This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/0e8d58a8-e197-4179-b73c-608e047d09a3/0/04D3D2E060243AD917D4F682922E4A805EDE3300.mft File: 04D3D2E060243AD917D4F682922E4A805EDE3300.mft (raw, json) Hash identifier: D5NLVHCq2OY3omEFHOZW1g2PNomJGm9oP8Zy1j7ffH0= Subject key identifier: 8F:05:7D:97:44:51:FE:4D:7E:A9:43:F2:29:46:6F:CD:4A:7F:84:71 Authority key identifier: 04:D3:D2:E0:60:24:3A:D9:17:D4:F6:82:92:2E:4A:80:5E:DE:33:00 Certificate issuer: /CN=04D3D2E060243AD917D4F682922E4A805EDE3300 Certificate serial: 3E4F105DBFA354C3383585A4371798D30DBDBA22 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/04D3D2E060243AD917D4F682922E4A805EDE3300.cer Subject info access: rsync://repo-rpki.idnic.net/repo/0e8d58a8-e197-4179-b73c-608e047d09a3/0/04D3D2E060243AD917D4F682922E4A805EDE3300.mft Manifest number: 0114 Signing time: Sun 25 Jan 2026 12:12:02 +0000 Manifest this update: Sun 25 Jan 2026 12:07:02 +0000 Manifest next update: Wed 28 Jan 2026 14:33:02 +0000 Files and hashes: 1: 04D3D2E060243AD917D4F682922E4A805EDE3300.crl (hash: 1dKopcHDyHNmA/OdmIG1dPWwXucNlznkptbiHxa/MFI=) 2: 3135372e32302e3235322e302f32342d3234203d3e20313338303839.roa (hash: tAOR3+qopwEEpOJ1MoufsE4Gb6QgCqX7uwexYPM3lns=) 3: 3135372e32302e3235322e302f32332d3233203d3e20313338303839.roa (hash: UvJvnJi0DpPbEtS7oOVZoco+ytQPNHRypimtkzre3+M=) 4: 3135372e32302e3235332e302f32342d3234203d3e20313338303839.roa (hash: MxcV0VQaTxMuBGbZxjauXv5QA5Vg8BL6BVoMBR3myP8=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/0e8d58a8-e197-4179-b73c-608e047d09a3/0/04D3D2E060243AD917D4F682922E4A805EDE3300.crl rsync://repo-rpki.idnic.net/repo/0e8d58a8-e197-4179-b73c-608e047d09a3/0/04D3D2E060243AD917D4F682922E4A805EDE3300.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/04D3D2E060243AD917D4F682922E4A805EDE3300.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 28 Jan 2026 14:33:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3e:4f:10:5d:bf:a3:54:c3:38:35:85:a4:37:17:98:d3:0d:bd:ba:22 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=04D3D2E060243AD917D4F682922E4A805EDE3300 Validity Not Before: Jan 25 12:07:02 2026 GMT Not After : Jan 28 14:33:02 2026 GMT Subject: CN=8F057D974451FE4D7EA943F229466FCD4A7F8471 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:2c:3b:a8:d9:02:e7:a1:6d:db:ab:ad:b7:8e: 3e:ba:67:47:ac:8c:bf:a8:62:01:c1:f2:f2:15:ac: 12:7f:e6:58:6d:e7:50:6b:2b:59:bc:83:98:49:3b: 44:63:10:b9:ef:9b:c1:41:31:0d:08:ec:d9:fd:01: 7e:70:14:84:b1:44:99:9b:51:36:fc:95:4e:30:2c: 45:df:e6:13:93:ce:8c:b3:b3:3f:1e:06:51:db:68: 32:5e:69:a4:45:cf:c2:36:3f:ba:fa:4f:c3:7a:28: 64:aa:0e:c5:9e:58:db:1f:a1:9d:af:40:be:8b:0d: 38:b4:dc:c8:77:02:5e:23:6e:73:4e:73:b3:cf:ac: f7:69:01:32:44:f9:42:0d:2d:c6:ae:24:a6:6c:be: 1c:fd:e8:e1:50:c7:99:87:ab:36:87:69:ca:82:f4: b6:f0:1e:93:64:f2:ba:41:ba:33:e6:7c:c5:ee:83: d8:ff:38:a5:e4:49:23:f4:76:08:12:0e:3a:f5:18: c1:2c:d1:04:5f:2e:ab:4a:fa:b2:2b:27:29:e7:c9: c5:da:28:54:75:a5:06:c3:7c:fa:44:70:04:a7:1c: 94:e0:29:fb:94:39:de:5f:a8:2c:18:98:2b:4d:93: 2a:4f:61:99:f5:9b:9a:19:23:e7:82:e0:88:3f:85: 88:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:05:7D:97:44:51:FE:4D:7E:A9:43:F2:29:46:6F:CD:4A:7F:84:71 X509v3 Authority Key Identifier: keyid:04:D3:D2:E0:60:24:3A:D9:17:D4:F6:82:92:2E:4A:80:5E:DE:33:00 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/0e8d58a8-e197-4179-b73c-608e047d09a3/0/04D3D2E060243AD917D4F682922E4A805EDE3300.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/04D3D2E060243AD917D4F682922E4A805EDE3300.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/0e8d58a8-e197-4179-b73c-608e047d09a3/0/04D3D2E060243AD917D4F682922E4A805EDE3300.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 29:13:f9:50:d3:db:ec:29:6a:c7:e7:0c:0d:48:c0:03:ea:02: 7d:95:76:b8:4d:ae:5b:2e:54:81:ef:89:a7:34:75:ea:26:89: f5:7f:6f:31:ca:7b:dc:2f:d2:3a:99:a2:05:2a:c0:98:b4:5f: c7:df:62:7a:51:a6:2e:72:f9:4d:6b:6d:ac:34:0e:78:56:77: a5:1a:7d:a4:0e:04:cf:37:c5:bd:40:06:0d:ce:2d:fb:a6:78: 7c:06:62:da:5a:72:c0:18:55:b0:f0:a2:d7:6c:d0:af:b9:4b: 56:3b:16:ee:f5:0f:47:e9:5b:5f:7f:80:6f:90:bf:49:38:db: 35:12:bf:db:3e:f0:c0:1c:f5:42:79:b5:f2:9d:28:cd:40:32: 06:f8:1e:e9:13:82:eb:57:f0:b9:8a:04:dd:73:35:1f:fa:7f: 2d:90:22:41:ef:74:a8:70:8b:9b:60:6d:24:7e:a9:7f:83:3f: f7:27:aa:bf:1b:76:d1:cc:91:f6:3f:dd:6e:12:79:8f:40:17: b7:40:e6:28:ec:2a:92:cd:b8:36:71:fe:55:e1:5a:79:af:4e: 8d:06:81:46:35:b8:f8:e7:e3:80:7a:28:18:15:a6:94:6c:94: 12:99:e0:c2:f4:b3:99:5e:68:00:6b:d4:82:22:b4:dc:55:cf: d1:cd:c1:e3 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUPk8QXb+jVMM4NYWkNxeY0w29uiIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDREM0QyRTA2MDI0M0FEOTE3RDRGNjgyOTIyRTRBODA1 RURFMzMwMDAeFw0yNjAxMjUxMjA3MDJaFw0yNjAxMjgxNDMzMDJaMDMxMTAvBgNV BAMTKDhGMDU3RDk3NDQ1MUZFNEQ3RUE5NDNGMjI5NDY2RkNENEE3Rjg0NzEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDdLDuo2QLnoW3bq623jj66Z0es jL+oYgHB8vIVrBJ/5lht51BrK1m8g5hJO0RjELnvm8FBMQ0I7Nn9AX5wFISxRJmb UTb8lU4wLEXf5hOTzoyzsz8eBlHbaDJeaaRFz8I2P7r6T8N6KGSqDsWeWNsfoZ2v QL6LDTi03Mh3Al4jbnNOc7PPrPdpATJE+UINLcauJKZsvhz96OFQx5mHqzaHacqC 9LbwHpNk8rpBujPmfMXug9j/OKXkSSP0dggSDjr1GMEs0QRfLqtK+rIrJynnycXa KFR1pQbDfPpEcASnHJTgKfuUOd5fqCwYmCtNkypPYZn1m5oZI+eC4Ig/hYjrAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUjwV9l0RR/k1+qUPyKUZvzUp/hHEwHwYDVR0j BBgwFoAUBNPS4GAkOtkX1PaCki5KgF7eMwAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w ZThkNThhOC1lMTk3LTQxNzktYjczYy02MDhlMDQ3ZDA5YTMvMC8wNEQzRDJFMDYw MjQzQUQ5MTdENEY2ODI5MjJFNEE4MDVFREUzMzAwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvMDREM0QyRTA2MDI0M0FEOTE3RDRGNjgyOTIyRTRBODA1RURF MzMwMC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMGU4ZDU4YTgtZTE5Ny00MTc5LWI3 M2MtNjA4ZTA0N2QwOWEzLzAvMDREM0QyRTA2MDI0M0FEOTE3RDRGNjgyOTIyRTRB ODA1RURFMzMwMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACkT+VDT2+wpasfnDA1IwAPqAn2VdrhNrlsu VIHviac0deomifV/bzHKe9wv0jqZogUqwJi0X8ffYnpRpi5y+U1rbaw0DnhWd6Ua faQOBM83xb1ABg3OLfumeHwGYtpacsAYVbDwotds0K+5S1Y7Fu71D0fpW19/gG+Q v0k42zUSv9s+8MAc9UJ5tfKdKM1AMgb4HukTgutX8LmKBN1zNR/6fy2QIkHvdKhw i5tgbSR+qX+DP/cnqr8bdtHMkfY/3W4SeY9AF7dA5ijsKpLNuDZx/lXhWnmvTo0G gUY1uPjn44B6KBgVppRslBKZ4ML0s5leaABr1IIitNxVz9HNweM= -----END CERTIFICATE-----Generated at Sun Jan 25 21:11:13 2026 by rpki-client