This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/f7ef28af-a9ae-4c33-8c98-51209fb23dba/0/111A56FF0468DAC0FFF41B82D23F21DD4139F00F.mft File: 111A56FF0468DAC0FFF41B82D23F21DD4139F00F.mft (raw, json) Hash identifier: hwMmAg6AVIl1+2o6xib98plPcBEjaqCcwvDMduOI/ZI= Subject key identifier: DE:D0:AE:EC:74:8E:6F:B8:B5:32:0B:02:E6:52:6B:0A:C8:2E:02:10 Authority key identifier: 11:1A:56:FF:04:68:DA:C0:FF:F4:1B:82:D2:3F:21:DD:41:39:F0:0F Certificate issuer: /CN=111A56FF0468DAC0FFF41B82D23F21DD4139F00F Certificate serial: 3F0D7F849FF62C7D72C158A4A5C83C2C953254D0 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/111A56FF0468DAC0FFF41B82D23F21DD4139F00F.cer Subject info access: rsync://repo-rpki.idnic.net/repo/f7ef28af-a9ae-4c33-8c98-51209fb23dba/0/111A56FF0468DAC0FFF41B82D23F21DD4139F00F.mft Manifest number: 1A Signing time: Sun 25 Jan 2026 02:10:49 +0000 Manifest this update: Sun 25 Jan 2026 02:05:49 +0000 Manifest next update: Wed 28 Jan 2026 11:56:49 +0000 Files and hashes: 1: 111A56FF0468DAC0FFF41B82D23F21DD4139F00F.crl (hash: QFb2X8i35dhuosYjlPPP+if0ws/ewKeq/QgWrO+J6Ig=) 2: 3130332e3234372e3234322e302f32332d3234203d3e20313531353337.roa (hash: /KC3HC1ev3eUia/MbScpps/zMZoYFTTbRVMV+spgfEs=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/f7ef28af-a9ae-4c33-8c98-51209fb23dba/0/111A56FF0468DAC0FFF41B82D23F21DD4139F00F.crl rsync://repo-rpki.idnic.net/repo/f7ef28af-a9ae-4c33-8c98-51209fb23dba/0/111A56FF0468DAC0FFF41B82D23F21DD4139F00F.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/111A56FF0468DAC0FFF41B82D23F21DD4139F00F.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 28 Jan 2026 11:56:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3f:0d:7f:84:9f:f6:2c:7d:72:c1:58:a4:a5:c8:3c:2c:95:32:54:d0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=111A56FF0468DAC0FFF41B82D23F21DD4139F00F Validity Not Before: Jan 25 02:05:49 2026 GMT Not After : Jan 28 11:56:49 2026 GMT Subject: CN=DED0AEEC748E6FB8B5320B02E6526B0AC82E0210 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:ee:a5:fb:86:45:b6:0e:a0:be:cb:04:59:f3: 7b:0f:4c:d1:4c:ad:77:25:d9:73:04:6d:6a:34:6d: 8b:3a:74:15:a7:8a:80:92:d6:ad:a7:9e:ea:42:f6: 98:00:24:0d:18:ea:e5:1a:15:ba:f6:7b:87:3a:06: a5:bc:95:eb:c6:38:7b:3b:15:8e:34:83:0d:1f:e0: 4a:9c:27:94:32:62:78:94:05:27:e6:d6:4c:78:21: c0:c6:11:e3:48:c1:08:c5:33:e1:10:c7:74:94:92: 3d:c0:51:8b:13:4b:9a:f5:e0:35:86:00:96:6d:27: ce:2a:97:6c:6c:24:00:eb:79:a2:79:09:1b:66:a8: f8:92:55:43:3f:7a:88:6c:46:8d:41:70:36:99:bb: 1e:7b:69:b8:23:fd:40:fb:c4:09:ea:c7:b5:a6:cf: f0:2f:12:6f:7c:fc:f4:7d:dd:3a:5c:7b:6e:67:e2: 25:d0:d2:69:c5:b0:37:a2:e5:d5:e9:02:6c:25:a8: b0:d1:fc:75:68:d2:75:84:f2:cc:1c:b3:30:dd:ae: aa:5a:77:ee:46:c1:6e:81:9e:20:9c:7e:0d:b6:51: 3d:eb:fe:f8:81:7b:33:3f:db:9d:74:66:a7:99:d9: b3:65:aa:97:b3:36:76:9a:1d:23:65:e9:36:bb:2b: 7e:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:D0:AE:EC:74:8E:6F:B8:B5:32:0B:02:E6:52:6B:0A:C8:2E:02:10 X509v3 Authority Key Identifier: keyid:11:1A:56:FF:04:68:DA:C0:FF:F4:1B:82:D2:3F:21:DD:41:39:F0:0F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/f7ef28af-a9ae-4c33-8c98-51209fb23dba/0/111A56FF0468DAC0FFF41B82D23F21DD4139F00F.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/111A56FF0468DAC0FFF41B82D23F21DD4139F00F.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f7ef28af-a9ae-4c33-8c98-51209fb23dba/0/111A56FF0468DAC0FFF41B82D23F21DD4139F00F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 91:c8:f2:28:40:48:52:70:37:e4:68:89:da:a7:20:3b:54:66: 80:b9:c7:80:0f:35:5c:bd:49:8a:e8:cf:c0:2f:69:a4:51:72: 15:ca:50:f4:72:15:eb:5f:dc:b6:3f:8f:ea:7e:17:02:42:f5: 9c:af:e7:55:c3:8c:fb:a0:47:f2:c6:37:1a:89:75:1e:e1:70: 75:37:cc:74:68:3d:1b:c1:a9:9e:2c:1d:74:7c:77:c6:b3:28: 4a:6c:e8:74:84:e2:4a:28:5c:14:74:16:1b:c0:5d:2b:ec:f1: 96:35:c3:6f:da:18:2a:84:3f:1b:76:c0:68:49:97:70:ff:6a: 38:b5:cd:12:25:94:97:ac:dd:75:4f:d8:56:3d:16:39:a3:c3: ef:fd:8e:b2:15:08:ed:eb:ff:5a:be:08:51:07:a2:f1:5c:30: 8e:3c:6a:26:93:93:b4:02:8d:96:b9:0e:18:d2:2b:9c:e0:e9: 40:61:12:da:4b:31:f1:b5:9b:04:8a:57:82:e6:bb:dc:85:a8: 91:14:b0:94:a4:ff:cb:d4:49:c2:bc:22:a3:42:41:25:a6:5f: 79:0d:fd:c1:f1:38:5a:f3:a0:e0:d2:c5:a6:99:77:4b:55:9b: 1f:a3:17:22:b6:dd:4c:25:59:97:25:f4:70:1d:dd:71:0b:32: 79:9d:e0:a4 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUPw1/hJ/2LH1ywVikpcg8LJUyVNAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTExQTU2RkYwNDY4REFDMEZGRjQxQjgyRDIzRjIxREQ0 MTM5RjAwRjAeFw0yNjAxMjUwMjA1NDlaFw0yNjAxMjgxMTU2NDlaMDMxMTAvBgNV BAMTKERFRDBBRUVDNzQ4RTZGQjhCNTMyMEIwMkU2NTI2QjBBQzgyRTAyMTAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDH7qX7hkW2DqC+ywRZ83sPTNFM rXcl2XMEbWo0bYs6dBWnioCS1q2nnupC9pgAJA0Y6uUaFbr2e4c6BqW8levGOHs7 FY40gw0f4EqcJ5QyYniUBSfm1kx4IcDGEeNIwQjFM+EQx3SUkj3AUYsTS5r14DWG AJZtJ84ql2xsJADreaJ5CRtmqPiSVUM/eohsRo1BcDaZux57abgj/UD7xAnqx7Wm z/AvEm98/PR93Tpce25n4iXQ0mnFsDei5dXpAmwlqLDR/HVo0nWE8swcszDdrqpa d+5GwW6BniCcfg22UT3r/viBezM/2510ZqeZ2bNlqpezNnaaHSNl6Ta7K36rAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU3tCu7HSOb7i1MgsC5lJrCsguAhAwHwYDVR0j BBgwFoAUERpW/wRo2sD/9BuC0j8h3UE58A8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m N2VmMjhhZi1hOWFlLTRjMzMtOGM5OC01MTIwOWZiMjNkYmEvMC8xMTFBNTZGRjA0 NjhEQUMwRkZGNDFCODJEMjNGMjFERDQxMzlGMDBGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMTExQTU2RkYwNDY4REFDMEZGRjQxQjgyRDIzRjIxREQ0MTM5 RjAwRi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZjdlZjI4YWYtYTlhZS00YzMzLThj OTgtNTEyMDlmYjIzZGJhLzAvMTExQTU2RkYwNDY4REFDMEZGRjQxQjgyRDIzRjIx REQ0MTM5RjAwRi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJHI8ihASFJwN+RoidqnIDtUZoC5x4APNVy9 SYroz8AvaaRRchXKUPRyFetf3LY/j+p+FwJC9Zyv51XDjPugR/LGNxqJdR7hcHU3 zHRoPRvBqZ4sHXR8d8azKEps6HSE4kooXBR0FhvAXSvs8ZY1w2/aGCqEPxt2wGhJ l3D/aji1zRIllJes3XVP2FY9Fjmjw+/9jrIVCO3r/1q+CFEHovFcMI48aiaTk7QC jZa5DhjSK5zg6UBhEtpLMfG1mwSKV4Lmu9yFqJEUsJSk/8vUScK8IqNCQSWmX3kN /cHxOFrzoODSxaaZd0tVmx+jFyK23UwlWZcl9HAd3XELMnmd4KQ= -----END CERTIFICATE-----Generated at Mon Jan 26 01:11:51 2026 by rpki-client