This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/0041b48d-73c4-4cdd-bcac-a59699bcbbc1/0/1C22CD3D7791A79187DA9D034EB4BB5ED5E4642A.mft File: 1C22CD3D7791A79187DA9D034EB4BB5ED5E4642A.mft (raw, json) Hash identifier: FpWnZuDOP+k6ATrl+dPLYWQrgvBiLbpRM3irL0GH6Kc= Subject key identifier: 1D:CE:4B:08:04:C1:A4:F2:77:A1:94:82:92:F5:DB:A7:1E:A7:A7:3F Authority key identifier: 1C:22:CD:3D:77:91:A7:91:87:DA:9D:03:4E:B4:BB:5E:D5:E4:64:2A Certificate issuer: /CN=1C22CD3D7791A79187DA9D034EB4BB5ED5E4642A Certificate serial: 799EB53FA265C0C1F09E6E3701279F41D3198FA8 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1C22CD3D7791A79187DA9D034EB4BB5ED5E4642A.cer Subject info access: rsync://repo-rpki.idnic.net/repo/0041b48d-73c4-4cdd-bcac-a59699bcbbc1/0/1C22CD3D7791A79187DA9D034EB4BB5ED5E4642A.mft Manifest number: 03C1 Signing time: Fri 23 Jan 2026 11:11:09 +0000 Manifest this update: Fri 23 Jan 2026 11:06:09 +0000 Manifest next update: Mon 26 Jan 2026 12:33:09 +0000 Files and hashes: 1: 3130332e3136342e3234382e302f32332d3234203d3e203137393935.roa (hash: LTBEQvAXAeuY0KH0kB6kKvzSEQh0r1sAqnbQ1uPtbW4=) 2: 1C22CD3D7791A79187DA9D034EB4BB5ED5E4642A.crl (hash: jtN+NRFAAoPHqZD6N0PdQA/h1f8ZLONBJ6Pr8WpBYuY=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/0041b48d-73c4-4cdd-bcac-a59699bcbbc1/0/1C22CD3D7791A79187DA9D034EB4BB5ED5E4642A.crl rsync://repo-rpki.idnic.net/repo/0041b48d-73c4-4cdd-bcac-a59699bcbbc1/0/1C22CD3D7791A79187DA9D034EB4BB5ED5E4642A.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1C22CD3D7791A79187DA9D034EB4BB5ED5E4642A.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 26 Jan 2026 12:33:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 79:9e:b5:3f:a2:65:c0:c1:f0:9e:6e:37:01:27:9f:41:d3:19:8f:a8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1C22CD3D7791A79187DA9D034EB4BB5ED5E4642A Validity Not Before: Jan 23 11:06:09 2026 GMT Not After : Jan 26 12:33:09 2026 GMT Subject: CN=1DCE4B0804C1A4F277A1948292F5DBA71EA7A73F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:03:dc:68:22:1f:35:8c:d5:c9:2b:93:54:f1: 23:2f:f0:d0:77:e8:26:3c:57:3d:5b:8d:b3:56:92: df:1f:95:6e:63:85:34:b8:bf:8b:25:09:12:5a:aa: c0:2b:47:ad:14:53:34:d6:8c:11:9e:0f:d1:df:4e: 65:32:c8:e3:94:ac:98:a0:97:68:a3:a7:8a:e8:40: e6:6a:f0:bf:ae:99:f9:0d:fc:ed:95:d5:1d:23:46: 22:fc:83:42:24:5c:b1:86:5a:96:f6:ed:14:e4:c8: 94:16:0f:20:81:4f:5d:b7:fe:53:76:75:60:23:e7: 11:f6:a4:da:54:ce:49:05:9c:7f:d2:50:00:42:8e: 90:ca:7a:17:35:e4:0d:33:e4:89:23:3f:df:1d:2e: ff:2e:2a:f4:4e:78:18:6d:6c:bc:4a:6b:80:4d:77: 58:bd:d8:8c:3f:78:a8:04:30:fe:f3:31:87:fa:b1: 47:14:82:d4:f5:8a:62:b7:b4:33:7a:e5:c5:29:55: 7b:8f:14:91:25:e1:d3:e3:5a:3e:49:fd:5f:d0:90: 2c:10:56:b2:de:1a:a3:24:9e:c4:2d:c8:b9:5d:e1: 13:e2:72:b6:af:e8:83:d5:92:13:e9:4d:dd:90:06: ab:98:e5:3a:fa:6c:3c:a9:e7:49:16:5d:b1:2e:55: 91:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:CE:4B:08:04:C1:A4:F2:77:A1:94:82:92:F5:DB:A7:1E:A7:A7:3F X509v3 Authority Key Identifier: keyid:1C:22:CD:3D:77:91:A7:91:87:DA:9D:03:4E:B4:BB:5E:D5:E4:64:2A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/0041b48d-73c4-4cdd-bcac-a59699bcbbc1/0/1C22CD3D7791A79187DA9D034EB4BB5ED5E4642A.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1C22CD3D7791A79187DA9D034EB4BB5ED5E4642A.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/0041b48d-73c4-4cdd-bcac-a59699bcbbc1/0/1C22CD3D7791A79187DA9D034EB4BB5ED5E4642A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a5:09:6d:26:9b:04:56:f4:12:57:4c:30:09:d2:73:38:9b:bb: 7e:b7:7b:f0:31:9d:89:a0:cc:6f:62:7c:26:6a:d0:55:f1:6b: be:9e:3b:2f:9e:5f:2b:aa:e0:59:7b:73:78:40:4b:a5:0a:ca: 6c:fb:58:23:f8:ca:5c:73:34:44:cd:77:94:58:7b:0b:a8:a4: 0a:9f:c6:89:82:49:19:e3:84:49:66:4a:54:4c:98:16:c8:70: ce:a7:1b:96:e4:91:ed:21:b5:11:b6:d1:7a:cc:5b:4e:e5:7f: dd:a7:1b:56:1c:9b:06:23:a6:06:b1:96:15:1f:46:4a:33:ec: ea:cd:62:5e:0f:84:7a:2e:1e:41:7c:d3:d3:1c:69:2e:eb:2d: aa:d9:8f:21:78:2f:b7:26:1e:ba:cf:9c:41:31:3b:c1:09:04: f8:b3:bb:6a:65:d1:90:00:6f:49:c6:e8:eb:32:4d:be:ec:9f: b2:3e:72:03:f2:fc:81:21:cf:e9:18:7b:c5:e0:f4:c7:10:81: f3:7a:e2:90:e5:a8:bc:dc:d9:29:5a:2d:06:71:b3:53:d2:40: 55:a0:03:72:81:a7:e1:b2:30:7c:fa:33:52:48:21:04:a1:0f: 99:dd:60:c3:3c:0a:f7:aa:32:4a:31:e9:8b:82:7c:ac:f0:d1: 0d:3c:20:77 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUeZ61P6JlwMHwnm43ASefQdMZj6gwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUMyMkNEM0Q3NzkxQTc5MTg3REE5RDAzNEVCNEJCNUVE NUU0NjQyQTAeFw0yNjAxMjMxMTA2MDlaFw0yNjAxMjYxMjMzMDlaMDMxMTAvBgNV BAMTKDFEQ0U0QjA4MDRDMUE0RjI3N0ExOTQ4MjkyRjVEQkE3MUVBN0E3M0YwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDCA9xoIh81jNXJK5NU8SMv8NB3 6CY8Vz1bjbNWkt8flW5jhTS4v4slCRJaqsArR60UUzTWjBGeD9HfTmUyyOOUrJig l2ijp4roQOZq8L+umfkN/O2V1R0jRiL8g0IkXLGGWpb27RTkyJQWDyCBT123/lN2 dWAj5xH2pNpUzkkFnH/SUABCjpDKehc15A0z5IkjP98dLv8uKvROeBhtbLxKa4BN d1i92Iw/eKgEMP7zMYf6sUcUgtT1imK3tDN65cUpVXuPFJEl4dPjWj5J/V/QkCwQ VrLeGqMknsQtyLld4RPicrav6IPVkhPpTd2QBquY5Tr6bDyp50kWXbEuVZGZAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUHc5LCATBpPJ3oZSCkvXbpx6npz8wHwYDVR0j BBgwFoAUHCLNPXeRp5GH2p0DTrS7XtXkZCowDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w MDQxYjQ4ZC03M2M0LTRjZGQtYmNhYy1hNTk2OTliY2JiYzEvMC8xQzIyQ0QzRDc3 OTFBNzkxODdEQTlEMDM0RUI0QkI1RUQ1RTQ2NDJBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMUMyMkNEM0Q3NzkxQTc5MTg3REE5RDAzNEVCNEJCNUVENUU0 NjQyQS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMDA0MWI0OGQtNzNjNC00Y2RkLWJj YWMtYTU5Njk5YmNiYmMxLzAvMUMyMkNEM0Q3NzkxQTc5MTg3REE5RDAzNEVCNEJC NUVENUU0NjQyQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKUJbSabBFb0EldMMAnSczibu363e/AxnYmg zG9ifCZq0FXxa76eOy+eXyuq4Fl7c3hAS6UKymz7WCP4ylxzNETNd5RYewuopAqf xomCSRnjhElmSlRMmBbIcM6nG5bkke0htRG20XrMW07lf92nG1YcmwYjpgaxlhUf Rkoz7OrNYl4PhHouHkF809McaS7rLarZjyF4L7cmHrrPnEExO8EJBPizu2pl0ZAA b0nG6OsyTb7sn7I+cgPy/IEhz+kYe8Xg9McQgfN64pDlqLzc2SlaLQZxs1PSQFWg A3KBp+GyMHz6M1JIIQShD5ndYMM8CveqMkox6YuCfKzw0Q08IHc= -----END CERTIFICATE-----Generated at Sun Jan 25 11:06:38 2026 by rpki-client