This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/2004233f-bb2c-47d7-901c-e3c82f8d423c/0/2552240EFFEE2F60F5684DD03EDE49372EBD2A17.mft File: 2552240EFFEE2F60F5684DD03EDE49372EBD2A17.mft (raw, json) Hash identifier: cZSFvUlWsNA/sgSSUloflz5JlvMyRUh/fSfYljLFC8s= Subject key identifier: 3F:E6:0C:52:2D:E7:17:06:71:96:5B:B3:24:5D:31:1D:CD:BC:15:21 Authority key identifier: 25:52:24:0E:FF:EE:2F:60:F5:68:4D:D0:3E:DE:49:37:2E:BD:2A:17 Certificate issuer: /CN=2552240EFFEE2F60F5684DD03EDE49372EBD2A17 Certificate serial: 0C63837958678315485D2B28F78F15767B4FEA50 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2552240EFFEE2F60F5684DD03EDE49372EBD2A17.cer Subject info access: rsync://repo-rpki.idnic.net/repo/2004233f-bb2c-47d7-901c-e3c82f8d423c/0/2552240EFFEE2F60F5684DD03EDE49372EBD2A17.mft Manifest number: 04FF Signing time: Sun 25 Jan 2026 19:01:53 +0000 Manifest this update: Sun 25 Jan 2026 18:56:53 +0000 Manifest next update: Thu 29 Jan 2026 05:56:53 +0000 Files and hashes: 1: 3130332e3134352e31342e302f32342d3234203d3e20313339343338.roa (hash: voGeHKK4ikA3uaKs2J+WeJLtpIfTnr3JdLSLAJpRJmc=) 2: 3130332e3134352e31352e302f32342d3234203d3e20313339343338.roa (hash: VKvXvb3BP6384nLUH1LdjT/mbF098hu6bIg7H4DeDLk=) 3: 3130332e3134352e31342e302f32332d3234203d3e20313339343338.roa (hash: 1I55HZV9ASBX91G1gmKkN8XsoZ52BjLH6TscAGFfb1w=) 4: 2552240EFFEE2F60F5684DD03EDE49372EBD2A17.crl (hash: PuMzPgjk2qLlcRcQEP+btabzrSnsLvwNBAuzgumCoaU=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/2004233f-bb2c-47d7-901c-e3c82f8d423c/0/2552240EFFEE2F60F5684DD03EDE49372EBD2A17.crl rsync://repo-rpki.idnic.net/repo/2004233f-bb2c-47d7-901c-e3c82f8d423c/0/2552240EFFEE2F60F5684DD03EDE49372EBD2A17.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2552240EFFEE2F60F5684DD03EDE49372EBD2A17.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 28 Jan 2026 14:00:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0c:63:83:79:58:67:83:15:48:5d:2b:28:f7:8f:15:76:7b:4f:ea:50 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2552240EFFEE2F60F5684DD03EDE49372EBD2A17 Validity Not Before: Jan 25 18:56:53 2026 GMT Not After : Jan 29 05:56:53 2026 GMT Subject: CN=3FE60C522DE7170671965BB3245D311DCDBC1521 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:d3:62:0a:6e:0c:e0:71:e1:e6:74:40:b4:81: 90:59:d7:da:b7:d9:0b:ff:39:10:30:a5:58:ee:aa: c9:20:72:76:9e:bf:ce:45:a0:75:d1:77:0d:dd:d5: 79:2e:f5:f9:b5:8f:cb:63:f6:c9:3f:35:17:8c:cc: 16:5a:d1:1c:89:69:4f:5f:4e:c9:4b:df:16:e8:f5: 5a:44:a2:63:1d:f2:f6:e1:dc:6a:2c:04:d7:7d:2f: 4d:e4:58:31:12:0c:4d:4a:d4:30:fa:23:5f:9f:93: b8:b4:5c:d7:35:3e:53:84:e5:25:02:57:48:bf:3d: ad:6e:c8:c9:d4:72:88:b0:e0:e2:46:46:75:d7:73: 18:bf:b2:fd:61:eb:62:e8:a5:dc:26:6d:59:ea:4f: c6:32:87:06:6f:95:ed:c2:7a:f6:3a:b8:6e:e6:1c: 84:5f:8c:0c:68:0f:90:40:5b:34:e5:6a:da:30:e3: e7:c8:d9:17:e6:c4:93:2f:00:ec:cb:17:b1:86:69: aa:6b:da:f0:de:1e:11:7f:57:4d:cb:70:ef:02:9c: 47:79:6d:c1:c0:06:91:65:40:06:71:38:f9:15:81: 38:47:fa:2e:22:69:fc:4c:f7:e0:48:2f:5a:c6:65: 78:af:ba:1b:11:5a:06:08:5f:99:1c:49:6c:22:33: 57:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3F:E6:0C:52:2D:E7:17:06:71:96:5B:B3:24:5D:31:1D:CD:BC:15:21 X509v3 Authority Key Identifier: keyid:25:52:24:0E:FF:EE:2F:60:F5:68:4D:D0:3E:DE:49:37:2E:BD:2A:17 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/2004233f-bb2c-47d7-901c-e3c82f8d423c/0/2552240EFFEE2F60F5684DD03EDE49372EBD2A17.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2552240EFFEE2F60F5684DD03EDE49372EBD2A17.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/2004233f-bb2c-47d7-901c-e3c82f8d423c/0/2552240EFFEE2F60F5684DD03EDE49372EBD2A17.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 66:94:0c:aa:85:ba:63:d3:1b:9f:b9:5e:2c:50:84:d5:9b:2d: c5:2b:3c:5f:9d:4d:36:85:c0:b9:6d:4e:1a:1a:fa:68:02:f5: a8:9d:8f:37:b1:2c:6e:00:ef:d9:06:30:9f:27:b1:98:36:d5: 95:5e:5c:08:44:c2:e2:cb:4d:4c:a9:4e:cf:fc:b9:2d:7c:ba: 78:07:9e:f0:65:85:bc:fe:24:80:17:ec:c7:b3:ed:d9:02:67: f5:09:80:35:04:a0:29:42:fc:23:2d:88:b8:4a:38:1b:90:0a: a8:f3:5f:05:54:5b:b0:fd:b7:4c:a7:21:f1:91:b3:f8:ef:c6: 95:55:e8:b4:a2:1f:c6:ef:4a:06:b9:63:9e:77:e8:f2:83:1f: d4:e0:f8:94:ed:47:78:d2:a6:54:ad:dd:86:dc:d9:68:b0:a2: 42:82:84:89:ac:77:af:31:40:63:87:9e:c2:f9:a4:a6:00:c5: b9:f2:4b:e2:92:0a:34:ac:c8:25:db:af:72:8d:e2:d7:8c:0a: 3e:ab:be:1f:08:d7:93:1e:28:a1:e8:e9:08:8b:e0:cd:9b:84: 29:98:c7:5b:ba:6c:19:ad:29:dc:2d:70:4e:e0:ef:d8:92:c5: 21:7c:29:c0:65:c2:d4:35:bf:06:1e:70:74:8e:34:a1:55:fc: 59:7f:8b:d4 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUDGODeVhngxVIXSso948VdntP6lAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjU1MjI0MEVGRkVFMkY2MEY1Njg0REQwM0VERTQ5Mzcy RUJEMkExNzAeFw0yNjAxMjUxODU2NTNaFw0yNjAxMjkwNTU2NTNaMDMxMTAvBgNV BAMTKDNGRTYwQzUyMkRFNzE3MDY3MTk2NUJCMzI0NUQzMTFEQ0RCQzE1MjEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+02IKbgzgceHmdEC0gZBZ19q3 2Qv/ORAwpVjuqskgcnaev85FoHXRdw3d1Xku9fm1j8tj9sk/NReMzBZa0RyJaU9f TslL3xbo9VpEomMd8vbh3GosBNd9L03kWDESDE1K1DD6I1+fk7i0XNc1PlOE5SUC V0i/Pa1uyMnUcoiw4OJGRnXXcxi/sv1h62LopdwmbVnqT8YyhwZvle3CevY6uG7m HIRfjAxoD5BAWzTlatow4+fI2RfmxJMvAOzLF7GGaapr2vDeHhF/V03LcO8CnEd5 bcHABpFlQAZxOPkVgThH+i4iafxM9+BIL1rGZXivuhsRWgYIX5kcSWwiM1fhAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUP+YMUi3nFwZxlluzJF0xHc28FSEwHwYDVR0j BBgwFoAUJVIkDv/uL2D1aE3QPt5JNy69KhcwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y MDA0MjMzZi1iYjJjLTQ3ZDctOTAxYy1lM2M4MmY4ZDQyM2MvMC8yNTUyMjQwRUZG RUUyRjYwRjU2ODRERDAzRURFNDkzNzJFQkQyQTE3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMjU1MjI0MEVGRkVFMkY2MEY1Njg0REQwM0VERTQ5MzcyRUJE MkExNy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMjAwNDIzM2YtYmIyYy00N2Q3LTkw MWMtZTNjODJmOGQ0MjNjLzAvMjU1MjI0MEVGRkVFMkY2MEY1Njg0REQwM0VERTQ5 MzcyRUJEMkExNy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGaUDKqFumPTG5+5XixQhNWbLcUrPF+dTTaF wLltThoa+mgC9aidjzexLG4A79kGMJ8nsZg21ZVeXAhEwuLLTUypTs/8uS18ungH nvBlhbz+JIAX7Mez7dkCZ/UJgDUEoClC/CMtiLhKOBuQCqjzXwVUW7D9t0ynIfGR s/jvxpVV6LSiH8bvSga5Y5536PKDH9Tg+JTtR3jSplSt3Ybc2WiwokKChImsd68x QGOHnsL5pKYAxbnyS+KSCjSsyCXbr3KN4teMCj6rvh8I15MeKKHo6QiL4M2bhCmY x1u6bBmtKdwtcE7g79iSxSF8KcBlwtQ1vwYecHSONKFV/Fl/i9Q= -----END CERTIFICATE-----Generated at Mon Jan 26 03:32:30 2026 by rpki-client