This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/46302810-564c-45b7-8a72-ef6b8f6309c0/0/EDBD845A9597FEC4AD90030F9018E4B8B63FCC77.mft File: EDBD845A9597FEC4AD90030F9018E4B8B63FCC77.mft (raw, json) Hash identifier: Ic+MHdp1IaTsxukW9AjCL0KwAQx+rD88YZap7yPuaLI= Subject key identifier: 3B:E3:BB:F7:A8:02:97:86:FF:AC:AB:10:A9:A6:9E:82:F7:1C:97:E5 Authority key identifier: ED:BD:84:5A:95:97:FE:C4:AD:90:03:0F:90:18:E4:B8:B6:3F:CC:77 Certificate issuer: /CN=EDBD845A9597FEC4AD90030F9018E4B8B63FCC77 Certificate serial: 672C318EEF61BB4E211442CA091D7EEECA6A596E Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EDBD845A9597FEC4AD90030F9018E4B8B63FCC77.cer Subject info access: rsync://repo-rpki.idnic.net/repo/46302810-564c-45b7-8a72-ef6b8f6309c0/0/EDBD845A9597FEC4AD90030F9018E4B8B63FCC77.mft Manifest number: 0548 Signing time: Sat 24 Jan 2026 08:31:59 +0000 Manifest this update: Sat 24 Jan 2026 08:26:59 +0000 Manifest next update: Tue 27 Jan 2026 20:16:59 +0000 Files and hashes: 1: 323030313a6466343a6530303a3a2f34382d3438203d3e20313335343731.roa (hash: PpwdW1Sh67VcI29Rs6SsVeiTKG/TdkizTmZ0n4tpRMU=) 2: EDBD845A9597FEC4AD90030F9018E4B8B63FCC77.crl (hash: wrZ7T+NlXdlXNPwCydoquKR5MNADcWOt3lTAgdYA27k=) 3: 3130332e37312e3235352e302f32342d3234203d3e20313335343731.roa (hash: gIKkIGkZm7OxQ7k8KYXU1OguRf76El1DoB7NPk29hSo=) 4: 3130332e3133372e33372e302f32342d3234203d3e20313335343731.roa (hash: mC7pHV7NYsbpeeW0ZP+ibU3Ewbq2p4OfCkZ3LiVxhX4=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/46302810-564c-45b7-8a72-ef6b8f6309c0/0/EDBD845A9597FEC4AD90030F9018E4B8B63FCC77.crl rsync://repo-rpki.idnic.net/repo/46302810-564c-45b7-8a72-ef6b8f6309c0/0/EDBD845A9597FEC4AD90030F9018E4B8B63FCC77.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EDBD845A9597FEC4AD90030F9018E4B8B63FCC77.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 27 Jan 2026 20:16:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 67:2c:31:8e:ef:61:bb:4e:21:14:42:ca:09:1d:7e:ee:ca:6a:59:6e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EDBD845A9597FEC4AD90030F9018E4B8B63FCC77 Validity Not Before: Jan 24 08:26:59 2026 GMT Not After : Jan 27 20:16:59 2026 GMT Subject: CN=3BE3BBF7A8029786FFACAB10A9A69E82F71C97E5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:2b:79:59:4e:bb:68:b0:46:2f:89:72:26:2d: 16:23:85:2b:63:e4:b5:f3:65:62:4b:10:8f:99:2b: 79:74:72:71:98:f3:c3:9f:d7:0b:7c:fe:94:e9:77: 60:cc:64:42:38:f5:76:7b:cc:33:a8:7b:0a:3b:f5: 6b:0e:c0:a7:55:32:d1:f3:fc:f8:7b:73:5d:1a:4f: 8c:cc:d0:f6:af:d1:89:58:ab:c9:e7:9f:02:59:c4: 0d:37:21:f8:74:a9:17:98:95:2a:d8:04:ef:01:0e: e5:69:96:fc:04:b7:77:ad:0c:a0:06:12:76:28:9a: 47:8c:05:f5:2b:b4:23:a0:36:2d:3e:0f:90:bf:b2: d1:95:df:16:da:7c:90:a4:23:77:1f:b7:3f:bb:e7: af:85:48:48:69:15:55:18:c2:32:7c:b4:19:9e:93: bb:71:77:43:4d:03:52:d8:36:67:0d:21:fb:37:ca: 31:1c:24:fb:2b:a4:97:73:70:85:a9:f4:f4:98:60: 02:b4:86:c9:5c:02:b2:66:b1:e5:f4:73:ae:ae:51: 39:c0:21:3a:a7:6a:23:df:7f:6f:ef:c7:af:af:f1: fa:94:28:5a:6c:bd:cc:11:c9:72:a2:08:be:73:17: 0a:49:c3:3e:de:3b:ae:55:0f:4a:64:ea:cc:14:8c: 57:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:E3:BB:F7:A8:02:97:86:FF:AC:AB:10:A9:A6:9E:82:F7:1C:97:E5 X509v3 Authority Key Identifier: keyid:ED:BD:84:5A:95:97:FE:C4:AD:90:03:0F:90:18:E4:B8:B6:3F:CC:77 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/46302810-564c-45b7-8a72-ef6b8f6309c0/0/EDBD845A9597FEC4AD90030F9018E4B8B63FCC77.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EDBD845A9597FEC4AD90030F9018E4B8B63FCC77.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/46302810-564c-45b7-8a72-ef6b8f6309c0/0/EDBD845A9597FEC4AD90030F9018E4B8B63FCC77.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b9:36:b7:55:12:91:27:3f:bb:c9:71:17:58:cd:32:ac:bd:57: 6e:36:a1:02:24:31:a9:3e:94:69:93:f5:ab:1a:5c:c6:28:e8: cd:6e:3e:f9:dc:30:4b:38:8c:2c:62:56:a9:1c:8d:e4:93:57: b6:8b:97:0d:3f:26:62:43:7f:96:1d:d4:88:e5:40:e1:44:fc: f9:80:8d:cb:bb:79:fc:08:ad:27:f1:fa:ab:09:03:7e:0b:7c: 8a:ec:46:27:26:ec:b8:ba:b3:dd:89:46:82:98:e8:11:35:d9: 3b:d8:eb:79:4a:10:b4:df:1f:2d:37:dc:e2:4f:da:2f:29:98: 77:4b:31:fe:aa:a5:92:35:0b:4f:e6:47:69:6c:b8:7e:66:a8: fa:c6:76:d4:11:ba:5d:fb:92:a7:bb:ca:37:fd:f7:b6:ca:69: 9c:ed:18:44:93:17:43:5f:c1:19:9c:4e:01:a6:5a:16:50:a0: ef:57:69:5c:88:38:cb:2c:63:78:dd:9a:18:21:30:14:0f:28: ef:96:f1:02:5b:5c:6f:98:a5:cb:10:b2:3e:31:9e:dc:8a:26: fa:20:ac:81:b2:c1:55:9e:2a:35:fc:13:b1:aa:3c:03:92:6d: 4a:08:32:4a:7a:af:dd:16:a8:e1:2b:44:96:9c:12:04:6b:0c: 4f:ff:5c:5d -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUZywxju9hu04hFELKCR1+7spqWW4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRURCRDg0NUE5NTk3RkVDNEFEOTAwMzBGOTAxOEU0QjhC NjNGQ0M3NzAeFw0yNjAxMjQwODI2NTlaFw0yNjAxMjcyMDE2NTlaMDMxMTAvBgNV BAMTKDNCRTNCQkY3QTgwMjk3ODZGRkFDQUIxMEE5QTY5RTgyRjcxQzk3RTUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCzK3lZTrtosEYviXImLRYjhStj 5LXzZWJLEI+ZK3l0cnGY88Of1wt8/pTpd2DMZEI49XZ7zDOoewo79WsOwKdVMtHz /Ph7c10aT4zM0Pav0YlYq8nnnwJZxA03Ifh0qReYlSrYBO8BDuVplvwEt3etDKAG EnYomkeMBfUrtCOgNi0+D5C/stGV3xbafJCkI3cftz+756+FSEhpFVUYwjJ8tBme k7txd0NNA1LYNmcNIfs3yjEcJPsrpJdzcIWp9PSYYAK0hslcArJmseX0c66uUTnA ITqnaiPff2/vx6+v8fqUKFpsvcwRyXKiCL5zFwpJwz7eO65VD0pk6swUjFdPAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUO+O796gCl4b/rKsQqaaegvccl+UwHwYDVR0j BBgwFoAU7b2EWpWX/sStkAMPkBjkuLY/zHcwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 NjMwMjgxMC01NjRjLTQ1YjctOGE3Mi1lZjZiOGY2MzA5YzAvMC9FREJEODQ1QTk1 OTdGRUM0QUQ5MDAzMEY5MDE4RTRCOEI2M0ZDQzc3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRURCRDg0NUE5NTk3RkVDNEFEOTAwMzBGOTAxOEU0QjhCNjNG Q0M3Ny5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNDYzMDI4MTAtNTY0Yy00NWI3LThh NzItZWY2YjhmNjMwOWMwLzAvRURCRDg0NUE5NTk3RkVDNEFEOTAwMzBGOTAxOEU0 QjhCNjNGQ0M3Ny5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALk2t1USkSc/u8lxF1jNMqy9V242oQIkMak+ lGmT9asaXMYo6M1uPvncMEs4jCxiVqkcjeSTV7aLlw0/JmJDf5Yd1IjlQOFE/PmA jcu7efwIrSfx+qsJA34LfIrsRicm7Li6s92JRoKY6BE12TvY63lKELTfHy033OJP 2i8pmHdLMf6qpZI1C0/mR2lsuH5mqPrGdtQRul37kqe7yjf997bKaZztGESTF0Nf wRmcTgGmWhZQoO9XaVyIOMssY3jdmhghMBQPKO+W8QJbXG+YpcsQsj4xntyKJvog rIGywVWeKjX8E7GqPAOSbUoIMkp6r90WqOErRJacEgRrDE//XF0= -----END CERTIFICATE-----Generated at Sun Jan 25 18:58:51 2026 by rpki-client