This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/1bd3dd79-8635-4857-8a3c-985954516f9e/0/F03C1838587677BF6505C46715F42F8B8416F949.mft File: F03C1838587677BF6505C46715F42F8B8416F949.mft (raw, json) Hash identifier: ZbzAJAvf5bDIWBV6/BsvnTNtBGyyb1Jsc8a0pLN3YPU= Subject key identifier: 94:D9:E9:62:8C:E8:02:17:9B:01:72:C0:5E:89:3C:D9:6B:27:1E:2E Authority key identifier: F0:3C:18:38:58:76:77:BF:65:05:C4:67:15:F4:2F:8B:84:16:F9:49 Certificate issuer: /CN=F03C1838587677BF6505C46715F42F8B8416F949 Certificate serial: 1BA9BD39BA0735897ADC22958D07B1F3D2D5DA01 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F03C1838587677BF6505C46715F42F8B8416F949.cer Subject info access: rsync://repo-rpki.idnic.net/repo/1bd3dd79-8635-4857-8a3c-985954516f9e/0/F03C1838587677BF6505C46715F42F8B8416F949.mft Manifest number: 0213 Signing time: Sat 24 Jan 2026 14:01:51 +0000 Manifest this update: Sat 24 Jan 2026 13:56:51 +0000 Manifest next update: Wed 28 Jan 2026 01:23:51 +0000 Files and hashes: 1: 3130332e3135302e3135302e302f32332d3234203d3e20313430333935.roa (hash: 5d7eyl15yI3SPHjS9CWQbB/B/JL+7bbkCavXXd21rTk=) 2: 323430363a3563303a3a2f33322d3438203d3e20313430333935.roa (hash: o1axn6FylL5HDL/+cmxNZgdh+qBhrW0MUa5ofe3vKgY=) 3: F03C1838587677BF6505C46715F42F8B8416F949.crl (hash: 79k/PzHx8EeeLyfM/+aCTOFZ2U/7w3uVTUNNNpMbOfk=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/1bd3dd79-8635-4857-8a3c-985954516f9e/0/F03C1838587677BF6505C46715F42F8B8416F949.crl rsync://repo-rpki.idnic.net/repo/1bd3dd79-8635-4857-8a3c-985954516f9e/0/F03C1838587677BF6505C46715F42F8B8416F949.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F03C1838587677BF6505C46715F42F8B8416F949.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 28 Jan 2026 01:23:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1b:a9:bd:39:ba:07:35:89:7a:dc:22:95:8d:07:b1:f3:d2:d5:da:01 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F03C1838587677BF6505C46715F42F8B8416F949 Validity Not Before: Jan 24 13:56:51 2026 GMT Not After : Jan 28 01:23:51 2026 GMT Subject: CN=94D9E9628CE802179B0172C05E893CD96B271E2E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:2b:6b:0b:29:37:2f:74:75:2f:cf:5f:06:f2: 3f:7e:c7:a6:8c:ff:2c:a8:98:fd:b9:ef:61:f5:40: ba:f3:7f:87:08:47:5a:13:33:c0:1a:84:34:53:91: e2:78:fa:c1:5e:09:48:ae:c0:bc:d6:81:73:6f:1e: eb:d4:f0:03:6f:a1:fa:bc:bc:d2:ca:6e:1d:f2:29: ae:8d:8d:e7:8e:52:98:b4:9b:11:51:ef:b4:1a:03: a0:3e:b4:ef:7c:f3:f2:cf:a4:99:c7:91:82:f8:0f: 07:d4:44:d8:6f:f2:8a:c9:28:98:4b:3c:7f:3c:0a: ab:dc:ce:e0:5f:b0:1c:a9:b3:76:e9:57:54:b0:3b: 30:7a:e8:cc:b8:4b:ed:67:88:8c:aa:a5:de:6a:2e: 2c:eb:2a:59:44:66:c3:1b:97:9d:7d:8c:91:6d:e6: 18:26:81:8b:36:39:a9:76:aa:ef:16:e2:2d:0b:fb: f3:37:66:cd:ec:99:37:77:2d:b4:39:cf:82:eb:b8: 98:2d:e2:8f:7e:d6:57:64:5d:55:ce:fc:28:b3:cf: 1d:b8:00:28:29:d9:2a:05:e2:de:d5:07:14:ca:98: 3a:ee:75:26:74:8b:7a:ab:43:32:54:3a:bd:71:83: 21:e7:77:f9:d2:3b:72:89:51:c6:3e:de:8d:c3:55: 97:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 94:D9:E9:62:8C:E8:02:17:9B:01:72:C0:5E:89:3C:D9:6B:27:1E:2E X509v3 Authority Key Identifier: keyid:F0:3C:18:38:58:76:77:BF:65:05:C4:67:15:F4:2F:8B:84:16:F9:49 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/1bd3dd79-8635-4857-8a3c-985954516f9e/0/F03C1838587677BF6505C46715F42F8B8416F949.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F03C1838587677BF6505C46715F42F8B8416F949.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/1bd3dd79-8635-4857-8a3c-985954516f9e/0/F03C1838587677BF6505C46715F42F8B8416F949.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5a:ef:13:cb:b0:6b:ef:dd:66:8d:e6:6d:35:1f:68:0d:a3:79: 95:2c:a4:36:6f:3f:46:8c:20:98:cb:81:7f:33:b2:fc:08:37: 1e:60:30:e8:e2:93:78:94:3d:6d:e2:8a:54:a3:07:20:7a:24: 83:13:5a:db:5d:a7:06:5c:22:15:6b:bf:e1:f7:b9:2f:f7:53: 24:a3:4c:75:a5:5e:67:03:9c:50:73:20:6c:c9:32:ff:9d:a9: a3:e1:d9:5f:54:d6:da:ec:a3:5b:c1:b9:f4:41:2e:95:45:e6: 06:bd:e9:bf:f2:04:cb:00:d4:e9:b3:e9:35:d6:f4:0a:36:47: 7f:fb:10:39:ed:f8:b3:44:ba:88:6f:bc:c5:b4:9c:2a:f2:c3: 8c:f2:a7:55:2c:19:86:c5:ad:c5:93:68:6a:df:5b:1e:2b:bf: 1f:1d:29:9b:2a:a6:59:86:75:44:ea:50:9d:8b:a1:bc:8a:29: 67:ee:10:24:fb:da:8b:dd:57:6f:39:ca:a1:b8:83:36:88:58: b6:1f:e8:45:79:7d:89:b8:f2:01:eb:f9:11:bb:60:88:dc:ed: c7:ea:79:22:ba:d2:09:e3:fc:97:2b:f5:b7:a8:0b:6f:a1:cc: d8:78:90:06:f4:d4:ae:6e:85:40:9a:50:ba:d0:25:89:ca:a0: b9:61:6c:4d -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUG6m9OboHNYl63CKVjQex89LV2gEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjAzQzE4Mzg1ODc2NzdCRjY1MDVDNDY3MTVGNDJGOEI4 NDE2Rjk0OTAeFw0yNjAxMjQxMzU2NTFaFw0yNjAxMjgwMTIzNTFaMDMxMTAvBgNV BAMTKDk0RDlFOTYyOENFODAyMTc5QjAxNzJDMDVFODkzQ0Q5NkIyNzFFMkUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDNK2sLKTcvdHUvz18G8j9+x6aM /yyomP2572H1QLrzf4cIR1oTM8AahDRTkeJ4+sFeCUiuwLzWgXNvHuvU8ANvofq8 vNLKbh3yKa6NjeeOUpi0mxFR77QaA6A+tO988/LPpJnHkYL4DwfURNhv8orJKJhL PH88CqvczuBfsByps3bpV1SwOzB66My4S+1niIyqpd5qLizrKllEZsMbl519jJFt 5hgmgYs2Oal2qu8W4i0L+/M3Zs3smTd3LbQ5z4LruJgt4o9+1ldkXVXO/Cizzx24 ACgp2SoF4t7VBxTKmDrudSZ0i3qrQzJUOr1xgyHnd/nSO3KJUcY+3o3DVZdpAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUlNnpYozoAhebAXLAXok82WsnHi4wHwYDVR0j BBgwFoAU8DwYOFh2d79lBcRnFfQvi4QW+UkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x YmQzZGQ3OS04NjM1LTQ4NTctOGEzYy05ODU5NTQ1MTZmOWUvMC9GMDNDMTgzODU4 NzY3N0JGNjUwNUM0NjcxNUY0MkY4Qjg0MTZGOTQ5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRjAzQzE4Mzg1ODc2NzdCRjY1MDVDNDY3MTVGNDJGOEI4NDE2 Rjk0OS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMWJkM2RkNzktODYzNS00ODU3LThh M2MtOTg1OTU0NTE2ZjllLzAvRjAzQzE4Mzg1ODc2NzdCRjY1MDVDNDY3MTVGNDJG OEI4NDE2Rjk0OS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFrvE8uwa+/dZo3mbTUfaA2jeZUspDZvP0aM IJjLgX8zsvwINx5gMOjik3iUPW3iilSjByB6JIMTWttdpwZcIhVrv+H3uS/3UySj THWlXmcDnFBzIGzJMv+dqaPh2V9U1trso1vBufRBLpVF5ga96b/yBMsA1Omz6TXW 9Ao2R3/7EDnt+LNEuohvvMW0nCryw4zyp1UsGYbFrcWTaGrfWx4rvx8dKZsqplmG dUTqUJ2LobyKKWfuECT72ovdV285yqG4gzaIWLYf6EV5fYm48gHr+RG7YIjc7cfq eSK60gnj/Jcr9beoC2+hzNh4kAb01K5uhUCaULrQJYnKoLlhbE0= -----END CERTIFICATE-----Generated at Sun Jan 25 23:20:35 2026 by rpki-client