This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/362bacc9-d25d-4610-aee4-655a14ea2fd6/0/44221B3D145FCC17734F7C523353CB67A0B8D3B3.mft File: 44221B3D145FCC17734F7C523353CB67A0B8D3B3.mft (raw, json) Hash identifier: d5F46OJIpkEGini7yIYjjHwaKPlu0m1zy3KOeTwEsdc= Subject key identifier: CB:3F:A2:40:C7:72:20:33:97:A6:2A:17:A8:A7:9E:68:B9:2A:16:08 Authority key identifier: 44:22:1B:3D:14:5F:CC:17:73:4F:7C:52:33:53:CB:67:A0:B8:D3:B3 Certificate issuer: /CN=44221B3D145FCC17734F7C523353CB67A0B8D3B3 Certificate serial: 33C8329325FEF868BBC15FE9F5B9F199962E8A40 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/44221B3D145FCC17734F7C523353CB67A0B8D3B3.cer Subject info access: rsync://repo-rpki.idnic.net/repo/362bacc9-d25d-4610-aee4-655a14ea2fd6/0/44221B3D145FCC17734F7C523353CB67A0B8D3B3.mft Manifest number: 01A0 Signing time: Sun 25 Jan 2026 11:02:28 +0000 Manifest this update: Sun 25 Jan 2026 10:57:28 +0000 Manifest next update: Wed 28 Jan 2026 12:41:28 +0000 Files and hashes: 1: 3130332e34332e3136352e302f32342d3234203d3e20313530323834.roa (hash: /c44B7YWLXkTIXveICv4tGTzoppi+BEbX8keLXTbk3Q=) 2: 3130332e34332e3136342e302f32332d3233203d3e20313530323834.roa (hash: LGuKxagsq/7vmLaELbXZH0S7mkj0txetpKocd5RK03Y=) 3: 44221B3D145FCC17734F7C523353CB67A0B8D3B3.crl (hash: Cjr1kkrJjERoX/Faxv+jdRx+bvTM4e9lrt9Bc+KM5jU=) 4: 3130332e34332e3136342e302f32342d3234203d3e20313530323834.roa (hash: OhIKqdGLlbYOYf2QSJaf1Zp1dQFPdS35U6UJ3Ooje5Q=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/362bacc9-d25d-4610-aee4-655a14ea2fd6/0/44221B3D145FCC17734F7C523353CB67A0B8D3B3.crl rsync://repo-rpki.idnic.net/repo/362bacc9-d25d-4610-aee4-655a14ea2fd6/0/44221B3D145FCC17734F7C523353CB67A0B8D3B3.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/44221B3D145FCC17734F7C523353CB67A0B8D3B3.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 28 Jan 2026 12:41:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 33:c8:32:93:25:fe:f8:68:bb:c1:5f:e9:f5:b9:f1:99:96:2e:8a:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=44221B3D145FCC17734F7C523353CB67A0B8D3B3 Validity Not Before: Jan 25 10:57:28 2026 GMT Not After : Jan 28 12:41:28 2026 GMT Subject: CN=CB3FA240C772203397A62A17A8A79E68B92A1608 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:13:2c:ff:1f:97:c1:4f:ab:d0:50:5e:62:ab: b8:b3:40:b2:29:05:9b:8c:6e:f7:2a:41:3b:c3:a8: 2b:6c:0d:44:e1:db:0c:25:5b:c1:a7:10:1b:40:ad: f2:58:6f:a0:d0:b0:32:58:7a:b1:45:90:1b:71:63: db:d8:51:d9:25:d3:1c:85:12:60:16:8f:1e:e9:5f: 46:e9:97:6e:21:7d:49:5a:b0:c0:3e:df:a2:0e:40: 19:b6:60:a7:d6:98:e9:f9:96:dd:36:0c:3f:b7:4c: 23:0d:a4:2b:2c:d0:57:26:ee:35:2c:44:80:e2:70: 71:0a:d8:20:79:b5:8f:98:a6:c9:9d:0b:76:fe:1a: 01:04:70:0a:aa:54:f2:b8:11:87:78:83:91:58:2a: dd:d9:b1:4f:2c:32:db:39:f1:ed:fa:91:05:ff:94: 34:fe:0b:62:39:5f:b9:21:9c:2f:62:44:bf:62:a9: c6:c6:e3:6f:5c:20:d9:42:7d:fc:18:60:7c:ad:44: 61:b1:37:85:51:80:94:f2:24:6c:68:05:c5:a8:52: 70:11:be:c2:6b:10:b7:1a:bb:34:79:9f:f7:f6:b4: da:cd:31:35:8a:f5:a2:4b:a5:91:df:36:16:39:d6: e8:8d:bb:bc:e5:7c:be:32:2f:a8:c3:f6:40:83:72: a2:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CB:3F:A2:40:C7:72:20:33:97:A6:2A:17:A8:A7:9E:68:B9:2A:16:08 X509v3 Authority Key Identifier: keyid:44:22:1B:3D:14:5F:CC:17:73:4F:7C:52:33:53:CB:67:A0:B8:D3:B3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/362bacc9-d25d-4610-aee4-655a14ea2fd6/0/44221B3D145FCC17734F7C523353CB67A0B8D3B3.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/44221B3D145FCC17734F7C523353CB67A0B8D3B3.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/362bacc9-d25d-4610-aee4-655a14ea2fd6/0/44221B3D145FCC17734F7C523353CB67A0B8D3B3.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 37:9a:92:8a:9c:1e:77:96:72:2f:61:3c:2b:8a:9e:ce:be:b9: 58:cb:c1:03:e4:4e:cd:38:4a:ea:04:f8:e2:e9:5a:6b:29:3f: e5:c9:a3:7f:dc:8c:ce:52:f3:4c:1c:eb:21:e6:b0:ae:b9:8e: 29:ac:1e:ea:6d:e5:b9:6a:35:5a:30:65:83:77:3d:1a:e4:9a: 6c:5a:e6:80:72:e2:e2:de:85:83:a3:da:22:36:76:f5:11:a2: 21:42:84:f5:ca:ad:5f:fc:a0:aa:25:30:e8:25:82:8c:70:f3: 03:86:82:db:4f:73:fd:19:86:80:f1:ee:88:63:9c:45:eb:e3: ab:ac:43:fd:4b:07:65:61:e8:5d:2c:a9:82:6e:f8:36:bd:88: e7:43:86:4b:9d:13:8a:38:b5:52:ce:37:ce:9f:cd:d2:73:f3: a8:69:3e:32:af:4f:96:dc:3a:5b:d3:7b:78:b7:28:02:ca:dc: 46:0e:fd:16:c9:66:2b:7d:de:eb:0b:ce:6c:f4:66:3e:f7:79: 57:c8:14:52:bf:eb:89:c6:cf:b8:e7:db:e4:4d:62:8d:f8:2b: 2b:de:be:77:f9:68:7f:70:fe:d7:02:fc:8e:d1:11:63:9a:3e: 8f:f5:b3:37:59:08:d9:9a:aa:b6:bb:ed:6c:8a:c9:98:ca:7d: 80:ac:50:59 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUM8gykyX++Gi7wV/p9bnxmZYuikAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDQyMjFCM0QxNDVGQ0MxNzczNEY3QzUyMzM1M0NCNjdB MEI4RDNCMzAeFw0yNjAxMjUxMDU3MjhaFw0yNjAxMjgxMjQxMjhaMDMxMTAvBgNV BAMTKENCM0ZBMjQwQzc3MjIwMzM5N0E2MkExN0E4QTc5RTY4QjkyQTE2MDgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDCEyz/H5fBT6vQUF5iq7izQLIp BZuMbvcqQTvDqCtsDUTh2wwlW8GnEBtArfJYb6DQsDJYerFFkBtxY9vYUdkl0xyF EmAWjx7pX0bpl24hfUlasMA+36IOQBm2YKfWmOn5lt02DD+3TCMNpCss0Fcm7jUs RIDicHEK2CB5tY+YpsmdC3b+GgEEcAqqVPK4EYd4g5FYKt3ZsU8sMts58e36kQX/ lDT+C2I5X7khnC9iRL9iqcbG429cINlCffwYYHytRGGxN4VRgJTyJGxoBcWoUnAR vsJrELcauzR5n/f2tNrNMTWK9aJLpZHfNhY51uiNu7zlfL4yL6jD9kCDcqLHAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUyz+iQMdyIDOXpioXqKeeaLkqFggwHwYDVR0j BBgwFoAURCIbPRRfzBdzT3xSM1PLZ6C407MwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z NjJiYWNjOS1kMjVkLTQ2MTAtYWVlNC02NTVhMTRlYTJmZDYvMC80NDIyMUIzRDE0 NUZDQzE3NzM0RjdDNTIzMzUzQ0I2N0EwQjhEM0IzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNDQyMjFCM0QxNDVGQ0MxNzczNEY3QzUyMzM1M0NCNjdBMEI4 RDNCMy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMzYyYmFjYzktZDI1ZC00NjEwLWFl ZTQtNjU1YTE0ZWEyZmQ2LzAvNDQyMjFCM0QxNDVGQ0MxNzczNEY3QzUyMzM1M0NC NjdBMEI4RDNCMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADeakoqcHneWci9hPCuKns6+uVjLwQPkTs04 SuoE+OLpWmspP+XJo3/cjM5S80wc6yHmsK65jimsHupt5blqNVowZYN3PRrkmmxa 5oBy4uLehYOj2iI2dvURoiFChPXKrV/8oKolMOglgoxw8wOGgttPc/0ZhoDx7ohj nEXr46usQ/1LB2Vh6F0sqYJu+Da9iOdDhkudE4o4tVLON86fzdJz86hpPjKvT5bc OlvTe3i3KALK3EYO/RbJZit93usLzmz0Zj73eVfIFFK/64nGz7jn2+RNYo34Kyve vnf5aH9w/tcC/I7REWOaPo/1szdZCNmaqra77WyKyZjKfYCsUFk= -----END CERTIFICATE-----Generated at Sun Jan 25 18:37:16 2026 by rpki-client