This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/1433a1c6-0f70-4c98-96b0-cab58126ab94/0/2D517DC024CEFCFAF80CF7FD392246894E94F12F.mft File: 2D517DC024CEFCFAF80CF7FD392246894E94F12F.mft (raw, json) Hash identifier: JNaspjm3rPG81JlsLFT3Aql0HyaEA9jm5KibxOYcZnI= Subject key identifier: 91:43:18:AB:04:F8:B2:F7:5F:B7:91:3B:42:6A:2E:3A:04:00:A9:57 Authority key identifier: 2D:51:7D:C0:24:CE:FC:FA:F8:0C:F7:FD:39:22:46:89:4E:94:F1:2F Certificate issuer: /CN=2D517DC024CEFCFAF80CF7FD392246894E94F12F Certificate serial: 37DCC4BA771BEADD37008AA683535D8E394CFA9D Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2D517DC024CEFCFAF80CF7FD392246894E94F12F.cer Subject info access: rsync://repo-rpki.idnic.net/repo/1433a1c6-0f70-4c98-96b0-cab58126ab94/0/2D517DC024CEFCFAF80CF7FD392246894E94F12F.mft Manifest number: 0131 Signing time: Sun 25 Jan 2026 11:40:56 +0000 Manifest this update: Sun 25 Jan 2026 11:35:56 +0000 Manifest next update: Wed 28 Jan 2026 18:47:56 +0000 Files and hashes: 1: 3130332e3135362e3131302e302f32342d3234203d3e20313431303839.roa (hash: lTXXqDvVb99/4yIHlkQaywB5MQKhKyYSxakzkjkU+yg=) 2: 2D517DC024CEFCFAF80CF7FD392246894E94F12F.crl (hash: 5fRJ1tsx7AAk2zxm4rWVfmvAJM6KIyPdip7mOuF3UvU=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/1433a1c6-0f70-4c98-96b0-cab58126ab94/0/2D517DC024CEFCFAF80CF7FD392246894E94F12F.crl rsync://repo-rpki.idnic.net/repo/1433a1c6-0f70-4c98-96b0-cab58126ab94/0/2D517DC024CEFCFAF80CF7FD392246894E94F12F.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2D517DC024CEFCFAF80CF7FD392246894E94F12F.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 28 Jan 2026 14:00:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 37:dc:c4:ba:77:1b:ea:dd:37:00:8a:a6:83:53:5d:8e:39:4c:fa:9d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2D517DC024CEFCFAF80CF7FD392246894E94F12F Validity Not Before: Jan 25 11:35:56 2026 GMT Not After : Jan 28 18:47:56 2026 GMT Subject: CN=914318AB04F8B2F75FB7913B426A2E3A0400A957 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:d8:87:01:90:4c:26:00:c5:e4:4a:fb:b9:ee: 84:f5:1e:19:95:34:aa:4f:81:19:10:4d:da:e0:b9: e2:6c:f3:59:6c:d4:33:96:dc:e1:c5:96:02:ef:69: 01:e9:6b:cf:9c:b8:d2:a9:99:83:df:68:40:66:67: fc:09:a6:04:46:bd:83:ca:77:d1:f9:64:35:97:69: 70:04:72:e8:73:7a:50:74:ae:b5:14:ce:2e:8b:cc: 56:17:d3:b1:00:6a:a9:d0:f9:58:95:88:e8:6f:62: d8:f7:cb:29:97:05:30:84:9c:94:f8:9b:03:eb:39: 6a:79:be:23:f8:09:c6:b0:34:18:a8:a4:d8:0a:1c: 1b:7d:a5:3b:34:20:80:ed:89:00:6b:fc:4c:65:11: 60:32:eb:9c:b0:95:98:cd:92:6f:66:74:c6:d6:b0: 5e:f0:f7:49:82:21:b5:03:c8:a7:e0:67:f6:a3:6a: 62:d6:d7:32:67:bf:2b:76:b9:f0:59:01:53:54:6b: 05:7e:f0:b5:59:73:ce:8c:30:1c:e6:3e:08:72:13: 0d:8f:0a:dc:f5:e9:43:72:15:0d:bf:ec:be:fc:0a: 03:17:d0:16:0a:aa:c3:3a:5b:04:7a:d6:a2:bb:e3: a0:42:33:a5:11:07:29:aa:f0:09:a3:be:10:7c:91: 0b:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:43:18:AB:04:F8:B2:F7:5F:B7:91:3B:42:6A:2E:3A:04:00:A9:57 X509v3 Authority Key Identifier: keyid:2D:51:7D:C0:24:CE:FC:FA:F8:0C:F7:FD:39:22:46:89:4E:94:F1:2F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/1433a1c6-0f70-4c98-96b0-cab58126ab94/0/2D517DC024CEFCFAF80CF7FD392246894E94F12F.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2D517DC024CEFCFAF80CF7FD392246894E94F12F.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/1433a1c6-0f70-4c98-96b0-cab58126ab94/0/2D517DC024CEFCFAF80CF7FD392246894E94F12F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 66:88:ae:da:ac:10:4f:6d:fd:3b:b5:2a:d8:56:cb:bd:d3:34: 6c:d6:12:f1:d4:8a:a1:fa:7a:b8:33:ed:f7:1d:0a:f4:a2:80: 23:cb:8d:14:0b:93:08:a6:22:19:59:4c:55:28:22:2d:9a:09: c9:73:89:79:e5:a7:9d:41:2c:0b:6f:81:c8:9d:fa:f3:10:37: 3e:89:da:bc:7f:71:d6:58:64:f1:fc:22:84:00:2d:7e:97:50: 26:58:02:dd:a9:43:32:2e:0d:ef:cb:20:1c:4a:ac:92:d7:1f: f5:ac:61:fc:e9:2d:00:67:a1:28:37:ae:ac:54:8d:48:97:47: c6:d1:de:8a:8f:ea:17:fa:5c:46:41:37:8f:b1:e2:41:ef:1c: b3:c3:f4:bd:35:79:3f:b9:ca:78:6e:ea:90:65:d6:32:9e:ab: fb:68:f0:67:44:c8:1b:59:89:9a:fe:ef:8a:1e:d8:66:de:52: 9c:e4:e1:57:d7:dd:62:b0:b3:63:b8:5c:fe:1b:0d:8f:e2:d8: 05:7e:fd:70:a6:cd:5b:83:25:30:f7:21:a4:65:37:20:a0:ee: 73:ac:e3:f1:b5:d3:b4:74:70:d6:29:40:dd:03:f5:f4:2e:82: 89:ba:31:8e:e3:de:c9:da:d8:8d:96:9e:0f:82:8c:9b:0a:d3: 98:89:b4:ab -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUN9zEuncb6t03AIqmg1NdjjlM+p0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkQ1MTdEQzAyNENFRkNGQUY4MENGN0ZEMzkyMjQ2ODk0 RTk0RjEyRjAeFw0yNjAxMjUxMTM1NTZaFw0yNjAxMjgxODQ3NTZaMDMxMTAvBgNV BAMTKDkxNDMxOEFCMDRGOEIyRjc1RkI3OTEzQjQyNkEyRTNBMDQwMEE5NTcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDe2IcBkEwmAMXkSvu57oT1HhmV NKpPgRkQTdrgueJs81ls1DOW3OHFlgLvaQHpa8+cuNKpmYPfaEBmZ/wJpgRGvYPK d9H5ZDWXaXAEcuhzelB0rrUUzi6LzFYX07EAaqnQ+ViViOhvYtj3yymXBTCEnJT4 mwPrOWp5viP4CcawNBiopNgKHBt9pTs0IIDtiQBr/ExlEWAy65ywlZjNkm9mdMbW sF7w90mCIbUDyKfgZ/ajamLW1zJnvyt2ufBZAVNUawV+8LVZc86MMBzmPghyEw2P Ctz16UNyFQ2/7L78CgMX0BYKqsM6WwR61qK746BCM6URBymq8AmjvhB8kQuNAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUkUMYqwT4svdft5E7QmouOgQAqVcwHwYDVR0j BBgwFoAULVF9wCTO/Pr4DPf9OSJGiU6U8S8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x NDMzYTFjNi0wZjcwLTRjOTgtOTZiMC1jYWI1ODEyNmFiOTQvMC8yRDUxN0RDMDI0 Q0VGQ0ZBRjgwQ0Y3RkQzOTIyNDY4OTRFOTRGMTJGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMkQ1MTdEQzAyNENFRkNGQUY4MENGN0ZEMzkyMjQ2ODk0RTk0 RjEyRi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMTQzM2ExYzYtMGY3MC00Yzk4LTk2 YjAtY2FiNTgxMjZhYjk0LzAvMkQ1MTdEQzAyNENFRkNGQUY4MENGN0ZEMzkyMjQ2 ODk0RTk0RjEyRi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGaIrtqsEE9t/Tu1KthWy73TNGzWEvHUiqH6 ergz7fcdCvSigCPLjRQLkwimIhlZTFUoIi2aCclziXnlp51BLAtvgcid+vMQNz6J 2rx/cdZYZPH8IoQALX6XUCZYAt2pQzIuDe/LIBxKrJLXH/WsYfzpLQBnoSg3rqxU jUiXR8bR3oqP6hf6XEZBN4+x4kHvHLPD9L01eT+5ynhu6pBl1jKeq/to8GdEyBtZ iZr+74oe2GbeUpzk4VfX3WKws2O4XP4bDY/i2AV+/XCmzVuDJTD3IaRlNyCg7nOs 4/G107R0cNYpQN0D9fQugom6MY7j3sna2I2Wng+CjJsK05iJtKs= -----END CERTIFICATE-----Generated at Sun Jan 25 18:57:28 2026 by rpki-client