This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/28c77eee-9bcc-401e-8f4d-5f2367562757/0/A0F4AEBBE045B09C16953782AF306D83B0DC97D3.mft File: A0F4AEBBE045B09C16953782AF306D83B0DC97D3.mft (raw, json) Hash identifier: IHVCFfHxFvfw6da+OOzbqLbw7INcPivvG7ObN6hjlfA= Subject key identifier: FB:00:32:E4:70:97:A6:B4:95:4C:D3:3A:AA:5E:60:18:9D:50:33:EE Authority key identifier: A0:F4:AE:BB:E0:45:B0:9C:16:95:37:82:AF:30:6D:83:B0:DC:97:D3 Certificate issuer: /CN=A0F4AEBBE045B09C16953782AF306D83B0DC97D3 Certificate serial: 076BD106941EDBB6A6313CB0E2AF1EE7536275D9 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A0F4AEBBE045B09C16953782AF306D83B0DC97D3.cer Subject info access: rsync://repo-rpki.idnic.net/repo/28c77eee-9bcc-401e-8f4d-5f2367562757/0/A0F4AEBBE045B09C16953782AF306D83B0DC97D3.mft Manifest number: 0147 Signing time: Sun 25 Jan 2026 19:41:43 +0000 Manifest this update: Sun 25 Jan 2026 19:36:43 +0000 Manifest next update: Thu 29 Jan 2026 05:05:43 +0000 Files and hashes: 1: 3130332e36392e3137372e302f32342d3234203d3e20313335343435.roa (hash: 8wVvZn6TdyEta8KM95M6qxv5XCPK3Bm1E8tMF9AMcYg=) 2: A0F4AEBBE045B09C16953782AF306D83B0DC97D3.crl (hash: xYFgOYiIwVwUSm2cTs7rbD3bBOm6UtXq5yVqg3AhgWc=) 3: 3130332e36392e3137382e302f32342d3234203d3e20313335343435.roa (hash: zCYjwxgZ867W/EI9SnSmu6GjUVsEp2wVBcfDMkUB7j0=) 4: 3130332e36392e3137392e302f32342d3234203d3e203538383136.roa (hash: 3XW5v6NcQz8RKPweviOYY6B66bC0rE9q/PzBCcjDk6M=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/28c77eee-9bcc-401e-8f4d-5f2367562757/0/A0F4AEBBE045B09C16953782AF306D83B0DC97D3.crl rsync://repo-rpki.idnic.net/repo/28c77eee-9bcc-401e-8f4d-5f2367562757/0/A0F4AEBBE045B09C16953782AF306D83B0DC97D3.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A0F4AEBBE045B09C16953782AF306D83B0DC97D3.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 28 Jan 2026 14:00:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 07:6b:d1:06:94:1e:db:b6:a6:31:3c:b0:e2:af:1e:e7:53:62:75:d9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A0F4AEBBE045B09C16953782AF306D83B0DC97D3 Validity Not Before: Jan 25 19:36:43 2026 GMT Not After : Jan 29 05:05:43 2026 GMT Subject: CN=FB0032E47097A6B4954CD33AAA5E60189D5033EE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:41:33:6b:33:b3:3a:45:91:60:6c:f9:50:a9: 0b:41:ea:f1:46:42:0f:d3:45:c4:63:6a:d5:fd:ff: f8:b8:f8:d3:ea:97:07:41:7a:04:3c:57:94:66:a9: 2e:33:f9:44:61:2f:a2:4e:a7:9a:53:c1:e1:a9:8d: 1f:20:cc:6e:88:be:c6:ee:ec:18:3c:21:61:a1:aa: bc:48:a4:4b:ce:e5:fd:b2:80:b1:c8:ac:bc:1d:36: e2:0b:37:a2:12:ef:b0:79:83:87:4a:e3:28:a8:df: 81:4b:82:93:00:b8:be:b8:b1:8c:08:82:8d:59:11: 96:0c:3c:b4:83:0c:d6:ed:8b:50:e4:89:7b:e3:11: 80:40:b8:e5:8b:7d:d6:f9:3b:29:c4:ed:be:50:83: 77:3d:22:9c:0c:02:df:d5:6d:02:34:09:55:e8:0f: 69:9a:54:86:02:7a:69:78:f0:b1:1c:46:c6:07:5e: ea:fe:44:7f:7a:d2:b7:e2:6f:a4:f5:8f:70:45:c3: f2:6a:ff:ef:8c:82:be:17:01:d5:c9:6c:00:69:34: d8:30:a3:d4:27:5c:75:56:8c:ea:d9:a6:b7:ad:f9: 6a:f1:7e:48:7f:6e:00:89:be:30:ee:b2:9c:eb:d7: 14:23:c2:eb:18:9b:c9:77:b0:0e:00:f8:d0:66:7c: ff:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FB:00:32:E4:70:97:A6:B4:95:4C:D3:3A:AA:5E:60:18:9D:50:33:EE X509v3 Authority Key Identifier: keyid:A0:F4:AE:BB:E0:45:B0:9C:16:95:37:82:AF:30:6D:83:B0:DC:97:D3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/28c77eee-9bcc-401e-8f4d-5f2367562757/0/A0F4AEBBE045B09C16953782AF306D83B0DC97D3.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A0F4AEBBE045B09C16953782AF306D83B0DC97D3.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/28c77eee-9bcc-401e-8f4d-5f2367562757/0/A0F4AEBBE045B09C16953782AF306D83B0DC97D3.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 47:32:55:45:a1:54:fa:63:2f:d5:91:09:4a:63:7c:bb:af:55: e9:08:c3:da:c1:b4:a1:8f:2e:73:88:6a:9b:7c:30:28:1d:e6: 09:0f:27:ec:7c:5a:65:9a:73:ab:47:3a:5f:03:fa:f0:df:f9: 17:b7:f9:27:9d:c3:88:cb:1c:72:33:87:ec:7c:59:37:e8:77: 02:36:7d:88:8d:58:da:fa:a9:c4:17:a3:64:d8:56:0c:aa:ee: ef:f1:25:b7:fc:1f:78:d1:9f:98:5c:f6:38:00:50:32:b0:ee: 6e:09:7d:16:7d:96:7c:6e:e0:bd:b3:8f:91:ce:aa:f9:08:06: 13:d2:64:b2:2f:2c:dc:22:f7:25:6c:3e:47:04:77:6a:2e:19: 9a:39:b5:24:aa:54:0e:85:95:89:7b:5b:dc:03:d6:bb:e8:1d: 56:a6:03:e7:30:59:84:ad:bf:fd:7d:92:8c:8d:29:4e:ba:38: 40:3d:f7:fc:2a:e5:65:98:5e:70:45:1c:22:bd:75:58:71:1f: 82:c1:aa:69:b9:50:4e:c3:d7:dc:8c:69:dc:c0:b4:b1:a0:09: 4d:a5:2b:ab:ef:39:e0:ee:8d:67:fe:7c:10:c9:9c:fc:2a:3a: 91:f3:78:d8:e2:23:7f:5d:9a:5d:3a:cf:14:c8:8d:8b:a3:95: 00:4c:1f:ea -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUB2vRBpQe27amMTyw4q8e51NiddkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTBGNEFFQkJFMDQ1QjA5QzE2OTUzNzgyQUYzMDZEODNC MERDOTdEMzAeFw0yNjAxMjUxOTM2NDNaFw0yNjAxMjkwNTA1NDNaMDMxMTAvBgNV BAMTKEZCMDAzMkU0NzA5N0E2QjQ5NTRDRDMzQUFBNUU2MDE4OUQ1MDMzRUUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDqQTNrM7M6RZFgbPlQqQtB6vFG Qg/TRcRjatX9//i4+NPqlwdBegQ8V5RmqS4z+URhL6JOp5pTweGpjR8gzG6Ivsbu 7Bg8IWGhqrxIpEvO5f2ygLHIrLwdNuILN6IS77B5g4dK4yio34FLgpMAuL64sYwI go1ZEZYMPLSDDNbti1DkiXvjEYBAuOWLfdb5OynE7b5Qg3c9IpwMAt/VbQI0CVXo D2maVIYCeml48LEcRsYHXur+RH960rfib6T1j3BFw/Jq/++Mgr4XAdXJbABpNNgw o9QnXHVWjOrZpret+Wrxfkh/bgCJvjDuspzr1xQjwusYm8l3sA4A+NBmfP9zAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU+wAy5HCXprSVTNM6ql5gGJ1QM+4wHwYDVR0j BBgwFoAUoPSuu+BFsJwWlTeCrzBtg7Dcl9MwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y OGM3N2VlZS05YmNjLTQwMWUtOGY0ZC01ZjIzNjc1NjI3NTcvMC9BMEY0QUVCQkUw NDVCMDlDMTY5NTM3ODJBRjMwNkQ4M0IwREM5N0QzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQTBGNEFFQkJFMDQ1QjA5QzE2OTUzNzgyQUYzMDZEODNCMERD OTdEMy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMjhjNzdlZWUtOWJjYy00MDFlLThm NGQtNWYyMzY3NTYyNzU3LzAvQTBGNEFFQkJFMDQ1QjA5QzE2OTUzNzgyQUYzMDZE ODNCMERDOTdEMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEcyVUWhVPpjL9WRCUpjfLuvVekIw9rBtKGP LnOIapt8MCgd5gkPJ+x8WmWac6tHOl8D+vDf+Re3+Sedw4jLHHIzh+x8WTfodwI2 fYiNWNr6qcQXo2TYVgyq7u/xJbf8H3jRn5hc9jgAUDKw7m4JfRZ9lnxu4L2zj5HO qvkIBhPSZLIvLNwi9yVsPkcEd2ouGZo5tSSqVA6FlYl7W9wD1rvoHVamA+cwWYSt v/19koyNKU66OEA99/wq5WWYXnBFHCK9dVhxH4LBqmm5UE7D19yMadzAtLGgCU2l K6vvOeDujWf+fBDJnPwqOpHzeNjiI39dml06zxTIjYujlQBMH+o= -----END CERTIFICATE-----Generated at Mon Jan 26 01:11:39 2026 by rpki-client