This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/38c9c252-f7ca-4dd5-88f6-22addc8934b3/0/C1C0233DC07302E86D114AB772AB6566ED7F5FBB.mft File: C1C0233DC07302E86D114AB772AB6566ED7F5FBB.mft (raw, json) Hash identifier: qYTQuMeT3VF66Htw03Xtm0E5KGevau9cs9gVL04+AP0= Subject key identifier: 30:39:CA:9E:C6:E2:36:B5:29:C9:1A:70:5C:03:A3:59:7B:5D:A8:0F Authority key identifier: C1:C0:23:3D:C0:73:02:E8:6D:11:4A:B7:72:AB:65:66:ED:7F:5F:BB Certificate issuer: /CN=C1C0233DC07302E86D114AB772AB6566ED7F5FBB Certificate serial: 4952BA8001899C287DA76751145271F5483DA741 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C1C0233DC07302E86D114AB772AB6566ED7F5FBB.cer Subject info access: rsync://repo-rpki.idnic.net/repo/38c9c252-f7ca-4dd5-88f6-22addc8934b3/0/C1C0233DC07302E86D114AB772AB6566ED7F5FBB.mft Manifest number: 0229 Signing time: Sun 25 Jan 2026 03:31:53 +0000 Manifest this update: Sun 25 Jan 2026 03:26:53 +0000 Manifest next update: Wed 28 Jan 2026 08:25:53 +0000 Files and hashes: 1: 323430373a373263303a3a2f33322d3332203d3e203538383230.roa (hash: Uxuob34lJgOCFn3rUm77IOpVd7DaLceyCMpWeS74nuM=) 2: 323430373a373263303a3a2f33322d3438203d3e203538383230.roa (hash: 1MWdh9/G7GKdCjppGSd2ji+0mFINmD1XWOxoK1Yj1iA=) 3: 3130332e3135322e39322e302f32332d3234203d3e20313338383630.roa (hash: bltZi0XDvzmwgyzEl66AozT5pKIvx60Z1RNoNEbNdrk=) 4: C1C0233DC07302E86D114AB772AB6566ED7F5FBB.crl (hash: kZTSrt5pA7GwPwwzatoTZc92awJ67dCiX2+t4aI2eJI=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/38c9c252-f7ca-4dd5-88f6-22addc8934b3/0/C1C0233DC07302E86D114AB772AB6566ED7F5FBB.crl rsync://repo-rpki.idnic.net/repo/38c9c252-f7ca-4dd5-88f6-22addc8934b3/0/C1C0233DC07302E86D114AB772AB6566ED7F5FBB.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C1C0233DC07302E86D114AB772AB6566ED7F5FBB.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 28 Jan 2026 08:25:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 49:52:ba:80:01:89:9c:28:7d:a7:67:51:14:52:71:f5:48:3d:a7:41 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C1C0233DC07302E86D114AB772AB6566ED7F5FBB Validity Not Before: Jan 25 03:26:53 2026 GMT Not After : Jan 28 08:25:53 2026 GMT Subject: CN=3039CA9EC6E236B529C91A705C03A3597B5DA80F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:8b:71:57:c5:78:fd:61:b5:5a:fc:51:e5:4e: d8:b6:04:90:ab:ea:0f:d6:b4:62:31:d7:47:b8:e7: e5:5b:64:6c:1e:d2:da:84:b3:b1:c7:3d:68:8c:0e: 10:e9:11:a5:b8:5c:fc:df:7a:a5:68:38:38:ef:2a: ca:9a:4d:a1:7f:ca:2b:09:c9:7e:5f:09:56:78:3b: c8:85:77:7c:08:1c:37:86:68:0d:9b:95:89:f6:11: f8:aa:c1:aa:cc:54:52:d7:da:68:53:84:86:db:5b: 01:57:37:38:90:ab:5e:88:f9:07:d5:e9:fd:51:04: 40:cd:d3:4f:15:80:7b:bd:da:f3:e8:76:33:80:ce: 40:d0:66:d0:9d:f2:b2:4e:4e:01:c2:c1:6b:50:92: 28:4c:c4:0b:a8:1a:5d:71:33:8a:c6:05:de:82:1d: 9c:19:e4:ca:8d:22:ba:80:20:fd:66:e0:1d:2d:c6: c7:a4:db:8c:86:85:d0:23:b4:fd:be:8d:59:1a:55: 05:b9:3d:91:4c:96:f8:f7:14:ed:af:b5:d3:39:ff: 16:b0:94:e5:e1:2d:d2:22:d3:eb:ad:1f:ce:4d:c4: 13:6f:d2:d6:3b:40:73:8f:40:3e:cb:5c:10:96:9e: 4e:96:fc:6e:92:ba:fb:d3:2b:12:18:ba:cc:03:d0: e6:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 30:39:CA:9E:C6:E2:36:B5:29:C9:1A:70:5C:03:A3:59:7B:5D:A8:0F X509v3 Authority Key Identifier: keyid:C1:C0:23:3D:C0:73:02:E8:6D:11:4A:B7:72:AB:65:66:ED:7F:5F:BB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/38c9c252-f7ca-4dd5-88f6-22addc8934b3/0/C1C0233DC07302E86D114AB772AB6566ED7F5FBB.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C1C0233DC07302E86D114AB772AB6566ED7F5FBB.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/38c9c252-f7ca-4dd5-88f6-22addc8934b3/0/C1C0233DC07302E86D114AB772AB6566ED7F5FBB.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 95:b7:4c:6c:45:2a:64:b8:cb:8c:75:2e:06:b6:f8:0f:d7:13: 95:e5:f5:e8:c2:61:2d:66:1a:5f:a9:dc:9e:e6:53:fa:3f:6c: 0a:9d:84:eb:58:ae:c8:d5:92:93:cd:4b:73:92:19:08:a2:2a: c1:40:3d:13:c5:67:54:53:1d:26:ea:da:f4:80:7b:66:f8:65: 29:e9:d1:58:07:22:30:27:4d:07:2b:f5:86:9a:7c:9c:07:c7: f7:af:ea:d3:39:da:f9:1e:1e:67:e0:22:33:85:2a:a3:72:e0: d5:e4:1c:14:13:08:41:91:58:c6:9d:f8:e2:70:9d:24:a6:2f: c5:ba:21:06:a0:0d:70:10:1d:7b:c3:3a:d5:ee:3f:85:eb:d6: 91:99:b0:15:66:f1:ca:a9:7c:73:ee:5c:7d:38:85:48:e3:7f: 7f:81:7a:99:c3:93:6f:73:85:2f:2f:d7:8d:59:b5:19:bf:b9: 80:a2:b3:d7:6d:91:d3:c8:79:d3:6e:ee:c4:58:40:50:68:b6: 49:d9:33:0e:b6:6f:c5:a7:8d:ff:73:4c:e0:fd:11:f6:14:36: 66:1f:22:f9:27:69:5f:ad:fa:54:2c:f5:eb:10:10:48:d3:20: 4a:83:e5:ed:9f:7a:6d:6e:ec:00:ad:80:3b:4e:1a:cc:16:2a: 36:e7:2d:64 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUSVK6gAGJnCh9p2dRFFJx9Ug9p0EwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzFDMDIzM0RDMDczMDJFODZEMTE0QUI3NzJBQjY1NjZF RDdGNUZCQjAeFw0yNjAxMjUwMzI2NTNaFw0yNjAxMjgwODI1NTNaMDMxMTAvBgNV BAMTKDMwMzlDQTlFQzZFMjM2QjUyOUM5MUE3MDVDMDNBMzU5N0I1REE4MEYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDei3FXxXj9YbVa/FHlTti2BJCr 6g/WtGIx10e45+VbZGwe0tqEs7HHPWiMDhDpEaW4XPzfeqVoODjvKsqaTaF/yisJ yX5fCVZ4O8iFd3wIHDeGaA2blYn2EfiqwarMVFLX2mhThIbbWwFXNziQq16I+QfV 6f1RBEDN008VgHu92vPodjOAzkDQZtCd8rJOTgHCwWtQkihMxAuoGl1xM4rGBd6C HZwZ5MqNIrqAIP1m4B0txsek24yGhdAjtP2+jVkaVQW5PZFMlvj3FO2vtdM5/xaw lOXhLdIi0+utH85NxBNv0tY7QHOPQD7LXBCWnk6W/G6SuvvTKxIYuswD0OZtAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUMDnKnsbiNrUpyRpwXAOjWXtdqA8wHwYDVR0j BBgwFoAUwcAjPcBzAuhtEUq3cqtlZu1/X7swDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z OGM5YzI1Mi1mN2NhLTRkZDUtODhmNi0yMmFkZGM4OTM0YjMvMC9DMUMwMjMzREMw NzMwMkU4NkQxMTRBQjc3MkFCNjU2NkVEN0Y1RkJCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQzFDMDIzM0RDMDczMDJFODZEMTE0QUI3NzJBQjY1NjZFRDdG NUZCQi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMzhjOWMyNTItZjdjYS00ZGQ1LTg4 ZjYtMjJhZGRjODkzNGIzLzAvQzFDMDIzM0RDMDczMDJFODZEMTE0QUI3NzJBQjY1 NjZFRDdGNUZCQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJW3TGxFKmS4y4x1Lga2+A/XE5Xl9ejCYS1m Gl+p3J7mU/o/bAqdhOtYrsjVkpPNS3OSGQiiKsFAPRPFZ1RTHSbq2vSAe2b4ZSnp 0VgHIjAnTQcr9YaafJwHx/ev6tM52vkeHmfgIjOFKqNy4NXkHBQTCEGRWMad+OJw nSSmL8W6IQagDXAQHXvDOtXuP4Xr1pGZsBVm8cqpfHPuXH04hUjjf3+BepnDk29z hS8v141ZtRm/uYCis9dtkdPIedNu7sRYQFBotknZMw62b8Wnjf9zTOD9EfYUNmYf IvknaV+t+lQs9esQEEjTIEqD5e2fem1u7ACtgDtOGswWKjbnLWQ= -----END CERTIFICATE-----Generated at Sun Jan 25 19:00:30 2026 by rpki-client