This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/285243e5-c660-4112-bdc3-594412dedc4d/0/D29ED5B5FC4DBFFE447DDD022C0D01EB00BA8F14.mft File: D29ED5B5FC4DBFFE447DDD022C0D01EB00BA8F14.mft (raw, json) Hash identifier: E5acRlBeistkKLHQbOWMimGhVbKkeggZ6olNQyJNqCs= Subject key identifier: 19:7D:CC:85:BA:82:15:98:B6:FF:4E:F6:04:F3:29:80:49:EE:A6:D0 Authority key identifier: D2:9E:D5:B5:FC:4D:BF:FE:44:7D:DD:02:2C:0D:01:EB:00:BA:8F:14 Certificate issuer: /CN=D29ED5B5FC4DBFFE447DDD022C0D01EB00BA8F14 Certificate serial: 1CA4216AA3C5D315D3B721577BBBE22B124C1B43 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D29ED5B5FC4DBFFE447DDD022C0D01EB00BA8F14.cer Subject info access: rsync://repo-rpki.idnic.net/repo/285243e5-c660-4112-bdc3-594412dedc4d/0/D29ED5B5FC4DBFFE447DDD022C0D01EB00BA8F14.mft Manifest number: 0285 Signing time: Sat 24 Jan 2026 16:02:21 +0000 Manifest this update: Sat 24 Jan 2026 15:57:21 +0000 Manifest next update: Tue 27 Jan 2026 17:29:21 +0000 Files and hashes: 1: 3130332e3138312e3235322e302f32332d3234203d3e20313439333838.roa (hash: +6hr9I24K4H44FcYhHYBXgx5KKaUgX1+M7GrBEyUPNA=) 2: 323030313a6466303a376163303a3a2f34382d3438203d3e20313439333838.roa (hash: i+MoEz8eS3RKxf5DE+oBdBXLAZikYN1wJCHUVs+azh0=) 3: D29ED5B5FC4DBFFE447DDD022C0D01EB00BA8F14.crl (hash: Sz7lBwKFXrqhpA8SA+mMg/HQLIO8FPzTemUaHHd1oOQ=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/285243e5-c660-4112-bdc3-594412dedc4d/0/D29ED5B5FC4DBFFE447DDD022C0D01EB00BA8F14.crl rsync://repo-rpki.idnic.net/repo/285243e5-c660-4112-bdc3-594412dedc4d/0/D29ED5B5FC4DBFFE447DDD022C0D01EB00BA8F14.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D29ED5B5FC4DBFFE447DDD022C0D01EB00BA8F14.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 27 Jan 2026 17:29:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1c:a4:21:6a:a3:c5:d3:15:d3:b7:21:57:7b:bb:e2:2b:12:4c:1b:43 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D29ED5B5FC4DBFFE447DDD022C0D01EB00BA8F14 Validity Not Before: Jan 24 15:57:21 2026 GMT Not After : Jan 27 17:29:21 2026 GMT Subject: CN=197DCC85BA821598B6FF4EF604F3298049EEA6D0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f6:50:c3:dc:d9:03:44:71:c8:78:33:f5:12:12: b2:27:0a:1f:1c:de:29:d1:5d:01:e2:2c:0b:f8:45: cd:ac:8d:eb:8c:65:1a:8b:63:06:28:6b:09:00:75: 3c:1d:81:29:40:30:1e:8b:7f:ad:52:ee:35:45:49: 7d:bf:c1:86:8b:8b:48:0c:9b:4d:86:dd:0c:4d:f7: 16:1a:66:dc:f1:fc:91:31:9b:4d:16:a9:35:64:b0: 0c:00:1d:b9:7a:e1:bf:51:b5:44:fa:bd:e1:46:85: c3:c8:91:90:e5:83:85:80:82:47:60:4b:5e:67:e7: 23:f5:18:e8:1a:a2:2f:9a:64:fb:cc:b7:7b:bf:55: ef:7e:72:4b:83:fc:a6:68:f2:93:91:c5:21:62:ba: 3b:d6:b7:6b:04:a6:32:16:11:dd:c9:e4:ce:fa:b9: d0:bc:7b:5f:48:fa:0d:da:c9:40:67:cf:73:37:4b: a1:9b:55:46:05:76:d2:5f:6e:21:59:eb:ab:66:40: 8d:51:e2:a4:6f:1b:af:c0:dd:9d:fb:06:d7:1f:81: 0c:2d:2b:86:e0:6c:f1:fa:f3:1b:64:25:9b:1d:50: 7a:85:d9:8f:20:d6:32:83:42:07:43:b4:5d:52:c4: 82:3a:4a:1a:47:8e:b4:d1:fa:29:e0:e0:2f:f7:c3: 48:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 19:7D:CC:85:BA:82:15:98:B6:FF:4E:F6:04:F3:29:80:49:EE:A6:D0 X509v3 Authority Key Identifier: keyid:D2:9E:D5:B5:FC:4D:BF:FE:44:7D:DD:02:2C:0D:01:EB:00:BA:8F:14 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/285243e5-c660-4112-bdc3-594412dedc4d/0/D29ED5B5FC4DBFFE447DDD022C0D01EB00BA8F14.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D29ED5B5FC4DBFFE447DDD022C0D01EB00BA8F14.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/285243e5-c660-4112-bdc3-594412dedc4d/0/D29ED5B5FC4DBFFE447DDD022C0D01EB00BA8F14.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1f:ea:af:15:38:45:61:bc:6a:4c:53:44:4e:da:76:d2:1d:7c: 81:56:f4:0f:d9:b1:44:43:81:fc:a7:9c:0c:9d:78:27:bc:a1: 00:68:ce:d7:39:fa:4b:24:74:01:cf:ed:f7:aa:61:00:66:81: d2:b6:e0:84:cc:be:9b:a7:07:ed:ec:00:19:75:ec:92:31:b6: 84:ec:fc:bd:45:3d:a2:9a:57:97:3d:cb:83:7c:c3:6b:0b:74: 89:58:1b:74:5c:ac:dd:e2:3a:56:d1:2d:da:e5:46:93:58:47: 42:46:34:5a:0c:d7:9a:ed:aa:d7:c8:f7:0f:39:d9:86:56:c0: 7c:fc:ef:35:7f:78:ed:da:db:2a:d0:b9:66:6c:a0:1d:08:a9: c9:4f:0b:b6:b2:41:2e:3b:33:1d:e6:a2:db:61:92:54:3d:c2: 52:a8:76:14:ac:ac:db:16:a0:88:a6:27:8d:52:2f:2c:fe:ce: 85:46:06:a9:34:5b:ef:b2:50:9c:ec:18:fe:c8:5e:b8:82:e6: dd:03:b6:b3:0a:8c:82:57:74:d9:73:16:23:22:5e:fb:9e:28: f2:c3:46:c7:25:ab:a2:5f:b2:29:f0:09:a6:ff:1f:aa:0e:2e: 2b:ed:55:a0:18:02:d5:a2:d9:d1:74:a3:e0:e6:75:ca:98:59: 9f:9b:d6:08 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUHKQhaqPF0xXTtyFXe7viKxJMG0MwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDI5RUQ1QjVGQzREQkZGRTQ0N0RERDAyMkMwRDAxRUIw MEJBOEYxNDAeFw0yNjAxMjQxNTU3MjFaFw0yNjAxMjcxNzI5MjFaMDMxMTAvBgNV BAMTKDE5N0RDQzg1QkE4MjE1OThCNkZGNEVGNjA0RjMyOTgwNDlFRUE2RDAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD2UMPc2QNEcch4M/USErInCh8c 3inRXQHiLAv4Rc2sjeuMZRqLYwYoawkAdTwdgSlAMB6Lf61S7jVFSX2/wYaLi0gM m02G3QxN9xYaZtzx/JExm00WqTVksAwAHbl64b9RtUT6veFGhcPIkZDlg4WAgkdg S15n5yP1GOgaoi+aZPvMt3u/Ve9+ckuD/KZo8pORxSFiujvWt2sEpjIWEd3J5M76 udC8e19I+g3ayUBnz3M3S6GbVUYFdtJfbiFZ66tmQI1R4qRvG6/A3Z37BtcfgQwt K4bgbPH68xtkJZsdUHqF2Y8g1jKDQgdDtF1SxII6ShpHjrTR+ing4C/3w0jtAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUGX3MhbqCFZi2/072BPMpgEnuptAwHwYDVR0j BBgwFoAU0p7VtfxNv/5Efd0CLA0B6wC6jxQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y ODUyNDNlNS1jNjYwLTQxMTItYmRjMy01OTQ0MTJkZWRjNGQvMC9EMjlFRDVCNUZD NERCRkZFNDQ3REREMDIyQzBEMDFFQjAwQkE4RjE0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRDI5RUQ1QjVGQzREQkZGRTQ0N0RERDAyMkMwRDAxRUIwMEJB OEYxNC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMjg1MjQzZTUtYzY2MC00MTEyLWJk YzMtNTk0NDEyZGVkYzRkLzAvRDI5RUQ1QjVGQzREQkZGRTQ0N0RERDAyMkMwRDAx RUIwMEJBOEYxNC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAB/qrxU4RWG8akxTRE7adtIdfIFW9A/ZsURD gfynnAydeCe8oQBoztc5+kskdAHP7feqYQBmgdK24ITMvpunB+3sABl17JIxtoTs /L1FPaKaV5c9y4N8w2sLdIlYG3RcrN3iOlbRLdrlRpNYR0JGNFoM15rtqtfI9w85 2YZWwHz87zV/eO3a2yrQuWZsoB0IqclPC7ayQS47Mx3motthklQ9wlKodhSsrNsW oIimJ41SLyz+zoVGBqk0W++yUJzsGP7IXriC5t0DtrMKjIJXdNlzFiMiXvueKPLD Rsclq6JfsinwCab/H6oOLivtVaAYAtWi2dF0o+DmdcqYWZ+b1gg= -----END CERTIFICATE-----Generated at Sun Jan 25 22:00:31 2026 by rpki-client