This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/057d4d81-3be8-4230-8959-2dc2af9d085e/0/282881E6B43D206FAFBD1879ED5678ECBA70A822.mft File: 282881E6B43D206FAFBD1879ED5678ECBA70A822.mft (raw, json) Hash identifier: DPzRCwrwgwPzgUjaMRx/DZcJy3lrIgdCofY3rWfJN50= Subject key identifier: 6B:0F:33:D5:FD:03:7B:1D:6B:C3:E2:B5:68:DC:C9:AE:CB:C6:5B:C6 Authority key identifier: 28:28:81:E6:B4:3D:20:6F:AF:BD:18:79:ED:56:78:EC:BA:70:A8:22 Certificate issuer: /CN=282881E6B43D206FAFBD1879ED5678ECBA70A822 Certificate serial: 7DE78815588B13A447750EE2F6B822B2DC7C6587 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/282881E6B43D206FAFBD1879ED5678ECBA70A822.cer Subject info access: rsync://repo-rpki.idnic.net/repo/057d4d81-3be8-4230-8959-2dc2af9d085e/0/282881E6B43D206FAFBD1879ED5678ECBA70A822.mft Manifest number: 0245 Signing time: Sat 24 Jan 2026 03:11:20 +0000 Manifest this update: Sat 24 Jan 2026 03:06:20 +0000 Manifest next update: Tue 27 Jan 2026 08:35:20 +0000 Files and hashes: 1: 3130332e3134352e3132352e302f32342d3234203d3e20313339343437.roa (hash: oXvL0/k0WHWI4BGdx4XTZRDqMThL/fYCoj5eA1L5u4Y=) 2: 282881E6B43D206FAFBD1879ED5678ECBA70A822.crl (hash: 0iSUeqjN1NxZFZfNN1khjaLmSOEVRCiEcczLPEJyga0=) 3: 323030313a6466323a313238303a3a2f34382d3438203d3e20313339343437.roa (hash: GTuqU908XLOZVb25rTIhV2IehkRk/dUQu2mWsLQyxpo=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/057d4d81-3be8-4230-8959-2dc2af9d085e/0/282881E6B43D206FAFBD1879ED5678ECBA70A822.crl rsync://repo-rpki.idnic.net/repo/057d4d81-3be8-4230-8959-2dc2af9d085e/0/282881E6B43D206FAFBD1879ED5678ECBA70A822.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/282881E6B43D206FAFBD1879ED5678ECBA70A822.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 27 Jan 2026 08:35:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7d:e7:88:15:58:8b:13:a4:47:75:0e:e2:f6:b8:22:b2:dc:7c:65:87 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=282881E6B43D206FAFBD1879ED5678ECBA70A822 Validity Not Before: Jan 24 03:06:20 2026 GMT Not After : Jan 27 08:35:20 2026 GMT Subject: CN=6B0F33D5FD037B1D6BC3E2B568DCC9AECBC65BC6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:50:36:41:08:ca:91:b6:2b:bf:87:5e:78:81: cf:29:d2:e1:0a:73:0c:4f:33:fc:04:55:bb:2e:1e: 8e:e4:db:88:e4:c9:b1:14:c4:ab:7b:d2:ea:ae:40: 12:11:94:5d:bd:18:ee:53:d4:be:f6:79:62:69:f1: 8e:65:59:3c:10:07:fc:c9:57:5a:1b:a2:d0:07:87: e1:92:eb:61:69:28:9b:c5:aa:c5:56:0d:45:5f:64: 91:71:6c:91:b3:95:28:85:09:fd:48:e8:d4:8a:48: d5:2e:1a:35:14:c9:11:f1:99:1b:23:3d:8b:10:cd: 83:43:71:81:fc:c2:25:ec:4c:45:fe:ee:3d:d2:22: a2:2a:a6:23:49:a6:40:07:c0:cd:c7:9d:0c:40:6b: 53:bd:73:c4:e8:69:df:aa:8a:73:41:ae:9d:01:7d: f9:76:b1:d3:c8:44:65:52:50:86:48:f4:b3:67:44: 56:59:7c:3a:67:38:fd:59:68:e8:a0:56:a7:63:64: 69:b0:bd:0b:dd:1e:fe:a3:24:2f:a0:36:02:4d:f5: 89:33:2c:e3:a1:34:6b:dd:5f:eb:13:9f:18:cb:21: 94:e6:df:53:fa:b7:9e:f3:db:0f:41:9d:ca:41:03: 22:73:c5:f2:5e:15:2b:ce:6e:05:9f:d3:91:8f:3e: 37:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6B:0F:33:D5:FD:03:7B:1D:6B:C3:E2:B5:68:DC:C9:AE:CB:C6:5B:C6 X509v3 Authority Key Identifier: keyid:28:28:81:E6:B4:3D:20:6F:AF:BD:18:79:ED:56:78:EC:BA:70:A8:22 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/057d4d81-3be8-4230-8959-2dc2af9d085e/0/282881E6B43D206FAFBD1879ED5678ECBA70A822.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/282881E6B43D206FAFBD1879ED5678ECBA70A822.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/057d4d81-3be8-4230-8959-2dc2af9d085e/0/282881E6B43D206FAFBD1879ED5678ECBA70A822.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 38:8a:00:53:d3:21:5a:40:69:21:d8:87:4b:01:33:7d:50:5a: ce:54:83:c4:20:4c:38:0f:db:85:23:9e:73:be:ce:49:49:68: aa:0b:3f:9d:cd:c8:23:2f:4f:1a:00:fd:e8:5a:2e:b1:5e:35: e0:93:39:35:ae:e3:da:7f:06:64:b2:b2:b6:6c:1a:5b:1a:c0: 10:b4:7b:07:ec:df:b4:3f:20:41:76:cc:30:b7:fb:7c:09:7a: c3:72:1c:ea:3b:f3:7c:12:26:c0:7e:f6:92:d4:03:43:fd:0d: ad:5f:66:0d:40:30:09:ce:33:b6:61:b2:99:f9:61:57:f8:91: e0:90:8d:91:60:6b:b8:0d:0f:0d:34:b5:d1:be:6e:e1:4e:d9: 5e:61:61:97:89:3a:ac:bf:5f:3f:86:70:1d:0a:ba:5e:3e:95: 12:ca:a0:d3:4b:4f:de:43:9c:5b:84:dc:05:18:af:50:17:7d: 71:df:fe:84:e4:32:e8:66:33:98:e5:c4:10:8f:a5:16:dc:e0: 68:c7:13:c0:b4:5b:13:bc:7a:38:3e:94:c1:f1:ae:60:76:f2: 90:e7:ba:b0:29:0c:60:c2:2d:d6:03:79:e4:a4:6c:3f:e9:1f: a7:83:f4:74:f6:32:d0:c0:84:27:80:22:1d:5d:db:e1:00:0f: d9:c0:a1:a7 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUfeeIFViLE6RHdQ7i9rgistx8ZYcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjgyODgxRTZCNDNEMjA2RkFGQkQxODc5RUQ1Njc4RUNC QTcwQTgyMjAeFw0yNjAxMjQwMzA2MjBaFw0yNjAxMjcwODM1MjBaMDMxMTAvBgNV BAMTKDZCMEYzM0Q1RkQwMzdCMUQ2QkMzRTJCNTY4RENDOUFFQ0JDNjVCQzYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDaUDZBCMqRtiu/h154gc8p0uEK cwxPM/wEVbsuHo7k24jkybEUxKt70uquQBIRlF29GO5T1L72eWJp8Y5lWTwQB/zJ V1obotAHh+GS62FpKJvFqsVWDUVfZJFxbJGzlSiFCf1I6NSKSNUuGjUUyRHxmRsj PYsQzYNDcYH8wiXsTEX+7j3SIqIqpiNJpkAHwM3HnQxAa1O9c8Toad+qinNBrp0B ffl2sdPIRGVSUIZI9LNnRFZZfDpnOP1ZaOigVqdjZGmwvQvdHv6jJC+gNgJN9Ykz LOOhNGvdX+sTnxjLIZTm31P6t57z2w9BncpBAyJzxfJeFSvObgWf05GPPjd1AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUaw8z1f0Dex1rw+K1aNzJrsvGW8YwHwYDVR0j BBgwFoAUKCiB5rQ9IG+vvRh57VZ47LpwqCIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w NTdkNGQ4MS0zYmU4LTQyMzAtODk1OS0yZGMyYWY5ZDA4NWUvMC8yODI4ODFFNkI0 M0QyMDZGQUZCRDE4NzlFRDU2NzhFQ0JBNzBBODIyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMjgyODgxRTZCNDNEMjA2RkFGQkQxODc5RUQ1Njc4RUNCQTcw QTgyMi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMDU3ZDRkODEtM2JlOC00MjMwLTg5 NTktMmRjMmFmOWQwODVlLzAvMjgyODgxRTZCNDNEMjA2RkFGQkQxODc5RUQ1Njc4 RUNCQTcwQTgyMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADiKAFPTIVpAaSHYh0sBM31QWs5Ug8QgTDgP 24UjnnO+zklJaKoLP53NyCMvTxoA/ehaLrFeNeCTOTWu49p/BmSysrZsGlsawBC0 ewfs37Q/IEF2zDC3+3wJesNyHOo783wSJsB+9pLUA0P9Da1fZg1AMAnOM7Zhspn5 YVf4keCQjZFga7gNDw00tdG+buFO2V5hYZeJOqy/Xz+GcB0Kul4+lRLKoNNLT95D nFuE3AUYr1AXfXHf/oTkMuhmM5jlxBCPpRbc4GjHE8C0WxO8ejg+lMHxrmB28pDn urApDGDCLdYDeeSkbD/pH6eD9HT2MtDAhCeAIh1d2+EAD9nAoac= -----END CERTIFICATE-----Generated at Sun Jan 25 23:19:37 2026 by rpki-client