This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/3cc22c2e-aca7-42f2-9b8a-8da7d4e2ba00/0/0F24A59122D6FE7BEEED775DBE16A84E77624943.mft File: 0F24A59122D6FE7BEEED775DBE16A84E77624943.mft (raw, json) Hash identifier: qjIRXQW3r603PwDyKv8Cdl1lT73oQK3zEsbguDVmiL0= Subject key identifier: 14:0A:16:04:B1:CF:CE:76:06:33:19:7F:F2:D7:61:20:05:07:0C:05 Authority key identifier: 0F:24:A5:91:22:D6:FE:7B:EE:ED:77:5D:BE:16:A8:4E:77:62:49:43 Certificate issuer: /CN=0F24A59122D6FE7BEEED775DBE16A84E77624943 Certificate serial: 5DFABC34BAFBE32C9661FEA4D236152FD6FEFA46 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0F24A59122D6FE7BEEED775DBE16A84E77624943.cer Subject info access: rsync://repo-rpki.idnic.net/repo/3cc22c2e-aca7-42f2-9b8a-8da7d4e2ba00/0/0F24A59122D6FE7BEEED775DBE16A84E77624943.mft Manifest number: 027D Signing time: Sat 24 Jan 2026 20:50:04 +0000 Manifest this update: Sat 24 Jan 2026 20:45:04 +0000 Manifest next update: Tue 27 Jan 2026 22:20:04 +0000 Files and hashes: 1: 0F24A59122D6FE7BEEED775DBE16A84E77624943.crl (hash: an16EJ9xvIqQO6k/gxvSRdAV/r5bQoj/0AFqSDMrxGQ=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/3cc22c2e-aca7-42f2-9b8a-8da7d4e2ba00/0/0F24A59122D6FE7BEEED775DBE16A84E77624943.crl rsync://repo-rpki.idnic.net/repo/3cc22c2e-aca7-42f2-9b8a-8da7d4e2ba00/0/0F24A59122D6FE7BEEED775DBE16A84E77624943.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0F24A59122D6FE7BEEED775DBE16A84E77624943.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 27 Jan 2026 22:20:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5d:fa:bc:34:ba:fb:e3:2c:96:61:fe:a4:d2:36:15:2f:d6:fe:fa:46 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0F24A59122D6FE7BEEED775DBE16A84E77624943 Validity Not Before: Jan 24 20:45:04 2026 GMT Not After : Jan 27 22:20:04 2026 GMT Subject: CN=140A1604B1CFCE760633197FF2D7612005070C05 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ef:50:62:e3:ed:39:30:89:f0:80:f4:27:0d:08: e2:97:5b:26:ba:15:71:6d:09:a5:fd:6f:26:78:21: 03:d7:8d:5d:73:25:1f:d7:4d:fc:ec:af:6c:99:e2: 73:36:7f:5a:0b:35:5e:6f:06:e3:a0:45:8c:d9:25: 57:04:99:34:fd:74:3c:0a:e1:5c:ff:91:fb:41:36: eb:7e:13:e2:4c:73:a8:5a:01:0e:61:50:90:fb:28: 51:4f:54:1f:fb:be:30:76:ce:52:d3:42:7a:10:1f: ef:ab:75:30:93:1c:15:e9:d8:ea:2f:92:02:90:6b: 6d:57:09:ba:7f:c8:79:93:01:ce:c7:3e:f9:b1:96: dd:41:f5:02:89:cf:0d:1e:3c:59:f2:76:ce:74:26: c2:18:60:5a:7d:c3:d4:86:b1:fa:25:11:3e:5a:bd: 96:7f:6e:c5:cf:29:1a:56:27:4f:69:27:1b:77:b2: 25:25:1b:20:82:e9:a7:51:ed:d3:f0:68:ff:1d:68: 87:ce:20:49:ad:ed:82:bc:17:16:83:62:d8:03:3e: 25:e8:22:2a:0a:a6:2c:cd:e1:c9:a0:4d:b9:24:62: f4:c0:b0:0a:80:8d:46:0f:7a:6d:8a:09:ac:3d:e0: 6d:c7:01:3d:95:36:15:d5:b4:6c:9e:13:3f:f0:82: 4c:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:0A:16:04:B1:CF:CE:76:06:33:19:7F:F2:D7:61:20:05:07:0C:05 X509v3 Authority Key Identifier: keyid:0F:24:A5:91:22:D6:FE:7B:EE:ED:77:5D:BE:16:A8:4E:77:62:49:43 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/3cc22c2e-aca7-42f2-9b8a-8da7d4e2ba00/0/0F24A59122D6FE7BEEED775DBE16A84E77624943.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0F24A59122D6FE7BEEED775DBE16A84E77624943.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3cc22c2e-aca7-42f2-9b8a-8da7d4e2ba00/0/0F24A59122D6FE7BEEED775DBE16A84E77624943.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 50:db:c4:68:fb:25:de:ea:b9:a5:d9:dd:96:19:30:63:82:1f: f4:7a:cc:88:63:a6:bc:51:47:6b:3c:46:e0:12:06:7f:f6:ce: 0a:ca:4e:8d:93:30:35:df:7e:7e:9e:1c:3b:a3:ea:44:fd:8f: a9:ba:91:f5:6f:6a:49:02:6b:3e:41:8e:ae:b9:00:a3:32:47: 53:ae:6f:7e:3b:1c:e4:81:68:6a:b1:68:b9:81:3a:39:4d:0b: b8:89:56:44:c4:2b:b4:01:4c:b6:2e:57:09:ff:72:34:11:c1: 32:18:ad:8f:fd:57:08:a9:fd:0b:a2:7c:ba:a6:f3:c4:bd:5b: 02:72:6d:72:2b:31:4f:b3:ad:2b:37:86:61:0c:6c:cd:c4:67: e2:e8:ae:9b:7b:f2:a5:f9:22:b4:3b:7d:23:18:09:5e:cb:c7: 8f:d7:e9:68:24:c9:81:44:a1:87:21:34:66:fb:6a:43:d9:b2: 70:cf:95:f8:12:34:4e:bb:8b:3f:3b:59:b0:8c:69:19:b8:5f: c5:56:d1:74:19:f9:a7:88:c8:2c:9d:98:b7:cc:1a:17:d4:05: fb:b4:24:ef:bc:43:4a:36:67:99:bd:7c:e7:6f:fa:8c:0e:ed: cd:9d:78:db:a9:d0:17:ed:3b:f1:19:a6:4b:1e:66:92:33:40: d3:bc:df:1f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUXfq8NLr74yyWYf6k0jYVL9b++kYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMEYyNEE1OTEyMkQ2RkU3QkVFRUQ3NzVEQkUxNkE4NEU3 NzYyNDk0MzAeFw0yNjAxMjQyMDQ1MDRaFw0yNjAxMjcyMjIwMDRaMDMxMTAvBgNV BAMTKDE0MEExNjA0QjFDRkNFNzYwNjMzMTk3RkYyRDc2MTIwMDUwNzBDMDUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDvUGLj7TkwifCA9CcNCOKXWya6 FXFtCaX9byZ4IQPXjV1zJR/XTfzsr2yZ4nM2f1oLNV5vBuOgRYzZJVcEmTT9dDwK 4Vz/kftBNut+E+JMc6haAQ5hUJD7KFFPVB/7vjB2zlLTQnoQH++rdTCTHBXp2Oov kgKQa21XCbp/yHmTAc7HPvmxlt1B9QKJzw0ePFnyds50JsIYYFp9w9SGsfolET5a vZZ/bsXPKRpWJ09pJxt3siUlGyCC6adR7dPwaP8daIfOIEmt7YK8FxaDYtgDPiXo IioKpizN4cmgTbkkYvTAsAqAjUYPem2KCaw94G3HAT2VNhXVtGyeEz/wgkyhAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUFAoWBLHPznYGMxl/8tdhIAUHDAUwHwYDVR0j BBgwFoAUDySlkSLW/nvu7XddvhaoTndiSUMwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z Y2MyMmMyZS1hY2E3LTQyZjItOWI4YS04ZGE3ZDRlMmJhMDAvMC8wRjI0QTU5MTIy RDZGRTdCRUVFRDc3NURCRTE2QTg0RTc3NjI0OTQzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMEYyNEE1OTEyMkQ2RkU3QkVFRUQ3NzVEQkUxNkE4NEU3NzYy NDk0My5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vM2NjMjJjMmUtYWNhNy00MmYyLTli OGEtOGRhN2Q0ZTJiYTAwLzAvMEYyNEE1OTEyMkQ2RkU3QkVFRUQ3NzVEQkUxNkE4 NEU3NzYyNDk0My5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFDbxGj7Jd7quaXZ3ZYZMGOCH/R6zIhjprxR R2s8RuASBn/2zgrKTo2TMDXffn6eHDuj6kT9j6m6kfVvakkCaz5Bjq65AKMyR1Ou b347HOSBaGqxaLmBOjlNC7iJVkTEK7QBTLYuVwn/cjQRwTIYrY/9Vwip/QuifLqm 88S9WwJybXIrMU+zrSs3hmEMbM3EZ+Lorpt78qX5IrQ7fSMYCV7Lx4/X6WgkyYFE oYchNGb7akPZsnDPlfgSNE67iz87WbCMaRm4X8VW0XQZ+aeIyCydmLfMGhfUBfu0 JO+8Q0o2Z5m9fOdv+owO7c2deNup0BftO/EZpkseZpIzQNO83x8= -----END CERTIFICATE-----Generated at Sun Jan 25 18:53:03 2026 by rpki-client