This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/3328f24e-dc7f-4562-a51d-e2e38c3677d1/0/66442B8563B5A590ED84F72A8C7B97A16B9C9F3A.mft File: 66442B8563B5A590ED84F72A8C7B97A16B9C9F3A.mft (raw, json) Hash identifier: 8RStSfudXmY5QltZb+8DM1rKdGZm48/Oh8dFYzR/VQ0= Subject key identifier: E5:04:D4:93:E4:E6:F2:50:30:F5:90:F2:D4:4F:EF:30:F7:6D:38:93 Authority key identifier: 66:44:2B:85:63:B5:A5:90:ED:84:F7:2A:8C:7B:97:A1:6B:9C:9F:3A Certificate issuer: /CN=66442B8563B5A590ED84F72A8C7B97A16B9C9F3A Certificate serial: 209953280F9B22F9EEA4652A365FD03696208E67 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/66442B8563B5A590ED84F72A8C7B97A16B9C9F3A.cer Subject info access: rsync://repo-rpki.idnic.net/repo/3328f24e-dc7f-4562-a51d-e2e38c3677d1/0/66442B8563B5A590ED84F72A8C7B97A16B9C9F3A.mft Manifest number: 0433 Signing time: Sat 24 Jan 2026 14:22:02 +0000 Manifest this update: Sat 24 Jan 2026 14:17:02 +0000 Manifest next update: Tue 27 Jan 2026 20:29:02 +0000 Files and hashes: 1: AS23693.roa (hash: x5VXB95dtKT5OQR+S1O83x2JIqFsVpTsDEkUCu37XvQ=) 2: 66442B8563B5A590ED84F72A8C7B97A16B9C9F3A.crl (hash: PaVQPGTu9T7Ox0uuUWh/ANCVQL10jLeurLP8Hk79Uyo=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/3328f24e-dc7f-4562-a51d-e2e38c3677d1/0/66442B8563B5A590ED84F72A8C7B97A16B9C9F3A.crl rsync://repo-rpki.idnic.net/repo/3328f24e-dc7f-4562-a51d-e2e38c3677d1/0/66442B8563B5A590ED84F72A8C7B97A16B9C9F3A.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/66442B8563B5A590ED84F72A8C7B97A16B9C9F3A.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 27 Jan 2026 20:29:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 20:99:53:28:0f:9b:22:f9:ee:a4:65:2a:36:5f:d0:36:96:20:8e:67 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=66442B8563B5A590ED84F72A8C7B97A16B9C9F3A Validity Not Before: Jan 24 14:17:02 2026 GMT Not After : Jan 27 20:29:02 2026 GMT Subject: CN=E504D493E4E6F25030F590F2D44FEF30F76D3893 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:3a:aa:0c:21:25:66:ff:26:c7:2d:78:44:17: b1:bd:d1:d3:1c:ed:54:f4:a2:7f:52:08:c3:63:ff: 81:90:17:30:2f:52:98:09:86:e1:ec:c9:7c:44:ee: 97:ad:33:11:46:8f:4c:07:35:61:26:b1:bd:19:9c: fd:17:62:86:88:66:a8:93:3d:aa:db:3f:4a:41:b3: 0f:6e:4e:ee:eb:37:b3:20:98:e7:ac:d1:6f:bd:00: 10:6f:fe:6e:21:69:42:ab:e9:32:5b:78:a5:d6:c6: 44:1f:06:6d:ad:a8:7c:7e:63:39:da:96:51:30:05: c3:2d:20:af:ef:8b:3a:1e:75:a9:58:e9:e6:4d:2e: 7c:4c:4f:d5:15:f0:cc:a3:53:57:f5:50:98:90:cd: 2f:7a:98:85:15:b8:3f:cf:c9:c2:fe:40:f1:25:1a: 1a:cc:ea:bc:80:1d:00:ab:e9:12:61:c8:d6:a4:75: d1:ee:d7:8c:ab:31:77:aa:d5:da:ce:8c:33:e9:47: 4a:4e:b4:33:e4:28:72:74:b6:c8:ca:98:5d:39:fa: db:07:c1:9f:fc:5d:87:46:13:fa:47:43:4f:d2:27: d5:dc:41:02:ce:b5:14:6d:8c:70:2f:09:1c:c4:7a: b0:a4:02:42:7c:06:c9:04:c5:a8:b4:4c:ce:92:64: c4:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:04:D4:93:E4:E6:F2:50:30:F5:90:F2:D4:4F:EF:30:F7:6D:38:93 X509v3 Authority Key Identifier: keyid:66:44:2B:85:63:B5:A5:90:ED:84:F7:2A:8C:7B:97:A1:6B:9C:9F:3A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/3328f24e-dc7f-4562-a51d-e2e38c3677d1/0/66442B8563B5A590ED84F72A8C7B97A16B9C9F3A.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/66442B8563B5A590ED84F72A8C7B97A16B9C9F3A.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3328f24e-dc7f-4562-a51d-e2e38c3677d1/0/66442B8563B5A590ED84F72A8C7B97A16B9C9F3A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 54:79:21:ec:fc:a9:9a:7b:b5:77:ca:9a:23:ec:c8:45:ae:f4: 15:88:ca:c2:c3:b4:50:97:54:ca:0e:4d:e6:12:9a:74:4c:24: 29:79:a6:5e:f7:d6:7b:53:a7:0d:94:37:53:a8:9c:2c:a3:1f: ac:8a:43:c7:19:fc:8b:4d:d9:ab:4a:14:23:0c:59:13:51:f2: 00:86:51:9f:f3:f8:aa:c8:38:b9:9b:97:21:43:7d:5e:2c:68: 62:9c:35:be:b7:7b:ea:0a:b5:34:9e:90:52:57:72:ab:b3:d0: a0:63:1f:59:20:a1:86:35:4a:8f:3a:f1:7f:8e:78:b5:43:44: 3f:f4:05:5d:36:68:ec:99:47:72:75:4e:15:f9:0d:20:26:a2: 8b:b1:21:2b:b2:ed:42:c8:42:14:22:f0:3d:45:e6:98:52:fa: 16:28:12:5c:9d:ca:49:17:68:c2:08:85:50:8c:e6:24:c5:e3: a9:be:b2:18:e0:33:74:d4:73:dc:01:f1:0e:b3:c3:5a:55:5b: 5b:3a:de:48:eb:a7:f6:74:24:af:ca:68:21:94:b4:8a:3d:03: 3c:9b:24:6e:15:d3:b4:db:dc:57:25:56:55:24:95:5c:04:6a: 26:76:48:e4:91:22:28:61:3c:c1:32:a3:9c:9c:d7:a9:b6:1d: eb:c3:46:e4 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUIJlTKA+bIvnupGUqNl/QNpYgjmcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjY0NDJCODU2M0I1QTU5MEVEODRGNzJBOEM3Qjk3QTE2 QjlDOUYzQTAeFw0yNjAxMjQxNDE3MDJaFw0yNjAxMjcyMDI5MDJaMDMxMTAvBgNV BAMTKEU1MDRENDkzRTRFNkYyNTAzMEY1OTBGMkQ0NEZFRjMwRjc2RDM4OTMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCxOqoMISVm/ybHLXhEF7G90dMc 7VT0on9SCMNj/4GQFzAvUpgJhuHsyXxE7petMxFGj0wHNWEmsb0ZnP0XYoaIZqiT ParbP0pBsw9uTu7rN7MgmOes0W+9ABBv/m4haUKr6TJbeKXWxkQfBm2tqHx+Yzna llEwBcMtIK/vizoedalY6eZNLnxMT9UV8MyjU1f1UJiQzS96mIUVuD/PycL+QPEl GhrM6ryAHQCr6RJhyNakddHu14yrMXeq1drOjDPpR0pOtDPkKHJ0tsjKmF05+tsH wZ/8XYdGE/pHQ0/SJ9XcQQLOtRRtjHAvCRzEerCkAkJ8BskExai0TM6SZMT5AgMB AAGjggI8MIICODAdBgNVHQ4EFgQU5QTUk+Tm8lAw9ZDy1E/vMPdtOJMwHwYDVR0j BBgwFoAUZkQrhWO1pZDthPcqjHuXoWucnzowDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z MzI4ZjI0ZS1kYzdmLTQ1NjItYTUxZC1lMmUzOGMzNjc3ZDEvMC82NjQ0MkI4NTYz QjVBNTkwRUQ4NEY3MkE4QzdCOTdBMTZCOUM5RjNBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNjY0NDJCODU2M0I1QTU5MEVEODRGNzJBOEM3Qjk3QTE2QjlD OUYzQS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMzMyOGYyNGUtZGM3Zi00NTYyLWE1 MWQtZTJlMzhjMzY3N2QxLzAvNjY0NDJCODU2M0I1QTU5MEVEODRGNzJBOEM3Qjk3 QTE2QjlDOUYzQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFR5Iez8qZp7tXfKmiPsyEWu9BWIysLDtFCX VMoOTeYSmnRMJCl5pl731ntTpw2UN1OonCyjH6yKQ8cZ/ItN2atKFCMMWRNR8gCG UZ/z+KrIOLmblyFDfV4saGKcNb63e+oKtTSekFJXcquz0KBjH1kgoYY1So868X+O eLVDRD/0BV02aOyZR3J1ThX5DSAmoouxISuy7ULIQhQi8D1F5phS+hYoElydykkX aMIIhVCM5iTF46m+shjgM3TUc9wB8Q6zw1pVW1s63kjrp/Z0JK/KaCGUtIo9Azyb JG4V07Tb3FclVlUklVwEaiZ2SOSRIihhPMEyo5yc16m2HevDRuQ= -----END CERTIFICATE-----Generated at Sun Jan 25 20:32:54 2026 by rpki-client