This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/328eec5b-5324-4422-a32f-9b1dced3759f/0/104C4FCF888F3C86B8C128D81C5B95FE5389BB59.mft File: 104C4FCF888F3C86B8C128D81C5B95FE5389BB59.mft (raw, json) Hash identifier: FhTMJwYiujXiMwCgwDmypfMidWIPmD/1Jp8XwjnmWBE= Subject key identifier: 8C:2B:3F:4E:59:20:22:B9:B7:95:E4:3E:EA:2F:06:CF:95:08:DB:EB Authority key identifier: 10:4C:4F:CF:88:8F:3C:86:B8:C1:28:D8:1C:5B:95:FE:53:89:BB:59 Certificate issuer: /CN=104C4FCF888F3C86B8C128D81C5B95FE5389BB59 Certificate serial: 3AA3E43D6EB67AF7A6E93439BFD7E1A1FE13BC12 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/104C4FCF888F3C86B8C128D81C5B95FE5389BB59.cer Subject info access: rsync://repo-rpki.idnic.net/repo/328eec5b-5324-4422-a32f-9b1dced3759f/0/104C4FCF888F3C86B8C128D81C5B95FE5389BB59.mft Manifest number: 0203 Signing time: Sun 25 Jan 2026 02:00:57 +0000 Manifest this update: Sun 25 Jan 2026 01:55:57 +0000 Manifest next update: Wed 28 Jan 2026 12:49:57 +0000 Files and hashes: 1: 3130332e35312e3132332e302f32342d3234203d3e203438343635.roa (hash: 5O6AdoKEG1I98tyOWG63JsCNRsZNMKKnN/EqzafjGiA=) 2: 3130332e35312e3132332e302f32342d3234203d3e20313530343730.roa (hash: vxMPTESIzZEY7G3+9W6n+soUJ5to979lR7MTr9paLOY=) 3: 3130332e35312e3132322e302f32342d3234203d3e203438343635.roa (hash: TC6MS8F6oQCAfD0GoVUZH+L8RFHHUoyFXx511/+SVcQ=) 4: 3130332e35312e3132322e302f32342d3234203d3e20313530343730.roa (hash: 9H3El07W5poKziXy5nJS/+wd9IjLStSX7hOc3PPnjBQ=) 5: 104C4FCF888F3C86B8C128D81C5B95FE5389BB59.crl (hash: BvXuRChH/MkVSI8r/Xifs9UoxIIlodd47tORbfq8iG8=) 6: 3130332e35312e3132322e302f32332d3233203d3e20313530343730.roa (hash: NI7opR0A7S7kCuIeE9SGtTIr4seOauTv5NKnbC+c5S8=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/328eec5b-5324-4422-a32f-9b1dced3759f/0/104C4FCF888F3C86B8C128D81C5B95FE5389BB59.crl rsync://repo-rpki.idnic.net/repo/328eec5b-5324-4422-a32f-9b1dced3759f/0/104C4FCF888F3C86B8C128D81C5B95FE5389BB59.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/104C4FCF888F3C86B8C128D81C5B95FE5389BB59.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 28 Jan 2026 12:49:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3a:a3:e4:3d:6e:b6:7a:f7:a6:e9:34:39:bf:d7:e1:a1:fe:13:bc:12 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=104C4FCF888F3C86B8C128D81C5B95FE5389BB59 Validity Not Before: Jan 25 01:55:57 2026 GMT Not After : Jan 28 12:49:57 2026 GMT Subject: CN=8C2B3F4E592022B9B795E43EEA2F06CF9508DBEB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f6:23:b9:d0:82:26:6a:f8:01:01:34:dc:36:9a: f4:af:a2:16:24:06:32:42:b1:62:12:4c:5d:72:e8: 6d:55:b9:e9:f4:d6:e8:c4:41:e8:e4:f1:ce:18:f1: 47:a0:51:b1:14:b3:d5:24:e8:d8:ce:0b:95:8e:a2: 6d:0d:66:b9:8d:e2:f6:44:9e:63:bc:be:78:8c:d0: 6e:c5:45:15:93:86:85:32:68:89:5d:ac:dc:7d:34: bf:5f:35:a7:cd:7d:0b:7b:91:23:e4:90:f9:90:e4: b0:70:1e:05:e1:be:f0:d8:05:21:85:21:33:87:26: c3:fd:19:2a:7a:25:a9:93:cb:f2:7b:82:e3:65:61: 90:4f:1c:35:07:35:f0:67:f7:69:5f:ce:c2:03:ce: 69:95:bf:4c:0f:49:4f:81:d6:25:8d:b7:5b:ec:c2: 25:15:11:7c:d7:33:09:4c:84:b6:1f:3a:30:c3:43: 06:58:27:e0:3a:44:0e:c9:e3:4c:52:32:c8:2f:48: c7:6a:c5:dc:15:0a:f9:2e:fe:c3:68:2c:6d:2d:ee: 87:d7:3c:2d:95:5d:9e:56:78:39:b6:ff:14:77:e3: f4:bf:26:d1:f4:77:e4:9d:98:63:e0:69:29:07:d7: 97:b6:38:57:a9:cf:71:41:cc:bb:13:f4:65:53:09: 59:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8C:2B:3F:4E:59:20:22:B9:B7:95:E4:3E:EA:2F:06:CF:95:08:DB:EB X509v3 Authority Key Identifier: keyid:10:4C:4F:CF:88:8F:3C:86:B8:C1:28:D8:1C:5B:95:FE:53:89:BB:59 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/328eec5b-5324-4422-a32f-9b1dced3759f/0/104C4FCF888F3C86B8C128D81C5B95FE5389BB59.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/104C4FCF888F3C86B8C128D81C5B95FE5389BB59.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/328eec5b-5324-4422-a32f-9b1dced3759f/0/104C4FCF888F3C86B8C128D81C5B95FE5389BB59.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 55:1d:a5:5e:46:64:cf:ce:27:fa:75:ed:41:de:09:1e:07:05: 3d:79:d1:24:49:82:61:1c:8a:0d:68:b0:ad:dc:12:2c:30:39: 26:51:8a:15:a4:93:62:5f:7f:57:7d:85:ea:b4:cf:be:4e:e4: e1:e1:2c:35:16:de:44:64:f1:59:3f:9b:61:35:da:d8:ea:56: 81:e4:74:25:de:d2:ba:d7:43:48:0b:88:6e:7c:a5:8f:78:0b: d3:5a:20:46:82:42:e3:fa:ab:80:c1:fe:d6:df:4a:15:83:c8: 15:09:cd:97:e8:d7:92:a6:4f:ef:79:86:be:27:c2:a5:1b:05: b5:85:95:8a:99:28:c1:2c:9d:dd:25:98:81:aa:53:ea:4e:1d: 9f:2a:79:b5:da:f4:12:ee:3c:7a:dd:68:ce:4b:72:9e:86:c3: 97:a0:c8:fb:65:fe:a0:9d:e2:93:f0:40:c0:e1:c4:a9:bd:79: 5d:be:b2:97:a0:38:4b:db:24:12:93:b6:02:5b:99:62:02:8a: 2f:70:6b:87:23:04:90:5d:51:e1:d5:78:df:5f:b8:fb:a7:e0: 83:de:eb:73:b8:87:56:4d:36:80:d7:0f:56:8f:fb:fc:31:4e: ae:95:b6:34:4e:03:88:b7:e8:44:6e:5b:51:2a:13:cd:d8:86: 45:ed:e1:46 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUOqPkPW62evem6TQ5v9fhof4TvBIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTA0QzRGQ0Y4ODhGM0M4NkI4QzEyOEQ4MUM1Qjk1RkU1 Mzg5QkI1OTAeFw0yNjAxMjUwMTU1NTdaFw0yNjAxMjgxMjQ5NTdaMDMxMTAvBgNV BAMTKDhDMkIzRjRFNTkyMDIyQjlCNzk1RTQzRUVBMkYwNkNGOTUwOERCRUIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD2I7nQgiZq+AEBNNw2mvSvohYk BjJCsWISTF1y6G1Vuen01ujEQejk8c4Y8UegUbEUs9Uk6NjOC5WOom0NZrmN4vZE nmO8vniM0G7FRRWThoUyaIldrNx9NL9fNafNfQt7kSPkkPmQ5LBwHgXhvvDYBSGF ITOHJsP9GSp6JamTy/J7guNlYZBPHDUHNfBn92lfzsIDzmmVv0wPSU+B1iWNt1vs wiUVEXzXMwlMhLYfOjDDQwZYJ+A6RA7J40xSMsgvSMdqxdwVCvku/sNoLG0t7ofX PC2VXZ5WeDm2/xR34/S/JtH0d+SdmGPgaSkH15e2OFepz3FBzLsT9GVTCVmpAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUjCs/TlkgIrm3leQ+6i8Gz5UI2+swHwYDVR0j BBgwFoAUEExPz4iPPIa4wSjYHFuV/lOJu1kwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z MjhlZWM1Yi01MzI0LTQ0MjItYTMyZi05YjFkY2VkMzc1OWYvMC8xMDRDNEZDRjg4 OEYzQzg2QjhDMTI4RDgxQzVCOTVGRTUzODlCQjU5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMTA0QzRGQ0Y4ODhGM0M4NkI4QzEyOEQ4MUM1Qjk1RkU1Mzg5 QkI1OS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMzI4ZWVjNWItNTMyNC00NDIyLWEz MmYtOWIxZGNlZDM3NTlmLzAvMTA0QzRGQ0Y4ODhGM0M4NkI4QzEyOEQ4MUM1Qjk1 RkU1Mzg5QkI1OS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFUdpV5GZM/OJ/p17UHeCR4HBT150SRJgmEc ig1osK3cEiwwOSZRihWkk2Jff1d9heq0z75O5OHhLDUW3kRk8Vk/m2E12tjqVoHk dCXe0rrXQ0gLiG58pY94C9NaIEaCQuP6q4DB/tbfShWDyBUJzZfo15KmT+95hr4n wqUbBbWFlYqZKMEsnd0lmIGqU+pOHZ8qebXa9BLuPHrdaM5Lcp6Gw5egyPtl/qCd 4pPwQMDhxKm9eV2+spegOEvbJBKTtgJbmWICii9wa4cjBJBdUeHVeN9fuPun4IPe 63O4h1ZNNoDXD1aP+/wxTq6VtjROA4i36ERuW1EqE83YhkXt4UY= -----END CERTIFICATE-----Generated at Sun Jan 25 23:19:36 2026 by rpki-client