI kCcu6BU9XJP5D8IIIi4cOeG+KmdACPlNsPrPWDx7wLjboM2/TDM3L0AK9+WLDi45 sDmr7d9SSRz+hWzkeXgRM37rfmv2p8eWW7WFLzoTmp/PonEy5U6W08YgTESwkZA7 GOkywPQ4mrGp6LwlENL+hUfcYjHJ4YxrpmA5LdHHfnwcF45odBLCrCYNX4fdmbgZ sNssUwWLdVI4J2a3ZO318BbGigIdgs505DVPBhkgMqRpA5L5d0Y+HcOdrPU4T9aY VcBQbPkIv7iOds8YYcTet+vg9qtANhmKXTZksmjVbvUl40Z9oZS4NQax7NQLAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUl/r9hNen3ZDvMitmBKZRfV42JpAwHwYDVR0j BBgwFoAUEdApC0YwGSRYIx/+qTpGNIPnHRUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m NzdlY2NmZi1jZTliLTQxZGEtYjk4YS1hYmNmZTQ5MjUzYWYvMC8xMUQwMjkwQjQ2 MzAxOTI0NTgyMzFGRkVBOTNBNDYzNDgzRTcxRDE1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMTFEMDI5MEI0NjMwMTkyNDU4MjMxRkZFQTkzQTQ2MzQ4M0U3 MUQxNS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZjc3ZWNjZmYtY2U5Yi00MWRhLWI5 OGEtYWJjZmU0OTI1M2FmLzAvMTFEMDI5MEI0NjMwMTkyNDU4MjMxRkZFQTkzQTQ2 MzQ4M0U3MUQxNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAkpi/e8HsJiWf90n5rIExGt8fM/yJ3YC3Oz +1A01HL0o3a8ljRocYIrWTc97V3cQDnjFdKObghdjtI9NAkERtbpw/mf7qJqhShb WP9IUbbRdIJSy+i+SeGF3bbl68r4pPkIiPmsxFg9qVoEUMLg2A3KPaA7A6xvfexH Zo+QpqMPWM50qZwLHwDtbRRn249k0Pb6JwWhWS4QjwZjv79okBPzKO0dBZWq546E +FdvUk6XzXayMwRxZLrkQnL3BZP+zChjdBVuNfsfS11ay/Fuu7ep+cGlekMORPnM Ox/QUEqdJMfbkPxcQOBwe2eDY3XRopxyr0s0wQSfFJdKlV8xOIE= -----END CERTIFICATE-----Generated at Wed Dec 3 16:07:38 2025 by rpki-client