This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/137dfb88-fb50-48d1-b90d-e525102f4f5e/0/923816C042C964B6465A7BA06B2D44BDAF28D827.mft File: 923816C042C964B6465A7BA06B2D44BDAF28D827.mft (raw, json) Hash identifier: kfFYmDyFTFe68YneE70U5yrgRMgdYA8LKZh2shx/dQI= Subject key identifier: 3D:30:CA:06:8A:79:8A:BC:EB:89:E5:5C:E3:D5:3C:90:C4:BC:BB:C8 Authority key identifier: 92:38:16:C0:42:C9:64:B6:46:5A:7B:A0:6B:2D:44:BD:AF:28:D8:27 Certificate issuer: /CN=923816C042C964B6465A7BA06B2D44BDAF28D827 Certificate serial: 6F3DB88770B8FD380DBE99FFA2EF3CB0436B604E Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/923816C042C964B6465A7BA06B2D44BDAF28D827.cer Subject info access: rsync://repo-rpki.idnic.net/repo/137dfb88-fb50-48d1-b90d-e525102f4f5e/0/923816C042C964B6465A7BA06B2D44BDAF28D827.mft Manifest number: 024D Signing time: Sun 25 Jan 2026 09:00:41 +0000 Manifest this update: Sun 25 Jan 2026 08:55:41 +0000 Manifest next update: Wed 28 Jan 2026 10:40:41 +0000 Files and hashes: 1: 3130332e3138392e35392e302f32342d3234203d3e20313439373538.roa (hash: /IMjB2zzS/R4jg1G0u5f9Z9fEjTEZBoII5eQSPdhRUM=) 2: 3130332e3138392e35382e302f32332d3234203d3e20313439373538.roa (hash: o++ze4Phjg1umrR/hXTKNbdGbb6WGQVR25QY7sQRXiQ=) 3: 3130332e3138392e35382e302f32342d3234203d3e20313439373538.roa (hash: DYdErYV9CziQI4JcelpgUN+i1lEMG53IFpsP0CaTa7Y=) 4: 923816C042C964B6465A7BA06B2D44BDAF28D827.crl (hash: 1ZdEBK7PPTSEwlAUiEuTQ7RygVfasjQ0vwBe3ilMRNE=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/137dfb88-fb50-48d1-b90d-e525102f4f5e/0/923816C042C964B6465A7BA06B2D44BDAF28D827.crl rsync://repo-rpki.idnic.net/repo/137dfb88-fb50-48d1-b90d-e525102f4f5e/0/923816C042C964B6465A7BA06B2D44BDAF28D827.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/923816C042C964B6465A7BA06B2D44BDAF28D827.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 28 Jan 2026 10:40:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6f:3d:b8:87:70:b8:fd:38:0d:be:99:ff:a2:ef:3c:b0:43:6b:60:4e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=923816C042C964B6465A7BA06B2D44BDAF28D827 Validity Not Before: Jan 25 08:55:41 2026 GMT Not After : Jan 28 10:40:41 2026 GMT Subject: CN=3D30CA068A798ABCEB89E55CE3D53C90C4BCBBC8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:0f:8f:3f:6d:d3:ba:fa:29:86:7b:71:76:64: 37:93:d5:54:6f:00:e8:33:c1:6d:9e:9a:08:0b:7c: 05:45:67:5c:47:aa:50:b7:a1:59:dd:64:c6:5d:8a: bb:2f:f7:b3:77:32:f6:9a:da:1f:02:06:81:43:27: d9:57:34:c8:a9:75:da:34:e8:a8:8a:42:ae:90:5d: dc:06:cc:d8:30:1a:e4:a7:0e:45:c0:12:da:76:37: 38:61:f2:72:bd:b6:83:06:1c:f8:6b:77:23:4b:70: af:f4:e5:be:af:f1:9b:47:86:05:dc:c8:50:74:2d: 76:2c:bc:62:16:ae:35:52:d6:a9:f2:bc:ae:8f:f6: e8:da:2c:60:a3:ce:f3:70:5b:43:52:e9:45:84:56: 1c:7a:5a:aa:c2:37:fd:c0:b3:02:6e:27:ad:f3:39: bb:e3:43:5c:5c:56:0e:19:e2:97:90:e2:ed:c4:b8: b3:23:31:25:f0:5a:6f:f0:75:82:fd:6e:e9:f2:40: 51:db:f7:f4:e5:48:d9:f9:25:3d:c6:97:16:f0:3f: a2:2d:52:d4:63:53:34:1a:2d:e8:4a:46:43:eb:9c: b5:67:61:66:35:66:c7:49:46:68:be:74:4e:4a:56: df:eb:c7:11:83:94:f5:62:e4:38:fc:cc:e1:3c:fe: 95:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:30:CA:06:8A:79:8A:BC:EB:89:E5:5C:E3:D5:3C:90:C4:BC:BB:C8 X509v3 Authority Key Identifier: keyid:92:38:16:C0:42:C9:64:B6:46:5A:7B:A0:6B:2D:44:BD:AF:28:D8:27 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/137dfb88-fb50-48d1-b90d-e525102f4f5e/0/923816C042C964B6465A7BA06B2D44BDAF28D827.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/923816C042C964B6465A7BA06B2D44BDAF28D827.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/137dfb88-fb50-48d1-b90d-e525102f4f5e/0/923816C042C964B6465A7BA06B2D44BDAF28D827.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 94:ef:74:20:3b:fc:3e:41:34:0c:56:f4:b4:3a:bc:76:83:94: 7a:57:c7:0a:50:a7:1d:1d:23:2f:dd:20:a1:aa:69:72:3c:d3: a8:a4:f8:93:22:cf:af:0e:5a:e1:ff:af:b5:62:ed:6c:37:ec: 09:69:ee:9f:8b:ed:8a:f3:44:4a:0a:f5:bc:67:11:a0:c0:4f: f9:a9:90:cd:80:81:8f:55:32:70:b2:a1:a1:4c:45:50:56:54: e6:9d:fa:39:60:73:a2:1f:9e:4b:41:a4:b2:92:8c:48:bb:cf: 0e:c4:e1:2d:6f:98:e6:5c:65:78:15:1c:97:37:4c:25:71:f4: aa:2e:69:bc:46:bf:e5:e9:73:c9:22:86:02:f9:f6:71:19:e5: c4:ab:a0:c2:ea:21:e9:61:8b:00:e4:d4:89:e7:21:68:3e:65: 98:d3:1b:ef:1f:f1:90:22:08:52:64:1c:08:ec:7c:f2:1c:02: e4:2c:06:e7:be:90:6e:6f:9f:e7:ac:6c:7f:13:e0:e8:1e:97: 11:1d:28:d3:42:6d:f8:df:c7:de:bc:83:60:06:b4:cf:49:4d: f1:ae:cf:2b:d9:ef:83:19:ee:9d:a7:7e:6e:da:61:fa:54:c6: af:28:08:4b:da:61:0f:f2:e2:10:c3:ba:2b:72:d5:3d:85:71: ec:d0:48:60 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUbz24h3C4/TgNvpn/ou88sENrYE4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTIzODE2QzA0MkM5NjRCNjQ2NUE3QkEwNkIyRDQ0QkRB RjI4RDgyNzAeFw0yNjAxMjUwODU1NDFaFw0yNjAxMjgxMDQwNDFaMDMxMTAvBgNV BAMTKDNEMzBDQTA2OEE3OThBQkNFQjg5RTU1Q0UzRDUzQzkwQzRCQ0JCQzgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDbD48/bdO6+imGe3F2ZDeT1VRv AOgzwW2emggLfAVFZ1xHqlC3oVndZMZdirsv97N3Mvaa2h8CBoFDJ9lXNMipddo0 6KiKQq6QXdwGzNgwGuSnDkXAEtp2Nzhh8nK9toMGHPhrdyNLcK/05b6v8ZtHhgXc yFB0LXYsvGIWrjVS1qnyvK6P9ujaLGCjzvNwW0NS6UWEVhx6WqrCN/3AswJuJ63z ObvjQ1xcVg4Z4peQ4u3EuLMjMSXwWm/wdYL9bunyQFHb9/TlSNn5JT3GlxbwP6It UtRjUzQaLehKRkPrnLVnYWY1ZsdJRmi+dE5KVt/rxxGDlPVi5Dj8zOE8/pVdAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUPTDKBop5irzrieVc49U8kMS8u8gwHwYDVR0j BBgwFoAUkjgWwELJZLZGWnugay1Eva8o2CcwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x MzdkZmI4OC1mYjUwLTQ4ZDEtYjkwZC1lNTI1MTAyZjRmNWUvMC85MjM4MTZDMDQy Qzk2NEI2NDY1QTdCQTA2QjJENDRCREFGMjhEODI3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOTIzODE2QzA0MkM5NjRCNjQ2NUE3QkEwNkIyRDQ0QkRBRjI4 RDgyNy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMTM3ZGZiODgtZmI1MC00OGQxLWI5 MGQtZTUyNTEwMmY0ZjVlLzAvOTIzODE2QzA0MkM5NjRCNjQ2NUE3QkEwNkIyRDQ0 QkRBRjI4RDgyNy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJTvdCA7/D5BNAxW9LQ6vHaDlHpXxwpQpx0d Iy/dIKGqaXI806ik+JMiz68OWuH/r7Vi7Ww37Alp7p+L7YrzREoK9bxnEaDAT/mp kM2AgY9VMnCyoaFMRVBWVOad+jlgc6IfnktBpLKSjEi7zw7E4S1vmOZcZXgVHJc3 TCVx9KouabxGv+Xpc8kihgL59nEZ5cSroMLqIelhiwDk1InnIWg+ZZjTG+8f8ZAi CFJkHAjsfPIcAuQsBue+kG5vn+esbH8T4OgelxEdKNNCbfjfx968g2AGtM9JTfGu zyvZ74MZ7p2nfm7aYfpUxq8oCEvaYQ/y4hDDuity1T2FcezQSGA= -----END CERTIFICATE-----Generated at Sun Jan 25 22:00:29 2026 by rpki-client