This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/1d755347-6b1c-42c1-9f54-d7eab22e182c/0/5131743F5E95BB0AD5AE61B0BDC1884C1021B476.mft File: 5131743F5E95BB0AD5AE61B0BDC1884C1021B476.mft (raw, json) Hash identifier: 9YxGo1l5NQSNJv4rbz4cAYzMh4O8lShOzSC+M0mYuyE= Subject key identifier: 7B:30:2B:58:77:10:65:B0:CD:A6:DF:7D:E8:2F:15:30:87:17:22:E7 Authority key identifier: 51:31:74:3F:5E:95:BB:0A:D5:AE:61:B0:BD:C1:88:4C:10:21:B4:76 Certificate issuer: /CN=5131743F5E95BB0AD5AE61B0BDC1884C1021B476 Certificate serial: 69312907D756FFB23687E8343E2267ACE26AF1B9 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/5131743F5E95BB0AD5AE61B0BDC1884C1021B476.cer Subject info access: rsync://repo-rpki.idnic.net/repo/1d755347-6b1c-42c1-9f54-d7eab22e182c/0/5131743F5E95BB0AD5AE61B0BDC1884C1021B476.mft Manifest number: 0111 Signing time: Sun 25 Jan 2026 11:12:11 +0000 Manifest this update: Sun 25 Jan 2026 11:07:11 +0000 Manifest next update: Wed 28 Jan 2026 18:14:11 +0000 Files and hashes: 1: 3135372e36362e35362e302f32342d3234203d3e203538343737.roa (hash: bRm34Kjf+sNcSdy5iGqBX+Tp5Wv6W94v5DYv7HCdcv4=) 2: 5131743F5E95BB0AD5AE61B0BDC1884C1021B476.crl (hash: mly2p2hLeUVr0mbft+w2gkApvGRG0Epm/bf6PDywimc=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/1d755347-6b1c-42c1-9f54-d7eab22e182c/0/5131743F5E95BB0AD5AE61B0BDC1884C1021B476.crl rsync://repo-rpki.idnic.net/repo/1d755347-6b1c-42c1-9f54-d7eab22e182c/0/5131743F5E95BB0AD5AE61B0BDC1884C1021B476.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/5131743F5E95BB0AD5AE61B0BDC1884C1021B476.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 28 Jan 2026 18:14:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 69:31:29:07:d7:56:ff:b2:36:87:e8:34:3e:22:67:ac:e2:6a:f1:b9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5131743F5E95BB0AD5AE61B0BDC1884C1021B476 Validity Not Before: Jan 25 11:07:11 2026 GMT Not After : Jan 28 18:14:11 2026 GMT Subject: CN=7B302B58771065B0CDA6DF7DE82F1530871722E7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:12:9a:0e:e7:ec:a1:f2:b8:81:44:23:cb:53: ec:c1:af:05:75:c3:77:9d:22:68:a7:61:db:4c:17: 19:42:d4:d5:88:0e:43:c7:7c:e6:5a:3c:8d:45:2e: b8:7e:34:c8:a4:eb:50:34:c5:66:93:13:41:e8:f3: 8b:09:76:40:9f:b2:72:9e:a4:3a:98:6f:7c:f8:37: 98:0e:2a:2c:42:99:3f:67:a6:60:67:ba:32:a4:d3: 33:b3:42:a9:2a:f4:6a:31:7e:1f:6c:fa:56:27:eb: 09:98:b5:57:86:08:5d:e8:d2:80:d2:e0:c9:01:5e: 10:13:ca:4e:d5:ef:f5:2c:4e:d0:8f:f6:d5:9d:77: 84:4f:d2:d7:f0:d5:3a:a9:d0:c4:c5:5a:c9:d8:3d: 9e:ef:1d:5c:0a:c2:e3:d8:79:0c:4a:1f:cb:e9:a8: 95:ff:81:60:b4:dc:8e:7a:a5:3f:b0:01:c9:13:40: 34:cf:2b:cb:b6:c1:ac:a1:d4:f1:66:b2:6f:11:d0: 32:20:e3:04:e6:c6:96:c8:89:2b:41:dc:56:f0:27: 16:f4:91:bc:9e:2c:81:1b:0b:f2:9f:f9:47:35:c7: 16:e6:9e:46:70:76:1d:bb:ba:07:6f:9e:c9:f4:6e: d8:57:de:4a:eb:13:fb:74:31:48:d2:84:8e:f1:86: b1:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7B:30:2B:58:77:10:65:B0:CD:A6:DF:7D:E8:2F:15:30:87:17:22:E7 X509v3 Authority Key Identifier: keyid:51:31:74:3F:5E:95:BB:0A:D5:AE:61:B0:BD:C1:88:4C:10:21:B4:76 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/1d755347-6b1c-42c1-9f54-d7eab22e182c/0/5131743F5E95BB0AD5AE61B0BDC1884C1021B476.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/5131743F5E95BB0AD5AE61B0BDC1884C1021B476.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/1d755347-6b1c-42c1-9f54-d7eab22e182c/0/5131743F5E95BB0AD5AE61B0BDC1884C1021B476.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c0:78:fc:66:bf:5b:8f:19:a7:52:94:af:ef:cd:68:87:9d:97: 02:2c:42:64:16:56:a2:1b:36:a3:ee:fb:3e:d4:59:15:c0:bb: 2b:5f:e6:ab:e5:5d:1e:84:0e:17:75:04:d6:35:03:25:3b:8c: e3:16:66:b3:2d:23:72:20:cc:94:49:8a:e0:a4:dd:2c:51:95: 18:67:00:20:85:a2:a9:f4:5b:76:5c:54:42:92:5d:d4:6a:a2: 9f:08:26:ab:ae:9a:9f:2d:87:e3:8d:86:b5:76:de:aa:aa:1e: 1e:be:81:1e:32:3e:f3:e0:07:b7:6b:8a:f6:48:a6:a0:3e:96: a2:f7:b2:1b:df:0c:66:b1:a8:c7:21:0d:f7:ae:4d:b6:a6:c7: a7:7a:09:12:c3:b3:ea:79:4f:02:0c:b0:19:98:18:02:19:56: 6b:2d:8c:52:0e:dd:49:17:64:2d:4f:83:df:a8:57:e0:74:47: 7d:c7:79:b9:63:15:24:c6:f6:33:c8:f2:97:83:c5:62:ba:a4: 46:da:6d:b6:f1:14:38:b6:62:c1:68:82:14:c2:d8:1a:6d:98: 70:99:19:09:49:53:6e:06:d0:cc:7b:6d:25:12:79:bb:02:d1: f5:1a:f6:b6:a9:fe:0f:e9:2a:a5:7c:d3:bc:15:5d:91:ef:c4: 62:27:59:00 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUaTEpB9dW/7I2h+g0PiJnrOJq8bkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTEzMTc0M0Y1RTk1QkIwQUQ1QUU2MUIwQkRDMTg4NEMx MDIxQjQ3NjAeFw0yNjAxMjUxMTA3MTFaFw0yNjAxMjgxODE0MTFaMDMxMTAvBgNV BAMTKDdCMzAyQjU4NzcxMDY1QjBDREE2REY3REU4MkYxNTMwODcxNzIyRTcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDMEpoO5+yh8riBRCPLU+zBrwV1 w3edIminYdtMFxlC1NWIDkPHfOZaPI1FLrh+NMik61A0xWaTE0Ho84sJdkCfsnKe pDqYb3z4N5gOKixCmT9npmBnujKk0zOzQqkq9Goxfh9s+lYn6wmYtVeGCF3o0oDS 4MkBXhATyk7V7/UsTtCP9tWdd4RP0tfw1Tqp0MTFWsnYPZ7vHVwKwuPYeQxKH8vp qJX/gWC03I56pT+wAckTQDTPK8u2wayh1PFmsm8R0DIg4wTmxpbIiStB3FbwJxb0 kbyeLIEbC/Kf+Uc1xxbmnkZwdh27ugdvnsn0bthX3krrE/t0MUjShI7xhrEzAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUezArWHcQZbDNpt996C8VMIcXIucwHwYDVR0j BBgwFoAUUTF0P16VuwrVrmGwvcGITBAhtHYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x ZDc1NTM0Ny02YjFjLTQyYzEtOWY1NC1kN2VhYjIyZTE4MmMvMC81MTMxNzQzRjVF OTVCQjBBRDVBRTYxQjBCREMxODg0QzEwMjFCNDc2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvNTEzMTc0M0Y1RTk1QkIwQUQ1QUU2MUIwQkRDMTg4NEMxMDIx QjQ3Ni5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMWQ3NTUzNDctNmIxYy00MmMxLTlm NTQtZDdlYWIyMmUxODJjLzAvNTEzMTc0M0Y1RTk1QkIwQUQ1QUU2MUIwQkRDMTg4 NEMxMDIxQjQ3Ni5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAMB4/Ga/W48Zp1KUr+/NaIedlwIsQmQWVqIb NqPu+z7UWRXAuytf5qvlXR6EDhd1BNY1AyU7jOMWZrMtI3IgzJRJiuCk3SxRlRhn ACCFoqn0W3ZcVEKSXdRqop8IJquump8th+ONhrV23qqqHh6+gR4yPvPgB7drivZI pqA+lqL3shvfDGaxqMchDfeuTbamx6d6CRLDs+p5TwIMsBmYGAIZVmstjFIO3UkX ZC1Pg9+oV+B0R33HebljFSTG9jPI8peDxWK6pEbabbbxFDi2YsFoghTC2BptmHCZ GQlJU24G0Mx7bSUSebsC0fUa9rap/g/pKqV807wVXZHvxGInWQA= -----END CERTIFICATE-----Generated at Sun Jan 25 19:08:11 2026 by rpki-client