This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/0ec677fd-d569-4cc5-a563-9b0f248b1af1/0/2AD789EBFC58C1F0E4F87390781D38CB0D580210.mft File: 2AD789EBFC58C1F0E4F87390781D38CB0D580210.mft (raw, json) Hash identifier: NMGOD95E/Bn+aXSjzRwQhR2grRpm/JWwPf5HTzIPKOI= Subject key identifier: 89:95:20:06:21:20:43:68:85:F9:94:2C:EB:D3:4C:BE:A3:48:57:9B Authority key identifier: 2A:D7:89:EB:FC:58:C1:F0:E4:F8:73:90:78:1D:38:CB:0D:58:02:10 Certificate issuer: /CN=2AD789EBFC58C1F0E4F87390781D38CB0D580210 Certificate serial: 338A4578191A0C6C67FFDC02028E0467D97D8C60 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/2AD789EBFC58C1F0E4F87390781D38CB0D580210.cer Subject info access: rsync://repo-rpki.idnic.net/repo/0ec677fd-d569-4cc5-a563-9b0f248b1af1/0/2AD789EBFC58C1F0E4F87390781D38CB0D580210.mft Manifest number: 0111 Signing time: Sat 24 Jan 2026 08:22:11 +0000 Manifest this update: Sat 24 Jan 2026 08:17:11 +0000 Manifest next update: Tue 27 Jan 2026 17:41:11 +0000 Files and hashes: 1: 2AD789EBFC58C1F0E4F87390781D38CB0D580210.crl (hash: mcZMgmmnepBGLago4ZDJKXtjK1GYjJjvN2Oxn/nz3HU=) 2: 3136302e32322e36322e302f32342d3234203d3e20313439373230.roa (hash: YoRi0wh2sw9GoYCOeEcjR9q///J9GRgGfI+RYp9E7Ao=) 3: 3136302e32322e36332e302f32342d3234203d3e20313439373138.roa (hash: bvQkvMV312x+cD6F+RgPImc6lo1lROIFQ1YOPKTkJvY=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/0ec677fd-d569-4cc5-a563-9b0f248b1af1/0/2AD789EBFC58C1F0E4F87390781D38CB0D580210.crl rsync://repo-rpki.idnic.net/repo/0ec677fd-d569-4cc5-a563-9b0f248b1af1/0/2AD789EBFC58C1F0E4F87390781D38CB0D580210.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/2AD789EBFC58C1F0E4F87390781D38CB0D580210.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 27 Jan 2026 17:41:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 33:8a:45:78:19:1a:0c:6c:67:ff:dc:02:02:8e:04:67:d9:7d:8c:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2AD789EBFC58C1F0E4F87390781D38CB0D580210 Validity Not Before: Jan 24 08:17:11 2026 GMT Not After : Jan 27 17:41:11 2026 GMT Subject: CN=899520062120436885F9942CEBD34CBEA348579B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:68:c8:19:fb:ef:3c:cd:55:33:87:46:7f:af: 25:a9:d5:ef:78:f1:07:3c:b0:04:42:12:38:68:98: 91:a7:cc:c5:40:1f:21:65:6f:d5:d5:dc:58:90:42: aa:56:b9:03:52:4a:e2:66:19:8a:e9:75:22:93:e7: 75:8b:f2:c5:50:b0:be:93:4e:ce:9d:87:6e:cc:ed: 16:e0:f9:44:2f:e2:e0:74:62:cf:48:46:48:d5:33: f7:12:ac:4d:a4:86:af:51:91:3d:11:d8:f9:c8:70: 01:f4:68:92:80:c2:dc:e3:5d:1d:c6:67:60:33:cf: a8:0a:a8:ec:42:78:e1:41:a3:43:28:3d:b8:e9:8d: 27:f8:d8:c3:b7:3d:f8:80:57:c3:84:42:f8:b2:8f: 0b:d1:79:7b:62:b4:7f:3b:ca:39:0c:0e:11:6d:5a: ad:4f:c2:2d:25:a8:b3:59:4d:da:8f:b7:83:7a:74: 75:16:bc:4c:6e:d1:47:73:d8:fa:47:c5:6d:f5:0e: 1b:59:c0:73:ab:64:16:f7:30:88:b5:61:ad:01:29: 0c:41:65:04:99:98:a1:88:e5:d3:1f:58:96:93:34: 03:cf:4d:9b:54:5c:a6:ae:64:55:45:1f:fb:a4:1f: 12:cd:e1:93:21:c1:31:ac:b9:92:dd:d9:ad:1f:4c: af:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:95:20:06:21:20:43:68:85:F9:94:2C:EB:D3:4C:BE:A3:48:57:9B X509v3 Authority Key Identifier: keyid:2A:D7:89:EB:FC:58:C1:F0:E4:F8:73:90:78:1D:38:CB:0D:58:02:10 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/0ec677fd-d569-4cc5-a563-9b0f248b1af1/0/2AD789EBFC58C1F0E4F87390781D38CB0D580210.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/2AD789EBFC58C1F0E4F87390781D38CB0D580210.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/0ec677fd-d569-4cc5-a563-9b0f248b1af1/0/2AD789EBFC58C1F0E4F87390781D38CB0D580210.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7b:d7:54:08:b9:f0:ce:79:db:e8:3a:98:15:9c:d9:69:67:72: 56:86:20:fa:c0:7e:c9:80:4e:cb:cc:e6:44:cb:6e:f1:a3:f5: 78:af:da:5f:92:fe:0a:4d:a2:89:13:5c:36:ce:09:e9:a1:18: 32:96:be:ed:9d:b7:be:aa:06:65:3c:65:cb:ea:93:8f:ee:3e: 68:52:83:05:d2:79:26:f4:b3:9f:43:88:18:e1:80:31:56:0f: 5b:be:b4:b8:f2:b4:45:33:eb:e6:e2:c3:15:e1:8e:77:b5:41: 2b:a5:7f:60:cb:f5:90:56:d2:8d:68:65:53:42:e0:32:b6:7b: 3a:a7:15:a8:84:55:f8:24:cc:fb:ca:a7:50:83:98:af:8e:57: 8b:ac:80:b9:6f:f6:cd:8f:f7:72:9d:2b:04:be:47:94:2a:76: 32:25:f0:a6:51:7b:15:22:56:7c:47:f8:cd:9a:02:75:9a:54: fb:60:f9:92:90:05:e5:6c:f7:be:a8:41:2c:fb:fa:5c:f7:b8: 0b:cd:13:46:18:17:0a:84:06:9d:c3:7b:be:8f:79:b5:b2:47: 78:e6:fe:f2:d1:53:18:3c:61:f3:76:a4:a9:7c:6e:90:d8:23: e3:b5:7b:b1:45:5f:49:2f:03:eb:54:f2:20:3a:63:d7:93:6f: b9:8e:2e:a5 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUM4pFeBkaDGxn/9wCAo4EZ9l9jGAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkFENzg5RUJGQzU4QzFGMEU0Rjg3MzkwNzgxRDM4Q0Iw RDU4MDIxMDAeFw0yNjAxMjQwODE3MTFaFw0yNjAxMjcxNzQxMTFaMDMxMTAvBgNV BAMTKDg5OTUyMDA2MjEyMDQzNjg4NUY5OTQyQ0VCRDM0Q0JFQTM0ODU3OUIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCraMgZ++88zVUzh0Z/ryWp1e94 8Qc8sARCEjhomJGnzMVAHyFlb9XV3FiQQqpWuQNSSuJmGYrpdSKT53WL8sVQsL6T Ts6dh27M7Rbg+UQv4uB0Ys9IRkjVM/cSrE2khq9RkT0R2PnIcAH0aJKAwtzjXR3G Z2Azz6gKqOxCeOFBo0MoPbjpjSf42MO3PfiAV8OEQviyjwvReXtitH87yjkMDhFt Wq1Pwi0lqLNZTdqPt4N6dHUWvExu0Udz2PpHxW31DhtZwHOrZBb3MIi1Ya0BKQxB ZQSZmKGI5dMfWJaTNAPPTZtUXKauZFVFH/ukHxLN4ZMhwTGsuZLd2a0fTK+HAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUiZUgBiEgQ2iF+ZQs69NMvqNIV5swHwYDVR0j BBgwFoAUKteJ6/xYwfDk+HOQeB04yw1YAhAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w ZWM2NzdmZC1kNTY5LTRjYzUtYTU2My05YjBmMjQ4YjFhZjEvMC8yQUQ3ODlFQkZD NThDMUYwRTRGODczOTA3ODFEMzhDQjBENTgwMjEwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvMkFENzg5RUJGQzU4QzFGMEU0Rjg3MzkwNzgxRDM4Q0IwRDU4 MDIxMC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMGVjNjc3ZmQtZDU2OS00Y2M1LWE1 NjMtOWIwZjI0OGIxYWYxLzAvMkFENzg5RUJGQzU4QzFGMEU0Rjg3MzkwNzgxRDM4 Q0IwRDU4MDIxMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHvXVAi58M552+g6mBWc2WlnclaGIPrAfsmA TsvM5kTLbvGj9Xiv2l+S/gpNookTXDbOCemhGDKWvu2dt76qBmU8Zcvqk4/uPmhS gwXSeSb0s59DiBjhgDFWD1u+tLjytEUz6+biwxXhjne1QSulf2DL9ZBW0o1oZVNC 4DK2ezqnFaiEVfgkzPvKp1CDmK+OV4usgLlv9s2P93KdKwS+R5QqdjIl8KZRexUi VnxH+M2aAnWaVPtg+ZKQBeVs976oQSz7+lz3uAvNE0YYFwqEBp3De76PebWyR3jm /vLRUxg8YfN2pKl8bpDYI+O1e7FFX0kvA+tU8iA6Y9eTb7mOLqU= -----END CERTIFICATE-----Generated at Mon Jan 26 15:05:27 2026 by rpki-client