This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/12aec7c6-2b83-4cf0-8cd9-534ce77ff4b0/0/014253C9E01BAC5FD1E7C286A296948F302AA578.mft File: 014253C9E01BAC5FD1E7C286A296948F302AA578.mft (raw, json) Hash identifier: tcJjlRsCv0qGyjqOoUkuZ/yDkOuIs7n/EPt0cGdJm/U= Subject key identifier: 5F:24:8B:A1:77:68:B2:56:70:2A:89:CD:DA:34:F8:F1:EA:6F:66:48 Authority key identifier: 01:42:53:C9:E0:1B:AC:5F:D1:E7:C2:86:A2:96:94:8F:30:2A:A5:78 Certificate issuer: /CN=014253C9E01BAC5FD1E7C286A296948F302AA578 Certificate serial: 1C19ABDFCC6AFCDA31F93A1B27AEB8633C8DFFAF Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/014253C9E01BAC5FD1E7C286A296948F302AA578.cer Subject info access: rsync://repo-rpki.idnic.net/repo/12aec7c6-2b83-4cf0-8cd9-534ce77ff4b0/0/014253C9E01BAC5FD1E7C286A296948F302AA578.mft Manifest number: BB Signing time: Sun 25 Jan 2026 09:01:49 +0000 Manifest this update: Sun 25 Jan 2026 08:56:49 +0000 Manifest next update: Wed 28 Jan 2026 15:56:49 +0000 Files and hashes: 1: 014253C9E01BAC5FD1E7C286A296948F302AA578.crl (hash: Uh7ECkJOLT3tdBnuMR0l0M5hjQWBdSMv7wtRE0FsCNc=) 2: 3231302e38372e3131382e302f32332d3234203d3e20313338383836.roa (hash: hOVkgGHGY/bobIqIByNpM3pWDrvyZ00Fy2/vUw4/OXQ=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/12aec7c6-2b83-4cf0-8cd9-534ce77ff4b0/0/014253C9E01BAC5FD1E7C286A296948F302AA578.crl rsync://repo-rpki.idnic.net/repo/12aec7c6-2b83-4cf0-8cd9-534ce77ff4b0/0/014253C9E01BAC5FD1E7C286A296948F302AA578.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/014253C9E01BAC5FD1E7C286A296948F302AA578.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 28 Jan 2026 14:00:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1c:19:ab:df:cc:6a:fc:da:31:f9:3a:1b:27:ae:b8:63:3c:8d:ff:af Signature Algorithm: sha256WithRSAEncryption Issuer: CN=014253C9E01BAC5FD1E7C286A296948F302AA578 Validity Not Before: Jan 25 08:56:49 2026 GMT Not After : Jan 28 15:56:49 2026 GMT Subject: CN=5F248BA17768B256702A89CDDA34F8F1EA6F6648 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:c9:8b:4d:00:ec:26:af:e3:42:1a:6b:02:81: f0:fe:cb:65:66:3f:4d:6a:64:03:6c:bd:9f:d9:64: ca:9a:9b:dd:fc:1a:a9:c3:62:48:49:ab:53:5f:e3: da:51:82:cb:0b:cc:65:f2:8b:ed:37:3b:74:11:e9: 18:73:63:13:2c:f0:ff:64:c8:87:1e:61:5f:c8:40: 21:0c:b9:51:17:19:ba:56:d9:f5:f9:5d:5d:5f:46: 79:ba:b4:8e:a4:db:6c:c6:8d:43:b1:d7:63:5b:0d: cd:05:f4:06:d3:d0:25:0f:f1:ab:37:de:60:71:e4: ab:de:2a:cb:1f:22:0a:b3:1f:62:ca:f9:a9:2d:31: e5:46:7c:7e:9e:ee:b2:aa:9c:dd:ec:fb:02:4e:1f: 63:7c:c4:60:4a:d8:2a:f9:e3:73:56:3f:b7:3a:e7: 12:dc:2c:5c:97:ff:95:7a:95:b6:91:42:b0:39:93: ea:05:cf:f6:14:9c:b4:3f:94:40:3c:50:8d:0a:0c: b0:33:5e:68:e9:ee:8e:23:09:f8:e5:0a:6d:76:3c: dc:d2:9e:ee:0f:1b:08:bf:23:42:cc:a7:0f:a6:cd: 72:24:0a:98:ac:c5:86:65:d4:a4:c3:94:dd:46:85: 29:a3:f3:d2:e3:75:a6:63:a4:56:27:79:50:fd:69: f4:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:24:8B:A1:77:68:B2:56:70:2A:89:CD:DA:34:F8:F1:EA:6F:66:48 X509v3 Authority Key Identifier: keyid:01:42:53:C9:E0:1B:AC:5F:D1:E7:C2:86:A2:96:94:8F:30:2A:A5:78 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/12aec7c6-2b83-4cf0-8cd9-534ce77ff4b0/0/014253C9E01BAC5FD1E7C286A296948F302AA578.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/014253C9E01BAC5FD1E7C286A296948F302AA578.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/12aec7c6-2b83-4cf0-8cd9-534ce77ff4b0/0/014253C9E01BAC5FD1E7C286A296948F302AA578.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 14:3d:a1:5d:8c:9e:46:63:3a:4d:e8:3f:22:37:e6:25:1b:da: d3:e5:e0:e5:66:f4:6c:0c:ac:75:de:5b:9a:18:b5:86:fe:34: 09:e2:aa:30:30:b1:ed:0f:9c:d2:26:d7:40:b7:8a:3f:ec:c1: 53:cc:49:38:8f:1a:2c:b5:9e:34:00:dc:6a:da:72:9b:2a:7f: 4c:32:47:d8:f2:25:f1:4c:80:f6:6b:16:b2:02:b3:7f:4b:65: 25:d8:65:ad:c5:97:c5:3c:a2:f9:77:b5:09:50:5f:cb:75:68: d0:49:3f:86:c0:48:7b:94:c2:aa:f4:06:77:f9:0b:84:26:9a: e3:88:59:48:0a:b0:2a:8f:ae:2f:54:fb:06:62:be:51:56:81: 4a:2a:31:22:e9:e4:fb:25:9b:4d:76:55:45:29:89:c0:03:49: b5:10:7c:1e:90:d3:2b:3b:b8:ce:46:bd:85:01:31:c3:bd:01: 97:56:51:7f:76:ad:6e:55:a1:4f:df:ed:43:f5:5d:84:04:d2: dc:e0:88:4b:4c:41:41:89:3e:b7:2e:e5:1a:9a:1e:93:e6:ab: ed:d5:d3:3a:ae:87:8e:df:35:74:4d:e3:8a:20:2d:12:2a:98: a8:20:15:61:da:20:39:dd:fe:06:08:be:ae:6d:63:7e:f3:2f: 7b:09:bf:c6 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUHBmr38xq/Nox+TobJ664YzyN/68wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDE0MjUzQzlFMDFCQUM1RkQxRTdDMjg2QTI5Njk0OEYz MDJBQTU3ODAeFw0yNjAxMjUwODU2NDlaFw0yNjAxMjgxNTU2NDlaMDMxMTAvBgNV BAMTKDVGMjQ4QkExNzc2OEIyNTY3MDJBODlDRERBMzRGOEYxRUE2RjY2NDgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCxyYtNAOwmr+NCGmsCgfD+y2Vm P01qZANsvZ/ZZMqam938GqnDYkhJq1Nf49pRgssLzGXyi+03O3QR6RhzYxMs8P9k yIceYV/IQCEMuVEXGbpW2fX5XV1fRnm6tI6k22zGjUOx12NbDc0F9AbT0CUP8as3 3mBx5KveKssfIgqzH2LK+aktMeVGfH6e7rKqnN3s+wJOH2N8xGBK2Cr543NWP7c6 5xLcLFyX/5V6lbaRQrA5k+oFz/YUnLQ/lEA8UI0KDLAzXmjp7o4jCfjlCm12PNzS nu4PGwi/I0LMpw+mzXIkCpisxYZl1KTDlN1GhSmj89LjdaZjpFYneVD9afStAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUXySLoXdoslZwKonN2jT48epvZkgwHwYDVR0j BBgwFoAUAUJTyeAbrF/R58KGopaUjzAqpXgwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x MmFlYzdjNi0yYjgzLTRjZjAtOGNkOS01MzRjZTc3ZmY0YjAvMC8wMTQyNTNDOUUw MUJBQzVGRDFFN0MyODZBMjk2OTQ4RjMwMkFBNTc4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMDE0MjUzQzlFMDFCQUM1RkQxRTdDMjg2QTI5Njk0OEYzMDJB QTU3OC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMTJhZWM3YzYtMmI4My00Y2YwLThj ZDktNTM0Y2U3N2ZmNGIwLzAvMDE0MjUzQzlFMDFCQUM1RkQxRTdDMjg2QTI5Njk0 OEYzMDJBQTU3OC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABQ9oV2MnkZjOk3oPyI35iUb2tPl4OVm9GwM rHXeW5oYtYb+NAniqjAwse0PnNIm10C3ij/swVPMSTiPGiy1njQA3Gracpsqf0wy R9jyJfFMgPZrFrICs39LZSXYZa3Fl8U8ovl3tQlQX8t1aNBJP4bASHuUwqr0Bnf5 C4QmmuOIWUgKsCqPri9U+wZivlFWgUoqMSLp5Pslm012VUUpicADSbUQfB6Q0ys7 uM5GvYUBMcO9AZdWUX92rW5VoU/f7UP1XYQE0tzgiEtMQUGJPrcu5RqaHpPmq+3V 0zquh47fNXRN44ogLRIqmKggFWHaIDnd/gYIvq5tY37zL3sJv8Y= -----END CERTIFICATE-----Generated at Sun Jan 25 20:32:45 2026 by rpki-client