This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/064ff7c9-e905-44d6-bc35-c7dbb070b757/0/893997EF53FFBB5A3C55A47213135040C1C5B843.mft File: 893997EF53FFBB5A3C55A47213135040C1C5B843.mft (raw, json) Hash identifier: /FKpDCc/AnALY6Ov1SIavsFNbRYkKwOzfheEi4yGiWA= Subject key identifier: E5:9B:8E:4C:CB:B5:35:ED:79:09:CB:D0:88:6A:69:CD:CF:73:4E:1F Authority key identifier: 89:39:97:EF:53:FF:BB:5A:3C:55:A4:72:13:13:50:40:C1:C5:B8:43 Certificate issuer: /CN=893997EF53FFBB5A3C55A47213135040C1C5B843 Certificate serial: 5164E51A98B2B8E5441121879965A2597D806501 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/893997EF53FFBB5A3C55A47213135040C1C5B843.cer Subject info access: rsync://repo-rpki.idnic.net/repo/064ff7c9-e905-44d6-bc35-c7dbb070b757/0/893997EF53FFBB5A3C55A47213135040C1C5B843.mft Manifest number: 01B4 Signing time: Sat 24 Jan 2026 21:50:52 +0000 Manifest this update: Sat 24 Jan 2026 21:45:52 +0000 Manifest next update: Tue 27 Jan 2026 22:28:52 +0000 Files and hashes: 1: 893997EF53FFBB5A3C55A47213135040C1C5B843.crl (hash: GdTNlv/gmYwgyTJu99QENZnwTwBV20DNK5twT8G5WVI=) 2: 3130332e3139322e38312e302f32342d3234203d3e20313530393137.roa (hash: 3qZF8ggdlzs3ruDfQ9HAEp9ByaXAzt4cAU9kMTQ4y6s=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/064ff7c9-e905-44d6-bc35-c7dbb070b757/0/893997EF53FFBB5A3C55A47213135040C1C5B843.crl rsync://repo-rpki.idnic.net/repo/064ff7c9-e905-44d6-bc35-c7dbb070b757/0/893997EF53FFBB5A3C55A47213135040C1C5B843.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/893997EF53FFBB5A3C55A47213135040C1C5B843.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 27 Jan 2026 22:28:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 51:64:e5:1a:98:b2:b8:e5:44:11:21:87:99:65:a2:59:7d:80:65:01 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=893997EF53FFBB5A3C55A47213135040C1C5B843 Validity Not Before: Jan 24 21:45:52 2026 GMT Not After : Jan 27 22:28:52 2026 GMT Subject: CN=E59B8E4CCBB535ED7909CBD0886A69CDCF734E1F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:b7:c4:76:1e:30:55:4b:76:fa:f0:b6:90:1d: 29:95:ed:b1:df:0c:09:1f:36:5a:3b:01:d1:c6:52: 45:9e:a5:25:15:de:e9:63:a2:25:e4:6f:57:dc:79: 0c:ab:42:cf:63:b2:45:b9:fb:77:9d:6e:28:5d:30: 7d:1d:aa:64:20:77:27:97:67:ec:83:52:fd:60:b0: d2:8d:2a:15:b5:95:79:35:86:44:57:a9:ff:cd:5f: 77:65:48:91:7f:f9:14:1a:e0:5a:13:e7:7d:8a:ff: 18:ef:71:ad:e0:e5:8f:67:40:1c:87:ef:9c:d7:f2: be:4e:07:d1:9a:c5:1a:6c:48:99:f4:ba:16:5d:6c: 51:cc:6c:22:14:92:fc:93:ae:75:6e:24:4c:cc:9e: fa:f1:2d:d6:18:15:56:1d:15:fb:e1:09:e7:51:aa: f2:e8:6c:bc:3b:9f:2e:b8:9d:65:29:92:2e:d8:1e: e2:17:b2:1a:47:11:c3:67:00:4f:ad:cf:9f:2f:72: 45:bb:3d:a8:17:5d:db:9f:0b:5b:dd:af:77:e8:a6: 0f:34:a4:80:09:3c:a8:21:0f:8b:6e:ec:70:42:c3: 5b:71:f5:9f:bb:12:98:23:e4:44:9d:4b:a1:f6:38: 57:3a:25:cc:a3:c7:f1:7f:12:62:39:a1:84:a8:76: ca:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:9B:8E:4C:CB:B5:35:ED:79:09:CB:D0:88:6A:69:CD:CF:73:4E:1F X509v3 Authority Key Identifier: keyid:89:39:97:EF:53:FF:BB:5A:3C:55:A4:72:13:13:50:40:C1:C5:B8:43 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/064ff7c9-e905-44d6-bc35-c7dbb070b757/0/893997EF53FFBB5A3C55A47213135040C1C5B843.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/893997EF53FFBB5A3C55A47213135040C1C5B843.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/064ff7c9-e905-44d6-bc35-c7dbb070b757/0/893997EF53FFBB5A3C55A47213135040C1C5B843.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4a:e2:b2:0a:58:f4:d1:a9:ad:c6:f5:5c:2f:3f:2a:8d:08:15: 73:df:5d:10:1c:e0:c5:a5:6b:54:95:04:e2:a8:0a:ea:07:1c: 4c:b2:26:f3:63:d9:17:af:b9:04:02:f1:39:18:ca:82:db:72: 9f:1f:08:36:f4:67:a5:56:8f:b1:f5:fb:23:d1:e9:ad:cf:84: b3:85:53:6c:ff:15:df:52:e8:b2:a8:11:45:3c:b4:71:60:32: bb:48:c5:33:fd:58:48:02:12:5e:b0:43:62:d8:d4:f6:20:e5: a9:e9:17:65:f2:a4:1d:3b:a1:ef:2a:bc:36:b0:5d:aa:92:63: f9:18:0f:57:de:b3:fd:71:6e:9a:3c:e4:ad:07:31:4e:5c:76: 66:63:30:9e:7c:8e:6c:9e:de:72:e2:22:98:58:e5:77:13:15: 43:02:33:2d:08:c7:ce:db:3d:25:ff:74:ab:0c:e7:a0:2a:42: f0:35:ef:55:88:28:da:f7:67:a9:1b:40:36:68:93:93:50:f7: b5:c9:76:62:43:ef:0e:3d:5d:98:ef:ee:b0:30:6f:66:d6:17: 65:e5:82:b5:8a:05:c1:4e:53:ee:37:ed:a3:9b:5f:0d:df:b6: cd:b0:8f:59:03:d4:3f:bd:3b:7f:ac:82:82:bb:92:06:9c:6e: cf:ff:4d:54 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUUWTlGpiyuOVEESGHmWWiWX2AZQEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODkzOTk3RUY1M0ZGQkI1QTNDNTVBNDcyMTMxMzUwNDBD MUM1Qjg0MzAeFw0yNjAxMjQyMTQ1NTJaFw0yNjAxMjcyMjI4NTJaMDMxMTAvBgNV BAMTKEU1OUI4RTRDQ0JCNTM1RUQ3OTA5Q0JEMDg4NkE2OUNEQ0Y3MzRFMUYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCkt8R2HjBVS3b68LaQHSmV7bHf DAkfNlo7AdHGUkWepSUV3uljoiXkb1fceQyrQs9jskW5+3edbihdMH0dqmQgdyeX Z+yDUv1gsNKNKhW1lXk1hkRXqf/NX3dlSJF/+RQa4FoT532K/xjvca3g5Y9nQByH 75zX8r5OB9GaxRpsSJn0uhZdbFHMbCIUkvyTrnVuJEzMnvrxLdYYFVYdFfvhCedR qvLobLw7ny64nWUpki7YHuIXshpHEcNnAE+tz58vckW7PagXXdufC1vdr3fopg80 pIAJPKghD4tu7HBCw1tx9Z+7Epgj5ESdS6H2OFc6Jcyjx/F/EmI5oYSodsqdAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU5ZuOTMu1Ne15CcvQiGppzc9zTh8wHwYDVR0j BBgwFoAUiTmX71P/u1o8VaRyExNQQMHFuEMwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w NjRmZjdjOS1lOTA1LTQ0ZDYtYmMzNS1jN2RiYjA3MGI3NTcvMC84OTM5OTdFRjUz RkZCQjVBM0M1NUE0NzIxMzEzNTA0MEMxQzVCODQzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvODkzOTk3RUY1M0ZGQkI1QTNDNTVBNDcyMTMxMzUwNDBDMUM1 Qjg0My5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMDY0ZmY3YzktZTkwNS00NGQ2LWJj MzUtYzdkYmIwNzBiNzU3LzAvODkzOTk3RUY1M0ZGQkI1QTNDNTVBNDcyMTMxMzUw NDBDMUM1Qjg0My5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAErisgpY9NGprcb1XC8/Ko0IFXPfXRAc4MWl a1SVBOKoCuoHHEyyJvNj2RevuQQC8TkYyoLbcp8fCDb0Z6VWj7H1+yPR6a3PhLOF U2z/Fd9S6LKoEUU8tHFgMrtIxTP9WEgCEl6wQ2LY1PYg5anpF2XypB07oe8qvDaw XaqSY/kYD1fes/1xbpo85K0HMU5cdmZjMJ58jmye3nLiIphY5XcTFUMCMy0Ix87b PSX/dKsM56AqQvA171WIKNr3Z6kbQDZok5NQ97XJdmJD7w49XZjv7rAwb2bWF2Xl grWKBcFOU+437aObXw3fts2wj1kD1D+9O3+sgoK7kgacbs//TVQ= -----END CERTIFICATE-----Generated at Sun Jan 25 22:10:36 2026 by rpki-client