This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/f7ef28af-a9ae-4c33-8c98-51209fb23dba/0/111A56FF0468DAC0FFF41B82D23F21DD4139F00F.mft File: 111A56FF0468DAC0FFF41B82D23F21DD4139F00F.mft (raw, json) Hash identifier: uN/WvRK7Q1CRAU1q6JCOGdS2jdiVGmfE/LK25GyFI54= Subject key identifier: 98:81:9E:EE:3D:85:E7:F7:7F:BA:23:D0:1B:35:4E:07:71:6D:55:1B Authority key identifier: 11:1A:56:FF:04:68:DA:C0:FF:F4:1B:82:D2:3F:21:DD:41:39:F0:0F Certificate issuer: /CN=111A56FF0468DAC0FFF41B82D23F21DD4139F00F Certificate serial: 75B3D0E38C3F32CED9D2DAEDAB1B80256D1B2134 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/111A56FF0468DAC0FFF41B82D23F21DD4139F00F.cer Subject info access: rsync://repo-rpki.idnic.net/repo/f7ef28af-a9ae-4c33-8c98-51209fb23dba/0/111A56FF0468DAC0FFF41B82D23F21DD4139F00F.mft Manifest number: 04 Signing time: Fri 05 Dec 2025 17:50:50 +0000 Manifest this update: Fri 05 Dec 2025 17:45:50 +0000 Manifest next update: Mon 08 Dec 2025 20:24:50 +0000 Files and hashes: 1: 111A56FF0468DAC0FFF41B82D23F21DD4139F00F.crl (hash: lVqTsc+Li+wW+WskjNKciBZl/H3SPjw42QtNpmispWo=) 2: 3130332e3234372e3234322e302f32332d3234203d3e20313531353337.roa (hash: /KC3HC1ev3eUia/MbScpps/zMZoYFTTbRVMV+spgfEs=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/f7ef28af-a9ae-4c33-8c98-51209fb23dba/0/111A56FF0468DAC0FFF41B82D23F21DD4139F00F.crl rsync://repo-rpki.idnic.net/repo/f7ef28af-a9ae-4c33-8c98-51209fb23dba/0/111A56FF0468DAC0FFF41B82D23F21DD4139F00F.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/111A56FF0468DAC0FFF41B82D23F21DD4139F00F.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 08 Dec 2025 20:24:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 75:b3:d0:e3:8c:3f:32:ce:d9:d2:da:ed:ab:1b:80:25:6d:1b:21:34 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=111A56FF0468DAC0FFF41B82D23F21DD4139F00F Validity Not Before: Dec 5 17:45:50 2025 GMT Not After : Dec 8 20:24:50 2025 GMT Subject: CN=98819EEE3D85E7F77FBA23D01B354E07716D551B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:80:d8:9e:b7:77:62:4a:ea:aa:20:e6:d3:79: 54:ab:4e:65:14:a2:66:f6:70:5b:ea:bb:42:6b:0a: eb:53:03:60:d1:1e:93:30:a6:52:cf:ff:24:9a:81: c6:d6:9a:84:37:92:64:f3:b8:a4:3f:0a:9c:fa:34: 7c:a3:d5:10:7e:5e:de:30:15:a6:48:d2:a5:90:29: 9f:46:64:99:4a:be:8f:f4:02:24:4c:73:52:7c:11: 44:ba:69:ae:2b:01:01:3f:89:63:ca:09:8c:4e:6a: f3:80:80:9a:aa:e2:ef:a3:c3:db:da:8d:e5:77:52: 76:4b:58:d9:80:f3:87:ef:d7:98:0a:dc:37:7c:59: c3:40:78:7f:0a:b8:48:c0:0f:76:e9:1c:a0:d0:84: 2c:7e:3b:fb:89:a2:48:04:82:5f:ae:2d:91:62:17: 05:29:fd:f4:88:2b:32:aa:b4:a6:95:1f:f8:19:f1: 76:e9:0d:47:9f:56:b5:99:bb:3a:c4:8c:99:4e:f4: 18:f3:22:c6:c7:62:ae:7d:bc:bc:ae:81:04:65:47: 3f:ae:0f:1a:b9:fe:06:b3:07:dd:f4:c3:bd:79:22: 85:ad:2a:06:e5:f0:dc:77:37:f0:9e:88:47:0b:50: 00:52:85:a0:d5:83:12:03:22:24:41:93:62:5c:f3: 20:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 98:81:9E:EE:3D:85:E7:F7:7F:BA:23:D0:1B:35:4E:07:71:6D:55:1B X509v3 Authority Key Identifier: keyid:11:1A:56:FF:04:68:DA:C0:FF:F4:1B:82:D2:3F:21:DD:41:39:F0:0F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/f7ef28af-a9ae-4c33-8c98-51209fb23dba/0/111A56FF0468DAC0FFF41B82D23F21DD4139F00F.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/111A56FF0468DAC0FFF41B82D23F21DD4139F00F.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f7ef28af-a9ae-4c33-8c98-51209fb23dba/0/111A56FF0468DAC0FFF41B82D23F21DD4139F00F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 35:4d:8d:1a:21:28:15:ca:dd:ca:7a:ba:a1:e5:c7:ac:ca:11: 10:46:fd:51:ea:df:00:c9:ef:43:cc:4e:c6:2e:55:d6:00:ed: 6c:e3:d8:df:cc:f4:40:96:da:a8:ad:f8:20:e0:b3:31:93:97: fd:0c:62:63:97:ca:c7:5d:ad:c0:55:c1:ca:53:f6:9b:45:bf: 23:1f:18:62:62:cc:3b:95:fa:93:1a:5c:70:bb:65:ca:d9:b9: 87:3b:1d:38:1c:15:11:7e:c2:c6:c7:a3:34:89:b1:a7:09:a1: 3e:dc:c6:7d:74:fe:85:e5:4d:ab:fd:d8:3d:9c:94:4b:a0:79: f2:e0:85:42:d8:39:6b:95:3d:39:51:af:71:04:4f:27:34:7b: 9c:b2:71:37:fd:12:c2:db:31:73:16:fb:19:50:39:2e:73:74: 25:56:be:ac:49:ba:93:87:18:51:f8:c0:09:03:b0:6b:cb:02: 47:96:37:7d:a8:d6:80:19:89:dd:f8:3a:7b:cb:0d:9b:80:9e: 41:ea:26:f8:1b:65:33:7f:cb:a2:b8:3d:11:ac:22:ff:1d:cf: 84:f6:89:da:b5:5c:34:8c:30:6c:49:06:76:80:ae:f4:cf:49: 44:2b:a7:25:99:2a:40:6f:28:af:ae:2d:c1:de:7a:72:7d:73: 33:d0:6b:20 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUdbPQ44w/Ms7Z0trtqxuAJW0bITQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTExQTU2RkYwNDY4REFDMEZGRjQxQjgyRDIzRjIxREQ0 MTM5RjAwRjAeFw0yNTEyMDUxNzQ1NTBaFw0yNTEyMDgyMDI0NTBaMDMxMTAvBgNV BAMTKDk4ODE5RUVFM0Q4NUU3Rjc3RkJBMjNEMDFCMzU0RTA3NzE2RDU1MUIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDKgNiet3diSuqqIObTeVSrTmUU omb2cFvqu0JrCutTA2DRHpMwplLP/ySagcbWmoQ3kmTzuKQ/Cpz6NHyj1RB+Xt4w FaZI0qWQKZ9GZJlKvo/0AiRMc1J8EUS6aa4rAQE/iWPKCYxOavOAgJqq4u+jw9va jeV3UnZLWNmA84fv15gK3Dd8WcNAeH8KuEjAD3bpHKDQhCx+O/uJokgEgl+uLZFi FwUp/fSIKzKqtKaVH/gZ8XbpDUefVrWZuzrEjJlO9BjzIsbHYq59vLyugQRlRz+u Dxq5/gazB930w715IoWtKgbl8Nx3N/CeiEcLUABShaDVgxIDIiRBk2Jc8yB3AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUmIGe7j2F5/d/uiPQGzVOB3FtVRswHwYDVR0j BBgwFoAUERpW/wRo2sD/9BuC0j8h3UE58A8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m N2VmMjhhZi1hOWFlLTRjMzMtOGM5OC01MTIwOWZiMjNkYmEvMC8xMTFBNTZGRjA0 NjhEQUMwRkZGNDFCODJEMjNGMjFERDQxMzlGMDBGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMTExQTU2RkYwNDY4REFDMEZGRjQxQjgyRDIzRjIxREQ0MTM5 RjAwRi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZjdlZjI4YWYtYTlhZS00YzMzLThj OTgtNTEyMDlmYjIzZGJhLzAvMTExQTU2RkYwNDY4REFDMEZGRjQxQjgyRDIzRjIx REQ0MTM5RjAwRi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADVNjRohKBXK3cp6uqHlx6zKERBG/VHq3wDJ 70PMTsYuVdYA7Wzj2N/M9ECW2qit+CDgszGTl/0MYmOXysddrcBVwcpT9ptFvyMf GGJizDuV+pMaXHC7ZcrZuYc7HTgcFRF+wsbHozSJsacJoT7cxn10/oXlTav92D2c lEugefLghULYOWuVPTlRr3EETyc0e5yycTf9EsLbMXMW+xlQOS5zdCVWvqxJupOH GFH4wAkDsGvLAkeWN32o1oAZid34OnvLDZuAnkHqJvgbZTN/y6K4PRGsIv8dz4T2 idq1XDSMMGxJBnaArvTPSUQrpyWZKkBvKK+uLcHeenJ9czPQayA= -----END CERTIFICATE-----Generated at Sun Dec 7 01:06:17 2025 by rpki-client