This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/222e1f3c-5a48-4f39-aac7-e012ed709d6a/0/39B4AA9B3C7F780261DC490658E62BE86B85FF3A.mft File: 39B4AA9B3C7F780261DC490658E62BE86B85FF3A.mft (raw, json) Hash identifier: Hq4BcRI54qaFM2mKAfisTp+g+XIsrJ/Zw60PSjgVa9c= Subject key identifier: 83:53:DE:10:E3:89:DC:72:B5:FB:D1:0E:BE:12:BB:2D:F6:B3:0F:73 Authority key identifier: 39:B4:AA:9B:3C:7F:78:02:61:DC:49:06:58:E6:2B:E8:6B:85:FF:3A Certificate issuer: /CN=39B4AA9B3C7F780261DC490658E62BE86B85FF3A Certificate serial: 4003B0F17BC1D160CB85AF4DA51556B4D4582BB0 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/39B4AA9B3C7F780261DC490658E62BE86B85FF3A.cer Subject info access: rsync://repo-rpki.idnic.net/repo/222e1f3c-5a48-4f39-aac7-e012ed709d6a/0/39B4AA9B3C7F780261DC490658E62BE86B85FF3A.mft Manifest number: 0D Signing time: Fri 23 Jan 2026 21:50:39 +0000 Manifest this update: Fri 23 Jan 2026 21:45:39 +0000 Manifest next update: Mon 26 Jan 2026 22:03:39 +0000 Files and hashes: 1: 323430353a326434303a39323a3a2f34382d3438203d3e203535363935.roa (hash: e44E7s4PRD9CCUk2jY7ZZ7l5t8KM/OqUwkHUrfkkOcg=) 2: 323430353a326434303a3a2f33322d3332203d3e203535363935.roa (hash: gxDcNPkVDSFdZ41agLUQg+G8pCeb+5J4nXDU0DZLJ2Q=) 3: 39B4AA9B3C7F780261DC490658E62BE86B85FF3A.crl (hash: PMApEd46+B3zFwnrq5G68FGUknvOVpIhiMTLckOFrLM=) 4: 3230322e302e39322e302f32332d3234203d3e203535363935.roa (hash: MqAwWrLiifg0NVQLvNMyPUe2lZOdrumhHENCKuLcOOQ=) 5: 3130332e32352e35342e302f32332d3234203d3e203535363935.roa (hash: 71yRknNPky7gIICGHwyWcufvVOlV/QSbdNUKr/ErIcc=) 6: 323430353a326434303a35353a3a2f34382d3438203d3e203535363935.roa (hash: rPxNyJ1z70O0nMqBth9k9AL54wxNqFDgED4SxkwBthU=) 7: 323430353a326434303a35343a3a2f34382d3438203d3e203535363935.roa (hash: FnkUHZBrG989K95SzJmPZ3VlJE7bRu6MxYgvfXPwI1I=) 8: 323430353a326434303a39333a3a2f34382d3438203d3e203535363935.roa (hash: pk+TPwqQgroDMciGoscp5z8cID/jM70gaJIC3nV7COg=) 9: 3131372e3130332e36342e302f32332d3234203d3e203535363935.roa (hash: KyBKzIQsEpd0PgxrEi5EeRSnZ5mxNIfKVnq+jHAVmuQ=) 10: 323430353a326434303a36353a3a2f34382d3438203d3e203535363935.roa (hash: xhA/2CTOIWfVDpHM1NkVlpPmJHY6UZcMtq24fqHi4DE=) 11: 323430353a326434303a36343a3a2f34382d3438203d3e203535363935.roa (hash: w6Pa9H6dXhB2Rk0qIagT2ApTDekMkBQRHE2JtUHHFYM=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/222e1f3c-5a48-4f39-aac7-e012ed709d6a/0/39B4AA9B3C7F780261DC490658E62BE86B85FF3A.crl rsync://repo-rpki.idnic.net/repo/222e1f3c-5a48-4f39-aac7-e012ed709d6a/0/39B4AA9B3C7F780261DC490658E62BE86B85FF3A.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/39B4AA9B3C7F780261DC490658E62BE86B85FF3A.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 26 Jan 2026 22:03:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 40:03:b0:f1:7b:c1:d1:60:cb:85:af:4d:a5:15:56:b4:d4:58:2b:b0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=39B4AA9B3C7F780261DC490658E62BE86B85FF3A Validity Not Before: Jan 23 21:45:39 2026 GMT Not After : Jan 26 22:03:39 2026 GMT Subject: CN=8353DE10E389DC72B5FBD10EBE12BB2DF6B30F73 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:d5:fe:35:ad:e3:cc:74:0d:b9:69:43:3a:d1: 48:fb:64:d5:b9:dd:10:e3:2a:aa:e2:ef:6e:d5:32: 45:c2:80:d3:d7:42:87:df:88:54:44:e5:c6:3c:34: b4:31:c5:61:48:1f:3d:1f:14:69:68:fa:99:58:6f: 46:80:7f:36:b7:06:82:00:ac:75:0f:36:f7:e9:c1: 9c:2d:95:95:b2:6f:a0:dc:b8:e1:28:7f:bc:35:db: 7a:14:2b:24:4b:d8:d4:a5:b6:40:1a:f0:13:f3:69: 63:ee:11:52:f5:b2:b3:4c:f4:98:15:b8:af:8c:6d: f7:cf:65:52:28:8c:b9:b2:88:e0:bb:dc:ea:31:2c: ee:0d:d6:4a:8d:e1:70:f6:b3:7b:39:6f:09:4b:1c: cb:eb:f5:cf:26:c2:d0:44:50:b2:c8:f7:a9:5b:e9: 52:02:89:75:c2:a1:05:de:52:e2:71:45:dd:00:ff: e7:e6:99:ca:ec:d9:b6:85:e6:67:71:6a:17:83:4d: 7b:bf:3a:80:fc:d4:17:c3:82:97:56:c7:b2:4f:6a: 1d:9e:1c:d4:22:75:3a:8a:a6:f5:ad:9c:38:94:49: 7c:91:74:f7:b2:78:38:a0:cc:35:ca:c9:3d:18:28: 75:ed:92:96:67:6d:4d:ac:44:db:17:08:54:51:98: 4f:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 83:53:DE:10:E3:89:DC:72:B5:FB:D1:0E:BE:12:BB:2D:F6:B3:0F:73 X509v3 Authority Key Identifier: keyid:39:B4:AA:9B:3C:7F:78:02:61:DC:49:06:58:E6:2B:E8:6B:85:FF:3A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/222e1f3c-5a48-4f39-aac7-e012ed709d6a/0/39B4AA9B3C7F780261DC490658E62BE86B85FF3A.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/39B4AA9B3C7F780261DC490658E62BE86B85FF3A.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/222e1f3c-5a48-4f39-aac7-e012ed709d6a/0/39B4AA9B3C7F780261DC490658E62BE86B85FF3A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c0:8e:46:ca:ce:49:05:6e:30:e4:79:6c:d0:31:4f:83:a9:1b: 21:c3:f7:c1:29:25:7f:c3:e2:d2:1b:90:2d:df:36:0a:94:17: 8f:d2:92:c0:ac:d5:5b:98:e3:e1:bc:1b:b2:63:e7:78:e0:3a: f5:b3:b3:97:cf:00:02:b1:69:d9:9b:d5:86:de:12:34:6d:81: 42:08:89:f3:d0:e3:c5:75:70:22:15:5e:ea:a1:2f:d9:f4:71: f2:95:36:a6:80:03:b5:49:79:ad:6f:27:68:7f:ac:7e:9a:d7: ef:df:8f:ca:14:e6:37:a7:d2:fd:f5:d7:c1:fa:8a:68:ef:35: 97:1d:27:9e:ec:a0:c0:a9:cc:76:f7:d2:db:e1:08:9d:46:91: 4b:0b:b2:3b:f7:3c:1e:d0:0b:87:fe:9f:5c:08:d1:ba:e6:71: e3:88:f1:96:3e:94:8b:6f:c9:73:98:03:11:ab:16:48:5d:77: 08:d5:2b:e2:f9:73:cd:f6:95:ab:d3:6b:11:62:3f:28:d5:54: 1e:81:18:41:20:dc:0d:e5:90:3b:20:f9:a1:6c:67:77:d5:d8: 98:f2:08:8a:d0:ef:91:fa:76:af:87:4c:f5:19:72:61:0e:f3: cd:73:d5:4b:5a:d5:2e:22:5e:d8:e9:ee:6f:0b:aa:36:25:a7: 14:ee:fa:19 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUQAOw8XvB0WDLha9NpRVWtNRYK7AwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzlCNEFBOUIzQzdGNzgwMjYxREM0OTA2NThFNjJCRTg2 Qjg1RkYzQTAeFw0yNjAxMjMyMTQ1MzlaFw0yNjAxMjYyMjAzMzlaMDMxMTAvBgNV BAMTKDgzNTNERTEwRTM4OURDNzJCNUZCRDEwRUJFMTJCQjJERjZCMzBGNzMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDc1f41rePMdA25aUM60Uj7ZNW5 3RDjKqri727VMkXCgNPXQoffiFRE5cY8NLQxxWFIHz0fFGlo+plYb0aAfza3BoIA rHUPNvfpwZwtlZWyb6DcuOEof7w123oUKyRL2NSltkAa8BPzaWPuEVL1srNM9JgV uK+MbffPZVIojLmyiOC73OoxLO4N1kqN4XD2s3s5bwlLHMvr9c8mwtBEULLI96lb 6VICiXXCoQXeUuJxRd0A/+fmmcrs2baF5mdxaheDTXu/OoD81BfDgpdWx7JPah2e HNQidTqKpvWtnDiUSXyRdPeyeDigzDXKyT0YKHXtkpZnbU2sRNsXCFRRmE9bAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUg1PeEOOJ3HK1+9EOvhK7LfazD3MwHwYDVR0j BBgwFoAUObSqmzx/eAJh3EkGWOYr6GuF/zowDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y MjJlMWYzYy01YTQ4LTRmMzktYWFjNy1lMDEyZWQ3MDlkNmEvMC8zOUI0QUE5QjND N0Y3ODAyNjFEQzQ5MDY1OEU2MkJFODZCODVGRjNBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMzlCNEFBOUIzQzdGNzgwMjYxREM0OTA2NThFNjJCRTg2Qjg1 RkYzQS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMjIyZTFmM2MtNWE0OC00ZjM5LWFh YzctZTAxMmVkNzA5ZDZhLzAvMzlCNEFBOUIzQzdGNzgwMjYxREM0OTA2NThFNjJC RTg2Qjg1RkYzQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAMCORsrOSQVuMOR5bNAxT4OpGyHD98EpJX/D 4tIbkC3fNgqUF4/SksCs1VuY4+G8G7Jj53jgOvWzs5fPAAKxadmb1YbeEjRtgUII ifPQ48V1cCIVXuqhL9n0cfKVNqaAA7VJea1vJ2h/rH6a1+/fj8oU5jen0v3118H6 imjvNZcdJ57soMCpzHb30tvhCJ1GkUsLsjv3PB7QC4f+n1wI0brmceOI8ZY+lItv yXOYAxGrFkhddwjVK+L5c832lavTaxFiPyjVVB6BGEEg3A3lkDsg+aFsZ3fV2Jjy CIrQ75H6dq+HTPUZcmEO881z1Uta1S4iXtjp7m8LqjYlpxTu+hk= -----END CERTIFICATE-----Generated at Sun Jan 25 21:34:48 2026 by rpki-client