This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/1b6c614f-d0ff-41a9-92d0-3a213581537b/0/A0021383E40D55B69009CDEA313E654C3CE463B0.mft File: A0021383E40D55B69009CDEA313E654C3CE463B0.mft (raw, json) Hash identifier: JiVqqRyZoVlc8swu84XIB4R3EQGJsP3mvYlkCFdtR8M= Subject key identifier: BB:20:3C:6A:76:3C:D5:AC:6C:47:AC:26:D4:50:F0:AC:0A:79:0C:D7 Authority key identifier: A0:02:13:83:E4:0D:55:B6:90:09:CD:EA:31:3E:65:4C:3C:E4:63:B0 Certificate issuer: /CN=A0021383E40D55B69009CDEA313E654C3CE463B0 Certificate serial: 745370DFDF2CB0EC82710F3F73F92749C6496C7D Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A0021383E40D55B69009CDEA313E654C3CE463B0.cer Subject info access: rsync://repo-rpki.idnic.net/repo/1b6c614f-d0ff-41a9-92d0-3a213581537b/0/A0021383E40D55B69009CDEA313E654C3CE463B0.mft Manifest number: 0493 Signing time: Sun 25 Jan 2026 00:21:46 +0000 Manifest this update: Sun 25 Jan 2026 00:16:46 +0000 Manifest next update: Wed 28 Jan 2026 03:28:46 +0000 Files and hashes: 1: 3130332e3135382e3139332e302f32342d3234203d3e20313439373035.roa (hash: DmjamGqZJwfby4ZsZWwAD877kDOxqIbRWEyViTJ9Klo=) 2: 3130332e3135382e3139322e302f32342d3234203d3e20313439373035.roa (hash: zzYEb/fwe0SxrS/0Hgs2jLEQVjX3qR9GD9AYVGEuUXM=) 3: A0021383E40D55B69009CDEA313E654C3CE463B0.crl (hash: eHMS0BVaG4zCubmLDxyB8HG+mxvgpis/MOoDYrAHLSs=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/1b6c614f-d0ff-41a9-92d0-3a213581537b/0/A0021383E40D55B69009CDEA313E654C3CE463B0.crl rsync://repo-rpki.idnic.net/repo/1b6c614f-d0ff-41a9-92d0-3a213581537b/0/A0021383E40D55B69009CDEA313E654C3CE463B0.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A0021383E40D55B69009CDEA313E654C3CE463B0.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 28 Jan 2026 03:28:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 74:53:70:df:df:2c:b0:ec:82:71:0f:3f:73:f9:27:49:c6:49:6c:7d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A0021383E40D55B69009CDEA313E654C3CE463B0 Validity Not Before: Jan 25 00:16:46 2026 GMT Not After : Jan 28 03:28:46 2026 GMT Subject: CN=BB203C6A763CD5AC6C47AC26D450F0AC0A790CD7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:4a:96:97:45:fa:05:29:06:8b:d4:5a:f7:e3: 44:64:5d:56:2c:b9:a9:a1:c5:63:6b:e4:26:63:8c: d7:4b:f6:ba:2f:f0:50:48:a5:47:79:3c:99:5d:ab: f9:e1:37:e3:2d:13:0b:ab:aa:00:62:47:c9:b3:c3: 8d:f1:f8:74:9c:86:c3:a2:87:aa:07:3a:04:0d:bc: 7d:be:4d:00:7a:55:c6:ab:1d:ed:df:6e:94:43:37: 0f:98:74:8b:5d:e9:3c:18:b7:89:5e:86:91:7d:b0: 4f:b5:5c:6a:5c:58:3d:7d:11:6e:c1:7b:97:93:74: 37:d9:0d:bb:6a:0a:9f:b7:04:27:7e:22:eb:73:cd: e1:d5:d8:f5:4e:94:f6:cf:6e:0b:95:8c:9f:84:9d: 93:48:74:95:e9:a0:27:e8:ad:7b:4d:57:04:28:c4: 53:1e:6c:c2:42:37:f7:3b:4b:42:52:54:ea:ea:ce: 3e:be:24:26:de:0e:d2:57:4f:a2:34:cd:a1:de:77: 21:c5:73:3a:b0:ef:9d:0d:87:2c:ed:72:55:9b:3a: 29:2b:a2:36:21:15:23:89:4e:a2:98:f9:75:15:d2: c5:f5:42:9c:70:9d:14:d9:4c:b1:c1:24:ee:97:95: 56:22:a8:06:9e:ac:91:b7:de:f0:67:cf:ba:04:41: c4:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:20:3C:6A:76:3C:D5:AC:6C:47:AC:26:D4:50:F0:AC:0A:79:0C:D7 X509v3 Authority Key Identifier: keyid:A0:02:13:83:E4:0D:55:B6:90:09:CD:EA:31:3E:65:4C:3C:E4:63:B0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/1b6c614f-d0ff-41a9-92d0-3a213581537b/0/A0021383E40D55B69009CDEA313E654C3CE463B0.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A0021383E40D55B69009CDEA313E654C3CE463B0.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/1b6c614f-d0ff-41a9-92d0-3a213581537b/0/A0021383E40D55B69009CDEA313E654C3CE463B0.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c9:c8:1a:9c:fc:71:34:80:bf:4d:24:4e:43:4b:d7:21:28:8a: e5:3a:14:da:91:29:02:17:25:57:8c:bc:58:3b:e5:8a:52:e0: da:2f:ab:df:24:9a:88:2a:2f:c2:c7:37:6c:74:18:c1:aa:18: bb:4a:8f:78:08:5b:f7:5c:84:5e:25:1b:01:be:e4:6c:ac:ce: 0e:aa:22:fa:c2:93:84:dc:de:80:72:34:9b:64:e6:98:bb:01: f0:d0:26:85:38:ff:03:e6:82:d5:53:00:ed:7b:15:34:c7:06: 75:95:27:6f:bd:d7:cf:86:35:ea:ea:ba:dc:15:f0:56:6d:90: 59:26:b7:bb:63:b7:88:4b:ef:ff:08:dd:27:5a:de:e7:e6:b0: 7c:35:70:14:0d:82:77:a2:af:23:47:3b:2a:b3:18:74:21:9a: 72:05:54:9b:62:bd:df:3b:1b:3f:7c:fb:f8:ea:97:fe:d4:72: 9e:7a:1f:82:3b:b7:13:f7:cc:0b:00:1c:6f:6a:58:e9:c2:e4: 08:25:4f:82:80:01:d4:95:48:62:28:bb:c5:0a:99:aa:95:8b: f2:1c:5b:8d:0b:59:96:c2:d5:bc:00:b2:de:af:5e:59:a8:f8: 4d:23:a4:09:6c:8d:c5:d7:ea:14:51:98:dd:94:1d:8c:49:ac: b2:1f:2e:a6 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUdFNw398ssOyCcQ8/c/knScZJbH0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTAwMjEzODNFNDBENTVCNjkwMDlDREVBMzEzRTY1NEMz Q0U0NjNCMDAeFw0yNjAxMjUwMDE2NDZaFw0yNjAxMjgwMzI4NDZaMDMxMTAvBgNV BAMTKEJCMjAzQzZBNzYzQ0Q1QUM2QzQ3QUMyNkQ0NTBGMEFDMEE3OTBDRDcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC9SpaXRfoFKQaL1Fr340RkXVYs uamhxWNr5CZjjNdL9rov8FBIpUd5PJldq/nhN+MtEwurqgBiR8mzw43x+HSchsOi h6oHOgQNvH2+TQB6VcarHe3fbpRDNw+YdItd6TwYt4lehpF9sE+1XGpcWD19EW7B e5eTdDfZDbtqCp+3BCd+IutzzeHV2PVOlPbPbguVjJ+EnZNIdJXpoCforXtNVwQo xFMebMJCN/c7S0JSVOrqzj6+JCbeDtJXT6I0zaHedyHFczqw750NhyztclWbOikr ojYhFSOJTqKY+XUV0sX1QpxwnRTZTLHBJO6XlVYiqAaerJG33vBnz7oEQcSnAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUuyA8anY81axsR6wm1FDwrAp5DNcwHwYDVR0j BBgwFoAUoAITg+QNVbaQCc3qMT5lTDzkY7AwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x YjZjNjE0Zi1kMGZmLTQxYTktOTJkMC0zYTIxMzU4MTUzN2IvMC9BMDAyMTM4M0U0 MEQ1NUI2OTAwOUNERUEzMTNFNjU0QzNDRTQ2M0IwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQTAwMjEzODNFNDBENTVCNjkwMDlDREVBMzEzRTY1NEMzQ0U0 NjNCMC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMWI2YzYxNGYtZDBmZi00MWE5LTky ZDAtM2EyMTM1ODE1MzdiLzAvQTAwMjEzODNFNDBENTVCNjkwMDlDREVBMzEzRTY1 NEMzQ0U0NjNCMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAMnIGpz8cTSAv00kTkNL1yEoiuU6FNqRKQIX JVeMvFg75YpS4Novq98kmogqL8LHN2x0GMGqGLtKj3gIW/dchF4lGwG+5Gyszg6q IvrCk4Tc3oByNJtk5pi7AfDQJoU4/wPmgtVTAO17FTTHBnWVJ2+918+GNerqutwV 8FZtkFkmt7tjt4hL7/8I3Sda3ufmsHw1cBQNgneiryNHOyqzGHQhmnIFVJtivd87 Gz98+/jql/7Ucp56H4I7txP3zAsAHG9qWOnC5AglT4KAAdSVSGIou8UKmaqVi/Ic W40LWZbC1bwAst6vXlmo+E0jpAlsjcXX6hRRmN2UHYxJrLIfLqY= -----END CERTIFICATE-----Generated at Sun Jan 25 22:11:11 2026 by rpki-client