This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repo-rpki.idnic.net/repo/f7ef28af-a9ae-4c33-8c98-51209fb23dba/0/111A56FF0468DAC0FFF41B82D23F21DD4139F00F.mft
File: 111A56FF0468DAC0FFF41B82D23F21DD4139F00F.mft (raw, json)
Hash identifier: duZBVdqiOJRkqLdy+pnhOnxeM/lfcgnVqEIbSXd71Bs=
Subject key identifier: 94:A6:AD:D8:0D:D0:B3:1D:AB:A7:A8:DE:4E:74:4B:83:C3:47:A9:8B
Authority key identifier: 11:1A:56:FF:04:68:DA:C0:FF:F4:1B:82:D2:3F:21:DD:41:39:F0:0F
Certificate issuer: /CN=111A56FF0468DAC0FFF41B82D23F21DD4139F00F
Certificate serial: 601C0056E1ACD159C44E1744B681DFC85F4F9E80
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/111A56FF0468DAC0FFF41B82D23F21DD4139F00F.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/f7ef28af-a9ae-4c33-8c98-51209fb23dba/0/111A56FF0468DAC0FFF41B82D23F21DD4139F00F.mft
Manifest number: 1D
Signing time: Sun 01 Feb 2026 00:30:48 +0000
Manifest this update: Sun 01 Feb 2026 00:25:48 +0000
Manifest next update: Wed 04 Feb 2026 07:23:48 +0000
Files and hashes: 1: 3130332e3234372e3234322e302f32332d3234203d3e20313531353337.roa (hash: /KC3HC1ev3eUia/MbScpps/zMZoYFTTbRVMV+spgfEs=)
2: 111A56FF0468DAC0FFF41B82D23F21DD4139F00F.crl (hash: qkm/tGdXp70fjgBGDIdy7+6wZSHId4XcCkUKJBqSL/0=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/f7ef28af-a9ae-4c33-8c98-51209fb23dba/0/111A56FF0468DAC0FFF41B82D23F21DD4139F00F.crl
rsync://repo-rpki.idnic.net/repo/f7ef28af-a9ae-4c33-8c98-51209fb23dba/0/111A56FF0468DAC0FFF41B82D23F21DD4139F00F.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/111A56FF0468DAC0FFF41B82D23F21DD4139F00F.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 04 Feb 2026 07:23:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
60:1c:00:56:e1:ac:d1:59:c4:4e:17:44:b6:81:df:c8:5f:4f:9e:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=111A56FF0468DAC0FFF41B82D23F21DD4139F00F
Validity
Not Before: Feb 1 00:25:48 2026 GMT
Not After : Feb 4 07:23:48 2026 GMT
Subject: CN=94A6ADD80DD0B31DABA7A8DE4E744B83C347A98B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:c1:05:dd:18:69:35:cc:3b:89:e1:8b:21:55:
7d:7c:03:f7:f3:b8:9f:78:0a:a2:33:0c:f4:a7:b4:
56:fb:98:e9:1f:95:14:63:d5:94:a6:c4:47:4f:ab:
fc:4d:62:b8:b1:aa:88:bd:c0:88:14:a9:f6:b1:3b:
21:b0:e8:b8:b3:5c:c9:13:bc:7d:14:69:83:7a:9b:
3a:c6:02:53:fb:b3:df:72:9d:74:1b:6f:af:68:58:
e7:e8:ad:90:2a:a4:ad:07:96:e5:b0:7b:ba:69:8d:
bf:00:8e:57:a3:7e:02:6f:ff:11:75:03:4d:7a:01:
dc:d4:81:c1:0a:4c:77:d4:ff:99:61:fe:78:36:5f:
a9:a5:af:36:f2:5e:d4:fc:9d:3e:c5:a6:8f:23:4f:
92:14:7b:a0:59:f7:3c:39:1c:75:d1:a2:84:78:ec:
de:1c:35:bc:92:b8:e8:c2:f5:cc:2d:2a:c1:d1:c4:
61:f4:fe:cf:b3:fb:2e:b1:d2:9c:05:b6:3d:ed:9e:
e4:ca:d6:72:b0:5c:be:8e:5c:8d:50:95:8f:c6:7f:
69:ee:bd:79:6b:e9:26:ee:d4:c1:79:a5:c8:cf:3a:
4b:31:b5:89:d9:82:d8:aa:d0:52:b3:af:31:b3:3d:
2a:2f:f4:1c:e7:55:a1:7d:90:4a:75:7f:33:b6:e4:
24:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:A6:AD:D8:0D:D0:B3:1D:AB:A7:A8:DE:4E:74:4B:83:C3:47:A9:8B
X509v3 Authority Key Identifier:
keyid:11:1A:56:FF:04:68:DA:C0:FF:F4:1B:82:D2:3F:21:DD:41:39:F0:0F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/f7ef28af-a9ae-4c33-8c98-51209fb23dba/0/111A56FF0468DAC0FFF41B82D23F21DD4139F00F.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/111A56FF0468DAC0FFF41B82D23F21DD4139F00F.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f7ef28af-a9ae-4c33-8c98-51209fb23dba/0/111A56FF0468DAC0FFF41B82D23F21DD4139F00F.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
54:65:06:da:54:9f:a3:0a:af:17:3e:03:ad:37:98:67:fe:0d:
28:55:4b:6b:98:87:f0:d0:2d:a4:51:42:ac:04:3b:9f:53:d3:
04:a4:4f:46:dc:d3:db:e7:7d:8d:1a:47:4b:75:72:e5:ed:57:
90:5c:a3:95:30:e4:2e:97:7a:11:fd:9d:66:64:1e:b0:ae:aa:
6d:cf:7b:94:d6:9e:04:83:7d:3f:4c:d0:f4:21:f5:52:af:b3:
9b:1d:90:86:99:bc:0e:74:3f:19:74:cb:f8:66:63:fe:f0:eb:
9e:7d:48:d0:70:65:aa:ee:ee:c4:10:bd:70:7c:0c:43:a7:67:
64:8a:84:41:5d:fb:c1:1a:27:99:eb:c1:36:fc:6d:2d:51:23:
de:fd:58:03:94:fe:d0:a3:37:73:59:14:24:db:82:60:5d:5a:
02:3c:15:15:49:55:1c:17:f4:b7:d7:c3:ab:c3:ee:12:2b:17:
0f:76:2f:66:5e:0c:e2:7a:b8:bf:7d:1f:74:2d:53:6f:6d:0f:
7f:6b:8b:ec:d3:01:8a:48:0a:7a:90:b9:ed:c9:5c:94:b3:09:
d4:7b:a8:cc:0b:b3:56:04:1d:84:33:cd:cf:c6:6a:ee:49:c8:
9e:e5:8a:74:9c:92:69:94:62:f8:d9:cb:cd:ac:06:95:ff:d3:
b2:a1:3e:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 2 09:43:42 2026 by rpki-client