This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/168cc059-5e6c-4501-b894-14a82d18d21e/0/CD3281FC875A8DD967E7E83CD40F106AD5B23A74.mft File: CD3281FC875A8DD967E7E83CD40F106AD5B23A74.mft (raw, json) Hash identifier: ArtrDvz6ViT//DCMy2xk2etZfkCWE3rz9eYMQddRYr0= Subject key identifier: 77:78:7A:2F:FE:65:5C:03:5F:67:7F:88:42:71:AB:CA:B5:DC:6D:46 Authority key identifier: CD:32:81:FC:87:5A:8D:D9:67:E7:E8:3C:D4:0F:10:6A:D5:B2:3A:74 Certificate issuer: /CN=CD3281FC875A8DD967E7E83CD40F106AD5B23A74 Certificate serial: 0D034DD25FD97BDC517FEB4AC8F0341E55CAD581 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CD3281FC875A8DD967E7E83CD40F106AD5B23A74.cer Subject info access: rsync://repo-rpki.idnic.net/repo/168cc059-5e6c-4501-b894-14a82d18d21e/0/CD3281FC875A8DD967E7E83CD40F106AD5B23A74.mft Manifest number: 0237 Signing time: Sat 24 Jan 2026 05:22:26 +0000 Manifest this update: Sat 24 Jan 2026 05:17:26 +0000 Manifest next update: Tue 27 Jan 2026 17:05:26 +0000 Files and hashes: 1: 3130332e3134372e3131352e302f32342d3234203d3e20313439393732.roa (hash: AoisIKjFDgxSpQWcGSc9vDGFrlv1QcVF2IqB6ymlo5I=) 2: 3130332e3134372e3131342e302f32332d3234203d3e20313439393732.roa (hash: /z6uwsbM6qW8nVOnWF5tbv45b3fyByXJR19t2rKAAvM=) 3: 3130332e3134372e3131342e302f32342d3234203d3e20313439393732.roa (hash: 84o3UV8IHhQFDzzDC1t2/AoF+j9eW/9zsv1UkTq0r2k=) 4: CD3281FC875A8DD967E7E83CD40F106AD5B23A74.crl (hash: R4c5TW/1J4BPKlSMZ+1uaW2m7qEtHD4Qw6r+jEx+/Rk=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/168cc059-5e6c-4501-b894-14a82d18d21e/0/CD3281FC875A8DD967E7E83CD40F106AD5B23A74.crl rsync://repo-rpki.idnic.net/repo/168cc059-5e6c-4501-b894-14a82d18d21e/0/CD3281FC875A8DD967E7E83CD40F106AD5B23A74.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CD3281FC875A8DD967E7E83CD40F106AD5B23A74.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 27 Jan 2026 17:05:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0d:03:4d:d2:5f:d9:7b:dc:51:7f:eb:4a:c8:f0:34:1e:55:ca:d5:81 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CD3281FC875A8DD967E7E83CD40F106AD5B23A74 Validity Not Before: Jan 24 05:17:26 2026 GMT Not After : Jan 27 17:05:26 2026 GMT Subject: CN=77787A2FFE655C035F677F884271ABCAB5DC6D46 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:62:50:08:c4:27:95:14:84:c8:54:03:9f:2a: 75:df:da:18:c8:5b:57:eb:08:d9:14:65:b0:78:7b: 15:ae:9d:f5:23:4d:ab:41:8c:a1:1a:7e:9f:0a:3d: 3e:9e:6e:54:44:d2:5b:3b:55:f0:79:e3:23:c2:cd: 76:bb:ab:52:c5:8f:52:63:76:4e:47:4f:30:a2:a9: c1:15:27:94:8c:44:61:cb:d4:2a:fb:be:c1:c8:57: 44:a2:9e:79:82:a4:11:46:82:39:1f:f8:14:84:01: dd:c0:39:0d:a5:88:8e:ab:d0:26:d5:8f:ba:2d:1c: 46:2f:2e:80:c4:5c:66:a5:65:68:bf:1c:a2:73:47: e0:d5:4d:07:82:91:8a:24:b4:1c:d3:6b:f8:18:34: 7a:6a:f5:ad:25:ee:f4:f8:6f:a7:cc:5a:e0:6d:97: 69:5a:02:4b:48:4e:23:28:d3:be:c2:44:10:e4:68: de:ef:8d:a6:6e:fa:72:49:56:b7:f9:62:bc:f0:4a: 2e:64:45:3e:c1:9a:7b:ac:17:bd:f1:01:4d:33:87: 00:d6:1a:ac:80:f9:60:31:3d:28:ce:f8:e4:a8:ef: 8b:eb:e3:8b:94:53:2e:88:09:53:66:14:1b:f5:47: 79:fa:02:94:43:d2:5b:ed:de:63:2a:6b:a6:53:15: 34:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 77:78:7A:2F:FE:65:5C:03:5F:67:7F:88:42:71:AB:CA:B5:DC:6D:46 X509v3 Authority Key Identifier: keyid:CD:32:81:FC:87:5A:8D:D9:67:E7:E8:3C:D4:0F:10:6A:D5:B2:3A:74 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/168cc059-5e6c-4501-b894-14a82d18d21e/0/CD3281FC875A8DD967E7E83CD40F106AD5B23A74.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CD3281FC875A8DD967E7E83CD40F106AD5B23A74.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/168cc059-5e6c-4501-b894-14a82d18d21e/0/CD3281FC875A8DD967E7E83CD40F106AD5B23A74.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 55:ab:3f:a8:70:7f:4f:c8:dc:0b:9a:e8:4f:79:8a:2b:20:4b: 35:c2:f0:40:2e:bb:58:0c:51:2c:6d:2b:60:b5:01:e9:2a:d3: 6c:4e:99:bb:26:2f:6f:e5:ee:b4:3d:07:6a:94:e3:e3:51:8c: 01:de:c6:31:91:46:38:39:a9:81:27:aa:3e:91:65:a9:1e:13: 62:0d:fe:15:d1:9d:dd:8c:19:bf:d7:e4:39:7b:d4:e4:e5:0c: c2:90:90:33:0e:e9:0e:5b:d5:b2:7e:79:a7:f3:fd:cc:4b:d5: 9d:f1:9f:3c:de:83:62:f1:02:22:29:2e:1c:7d:8d:a0:18:5a: 7a:89:a9:8f:bd:a0:5b:b7:2c:77:34:0c:34:0e:ee:d3:a5:5e: 67:c6:29:37:5d:cc:7a:06:0e:8c:8e:f4:92:d0:8d:3c:16:5f: 2d:48:d8:56:35:db:0d:be:ed:d5:a5:58:a8:f5:53:5c:58:d2: f0:e3:47:f8:33:13:c0:6a:19:e8:09:63:07:1c:66:a3:23:aa: ad:e4:91:73:82:29:3f:15:2a:1a:f6:16:0e:cc:bb:f4:5c:71: c3:6f:98:41:bd:95:b5:ab:cd:4f:95:e0:26:6d:5e:55:6d:f2: f2:93:45:6a:f7:54:f5:1f:06:1f:c3:85:01:25:a2:89:b5:cd: d2:2b:cc:f6 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUDQNN0l/Ze9xRf+tKyPA0HlXK1YEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0QzMjgxRkM4NzVBOEREOTY3RTdFODNDRDQwRjEwNkFE NUIyM0E3NDAeFw0yNjAxMjQwNTE3MjZaFw0yNjAxMjcxNzA1MjZaMDMxMTAvBgNV BAMTKDc3Nzg3QTJGRkU2NTVDMDM1RjY3N0Y4ODQyNzFBQkNBQjVEQzZENDYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCpYlAIxCeVFITIVAOfKnXf2hjI W1frCNkUZbB4exWunfUjTatBjKEafp8KPT6eblRE0ls7VfB54yPCzXa7q1LFj1Jj dk5HTzCiqcEVJ5SMRGHL1Cr7vsHIV0SinnmCpBFGgjkf+BSEAd3AOQ2liI6r0CbV j7otHEYvLoDEXGalZWi/HKJzR+DVTQeCkYoktBzTa/gYNHpq9a0l7vT4b6fMWuBt l2laAktITiMo077CRBDkaN7vjaZu+nJJVrf5YrzwSi5kRT7BmnusF73xAU0zhwDW GqyA+WAxPSjO+OSo74vr44uUUy6ICVNmFBv1R3n6ApRD0lvt3mMqa6ZTFTS9AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUd3h6L/5lXANfZ3+IQnGryrXcbUYwHwYDVR0j BBgwFoAUzTKB/Idajdln5+g81A8QatWyOnQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x NjhjYzA1OS01ZTZjLTQ1MDEtYjg5NC0xNGE4MmQxOGQyMWUvMC9DRDMyODFGQzg3 NUE4REQ5NjdFN0U4M0NENDBGMTA2QUQ1QjIzQTc0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQ0QzMjgxRkM4NzVBOEREOTY3RTdFODNDRDQwRjEwNkFENUIy M0E3NC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMTY4Y2MwNTktNWU2Yy00NTAxLWI4 OTQtMTRhODJkMThkMjFlLzAvQ0QzMjgxRkM4NzVBOEREOTY3RTdFODNDRDQwRjEw NkFENUIyM0E3NC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFWrP6hwf0/I3Aua6E95iisgSzXC8EAuu1gM USxtK2C1Aekq02xOmbsmL2/l7rQ9B2qU4+NRjAHexjGRRjg5qYEnqj6RZakeE2IN /hXRnd2MGb/X5Dl71OTlDMKQkDMO6Q5b1bJ+eafz/cxL1Z3xnzzeg2LxAiIpLhx9 jaAYWnqJqY+9oFu3LHc0DDQO7tOlXmfGKTddzHoGDoyO9JLQjTwWXy1I2FY12w2+ 7dWlWKj1U1xY0vDjR/gzE8BqGegJYwccZqMjqq3kkXOCKT8VKhr2Fg7Mu/RcccNv mEG9lbWrzU+V4CZtXlVt8vKTRWr3VPUfBh/DhQEloom1zdIrzPY= -----END CERTIFICATE-----Generated at Sun Jan 25 22:00:35 2026 by rpki-client