This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/10e88774-844f-4616-8bd0-dc313928730c/0/A551C9C9991E20FF99C2A748CB7665B2DE0D2F0C.mft File: A551C9C9991E20FF99C2A748CB7665B2DE0D2F0C.mft (raw, json) Hash identifier: vmvJyhRzGTNvcCQh+g4LG8mCvWK+yZ0+9fluI0jraiY= Subject key identifier: 43:F5:E2:05:C7:DB:13:C0:DC:52:93:E2:73:DF:6D:70:B0:16:2C:C1 Authority key identifier: A5:51:C9:C9:99:1E:20:FF:99:C2:A7:48:CB:76:65:B2:DE:0D:2F:0C Certificate issuer: /CN=A551C9C9991E20FF99C2A748CB7665B2DE0D2F0C Certificate serial: 71C9EC33D0D128F61371E7E4A29FA0F9E4EE3125 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A551C9C9991E20FF99C2A748CB7665B2DE0D2F0C.cer Subject info access: rsync://repo-rpki.idnic.net/repo/10e88774-844f-4616-8bd0-dc313928730c/0/A551C9C9991E20FF99C2A748CB7665B2DE0D2F0C.mft Manifest number: 051B Signing time: Sat 24 Jan 2026 01:01:47 +0000 Manifest this update: Sat 24 Jan 2026 00:56:47 +0000 Manifest next update: Tue 27 Jan 2026 05:32:47 +0000 Files and hashes: 1: 3130332e35332e3138342e302f32332d3234203d3e203633383734.roa (hash: LCTalW2OdI1gYSKj0d9a5cN3x/BU4CR5jkgjJ4XsxFo=) 2: A551C9C9991E20FF99C2A748CB7665B2DE0D2F0C.crl (hash: XhRALPH2E1QmVSitHCBg17+TBMbZOy1XSg0ujteboig=) 3: 3130332e38352e3131362e302f32332d3234203d3e203633383734.roa (hash: 2xWbB4/mYqrmplHY/8MyqkPKEZcXvKjkESzZID4DGlk=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/10e88774-844f-4616-8bd0-dc313928730c/0/A551C9C9991E20FF99C2A748CB7665B2DE0D2F0C.crl rsync://repo-rpki.idnic.net/repo/10e88774-844f-4616-8bd0-dc313928730c/0/A551C9C9991E20FF99C2A748CB7665B2DE0D2F0C.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A551C9C9991E20FF99C2A748CB7665B2DE0D2F0C.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 27 Jan 2026 05:32:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 71:c9:ec:33:d0:d1:28:f6:13:71:e7:e4:a2:9f:a0:f9:e4:ee:31:25 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A551C9C9991E20FF99C2A748CB7665B2DE0D2F0C Validity Not Before: Jan 24 00:56:47 2026 GMT Not After : Jan 27 05:32:47 2026 GMT Subject: CN=43F5E205C7DB13C0DC5293E273DF6D70B0162CC1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ec:6b:51:9a:c6:00:b1:bd:f0:57:3c:9a:39:88: b4:1b:12:b5:d4:75:6c:00:98:23:5e:7d:f1:d8:67: 04:fc:bf:78:7a:e6:24:f8:b3:f3:2e:ec:e2:22:9c: 2a:d2:6f:d0:84:68:d2:36:dd:2a:28:85:32:62:cd: 7d:6a:9b:02:00:b0:57:a0:6c:e7:24:92:c2:fe:72: 76:78:b1:57:76:08:19:08:d2:8e:2d:a4:95:ed:e4: d9:1a:c1:4d:3d:f2:ad:b2:ae:44:42:93:5c:d0:b1: 14:bb:60:65:6e:94:bc:dc:94:f5:40:c7:05:bb:d2: 7d:96:e2:da:43:fe:62:dd:69:b7:fc:52:c2:de:1b: 5f:c8:de:06:e8:64:fa:2b:a5:30:25:3d:58:37:b2: 45:e5:7e:2e:9d:ef:cf:78:92:c7:29:de:ec:b9:e3: 28:06:e9:f8:c0:f8:c1:45:f8:05:cb:29:3f:df:2e: 50:e5:92:7d:4c:79:a5:2f:1e:3b:8c:ce:47:53:7a: fb:2c:a4:4a:60:73:d1:c2:1d:be:6d:fd:6c:a7:b1: 55:40:a3:a2:16:eb:04:77:50:e2:53:6b:51:e7:c8: 44:47:c2:ec:d3:da:22:cb:1d:24:6c:3c:58:17:c2: 65:43:33:18:a7:0d:9b:54:42:13:cb:14:75:82:58: 92:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:F5:E2:05:C7:DB:13:C0:DC:52:93:E2:73:DF:6D:70:B0:16:2C:C1 X509v3 Authority Key Identifier: keyid:A5:51:C9:C9:99:1E:20:FF:99:C2:A7:48:CB:76:65:B2:DE:0D:2F:0C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/10e88774-844f-4616-8bd0-dc313928730c/0/A551C9C9991E20FF99C2A748CB7665B2DE0D2F0C.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A551C9C9991E20FF99C2A748CB7665B2DE0D2F0C.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/10e88774-844f-4616-8bd0-dc313928730c/0/A551C9C9991E20FF99C2A748CB7665B2DE0D2F0C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a7:f9:a4:09:5c:e5:9f:60:a3:67:a6:18:9b:21:99:d0:3c:c8: f6:81:a0:4d:eb:8e:a3:31:ed:77:a7:9b:0a:a0:4d:e9:b3:24: c9:36:e2:70:a8:6d:6b:63:95:44:3c:24:8e:3c:f5:47:3f:03: 6c:32:54:bc:3c:03:d5:7a:33:2c:4f:82:0d:e6:af:bf:07:c4: 8a:75:75:f0:31:cc:c9:91:ee:a0:54:dd:50:e6:99:13:07:94: 7c:8a:5f:81:42:63:eb:be:4b:d6:e5:3c:34:07:d6:3a:39:d0: 65:9c:37:6d:d0:e7:09:47:f9:16:ad:e6:e4:ab:86:87:6e:f9: 1c:35:1a:f2:ea:98:f5:5f:30:e1:2b:73:4a:4c:46:23:48:8d: 61:6f:9f:2b:31:32:51:12:6e:40:d6:59:45:23:09:48:6a:c7: 98:71:84:3a:f9:0e:ec:36:a6:4e:74:a9:14:96:f9:e0:ca:21: 7c:dd:94:13:95:18:06:d3:a9:4a:9c:98:ec:9d:cd:f4:32:aa: 14:b3:51:5e:43:9e:21:a3:29:89:11:a6:1d:e0:b6:d9:5d:f2: 4e:69:7e:59:58:90:dc:4e:d9:5e:d6:c9:8d:2d:bd:38:93:f7: a6:09:cc:ee:f6:ff:cb:01:d1:51:ba:86:62:7e:8b:a8:0c:4b: 5c:3c:95:aa -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUccnsM9DRKPYTcefkop+g+eTuMSUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTU1MUM5Qzk5OTFFMjBGRjk5QzJBNzQ4Q0I3NjY1QjJE RTBEMkYwQzAeFw0yNjAxMjQwMDU2NDdaFw0yNjAxMjcwNTMyNDdaMDMxMTAvBgNV BAMTKDQzRjVFMjA1QzdEQjEzQzBEQzUyOTNFMjczREY2RDcwQjAxNjJDQzEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDsa1GaxgCxvfBXPJo5iLQbErXU dWwAmCNeffHYZwT8v3h65iT4s/Mu7OIinCrSb9CEaNI23SoohTJizX1qmwIAsFeg bOckksL+cnZ4sVd2CBkI0o4tpJXt5NkawU098q2yrkRCk1zQsRS7YGVulLzclPVA xwW70n2W4tpD/mLdabf8UsLeG1/I3gboZPorpTAlPVg3skXlfi6d7894kscp3uy5 4ygG6fjA+MFF+AXLKT/fLlDlkn1MeaUvHjuMzkdTevsspEpgc9HCHb5t/WynsVVA o6IW6wR3UOJTa1HnyERHwuzT2iLLHSRsPFgXwmVDMxinDZtUQhPLFHWCWJKrAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUQ/XiBcfbE8DcUpPic99tcLAWLMEwHwYDVR0j BBgwFoAUpVHJyZkeIP+ZwqdIy3Zlst4NLwwwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x MGU4ODc3NC04NDRmLTQ2MTYtOGJkMC1kYzMxMzkyODczMGMvMC9BNTUxQzlDOTk5 MUUyMEZGOTlDMkE3NDhDQjc2NjVCMkRFMEQyRjBDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQTU1MUM5Qzk5OTFFMjBGRjk5QzJBNzQ4Q0I3NjY1QjJERTBE MkYwQy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMTBlODg3NzQtODQ0Zi00NjE2LThi ZDAtZGMzMTM5Mjg3MzBjLzAvQTU1MUM5Qzk5OTFFMjBGRjk5QzJBNzQ4Q0I3NjY1 QjJERTBEMkYwQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKf5pAlc5Z9go2emGJshmdA8yPaBoE3rjqMx 7XenmwqgTemzJMk24nCobWtjlUQ8JI489Uc/A2wyVLw8A9V6MyxPgg3mr78HxIp1 dfAxzMmR7qBU3VDmmRMHlHyKX4FCY+u+S9blPDQH1jo50GWcN23Q5wlH+Rat5uSr hodu+Rw1GvLqmPVfMOErc0pMRiNIjWFvnysxMlESbkDWWUUjCUhqx5hxhDr5Duw2 pk50qRSW+eDKIXzdlBOVGAbTqUqcmOydzfQyqhSzUV5DniGjKYkRph3gttld8k5p fllYkNxO2V7WyY0tvTiT96YJzO72/8sB0VG6hmJ+i6gMS1w8lao= -----END CERTIFICATE-----Generated at Sun Jan 25 18:38:23 2026 by rpki-client