This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/a844e1b2-93c6-48ae-96cc-ed83829f5a20/0/56091C1067601EE93D3C4D25CDA071DC6C463934.mft File: 56091C1067601EE93D3C4D25CDA071DC6C463934.mft (raw, json) Hash identifier: +spfdR3nXeJxzYi/4IxyfUX20sdc5HSLDK9ett+20w0= Subject key identifier: 35:80:F6:09:8B:82:27:22:CB:EA:03:A1:C4:63:86:A2:81:12:1F:0D Authority key identifier: 56:09:1C:10:67:60:1E:E9:3D:3C:4D:25:CD:A0:71:DC:6C:46:39:34 Certificate issuer: /CN=56091C1067601EE93D3C4D25CDA071DC6C463934 Certificate serial: 42F2E59AD4D0DB3662EDBCC9B670BB0792E29656 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/56091C1067601EE93D3C4D25CDA071DC6C463934.cer Subject info access: rsync://repo-rpki.idnic.net/repo/a844e1b2-93c6-48ae-96cc-ed83829f5a20/0/56091C1067601EE93D3C4D25CDA071DC6C463934.mft Manifest number: 04B4 Signing time: Fri 12 Dec 2025 10:02:24 +0000 Manifest this update: Fri 12 Dec 2025 09:57:24 +0000 Manifest next update: Mon 15 Dec 2025 11:28:24 +0000 Files and hashes: 1: 56091C1067601EE93D3C4D25CDA071DC6C463934.crl (hash: KDwgoawnvBDKAO9SYAzBGtn4UVhItQiaYNeXYnhGPJE=) 2: 323030313a6466333a663738303a3a2f34382d3438203d3e20313431303532.roa (hash: aCyW8NmDjZMCh2+G52q/vKX95rKhz1Ux4WduaPd1TnU=) 3: 3130332e3135322e35322e302f32342d3234203d3e20313431303532.roa (hash: 86YZqKEPm3VWmd4mc9aNYxNuN2xUPglyyCjijX0pxoI=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/a844e1b2-93c6-48ae-96cc-ed83829f5a20/0/56091C1067601EE93D3C4D25CDA071DC6C463934.crl rsync://repo-rpki.idnic.net/repo/a844e1b2-93c6-48ae-96cc-ed83829f5a20/0/56091C1067601EE93D3C4D25CDA071DC6C463934.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/56091C1067601EE93D3C4D25CDA071DC6C463934.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 15 Dec 2025 11:28:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 42:f2:e5:9a:d4:d0:db:36:62:ed:bc:c9:b6:70:bb:07:92:e2:96:56 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=56091C1067601EE93D3C4D25CDA071DC6C463934 Validity Not Before: Dec 12 09:57:24 2025 GMT Not After : Dec 15 11:28:24 2025 GMT Subject: CN=3580F6098B822722CBEA03A1C46386A281121F0D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:10:19:a3:1a:d5:75:71:3d:7a:75:8b:d3:70: ee:f9:89:50:44:ab:da:17:bc:49:fe:ea:90:53:21: 64:2e:2c:7e:6d:97:7c:63:26:90:93:69:6c:3a:39: 1e:e5:bb:3d:77:e0:83:1b:26:c9:fa:09:28:99:6e: d3:2a:ff:7c:fa:c4:4b:0f:db:5a:64:70:40:9c:a8: 19:f5:24:7b:8d:4f:80:ae:de:56:87:38:84:d6:c8: 0a:d8:54:04:da:d4:ed:96:4e:70:0b:ee:73:5f:64: 2a:9b:4e:e9:bf:20:80:e4:e9:06:46:a1:09:24:51: 67:cb:83:4b:ca:6b:78:78:d3:9a:bf:7e:29:c5:4a: bc:a6:1d:a0:c7:5a:01:c5:a0:bb:a2:80:cf:83:81: 12:a1:6b:16:1b:8b:24:8e:0a:22:c8:de:c1:97:98: 1e:c3:5e:02:c5:98:86:b2:0f:bd:f9:1b:1c:f0:1c: 87:ef:84:82:79:96:42:8d:76:90:b3:bd:d7:9e:a5: 51:46:bf:f2:a6:c2:54:99:a3:61:7c:b5:d4:e7:02: 2d:5c:3a:b5:15:8a:dc:2d:d7:f9:1c:fe:41:32:a8: 55:c9:8c:db:02:12:a8:8e:5d:e7:e0:d9:a5:a8:0d: 9f:fc:9c:af:01:58:58:2c:ae:dc:d9:d6:fd:f3:b1: e9:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:80:F6:09:8B:82:27:22:CB:EA:03:A1:C4:63:86:A2:81:12:1F:0D X509v3 Authority Key Identifier: keyid:56:09:1C:10:67:60:1E:E9:3D:3C:4D:25:CD:A0:71:DC:6C:46:39:34 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/a844e1b2-93c6-48ae-96cc-ed83829f5a20/0/56091C1067601EE93D3C4D25CDA071DC6C463934.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/56091C1067601EE93D3C4D25CDA071DC6C463934.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a844e1b2-93c6-48ae-96cc-ed83829f5a20/0/56091C1067601EE93D3C4D25CDA071DC6C463934.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ca:ef:c8:77:01:9b:4f:2c:75:c9:ae:ac:49:c3:0e:8a:7d:b3: 43:d6:45:1c:bf:82:2e:3d:e7:f1:20:69:86:d8:7d:81:c6:59: c7:ae:92:70:a3:d8:ba:26:09:54:13:0d:29:c2:46:ae:18:a4: ea:18:f8:d7:f2:ba:d5:14:a3:90:6f:e7:82:a3:e6:b6:7c:e0: 02:a4:f8:6b:4d:0a:51:c1:c7:ae:2e:d7:d7:c3:37:a1:9d:a7: 6e:08:7d:a1:78:cc:12:54:d3:f1:07:fb:f8:27:7d:95:b1:3d: 16:cc:11:98:86:c1:98:60:c9:e3:73:d8:4c:4f:86:b0:dd:62: 31:a9:11:68:bf:ba:93:49:56:05:cd:e7:c7:c8:ca:86:18:a4: e5:81:ca:06:21:cc:e3:aa:96:e9:e6:1a:81:b3:55:fa:bd:e2: 3f:45:d1:08:d8:86:59:2d:9f:f3:3c:67:a6:6f:ed:f9:8f:c1: 1a:2c:eb:c1:3b:e8:3a:e1:4c:63:23:a2:e9:1e:61:b1:19:08: 2b:c8:34:ac:19:ed:91:a1:52:d7:8b:ac:af:c6:c2:5c:92:0e: c0:e0:7c:c5:7d:ff:2e:85:5a:9f:10:88:fe:42:f1:a3:79:b6: c1:32:8e:03:ce:c1:71:f3:38:0e:a2:fe:5b:3e:09:9e:22:e9: c7:41:b9:9c -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUQvLlmtTQ2zZi7bzJtnC7B5LillYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTYwOTFDMTA2NzYwMUVFOTNEM0M0RDI1Q0RBMDcxREM2 QzQ2MzkzNDAeFw0yNTEyMTIwOTU3MjRaFw0yNTEyMTUxMTI4MjRaMDMxMTAvBgNV BAMTKDM1ODBGNjA5OEI4MjI3MjJDQkVBMDNBMUM0NjM4NkEyODExMjFGMEQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCzEBmjGtV1cT16dYvTcO75iVBE q9oXvEn+6pBTIWQuLH5tl3xjJpCTaWw6OR7luz134IMbJsn6CSiZbtMq/3z6xEsP 21pkcECcqBn1JHuNT4Cu3laHOITWyArYVATa1O2WTnAL7nNfZCqbTum/IIDk6QZG oQkkUWfLg0vKa3h405q/finFSrymHaDHWgHFoLuigM+DgRKhaxYbiySOCiLI3sGX mB7DXgLFmIayD735GxzwHIfvhIJ5lkKNdpCzvdeepVFGv/KmwlSZo2F8tdTnAi1c OrUVitwt1/kc/kEyqFXJjNsCEqiOXefg2aWoDZ/8nK8BWFgsrtzZ1v3zsemvAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUNYD2CYuCJyLL6gOhxGOGooESHw0wHwYDVR0j BBgwFoAUVgkcEGdgHuk9PE0lzaBx3GxGOTQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h ODQ0ZTFiMi05M2M2LTQ4YWUtOTZjYy1lZDgzODI5ZjVhMjAvMC81NjA5MUMxMDY3 NjAxRUU5M0QzQzREMjVDREEwNzFEQzZDNDYzOTM0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNTYwOTFDMTA2NzYwMUVFOTNEM0M0RDI1Q0RBMDcxREM2QzQ2 MzkzNC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYTg0NGUxYjItOTNjNi00OGFlLTk2 Y2MtZWQ4MzgyOWY1YTIwLzAvNTYwOTFDMTA2NzYwMUVFOTNEM0M0RDI1Q0RBMDcx REM2QzQ2MzkzNC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAMrvyHcBm08sdcmurEnDDop9s0PWRRy/gi49 5/EgaYbYfYHGWceuknCj2LomCVQTDSnCRq4YpOoY+NfyutUUo5Bv54Kj5rZ84AKk +GtNClHBx64u19fDN6Gdp24IfaF4zBJU0/EH+/gnfZWxPRbMEZiGwZhgyeNz2ExP hrDdYjGpEWi/upNJVgXN58fIyoYYpOWBygYhzOOqlunmGoGzVfq94j9F0QjYhlkt n/M8Z6Zv7fmPwRos68E76DrhTGMjoukeYbEZCCvINKwZ7ZGhUteLrK/GwlySDsDg fMV9/y6FWp8QiP5C8aN5tsEyjgPOwXHzOA6i/ls+CZ4i6cdBuZw= -----END CERTIFICATE-----Generated at Sun Dec 14 01:53:51 2025 by rpki-client