This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/2f13a6ef-3434-4401-b3e1-65153066fb3e/0/245A17CADB2BB2FDC5786C27E5BE959636E7F409.mft File: 245A17CADB2BB2FDC5786C27E5BE959636E7F409.mft (raw, json) Hash identifier: hRJWlGxiGIMIwZ9V78DPJ6gfKjlJF+0m+aHeoWvQw+s= Subject key identifier: B4:1A:F4:55:E6:58:1F:B4:88:69:E8:51:7C:98:4C:AE:3C:66:C8:B6 Authority key identifier: 24:5A:17:CA:DB:2B:B2:FD:C5:78:6C:27:E5:BE:95:96:36:E7:F4:09 Certificate issuer: /CN=245A17CADB2BB2FDC5786C27E5BE959636E7F409 Certificate serial: 47A7D5697E175D3C3C762D8FBC696DC2663711E0 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/245A17CADB2BB2FDC5786C27E5BE959636E7F409.cer Subject info access: rsync://repo-rpki.idnic.net/repo/2f13a6ef-3434-4401-b3e1-65153066fb3e/0/245A17CADB2BB2FDC5786C27E5BE959636E7F409.mft Manifest number: 0150 Signing time: Sat 24 Jan 2026 22:11:29 +0000 Manifest this update: Sat 24 Jan 2026 22:06:29 +0000 Manifest next update: Wed 28 Jan 2026 07:50:29 +0000 Files and hashes: 1: 245A17CADB2BB2FDC5786C27E5BE959636E7F409.crl (hash: i2pShHJagHWHtROm4Qem9NldtZwZ+eX3hLp09bnCjV8=) 2: 3130332e35312e39382e302f32332d3233203d3e20313530343639.roa (hash: k08Sq9y+e0JBLFkahJuKjCY8UDmOXzCXbCJPnDfG/eg=) 3: 3130332e35312e39392e302f32342d3234203d3e20313530343639.roa (hash: K8NaZjX156AzJZCxAFCtUR2kv1eIuI1LvcL4WWNgNxE=) 4: 3130332e35312e39382e302f32342d3234203d3e20313530343639.roa (hash: 4B7irySfovCa+fs5OrOidwnp7dP+n6xSYZr+/3ur6bs=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/2f13a6ef-3434-4401-b3e1-65153066fb3e/0/245A17CADB2BB2FDC5786C27E5BE959636E7F409.crl rsync://repo-rpki.idnic.net/repo/2f13a6ef-3434-4401-b3e1-65153066fb3e/0/245A17CADB2BB2FDC5786C27E5BE959636E7F409.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/245A17CADB2BB2FDC5786C27E5BE959636E7F409.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 28 Jan 2026 07:50:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 47:a7:d5:69:7e:17:5d:3c:3c:76:2d:8f:bc:69:6d:c2:66:37:11:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=245A17CADB2BB2FDC5786C27E5BE959636E7F409 Validity Not Before: Jan 24 22:06:29 2026 GMT Not After : Jan 28 07:50:29 2026 GMT Subject: CN=B41AF455E6581FB48869E8517C984CAE3C66C8B6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f4:d0:10:e1:bc:ec:05:bd:59:58:67:30:bb:c0: 47:2a:13:10:fb:40:ba:3d:c3:f6:e7:a9:6d:b3:c3: d7:05:d4:46:d5:80:9f:54:9b:a7:12:e6:8d:11:3a: 38:a5:fe:98:ff:71:8f:d9:f0:da:e6:71:e3:c7:41: 56:2b:51:f6:1b:02:6e:6c:05:12:1b:03:77:19:28: d1:36:a1:c1:f3:60:f0:0e:ce:df:56:d2:12:9f:87: ba:8e:11:c1:c5:27:36:61:ec:91:cd:65:5f:13:c4: ab:32:c1:b6:a2:ed:a5:4e:ce:82:0f:fd:6a:6a:8f: cc:d3:fe:2e:12:ca:e5:a1:f2:ce:57:e2:bc:06:da: 7e:35:74:94:66:1c:fc:72:1c:97:0c:80:ca:fc:0b: e5:16:73:af:96:6c:58:de:aa:53:a9:ef:78:1d:5c: 53:24:77:18:76:83:70:b7:9d:1c:58:2f:ff:1e:84: a7:18:1b:32:6f:14:a2:66:14:86:4c:2a:3e:5c:f3: 3d:3c:3c:5c:a4:aa:a2:60:4e:91:11:c1:75:cd:96: 87:f2:17:7e:ce:38:56:64:a1:55:ae:46:52:7f:29: 2a:67:5a:10:0c:58:80:d2:df:6b:8f:0b:1a:2b:9c: 70:14:dc:16:1b:4a:2a:bb:fd:6d:cf:90:b9:58:a6: 97:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B4:1A:F4:55:E6:58:1F:B4:88:69:E8:51:7C:98:4C:AE:3C:66:C8:B6 X509v3 Authority Key Identifier: keyid:24:5A:17:CA:DB:2B:B2:FD:C5:78:6C:27:E5:BE:95:96:36:E7:F4:09 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/2f13a6ef-3434-4401-b3e1-65153066fb3e/0/245A17CADB2BB2FDC5786C27E5BE959636E7F409.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/245A17CADB2BB2FDC5786C27E5BE959636E7F409.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/2f13a6ef-3434-4401-b3e1-65153066fb3e/0/245A17CADB2BB2FDC5786C27E5BE959636E7F409.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 93:db:cb:4f:0c:f9:c3:f4:68:b8:e7:57:4a:59:6b:04:c8:4e: b3:37:52:db:d3:28:7e:1f:cd:8f:77:ab:76:9d:84:06:b7:8d: f6:db:87:51:d6:46:d8:66:94:69:88:87:70:6b:95:5d:b5:50: 30:4e:b8:4b:49:78:40:4d:72:bc:5a:97:ec:be:97:60:93:db: 41:6e:fe:24:c2:7a:17:16:5a:4a:95:83:b8:45:b1:4b:00:ea: 8f:13:6a:c3:d0:1c:3b:68:fd:90:18:4d:03:2b:9a:7c:43:9d: 28:7a:11:5e:59:45:0f:49:33:4e:e9:22:d9:7f:1b:09:a2:97: 1c:5f:3c:b9:ac:fc:32:09:34:75:24:e2:99:7f:75:bc:ab:da: 37:e2:a3:05:37:2e:51:bb:60:4a:5a:60:3f:bc:02:5d:86:e4: 89:6a:d3:51:7e:2d:42:5d:6b:bd:60:8e:74:f7:ce:4f:f5:2f: 50:bc:6c:d1:ff:e2:c2:7b:d0:d6:b2:0a:e8:28:b8:40:c1:73: c3:fd:64:38:09:56:27:62:53:8b:14:a3:fc:18:29:c6:93:39: 6d:46:86:a3:5a:e2:a7:25:05:33:57:7f:54:ac:57:c7:b7:3d: dc:e3:b0:b7:38:66:91:e2:4a:b2:7a:53:90:79:27:45:85:33: fb:46:15:b0 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUR6fVaX4XXTw8di2PvGltwmY3EeAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjQ1QTE3Q0FEQjJCQjJGREM1Nzg2QzI3RTVCRTk1OTYz NkU3RjQwOTAeFw0yNjAxMjQyMjA2MjlaFw0yNjAxMjgwNzUwMjlaMDMxMTAvBgNV BAMTKEI0MUFGNDU1RTY1ODFGQjQ4ODY5RTg1MTdDOTg0Q0FFM0M2NkM4QjYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD00BDhvOwFvVlYZzC7wEcqExD7 QLo9w/bnqW2zw9cF1EbVgJ9Um6cS5o0ROjil/pj/cY/Z8NrmcePHQVYrUfYbAm5s BRIbA3cZKNE2ocHzYPAOzt9W0hKfh7qOEcHFJzZh7JHNZV8TxKsywbai7aVOzoIP /Wpqj8zT/i4SyuWh8s5X4rwG2n41dJRmHPxyHJcMgMr8C+UWc6+WbFjeqlOp73gd XFMkdxh2g3C3nRxYL/8ehKcYGzJvFKJmFIZMKj5c8z08PFykqqJgTpERwXXNlofy F37OOFZkoVWuRlJ/KSpnWhAMWIDS32uPCxornHAU3BYbSiq7/W3PkLlYppe3AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUtBr0VeZYH7SIaehRfJhMrjxmyLYwHwYDVR0j BBgwFoAUJFoXytsrsv3FeGwn5b6Vljbn9AkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y ZjEzYTZlZi0zNDM0LTQ0MDEtYjNlMS02NTE1MzA2NmZiM2UvMC8yNDVBMTdDQURC MkJCMkZEQzU3ODZDMjdFNUJFOTU5NjM2RTdGNDA5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMjQ1QTE3Q0FEQjJCQjJGREM1Nzg2QzI3RTVCRTk1OTYzNkU3 RjQwOS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMmYxM2E2ZWYtMzQzNC00NDAxLWIz ZTEtNjUxNTMwNjZmYjNlLzAvMjQ1QTE3Q0FEQjJCQjJGREM1Nzg2QzI3RTVCRTk1 OTYzNkU3RjQwOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJPby08M+cP0aLjnV0pZawTITrM3UtvTKH4f zY93q3adhAa3jfbbh1HWRthmlGmIh3BrlV21UDBOuEtJeEBNcrxal+y+l2CT20Fu /iTCehcWWkqVg7hFsUsA6o8TasPQHDto/ZAYTQMrmnxDnSh6EV5ZRQ9JM07pItl/ GwmilxxfPLms/DIJNHUk4pl/dbyr2jfiowU3LlG7YEpaYD+8Al2G5Ilq01F+LUJd a71gjnT3zk/1L1C8bNH/4sJ70NayCugouEDBc8P9ZDgJVidiU4sUo/wYKcaTOW1G hqNa4qclBTNXf1SsV8e3PdzjsLc4ZpHiSrJ6U5B5J0WFM/tGFbA= -----END CERTIFICATE-----Generated at Sun Jan 25 23:19:36 2026 by rpki-client