This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/43a52045-a6fc-45b1-be59-825735c96f54/0/945AD192B10F71CE48362295A9C6281FE3395786.mft File: 945AD192B10F71CE48362295A9C6281FE3395786.mft (raw, json) Hash identifier: zJimaJKPapeC6dE+hTHTFjT9KCKwhAbs+AMq72P5qoI= Subject key identifier: D6:E2:48:0D:DF:9E:52:16:D8:AF:80:5D:B1:81:70:7D:5B:02:47:B1 Authority key identifier: 94:5A:D1:92:B1:0F:71:CE:48:36:22:95:A9:C6:28:1F:E3:39:57:86 Certificate issuer: /CN=945AD192B10F71CE48362295A9C6281FE3395786 Certificate serial: 09EF662A60B2D1296D19A2CB7BE34706D9BCF5DC Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/945AD192B10F71CE48362295A9C6281FE3395786.cer Subject info access: rsync://repo-rpki.idnic.net/repo/43a52045-a6fc-45b1-be59-825735c96f54/0/945AD192B10F71CE48362295A9C6281FE3395786.mft Manifest number: 024A Signing time: Sat 24 Jan 2026 09:02:21 +0000 Manifest this update: Sat 24 Jan 2026 08:57:21 +0000 Manifest next update: Tue 27 Jan 2026 11:33:21 +0000 Files and hashes: 1: 945AD192B10F71CE48362295A9C6281FE3395786.crl (hash: c0Hv0ki2CmNJtatvtlcWk/Tjy9GUd9p/H5m/M8eLm7A=) 2: 3130332e3138392e39342e302f32332d3234203d3e2034383030.roa (hash: HzhAdkWVPqyzjRfrKdf+sGJ5e8Q6OGeF8fvX/eoLEO8=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/43a52045-a6fc-45b1-be59-825735c96f54/0/945AD192B10F71CE48362295A9C6281FE3395786.crl rsync://repo-rpki.idnic.net/repo/43a52045-a6fc-45b1-be59-825735c96f54/0/945AD192B10F71CE48362295A9C6281FE3395786.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/945AD192B10F71CE48362295A9C6281FE3395786.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 27 Jan 2026 11:33:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 09:ef:66:2a:60:b2:d1:29:6d:19:a2:cb:7b:e3:47:06:d9:bc:f5:dc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=945AD192B10F71CE48362295A9C6281FE3395786 Validity Not Before: Jan 24 08:57:21 2026 GMT Not After : Jan 27 11:33:21 2026 GMT Subject: CN=D6E2480DDF9E5216D8AF805DB181707D5B0247B1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:48:13:e9:8f:db:d6:bf:88:73:f9:6b:3f:00: a2:6d:9c:1a:20:40:a6:c2:75:34:a5:2a:ba:7f:a8: 7b:34:13:b5:97:64:6a:0d:b9:86:96:62:bb:1e:ae: 6c:ca:6f:b0:c7:62:ad:71:e8:ea:a6:24:e6:65:54: f6:95:5c:72:27:5f:cf:b3:27:bf:f2:2e:92:35:b3: 47:2c:d1:ca:b0:21:56:c9:cf:73:40:7f:c9:5d:e0: 76:72:90:3f:fa:84:5d:03:6e:71:06:ec:c7:9a:40: c2:66:c5:12:4b:c4:fb:72:ce:c2:ac:1f:27:a2:db: fa:38:ce:63:40:11:ce:b1:3d:fc:a7:37:9b:9f:98: ff:b5:8a:cd:88:96:fc:b8:49:ca:e9:4d:ff:1d:3a: 60:58:fb:47:16:e0:b0:3c:4b:ff:f2:cd:3e:45:5a: 57:e6:50:0a:67:d3:d4:21:33:b9:0d:3a:03:14:98: 39:09:81:b3:8d:24:ee:91:41:8b:bd:0e:e0:a1:7c: 66:1f:55:d0:6f:62:9e:c4:7f:aa:0e:0e:40:1e:d2: 52:28:1e:12:2f:00:cf:87:41:c4:ba:72:da:e9:fc: d8:c6:43:2e:1a:d0:f1:b2:9a:7a:07:1b:7a:30:cb: de:dc:cf:08:30:04:80:7b:98:39:6a:28:f6:75:d8: 8d:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D6:E2:48:0D:DF:9E:52:16:D8:AF:80:5D:B1:81:70:7D:5B:02:47:B1 X509v3 Authority Key Identifier: keyid:94:5A:D1:92:B1:0F:71:CE:48:36:22:95:A9:C6:28:1F:E3:39:57:86 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/43a52045-a6fc-45b1-be59-825735c96f54/0/945AD192B10F71CE48362295A9C6281FE3395786.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/945AD192B10F71CE48362295A9C6281FE3395786.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/43a52045-a6fc-45b1-be59-825735c96f54/0/945AD192B10F71CE48362295A9C6281FE3395786.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a4:9a:f9:97:85:66:e2:9b:20:e2:4d:ae:1d:c9:d0:42:b1:2c: 91:86:2e:ed:50:38:7d:a6:3f:d8:c0:95:fd:fb:e8:cc:68:9e: 5d:dc:3a:a1:84:b8:bc:3b:7f:83:7a:47:98:9f:e3:32:a8:fb: 39:b9:7b:48:80:49:b5:33:4a:f8:d8:10:ad:11:2a:5c:48:30: ba:5e:a7:8e:2d:2c:01:72:e8:13:59:eb:22:0a:0f:7c:21:81: c8:d9:30:ef:e4:be:dc:80:73:a5:41:db:4d:9d:6a:60:5e:8f: 01:9d:b2:eb:d9:d3:4a:46:75:81:9e:e7:c1:fd:fd:d0:a8:9a: 8f:57:5a:e3:6d:06:2d:44:eb:00:0e:dd:36:86:28:0c:14:c3: 95:de:e8:8e:18:20:e0:c1:e9:39:21:a2:4e:00:2e:89:71:d2: 91:e5:0c:56:0d:c1:ab:ac:d7:94:ff:b5:b5:2d:66:db:bf:98: 15:3f:44:c8:7e:11:d9:28:77:db:cb:09:3f:04:73:6e:7a:40: ee:a3:83:c4:de:fd:86:b7:f8:bb:53:a5:09:a3:c1:99:fc:d1: cb:de:23:49:cd:d0:76:01:c2:2d:3a:80:75:d2:b1:c4:39:c8: f2:9d:25:c1:cd:3b:aa:7d:f3:12:09:f0:2c:cc:f1:4b:43:86: 5b:b3:ab:0d -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUCe9mKmCy0SltGaLLe+NHBtm89dwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTQ1QUQxOTJCMTBGNzFDRTQ4MzYyMjk1QTlDNjI4MUZF MzM5NTc4NjAeFw0yNjAxMjQwODU3MjFaFw0yNjAxMjcxMTMzMjFaMDMxMTAvBgNV BAMTKEQ2RTI0ODBEREY5RTUyMTZEOEFGODA1REIxODE3MDdENUIwMjQ3QjEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQClSBPpj9vWv4hz+Ws/AKJtnBog QKbCdTSlKrp/qHs0E7WXZGoNuYaWYrsermzKb7DHYq1x6OqmJOZlVPaVXHInX8+z J7/yLpI1s0cs0cqwIVbJz3NAf8ld4HZykD/6hF0DbnEG7MeaQMJmxRJLxPtyzsKs Hyei2/o4zmNAEc6xPfynN5ufmP+1is2Ilvy4ScrpTf8dOmBY+0cW4LA8S//yzT5F WlfmUApn09QhM7kNOgMUmDkJgbONJO6RQYu9DuChfGYfVdBvYp7Ef6oODkAe0lIo HhIvAM+HQcS6ctrp/NjGQy4a0PGymnoHG3owy97czwgwBIB7mDlqKPZ12I3VAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU1uJIDd+eUhbYr4BdsYFwfVsCR7EwHwYDVR0j BBgwFoAUlFrRkrEPcc5INiKVqcYoH+M5V4YwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 M2E1MjA0NS1hNmZjLTQ1YjEtYmU1OS04MjU3MzVjOTZmNTQvMC85NDVBRDE5MkIx MEY3MUNFNDgzNjIyOTVBOUM2MjgxRkUzMzk1Nzg2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOTQ1QUQxOTJCMTBGNzFDRTQ4MzYyMjk1QTlDNjI4MUZFMzM5 NTc4Ni5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNDNhNTIwNDUtYTZmYy00NWIxLWJl NTktODI1NzM1Yzk2ZjU0LzAvOTQ1QUQxOTJCMTBGNzFDRTQ4MzYyMjk1QTlDNjI4 MUZFMzM5NTc4Ni5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKSa+ZeFZuKbIOJNrh3J0EKxLJGGLu1QOH2m P9jAlf376Mxonl3cOqGEuLw7f4N6R5if4zKo+zm5e0iASbUzSvjYEK0RKlxIMLpe p44tLAFy6BNZ6yIKD3whgcjZMO/kvtyAc6VB202damBejwGdsuvZ00pGdYGe58H9 /dComo9XWuNtBi1E6wAO3TaGKAwUw5Xe6I4YIODB6Tkhok4ALolx0pHlDFYNwaus 15T/tbUtZtu/mBU/RMh+Edkod9vLCT8Ec256QO6jg8Te/Ya3+LtTpQmjwZn80cve I0nN0HYBwi06gHXSscQ5yPKdJcHNO6p98xIJ8CzM8UtDhluzqw0= -----END CERTIFICATE-----Generated at Sun Jan 25 18:49:28 2026 by rpki-client