This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/2fd80d96-ef1b-44b2-903a-7f6da941a836/0/A500108F09BF54E5603B5C1F6E6325A561FE7126.mft File: A500108F09BF54E5603B5C1F6E6325A561FE7126.mft (raw, json) Hash identifier: YQ3tMNIO87MUh/2Yun0GnUYNSzIrD+DpeFdTTnMx9XY= Subject key identifier: 8F:E4:80:E0:89:6F:25:E9:80:AF:BD:4C:DD:56:54:AF:AB:A2:A5:7D Authority key identifier: A5:00:10:8F:09:BF:54:E5:60:3B:5C:1F:6E:63:25:A5:61:FE:71:26 Certificate issuer: /CN=A500108F09BF54E5603B5C1F6E6325A561FE7126 Certificate serial: 46D3F9D31F718CB8E94B95F7A7C4461B7B05F5A8 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A500108F09BF54E5603B5C1F6E6325A561FE7126.cer Subject info access: rsync://repo-rpki.idnic.net/repo/2fd80d96-ef1b-44b2-903a-7f6da941a836/0/A500108F09BF54E5603B5C1F6E6325A561FE7126.mft Manifest number: 0541 Signing time: Sun 25 Jan 2026 17:12:27 +0000 Manifest this update: Sun 25 Jan 2026 17:07:27 +0000 Manifest next update: Wed 28 Jan 2026 21:06:27 +0000 Files and hashes: 1: 3130332e3133332e3232322e302f32332d3234203d3e20313337333331.roa (hash: oiQrxAKU3WAq8WQAa4AsG/VSgBXo6JykRbhPhmfaGc4=) 2: 3130332e3131322e3136322e302f32332d3234203d3e20313337333331.roa (hash: lIpuwQni1CJCCy7a6RQeBOueUSsNd+BwETQKPZ3/nzw=) 3: 323030313a6466343a623130303a3a2f34382d3438203d3e20313337333331.roa (hash: N5WXqZ6Jw+zSS8rnedVuQEefp7BbCpCEzbN4PssNcrU=) 4: A500108F09BF54E5603B5C1F6E6325A561FE7126.crl (hash: xNdQpdvR8R0YdPmAinGk9+08kW7G5zlP2m0CH0JprlU=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/2fd80d96-ef1b-44b2-903a-7f6da941a836/0/A500108F09BF54E5603B5C1F6E6325A561FE7126.crl rsync://repo-rpki.idnic.net/repo/2fd80d96-ef1b-44b2-903a-7f6da941a836/0/A500108F09BF54E5603B5C1F6E6325A561FE7126.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A500108F09BF54E5603B5C1F6E6325A561FE7126.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 28 Jan 2026 14:00:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 46:d3:f9:d3:1f:71:8c:b8:e9:4b:95:f7:a7:c4:46:1b:7b:05:f5:a8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A500108F09BF54E5603B5C1F6E6325A561FE7126 Validity Not Before: Jan 25 17:07:27 2026 GMT Not After : Jan 28 21:06:27 2026 GMT Subject: CN=8FE480E0896F25E980AFBD4CDD5654AFABA2A57D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:51:f9:0a:cf:10:3c:d3:60:ee:1c:cb:f9:46: 5f:e3:f8:9e:ff:f3:75:63:52:f1:bb:f6:52:91:c6: 5f:25:27:e5:91:43:7b:30:d5:f7:99:75:21:86:9c: 1a:96:4d:71:3a:e5:29:48:6d:59:a6:76:2f:c3:d0: 3f:6d:36:88:2b:30:8a:a1:e7:4c:aa:03:03:d1:30: b3:c0:ac:02:ce:df:29:84:77:e7:14:84:4a:71:51: 7e:7e:95:7c:2f:c1:6e:f3:dd:5d:a0:cf:ea:f5:c2: 49:f1:2b:b8:4c:07:5d:0c:52:04:93:6f:ef:2c:d2: b6:e9:58:2a:9b:29:69:13:49:36:d2:d0:ca:d4:61: 45:11:b9:ae:c2:95:6d:3c:e7:da:0d:e0:10:ee:f3: a7:2d:c0:67:6b:44:f8:e0:3c:a7:0d:42:92:ff:4b: 5a:a3:da:60:db:f9:19:aa:aa:22:a6:cc:fd:9b:1d: af:9a:7e:e3:04:86:5c:e9:0b:e1:de:d2:a3:85:59: cd:07:3a:13:fd:7f:15:80:9e:ce:69:d8:cd:56:cc: f7:d0:83:c5:6b:08:21:ce:a0:0d:a5:3e:fb:bf:51: 32:62:b8:84:61:36:d4:27:d6:d9:c1:53:7e:b1:31: a9:f3:95:94:81:04:cf:ca:81:27:d5:52:fc:85:15: 18:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:E4:80:E0:89:6F:25:E9:80:AF:BD:4C:DD:56:54:AF:AB:A2:A5:7D X509v3 Authority Key Identifier: keyid:A5:00:10:8F:09:BF:54:E5:60:3B:5C:1F:6E:63:25:A5:61:FE:71:26 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/2fd80d96-ef1b-44b2-903a-7f6da941a836/0/A500108F09BF54E5603B5C1F6E6325A561FE7126.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A500108F09BF54E5603B5C1F6E6325A561FE7126.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/2fd80d96-ef1b-44b2-903a-7f6da941a836/0/A500108F09BF54E5603B5C1F6E6325A561FE7126.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 43:b3:f3:6b:61:a4:ed:57:cc:e9:a1:4c:e6:e2:9e:54:2a:60: 3f:ce:3c:5c:58:fc:97:d7:1e:9f:61:ee:9d:37:73:83:8b:91: 17:ef:d1:75:01:08:98:8f:2f:2d:17:12:98:8d:14:b8:57:bd: 42:37:81:f7:8b:b8:bb:ac:4d:9f:64:76:2a:ab:e3:fc:25:e7: 7d:57:2e:52:04:c3:53:5f:bc:8d:3f:5e:fa:51:41:c2:0e:a5: 2c:d5:65:c5:7a:db:b3:ec:19:1a:f6:b7:1f:9e:b8:3d:f4:78: 1a:46:8c:17:85:2e:b0:d6:59:1a:a5:93:49:c0:85:72:df:ad: 5f:06:4e:94:f4:d4:c7:31:76:74:b4:13:66:e5:84:f9:cf:6f: f0:2f:e3:92:d9:cd:21:be:ad:90:a9:c2:30:e7:e4:93:6a:de: 09:e5:65:05:c1:6f:f3:7c:65:2d:78:d5:ce:20:1b:d3:73:1a: 7d:6a:09:d1:a4:31:45:ac:68:79:59:2c:0a:15:55:f4:c2:e7: 32:b2:3a:ba:42:c1:00:2b:29:da:6a:e3:97:79:ef:fd:d0:cc: 22:86:ed:8b:0d:d8:cc:d5:41:cb:b7:a1:00:74:28:e9:75:9c: 7b:d1:ac:80:7b:90:8b:aa:f1:06:ae:3b:c0:3f:8c:bd:a6:82: 9f:e8:7b:80 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIURtP50x9xjLjpS5X3p8RGG3sF9agwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTUwMDEwOEYwOUJGNTRFNTYwM0I1QzFGNkU2MzI1QTU2 MUZFNzEyNjAeFw0yNjAxMjUxNzA3MjdaFw0yNjAxMjgyMTA2MjdaMDMxMTAvBgNV BAMTKDhGRTQ4MEUwODk2RjI1RTk4MEFGQkQ0Q0RENTY1NEFGQUJBMkE1N0QwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCnUfkKzxA802DuHMv5Rl/j+J7/ 83VjUvG79lKRxl8lJ+WRQ3sw1feZdSGGnBqWTXE65SlIbVmmdi/D0D9tNogrMIqh 50yqAwPRMLPArALO3ymEd+cUhEpxUX5+lXwvwW7z3V2gz+r1wknxK7hMB10MUgST b+8s0rbpWCqbKWkTSTbS0MrUYUURua7ClW0859oN4BDu86ctwGdrRPjgPKcNQpL/ S1qj2mDb+RmqqiKmzP2bHa+afuMEhlzpC+He0qOFWc0HOhP9fxWAns5p2M1WzPfQ g8VrCCHOoA2lPvu/UTJiuIRhNtQn1tnBU36xManzlZSBBM/KgSfVUvyFFRgjAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUj+SA4IlvJemAr71M3VZUr6uipX0wHwYDVR0j BBgwFoAUpQAQjwm/VOVgO1wfbmMlpWH+cSYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y ZmQ4MGQ5Ni1lZjFiLTQ0YjItOTAzYS03ZjZkYTk0MWE4MzYvMC9BNTAwMTA4RjA5 QkY1NEU1NjAzQjVDMUY2RTYzMjVBNTYxRkU3MTI2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQTUwMDEwOEYwOUJGNTRFNTYwM0I1QzFGNkU2MzI1QTU2MUZF NzEyNi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMmZkODBkOTYtZWYxYi00NGIyLTkw M2EtN2Y2ZGE5NDFhODM2LzAvQTUwMDEwOEYwOUJGNTRFNTYwM0I1QzFGNkU2MzI1 QTU2MUZFNzEyNi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEOz82thpO1XzOmhTObinlQqYD/OPFxY/JfX Hp9h7p03c4OLkRfv0XUBCJiPLy0XEpiNFLhXvUI3gfeLuLusTZ9kdiqr4/wl531X LlIEw1NfvI0/XvpRQcIOpSzVZcV627PsGRr2tx+euD30eBpGjBeFLrDWWRqlk0nA hXLfrV8GTpT01McxdnS0E2blhPnPb/Av45LZzSG+rZCpwjDn5JNq3gnlZQXBb/N8 ZS141c4gG9NzGn1qCdGkMUWsaHlZLAoVVfTC5zKyOrpCwQArKdpq45d57/3QzCKG 7YsN2MzVQcu3oQB0KOl1nHvRrIB7kIuq8QauO8A/jL2mgp/oe4A= -----END CERTIFICATE-----Generated at Mon Jan 26 04:02:21 2026 by rpki-client