This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/0a4a21b9-f912-41f3-b62c-1217581c948a/0/0D5DCD544694BBE8DB99D2D8DAB98314745CD97F.mft File: 0D5DCD544694BBE8DB99D2D8DAB98314745CD97F.mft (raw, json) Hash identifier: gAs4Mg+wHav8sEW0zZGQKT+W+Wosex/P9xn7HzeMJ+U= Subject key identifier: 27:21:E9:96:D0:48:D9:AB:FB:EB:31:39:5F:17:79:2C:76:4C:EB:9B Authority key identifier: 0D:5D:CD:54:46:94:BB:E8:DB:99:D2:D8:DA:B9:83:14:74:5C:D9:7F Certificate issuer: /CN=0D5DCD544694BBE8DB99D2D8DAB98314745CD97F Certificate serial: 314DE8088D9BC3D4F19BD90CD88D3532A1EFF581 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0D5DCD544694BBE8DB99D2D8DAB98314745CD97F.cer Subject info access: rsync://repo-rpki.idnic.net/repo/0a4a21b9-f912-41f3-b62c-1217581c948a/0/0D5DCD544694BBE8DB99D2D8DAB98314745CD97F.mft Manifest number: 0543 Signing time: Sun 25 Jan 2026 02:10:04 +0000 Manifest this update: Sun 25 Jan 2026 02:05:04 +0000 Manifest next update: Wed 28 Jan 2026 10:29:04 +0000 Files and hashes: 1: 3130332e3134302e3130382e302f32342d3234203d3e203538333639.roa (hash: TU9zvXhzWTJdHe9aJGaZ4ESWd+R9UnSTLhOnKf2ldQw=) 2: 0D5DCD544694BBE8DB99D2D8DAB98314745CD97F.crl (hash: ycV1oHEZZIxXTMsjJxWnL60hUbsK/VzlJ8fzyKkdfaU=) 3: 3130332e3134302e3130392e302f32342d3234203d3e203538333639.roa (hash: BUjAtiDKImhm44uw2SFH6kSw2t9lwdf9XIcal9kQ1mg=) 4: 3130332e3134302e3130382e302f32332d3233203d3e203538333639.roa (hash: 3sAJshp+EPOwtrV5/4YJuemXpZyIihe64Jp+iK5G1jY=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/0a4a21b9-f912-41f3-b62c-1217581c948a/0/0D5DCD544694BBE8DB99D2D8DAB98314745CD97F.crl rsync://repo-rpki.idnic.net/repo/0a4a21b9-f912-41f3-b62c-1217581c948a/0/0D5DCD544694BBE8DB99D2D8DAB98314745CD97F.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0D5DCD544694BBE8DB99D2D8DAB98314745CD97F.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 28 Jan 2026 10:29:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 31:4d:e8:08:8d:9b:c3:d4:f1:9b:d9:0c:d8:8d:35:32:a1:ef:f5:81 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0D5DCD544694BBE8DB99D2D8DAB98314745CD97F Validity Not Before: Jan 25 02:05:04 2026 GMT Not After : Jan 28 10:29:04 2026 GMT Subject: CN=2721E996D048D9ABFBEB31395F17792C764CEB9B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:84:f0:21:54:56:2c:9b:36:87:d4:98:6e:51: c3:b9:06:5d:23:b1:0c:72:e7:09:1c:01:c9:21:36: 31:c2:2f:2f:56:4b:6e:d3:e2:b3:5e:81:19:14:39: 82:a9:31:7f:02:89:9e:e0:21:86:ef:3d:f5:6f:78: 43:8b:a2:a0:71:37:00:81:59:58:46:71:9b:77:5d: 05:3b:b4:fd:f7:e1:bc:b6:0b:50:aa:53:7b:2d:dc: af:24:2b:4b:49:f4:29:19:a4:b4:ae:59:51:48:e7: 29:12:2f:4f:0f:3d:75:1d:6d:38:f2:43:4f:29:86: f0:14:41:3b:1f:a4:cc:93:d3:b1:da:42:bf:5b:f7: 13:90:f1:96:90:6d:85:08:64:41:e6:83:39:5b:51: 7e:63:e3:45:ec:a6:24:f2:38:76:ba:78:b6:d8:1a: 60:22:b3:ad:f1:de:64:ba:21:c0:24:93:55:60:24: 84:2b:c2:12:15:c3:62:85:18:91:e9:5e:25:28:b7: 52:04:8b:90:4e:8f:17:61:6b:6a:e9:0d:54:e2:59: 41:83:a7:5f:2c:0c:e5:30:72:ec:86:e1:8c:f4:4c: c8:df:c0:6c:0d:9b:5b:e1:9f:a8:9c:3f:bb:d2:65: b5:06:2c:3f:2d:3f:5c:ce:71:55:51:d4:f3:fc:74: 26:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 27:21:E9:96:D0:48:D9:AB:FB:EB:31:39:5F:17:79:2C:76:4C:EB:9B X509v3 Authority Key Identifier: keyid:0D:5D:CD:54:46:94:BB:E8:DB:99:D2:D8:DA:B9:83:14:74:5C:D9:7F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/0a4a21b9-f912-41f3-b62c-1217581c948a/0/0D5DCD544694BBE8DB99D2D8DAB98314745CD97F.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0D5DCD544694BBE8DB99D2D8DAB98314745CD97F.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/0a4a21b9-f912-41f3-b62c-1217581c948a/0/0D5DCD544694BBE8DB99D2D8DAB98314745CD97F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 00:0c:5a:bc:69:dd:79:cb:39:19:2d:e2:a3:fa:34:4d:70:bb: 52:40:78:b2:c5:17:0d:7f:bb:29:b4:49:d8:b1:37:24:20:fe: 7f:82:58:1a:51:d3:d8:cf:e4:06:1e:86:3d:e6:d9:a5:b7:81: 9e:7b:ee:1b:7f:74:6a:55:b1:88:0b:81:b1:12:12:eb:c3:e0: 29:85:5f:7e:7e:a7:51:1a:1a:1d:13:ed:83:00:68:97:7d:97: de:a3:cb:2e:45:ec:c8:0c:57:09:3a:39:f7:61:42:05:6d:1a: 84:cc:c5:1a:72:43:ad:a4:3d:51:24:a2:fc:53:51:2b:37:1b: 8b:e1:77:34:d3:a9:b3:f1:ad:b6:49:8a:47:5e:5b:75:83:d7: aa:95:0e:a6:2e:62:45:12:6f:96:55:85:30:90:a7:3e:45:ee: 87:45:3f:03:af:63:7f:14:38:55:96:ef:05:ad:06:93:33:2c: cc:19:1a:af:8d:e1:e5:cb:e8:d2:10:a0:05:10:9b:15:ff:73: f9:59:73:81:ee:20:c0:f7:d9:be:a4:71:31:63:dd:95:c6:de: a7:ad:da:02:ef:43:9c:04:6a:98:1a:01:2b:9f:5f:73:64:48: 8e:21:2c:7b:78:52:26:53:82:e2:42:73:66:54:2d:20:86:41: 1a:3b:98:7b -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUMU3oCI2bw9Txm9kM2I01MqHv9YEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMEQ1RENENTQ0Njk0QkJFOERCOTlEMkQ4REFCOTgzMTQ3 NDVDRDk3RjAeFw0yNjAxMjUwMjA1MDRaFw0yNjAxMjgxMDI5MDRaMDMxMTAvBgNV BAMTKDI3MjFFOTk2RDA0OEQ5QUJGQkVCMzEzOTVGMTc3OTJDNzY0Q0VCOUIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCphPAhVFYsmzaH1JhuUcO5Bl0j sQxy5wkcAckhNjHCLy9WS27T4rNegRkUOYKpMX8CiZ7gIYbvPfVveEOLoqBxNwCB WVhGcZt3XQU7tP334by2C1CqU3st3K8kK0tJ9CkZpLSuWVFI5ykSL08PPXUdbTjy Q08phvAUQTsfpMyT07HaQr9b9xOQ8ZaQbYUIZEHmgzlbUX5j40XspiTyOHa6eLbY GmAis63x3mS6IcAkk1VgJIQrwhIVw2KFGJHpXiUot1IEi5BOjxdha2rpDVTiWUGD p18sDOUwcuyG4Yz0TMjfwGwNm1vhn6icP7vSZbUGLD8tP1zOcVVR1PP8dCZNAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUJyHpltBI2av76zE5Xxd5LHZM65swHwYDVR0j BBgwFoAUDV3NVEaUu+jbmdLY2rmDFHRc2X8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w YTRhMjFiOS1mOTEyLTQxZjMtYjYyYy0xMjE3NTgxYzk0OGEvMC8wRDVEQ0Q1NDQ2 OTRCQkU4REI5OUQyRDhEQUI5ODMxNDc0NUNEOTdGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMEQ1RENENTQ0Njk0QkJFOERCOTlEMkQ4REFCOTgzMTQ3NDVD RDk3Ri5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMGE0YTIxYjktZjkxMi00MWYzLWI2 MmMtMTIxNzU4MWM5NDhhLzAvMEQ1RENENTQ0Njk0QkJFOERCOTlEMkQ4REFCOTgz MTQ3NDVDRDk3Ri5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAAMWrxp3XnLORkt4qP6NE1wu1JAeLLFFw1/ uym0SdixNyQg/n+CWBpR09jP5AYehj3m2aW3gZ577ht/dGpVsYgLgbESEuvD4CmF X35+p1EaGh0T7YMAaJd9l96jyy5F7MgMVwk6OfdhQgVtGoTMxRpyQ62kPVEkovxT USs3G4vhdzTTqbPxrbZJikdeW3WD16qVDqYuYkUSb5ZVhTCQpz5F7odFPwOvY38U OFWW7wWtBpMzLMwZGq+N4eXL6NIQoAUQmxX/c/lZc4HuIMD32b6kcTFj3ZXG3qet 2gLvQ5wEapgaASufX3NkSI4hLHt4UiZTguJCc2ZULSCGQRo7mHs= -----END CERTIFICATE-----Generated at Sun Jan 25 18:37:07 2026 by rpki-client