This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/f7ef28af-a9ae-4c33-8c98-51209fb23dba/0/111A56FF0468DAC0FFF41B82D23F21DD4139F00F.mft File: 111A56FF0468DAC0FFF41B82D23F21DD4139F00F.mft (raw, json) Hash identifier: GhHLmPUtM/PDMK+eNvlr5dHoe1QTrtMKhdDGFN9iuFg= Subject key identifier: F9:73:F2:F2:D0:46:55:B8:3D:14:CE:54:BE:34:4A:1E:16:D4:C0:3E Authority key identifier: 11:1A:56:FF:04:68:DA:C0:FF:F4:1B:82:D2:3F:21:DD:41:39:F0:0F Certificate issuer: /CN=111A56FF0468DAC0FFF41B82D23F21DD4139F00F Certificate serial: 36714B03186BF89A60E9FCA18599686936C91747 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/111A56FF0468DAC0FFF41B82D23F21DD4139F00F.cer Subject info access: rsync://repo-rpki.idnic.net/repo/f7ef28af-a9ae-4c33-8c98-51209fb23dba/0/111A56FF0468DAC0FFF41B82D23F21DD4139F00F.mft Manifest number: 03 Signing time: Wed 03 Dec 2025 12:00:49 +0000 Manifest this update: Wed 03 Dec 2025 11:55:49 +0000 Manifest next update: Sat 06 Dec 2025 17:40:49 +0000 Files and hashes: 1: 111A56FF0468DAC0FFF41B82D23F21DD4139F00F.crl (hash: MrIRzZkBw6JKIBamUvtL2/Mm3V7hSDyEIMPRP/dDodc=) 2: 3130332e3234372e3234322e302f32332d3234203d3e20313531353337.roa (hash: /KC3HC1ev3eUia/MbScpps/zMZoYFTTbRVMV+spgfEs=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/f7ef28af-a9ae-4c33-8c98-51209fb23dba/0/111A56FF0468DAC0FFF41B82D23F21DD4139F00F.crl rsync://repo-rpki.idnic.net/repo/f7ef28af-a9ae-4c33-8c98-51209fb23dba/0/111A56FF0468DAC0FFF41B82D23F21DD4139F00F.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/111A56FF0468DAC0FFF41B82D23F21DD4139F00F.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 06 Dec 2025 12:07:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 36:71:4b:03:18:6b:f8:9a:60:e9:fc:a1:85:99:68:69:36:c9:17:47 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=111A56FF0468DAC0FFF41B82D23F21DD4139F00F Validity Not Before: Dec 3 11:55:49 2025 GMT Not After : Dec 6 17:40:49 2025 GMT Subject: CN=F973F2F2D04655B83D14CE54BE344A1E16D4C03E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:97:80:00:ac:bd:46:86:71:12:2d:b1:75:e0: 9c:17:aa:7f:b4:32:b6:ae:de:4b:00:8e:78:6d:34: 44:0b:cd:43:05:f9:92:ed:51:64:87:0f:ad:81:e0: 30:b3:b0:24:02:9d:58:a6:ae:8b:f5:d3:9b:76:18: 31:b8:2c:57:8f:c0:55:4c:28:9c:e4:df:3a:18:e1: e2:d2:86:01:75:41:19:2c:17:d4:a1:5f:e0:37:04: a1:18:ef:24:df:ff:63:65:b0:72:79:e5:46:71:ca: 2b:93:99:5a:14:79:ed:b7:90:c3:a5:26:13:0f:eb: c8:0f:5f:1e:48:19:5b:90:ca:69:86:64:53:6e:03: 5c:26:c5:ff:0a:cc:02:11:09:b9:3a:67:c7:02:db: 2a:c8:3e:0f:31:48:e3:de:f8:4b:8b:d5:7b:ed:a2: 61:67:f4:ea:c0:c3:83:f0:f4:54:ad:2e:de:82:b9: cd:b9:57:9a:97:4a:3b:84:bb:43:e1:4d:04:64:5c: 01:2b:3d:c1:62:af:b5:d3:f3:07:a2:d2:1c:24:6e: 69:35:67:05:ea:41:77:ca:15:fa:18:5e:19:bd:c4: 44:cf:af:97:ad:51:fb:61:47:b4:f1:2f:1d:40:8a: ab:1c:c3:c0:1f:d1:38:71:0b:43:0a:82:d1:b3:42: 98:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F9:73:F2:F2:D0:46:55:B8:3D:14:CE:54:BE:34:4A:1E:16:D4:C0:3E X509v3 Authority Key Identifier: keyid:11:1A:56:FF:04:68:DA:C0:FF:F4:1B:82:D2:3F:21:DD:41:39:F0:0F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/f7ef28af-a9ae-4c33-8c98-51209fb23dba/0/111A56FF0468DAC0FFF41B82D23F21DD4139F00F.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/111A56FF0468DAC0FFF41B82D23F21DD4139F00F.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f7ef28af-a9ae-4c33-8c98-51209fb23dba/0/111A56FF0468DAC0FFF41B82D23F21DD4139F00F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 48:dd:bc:c5:10:e6:8c:af:e7:3d:67:22:0f:17:26:3b:e9:0b: 8d:73:db:33:69:07:de:64:db:e3:18:af:b9:c9:98:a9:80:dd: 5e:6c:7f:50:6b:dc:9d:81:d9:28:bf:ff:97:35:5b:d1:57:ed: fc:3d:ad:57:a7:5e:ae:48:ec:3e:74:f7:14:9d:48:41:2d:7d: 48:4b:e7:80:e0:ff:4b:13:8e:30:4f:6b:55:f3:f4:17:7b:43: e6:f4:08:a9:d4:d8:42:c7:5d:06:db:cd:da:94:04:19:90:98: 4b:84:4a:ca:21:ab:e6:e2:36:82:f5:ea:f1:62:96:2c:fa:d2: 74:12:65:bd:37:72:41:e6:b0:00:c1:5f:04:2c:b0:2d:a5:0f: d1:0b:5f:ff:70:5e:df:03:23:ce:71:95:74:31:03:b5:2f:d3: 86:87:55:f9:ed:d0:f0:cc:86:e7:98:9e:32:61:5e:c8:36:62: 95:5d:97:be:96:4e:81:c8:bb:8e:34:68:1a:9c:84:3f:11:cc: 7e:39:7f:fc:59:7a:0c:ca:3c:0e:84:23:77:df:aa:45:97:3e: 39:7a:d5:05:78:ff:59:65:e3:14:85:04:1b:fa:e0:f2:42:4d: fa:46:54:8d:9d:0b:ee:43:6a:a5:9e:f8:79:9f:e9:73:1e:8e: dc:93:ba:23 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUNnFLAxhr+Jpg6fyhhZloaTbJF0cwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTExQTU2RkYwNDY4REFDMEZGRjQxQjgyRDIzRjIxREQ0 MTM5RjAwRjAeFw0yNTEyMDMxMTU1NDlaFw0yNTEyMDYxNzQwNDlaMDMxMTAvBgNV BAMTKEY5NzNGMkYyRDA0NjU1QjgzRDE0Q0U1NEJFMzQ0QTFFMTZENEMwM0UwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDjl4AArL1GhnESLbF14JwXqn+0 Mrau3ksAjnhtNEQLzUMF+ZLtUWSHD62B4DCzsCQCnVimrov105t2GDG4LFePwFVM KJzk3zoY4eLShgF1QRksF9ShX+A3BKEY7yTf/2NlsHJ55UZxyiuTmVoUee23kMOl JhMP68gPXx5IGVuQymmGZFNuA1wmxf8KzAIRCbk6Z8cC2yrIPg8xSOPe+EuL1Xvt omFn9OrAw4Pw9FStLt6Cuc25V5qXSjuEu0PhTQRkXAErPcFir7XT8wei0hwkbmk1 ZwXqQXfKFfoYXhm9xETPr5etUfthR7TxLx1Aiqscw8Af0ThxC0MKgtGzQpiVAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU+XPy8tBGVbg9FM5UvjRKHhbUwD4wHwYDVR0j BBgwFoAUERpW/wRo2sD/9BuC0j8h3UE58A8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m N2VmMjhhZi1hOWFlLTRjMzMtOGM5OC01MTIwOWZiMjNkYmEvMC8xMTFBNTZGRjA0 NjhEQUMwRkZGNDFCODJEMjNGMjFERDQxMzlGMDBGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMTExQTU2RkYwNDY4REFDMEZGRjQxQjgyRDIzRjIxREQ0MTM5 RjAwRi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZjdlZjI4YWYtYTlhZS00YzMzLThj OTgtNTEyMDlmYjIzZGJhLzAvMTExQTU2RkYwNDY4REFDMEZGRjQxQjgyRDIzRjIx REQ0MTM5RjAwRi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEjdvMUQ5oyv5z1nIg8XJjvpC41z2zNpB95k 2+MYr7nJmKmA3V5sf1Br3J2B2Si//5c1W9FX7fw9rVenXq5I7D509xSdSEEtfUhL 54Dg/0sTjjBPa1Xz9Bd7Q+b0CKnU2ELHXQbbzdqUBBmQmEuESsohq+biNoL16vFi liz60nQSZb03ckHmsADBXwQssC2lD9ELX/9wXt8DI85xlXQxA7Uv04aHVfnt0PDM hueYnjJhXsg2YpVdl76WToHIu440aBqchD8RzH45f/xZegzKPA6EI3ffqkWXPjl6 1QV4/1ll4xSFBBv64PJCTfpGVI2dC+5DaqWe+Hmf6XMejtyTuiM= -----END CERTIFICATE-----Generated at Wed Dec 3 14:00:26 2025 by rpki-client