This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/0f2b6ed2-cc58-45c5-bd88-cb9550716a04/0/356EA38801BC51EF3EDB8730387F8EDEBD11898F.mft File: 356EA38801BC51EF3EDB8730387F8EDEBD11898F.mft (raw, json) Hash identifier: 1m8SI45qke0vlC1g1rc+WdBk0hNmzNTeNNgiEFKerWk= Subject key identifier: 45:32:51:67:13:7B:8C:76:A7:CC:DC:93:57:18:52:89:A8:57:98:76 Authority key identifier: 35:6E:A3:88:01:BC:51:EF:3E:DB:87:30:38:7F:8E:DE:BD:11:89:8F Certificate issuer: /CN=356EA38801BC51EF3EDB8730387F8EDEBD11898F Certificate serial: 1F56E4125CD8865AF00AB102DBFB24FAC9767636 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/356EA38801BC51EF3EDB8730387F8EDEBD11898F.cer Subject info access: rsync://repo-rpki.idnic.net/repo/0f2b6ed2-cc58-45c5-bd88-cb9550716a04/0/356EA38801BC51EF3EDB8730387F8EDEBD11898F.mft Manifest number: 0502 Signing time: Sat 24 Jan 2026 03:42:17 +0000 Manifest this update: Sat 24 Jan 2026 03:37:17 +0000 Manifest next update: Tue 27 Jan 2026 12:57:17 +0000 Files and hashes: 1: 3130332e3130322e3135322e302f32322d3233203d3e203538343034.roa (hash: 9AwLYbWK6KWwIboQ7EFHPbMUDIfxQTg43TwmX106/HI=) 2: 323030313a6466323a653330303a3a2f34382d3438203d3e203538343034.roa (hash: yO5cw9oxQ3eTkGW/vwlC8BaKdxLLFqod66n4hJAfrTM=) 3: 356EA38801BC51EF3EDB8730387F8EDEBD11898F.crl (hash: 12FxJFmg+VE6EJT2yZdIrgFADmK5IySl7Mt8mn7XzCQ=) 4: 3130332e3130322e3135322e302f32322d3234203d3e203538343034.roa (hash: RgUZ5nKp1y6B4wGbZAJZc0wqoSvvaefcSdZlerUoVrA=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/0f2b6ed2-cc58-45c5-bd88-cb9550716a04/0/356EA38801BC51EF3EDB8730387F8EDEBD11898F.crl rsync://repo-rpki.idnic.net/repo/0f2b6ed2-cc58-45c5-bd88-cb9550716a04/0/356EA38801BC51EF3EDB8730387F8EDEBD11898F.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/356EA38801BC51EF3EDB8730387F8EDEBD11898F.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 27 Jan 2026 12:57:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1f:56:e4:12:5c:d8:86:5a:f0:0a:b1:02:db:fb:24:fa:c9:76:76:36 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=356EA38801BC51EF3EDB8730387F8EDEBD11898F Validity Not Before: Jan 24 03:37:17 2026 GMT Not After : Jan 27 12:57:17 2026 GMT Subject: CN=45325167137B8C76A7CCDC9357185289A8579876 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:e5:4a:a4:4c:06:30:18:b6:7c:6c:28:db:23: 6f:1d:13:ea:29:2f:84:cb:71:42:ed:18:5f:db:bc: cd:56:2a:79:e6:7d:c4:58:c0:24:41:44:0d:8d:28: 5c:7d:2f:17:d0:6e:6d:f1:98:3d:03:5e:06:43:81: c6:3c:f4:e0:bb:0f:e0:42:6c:a0:e1:32:06:f3:47: 70:71:55:cd:bc:75:b9:af:a8:1c:d1:63:d5:88:6e: cd:53:30:76:94:75:94:ba:00:8c:b5:f7:d5:17:a7: 81:f9:77:f3:5f:f0:53:76:f1:e0:7c:63:b7:5e:9d: 34:bb:86:5b:cf:c3:f5:22:5a:8a:c6:e5:d1:08:58: 3f:da:f2:97:e5:1e:89:9d:fe:01:e6:09:25:43:fd: fd:58:8b:2c:b7:a4:16:b2:ee:84:b1:16:45:fd:aa: d6:24:c5:88:fc:2d:e6:cc:a8:be:66:6b:13:a0:5c: c7:b0:b7:04:ea:8f:10:96:83:60:22:db:a5:5d:d4: 07:40:73:bc:68:5b:d8:d9:8d:ec:ac:5b:e1:f9:78: 5c:1b:96:1f:24:f3:d5:6f:44:ec:6f:f7:d1:05:a3: 63:b6:c7:fb:5d:32:a8:3f:bb:6e:c4:fa:77:b8:be: a2:aa:0b:8b:b1:b4:1b:c7:47:3e:fb:57:6f:8b:3f: 27:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 45:32:51:67:13:7B:8C:76:A7:CC:DC:93:57:18:52:89:A8:57:98:76 X509v3 Authority Key Identifier: keyid:35:6E:A3:88:01:BC:51:EF:3E:DB:87:30:38:7F:8E:DE:BD:11:89:8F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/0f2b6ed2-cc58-45c5-bd88-cb9550716a04/0/356EA38801BC51EF3EDB8730387F8EDEBD11898F.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/356EA38801BC51EF3EDB8730387F8EDEBD11898F.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/0f2b6ed2-cc58-45c5-bd88-cb9550716a04/0/356EA38801BC51EF3EDB8730387F8EDEBD11898F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1c:77:9f:37:1e:16:8b:3b:96:a8:be:11:f2:d0:0c:e0:a4:b8: 22:e2:9b:67:26:78:bc:43:06:c2:ef:77:0e:9a:78:3d:b0:66: 58:aa:c2:16:0c:b1:f0:6b:02:b3:df:4d:4b:bc:8c:6a:a4:cf: d7:10:94:31:b7:9a:06:0e:ea:0b:88:d2:c9:80:8e:f1:88:fe: 49:4d:dd:79:f4:59:f8:6c:9f:f9:6e:59:1b:03:5a:73:5c:96: 51:c5:f9:ff:d6:0e:36:5c:0c:42:5d:28:11:c8:c6:b5:92:77: 58:c4:7b:22:8d:e8:59:37:26:ae:c1:eb:14:14:f6:10:0f:ec: d8:79:fd:3e:d7:10:80:3f:db:33:b6:6b:ca:df:3a:99:a0:e5: 38:d5:9d:d4:00:04:f5:f7:ea:64:94:19:cd:1f:01:9b:a9:d0: 32:39:10:29:b6:3f:68:a7:2a:7a:c2:7c:c2:ab:24:d7:d3:27: e2:3a:54:f5:1a:58:f3:43:98:c6:a9:d9:c8:98:76:23:13:bb: 18:67:75:e5:cd:63:f8:b2:08:44:5b:95:24:7a:29:5c:e6:b5: 84:3b:e2:a7:f4:fc:a6:1c:4f:a5:5f:70:80:6b:ff:f9:1e:28: d3:ff:03:0d:8c:63:85:bb:20:b1:b0:18:b5:42:3e:4a:03:aa: 39:8c:81:98 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUH1bkElzYhlrwCrEC2/sk+sl2djYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzU2RUEzODgwMUJDNTFFRjNFREI4NzMwMzg3RjhFREVC RDExODk4RjAeFw0yNjAxMjQwMzM3MTdaFw0yNjAxMjcxMjU3MTdaMDMxMTAvBgNV BAMTKDQ1MzI1MTY3MTM3QjhDNzZBN0NDREM5MzU3MTg1Mjg5QTg1Nzk4NzYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDq5UqkTAYwGLZ8bCjbI28dE+op L4TLcULtGF/bvM1WKnnmfcRYwCRBRA2NKFx9LxfQbm3xmD0DXgZDgcY89OC7D+BC bKDhMgbzR3BxVc28dbmvqBzRY9WIbs1TMHaUdZS6AIy199UXp4H5d/Nf8FN28eB8 Y7denTS7hlvPw/UiWorG5dEIWD/a8pflHomd/gHmCSVD/f1Yiyy3pBay7oSxFkX9 qtYkxYj8LebMqL5maxOgXMewtwTqjxCWg2Ai26Vd1AdAc7xoW9jZjeysW+H5eFwb lh8k89VvROxv99EFo2O2x/tdMqg/u27E+ne4vqKqC4uxtBvHRz77V2+LPycBAgMB AAGjggI8MIICODAdBgNVHQ4EFgQURTJRZxN7jHanzNyTVxhSiahXmHYwHwYDVR0j BBgwFoAUNW6jiAG8Ue8+24cwOH+O3r0RiY8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w ZjJiNmVkMi1jYzU4LTQ1YzUtYmQ4OC1jYjk1NTA3MTZhMDQvMC8zNTZFQTM4ODAx QkM1MUVGM0VEQjg3MzAzODdGOEVERUJEMTE4OThGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMzU2RUEzODgwMUJDNTFFRjNFREI4NzMwMzg3RjhFREVCRDEx ODk4Ri5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMGYyYjZlZDItY2M1OC00NWM1LWJk ODgtY2I5NTUwNzE2YTA0LzAvMzU2RUEzODgwMUJDNTFFRjNFREI4NzMwMzg3RjhF REVCRDExODk4Ri5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABx3nzceFos7lqi+EfLQDOCkuCLim2cmeLxD BsLvdw6aeD2wZliqwhYMsfBrArPfTUu8jGqkz9cQlDG3mgYO6guI0smAjvGI/klN 3Xn0Wfhsn/luWRsDWnNcllHF+f/WDjZcDEJdKBHIxrWSd1jEeyKN6Fk3Jq7B6xQU 9hAP7Nh5/T7XEIA/2zO2a8rfOpmg5TjVndQABPX36mSUGc0fAZup0DI5ECm2P2in KnrCfMKrJNfTJ+I6VPUaWPNDmMap2ciYdiMTuxhndeXNY/iyCERblSR6KVzmtYQ7 4qf0/KYcT6VfcIBr//keKNP/Aw2MY4W7ILGwGLVCPkoDqjmMgZg= -----END CERTIFICATE-----Generated at Sun Jan 25 23:55:59 2026 by rpki-client