This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/f957fa5d-fa67-4e6b-8920-c4747adb30bb/0/1911AE41845DEE2EB88490C5767E3C1A6E30E808.mft File: 1911AE41845DEE2EB88490C5767E3C1A6E30E808.mft (raw, json) Hash identifier: 0vrDUSdZ2nduG7I2SL5XjKEUMnhh4AbOBMZFC2qU5g4= Subject key identifier: AA:B2:D6:7F:E2:AB:8A:18:73:B3:AC:21:BF:1D:1B:90:E8:F3:DD:5F Authority key identifier: 19:11:AE:41:84:5D:EE:2E:B8:84:90:C5:76:7E:3C:1A:6E:30:E8:08 Certificate issuer: /CN=1911AE41845DEE2EB88490C5767E3C1A6E30E808 Certificate serial: 3577A128AF7FF76F6BE0EC11DE1E759B68F12131 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1911AE41845DEE2EB88490C5767E3C1A6E30E808.cer Subject info access: rsync://repo-rpki.idnic.net/repo/f957fa5d-fa67-4e6b-8920-c4747adb30bb/0/1911AE41845DEE2EB88490C5767E3C1A6E30E808.mft Manifest number: 011B Signing time: Fri 05 Dec 2025 22:30:01 +0000 Manifest this update: Fri 05 Dec 2025 22:25:01 +0000 Manifest next update: Tue 09 Dec 2025 06:04:01 +0000 Files and hashes: 1: 3230332e3137352e3130322e302f32332d3234203d3e20313532303134.roa (hash: Jwv0gA8fk3yoBN8wNHBZ8Dx27fR4hWBf2um8D+vcr6o=) 2: 1911AE41845DEE2EB88490C5767E3C1A6E30E808.crl (hash: SNLGHWbEFSQKAnGPdPLFmUxPcnniHmLThhwrN7FCbE8=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/f957fa5d-fa67-4e6b-8920-c4747adb30bb/0/1911AE41845DEE2EB88490C5767E3C1A6E30E808.crl rsync://repo-rpki.idnic.net/repo/f957fa5d-fa67-4e6b-8920-c4747adb30bb/0/1911AE41845DEE2EB88490C5767E3C1A6E30E808.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1911AE41845DEE2EB88490C5767E3C1A6E30E808.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 09 Dec 2025 06:04:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 35:77:a1:28:af:7f:f7:6f:6b:e0:ec:11:de:1e:75:9b:68:f1:21:31 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1911AE41845DEE2EB88490C5767E3C1A6E30E808 Validity Not Before: Dec 5 22:25:01 2025 GMT Not After : Dec 9 06:04:01 2025 GMT Subject: CN=AAB2D67FE2AB8A1873B3AC21BF1D1B90E8F3DD5F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:7c:27:a5:ab:f9:69:fa:64:ee:67:f2:f1:e5: 23:f1:c2:f2:23:11:5e:a5:61:a0:58:dc:6f:94:3d: dd:c0:1d:d3:fd:da:37:07:73:dd:43:40:93:ae:ea: b2:f1:d4:de:bd:1e:31:f2:d7:d6:63:a7:00:1c:50: 4d:c3:99:87:fc:6c:64:32:a4:cf:9d:88:9b:18:54: d6:12:b6:a7:09:3e:90:fc:95:04:4d:d4:7f:c3:25: 34:ff:4a:7f:a5:95:3b:13:e5:60:45:fc:59:e0:69: 3e:d3:86:de:2c:74:f1:cf:45:9c:b3:01:d6:50:47: 56:58:31:5b:4d:c6:00:c8:64:83:40:e6:00:03:53: 32:9e:1d:df:20:b5:16:62:4b:b6:6a:5e:34:0f:a5: 8e:d6:fd:ce:ed:aa:01:37:c7:2f:6a:a9:20:7c:4e: a6:e3:96:df:ae:73:ae:c7:c5:09:0a:fa:e9:3e:43: 0d:54:40:46:a9:76:a4:ca:1e:08:03:36:67:01:32: b2:be:3c:28:c6:1c:54:80:2d:ca:02:03:d7:9a:16: cf:64:2e:76:d5:60:bc:68:9f:e5:f9:f1:29:3e:04: 5e:06:fe:e0:63:2e:af:70:58:b0:5c:10:50:33:4f: fc:8c:99:7b:7f:62:13:81:60:5a:27:cd:8f:ab:ad: b5:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:B2:D6:7F:E2:AB:8A:18:73:B3:AC:21:BF:1D:1B:90:E8:F3:DD:5F X509v3 Authority Key Identifier: keyid:19:11:AE:41:84:5D:EE:2E:B8:84:90:C5:76:7E:3C:1A:6E:30:E8:08 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/f957fa5d-fa67-4e6b-8920-c4747adb30bb/0/1911AE41845DEE2EB88490C5767E3C1A6E30E808.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1911AE41845DEE2EB88490C5767E3C1A6E30E808.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f957fa5d-fa67-4e6b-8920-c4747adb30bb/0/1911AE41845DEE2EB88490C5767E3C1A6E30E808.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 41:f2:1e:80:f0:b6:87:f9:ba:52:ed:8c:a8:18:4b:a8:ca:21: 55:9b:3e:69:44:89:bf:0b:55:d5:63:80:5d:ba:c0:88:09:a1: 44:f1:e1:5a:23:6b:65:88:9b:fe:0d:90:74:bf:b0:65:5e:c3: 06:e8:51:81:6d:f8:b7:cd:63:5e:c2:03:33:45:a5:f3:d8:c1: 0d:93:c3:d5:73:da:d5:c4:6a:c7:bf:59:72:e9:34:ed:65:22: 27:60:49:8f:44:6e:74:7f:07:63:61:78:f2:9f:6e:04:98:64: 32:f5:c0:02:ec:46:b2:e3:b2:ec:f2:a0:18:62:5a:0c:89:70: f5:2c:e7:28:98:67:51:42:8b:3c:84:5c:d3:6e:94:34:0f:9b: e3:c3:c3:b1:22:16:43:c4:d6:ee:56:c2:35:1f:b7:2e:a9:c4: 23:b1:d5:6e:12:4a:06:cb:6e:24:8a:4d:5f:a3:4f:fe:62:58: 0b:c2:fc:b1:6a:bc:56:46:e4:3a:5b:23:fb:c9:8e:a4:80:5c: 57:b2:35:32:f8:e1:2e:ee:f4:f5:32:98:8c:21:1a:5a:b6:0f: b8:0f:6c:b5:a3:16:e0:3d:4f:72:ca:1e:2f:9a:32:22:dd:4b: 7e:8f:ac:2e:05:bf:5d:8f:fe:66:e6:76:37:4f:b9:87:d1:03: fd:4e:57:bd -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUNXehKK9/929r4OwR3h51m2jxITEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTkxMUFFNDE4NDVERUUyRUI4ODQ5MEM1NzY3RTNDMUE2 RTMwRTgwODAeFw0yNTEyMDUyMjI1MDFaFw0yNTEyMDkwNjA0MDFaMDMxMTAvBgNV BAMTKEFBQjJENjdGRTJBQjhBMTg3M0IzQUMyMUJGMUQxQjkwRThGM0RENUYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDZfCelq/lp+mTuZ/Lx5SPxwvIj EV6lYaBY3G+UPd3AHdP92jcHc91DQJOu6rLx1N69HjHy19ZjpwAcUE3DmYf8bGQy pM+diJsYVNYStqcJPpD8lQRN1H/DJTT/Sn+llTsT5WBF/FngaT7Tht4sdPHPRZyz AdZQR1ZYMVtNxgDIZINA5gADUzKeHd8gtRZiS7ZqXjQPpY7W/c7tqgE3xy9qqSB8 Tqbjlt+uc67HxQkK+uk+Qw1UQEapdqTKHggDNmcBMrK+PCjGHFSALcoCA9eaFs9k LnbVYLxon+X58Sk+BF4G/uBjLq9wWLBcEFAzT/yMmXt/YhOBYFonzY+rrbWPAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUqrLWf+Krihhzs6whvx0bkOjz3V8wHwYDVR0j BBgwFoAUGRGuQYRd7i64hJDFdn48Gm4w6AgwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m OTU3ZmE1ZC1mYTY3LTRlNmItODkyMC1jNDc0N2FkYjMwYmIvMC8xOTExQUU0MTg0 NURFRTJFQjg4NDkwQzU3NjdFM0MxQTZFMzBFODA4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMTkxMUFFNDE4NDVERUUyRUI4ODQ5MEM1NzY3RTNDMUE2RTMw RTgwOC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZjk1N2ZhNWQtZmE2Ny00ZTZiLTg5 MjAtYzQ3NDdhZGIzMGJiLzAvMTkxMUFFNDE4NDVERUUyRUI4ODQ5MEM1NzY3RTND MUE2RTMwRTgwOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEHyHoDwtof5ulLtjKgYS6jKIVWbPmlEib8L VdVjgF26wIgJoUTx4Voja2WIm/4NkHS/sGVewwboUYFt+LfNY17CAzNFpfPYwQ2T w9Vz2tXEase/WXLpNO1lIidgSY9EbnR/B2NhePKfbgSYZDL1wALsRrLjsuzyoBhi WgyJcPUs5yiYZ1FCizyEXNNulDQPm+PDw7EiFkPE1u5WwjUfty6pxCOx1W4SSgbL biSKTV+jT/5iWAvC/LFqvFZG5DpbI/vJjqSAXFeyNTL44S7u9PUymIwhGlq2D7gP bLWjFuA9T3LKHi+aMiLdS36PrC4Fv12P/mbmdjdPuYfRA/1OV70= -----END CERTIFICATE-----Generated at Sun Dec 7 03:06:18 2025 by rpki-client