This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/24ba6778-b16d-4ba8-984f-34e419fc9c49/0/314988A79F2A522D2ED1D4AC99C4ABDFDCDBB400.mft File: 314988A79F2A522D2ED1D4AC99C4ABDFDCDBB400.mft (raw, json) Hash identifier: 45laamS/RWYZJsxZObQooSCMgqtBYltV/ALbYmBnIyY= Subject key identifier: 5A:9D:B6:8D:1A:85:F9:74:35:97:B8:49:82:EB:23:4C:76:5F:82:57 Authority key identifier: 31:49:88:A7:9F:2A:52:2D:2E:D1:D4:AC:99:C4:AB:DF:DC:DB:B4:00 Certificate issuer: /CN=314988A79F2A522D2ED1D4AC99C4ABDFDCDBB400 Certificate serial: 044E00CC9B95610D706A96AB6196FCA246514DFD Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/314988A79F2A522D2ED1D4AC99C4ABDFDCDBB400.cer Subject info access: rsync://repo-rpki.idnic.net/repo/24ba6778-b16d-4ba8-984f-34e419fc9c49/0/314988A79F2A522D2ED1D4AC99C4ABDFDCDBB400.mft Manifest number: 01C9 Signing time: Sat 24 Jan 2026 13:10:39 +0000 Manifest this update: Sat 24 Jan 2026 13:05:39 +0000 Manifest next update: Tue 27 Jan 2026 13:23:39 +0000 Files and hashes: 1: 323430373a373234303a3a2f33322d3438203d3e203538383230.roa (hash: 1wh8FEeGWVS9WrnN9jZRNRfkzt0zUBWTKFS3jSYx5Ps=) 2: 314988A79F2A522D2ED1D4AC99C4ABDFDCDBB400.crl (hash: ujPdodpKtFdixDkuI//8h/qtGaibEoEChSMSMQnJtJ4=) 3: 323430373a373234303a3a2f33322d3332203d3e203538383230.roa (hash: HLX3aFGkhTTF59aMcv9G2ZkMKwAOSmi1mZ83DZAbPPc=) 4: 3130332e3135322e3234322e302f32332d3234203d3e20313339343536.roa (hash: 89pUQxfl5rXIPDrZqajzc7VGVg5FDLEc5hZANvDFm/0=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/24ba6778-b16d-4ba8-984f-34e419fc9c49/0/314988A79F2A522D2ED1D4AC99C4ABDFDCDBB400.crl rsync://repo-rpki.idnic.net/repo/24ba6778-b16d-4ba8-984f-34e419fc9c49/0/314988A79F2A522D2ED1D4AC99C4ABDFDCDBB400.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/314988A79F2A522D2ED1D4AC99C4ABDFDCDBB400.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 27 Jan 2026 13:23:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 04:4e:00:cc:9b:95:61:0d:70:6a:96:ab:61:96:fc:a2:46:51:4d:fd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=314988A79F2A522D2ED1D4AC99C4ABDFDCDBB400 Validity Not Before: Jan 24 13:05:39 2026 GMT Not After : Jan 27 13:23:39 2026 GMT Subject: CN=5A9DB68D1A85F9743597B84982EB234C765F8257 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:81:df:d9:41:75:4b:a9:5a:93:29:88:96:6c: 4b:6a:01:56:7d:98:af:de:a9:85:c2:b4:cc:53:a9: 3c:89:e7:2f:fb:64:7d:28:84:9e:c5:55:f6:28:2f: b0:f4:cc:b4:12:46:9b:8c:c0:f6:3b:76:40:94:81: 04:37:b1:1c:0b:62:6d:be:fc:8b:75:3b:fc:2a:87: 5c:34:d2:ef:f6:c1:f7:e6:5c:3e:2e:5f:44:6d:4a: f9:03:66:48:aa:0a:dd:e4:f8:58:5d:fd:a1:24:1a: 4e:38:d2:0e:7a:b0:72:fe:8c:e3:69:a2:9c:72:b1: 26:48:4f:12:7e:01:ca:73:f1:88:c3:45:0f:5e:c8: 5c:5a:5b:cc:4e:65:53:00:4e:a2:9e:6b:f9:4e:bd: 65:bc:74:01:55:a5:aa:22:98:56:8b:8d:71:c3:e1: dd:90:11:01:45:d0:d5:e0:87:2f:78:cc:30:b5:06: d7:a5:2c:10:44:d3:ae:49:f4:1e:34:a4:63:a4:12: 66:23:f6:dc:a4:c2:8d:17:97:70:41:76:34:4c:d8: 22:31:53:e2:ca:39:7a:da:b4:53:80:de:74:ce:ad: fa:93:46:39:97:b7:17:d8:c7:bd:63:09:ca:f8:58: 0a:33:bd:ab:7b:6a:04:30:eb:ba:6d:70:cb:d6:4f: d9:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:9D:B6:8D:1A:85:F9:74:35:97:B8:49:82:EB:23:4C:76:5F:82:57 X509v3 Authority Key Identifier: keyid:31:49:88:A7:9F:2A:52:2D:2E:D1:D4:AC:99:C4:AB:DF:DC:DB:B4:00 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/24ba6778-b16d-4ba8-984f-34e419fc9c49/0/314988A79F2A522D2ED1D4AC99C4ABDFDCDBB400.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/314988A79F2A522D2ED1D4AC99C4ABDFDCDBB400.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/24ba6778-b16d-4ba8-984f-34e419fc9c49/0/314988A79F2A522D2ED1D4AC99C4ABDFDCDBB400.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 96:04:5f:2a:9b:5b:c5:1d:ca:24:01:a1:51:66:6b:49:4f:1d: 7b:71:99:c5:1c:90:bf:89:33:46:38:2e:86:d3:1c:97:bf:c3: 16:80:b7:50:e4:ed:f1:17:c5:0f:2d:69:1f:81:92:59:47:d4: 6c:db:54:37:3d:19:3e:e0:c3:ec:5a:34:48:b1:9e:46:46:83: 37:64:73:ef:d6:77:76:4e:b0:33:aa:07:a6:50:c7:1d:ff:5a: d2:6c:4c:f3:f6:c4:5a:f2:c4:d3:33:d4:e2:05:e1:62:d2:b6: 1d:b1:11:18:a5:06:2a:44:c7:a3:ec:67:d1:9d:9b:d6:2b:4f: f3:52:85:ec:81:50:e6:f6:21:10:21:3f:92:be:c9:57:5d:a8: 37:8b:55:eb:1e:ff:24:39:44:44:d0:33:6e:2b:fb:f4:68:9a: da:5c:ab:f9:9b:f2:e5:e3:ad:86:d3:93:c7:1b:37:d0:ad:e2: 4a:ce:25:e3:40:e3:ac:cb:61:8e:8c:44:35:a5:15:26:50:ed: f8:81:0d:a8:58:b8:12:c5:66:3f:6d:f6:c4:ea:66:b3:7c:c1: 2a:65:eb:d4:f5:aa:67:b3:e1:40:50:fc:ce:52:af:62:8b:53: f7:22:57:31:69:74:d7:3c:36:53:25:88:4d:38:03:5b:56:bd: 48:a5:15:0b -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUBE4AzJuVYQ1waparYZb8okZRTf0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzE0OTg4QTc5RjJBNTIyRDJFRDFENEFDOTlDNEFCREZE Q0RCQjQwMDAeFw0yNjAxMjQxMzA1MzlaFw0yNjAxMjcxMzIzMzlaMDMxMTAvBgNV BAMTKDVBOURCNjhEMUE4NUY5NzQzNTk3Qjg0OTgyRUIyMzRDNzY1RjgyNTcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC3gd/ZQXVLqVqTKYiWbEtqAVZ9 mK/eqYXCtMxTqTyJ5y/7ZH0ohJ7FVfYoL7D0zLQSRpuMwPY7dkCUgQQ3sRwLYm2+ /It1O/wqh1w00u/2wffmXD4uX0RtSvkDZkiqCt3k+Fhd/aEkGk440g56sHL+jONp opxysSZITxJ+Acpz8YjDRQ9eyFxaW8xOZVMATqKea/lOvWW8dAFVpaoimFaLjXHD 4d2QEQFF0NXghy94zDC1BtelLBBE065J9B40pGOkEmYj9tykwo0Xl3BBdjRM2CIx U+LKOXratFOA3nTOrfqTRjmXtxfYx71jCcr4WAozvat7agQw67ptcMvWT9mTAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUWp22jRqF+XQ1l7hJgusjTHZfglcwHwYDVR0j BBgwFoAUMUmIp58qUi0u0dSsmcSr39zbtAAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y NGJhNjc3OC1iMTZkLTRiYTgtOTg0Zi0zNGU0MTlmYzljNDkvMC8zMTQ5ODhBNzlG MkE1MjJEMkVEMUQ0QUM5OUM0QUJERkRDREJCNDAwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMzE0OTg4QTc5RjJBNTIyRDJFRDFENEFDOTlDNEFCREZEQ0RC QjQwMC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMjRiYTY3NzgtYjE2ZC00YmE4LTk4 NGYtMzRlNDE5ZmM5YzQ5LzAvMzE0OTg4QTc5RjJBNTIyRDJFRDFENEFDOTlDNEFC REZEQ0RCQjQwMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJYEXyqbW8UdyiQBoVFma0lPHXtxmcUckL+J M0Y4LobTHJe/wxaAt1Dk7fEXxQ8taR+BkllH1GzbVDc9GT7gw+xaNEixnkZGgzdk c+/Wd3ZOsDOqB6ZQxx3/WtJsTPP2xFryxNMz1OIF4WLSth2xERilBipEx6PsZ9Gd m9YrT/NSheyBUOb2IRAhP5K+yVddqDeLVese/yQ5RETQM24r+/Romtpcq/mb8uXj rYbTk8cbN9Ct4krOJeNA46zLYY6MRDWlFSZQ7fiBDahYuBLFZj9t9sTqZrN8wSpl 69T1qmez4UBQ/M5Sr2KLU/ciVzFpdNc8NlMliE04A1tWvUilFQs= -----END CERTIFICATE-----Generated at Mon Jan 26 02:25:25 2026 by rpki-client