This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/f957fa5d-fa67-4e6b-8920-c4747adb30bb/0/1911AE41845DEE2EB88490C5767E3C1A6E30E808.mft File: 1911AE41845DEE2EB88490C5767E3C1A6E30E808.mft (raw, json) Hash identifier: p3Zlb6r3J+Uhk9CPAltKkn0ZJLb9FjUJmI+BwHsyZUU= Subject key identifier: 77:8F:08:4E:74:78:A2:16:5A:A9:D6:63:B6:35:5F:43:34:EC:3E:6B Authority key identifier: 19:11:AE:41:84:5D:EE:2E:B8:84:90:C5:76:7E:3C:1A:6E:30:E8:08 Certificate issuer: /CN=1911AE41845DEE2EB88490C5767E3C1A6E30E808 Certificate serial: 2AAED1C572BEB0F1C2B6F0FBB565AAA33FD701CC Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1911AE41845DEE2EB88490C5767E3C1A6E30E808.cer Subject info access: rsync://repo-rpki.idnic.net/repo/f957fa5d-fa67-4e6b-8920-c4747adb30bb/0/1911AE41845DEE2EB88490C5767E3C1A6E30E808.mft Manifest number: 0120 Signing time: Wed 17 Dec 2025 05:40:01 +0000 Manifest this update: Wed 17 Dec 2025 05:35:01 +0000 Manifest next update: Sat 20 Dec 2025 13:09:01 +0000 Files and hashes: 1: 3230332e3137352e3130322e302f32332d3234203d3e20313532303134.roa (hash: Jwv0gA8fk3yoBN8wNHBZ8Dx27fR4hWBf2um8D+vcr6o=) 2: 1911AE41845DEE2EB88490C5767E3C1A6E30E808.crl (hash: WJIFUem0onD9DLVqqNB3j1icx8t0sgoINXTPNaA898Q=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/f957fa5d-fa67-4e6b-8920-c4747adb30bb/0/1911AE41845DEE2EB88490C5767E3C1A6E30E808.crl rsync://repo-rpki.idnic.net/repo/f957fa5d-fa67-4e6b-8920-c4747adb30bb/0/1911AE41845DEE2EB88490C5767E3C1A6E30E808.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1911AE41845DEE2EB88490C5767E3C1A6E30E808.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 20 Dec 2025 13:09:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2a:ae:d1:c5:72:be:b0:f1:c2:b6:f0:fb:b5:65:aa:a3:3f:d7:01:cc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1911AE41845DEE2EB88490C5767E3C1A6E30E808 Validity Not Before: Dec 17 05:35:01 2025 GMT Not After : Dec 20 13:09:01 2025 GMT Subject: CN=778F084E7478A2165AA9D663B6355F4334EC3E6B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:94:3a:65:c6:32:24:89:56:cc:21:86:13:2c: b4:c1:ff:ad:3d:8b:70:a3:56:8b:6a:2f:0c:87:fa: d2:0b:55:40:1a:26:b3:ad:ff:89:de:d2:ed:dd:64: be:57:be:b8:1a:fb:6c:d8:45:9d:a3:6e:41:93:1b: 7c:0f:f4:7f:1c:c5:b5:35:3e:d1:ff:80:ab:88:4c: 09:cd:ea:23:a7:4e:95:db:97:78:51:ce:c7:02:ef: df:94:c5:22:25:7e:c1:d8:66:6e:29:5c:a6:45:73: 2e:5d:c3:9a:4e:9c:88:65:1f:aa:1e:97:2a:f2:49: da:5d:35:34:7b:f1:25:f8:21:f3:d6:25:83:73:1c: 64:3c:d2:24:99:04:8f:5e:c2:c2:f1:11:46:7f:bd: ff:43:af:04:bd:66:57:56:c3:c4:13:51:6c:39:df: 11:b4:51:b2:80:db:79:94:65:37:78:b3:37:d3:cc: 6c:1f:d0:b4:4c:5c:f0:2e:d1:61:64:f7:2e:b2:c6: 57:dd:27:ab:71:8a:14:bf:01:78:db:4e:06:c0:8e: 5b:68:30:d2:bd:69:52:53:dc:b7:e2:6a:c0:39:60: d8:18:9a:ac:20:b5:44:b2:76:ee:e2:fd:cf:d2:27: 9a:22:62:11:8f:ef:ba:d5:ea:7d:7d:b0:43:f5:20: f8:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 77:8F:08:4E:74:78:A2:16:5A:A9:D6:63:B6:35:5F:43:34:EC:3E:6B X509v3 Authority Key Identifier: keyid:19:11:AE:41:84:5D:EE:2E:B8:84:90:C5:76:7E:3C:1A:6E:30:E8:08 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/f957fa5d-fa67-4e6b-8920-c4747adb30bb/0/1911AE41845DEE2EB88490C5767E3C1A6E30E808.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1911AE41845DEE2EB88490C5767E3C1A6E30E808.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f957fa5d-fa67-4e6b-8920-c4747adb30bb/0/1911AE41845DEE2EB88490C5767E3C1A6E30E808.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a6:c5:0a:ea:6c:ac:7e:02:13:8d:40:01:08:6e:3e:ee:d9:11: 07:09:b7:5e:13:68:22:8f:62:d5:70:26:7a:21:b1:62:b6:d0: da:dd:4b:aa:39:16:11:1e:dd:a6:35:14:4b:b5:45:ee:69:c1: 52:78:19:e6:28:60:73:b1:cc:7b:d9:aa:17:30:44:89:b4:f3: d4:41:44:71:cc:92:5f:32:3b:ec:05:31:dd:56:67:2c:a7:70: 6e:ca:c8:ab:21:c3:e2:55:d0:84:e0:ce:db:02:49:2f:ea:94: a3:36:82:59:cb:55:1a:68:c0:56:eb:cd:2e:aa:9f:28:8c:04: 25:cc:8f:05:6f:1b:de:b8:ec:51:07:1d:e4:88:f1:73:3f:68: 1d:f3:a9:89:b4:37:0d:a5:40:53:e0:6c:58:03:65:cf:2b:84: 89:f3:9f:b3:59:9b:0b:05:49:6f:b0:03:c3:c9:c2:58:f0:c0: cf:00:e0:a1:b5:6f:68:fb:5e:fc:4e:1e:84:75:5d:f8:26:ae: b2:57:f1:84:0d:f7:b8:26:72:4e:cb:d7:fe:70:33:0a:c5:59: ef:2a:13:1a:51:a3:6a:0c:f7:b3:da:5a:4c:4b:fe:56:aa:3b: 24:25:5f:95:a0:ce:80:fb:58:c8:64:ee:7c:0b:92:7d:0d:d2: 8f:40:10:b6 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUKq7RxXK+sPHCtvD7tWWqoz/XAcwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTkxMUFFNDE4NDVERUUyRUI4ODQ5MEM1NzY3RTNDMUE2 RTMwRTgwODAeFw0yNTEyMTcwNTM1MDFaFw0yNTEyMjAxMzA5MDFaMDMxMTAvBgNV BAMTKDc3OEYwODRFNzQ3OEEyMTY1QUE5RDY2M0I2MzU1RjQzMzRFQzNFNkIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDQlDplxjIkiVbMIYYTLLTB/609 i3CjVotqLwyH+tILVUAaJrOt/4ne0u3dZL5Xvrga+2zYRZ2jbkGTG3wP9H8cxbU1 PtH/gKuITAnN6iOnTpXbl3hRzscC79+UxSIlfsHYZm4pXKZFcy5dw5pOnIhlH6oe lyrySdpdNTR78SX4IfPWJYNzHGQ80iSZBI9ewsLxEUZ/vf9DrwS9ZldWw8QTUWw5 3xG0UbKA23mUZTd4szfTzGwf0LRMXPAu0WFk9y6yxlfdJ6txihS/AXjbTgbAjlto MNK9aVJT3LfiasA5YNgYmqwgtUSydu7i/c/SJ5oiYhGP77rV6n19sEP1IPgrAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUd48ITnR4ohZaqdZjtjVfQzTsPmswHwYDVR0j BBgwFoAUGRGuQYRd7i64hJDFdn48Gm4w6AgwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m OTU3ZmE1ZC1mYTY3LTRlNmItODkyMC1jNDc0N2FkYjMwYmIvMC8xOTExQUU0MTg0 NURFRTJFQjg4NDkwQzU3NjdFM0MxQTZFMzBFODA4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMTkxMUFFNDE4NDVERUUyRUI4ODQ5MEM1NzY3RTNDMUE2RTMw RTgwOC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZjk1N2ZhNWQtZmE2Ny00ZTZiLTg5 MjAtYzQ3NDdhZGIzMGJiLzAvMTkxMUFFNDE4NDVERUUyRUI4ODQ5MEM1NzY3RTND MUE2RTMwRTgwOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKbFCupsrH4CE41AAQhuPu7ZEQcJt14TaCKP YtVwJnohsWK20NrdS6o5FhEe3aY1FEu1Re5pwVJ4GeYoYHOxzHvZqhcwRIm089RB RHHMkl8yO+wFMd1WZyyncG7KyKshw+JV0ITgztsCSS/qlKM2glnLVRpowFbrzS6q nyiMBCXMjwVvG9647FEHHeSI8XM/aB3zqYm0Nw2lQFPgbFgDZc8rhInzn7NZmwsF SW+wA8PJwljwwM8A4KG1b2j7XvxOHoR1XfgmrrJX8YQN97gmck7L1/5wMwrFWe8q ExpRo2oM97PaWkxL/laqOyQlX5WgzoD7WMhk7nwLkn0N0o9AELY= -----END CERTIFICATE-----Generated at Wed Dec 17 16:36:06 2025 by rpki-client