This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/33ad3757-93a0-4b33-9128-24aa61304eff/0/D043C2A2B395E6A7BC8A32F1AE6C1934B0235FA7.mft File: D043C2A2B395E6A7BC8A32F1AE6C1934B0235FA7.mft (raw, json) Hash identifier: 8f08CHSX33frTeICZujq9ZLEOXwktBGvVlqkZD4rsvU= Subject key identifier: B5:99:C5:05:79:1D:5D:E5:A4:21:66:4A:35:2D:FC:15:8B:F1:56:22 Authority key identifier: D0:43:C2:A2:B3:95:E6:A7:BC:8A:32:F1:AE:6C:19:34:B0:23:5F:A7 Certificate issuer: /CN=D043C2A2B395E6A7BC8A32F1AE6C1934B0235FA7 Certificate serial: 7CEED95CF16C1DC30EF0A8014846B867793AE2EC Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D043C2A2B395E6A7BC8A32F1AE6C1934B0235FA7.cer Subject info access: rsync://repo-rpki.idnic.net/repo/33ad3757-93a0-4b33-9128-24aa61304eff/0/D043C2A2B395E6A7BC8A32F1AE6C1934B0235FA7.mft Manifest number: 0222 Signing time: Sat 24 Jan 2026 09:41:48 +0000 Manifest this update: Sat 24 Jan 2026 09:36:48 +0000 Manifest next update: Tue 27 Jan 2026 14:56:48 +0000 Files and hashes: 1: 3130332e3231312e342e302f32332d3234203d3e2034383030.roa (hash: 59yz865tKQpU8UqeDFR2Q6MBnW99RvQGBX6jv6dW3C0=) 2: D043C2A2B395E6A7BC8A32F1AE6C1934B0235FA7.crl (hash: EHl5E2H5G0ZLmt74K9j9qpJ74kjR+CRvxUzJ8tUFk40=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/33ad3757-93a0-4b33-9128-24aa61304eff/0/D043C2A2B395E6A7BC8A32F1AE6C1934B0235FA7.crl rsync://repo-rpki.idnic.net/repo/33ad3757-93a0-4b33-9128-24aa61304eff/0/D043C2A2B395E6A7BC8A32F1AE6C1934B0235FA7.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D043C2A2B395E6A7BC8A32F1AE6C1934B0235FA7.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 27 Jan 2026 14:56:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7c:ee:d9:5c:f1:6c:1d:c3:0e:f0:a8:01:48:46:b8:67:79:3a:e2:ec Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D043C2A2B395E6A7BC8A32F1AE6C1934B0235FA7 Validity Not Before: Jan 24 09:36:48 2026 GMT Not After : Jan 27 14:56:48 2026 GMT Subject: CN=B599C505791D5DE5A421664A352DFC158BF15622 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:d3:09:5f:01:5b:27:1a:39:01:c5:ca:08:b0: 02:11:e4:7d:22:cf:f7:2f:5a:b7:b7:b3:44:ee:f0: 9c:d9:42:b6:ba:ee:d6:9b:08:2f:d4:b0:c7:ec:23: d0:55:e2:30:17:b1:c1:0d:ac:87:b1:dd:f6:0b:31: 52:1f:0c:64:a8:7c:34:32:64:85:1b:90:86:e6:18: b5:a5:db:29:6a:3f:18:3d:4b:7b:ce:86:dd:3b:8e: 00:50:52:d2:b4:e8:b4:f8:30:5c:a8:4d:86:cd:ed: 61:ce:0b:c8:b7:ed:d0:85:9e:6f:5d:a9:12:84:5d: fa:a4:7a:10:e8:57:10:04:2b:4b:63:88:95:75:6e: 16:a5:67:f5:23:11:99:65:bc:d0:fe:4b:fe:2e:57: f3:cc:37:a5:e4:6a:6c:10:b0:98:72:44:b9:7f:4b: d4:38:c2:39:6c:9b:d4:2e:c3:3c:b0:6e:27:a5:53: 8c:81:88:d2:aa:8b:06:d9:11:42:f8:72:01:89:56: 84:aa:70:2d:cf:ae:85:a4:36:18:28:3f:ca:7f:83: b9:fc:3b:4d:f7:93:90:55:fe:76:73:86:51:fa:a2: 48:79:60:27:7b:30:f2:f7:4f:f7:77:6b:94:27:55: 45:5f:2c:ba:da:6a:a8:bc:72:83:c1:97:68:71:90: ce:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B5:99:C5:05:79:1D:5D:E5:A4:21:66:4A:35:2D:FC:15:8B:F1:56:22 X509v3 Authority Key Identifier: keyid:D0:43:C2:A2:B3:95:E6:A7:BC:8A:32:F1:AE:6C:19:34:B0:23:5F:A7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/33ad3757-93a0-4b33-9128-24aa61304eff/0/D043C2A2B395E6A7BC8A32F1AE6C1934B0235FA7.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D043C2A2B395E6A7BC8A32F1AE6C1934B0235FA7.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/33ad3757-93a0-4b33-9128-24aa61304eff/0/D043C2A2B395E6A7BC8A32F1AE6C1934B0235FA7.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6e:76:be:c1:03:32:64:a4:02:2f:c6:6d:28:16:82:b8:97:85: 9e:f6:f8:87:c0:9a:2b:79:ba:33:e5:2e:1f:5c:23:33:26:3e: ac:9d:dd:43:6f:d5:d2:87:13:c2:ee:8a:3c:31:dc:0e:52:27: 50:1a:0a:ca:03:81:a7:00:c5:08:e7:15:aa:a3:04:d6:26:2d: 75:47:65:24:36:6c:56:86:31:05:04:fb:e0:f9:d7:c5:b4:10: 75:d5:de:7d:91:25:0a:66:13:b9:ea:4d:27:4f:ab:be:3e:d8: d7:ca:b6:e1:d1:9c:c4:f0:90:1c:fe:a5:ea:b7:bb:20:3f:43: 85:6f:a8:7f:36:30:0b:4c:cc:07:b5:d8:d8:5f:64:cb:57:f0: c5:a7:89:96:d0:4a:64:d4:e3:01:c3:92:ca:d1:53:f7:72:ca: 60:69:d2:c4:93:d9:9c:d7:0b:36:54:76:96:2d:7f:10:33:9f: 9e:93:19:e7:da:78:f4:3b:dd:c2:83:4c:61:05:49:d9:cb:b2: ff:81:e8:cb:a9:75:63:d1:5d:a8:5b:f3:ff:39:57:47:ba:2b: 13:c4:be:e5:f6:a2:84:bf:b2:cf:df:21:75:86:09:3f:9f:d2: 93:42:9a:64:50:24:82:e2:35:ae:68:3c:b7:6b:20:70:37:b4: a5:f8:38:7e -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUfO7ZXPFsHcMO8KgBSEa4Z3k64uwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDA0M0MyQTJCMzk1RTZBN0JDOEEzMkYxQUU2QzE5MzRC MDIzNUZBNzAeFw0yNjAxMjQwOTM2NDhaFw0yNjAxMjcxNDU2NDhaMDMxMTAvBgNV BAMTKEI1OTlDNTA1NzkxRDVERTVBNDIxNjY0QTM1MkRGQzE1OEJGMTU2MjIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCz0wlfAVsnGjkBxcoIsAIR5H0i z/cvWre3s0Tu8JzZQra67tabCC/UsMfsI9BV4jAXscENrIex3fYLMVIfDGSofDQy ZIUbkIbmGLWl2ylqPxg9S3vOht07jgBQUtK06LT4MFyoTYbN7WHOC8i37dCFnm9d qRKEXfqkehDoVxAEK0tjiJV1bhalZ/UjEZllvND+S/4uV/PMN6XkamwQsJhyRLl/ S9Q4wjlsm9QuwzywbielU4yBiNKqiwbZEUL4cgGJVoSqcC3ProWkNhgoP8p/g7n8 O033k5BV/nZzhlH6okh5YCd7MPL3T/d3a5QnVUVfLLraaqi8coPBl2hxkM7NAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUtZnFBXkdXeWkIWZKNS38FYvxViIwHwYDVR0j BBgwFoAU0EPCorOV5qe8ijLxrmwZNLAjX6cwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z M2FkMzc1Ny05M2EwLTRiMzMtOTEyOC0yNGFhNjEzMDRlZmYvMC9EMDQzQzJBMkIz OTVFNkE3QkM4QTMyRjFBRTZDMTkzNEIwMjM1RkE3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRDA0M0MyQTJCMzk1RTZBN0JDOEEzMkYxQUU2QzE5MzRCMDIz NUZBNy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMzNhZDM3NTctOTNhMC00YjMzLTkx MjgtMjRhYTYxMzA0ZWZmLzAvRDA0M0MyQTJCMzk1RTZBN0JDOEEzMkYxQUU2QzE5 MzRCMDIzNUZBNy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAG52vsEDMmSkAi/GbSgWgriXhZ72+IfAmit5 ujPlLh9cIzMmPqyd3UNv1dKHE8Luijwx3A5SJ1AaCsoDgacAxQjnFaqjBNYmLXVH ZSQ2bFaGMQUE++D518W0EHXV3n2RJQpmE7nqTSdPq74+2NfKtuHRnMTwkBz+peq3 uyA/Q4VvqH82MAtMzAe12NhfZMtX8MWniZbQSmTU4wHDksrRU/dyymBp0sST2ZzX CzZUdpYtfxAzn56TGefaePQ73cKDTGEFSdnLsv+B6MupdWPRXahb8/85V0e6KxPE vuX2ooS/ss/fIXWGCT+f0pNCmmRQJILiNa5oPLdrIHA3tKX4OH4= -----END CERTIFICATE-----Generated at Mon Jan 26 01:22:52 2026 by rpki-client