This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/0180f755-5c27-40f8-80af-2fa8df115282/0/2140359E23DF113617F9AB2E131D231E4D35F9AA.mft File: 2140359E23DF113617F9AB2E131D231E4D35F9AA.mft (raw, json) Hash identifier: ZOT4sKwYth9EGtBKQEvwABx7jCrSLMvWuYMW+GGUG4Y= Subject key identifier: CE:8F:8E:85:2A:B8:D5:77:3B:74:1E:27:C6:19:C6:AF:0D:23:7A:A3 Authority key identifier: 21:40:35:9E:23:DF:11:36:17:F9:AB:2E:13:1D:23:1E:4D:35:F9:AA Certificate issuer: /CN=2140359E23DF113617F9AB2E131D231E4D35F9AA Certificate serial: 47FDB653204E08F4394FA7AA55D0ADF84C3ECC4A Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2140359E23DF113617F9AB2E131D231E4D35F9AA.cer Subject info access: rsync://repo-rpki.idnic.net/repo/0180f755-5c27-40f8-80af-2fa8df115282/0/2140359E23DF113617F9AB2E131D231E4D35F9AA.mft Manifest number: 0546 Signing time: Fri 23 Jan 2026 12:22:01 +0000 Manifest this update: Fri 23 Jan 2026 12:17:01 +0000 Manifest next update: Mon 26 Jan 2026 20:30:01 +0000 Files and hashes: 1: 2140359E23DF113617F9AB2E131D231E4D35F9AA.crl (hash: fsI25GShkJz/TXTxoDHidOHaxPDWAJDrIZPa5Z4sCis=) 2: 323430353a6234303a3a2f33322d3438203d3e203535363734.roa (hash: M9IqkBmv/6mvit+aqd+lb7yJ4UZJweQxalWJOia6lMg=) 3: 3130312e3230332e3136382e302f32322d3234203d3e203535363734.roa (hash: g2j4L6oa7s+Yo5r0t0sgHCPdhAYOBJ4LtHuSFZmj5UA=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/0180f755-5c27-40f8-80af-2fa8df115282/0/2140359E23DF113617F9AB2E131D231E4D35F9AA.crl rsync://repo-rpki.idnic.net/repo/0180f755-5c27-40f8-80af-2fa8df115282/0/2140359E23DF113617F9AB2E131D231E4D35F9AA.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2140359E23DF113617F9AB2E131D231E4D35F9AA.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 26 Jan 2026 20:30:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 47:fd:b6:53:20:4e:08:f4:39:4f:a7:aa:55:d0:ad:f8:4c:3e:cc:4a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2140359E23DF113617F9AB2E131D231E4D35F9AA Validity Not Before: Jan 23 12:17:01 2026 GMT Not After : Jan 26 20:30:01 2026 GMT Subject: CN=CE8F8E852AB8D5773B741E27C619C6AF0D237AA3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:b7:f3:84:cc:7e:76:fd:83:c5:b4:d2:3b:71: 40:4e:9d:ab:a0:d4:1c:b6:ba:f6:5c:db:7c:19:ba: 78:f4:10:db:c1:d4:0d:d6:b9:3b:54:c1:11:0b:74: 35:57:6f:e5:24:4c:70:d6:bc:a8:20:4a:f6:2c:44: 10:48:24:8b:f2:c1:a5:52:b4:cc:21:df:27:22:cb: 3b:a7:5d:ab:2a:93:cb:e5:b2:da:f8:91:1f:2d:97: 30:39:6c:96:22:15:f4:9f:23:b5:b0:f9:da:2f:27: b2:09:89:36:b6:e3:d3:a4:8e:6d:60:15:2d:2d:0a: ab:14:8e:26:91:94:96:bd:6f:8c:10:1b:82:f4:19: 54:38:16:16:cf:7d:41:9b:9d:e0:ae:1e:1c:cd:4a: aa:af:45:d7:e9:4f:b1:1a:c4:30:4c:c8:4b:8d:42: 72:ac:d6:4b:1a:8b:36:41:ce:fe:4d:3b:01:49:30: 2f:af:4a:1d:fe:ff:29:11:da:40:e5:7f:0a:10:b2: d7:29:ad:00:79:70:32:7b:02:d3:e9:f4:c7:c0:51: 42:c5:00:71:5d:8f:5d:92:f7:aa:c4:a8:b6:f2:d8: 74:b3:cd:79:54:71:b4:2d:4f:2d:3f:5f:90:cb:e4: d1:09:f7:e7:32:9e:2c:dc:aa:59:62:a4:cc:36:b6: 80:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CE:8F:8E:85:2A:B8:D5:77:3B:74:1E:27:C6:19:C6:AF:0D:23:7A:A3 X509v3 Authority Key Identifier: keyid:21:40:35:9E:23:DF:11:36:17:F9:AB:2E:13:1D:23:1E:4D:35:F9:AA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/0180f755-5c27-40f8-80af-2fa8df115282/0/2140359E23DF113617F9AB2E131D231E4D35F9AA.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2140359E23DF113617F9AB2E131D231E4D35F9AA.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/0180f755-5c27-40f8-80af-2fa8df115282/0/2140359E23DF113617F9AB2E131D231E4D35F9AA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1d:e0:e4:c1:87:18:c8:f5:d6:a7:b5:e6:ca:b2:5c:f6:1f:41: 19:9a:6c:15:b1:0f:01:dd:c3:dd:a2:00:9e:a9:7b:06:41:42: 7c:b7:69:34:b9:66:3c:c1:e4:29:0b:29:ae:39:e0:b4:ed:1a: 11:4b:9a:79:63:c8:8a:95:41:08:e8:fa:5c:25:a9:d4:61:51: d6:60:4c:90:fe:4d:30:80:b8:59:da:89:a3:2c:87:90:d6:f6: 05:41:f7:85:5c:fa:96:a2:2e:ab:db:dd:ad:7a:ea:af:15:38: 68:3f:b2:b3:dd:95:2f:cb:bf:05:72:20:f4:83:9a:27:1d:4c: 23:4f:cc:0f:45:3c:59:0d:68:ea:39:4d:bf:50:c3:e1:b6:41: 8a:c6:32:f6:24:d9:bf:48:3d:f9:22:1d:46:84:0b:ed:e9:cb: 07:71:d1:c7:44:f2:59:57:47:10:6b:8d:0f:5c:e2:11:bc:b8: 45:07:7a:ff:fa:34:69:0d:53:40:04:a9:b4:d9:6e:87:80:e8: dd:7c:33:a1:6e:4c:57:75:91:bf:83:75:13:08:f1:40:3f:8f: 8a:f6:5e:c4:05:97:01:b8:c3:21:04:87:ec:3a:0f:83:dc:81: bb:89:b6:4e:ee:1a:7c:ea:f9:56:e3:81:b8:ab:4c:f9:2e:13: 28:89:91:2c -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUR/22UyBOCPQ5T6eqVdCt+Ew+zEowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjE0MDM1OUUyM0RGMTEzNjE3RjlBQjJFMTMxRDIzMUU0 RDM1RjlBQTAeFw0yNjAxMjMxMjE3MDFaFw0yNjAxMjYyMDMwMDFaMDMxMTAvBgNV BAMTKENFOEY4RTg1MkFCOEQ1NzczQjc0MUUyN0M2MTlDNkFGMEQyMzdBQTMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDBt/OEzH52/YPFtNI7cUBOnaug 1By2uvZc23wZunj0ENvB1A3WuTtUwRELdDVXb+UkTHDWvKggSvYsRBBIJIvywaVS tMwh3yciyzunXasqk8vlstr4kR8tlzA5bJYiFfSfI7Ww+dovJ7IJiTa249Okjm1g FS0tCqsUjiaRlJa9b4wQG4L0GVQ4FhbPfUGbneCuHhzNSqqvRdfpT7EaxDBMyEuN QnKs1ksaizZBzv5NOwFJMC+vSh3+/ykR2kDlfwoQstcprQB5cDJ7AtPp9MfAUULF AHFdj12S96rEqLby2HSzzXlUcbQtTy0/X5DL5NEJ9+cynizcqllipMw2toA5AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUzo+OhSq41Xc7dB4nxhnGrw0jeqMwHwYDVR0j BBgwFoAUIUA1niPfETYX+asuEx0jHk01+aowDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w MTgwZjc1NS01YzI3LTQwZjgtODBhZi0yZmE4ZGYxMTUyODIvMC8yMTQwMzU5RTIz REYxMTM2MTdGOUFCMkUxMzFEMjMxRTREMzVGOUFBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMjE0MDM1OUUyM0RGMTEzNjE3RjlBQjJFMTMxRDIzMUU0RDM1 RjlBQS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMDE4MGY3NTUtNWMyNy00MGY4LTgw YWYtMmZhOGRmMTE1MjgyLzAvMjE0MDM1OUUyM0RGMTEzNjE3RjlBQjJFMTMxRDIz MUU0RDM1RjlBQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAB3g5MGHGMj11qe15sqyXPYfQRmabBWxDwHd w92iAJ6pewZBQny3aTS5ZjzB5CkLKa454LTtGhFLmnljyIqVQQjo+lwlqdRhUdZg TJD+TTCAuFnaiaMsh5DW9gVB94Vc+paiLqvb3a166q8VOGg/srPdlS/LvwVyIPSD micdTCNPzA9FPFkNaOo5Tb9Qw+G2QYrGMvYk2b9IPfkiHUaEC+3pywdx0cdE8llX RxBrjQ9c4hG8uEUHev/6NGkNU0AEqbTZboeA6N18M6FuTFd1kb+DdRMI8UA/j4r2 XsQFlwG4wyEEh+w6D4PcgbuJtk7uGnzq+VbjgbirTPkuEyiJkSw= -----END CERTIFICATE-----Generated at Sun Jan 25 22:05:05 2026 by rpki-client