This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/f957fa5d-fa67-4e6b-8920-c4747adb30bb/0/1911AE41845DEE2EB88490C5767E3C1A6E30E808.mft File: 1911AE41845DEE2EB88490C5767E3C1A6E30E808.mft (raw, json) Hash identifier: wJM6Vl+3A0u2U771jJvGGrTnPxKyUmQKAWuMfY58wik= Subject key identifier: 65:44:29:72:08:76:FE:07:9B:4F:B2:39:AC:27:88:BE:1C:B3:74:33 Authority key identifier: 19:11:AE:41:84:5D:EE:2E:B8:84:90:C5:76:7E:3C:1A:6E:30:E8:08 Certificate issuer: /CN=1911AE41845DEE2EB88490C5767E3C1A6E30E808 Certificate serial: 312CF7358E165989FA6640C1319EA0CD3CA79413 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1911AE41845DEE2EB88490C5767E3C1A6E30E808.cer Subject info access: rsync://repo-rpki.idnic.net/repo/f957fa5d-fa67-4e6b-8920-c4747adb30bb/0/1911AE41845DEE2EB88490C5767E3C1A6E30E808.mft Manifest number: 0119 Signing time: Mon 01 Dec 2025 10:20:01 +0000 Manifest this update: Mon 01 Dec 2025 10:15:01 +0000 Manifest next update: Thu 04 Dec 2025 16:08:01 +0000 Files and hashes: 1: 3230332e3137352e3130322e302f32332d3234203d3e20313532303134.roa (hash: Jwv0gA8fk3yoBN8wNHBZ8Dx27fR4hWBf2um8D+vcr6o=) 2: 1911AE41845DEE2EB88490C5767E3C1A6E30E808.crl (hash: Kzoh9Dx06GX2hjSmswSIRoTYchD6RSDV5ieilHpERoo=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/f957fa5d-fa67-4e6b-8920-c4747adb30bb/0/1911AE41845DEE2EB88490C5767E3C1A6E30E808.crl rsync://repo-rpki.idnic.net/repo/f957fa5d-fa67-4e6b-8920-c4747adb30bb/0/1911AE41845DEE2EB88490C5767E3C1A6E30E808.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1911AE41845DEE2EB88490C5767E3C1A6E30E808.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 04 Dec 2025 16:08:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 31:2c:f7:35:8e:16:59:89:fa:66:40:c1:31:9e:a0:cd:3c:a7:94:13 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1911AE41845DEE2EB88490C5767E3C1A6E30E808 Validity Not Before: Dec 1 10:15:01 2025 GMT Not After : Dec 4 16:08:01 2025 GMT Subject: CN=654429720876FE079B4FB239AC2788BE1CB37433 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:6c:b1:87:10:6d:01:b5:a8:88:90:49:7e:9c: 34:a1:99:38:4a:98:0f:ce:8a:56:6c:9c:f9:c9:f1: ae:28:9d:01:a3:cd:34:8e:c6:f7:68:0d:ec:ab:e5: ed:81:65:e9:c9:40:60:56:87:d3:c7:67:5d:5d:fd: 35:d0:79:41:74:73:fb:98:6f:00:81:a0:d9:80:3d: f5:d3:5d:4a:5f:77:ec:6b:8f:54:d2:17:87:72:00: b5:1c:51:f3:ce:91:b9:10:91:30:99:fb:7f:d8:5d: e8:29:8d:9f:3b:68:07:07:72:cb:57:47:84:40:d3: 0b:86:89:93:ff:b4:36:90:ee:69:8f:82:e9:db:50: b7:38:b7:39:4b:88:d4:15:20:f2:ce:0d:fa:aa:fe: 1c:74:96:29:8b:d7:52:ef:ba:10:9e:3c:94:ed:43: a9:a7:21:cb:47:7a:a1:9a:66:6d:02:ec:23:c1:3d: af:02:b3:4e:7f:27:33:91:3a:55:8e:21:29:7a:7e: 6d:32:a4:a6:3a:57:f4:61:76:65:af:41:06:72:63: 48:78:fa:0a:71:72:d9:83:b7:5e:48:85:74:02:4c: 94:71:e6:6e:2a:8b:ce:f6:c8:d1:f7:81:71:ee:46: f9:70:f4:68:c2:71:27:ee:4e:30:de:6f:5f:da:4c: c2:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:44:29:72:08:76:FE:07:9B:4F:B2:39:AC:27:88:BE:1C:B3:74:33 X509v3 Authority Key Identifier: keyid:19:11:AE:41:84:5D:EE:2E:B8:84:90:C5:76:7E:3C:1A:6E:30:E8:08 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/f957fa5d-fa67-4e6b-8920-c4747adb30bb/0/1911AE41845DEE2EB88490C5767E3C1A6E30E808.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1911AE41845DEE2EB88490C5767E3C1A6E30E808.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f957fa5d-fa67-4e6b-8920-c4747adb30bb/0/1911AE41845DEE2EB88490C5767E3C1A6E30E808.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 48:99:37:85:fd:da:15:fe:fd:0f:82:db:71:1c:e2:83:0e:59: 23:e2:b8:4a:19:80:3d:87:55:28:f1:8e:09:e7:49:97:e3:ed: d4:e0:32:11:b5:07:17:22:14:ef:c0:ed:2b:6a:6c:ec:93:d1: fc:75:f3:70:96:20:bb:93:15:61:93:a4:17:93:b3:a0:75:cc: 1c:36:37:da:26:36:dc:86:76:76:98:2d:59:c2:7e:d0:bc:a4: cc:71:25:f7:65:a5:7f:b3:99:8d:f6:1c:14:ef:3b:14:8a:b1: 6e:7a:2a:a0:14:7f:09:81:aa:70:5f:cb:a5:8c:8b:e9:c1:21: cf:70:f5:a0:d0:46:a0:c1:38:4b:68:fc:db:1b:a7:41:ca:42: 3b:68:31:65:57:88:5b:f5:5e:88:2b:6f:90:63:74:f6:14:c1: fa:cf:c3:96:60:59:9f:c2:76:8d:8a:c8:d0:32:e4:5b:3d:69: a0:cd:3d:4c:ef:68:57:bb:f8:4c:40:6f:a3:9f:a1:0a:b8:d9: 32:ee:e2:91:c7:2f:41:7d:7b:08:9e:5a:2e:7c:c2:a4:77:2f: 2e:a7:4c:43:9a:22:1d:8c:4c:fa:96:57:0a:a7:fa:b6:df:5b: c1:31:38:eb:c0:4b:47:4b:f2:ef:73:a0:eb:87:f0:f7:2d:3e: 9f:90:db:8f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUMSz3NY4WWYn6ZkDBMZ6gzTynlBMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTkxMUFFNDE4NDVERUUyRUI4ODQ5MEM1NzY3RTNDMUE2 RTMwRTgwODAeFw0yNTEyMDExMDE1MDFaFw0yNTEyMDQxNjA4MDFaMDMxMTAvBgNV BAMTKDY1NDQyOTcyMDg3NkZFMDc5QjRGQjIzOUFDMjc4OEJFMUNCMzc0MzMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC9bLGHEG0BtaiIkEl+nDShmThK mA/OilZsnPnJ8a4onQGjzTSOxvdoDeyr5e2BZenJQGBWh9PHZ11d/TXQeUF0c/uY bwCBoNmAPfXTXUpfd+xrj1TSF4dyALUcUfPOkbkQkTCZ+3/YXegpjZ87aAcHcstX R4RA0wuGiZP/tDaQ7mmPgunbULc4tzlLiNQVIPLODfqq/hx0limL11LvuhCePJTt Q6mnIctHeqGaZm0C7CPBPa8Cs05/JzOROlWOISl6fm0ypKY6V/RhdmWvQQZyY0h4 +gpxctmDt15IhXQCTJRx5m4qi872yNH3gXHuRvlw9GjCcSfuTjDeb1/aTMIhAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUZUQpcgh2/gebT7I5rCeIvhyzdDMwHwYDVR0j BBgwFoAUGRGuQYRd7i64hJDFdn48Gm4w6AgwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m OTU3ZmE1ZC1mYTY3LTRlNmItODkyMC1jNDc0N2FkYjMwYmIvMC8xOTExQUU0MTg0 NURFRTJFQjg4NDkwQzU3NjdFM0MxQTZFMzBFODA4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMTkxMUFFNDE4NDVERUUyRUI4ODQ5MEM1NzY3RTNDMUE2RTMw RTgwOC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZjk1N2ZhNWQtZmE2Ny00ZTZiLTg5 MjAtYzQ3NDdhZGIzMGJiLzAvMTkxMUFFNDE4NDVERUUyRUI4ODQ5MEM1NzY3RTND MUE2RTMwRTgwOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEiZN4X92hX+/Q+C23Ec4oMOWSPiuEoZgD2H VSjxjgnnSZfj7dTgMhG1BxciFO/A7StqbOyT0fx183CWILuTFWGTpBeTs6B1zBw2 N9omNtyGdnaYLVnCftC8pMxxJfdlpX+zmY32HBTvOxSKsW56KqAUfwmBqnBfy6WM i+nBIc9w9aDQRqDBOEto/Nsbp0HKQjtoMWVXiFv1Xogrb5BjdPYUwfrPw5ZgWZ/C do2KyNAy5Fs9aaDNPUzvaFe7+ExAb6OfoQq42TLu4pHHL0F9ewieWi58wqR3Ly6n TEOaIh2MTPqWVwqn+rbfW8ExOOvAS0dL8u9zoOuH8PctPp+Q248= -----END CERTIFICATE-----Generated at Wed Dec 3 14:43:53 2025 by rpki-client