This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/2a5341e8-22d8-449c-a753-e47bbfc48538/0/2D9D9137D4427A9D34E1B15F16C5C689A8C549D9.mft File: 2D9D9137D4427A9D34E1B15F16C5C689A8C549D9.mft (raw, json) Hash identifier: AZVBfMO9k3UbJAPgEA1528Uyai4irR2b+IwTvWOToTs= Subject key identifier: 5F:85:BB:8C:38:CE:70:CA:F3:0B:F1:04:29:18:2C:46:2E:69:E5:A8 Authority key identifier: 2D:9D:91:37:D4:42:7A:9D:34:E1:B1:5F:16:C5:C6:89:A8:C5:49:D9 Certificate issuer: /CN=2D9D9137D4427A9D34E1B15F16C5C689A8C549D9 Certificate serial: 33300769C319B3853A899D13396EC30148132120 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2D9D9137D4427A9D34E1B15F16C5C689A8C549D9.cer Subject info access: rsync://repo-rpki.idnic.net/repo/2a5341e8-22d8-449c-a753-e47bbfc48538/0/2D9D9137D4427A9D34E1B15F16C5C689A8C549D9.mft Manifest number: 0545 Signing time: Sat 24 Jan 2026 05:41:27 +0000 Manifest this update: Sat 24 Jan 2026 05:36:27 +0000 Manifest next update: Tue 27 Jan 2026 16:21:27 +0000 Files and hashes: 1: 3130332e3134342e3130322e302f32342d3234203d3e20313339343231.roa (hash: bV9xBqFWWdQNpl4xPPj/IRLaOQzWewk+JeafEOq6H8g=) 2: 2D9D9137D4427A9D34E1B15F16C5C689A8C549D9.crl (hash: NQenLmd3sRv0YNRvsrl0SOvvROw60G6T2t2N8vRHoa8=) 3: 3130332e3134342e3130332e302f32342d3234203d3e20313339343231.roa (hash: /ZqmuN0x+ZwpTTLsOK93bf5aWydgNNzXSi3NS4bqhi0=) 4: 3130332e3134342e3130322e302f32332d3234203d3e20313339343231.roa (hash: cdpLxSADx6mq88cWkf5UoxPyeajYM3Kq/Bc+NW2yaec=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/2a5341e8-22d8-449c-a753-e47bbfc48538/0/2D9D9137D4427A9D34E1B15F16C5C689A8C549D9.crl rsync://repo-rpki.idnic.net/repo/2a5341e8-22d8-449c-a753-e47bbfc48538/0/2D9D9137D4427A9D34E1B15F16C5C689A8C549D9.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2D9D9137D4427A9D34E1B15F16C5C689A8C549D9.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 27 Jan 2026 16:21:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 33:30:07:69:c3:19:b3:85:3a:89:9d:13:39:6e:c3:01:48:13:21:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2D9D9137D4427A9D34E1B15F16C5C689A8C549D9 Validity Not Before: Jan 24 05:36:27 2026 GMT Not After : Jan 27 16:21:27 2026 GMT Subject: CN=5F85BB8C38CE70CAF30BF10429182C462E69E5A8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:71:20:a1:76:5e:6e:1f:17:e0:34:d4:c4:5c: c0:6f:e0:a4:32:7b:3e:ef:09:13:ce:e1:ff:c3:48: c3:48:72:e5:ca:9d:fd:be:19:65:ea:73:77:0d:f5: 18:67:1c:bf:49:f3:19:ea:a1:a6:e0:24:cc:f9:86: 8a:29:08:15:e0:9f:5b:5b:e0:97:dd:72:c7:30:1c: e5:1b:54:0d:d2:db:22:74:6a:e7:ce:68:b6:dc:6f: e3:f8:51:9c:20:31:73:b2:dc:4d:3a:52:89:2e:2d: 86:50:66:25:bf:53:64:4e:43:6f:d0:88:38:52:f2: c8:e2:83:a0:75:54:50:a8:c1:07:22:28:66:23:ce: 37:81:c6:0b:f4:20:61:54:26:0a:f0:9e:17:cc:db: a9:e7:39:d1:ef:81:4a:14:66:7c:98:87:e3:13:87: a9:ae:d7:76:db:6e:17:be:0c:bb:72:7b:38:03:50: 3d:2e:ed:6d:e6:c1:82:d7:1e:37:97:51:9a:bd:99: 90:96:0c:12:59:9d:f9:0c:81:6d:0b:0f:a9:13:8e: e3:4d:97:e3:69:77:c9:9c:ff:64:46:cb:a1:38:d9: ae:5e:73:5c:8b:51:9b:0e:c1:71:fe:1a:0c:00:58: e6:22:b9:99:75:4c:52:8b:2e:01:77:56:96:de:65: ad:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:85:BB:8C:38:CE:70:CA:F3:0B:F1:04:29:18:2C:46:2E:69:E5:A8 X509v3 Authority Key Identifier: keyid:2D:9D:91:37:D4:42:7A:9D:34:E1:B1:5F:16:C5:C6:89:A8:C5:49:D9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/2a5341e8-22d8-449c-a753-e47bbfc48538/0/2D9D9137D4427A9D34E1B15F16C5C689A8C549D9.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2D9D9137D4427A9D34E1B15F16C5C689A8C549D9.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/2a5341e8-22d8-449c-a753-e47bbfc48538/0/2D9D9137D4427A9D34E1B15F16C5C689A8C549D9.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5a:44:1f:ff:50:d3:cb:cc:6a:38:92:16:ef:1d:e3:a8:d8:f7: c6:ee:de:98:81:f6:ba:bf:1f:6a:9e:41:ea:39:53:a9:3d:c6: 4c:c0:d9:73:95:be:92:1a:24:06:6e:57:4e:e9:51:60:b5:aa: 3e:01:54:5c:e3:dd:48:50:a8:38:9e:8a:95:8b:e2:4e:c1:62: 3d:64:f6:d3:86:2a:4c:86:98:8b:b3:c6:da:11:6f:f0:83:c6: b7:eb:3b:b6:22:ed:8e:13:45:9d:17:b5:3a:d5:1f:9b:5b:df: ea:fb:2c:88:c6:45:33:4d:26:a5:ce:58:ac:e5:d3:6a:9b:77: dd:45:36:c8:9a:1a:d0:62:13:56:2c:28:57:54:1f:3f:65:13: a0:47:79:ec:45:5d:23:04:c9:e9:4b:2d:97:44:78:b7:b4:7a: 29:a2:0b:c3:59:cc:f1:c3:1a:bd:f4:d6:9f:d6:ba:12:eb:7c: ce:5b:17:0a:41:18:5c:65:30:33:f5:f1:9a:5d:72:27:75:32: 29:92:5d:26:35:a3:f3:3f:a8:8a:25:ca:11:c5:98:e0:bb:6c: 4d:17:49:ed:4b:03:46:43:ba:2d:34:b4:30:12:1c:8c:4b:36: 1c:10:b0:44:ff:a9:d7:f8:59:87:e2:0d:3f:ba:95:a1:fa:8d: df:e2:69:c7 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUMzAHacMZs4U6iZ0TOW7DAUgTISAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkQ5RDkxMzdENDQyN0E5RDM0RTFCMTVGMTZDNUM2ODlB OEM1NDlEOTAeFw0yNjAxMjQwNTM2MjdaFw0yNjAxMjcxNjIxMjdaMDMxMTAvBgNV BAMTKDVGODVCQjhDMzhDRTcwQ0FGMzBCRjEwNDI5MTgyQzQ2MkU2OUU1QTgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCrcSChdl5uHxfgNNTEXMBv4KQy ez7vCRPO4f/DSMNIcuXKnf2+GWXqc3cN9RhnHL9J8xnqoabgJMz5hoopCBXgn1tb 4JfdcscwHOUbVA3S2yJ0aufOaLbcb+P4UZwgMXOy3E06UokuLYZQZiW/U2ROQ2/Q iDhS8sjig6B1VFCowQciKGYjzjeBxgv0IGFUJgrwnhfM26nnOdHvgUoUZnyYh+MT h6mu13bbbhe+DLtyezgDUD0u7W3mwYLXHjeXUZq9mZCWDBJZnfkMgW0LD6kTjuNN l+Npd8mc/2RGy6E42a5ec1yLUZsOwXH+GgwAWOYiuZl1TFKLLgF3VpbeZa1HAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUX4W7jDjOcMrzC/EEKRgsRi5p5agwHwYDVR0j BBgwFoAULZ2RN9RCep004bFfFsXGiajFSdkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y YTUzNDFlOC0yMmQ4LTQ0OWMtYTc1My1lNDdiYmZjNDg1MzgvMC8yRDlEOTEzN0Q0 NDI3QTlEMzRFMUIxNUYxNkM1QzY4OUE4QzU0OUQ5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMkQ5RDkxMzdENDQyN0E5RDM0RTFCMTVGMTZDNUM2ODlBOEM1 NDlEOS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMmE1MzQxZTgtMjJkOC00NDljLWE3 NTMtZTQ3YmJmYzQ4NTM4LzAvMkQ5RDkxMzdENDQyN0E5RDM0RTFCMTVGMTZDNUM2 ODlBOEM1NDlEOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFpEH/9Q08vMajiSFu8d46jY98bu3piB9rq/ H2qeQeo5U6k9xkzA2XOVvpIaJAZuV07pUWC1qj4BVFzj3UhQqDieipWL4k7BYj1k 9tOGKkyGmIuzxtoRb/CDxrfrO7Yi7Y4TRZ0XtTrVH5tb3+r7LIjGRTNNJqXOWKzl 02qbd91FNsiaGtBiE1YsKFdUHz9lE6BHeexFXSMEyelLLZdEeLe0eimiC8NZzPHD Gr301p/WuhLrfM5bFwpBGFxlMDP18Zpdcid1MimSXSY1o/M/qIolyhHFmOC7bE0X Se1LA0ZDui00tDASHIxLNhwQsET/qdf4WYfiDT+6laH6jd/iacc= -----END CERTIFICATE-----Generated at Sun Jan 25 21:50:51 2026 by rpki-client