This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/1b5a47b6-5513-4610-94cf-1feec4eeecf3/0/2A06B429F70B869F9E70FB36951674F7D8A4AC4E.mft File: 2A06B429F70B869F9E70FB36951674F7D8A4AC4E.mft (raw, json) Hash identifier: ijghpQnW2pJggVDIYOQx9/fjyqFtLWpdK2b6U8KYx/8= Subject key identifier: BE:DE:CA:1A:F9:6B:F8:E4:4A:C4:AF:80:75:55:8A:8A:CF:80:1C:5F Authority key identifier: 2A:06:B4:29:F7:0B:86:9F:9E:70:FB:36:95:16:74:F7:D8:A4:AC:4E Certificate issuer: /CN=2A06B429F70B869F9E70FB36951674F7D8A4AC4E Certificate serial: 79EC5B59D5831F7C282DECDACC9A31E8789E39B9 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2A06B429F70B869F9E70FB36951674F7D8A4AC4E.cer Subject info access: rsync://repo-rpki.idnic.net/repo/1b5a47b6-5513-4610-94cf-1feec4eeecf3/0/2A06B429F70B869F9E70FB36951674F7D8A4AC4E.mft Manifest number: 0168 Signing time: Sun 25 Jan 2026 10:22:26 +0000 Manifest this update: Sun 25 Jan 2026 10:17:26 +0000 Manifest next update: Wed 28 Jan 2026 17:26:26 +0000 Files and hashes: 1: 2A06B429F70B869F9E70FB36951674F7D8A4AC4E.crl (hash: 5qXLLkUS1VK/jNtsZqxto27cg6n9Vx8zS1hyKQewnyU=) 2: 3130332e3135312e32342e302f32342d3234203d3e20313530353332.roa (hash: dNnoIXKVhmyapC9qepVTmmkVYB2sWKjzCXWE7DAeobc=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/1b5a47b6-5513-4610-94cf-1feec4eeecf3/0/2A06B429F70B869F9E70FB36951674F7D8A4AC4E.crl rsync://repo-rpki.idnic.net/repo/1b5a47b6-5513-4610-94cf-1feec4eeecf3/0/2A06B429F70B869F9E70FB36951674F7D8A4AC4E.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2A06B429F70B869F9E70FB36951674F7D8A4AC4E.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 28 Jan 2026 14:00:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 79:ec:5b:59:d5:83:1f:7c:28:2d:ec:da:cc:9a:31:e8:78:9e:39:b9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2A06B429F70B869F9E70FB36951674F7D8A4AC4E Validity Not Before: Jan 25 10:17:26 2026 GMT Not After : Jan 28 17:26:26 2026 GMT Subject: CN=BEDECA1AF96BF8E44AC4AF8075558A8ACF801C5F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:2b:ee:bf:ec:f3:63:9c:96:9b:87:87:eb:42: 9d:73:79:b6:fd:d6:77:98:b5:47:5f:0e:c4:d3:87: 88:e3:7f:4b:fc:3c:36:05:1d:27:5d:a1:3d:bd:ac: 1f:af:f5:f8:51:ae:b6:7c:84:b1:18:a2:2a:43:3d: 41:21:d3:8b:2e:db:da:45:f3:48:d1:df:b3:0e:2a: 33:94:f6:19:e8:29:03:fa:cb:5b:df:cd:be:7e:e9: 98:66:b5:80:af:4a:d4:46:09:b3:e0:7a:89:f7:9e: dc:55:98:2e:11:59:82:e7:27:a9:fc:d4:2b:2a:79: de:4d:2f:48:fc:fb:f2:ba:36:b6:df:a8:7a:17:0c: 85:9f:83:49:7f:7f:a0:c0:df:cb:fa:63:b6:4b:33: 95:53:38:fd:b1:40:3a:af:87:e0:fe:c4:13:0e:0c: f2:56:6b:65:56:5f:23:0d:49:94:84:35:47:af:bb: a6:09:2e:1e:c1:ed:13:a0:af:ff:5d:b4:23:a6:b9: 46:83:ab:1d:c2:48:6d:b8:93:00:4a:6a:5e:96:d7: fd:ce:91:f7:b4:6d:29:d9:78:cc:96:eb:32:cc:0c: e7:83:c3:71:8d:50:5e:87:7a:1b:e1:e4:e1:3c:87: 6b:42:b3:68:4c:33:d6:23:08:a3:cb:1f:45:34:6e: d9:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BE:DE:CA:1A:F9:6B:F8:E4:4A:C4:AF:80:75:55:8A:8A:CF:80:1C:5F X509v3 Authority Key Identifier: keyid:2A:06:B4:29:F7:0B:86:9F:9E:70:FB:36:95:16:74:F7:D8:A4:AC:4E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/1b5a47b6-5513-4610-94cf-1feec4eeecf3/0/2A06B429F70B869F9E70FB36951674F7D8A4AC4E.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2A06B429F70B869F9E70FB36951674F7D8A4AC4E.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/1b5a47b6-5513-4610-94cf-1feec4eeecf3/0/2A06B429F70B869F9E70FB36951674F7D8A4AC4E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 00:34:cf:05:ad:3a:79:a8:77:55:2d:17:11:eb:25:17:13:12: 01:d0:19:76:2d:ab:36:28:83:39:1a:b0:a5:d9:eb:29:bb:00: 02:3f:44:a1:56:5d:dd:57:36:53:b7:e1:d1:af:ee:93:31:37: 58:cf:ad:48:3f:33:de:0e:f8:b0:ba:04:4f:9c:28:04:6a:4e: 78:c3:5f:82:e8:14:2b:25:e6:31:5e:31:52:be:06:2d:f9:43: 58:cb:b2:cb:5a:12:16:0c:f1:78:da:01:74:1d:ce:34:af:22: 02:eb:cd:10:a0:6e:ac:2b:bf:cc:21:aa:fe:b1:77:a7:28:f7: 34:f6:de:85:e9:5c:3a:70:b6:0e:14:48:a4:42:a6:aa:76:f6: 0f:b1:65:3f:b3:3a:8d:0c:71:b8:ee:f4:69:46:b9:f7:5c:74: b8:60:f2:fd:89:eb:84:30:28:70:4a:c2:00:93:f5:d9:a1:54: cf:7e:6e:00:fe:68:7e:4a:1b:12:45:2e:db:87:f6:25:83:d6: 56:7a:d5:ca:fe:b7:fa:1f:ec:13:25:42:75:3b:6d:4d:69:3b: 67:e8:7c:8c:27:e0:47:fd:dd:39:51:5d:f7:4f:05:2e:b5:55: 42:9e:3e:df:93:91:68:f2:39:f0:7b:65:a2:44:bb:bf:d1:33: 53:45:d9:50 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUeexbWdWDH3woLezazJox6HieObkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkEwNkI0MjlGNzBCODY5RjlFNzBGQjM2OTUxNjc0RjdE OEE0QUM0RTAeFw0yNjAxMjUxMDE3MjZaFw0yNjAxMjgxNzI2MjZaMDMxMTAvBgNV BAMTKEJFREVDQTFBRjk2QkY4RTQ0QUM0QUY4MDc1NTU4QThBQ0Y4MDFDNUYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDKK+6/7PNjnJabh4frQp1zebb9 1neYtUdfDsTTh4jjf0v8PDYFHSddoT29rB+v9fhRrrZ8hLEYoipDPUEh04su29pF 80jR37MOKjOU9hnoKQP6y1vfzb5+6ZhmtYCvStRGCbPgeon3ntxVmC4RWYLnJ6n8 1Csqed5NL0j8+/K6NrbfqHoXDIWfg0l/f6DA38v6Y7ZLM5VTOP2xQDqvh+D+xBMO DPJWa2VWXyMNSZSENUevu6YJLh7B7ROgr/9dtCOmuUaDqx3CSG24kwBKal6W1/3O kfe0bSnZeMyW6zLMDOeDw3GNUF6Hehvh5OE8h2tCs2hMM9YjCKPLH0U0btndAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUvt7KGvlr+ORKxK+AdVWKis+AHF8wHwYDVR0j BBgwFoAUKga0KfcLhp+ecPs2lRZ099ikrE4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x YjVhNDdiNi01NTEzLTQ2MTAtOTRjZi0xZmVlYzRlZWVjZjMvMC8yQTA2QjQyOUY3 MEI4NjlGOUU3MEZCMzY5NTE2NzRGN0Q4QTRBQzRFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMkEwNkI0MjlGNzBCODY5RjlFNzBGQjM2OTUxNjc0RjdEOEE0 QUM0RS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMWI1YTQ3YjYtNTUxMy00NjEwLTk0 Y2YtMWZlZWM0ZWVlY2YzLzAvMkEwNkI0MjlGNzBCODY5RjlFNzBGQjM2OTUxNjc0 RjdEOEE0QUM0RS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAA0zwWtOnmod1UtFxHrJRcTEgHQGXYtqzYo gzkasKXZ6ym7AAI/RKFWXd1XNlO34dGv7pMxN1jPrUg/M94O+LC6BE+cKARqTnjD X4LoFCsl5jFeMVK+Bi35Q1jLsstaEhYM8XjaAXQdzjSvIgLrzRCgbqwrv8whqv6x d6co9zT23oXpXDpwtg4USKRCpqp29g+xZT+zOo0Mcbju9GlGufdcdLhg8v2J64Qw KHBKwgCT9dmhVM9+bgD+aH5KGxJFLtuH9iWD1lZ61cr+t/of7BMlQnU7bU1pO2fo fIwn4Ef93TlRXfdPBS61VUKePt+TkWjyOfB7ZaJEu7/RM1NF2VA= -----END CERTIFICATE-----Generated at Sun Jan 25 18:37:19 2026 by rpki-client