This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/3fcd2a42-92b9-40a4-a0bf-09b65a318b5e/0/215123CDB8D789B3519CFF4175FFDD832853F5BE.mft File: 215123CDB8D789B3519CFF4175FFDD832853F5BE.mft (raw, json) Hash identifier: zQy8SbIZbu68jWh33hOSv+GjaGJFpiFQ02T8We+3NSA= Subject key identifier: 20:A1:7F:C2:D5:A0:89:43:78:E8:B7:DD:DE:43:A8:00:58:F6:69:86 Authority key identifier: 21:51:23:CD:B8:D7:89:B3:51:9C:FF:41:75:FF:DD:83:28:53:F5:BE Certificate issuer: /CN=215123CDB8D789B3519CFF4175FFDD832853F5BE Certificate serial: 72E38552D32A55AAC94B9262266EB0AB5C0B4EDA Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/215123CDB8D789B3519CFF4175FFDD832853F5BE.cer Subject info access: rsync://repo-rpki.idnic.net/repo/3fcd2a42-92b9-40a4-a0bf-09b65a318b5e/0/215123CDB8D789B3519CFF4175FFDD832853F5BE.mft Manifest number: 0159 Signing time: Fri 23 Jan 2026 19:51:05 +0000 Manifest this update: Fri 23 Jan 2026 19:46:05 +0000 Manifest next update: Mon 26 Jan 2026 21:39:05 +0000 Files and hashes: 1: 215123CDB8D789B3519CFF4175FFDD832853F5BE.crl (hash: g43/CizL3YVhKQ1lKCzAIvA4FyU3voOtgfSYSTZ39/c=) 2: 3130332e3234352e3232362e302f32342d3234203d3e203233363739.roa (hash: qKtc40b4lQF3hAURWdkBNRY70djjte8YqcsMlRaaEzM=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/3fcd2a42-92b9-40a4-a0bf-09b65a318b5e/0/215123CDB8D789B3519CFF4175FFDD832853F5BE.crl rsync://repo-rpki.idnic.net/repo/3fcd2a42-92b9-40a4-a0bf-09b65a318b5e/0/215123CDB8D789B3519CFF4175FFDD832853F5BE.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/215123CDB8D789B3519CFF4175FFDD832853F5BE.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 26 Jan 2026 21:39:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 72:e3:85:52:d3:2a:55:aa:c9:4b:92:62:26:6e:b0:ab:5c:0b:4e:da Signature Algorithm: sha256WithRSAEncryption Issuer: CN=215123CDB8D789B3519CFF4175FFDD832853F5BE Validity Not Before: Jan 23 19:46:05 2026 GMT Not After : Jan 26 21:39:05 2026 GMT Subject: CN=20A17FC2D5A0894378E8B7DDDE43A80058F66986 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:93:46:0e:d2:d6:6f:df:87:96:35:4f:d9:0c: 20:43:d1:80:21:d2:9e:b6:0c:0b:8e:bf:aa:fc:7d: 44:ce:16:69:82:dd:9a:80:36:00:17:2d:c5:4e:cc: 48:87:16:17:51:52:24:63:8c:39:8e:76:ce:62:72: b1:ef:c9:06:fe:65:cf:79:62:b4:f4:1d:53:a7:31: 32:dc:8d:20:f2:78:b7:15:64:35:0a:1c:8a:f2:fa: bf:f1:2e:97:f2:24:c9:87:1a:2e:d3:4d:ec:3c:4b: da:67:2f:12:dc:d0:35:61:80:24:dd:6c:66:f7:c4: 7a:18:59:23:5c:70:27:ac:29:bb:80:47:bb:29:be: 4d:1d:2a:56:45:98:6d:46:43:b5:f4:26:c0:0b:4c: d4:01:67:c5:38:a5:d8:c6:ef:6c:af:a5:fa:7b:6a: 45:1f:2a:77:e6:f0:82:3d:81:06:bb:e4:5f:bd:b6: 60:8f:59:25:2a:5a:1c:88:8e:05:ed:a8:3f:38:17: 3b:9a:ed:d3:b0:40:80:33:4a:5f:c2:c9:33:11:77: 34:e4:13:0f:56:ee:ae:5b:97:ff:d7:cd:75:1b:2b: 3a:ac:19:d0:9d:2b:c3:30:e7:f1:43:b2:57:b6:ed: ca:89:4c:03:c8:27:16:ea:22:47:df:26:7b:bb:5d: 31:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:A1:7F:C2:D5:A0:89:43:78:E8:B7:DD:DE:43:A8:00:58:F6:69:86 X509v3 Authority Key Identifier: keyid:21:51:23:CD:B8:D7:89:B3:51:9C:FF:41:75:FF:DD:83:28:53:F5:BE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/3fcd2a42-92b9-40a4-a0bf-09b65a318b5e/0/215123CDB8D789B3519CFF4175FFDD832853F5BE.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/215123CDB8D789B3519CFF4175FFDD832853F5BE.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3fcd2a42-92b9-40a4-a0bf-09b65a318b5e/0/215123CDB8D789B3519CFF4175FFDD832853F5BE.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 11:78:da:f1:99:a4:3a:ad:85:b9:b9:1d:67:ae:e8:55:15:7f: ee:9c:cd:ef:59:2a:ed:cb:9d:6b:99:fd:00:cd:5e:fa:e2:c6: 7f:3d:b4:ae:d5:94:35:25:bd:b1:e4:df:6c:1a:3a:32:54:81: f6:e7:02:3d:3f:0a:38:67:27:30:85:a6:d1:5e:c8:90:eb:00: 13:ca:cd:f2:b7:5a:32:c7:84:94:81:45:5e:24:e9:e5:89:68: e5:d6:30:29:e2:67:f1:eb:19:6a:d0:f7:89:be:fd:b5:fa:ef: 73:ea:87:f7:c4:d9:b1:d8:61:a7:79:b3:b7:6d:bd:80:47:81: d7:ed:58:f8:1e:d1:70:74:89:1f:97:08:a8:57:c1:18:88:d9: 41:f3:1e:be:7c:4d:4f:ab:18:7c:f6:18:24:5c:35:d7:4b:4d: 7b:48:a1:80:23:99:88:78:1c:8f:fa:e5:9e:be:38:88:74:14: 57:14:4c:c5:bc:ac:28:54:94:2d:80:7e:c6:e2:97:a8:6d:06: f4:a2:72:1f:00:68:a0:fc:83:5c:82:72:3c:a3:22:8a:9c:28: bb:8c:a5:72:43:89:c9:59:da:e2:3a:b1:3c:68:5b:60:85:10: 75:ff:ab:2d:0f:2d:9e:0c:ee:3d:c5:1c:de:83:77:ef:76:72: 77:ff:65:ef -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUcuOFUtMqVarJS5JiJm6wq1wLTtowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjE1MTIzQ0RCOEQ3ODlCMzUxOUNGRjQxNzVGRkREODMy ODUzRjVCRTAeFw0yNjAxMjMxOTQ2MDVaFw0yNjAxMjYyMTM5MDVaMDMxMTAvBgNV BAMTKDIwQTE3RkMyRDVBMDg5NDM3OEU4QjdERERFNDNBODAwNThGNjY5ODYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDjk0YO0tZv34eWNU/ZDCBD0YAh 0p62DAuOv6r8fUTOFmmC3ZqANgAXLcVOzEiHFhdRUiRjjDmOds5icrHvyQb+Zc95 YrT0HVOnMTLcjSDyeLcVZDUKHIry+r/xLpfyJMmHGi7TTew8S9pnLxLc0DVhgCTd bGb3xHoYWSNccCesKbuAR7spvk0dKlZFmG1GQ7X0JsALTNQBZ8U4pdjG72yvpfp7 akUfKnfm8II9gQa75F+9tmCPWSUqWhyIjgXtqD84Fzua7dOwQIAzSl/CyTMRdzTk Ew9W7q5bl//XzXUbKzqsGdCdK8Mw5/FDsle27cqJTAPIJxbqIkffJnu7XTFVAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUIKF/wtWgiUN46Lfd3kOoAFj2aYYwHwYDVR0j BBgwFoAUIVEjzbjXibNRnP9Bdf/dgyhT9b4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z ZmNkMmE0Mi05MmI5LTQwYTQtYTBiZi0wOWI2NWEzMThiNWUvMC8yMTUxMjNDREI4 RDc4OUIzNTE5Q0ZGNDE3NUZGREQ4MzI4NTNGNUJFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMjE1MTIzQ0RCOEQ3ODlCMzUxOUNGRjQxNzVGRkREODMyODUz RjVCRS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vM2ZjZDJhNDItOTJiOS00MGE0LWEw YmYtMDliNjVhMzE4YjVlLzAvMjE1MTIzQ0RCOEQ3ODlCMzUxOUNGRjQxNzVGRkRE ODMyODUzRjVCRS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABF42vGZpDqthbm5HWeu6FUVf+6cze9ZKu3L nWuZ/QDNXvrixn89tK7VlDUlvbHk32waOjJUgfbnAj0/CjhnJzCFptFeyJDrABPK zfK3WjLHhJSBRV4k6eWJaOXWMCniZ/HrGWrQ94m+/bX673Pqh/fE2bHYYad5s7dt vYBHgdftWPge0XB0iR+XCKhXwRiI2UHzHr58TU+rGHz2GCRcNddLTXtIoYAjmYh4 HI/65Z6+OIh0FFcUTMW8rChUlC2Afsbil6htBvSich8AaKD8g1yCcjyjIoqcKLuM pXJDiclZ2uI6sTxoW2CFEHX/qy0PLZ4M7j3FHN6Dd+92cnf/Ze8= -----END CERTIFICATE-----Generated at Sun Jan 25 18:48:20 2026 by rpki-client