This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/214bb4c8-6fcf-4fff-bdcc-fe1fccee1045/0/AB2FF74AE26C6B3D3C718834D700985B9160087D.mft File: AB2FF74AE26C6B3D3C718834D700985B9160087D.mft (raw, json) Hash identifier: BCPnXard4Rw9E3Q/MLwB025r6ShMgn1BLKqm5o6mjJk= Subject key identifier: 27:5B:A5:37:12:E8:FB:A4:DE:E7:A0:BC:D5:21:81:9E:79:E3:3C:1A Authority key identifier: AB:2F:F7:4A:E2:6C:6B:3D:3C:71:88:34:D7:00:98:5B:91:60:08:7D Certificate issuer: /CN=AB2FF74AE26C6B3D3C718834D700985B9160087D Certificate serial: 4422375E02C0992ADC5F8B26E901993342A04E5B Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AB2FF74AE26C6B3D3C718834D700985B9160087D.cer Subject info access: rsync://repo-rpki.idnic.net/repo/214bb4c8-6fcf-4fff-bdcc-fe1fccee1045/0/AB2FF74AE26C6B3D3C718834D700985B9160087D.mft Manifest number: 0240 Signing time: Sun 25 Jan 2026 10:50:46 +0000 Manifest this update: Sun 25 Jan 2026 10:45:46 +0000 Manifest next update: Wed 28 Jan 2026 22:18:46 +0000 Files and hashes: 1: 3130332e3138372e3136342e302f32332d3233203d3e20313439383937.roa (hash: retIejZmjxqeZ5EcuYs/MJj74Hq3rSQEAaNJNEwhn2M=) 2: 3130332e3138372e3136342e302f32342d3234203d3e20313439383937.roa (hash: 1d1jglJQYamlwXmUTi2MB59pQxl/KjaHk7dpKNXOmuU=) 3: AB2FF74AE26C6B3D3C718834D700985B9160087D.crl (hash: odIiyInZajrC2f3Rn22nFFsgYKPA7m88z9RYOkhyQgg=) 4: 3130332e3138372e3136352e302f32342d3234203d3e20313439383937.roa (hash: dgSXFEbFutIQLMHvwiuNx4TvCSZlmBK0qYA1AXK8tdM=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/214bb4c8-6fcf-4fff-bdcc-fe1fccee1045/0/AB2FF74AE26C6B3D3C718834D700985B9160087D.crl rsync://repo-rpki.idnic.net/repo/214bb4c8-6fcf-4fff-bdcc-fe1fccee1045/0/AB2FF74AE26C6B3D3C718834D700985B9160087D.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AB2FF74AE26C6B3D3C718834D700985B9160087D.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 28 Jan 2026 14:00:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 44:22:37:5e:02:c0:99:2a:dc:5f:8b:26:e9:01:99:33:42:a0:4e:5b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AB2FF74AE26C6B3D3C718834D700985B9160087D Validity Not Before: Jan 25 10:45:46 2026 GMT Not After : Jan 28 22:18:46 2026 GMT Subject: CN=275BA53712E8FBA4DEE7A0BCD521819E79E33C1A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:89:e7:45:c5:52:84:48:88:e4:53:5a:04:dd: 7f:fe:ac:57:86:de:ad:ce:c0:e9:34:e3:2d:16:8a: 79:38:dc:67:e6:93:38:9f:e7:c8:0b:29:9d:bb:05: 05:1f:e1:bc:d2:bd:6b:11:82:d9:9f:cd:e2:24:cd: 2f:2c:59:07:91:4e:ee:ec:be:09:4d:4c:ab:b1:5c: 72:f2:b2:d3:cf:f2:a7:5a:f0:84:c6:6d:d5:e1:dc: 97:3c:41:31:99:e0:56:38:aa:99:0e:30:7c:8e:3a: 72:9f:a7:cf:16:66:0c:35:d3:76:fd:47:fb:cf:f7: f2:5d:8b:ee:8c:f3:d6:71:2d:38:4b:54:9b:b0:72: ad:c4:fc:bb:6a:61:7f:a6:33:fd:d8:14:25:1e:a9: c2:f3:1d:02:7d:62:95:7e:4b:67:cb:19:52:7d:78: c6:d4:56:ce:12:60:0d:2d:1f:62:c4:c0:c8:9e:d1: e2:fd:90:b1:f5:9d:1a:8f:22:57:c2:4d:a7:ea:8e: 33:0e:4c:5c:e2:36:68:72:0b:b3:ce:62:b6:ba:b6: 3c:58:61:ad:bb:06:09:c4:5b:22:bc:3d:9c:57:87: 03:86:c6:85:d1:0e:dd:81:ee:f5:fb:e5:f5:4f:5f: 47:ef:53:a9:bc:97:72:c5:ef:2b:b8:a7:cb:f8:61: 5d:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 27:5B:A5:37:12:E8:FB:A4:DE:E7:A0:BC:D5:21:81:9E:79:E3:3C:1A X509v3 Authority Key Identifier: keyid:AB:2F:F7:4A:E2:6C:6B:3D:3C:71:88:34:D7:00:98:5B:91:60:08:7D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/214bb4c8-6fcf-4fff-bdcc-fe1fccee1045/0/AB2FF74AE26C6B3D3C718834D700985B9160087D.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AB2FF74AE26C6B3D3C718834D700985B9160087D.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/214bb4c8-6fcf-4fff-bdcc-fe1fccee1045/0/AB2FF74AE26C6B3D3C718834D700985B9160087D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c5:35:cf:76:58:3d:93:b8:33:99:22:ce:22:52:64:66:16:2d: b4:f5:fc:8d:07:39:0d:6b:74:ae:3d:fa:0d:aa:f6:72:f8:43: 02:ef:4a:df:ee:35:7c:30:9a:48:47:ad:05:25:da:67:6a:69: 3f:2b:7d:3e:84:67:3c:21:6d:42:6f:73:ca:f8:fb:d1:25:88: 9b:4f:bd:96:83:24:1f:ab:5c:f3:6d:1e:95:6c:ae:87:fc:4f: 10:38:0b:e5:e2:d9:1a:a9:8a:bf:cc:a1:ef:60:62:58:2a:ee: 82:94:05:45:60:29:90:7e:51:23:25:78:8c:33:0d:a1:04:5e: fe:22:a8:a9:ec:39:1f:d6:24:4d:39:aa:b3:9c:69:28:e3:33: 44:6e:d1:19:f0:b9:88:18:55:45:87:05:bb:db:18:09:10:59: 5d:42:12:af:3f:5a:11:6c:f3:db:4a:08:90:b3:da:6d:e0:bc: b8:94:79:e4:9f:b6:31:51:63:93:fc:ef:2c:2b:d9:67:8d:2f: 6c:cd:03:e4:a1:fd:97:a8:84:1a:de:3b:b4:10:84:63:d9:f6: ab:58:47:6e:cf:15:84:b2:1a:2c:6f:20:6a:41:a9:d5:82:a0: 5a:b3:9c:6c:bf:39:b0:e4:86:89:b1:63:98:23:10:46:f6:55: 8c:ab:0c:3a -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIURCI3XgLAmSrcX4sm6QGZM0KgTlswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUIyRkY3NEFFMjZDNkIzRDNDNzE4ODM0RDcwMDk4NUI5 MTYwMDg3RDAeFw0yNjAxMjUxMDQ1NDZaFw0yNjAxMjgyMjE4NDZaMDMxMTAvBgNV BAMTKDI3NUJBNTM3MTJFOEZCQTRERUU3QTBCQ0Q1MjE4MTlFNzlFMzNDMUEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDBiedFxVKESIjkU1oE3X/+rFeG 3q3OwOk04y0Wink43Gfmkzif58gLKZ27BQUf4bzSvWsRgtmfzeIkzS8sWQeRTu7s vglNTKuxXHLystPP8qda8ITGbdXh3Jc8QTGZ4FY4qpkOMHyOOnKfp88WZgw103b9 R/vP9/Jdi+6M89ZxLThLVJuwcq3E/LtqYX+mM/3YFCUeqcLzHQJ9YpV+S2fLGVJ9 eMbUVs4SYA0tH2LEwMie0eL9kLH1nRqPIlfCTafqjjMOTFziNmhyC7POYra6tjxY Ya27BgnEWyK8PZxXhwOGxoXRDt2B7vX75fVPX0fvU6m8l3LF7yu4p8v4YV03AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUJ1ulNxLo+6Te56C81SGBnnnjPBowHwYDVR0j BBgwFoAUqy/3SuJsaz08cYg01wCYW5FgCH0wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y MTRiYjRjOC02ZmNmLTRmZmYtYmRjYy1mZTFmY2NlZTEwNDUvMC9BQjJGRjc0QUUy NkM2QjNEM0M3MTg4MzRENzAwOTg1QjkxNjAwODdELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQUIyRkY3NEFFMjZDNkIzRDNDNzE4ODM0RDcwMDk4NUI5MTYw MDg3RC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMjE0YmI0YzgtNmZjZi00ZmZmLWJk Y2MtZmUxZmNjZWUxMDQ1LzAvQUIyRkY3NEFFMjZDNkIzRDNDNzE4ODM0RDcwMDk4 NUI5MTYwMDg3RC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAMU1z3ZYPZO4M5kiziJSZGYWLbT1/I0HOQ1r dK49+g2q9nL4QwLvSt/uNXwwmkhHrQUl2mdqaT8rfT6EZzwhbUJvc8r4+9EliJtP vZaDJB+rXPNtHpVsrof8TxA4C+Xi2Rqpir/Moe9gYlgq7oKUBUVgKZB+USMleIwz DaEEXv4iqKnsOR/WJE05qrOcaSjjM0Ru0RnwuYgYVUWHBbvbGAkQWV1CEq8/WhFs 89tKCJCz2m3gvLiUeeSftjFRY5P87ywr2WeNL2zNA+Sh/ZeohBreO7QQhGPZ9qtY R27PFYSyGixvIGpBqdWCoFqznGy/ObDkhomxY5gjEEb2VYyrDDo= -----END CERTIFICATE-----Generated at Sun Jan 25 23:08:55 2026 by rpki-client