This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/3e8950f0-3b14-4a6d-b30f-75379cb2ebce/0/00AC65E61E4913268C5D0B8AFE8C7D913B686D9F.mft File: 00AC65E61E4913268C5D0B8AFE8C7D913B686D9F.mft (raw, json) Hash identifier: 2uwzRNbg3srQ2dfjjPEYj8J58rPQdD/ep0t9znLhb4g= Subject key identifier: A1:B0:D0:C7:93:4D:F0:4D:CB:70:5B:6E:4A:85:CB:68:1D:B9:68:1E Authority key identifier: 00:AC:65:E6:1E:49:13:26:8C:5D:0B:8A:FE:8C:7D:91:3B:68:6D:9F Certificate issuer: /CN=00AC65E61E4913268C5D0B8AFE8C7D913B686D9F Certificate serial: 1BF690A1BFAAA70A654C5A919A8EDA1EBC38684C Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/00AC65E61E4913268C5D0B8AFE8C7D913B686D9F.cer Subject info access: rsync://repo-rpki.idnic.net/repo/3e8950f0-3b14-4a6d-b30f-75379cb2ebce/0/00AC65E61E4913268C5D0B8AFE8C7D913B686D9F.mft Manifest number: 0542 Signing time: Mon 26 Jan 2026 03:10:48 +0000 Manifest this update: Mon 26 Jan 2026 03:05:48 +0000 Manifest next update: Thu 29 Jan 2026 14:44:48 +0000 Files and hashes: 1: 3130332e3131392e3131392e302f32342d3234203d3e20313337333738.roa (hash: dqbXh2fh2OaVSVgJTjSWxwpOg/4I40zirFE6nOuWYzo=) 2: 3130332e3131392e3131362e302f32342d3234203d3e20313337333738.roa (hash: L25qOwaR1z4WBpyOCt6SGRe3C1qJyUGhLdY1D+C8bH0=) 3: 323430333a343334303a3a2f33322d3332203d3e20313337333738.roa (hash: 33v24/+Rv2iOxGAU7l0du0lgoN/314/yiFhS7aj6fhE=) 4: 3130332e3131392e3131372e302f32342d3234203d3e20313337333738.roa (hash: HmlGJU60qnT6VsG24BHqwMQLdMGBaxDBrgRKZDFmkxU=) 5: 3130332e3131392e3131382e302f32342d3234203d3e20313337333738.roa (hash: Oqk+2aNoDkz3rAuUwzqbP96AFip7IVOJ+sOmFv2FC3s=) 6: 00AC65E61E4913268C5D0B8AFE8C7D913B686D9F.crl (hash: d63BroOYCL5S5V0X4YezxVqDE6qxTbnjQdlkUDYxxf0=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/3e8950f0-3b14-4a6d-b30f-75379cb2ebce/0/00AC65E61E4913268C5D0B8AFE8C7D913B686D9F.crl rsync://repo-rpki.idnic.net/repo/3e8950f0-3b14-4a6d-b30f-75379cb2ebce/0/00AC65E61E4913268C5D0B8AFE8C7D913B686D9F.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/00AC65E61E4913268C5D0B8AFE8C7D913B686D9F.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 28 Jan 2026 14:00:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1b:f6:90:a1:bf:aa:a7:0a:65:4c:5a:91:9a:8e:da:1e:bc:38:68:4c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=00AC65E61E4913268C5D0B8AFE8C7D913B686D9F Validity Not Before: Jan 26 03:05:48 2026 GMT Not After : Jan 29 14:44:48 2026 GMT Subject: CN=A1B0D0C7934DF04DCB705B6E4A85CB681DB9681E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:ef:e4:5e:01:55:e9:84:f3:70:41:32:e5:65: fb:ba:ed:9f:17:92:c6:26:5f:16:03:a0:d0:65:a9: e9:3b:2b:a9:b0:90:77:30:5b:3c:5f:ea:64:9a:e0: 7b:7a:7f:0b:a1:cb:1a:80:1e:28:2b:2f:a8:b0:62: 01:32:03:8a:2c:b0:ef:0d:40:48:2f:4b:61:7a:71: 97:05:5a:0e:68:5d:4a:af:ad:d4:66:6e:09:af:95: 2b:4f:fb:a0:d1:ab:de:55:c2:e0:c3:ca:14:bd:51: 32:7f:74:76:40:fa:c0:cf:29:8d:24:63:c8:74:c7: 46:a4:15:01:7b:05:5f:49:bc:dc:ca:f4:11:58:25: 43:0d:d6:ad:b5:a9:c7:83:80:e8:84:13:cf:f6:45: e4:e7:b2:fe:ce:5c:1c:4e:b6:21:49:52:86:d0:b7: 4f:5f:32:d2:53:02:9a:ee:f0:bb:1d:53:c4:2f:28: 56:9b:34:f5:be:12:84:58:ee:5e:03:9d:6d:cd:14: 95:f9:d3:15:77:d8:d8:6a:9f:5a:79:4b:71:46:83: 0c:6a:4a:c0:86:30:c7:51:58:30:42:dd:3c:37:f5: 22:03:d2:5f:b8:b5:17:b2:02:4a:1b:19:f6:50:aa: 88:1f:6c:95:4e:10:ed:0a:7a:50:c2:9b:8b:22:9c: aa:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:B0:D0:C7:93:4D:F0:4D:CB:70:5B:6E:4A:85:CB:68:1D:B9:68:1E X509v3 Authority Key Identifier: keyid:00:AC:65:E6:1E:49:13:26:8C:5D:0B:8A:FE:8C:7D:91:3B:68:6D:9F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/3e8950f0-3b14-4a6d-b30f-75379cb2ebce/0/00AC65E61E4913268C5D0B8AFE8C7D913B686D9F.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/00AC65E61E4913268C5D0B8AFE8C7D913B686D9F.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3e8950f0-3b14-4a6d-b30f-75379cb2ebce/0/00AC65E61E4913268C5D0B8AFE8C7D913B686D9F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 17:b5:21:8e:17:ca:64:63:08:c0:d6:11:7b:05:08:83:83:bf: 9f:f3:8e:e4:74:62:25:af:8e:ee:ae:18:d8:bf:b4:06:7a:53: f0:34:80:bf:2d:f6:27:c4:3b:44:cd:ae:95:4f:cf:38:9b:f0: 6b:f4:1b:56:5b:9d:9e:08:11:c3:c6:4d:4e:25:72:85:1e:07: f9:2b:f8:b9:02:56:a2:78:e3:7c:61:99:5e:38:d1:00:75:fd: 6f:d5:6b:56:9e:e7:e4:07:f4:01:7b:08:e5:f2:cd:2f:5e:77: 52:68:ef:a4:71:3f:e2:44:45:9f:a0:44:54:8f:8a:bf:d3:f8: b9:aa:77:84:da:a3:cf:a2:88:4e:72:fa:c8:42:06:72:ae:76: 56:ab:3e:42:47:43:11:eb:66:00:2e:21:38:d4:fd:91:bf:17: 55:e8:b2:2e:f1:ac:c3:46:50:70:5b:46:3a:d5:b4:2d:9c:14: a6:fc:22:51:73:0c:a3:25:15:af:1e:00:b2:48:bf:09:3f:7a: 8d:12:0d:ac:1f:f6:75:35:23:98:d0:5a:0f:d9:28:43:e4:a5: 70:76:a6:9f:d3:36:81:03:95:8b:83:0e:a2:01:e7:80:4b:80: 7a:f6:cc:21:10:83:70:ab:1f:96:56:a9:3a:9d:fe:02:3a:fb: 1d:7c:b3:37 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUG/aQob+qpwplTFqRmo7aHrw4aEwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDBBQzY1RTYxRTQ5MTMyNjhDNUQwQjhBRkU4QzdEOTEz QjY4NkQ5RjAeFw0yNjAxMjYwMzA1NDhaFw0yNjAxMjkxNDQ0NDhaMDMxMTAvBgNV BAMTKEExQjBEMEM3OTM0REYwNERDQjcwNUI2RTRBODVDQjY4MURCOTY4MUUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+7+ReAVXphPNwQTLlZfu67Z8X ksYmXxYDoNBlqek7K6mwkHcwWzxf6mSa4Ht6fwuhyxqAHigrL6iwYgEyA4ossO8N QEgvS2F6cZcFWg5oXUqvrdRmbgmvlStP+6DRq95VwuDDyhS9UTJ/dHZA+sDPKY0k Y8h0x0akFQF7BV9JvNzK9BFYJUMN1q21qceDgOiEE8/2ReTnsv7OXBxOtiFJUobQ t09fMtJTApru8LsdU8QvKFabNPW+EoRY7l4DnW3NFJX50xV32Nhqn1p5S3FGgwxq SsCGMMdRWDBC3Tw39SID0l+4tReyAkobGfZQqogfbJVOEO0KelDCm4sinKpbAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUobDQx5NN8E3LcFtuSoXLaB25aB4wHwYDVR0j BBgwFoAUAKxl5h5JEyaMXQuK/ox9kTtobZ8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z ZTg5NTBmMC0zYjE0LTRhNmQtYjMwZi03NTM3OWNiMmViY2UvMC8wMEFDNjVFNjFF NDkxMzI2OEM1RDBCOEFGRThDN0Q5MTNCNjg2RDlGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMDBBQzY1RTYxRTQ5MTMyNjhDNUQwQjhBRkU4QzdEOTEzQjY4 NkQ5Ri5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vM2U4OTUwZjAtM2IxNC00YTZkLWIz MGYtNzUzNzljYjJlYmNlLzAvMDBBQzY1RTYxRTQ5MTMyNjhDNUQwQjhBRkU4QzdE OTEzQjY4NkQ5Ri5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABe1IY4XymRjCMDWEXsFCIODv5/zjuR0YiWv ju6uGNi/tAZ6U/A0gL8t9ifEO0TNrpVPzzib8Gv0G1ZbnZ4IEcPGTU4lcoUeB/kr +LkCVqJ443xhmV440QB1/W/Va1ae5+QH9AF7COXyzS9ed1Jo76RxP+JERZ+gRFSP ir/T+Lmqd4Tao8+iiE5y+shCBnKudlarPkJHQxHrZgAuITjU/ZG/F1Xosi7xrMNG UHBbRjrVtC2cFKb8IlFzDKMlFa8eALJIvwk/eo0SDawf9nU1I5jQWg/ZKEPkpXB2 pp/TNoEDlYuDDqIB54BLgHr2zCEQg3CrH5ZWqTqd/gI6+x18szc= -----END CERTIFICATE-----Generated at Mon Jan 26 05:37:31 2026 by rpki-client