This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/ac45c22c-275b-4295-b453-60a783b9c42a/0/1F56B4FADE1163027086547FBCB424EDF45191FD.mft File: 1F56B4FADE1163027086547FBCB424EDF45191FD.mft (raw, json) Hash identifier: DvrSYQEpfZki5lYngnnlonsNVNP3YIPYFRr01eUsUxE= Subject key identifier: CF:1B:4D:94:C1:A6:20:E3:C2:A9:EC:F1:DC:6E:B3:E5:D0:C1:7B:DE Authority key identifier: 1F:56:B4:FA:DE:11:63:02:70:86:54:7F:BC:B4:24:ED:F4:51:91:FD Certificate issuer: /CN=1F56B4FADE1163027086547FBCB424EDF45191FD Certificate serial: 426ECE1063DABE4823A427409C6B7302200BED5E Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1F56B4FADE1163027086547FBCB424EDF45191FD.cer Subject info access: rsync://repo-rpki.idnic.net/repo/ac45c22c-275b-4295-b453-60a783b9c42a/0/1F56B4FADE1163027086547FBCB424EDF45191FD.mft Manifest number: 0233 Signing time: Thu 25 Dec 2025 15:11:37 +0000 Manifest this update: Thu 25 Dec 2025 15:06:37 +0000 Manifest next update: Sun 28 Dec 2025 22:16:37 +0000 Files and hashes: 1: 3130332e3133362e342e302f32322d3234203d3e203338333230.roa (hash: MgjQuZZ4Lo3TWUBhrnPqAcWFkrZSN9rapanfesBZ5eM=) 2: 1F56B4FADE1163027086547FBCB424EDF45191FD.crl (hash: rsYjH96vIGhN8zqaLkOdgJGkrv1ihyT583f6GrmpV20=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/ac45c22c-275b-4295-b453-60a783b9c42a/0/1F56B4FADE1163027086547FBCB424EDF45191FD.crl rsync://repo-rpki.idnic.net/repo/ac45c22c-275b-4295-b453-60a783b9c42a/0/1F56B4FADE1163027086547FBCB424EDF45191FD.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1F56B4FADE1163027086547FBCB424EDF45191FD.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 28 Dec 2025 20:04:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 42:6e:ce:10:63:da:be:48:23:a4:27:40:9c:6b:73:02:20:0b:ed:5e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1F56B4FADE1163027086547FBCB424EDF45191FD Validity Not Before: Dec 25 15:06:37 2025 GMT Not After : Dec 28 22:16:37 2025 GMT Subject: CN=CF1B4D94C1A620E3C2A9ECF1DC6EB3E5D0C17BDE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f4:89:98:41:42:5d:9a:8e:5a:77:67:46:a5:3e: 78:a0:b6:74:9f:57:8a:5d:c0:ef:61:27:95:df:90: 75:d3:34:a9:1c:b0:6f:73:7c:31:d4:f8:6b:f8:d2: 05:bf:42:b6:3e:bb:20:0a:07:a7:e8:02:be:1a:56: e8:e2:d0:71:2c:2a:74:56:ab:54:e1:d0:12:b8:22: 59:ae:6f:0f:64:ce:fd:c5:ba:8a:a9:62:9d:55:e8: 3c:d1:46:ca:4c:a7:36:73:99:5b:e1:9e:2f:60:0e: 19:df:66:73:5c:4f:c7:39:0f:80:ac:30:e8:63:78: 2b:3d:3a:6e:6b:fb:3d:08:50:47:e7:72:bc:3f:d7: e5:72:0b:34:61:1e:a2:79:80:4b:90:0f:04:91:cf: ec:0d:57:b0:92:aa:1e:a0:f6:21:ce:55:91:8f:61: 6f:c5:d9:3d:86:e7:91:49:1e:4f:86:b6:ae:f5:7e: ce:af:c0:4c:2a:47:00:6b:68:76:d0:c2:87:ed:14: b3:8c:ea:f5:cc:db:c2:94:f6:89:b4:14:3c:98:51: 64:a7:67:c7:6b:8d:d4:51:e0:15:77:20:51:8d:ba: 06:23:94:45:20:06:dd:bf:9a:35:15:ab:75:e1:91: 93:55:ab:16:23:5f:61:b0:60:46:81:f2:ad:a4:90: 72:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:1B:4D:94:C1:A6:20:E3:C2:A9:EC:F1:DC:6E:B3:E5:D0:C1:7B:DE X509v3 Authority Key Identifier: keyid:1F:56:B4:FA:DE:11:63:02:70:86:54:7F:BC:B4:24:ED:F4:51:91:FD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/ac45c22c-275b-4295-b453-60a783b9c42a/0/1F56B4FADE1163027086547FBCB424EDF45191FD.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1F56B4FADE1163027086547FBCB424EDF45191FD.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ac45c22c-275b-4295-b453-60a783b9c42a/0/1F56B4FADE1163027086547FBCB424EDF45191FD.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption f7:2e:36:42:e8:fc:12:01:ce:a9:b6:04:cd:11:d3:96:6e:3e: 7b:8b:fa:78:42:ab:0c:45:67:46:b7:75:9e:ef:15:53:df:67: 8e:63:7f:fc:46:7c:3c:02:ab:de:24:28:8a:7b:4b:09:d6:ed: bd:de:db:29:47:2a:8b:a6:fd:ce:7f:db:fe:20:5f:47:d9:66: 48:cc:1d:37:0f:e6:2b:49:15:f0:5f:e3:4d:b4:7f:21:09:64: 89:7e:7a:d3:3f:0c:ed:93:66:94:ed:cc:69:19:ad:a8:a6:c9: 0a:bb:f4:22:b0:d6:2d:f7:25:46:7b:4a:e3:09:54:47:3b:73: df:ee:70:46:05:6d:e6:8e:dc:88:94:f3:d7:bc:cc:64:1b:07: 80:92:b8:c4:5c:2c:c3:bf:42:9a:55:2c:db:b3:ed:ea:8e:4d: e5:ff:11:ce:e9:c3:4a:05:cf:6e:6d:80:c3:6a:97:9e:6b:46: e2:3b:fa:b1:f5:e0:92:c7:1c:e3:5b:f9:b8:3d:f5:d3:b3:dc: 67:18:87:74:0f:f4:9b:d0:9c:d9:2e:27:e2:97:14:5f:f0:2b: 91:3a:7d:b7:13:71:e5:16:c8:bb:24:e5:32:46:b9:5e:42:2e: 9a:e6:75:8f:67:b8:a1:36:25:bc:88:0b:d0:93:7f:f1:b1:86: 14:6d:d8:bd -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUQm7OEGPavkgjpCdAnGtzAiAL7V4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUY1NkI0RkFERTExNjMwMjcwODY1NDdGQkNCNDI0RURG NDUxOTFGRDAeFw0yNTEyMjUxNTA2MzdaFw0yNTEyMjgyMjE2MzdaMDMxMTAvBgNV BAMTKENGMUI0RDk0QzFBNjIwRTNDMkE5RUNGMURDNkVCM0U1RDBDMTdCREUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD0iZhBQl2ajlp3Z0alPnigtnSf V4pdwO9hJ5XfkHXTNKkcsG9zfDHU+Gv40gW/QrY+uyAKB6foAr4aVuji0HEsKnRW q1Th0BK4Ilmubw9kzv3FuoqpYp1V6DzRRspMpzZzmVvhni9gDhnfZnNcT8c5D4Cs MOhjeCs9Om5r+z0IUEfncrw/1+VyCzRhHqJ5gEuQDwSRz+wNV7CSqh6g9iHOVZGP YW/F2T2G55FJHk+Gtq71fs6vwEwqRwBraHbQwoftFLOM6vXM28KU9om0FDyYUWSn Z8drjdRR4BV3IFGNugYjlEUgBt2/mjUVq3XhkZNVqxYjX2GwYEaB8q2kkHLpAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUzxtNlMGmIOPCqezx3G6z5dDBe94wHwYDVR0j BBgwFoAUH1a0+t4RYwJwhlR/vLQk7fRRkf0wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h YzQ1YzIyYy0yNzViLTQyOTUtYjQ1My02MGE3ODNiOWM0MmEvMC8xRjU2QjRGQURF MTE2MzAyNzA4NjU0N0ZCQ0I0MjRFREY0NTE5MUZELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMUY1NkI0RkFERTExNjMwMjcwODY1NDdGQkNCNDI0RURGNDUx OTFGRC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYWM0NWMyMmMtMjc1Yi00Mjk1LWI0 NTMtNjBhNzgzYjljNDJhLzAvMUY1NkI0RkFERTExNjMwMjcwODY1NDdGQkNCNDI0 RURGNDUxOTFGRC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAPcuNkLo/BIBzqm2BM0R05ZuPnuL+nhCqwxF Z0a3dZ7vFVPfZ45jf/xGfDwCq94kKIp7SwnW7b3e2ylHKoum/c5/2/4gX0fZZkjM HTcP5itJFfBf4020fyEJZIl+etM/DO2TZpTtzGkZraimyQq79CKw1i33JUZ7SuMJ VEc7c9/ucEYFbeaO3IiU89e8zGQbB4CSuMRcLMO/QppVLNuz7eqOTeX/Ec7pw0oF z25tgMNql55rRuI7+rH14JLHHONb+bg99dOz3GcYh3QP9JvQnNkuJ+KXFF/wK5E6 fbcTceUWyLsk5TJGuV5CLprmdY9nuKE2JbyIC9CTf/GxhhRt2L0= -----END CERTIFICATE-----Generated at Fri Dec 26 05:03:37 2025 by rpki-client