This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/0e57991a-156d-4b55-90cb-79b876cf6a4a/0/1678828C849BDE3472FE846308767F54ED7F8232.mft File: 1678828C849BDE3472FE846308767F54ED7F8232.mft (raw, json) Hash identifier: K0o59tbuxb22SkRqZk1rwgpp8Tm3uHLzr4ij8rV3i2g= Subject key identifier: B6:8F:DA:DA:88:B7:03:AA:4D:81:27:94:74:13:A2:F0:9D:53:F9:A6 Authority key identifier: 16:78:82:8C:84:9B:DE:34:72:FE:84:63:08:76:7F:54:ED:7F:82:32 Certificate issuer: /CN=1678828C849BDE3472FE846308767F54ED7F8232 Certificate serial: 2A5D0610C0FCCA391AAB2BC2B915C48FBA15702D Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1678828C849BDE3472FE846308767F54ED7F8232.cer Subject info access: rsync://repo-rpki.idnic.net/repo/0e57991a-156d-4b55-90cb-79b876cf6a4a/0/1678828C849BDE3472FE846308767F54ED7F8232.mft Manifest number: 0250 Signing time: Sat 24 Jan 2026 21:10:52 +0000 Manifest this update: Sat 24 Jan 2026 21:05:52 +0000 Manifest next update: Wed 28 Jan 2026 01:52:52 +0000 Files and hashes: 1: 3130332e3138342e3138302e302f32342d3234203d3e20313339333831.roa (hash: oyydVMYyKXkpYDIFM7y9X8uh6d+LkiuOE6srFgEvka0=) 2: 3130332e3138342e3138312e302f32342d3234203d3e20313339333831.roa (hash: amwDD/Sw1ZMDPleCIfQ45Yvn4tCtR3QQCTma/8S3s6A=) 3: 3130332e3138342e3138302e302f32342d3234203d3e203435333035.roa (hash: bd57lftDDk/LNoDF2KUhmKXFCa0cbwtrVskfNqH8nl0=) 4: 1678828C849BDE3472FE846308767F54ED7F8232.crl (hash: EjNWQCTLPrNosRn6ekehO5/Z6LyPK5/c73RtzA+sEWc=) 5: 3130332e3138342e3138312e302f32342d3234203d3e203435333035.roa (hash: +6suBy02VBYIADpzrjVT+EfPKFC0O5f32zxYKkvXd28=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/0e57991a-156d-4b55-90cb-79b876cf6a4a/0/1678828C849BDE3472FE846308767F54ED7F8232.crl rsync://repo-rpki.idnic.net/repo/0e57991a-156d-4b55-90cb-79b876cf6a4a/0/1678828C849BDE3472FE846308767F54ED7F8232.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1678828C849BDE3472FE846308767F54ED7F8232.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 28 Jan 2026 01:52:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2a:5d:06:10:c0:fc:ca:39:1a:ab:2b:c2:b9:15:c4:8f:ba:15:70:2d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1678828C849BDE3472FE846308767F54ED7F8232 Validity Not Before: Jan 24 21:05:52 2026 GMT Not After : Jan 28 01:52:52 2026 GMT Subject: CN=B68FDADA88B703AA4D8127947413A2F09D53F9A6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:91:a1:0d:f6:cd:43:90:67:3a:4f:29:77:50: c6:bf:ce:3b:fa:9b:31:32:4f:c7:5a:e3:d4:86:4b: ee:5e:b1:0d:f2:f2:2d:47:fd:89:96:bf:de:d7:e3: 9d:26:ff:58:f8:71:05:3e:56:ba:77:02:ca:8b:b1: 6c:94:04:5b:25:b5:4a:cd:d8:e9:5a:38:d3:43:b7: 3d:96:d6:80:50:33:21:aa:fe:b6:94:e7:ee:7e:a4: fc:75:ca:c8:eb:93:d5:3b:32:25:7d:6c:46:fb:52: 47:d6:88:28:20:19:f1:3b:17:da:9d:c3:34:f4:2c: b6:ea:2b:48:00:c5:57:b0:10:cf:f3:e3:43:ed:3f: f7:5a:a6:cb:0a:70:2c:e3:2a:12:d3:38:47:70:64: ea:c4:92:dc:dd:c2:69:a4:78:e3:f4:fd:96:09:af: b0:33:6e:47:d1:15:bd:3d:b3:70:c2:fa:9e:71:ac: 5d:6a:50:5e:6d:25:e1:5c:d0:a0:e4:a0:7c:96:b1: 0b:3d:e3:55:16:af:3d:b5:1b:1f:de:22:41:fc:95: bc:82:c8:35:8f:12:e3:35:7b:61:c9:b9:59:bb:48: ee:2a:ec:bb:d1:75:d4:78:24:5d:3f:f5:d5:24:6d: 40:3e:fa:46:98:21:9a:4e:19:0c:af:85:18:a5:5e: 78:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B6:8F:DA:DA:88:B7:03:AA:4D:81:27:94:74:13:A2:F0:9D:53:F9:A6 X509v3 Authority Key Identifier: keyid:16:78:82:8C:84:9B:DE:34:72:FE:84:63:08:76:7F:54:ED:7F:82:32 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/0e57991a-156d-4b55-90cb-79b876cf6a4a/0/1678828C849BDE3472FE846308767F54ED7F8232.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1678828C849BDE3472FE846308767F54ED7F8232.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/0e57991a-156d-4b55-90cb-79b876cf6a4a/0/1678828C849BDE3472FE846308767F54ED7F8232.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4f:4b:72:6f:31:91:e4:e8:aa:68:a6:9f:99:61:1c:41:28:32: 07:30:88:6f:b2:8c:42:3a:1c:dc:4d:5d:e8:fc:58:05:c7:e7: dd:4b:30:aa:91:1d:bc:01:cf:7c:88:ec:61:b0:87:fb:a9:f6: b9:a1:d3:29:d5:e1:1b:f9:84:1e:c2:08:ad:46:cd:0f:2a:f8: 25:31:a6:53:de:d3:52:05:e6:4c:16:65:70:d6:6c:9a:36:c0: 6f:ec:30:1e:54:d0:1c:e2:fe:6e:de:c8:24:c1:bb:7f:d9:e0: 67:de:3d:00:3c:45:33:e7:57:aa:bf:1d:47:fe:3a:66:9b:a0: e1:98:01:16:d2:60:ea:23:d5:40:62:44:76:25:55:08:2f:6e: a1:7f:a2:4e:1f:ef:1c:b3:6b:99:12:92:2c:9c:9f:e3:a9:52: ac:71:ce:20:3b:c5:2a:40:bc:b1:8a:3a:1b:fa:93:a4:6b:b0: 0e:62:cb:25:2b:db:51:b0:bb:98:3e:25:2d:0e:92:9e:24:4f: 02:d9:3b:18:ce:2a:51:f1:97:bf:b7:a5:a7:04:b3:22:42:af: 6f:5c:fa:be:ed:10:5b:2c:83:3e:9f:b6:96:07:ec:4d:30:ad: e9:c5:5a:ef:f6:1b:16:6c:36:4f:89:96:93:10:75:4c:01:fb: 26:d8:18:1d -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUKl0GEMD8yjkaqyvCuRXEj7oVcC0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTY3ODgyOEM4NDlCREUzNDcyRkU4NDYzMDg3NjdGNTRF RDdGODIzMjAeFw0yNjAxMjQyMTA1NTJaFw0yNjAxMjgwMTUyNTJaMDMxMTAvBgNV BAMTKEI2OEZEQURBODhCNzAzQUE0RDgxMjc5NDc0MTNBMkYwOUQ1M0Y5QTYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCxkaEN9s1DkGc6Tyl3UMa/zjv6 mzEyT8da49SGS+5esQ3y8i1H/YmWv97X450m/1j4cQU+Vrp3AsqLsWyUBFsltUrN 2OlaONNDtz2W1oBQMyGq/raU5+5+pPx1ysjrk9U7MiV9bEb7UkfWiCggGfE7F9qd wzT0LLbqK0gAxVewEM/z40PtP/dapssKcCzjKhLTOEdwZOrEktzdwmmkeOP0/ZYJ r7AzbkfRFb09s3DC+p5xrF1qUF5tJeFc0KDkoHyWsQs941UWrz21Gx/eIkH8lbyC yDWPEuM1e2HJuVm7SO4q7LvRddR4JF0/9dUkbUA++kaYIZpOGQyvhRilXnixAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUto/a2oi3A6pNgSeUdBOi8J1T+aYwHwYDVR0j BBgwFoAUFniCjISb3jRy/oRjCHZ/VO1/gjIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w ZTU3OTkxYS0xNTZkLTRiNTUtOTBjYi03OWI4NzZjZjZhNGEvMC8xNjc4ODI4Qzg0 OUJERTM0NzJGRTg0NjMwODc2N0Y1NEVEN0Y4MjMyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMTY3ODgyOEM4NDlCREUzNDcyRkU4NDYzMDg3NjdGNTRFRDdG ODIzMi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMGU1Nzk5MWEtMTU2ZC00YjU1LTkw Y2ItNzliODc2Y2Y2YTRhLzAvMTY3ODgyOEM4NDlCREUzNDcyRkU4NDYzMDg3NjdG NTRFRDdGODIzMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAE9Lcm8xkeToqmimn5lhHEEoMgcwiG+yjEI6 HNxNXej8WAXH591LMKqRHbwBz3yI7GGwh/up9rmh0ynV4Rv5hB7CCK1GzQ8q+CUx plPe01IF5kwWZXDWbJo2wG/sMB5U0Bzi/m7eyCTBu3/Z4GfePQA8RTPnV6q/HUf+ OmaboOGYARbSYOoj1UBiRHYlVQgvbqF/ok4f7xyza5kSkiycn+OpUqxxziA7xSpA vLGKOhv6k6RrsA5iyyUr21Gwu5g+JS0Okp4kTwLZOxjOKlHxl7+3pacEsyJCr29c +r7tEFssgz6ftpYH7E0wrenFWu/2GxZsNk+JlpMQdUwB+ybYGB0= -----END CERTIFICATE-----Generated at Mon Jan 26 02:42:17 2026 by rpki-client