This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/2c3624c4-bfdc-4e48-8ea0-eb05605c6213/0/061065EDF2843A4462114BCE0A173E21A84A019E.mft File: 061065EDF2843A4462114BCE0A173E21A84A019E.mft (raw, json) Hash identifier: DOnrWdnDCkkrso3yEzfTIOJHKCAiP1pXW8QjqvkapOU= Subject key identifier: EB:2E:D6:73:3E:30:49:36:CD:F5:67:58:C0:8B:28:77:C7:75:35:C6 Authority key identifier: 06:10:65:ED:F2:84:3A:44:62:11:4B:CE:0A:17:3E:21:A8:4A:01:9E Certificate issuer: /CN=061065EDF2843A4462114BCE0A173E21A84A019E Certificate serial: 7F11299121CEBD1485FD609335743A8954FF1A08 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/061065EDF2843A4462114BCE0A173E21A84A019E.cer Subject info access: rsync://repo-rpki.idnic.net/repo/2c3624c4-bfdc-4e48-8ea0-eb05605c6213/0/061065EDF2843A4462114BCE0A173E21A84A019E.mft Manifest number: 0304 Signing time: Sat 24 Jan 2026 16:52:32 +0000 Manifest this update: Sat 24 Jan 2026 16:47:32 +0000 Manifest next update: Tue 27 Jan 2026 17:24:32 +0000 Files and hashes: 1: 3130332e3137342e3131332e302f32342d3234203d3e20313339393532.roa (hash: 5C7cr7m1rH+Q3Oz5yPBlPFFAgwjpw6p/9sq9jkATwag=) 2: 3130332e3137342e3131322e302f32332d3233203d3e20313339393532.roa (hash: YzeL+OCAalusbn1m5HXWAoI2WeWiRzCYeg8Gq0Aletw=) 3: 3130332e3137342e3131322e302f32342d3234203d3e20313339393532.roa (hash: lBYYjDI8kTfPX8dccHc0ZXaDpghO9Ch8f9L9h3YjbqY=) 4: 061065EDF2843A4462114BCE0A173E21A84A019E.crl (hash: BG+gHpG1xzCR6Wbn1cAi0WJa48pzKRiHEfQ9Fb2LsEg=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/2c3624c4-bfdc-4e48-8ea0-eb05605c6213/0/061065EDF2843A4462114BCE0A173E21A84A019E.crl rsync://repo-rpki.idnic.net/repo/2c3624c4-bfdc-4e48-8ea0-eb05605c6213/0/061065EDF2843A4462114BCE0A173E21A84A019E.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/061065EDF2843A4462114BCE0A173E21A84A019E.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 27 Jan 2026 17:24:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7f:11:29:91:21:ce:bd:14:85:fd:60:93:35:74:3a:89:54:ff:1a:08 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=061065EDF2843A4462114BCE0A173E21A84A019E Validity Not Before: Jan 24 16:47:32 2026 GMT Not After : Jan 27 17:24:32 2026 GMT Subject: CN=EB2ED6733E304936CDF56758C08B2877C77535C6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:ac:70:c0:aa:69:6e:e7:17:71:fb:6d:49:d8: 5f:92:80:94:a0:d6:80:e3:97:52:0f:8c:e3:d4:70: 05:36:7d:13:f6:dc:f1:cc:0a:9e:d2:a6:17:fa:1d: d3:e3:14:56:40:69:df:03:d3:a4:23:dd:35:f3:c4: 33:35:98:04:c6:9c:7d:0a:b1:af:c1:b2:1f:8a:bd: f7:26:97:a7:4a:53:59:da:a9:e2:58:e9:32:32:05: 94:47:74:e1:c7:b5:5f:7e:05:fc:3d:11:9a:3d:c9: d8:33:37:cc:a0:28:f6:e7:1d:fb:86:f8:2f:ed:3b: 5c:9a:d2:04:15:d7:d8:df:e5:46:e8:45:a7:63:ab: d2:65:29:dd:81:84:7d:ef:4d:25:a9:c0:28:75:aa: fc:20:44:e4:8f:75:50:b6:56:0d:ea:e5:03:59:bb: d5:db:75:72:d0:2b:0f:89:ff:9a:8f:c2:ba:39:69: b1:89:87:fa:68:bd:02:54:f2:3b:49:f0:57:5d:29: 20:93:60:b3:d9:7b:ed:97:f7:8b:b9:52:66:58:3e: 38:7a:d2:81:4c:73:54:2a:27:b7:bb:f8:31:6e:42: 5c:53:47:76:fd:8d:df:7c:0d:d8:f7:83:e5:a9:41: d6:93:08:e7:ac:3a:cf:78:b1:b0:56:49:40:29:c1: 22:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EB:2E:D6:73:3E:30:49:36:CD:F5:67:58:C0:8B:28:77:C7:75:35:C6 X509v3 Authority Key Identifier: keyid:06:10:65:ED:F2:84:3A:44:62:11:4B:CE:0A:17:3E:21:A8:4A:01:9E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/2c3624c4-bfdc-4e48-8ea0-eb05605c6213/0/061065EDF2843A4462114BCE0A173E21A84A019E.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/061065EDF2843A4462114BCE0A173E21A84A019E.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/2c3624c4-bfdc-4e48-8ea0-eb05605c6213/0/061065EDF2843A4462114BCE0A173E21A84A019E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2c:79:c1:b7:c7:f1:85:a6:d0:a1:ef:d0:85:70:04:72:7e:66: 68:d1:f4:49:d8:99:f5:ad:f4:b2:a3:b2:63:46:ff:b4:df:18: 69:6f:04:e3:ad:32:e6:bb:1d:46:8a:ed:08:79:61:56:51:0d: 53:c7:89:4f:82:69:d1:77:ce:fc:8a:df:a2:75:58:86:e5:70: 3a:c9:b1:3f:41:f6:5c:bd:10:f0:cd:3d:02:e7:b8:28:3a:0f: b8:ef:98:91:0a:1c:05:df:67:1a:73:b5:e4:16:d9:5f:45:3e: 54:0d:87:dc:8d:9f:3b:3b:bd:16:a5:20:db:e6:44:68:af:a3: 69:54:79:01:c3:e7:dd:fb:7a:ca:24:a0:df:0c:a9:d2:e3:d7: 20:f6:62:96:7c:ea:bd:62:44:65:a6:7a:15:69:f1:2b:07:2a: 77:b8:18:8c:53:73:9e:b4:08:c4:38:04:19:58:4f:23:05:39: 21:a4:de:72:58:ed:30:da:d4:ed:13:78:fd:77:12:15:72:bf: 79:e0:05:d0:8e:ca:59:f6:0f:af:d6:31:be:b0:7a:09:11:8e: c2:69:0e:bf:2d:a3:13:58:e7:37:ff:9f:47:a3:17:9d:eb:49: db:e6:55:64:98:7f:95:1c:5c:b5:5a:57:41:cf:88:70:e5:bc: 10:72:1a:34 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUfxEpkSHOvRSF/WCTNXQ6iVT/GggwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDYxMDY1RURGMjg0M0E0NDYyMTE0QkNFMEExNzNFMjFB ODRBMDE5RTAeFw0yNjAxMjQxNjQ3MzJaFw0yNjAxMjcxNzI0MzJaMDMxMTAvBgNV BAMTKEVCMkVENjczM0UzMDQ5MzZDREY1Njc1OEMwOEIyODc3Qzc3NTM1QzYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC2rHDAqmlu5xdx+21J2F+SgJSg 1oDjl1IPjOPUcAU2fRP23PHMCp7Sphf6HdPjFFZAad8D06Qj3TXzxDM1mATGnH0K sa/Bsh+Kvfcml6dKU1naqeJY6TIyBZRHdOHHtV9+Bfw9EZo9ydgzN8ygKPbnHfuG +C/tO1ya0gQV19jf5UboRadjq9JlKd2BhH3vTSWpwCh1qvwgROSPdVC2Vg3q5QNZ u9XbdXLQKw+J/5qPwro5abGJh/povQJU8jtJ8FddKSCTYLPZe+2X94u5UmZYPjh6 0oFMc1QqJ7e7+DFuQlxTR3b9jd98Ddj3g+WpQdaTCOesOs94sbBWSUApwSI1AgMB AAGjggI8MIICODAdBgNVHQ4EFgQU6y7Wcz4wSTbN9WdYwIsod8d1NcYwHwYDVR0j BBgwFoAUBhBl7fKEOkRiEUvOChc+IahKAZ4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y YzM2MjRjNC1iZmRjLTRlNDgtOGVhMC1lYjA1NjA1YzYyMTMvMC8wNjEwNjVFREYy ODQzQTQ0NjIxMTRCQ0UwQTE3M0UyMUE4NEEwMTlFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMDYxMDY1RURGMjg0M0E0NDYyMTE0QkNFMEExNzNFMjFBODRB MDE5RS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMmMzNjI0YzQtYmZkYy00ZTQ4LThl YTAtZWIwNTYwNWM2MjEzLzAvMDYxMDY1RURGMjg0M0E0NDYyMTE0QkNFMEExNzNF MjFBODRBMDE5RS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACx5wbfH8YWm0KHv0IVwBHJ+ZmjR9EnYmfWt 9LKjsmNG/7TfGGlvBOOtMua7HUaK7Qh5YVZRDVPHiU+CadF3zvyK36J1WIblcDrJ sT9B9ly9EPDNPQLnuCg6D7jvmJEKHAXfZxpzteQW2V9FPlQNh9yNnzs7vRalINvm RGivo2lUeQHD5937esokoN8MqdLj1yD2YpZ86r1iRGWmehVp8SsHKne4GIxTc560 CMQ4BBlYTyMFOSGk3nJY7TDa1O0TeP13EhVyv3ngBdCOyln2D6/WMb6wegkRjsJp Dr8toxNY5zf/n0ejF53rSdvmVWSYf5UcXLVaV0HPiHDlvBByGjQ= -----END CERTIFICATE-----Generated at Sun Jan 25 22:03:24 2026 by rpki-client