This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/f77eccff-ce9b-41da-b98a-abcfe49253af/0/11D0290B4630192458231FFEA93A463483E71D15.mft File: 11D0290B4630192458231FFEA93A463483E71D15.mft (raw, json) Hash identifier: EfwLWAdNNia4Cp8iTo+IlgyXrWvCFBg/ZKQCFIJBGhk= Subject key identifier: B0:1C:CA:A8:78:B9:EF:0C:2C:35:4E:06:7D:9C:04:FF:6C:40:4B:97 Authority key identifier: 11:D0:29:0B:46:30:19:24:58:23:1F:FE:A9:3A:46:34:83:E7:1D:15 Certificate issuer: /CN=11D0290B4630192458231FFEA93A463483E71D15 Certificate serial: 388F5AAC383D65D76070B27632CE58DD4DC83080 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/11D0290B4630192458231FFEA93A463483E71D15.cer Subject info access: rsync://repo-rpki.idnic.net/repo/f77eccff-ce9b-41da-b98a-abcfe49253af/0/11D0290B4630192458231FFEA93A463483E71D15.mft Manifest number: 01D7 Signing time: Fri 19 Dec 2025 03:43:47 +0000 Manifest this update: Fri 19 Dec 2025 03:38:47 +0000 Manifest next update: Mon 22 Dec 2025 09:34:47 +0000 Files and hashes: 1: 11D0290B4630192458231FFEA93A463483E71D15.crl (hash: 3++Y7oaIBakYKUj9oNmYts7zbgTsrpylkIhTASpcgNo=) 2: 3130332e38322e39322e302f32332d3234203d3e20313336303532.roa (hash: u+vUasuo+Igy3NmWXga5XKWPQhhkbM5VIPkZA+eRxSc=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/f77eccff-ce9b-41da-b98a-abcfe49253af/0/11D0290B4630192458231FFEA93A463483E71D15.crl rsync://repo-rpki.idnic.net/repo/f77eccff-ce9b-41da-b98a-abcfe49253af/0/11D0290B4630192458231FFEA93A463483E71D15.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/11D0290B4630192458231FFEA93A463483E71D15.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 22 Dec 2025 09:34:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 38:8f:5a:ac:38:3d:65:d7:60:70:b2:76:32:ce:58:dd:4d:c8:30:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=11D0290B4630192458231FFEA93A463483E71D15 Validity Not Before: Dec 19 03:38:47 2025 GMT Not After : Dec 22 09:34:47 2025 GMT Subject: CN=B01CCAA878B9EF0C2C354E067D9C04FF6C404B97 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:cf:09:49:f2:2a:66:77:dd:70:41:cb:65:43: 7b:dc:0a:ee:a1:3c:9c:6c:32:61:68:0d:07:eb:86: c7:af:db:0d:da:49:a2:ea:e6:1b:27:35:c0:7b:4a: d2:30:7b:eb:af:56:c6:cb:2c:0c:9a:d6:bd:71:e4: 37:43:74:04:4e:e0:f5:8f:02:e7:88:8e:83:09:e1: ec:9f:38:2d:70:6d:23:94:a1:ca:46:cd:7d:cf:86: a7:8d:df:56:99:d9:56:7b:dd:9a:8f:72:7b:ac:b8: e9:cf:0b:7b:b3:3e:59:79:15:ad:a0:49:4d:99:b0: de:98:80:51:76:7d:e4:c0:05:94:09:cc:15:a7:09: 4f:aa:79:e7:76:86:8c:e6:31:50:62:bf:28:48:ff: 1e:42:7e:ac:eb:fe:d3:f5:0e:b1:a3:5e:1b:ed:c9: 03:d4:bd:ce:d3:b1:ab:93:61:70:fc:ce:78:df:7f: cc:8b:ab:d1:7a:d1:81:f6:ad:f2:4a:d9:09:aa:07: 49:de:91:d9:fc:af:72:81:bc:df:4f:c3:6b:ae:db: 19:fe:7b:ca:3f:c9:a9:cd:64:71:0b:98:8b:e5:a7: fa:3e:2e:d9:30:41:e4:31:98:36:61:ea:a8:87:e1: e7:ba:85:33:25:d3:fa:e1:38:58:0f:db:ae:4c:47: ee:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B0:1C:CA:A8:78:B9:EF:0C:2C:35:4E:06:7D:9C:04:FF:6C:40:4B:97 X509v3 Authority Key Identifier: keyid:11:D0:29:0B:46:30:19:24:58:23:1F:FE:A9:3A:46:34:83:E7:1D:15 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/f77eccff-ce9b-41da-b98a-abcfe49253af/0/11D0290B4630192458231FFEA93A463483E71D15.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/11D0290B4630192458231FFEA93A463483E71D15.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f77eccff-ce9b-41da-b98a-abcfe49253af/0/11D0290B4630192458231FFEA93A463483E71D15.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a7:10:58:88:e3:30:f7:76:bd:41:fa:99:cf:67:4d:ab:6b:a5: e6:aa:b3:10:1b:3b:e9:c4:74:ff:0e:55:1c:dc:eb:e7:7e:9e: f6:9d:3e:b3:20:5e:e6:6a:e4:8d:46:9e:cf:4d:bc:6e:32:8d: ce:d0:89:68:20:14:ae:ec:2f:48:f2:1d:31:a8:9a:bd:ca:72: cf:b2:10:3d:06:29:45:b9:bb:90:41:23:48:c7:c9:89:5d:dd: 83:1d:b5:2a:90:aa:22:b4:57:d0:dd:b3:79:6d:69:af:61:57: 15:06:e1:b0:37:59:82:59:ea:59:47:04:87:1b:e4:1a:fc:1b: 6b:aa:59:bf:d1:e4:83:83:27:43:74:d5:0c:eb:be:4c:1f:87: db:f3:60:22:c8:8c:e5:13:0e:17:b9:d9:62:1e:c9:54:5c:db: f5:d9:5c:7d:ac:1f:94:2f:7d:43:15:81:d3:d5:b1:55:00:66: bd:9e:72:7c:c7:c7:2b:b7:b3:91:ef:76:fa:9f:05:42:82:b3: 33:bc:66:8e:7c:c7:97:b7:14:d9:8e:7c:06:b6:ba:de:5a:25: 9b:97:32:70:16:b8:be:81:c7:69:cd:cc:c4:ee:f8:eb:e9:44: 39:b8:44:c1:3a:72:51:f4:a3:72:1a:2f:75:60:21:a6:6b:e5: 94:82:88:47 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUOI9arDg9ZddgcLJ2Ms5Y3U3IMIAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTFEMDI5MEI0NjMwMTkyNDU4MjMxRkZFQTkzQTQ2MzQ4 M0U3MUQxNTAeFw0yNTEyMTkwMzM4NDdaFw0yNTEyMjIwOTM0NDdaMDMxMTAvBgNV BAMTKEIwMUNDQUE4NzhCOUVGMEMyQzM1NEUwNjdEOUMwNEZGNkM0MDRCOTcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCozwlJ8ipmd91wQctlQ3vcCu6h PJxsMmFoDQfrhsev2w3aSaLq5hsnNcB7StIwe+uvVsbLLAya1r1x5DdDdARO4PWP AueIjoMJ4eyfOC1wbSOUocpGzX3PhqeN31aZ2VZ73ZqPcnusuOnPC3uzPll5Fa2g SU2ZsN6YgFF2feTABZQJzBWnCU+qeed2hozmMVBivyhI/x5Cfqzr/tP1DrGjXhvt yQPUvc7TsauTYXD8znjff8yLq9F60YH2rfJK2QmqB0nekdn8r3KBvN9Pw2uu2xn+ e8o/yanNZHELmIvlp/o+LtkwQeQxmDZh6qiH4ee6hTMl0/rhOFgP265MR+5rAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUsBzKqHi57wwsNU4GfZwE/2xAS5cwHwYDVR0j BBgwFoAUEdApC0YwGSRYIx/+qTpGNIPnHRUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m NzdlY2NmZi1jZTliLTQxZGEtYjk4YS1hYmNmZTQ5MjUzYWYvMC8xMUQwMjkwQjQ2 MzAxOTI0NTgyMzFGRkVBOTNBNDYzNDgzRTcxRDE1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMTFEMDI5MEI0NjMwMTkyNDU4MjMxRkZFQTkzQTQ2MzQ4M0U3 MUQxNS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZjc3ZWNjZmYtY2U5Yi00MWRhLWI5 OGEtYWJjZmU0OTI1M2FmLzAvMTFEMDI5MEI0NjMwMTkyNDU4MjMxRkZFQTkzQTQ2 MzQ4M0U3MUQxNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKcQWIjjMPd2vUH6mc9nTatrpeaqsxAbO+nE dP8OVRzc6+d+nvadPrMgXuZq5I1Gns9NvG4yjc7QiWggFK7sL0jyHTGomr3Kcs+y ED0GKUW5u5BBI0jHyYld3YMdtSqQqiK0V9Dds3ltaa9hVxUG4bA3WYJZ6llHBIcb 5Br8G2uqWb/R5IODJ0N01Qzrvkwfh9vzYCLIjOUTDhe52WIeyVRc2/XZXH2sH5Qv fUMVgdPVsVUAZr2ecnzHxyu3s5HvdvqfBUKCszO8Zo58x5e3FNmOfAa2ut5aJZuX MnAWuL6Bx2nNzMTu+OvpRDm4RME6clH0o3IaL3VgIaZr5ZSCiEc= -----END CERTIFICATE-----Generated at Sat Dec 20 02:57:02 2025 by rpki-client