This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/20f7be06-9672-4641-97bd-9bfdf955de17/0/0B47BFC94FDCEC084CD7B35536C8510E41F55130.mft File: 0B47BFC94FDCEC084CD7B35536C8510E41F55130.mft (raw, json) Hash identifier: 0P2tmNBZ21HCDjzcDgFW5+6CHkxJ680F8QLdFSziSR8= Subject key identifier: 44:5D:E3:39:A7:CE:2C:BB:02:EA:0F:69:73:82:82:89:F9:6A:A3:AE Authority key identifier: 0B:47:BF:C9:4F:DC:EC:08:4C:D7:B3:55:36:C8:51:0E:41:F5:51:30 Certificate issuer: /CN=0B47BFC94FDCEC084CD7B35536C8510E41F55130 Certificate serial: 06F3528FA9BFF99CFC30B80188C72C20A3ACCFD8 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0B47BFC94FDCEC084CD7B35536C8510E41F55130.cer Subject info access: rsync://repo-rpki.idnic.net/repo/20f7be06-9672-4641-97bd-9bfdf955de17/0/0B47BFC94FDCEC084CD7B35536C8510E41F55130.mft Manifest number: 0281 Signing time: Sat 24 Jan 2026 04:02:22 +0000 Manifest this update: Sat 24 Jan 2026 03:57:22 +0000 Manifest next update: Tue 27 Jan 2026 05:16:22 +0000 Files and hashes: 1: 3130332e382e3233382e302f32342d3234203d3e20313332363334.roa (hash: dJ48+N7DnAPMlFVVdm79c3GqAaF0/rFXKq0WJY2Deco=) 2: 3130332e3232352e3234322e302f32342d3234203d3e20313332363334.roa (hash: GqDgDYZHwoD6s9CHkugs2Z1R9R08+t73eMRbzWBmBRU=) 3: 3130332e31382e3131372e302f32342d3234203d3e20313332363334.roa (hash: it5Y8uFhllmL1qnw/+3j2vvqBc+psgWABpreLSlxm7g=) 4: 3130332e31362e34382e302f32332d3234203d3e20313332363334.roa (hash: GkgIUj3iLnoDBgSLwsXcxjcRmy20+p6SRzqI9r3pCJc=) 5: 3130332e362e33342e302f32342d3234203d3e20313332363334.roa (hash: KdryargeIqiffwYupqsX1uiOw2sgJxDwDmYHhrfT8ZA=) 6: 0B47BFC94FDCEC084CD7B35536C8510E41F55130.crl (hash: QkARDQ1GyDCKHp36hsDfeRcoxdB++gmKf1iVUofv/QQ=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/20f7be06-9672-4641-97bd-9bfdf955de17/0/0B47BFC94FDCEC084CD7B35536C8510E41F55130.crl rsync://repo-rpki.idnic.net/repo/20f7be06-9672-4641-97bd-9bfdf955de17/0/0B47BFC94FDCEC084CD7B35536C8510E41F55130.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0B47BFC94FDCEC084CD7B35536C8510E41F55130.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 27 Jan 2026 05:16:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 06:f3:52:8f:a9:bf:f9:9c:fc:30:b8:01:88:c7:2c:20:a3:ac:cf:d8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0B47BFC94FDCEC084CD7B35536C8510E41F55130 Validity Not Before: Jan 24 03:57:22 2026 GMT Not After : Jan 27 05:16:22 2026 GMT Subject: CN=445DE339A7CE2CBB02EA0F6973828289F96AA3AE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:7f:20:b2:e5:25:c6:b5:6a:fa:05:c9:cf:8b: a5:76:8c:e8:34:df:23:54:88:0c:fe:76:6a:74:1b: dd:05:e9:bc:7b:51:78:40:a1:ec:60:2e:05:ed:08: fa:d7:92:c9:bb:31:9d:b3:43:f8:1f:a0:8b:c0:d0: 07:a8:de:6b:6c:bb:d3:cb:d0:b9:7f:b8:3f:3a:1c: f8:74:02:54:16:da:90:89:8b:56:e1:35:63:37:2f: 62:05:8a:39:86:4e:12:08:51:81:f3:72:b7:85:15: 2c:7e:36:f5:fb:1f:d0:a2:bb:05:61:bc:c4:a2:7a: 81:1e:d6:86:30:46:94:74:18:27:31:79:37:dc:75: b6:9c:8b:a7:66:df:02:94:22:6f:17:15:97:0f:d0: 12:c6:93:1e:80:c3:77:cb:fb:3d:b1:84:0d:76:c5: a4:1d:a1:ae:e2:d9:a0:e4:dd:42:28:5a:0f:ec:9e: cf:7e:37:03:8a:07:b1:9d:cf:8b:e5:d4:fb:2c:59: 93:c3:67:31:c3:c7:29:80:cc:b9:93:da:07:64:d3: ba:5b:df:d3:33:3a:b0:ef:8d:4b:b5:d7:e6:ae:e3: b5:b0:fa:e9:6a:e5:68:cb:95:81:b6:4e:73:ff:79: c6:a0:cf:b3:eb:d5:15:e7:81:8c:53:dc:07:1e:c2: e5:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:5D:E3:39:A7:CE:2C:BB:02:EA:0F:69:73:82:82:89:F9:6A:A3:AE X509v3 Authority Key Identifier: keyid:0B:47:BF:C9:4F:DC:EC:08:4C:D7:B3:55:36:C8:51:0E:41:F5:51:30 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/20f7be06-9672-4641-97bd-9bfdf955de17/0/0B47BFC94FDCEC084CD7B35536C8510E41F55130.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0B47BFC94FDCEC084CD7B35536C8510E41F55130.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/20f7be06-9672-4641-97bd-9bfdf955de17/0/0B47BFC94FDCEC084CD7B35536C8510E41F55130.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 07:ab:80:81:8f:32:52:05:c3:1c:76:3b:38:4a:5c:f8:e4:08: 25:d2:b4:04:3d:c5:fc:9a:be:3f:f6:e4:f5:3d:a7:1e:48:52: bc:eb:2c:a7:43:86:23:86:ae:b6:7e:e1:6a:f6:5b:c1:43:63: d0:06:d0:a3:43:0f:43:ce:ff:69:9e:9d:a9:56:16:ec:a6:72: 46:d0:3f:a4:81:8f:10:4b:3f:c8:f1:ab:fd:9c:68:c7:45:8e: b4:27:8c:df:c2:f4:a6:02:14:6a:cb:16:d9:0c:d7:59:34:60: cb:7d:b1:00:d5:1a:26:b8:e3:85:db:7f:2f:2c:7d:ae:ae:68: 65:ce:b5:60:8d:5b:c0:a2:a3:1c:23:bd:49:2d:5b:ae:ba:02: d2:cf:00:69:31:65:1c:71:17:b2:2c:ca:1f:26:d8:64:da:af: 6a:d1:f4:86:55:1c:5b:a8:97:9a:b1:8d:11:da:99:64:74:81: 2e:1c:ad:cf:c9:55:f3:40:e2:26:a5:0c:b2:fb:fb:78:22:c9: 4a:d6:5f:17:05:ea:9c:83:f1:29:91:ee:a1:53:20:f6:1c:bb: 59:27:51:5a:a9:28:f6:86:84:3b:e2:10:26:f5:0b:0d:93:ff: ca:af:d8:26:f7:71:72:e0:61:ab:ca:e1:c3:fc:99:bb:71:51: 51:f8:8b:49 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUBvNSj6m/+Zz8MLgBiMcsIKOsz9gwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMEI0N0JGQzk0RkRDRUMwODRDRDdCMzU1MzZDODUxMEU0 MUY1NTEzMDAeFw0yNjAxMjQwMzU3MjJaFw0yNjAxMjcwNTE2MjJaMDMxMTAvBgNV BAMTKDQ0NURFMzM5QTdDRTJDQkIwMkVBMEY2OTczODI4Mjg5Rjk2QUEzQUUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDFfyCy5SXGtWr6BcnPi6V2jOg0 3yNUiAz+dmp0G90F6bx7UXhAoexgLgXtCPrXksm7MZ2zQ/gfoIvA0Aeo3mtsu9PL 0Ll/uD86HPh0AlQW2pCJi1bhNWM3L2IFijmGThIIUYHzcreFFSx+NvX7H9CiuwVh vMSieoEe1oYwRpR0GCcxeTfcdbaci6dm3wKUIm8XFZcP0BLGkx6Aw3fL+z2xhA12 xaQdoa7i2aDk3UIoWg/sns9+NwOKB7Gdz4vl1PssWZPDZzHDxymAzLmT2gdk07pb 39MzOrDvjUu11+au47Ww+ulq5WjLlYG2TnP/ecagz7Pr1RXngYxT3AcewuUVAgMB AAGjggI8MIICODAdBgNVHQ4EFgQURF3jOafOLLsC6g9pc4KCiflqo64wHwYDVR0j BBgwFoAUC0e/yU/c7AhM17NVNshRDkH1UTAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y MGY3YmUwNi05NjcyLTQ2NDEtOTdiZC05YmZkZjk1NWRlMTcvMC8wQjQ3QkZDOTRG RENFQzA4NENEN0IzNTUzNkM4NTEwRTQxRjU1MTMwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMEI0N0JGQzk0RkRDRUMwODRDRDdCMzU1MzZDODUxMEU0MUY1 NTEzMC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMjBmN2JlMDYtOTY3Mi00NjQxLTk3 YmQtOWJmZGY5NTVkZTE3LzAvMEI0N0JGQzk0RkRDRUMwODRDRDdCMzU1MzZDODUx MEU0MUY1NTEzMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAergIGPMlIFwxx2OzhKXPjkCCXStAQ9xfya vj/25PU9px5IUrzrLKdDhiOGrrZ+4Wr2W8FDY9AG0KNDD0PO/2menalWFuymckbQ P6SBjxBLP8jxq/2caMdFjrQnjN/C9KYCFGrLFtkM11k0YMt9sQDVGia444Xbfy8s fa6uaGXOtWCNW8CioxwjvUktW666AtLPAGkxZRxxF7Isyh8m2GTar2rR9IZVHFuo l5qxjRHamWR0gS4crc/JVfNA4ialDLL7+3giyUrWXxcF6pyD8SmR7qFTIPYcu1kn UVqpKPaGhDviECb1Cw2T/8qv2Cb3cXLgYavK4cP8mbtxUVH4i0k= -----END CERTIFICATE-----Generated at Sun Jan 25 18:52:38 2026 by rpki-client