This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/3a8a9a81-0a52-4a50-b7f6-a36f86f3d2c7/0/26B04331F3DBA70B694F2FFF371C85EE023FB70F.mft File: 26B04331F3DBA70B694F2FFF371C85EE023FB70F.mft (raw, json) Hash identifier: 4uC5f+bhpOByOZRbe/mX0R6iM6pL0Ge7C7r9j78lTGo= Subject key identifier: E9:B1:57:7E:FE:DD:7F:D5:5E:B3:07:71:2F:42:01:7A:15:D0:C6:9B Authority key identifier: 26:B0:43:31:F3:DB:A7:0B:69:4F:2F:FF:37:1C:85:EE:02:3F:B7:0F Certificate issuer: /CN=26B04331F3DBA70B694F2FFF371C85EE023FB70F Certificate serial: 4186DD78AC98C6A514C60BF0BF1000CA13BDF0AC Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/26B04331F3DBA70B694F2FFF371C85EE023FB70F.cer Subject info access: rsync://repo-rpki.idnic.net/repo/3a8a9a81-0a52-4a50-b7f6-a36f86f3d2c7/0/26B04331F3DBA70B694F2FFF371C85EE023FB70F.mft Manifest number: 0288 Signing time: Sun 25 Jan 2026 11:10:44 +0000 Manifest this update: Sun 25 Jan 2026 11:05:44 +0000 Manifest next update: Wed 28 Jan 2026 18:39:44 +0000 Files and hashes: 1: 3130332e3138302e302e302f32332d3233203d3e2039333431.roa (hash: +s+ZoPDcwc45gGow9YdBPADqPzbPO8zvkcvI3KhfKWg=) 2: 26B04331F3DBA70B694F2FFF371C85EE023FB70F.crl (hash: 4kaj8UlD0Aj3cGXI/xh/O9YwrMHx/sRmlL1so5qOmKk=) 3: 3130332e3138302e312e302f32342d3234203d3e2039333431.roa (hash: ikGxWPZOEbgUDak1S8/4CtTFLYGMeDrUhJdgA4v8gic=) 4: 3130332e3138302e302e302f32342d3234203d3e2039333431.roa (hash: 8QADEgAErVDYeQ0m0w7xjODJNew42ezz18E9+und7b8=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/3a8a9a81-0a52-4a50-b7f6-a36f86f3d2c7/0/26B04331F3DBA70B694F2FFF371C85EE023FB70F.crl rsync://repo-rpki.idnic.net/repo/3a8a9a81-0a52-4a50-b7f6-a36f86f3d2c7/0/26B04331F3DBA70B694F2FFF371C85EE023FB70F.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/26B04331F3DBA70B694F2FFF371C85EE023FB70F.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 28 Jan 2026 14:00:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 41:86:dd:78:ac:98:c6:a5:14:c6:0b:f0:bf:10:00:ca:13:bd:f0:ac Signature Algorithm: sha256WithRSAEncryption Issuer: CN=26B04331F3DBA70B694F2FFF371C85EE023FB70F Validity Not Before: Jan 25 11:05:44 2026 GMT Not After : Jan 28 18:39:44 2026 GMT Subject: CN=E9B1577EFEDD7FD55EB307712F42017A15D0C69B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:c3:29:39:2a:38:05:a4:f3:f9:6d:5f:3a:16: 30:9d:48:c6:3b:d3:f0:7d:ba:f6:11:c0:6b:e9:38: 6e:6e:e9:fe:6b:61:7f:d0:9d:0d:00:eb:4d:02:cc: 81:07:6f:ef:68:85:91:4f:21:be:64:b3:3f:bb:e1: d3:ea:93:e1:4a:ac:c9:39:12:85:6a:3b:67:03:de: 16:0a:38:9e:7e:51:c3:bc:cf:05:54:02:9c:7c:33: 8c:26:73:44:4d:d5:3f:64:48:55:4b:95:40:1f:df: f6:49:cc:54:87:63:bb:7f:25:92:aa:81:26:76:b9: 10:57:a1:a1:38:7a:1a:6b:06:5d:e0:04:68:15:01: bd:7b:b9:3e:f3:eb:82:23:8c:5e:9e:14:f2:45:a4: e0:12:5f:56:eb:1d:90:e6:2a:63:15:7a:15:bf:33: ac:e7:27:08:16:46:63:1e:4d:d4:da:39:e2:44:8b: 23:58:4e:a2:23:58:e1:eb:06:85:26:71:a8:0c:b8: 93:a6:81:11:72:0d:33:d6:bb:97:15:2b:4a:bb:61: 30:e8:f3:02:56:e5:d6:a5:ff:f4:56:6b:06:a6:51: 11:41:64:1e:20:85:a7:45:8f:29:7f:14:a8:af:21: de:04:90:b9:7b:cc:e4:5d:c9:f6:da:af:b8:bd:c5: c0:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E9:B1:57:7E:FE:DD:7F:D5:5E:B3:07:71:2F:42:01:7A:15:D0:C6:9B X509v3 Authority Key Identifier: keyid:26:B0:43:31:F3:DB:A7:0B:69:4F:2F:FF:37:1C:85:EE:02:3F:B7:0F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/3a8a9a81-0a52-4a50-b7f6-a36f86f3d2c7/0/26B04331F3DBA70B694F2FFF371C85EE023FB70F.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/26B04331F3DBA70B694F2FFF371C85EE023FB70F.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3a8a9a81-0a52-4a50-b7f6-a36f86f3d2c7/0/26B04331F3DBA70B694F2FFF371C85EE023FB70F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 06:e8:6a:0f:fc:d5:94:4e:dd:0d:fe:89:46:17:5f:10:48:13: 0b:86:40:43:df:9b:90:03:8c:c2:14:76:14:f7:97:f8:98:10: 0d:52:d5:7f:34:04:81:0f:25:a5:97:55:15:45:75:7e:0b:1e: 88:0c:92:35:8a:78:82:75:29:ad:5e:ac:76:bd:da:08:57:88: 93:d2:ac:32:80:00:09:cb:17:90:aa:9d:ac:be:5f:55:c5:2c: cf:b7:da:e8:3b:2c:e9:12:7d:8e:58:97:01:c7:7e:1b:c3:db: 78:4d:57:41:d2:e1:b9:51:6c:c4:f0:ca:0f:f6:58:9f:62:31: 5f:25:3a:f2:55:ed:67:0b:31:06:d0:75:51:ad:7e:72:c5:38: b6:d6:ea:07:8b:6f:61:1d:d7:fa:a1:c8:bb:d3:2e:5c:97:9d: ba:e6:b9:7e:15:9d:1c:7b:eb:5c:ff:a7:ef:dd:55:51:99:64: 9b:06:69:48:89:3e:7a:f5:12:c0:c4:cc:a1:ae:92:50:78:9a: 21:5a:49:db:b9:2d:59:dd:fd:3f:d7:27:63:07:68:8a:4f:96: 67:0e:9a:23:9d:51:22:ba:b5:d2:f1:13:a8:8d:06:11:10:ed: 1e:c7:d4:76:8a:1a:21:31:5f:91:d1:a5:ac:ec:ad:4b:ba:c0: 8e:cf:c9:f4 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUQYbdeKyYxqUUxgvwvxAAyhO98KwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjZCMDQzMzFGM0RCQTcwQjY5NEYyRkZGMzcxQzg1RUUw MjNGQjcwRjAeFw0yNjAxMjUxMTA1NDRaFw0yNjAxMjgxODM5NDRaMDMxMTAvBgNV BAMTKEU5QjE1NzdFRkVERDdGRDU1RUIzMDc3MTJGNDIwMTdBMTVEMEM2OUIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDPwyk5KjgFpPP5bV86FjCdSMY7 0/B9uvYRwGvpOG5u6f5rYX/QnQ0A600CzIEHb+9ohZFPIb5ksz+74dPqk+FKrMk5 EoVqO2cD3hYKOJ5+UcO8zwVUApx8M4wmc0RN1T9kSFVLlUAf3/ZJzFSHY7t/JZKq gSZ2uRBXoaE4ehprBl3gBGgVAb17uT7z64IjjF6eFPJFpOASX1brHZDmKmMVehW/ M6znJwgWRmMeTdTaOeJEiyNYTqIjWOHrBoUmcagMuJOmgRFyDTPWu5cVK0q7YTDo 8wJW5dal//RWawamURFBZB4ghadFjyl/FKivId4EkLl7zORdyfbar7i9xcBFAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU6bFXfv7df9VeswdxL0IBehXQxpswHwYDVR0j BBgwFoAUJrBDMfPbpwtpTy//NxyF7gI/tw8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z YThhOWE4MS0wYTUyLTRhNTAtYjdmNi1hMzZmODZmM2QyYzcvMC8yNkIwNDMzMUYz REJBNzBCNjk0RjJGRkYzNzFDODVFRTAyM0ZCNzBGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMjZCMDQzMzFGM0RCQTcwQjY5NEYyRkZGMzcxQzg1RUUwMjNG QjcwRi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vM2E4YTlhODEtMGE1Mi00YTUwLWI3 ZjYtYTM2Zjg2ZjNkMmM3LzAvMjZCMDQzMzFGM0RCQTcwQjY5NEYyRkZGMzcxQzg1 RUUwMjNGQjcwRi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAboag/81ZRO3Q3+iUYXXxBIEwuGQEPfm5AD jMIUdhT3l/iYEA1S1X80BIEPJaWXVRVFdX4LHogMkjWKeIJ1Ka1erHa92ghXiJPS rDKAAAnLF5Cqnay+X1XFLM+32ug7LOkSfY5YlwHHfhvD23hNV0HS4blRbMTwyg/2 WJ9iMV8lOvJV7WcLMQbQdVGtfnLFOLbW6geLb2Ed1/qhyLvTLlyXnbrmuX4VnRx7 61z/p+/dVVGZZJsGaUiJPnr1EsDEzKGuklB4miFaSdu5LVnd/T/XJ2MHaIpPlmcO miOdUSK6tdLxE6iNBhEQ7R7H1HaKGiExX5HRpazsrUu6wI7PyfQ= -----END CERTIFICATE-----Generated at Sun Jan 25 20:33:02 2026 by rpki-client