This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/46e47c6d-e624-477c-ae18-d32f22c96204/0/23132D6AC2A0ED41996F54C00A8A59B23B00EEB6.mft File: 23132D6AC2A0ED41996F54C00A8A59B23B00EEB6.mft (raw, json) Hash identifier: VTBHvrRb5q+9umKNbeQuBwaOzjL1HITbODCYWynLT4o= Subject key identifier: C4:C8:B7:FA:72:00:5E:EB:F9:AD:7D:FD:67:42:17:D7:94:D5:38:46 Authority key identifier: 23:13:2D:6A:C2:A0:ED:41:99:6F:54:C0:0A:8A:59:B2:3B:00:EE:B6 Certificate issuer: /CN=23132D6AC2A0ED41996F54C00A8A59B23B00EEB6 Certificate serial: 6C6F5793D6F76CB95F5F1244AE2CE1B0C9C4AB96 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/23132D6AC2A0ED41996F54C00A8A59B23B00EEB6.cer Subject info access: rsync://repo-rpki.idnic.net/repo/46e47c6d-e624-477c-ae18-d32f22c96204/0/23132D6AC2A0ED41996F54C00A8A59B23B00EEB6.mft Manifest number: 0157 Signing time: Sat 24 Jan 2026 11:22:05 +0000 Manifest this update: Sat 24 Jan 2026 11:17:05 +0000 Manifest next update: Tue 27 Jan 2026 13:20:05 +0000 Files and hashes: 1: 3231302e37392e3133352e302f32342d3234203d3e20313338303936.roa (hash: JvAuAWjeLfp0XViXv+7ZCgiJcBbHkm/DO53vlhMWqfE=) 2: 23132D6AC2A0ED41996F54C00A8A59B23B00EEB6.crl (hash: NXi+i6fCYRTJ1ARA2hf1+66tbr9/HpN1BgBExMatlsQ=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/46e47c6d-e624-477c-ae18-d32f22c96204/0/23132D6AC2A0ED41996F54C00A8A59B23B00EEB6.crl rsync://repo-rpki.idnic.net/repo/46e47c6d-e624-477c-ae18-d32f22c96204/0/23132D6AC2A0ED41996F54C00A8A59B23B00EEB6.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/23132D6AC2A0ED41996F54C00A8A59B23B00EEB6.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 27 Jan 2026 13:20:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6c:6f:57:93:d6:f7:6c:b9:5f:5f:12:44:ae:2c:e1:b0:c9:c4:ab:96 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=23132D6AC2A0ED41996F54C00A8A59B23B00EEB6 Validity Not Before: Jan 24 11:17:05 2026 GMT Not After : Jan 27 13:20:05 2026 GMT Subject: CN=C4C8B7FA72005EEBF9AD7DFD674217D794D53846 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:f1:81:37:d4:c8:89:36:05:be:7d:ce:a5:8f: 4a:3d:21:f0:1a:a2:3e:a9:61:7c:34:fc:cb:a7:f1: cb:ca:32:b3:e0:7b:1e:de:b5:c9:67:1a:58:f9:1c: 1e:bc:da:4d:a8:ee:b0:b3:3d:67:cd:9d:5f:60:0c: c3:e6:0a:89:7e:0f:db:68:15:2d:f2:ff:90:bf:b6: 55:96:97:fa:ef:98:a1:84:46:26:e1:ff:bb:50:76: 36:6f:ef:84:ae:98:be:af:c4:f6:31:e9:e6:6f:68: 34:04:50:af:b0:d1:c2:84:ac:e7:9e:8c:57:32:8c: fa:d9:30:30:9b:3d:9d:fa:1b:16:4a:2c:d1:60:0d: 38:e8:77:bd:4d:7c:dd:39:a6:76:9d:a6:15:e0:10: f2:b6:80:77:c5:bc:e1:09:88:69:d0:c1:fd:f2:43: a6:c8:23:cb:e5:2d:db:5a:15:4e:ed:48:00:58:f8: 64:ba:e0:38:90:bc:e7:27:71:14:48:54:1e:6b:b5: 75:85:46:7c:f5:18:98:da:c2:13:c4:a8:9e:bd:66: a0:fa:5d:6e:72:5e:a9:56:43:80:f5:82:4a:16:5e: a2:d0:8f:50:e2:14:63:55:e8:6c:a5:9a:eb:fe:f3: 93:cb:e2:86:84:38:de:f1:c6:37:18:84:e3:c2:cd: 91:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:C8:B7:FA:72:00:5E:EB:F9:AD:7D:FD:67:42:17:D7:94:D5:38:46 X509v3 Authority Key Identifier: keyid:23:13:2D:6A:C2:A0:ED:41:99:6F:54:C0:0A:8A:59:B2:3B:00:EE:B6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/46e47c6d-e624-477c-ae18-d32f22c96204/0/23132D6AC2A0ED41996F54C00A8A59B23B00EEB6.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/23132D6AC2A0ED41996F54C00A8A59B23B00EEB6.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/46e47c6d-e624-477c-ae18-d32f22c96204/0/23132D6AC2A0ED41996F54C00A8A59B23B00EEB6.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3a:a8:ce:8c:20:ad:a5:96:37:92:14:1e:c4:bd:f4:e5:32:a6: f3:46:db:e4:85:93:47:83:65:ae:59:6e:9b:4e:47:06:b4:af: 3c:69:3a:47:2d:9d:97:8f:8a:36:43:e5:85:4b:4e:e0:8b:6a: 58:3c:aa:2f:1c:e0:7a:9b:0a:9d:52:06:6c:c0:22:90:93:6a: 74:2c:1c:3d:f2:2b:2c:9e:d8:1e:e0:a3:45:f6:07:fb:85:01: 9b:c3:d2:d1:1e:24:8f:d0:b0:c2:57:11:0b:93:8e:e7:1f:12: 33:a5:a5:53:95:67:8c:d9:3f:5b:f4:59:dd:3c:29:56:1a:ba: 40:5c:77:9d:6c:46:bc:c9:48:a6:da:54:ab:c9:f2:a6:8d:8d: 17:b8:b8:22:8d:a3:37:bb:8d:86:22:a6:83:d3:ca:e1:ec:32: f9:26:c0:24:10:e9:8b:c0:33:d2:3e:90:e2:44:a4:7e:23:c5: 46:dd:91:56:2e:c9:1c:88:75:57:30:c0:0b:fc:56:14:c4:37: 32:b9:6b:c7:52:e5:a9:44:1d:3d:39:80:c7:16:5d:a1:e6:bc: 31:b0:43:ab:8d:9f:34:67:e3:d6:5c:99:65:0d:45:fa:99:98: f2:0c:91:8d:b1:58:a2:3e:e0:0d:b1:3f:d1:16:e2:d4:84:b4: 75:18:81:6f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUbG9Xk9b3bLlfXxJErizhsMnEq5YwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjMxMzJENkFDMkEwRUQ0MTk5NkY1NEMwMEE4QTU5QjIz QjAwRUVCNjAeFw0yNjAxMjQxMTE3MDVaFw0yNjAxMjcxMzIwMDVaMDMxMTAvBgNV BAMTKEM0QzhCN0ZBNzIwMDVFRUJGOUFEN0RGRDY3NDIxN0Q3OTRENTM4NDYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDY8YE31MiJNgW+fc6lj0o9IfAa oj6pYXw0/Mun8cvKMrPgex7etclnGlj5HB682k2o7rCzPWfNnV9gDMPmCol+D9to FS3y/5C/tlWWl/rvmKGERibh/7tQdjZv74SumL6vxPYx6eZvaDQEUK+w0cKErOee jFcyjPrZMDCbPZ36GxZKLNFgDTjod71NfN05pnadphXgEPK2gHfFvOEJiGnQwf3y Q6bII8vlLdtaFU7tSABY+GS64DiQvOcncRRIVB5rtXWFRnz1GJjawhPEqJ69ZqD6 XW5yXqlWQ4D1gkoWXqLQj1DiFGNV6Gylmuv+85PL4oaEON7xxjcYhOPCzZFfAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUxMi3+nIAXuv5rX39Z0IX15TVOEYwHwYDVR0j BBgwFoAUIxMtasKg7UGZb1TACopZsjsA7rYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 NmU0N2M2ZC1lNjI0LTQ3N2MtYWUxOC1kMzJmMjJjOTYyMDQvMC8yMzEzMkQ2QUMy QTBFRDQxOTk2RjU0QzAwQThBNTlCMjNCMDBFRUI2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMjMxMzJENkFDMkEwRUQ0MTk5NkY1NEMwMEE4QTU5QjIzQjAw RUVCNi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNDZlNDdjNmQtZTYyNC00NzdjLWFl MTgtZDMyZjIyYzk2MjA0LzAvMjMxMzJENkFDMkEwRUQ0MTk5NkY1NEMwMEE4QTU5 QjIzQjAwRUVCNi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADqozowgraWWN5IUHsS99OUypvNG2+SFk0eD Za5ZbptORwa0rzxpOkctnZePijZD5YVLTuCLalg8qi8c4HqbCp1SBmzAIpCTanQs HD3yKyye2B7go0X2B/uFAZvD0tEeJI/QsMJXEQuTjucfEjOlpVOVZ4zZP1v0Wd08 KVYaukBcd51sRrzJSKbaVKvJ8qaNjRe4uCKNoze7jYYipoPTyuHsMvkmwCQQ6YvA M9I+kOJEpH4jxUbdkVYuyRyIdVcwwAv8VhTENzK5a8dS5alEHT05gMcWXaHmvDGw Q6uNnzRn49ZcmWUNRfqZmPIMkY2xWKI+4A2xP9EW4tSEtHUYgW8= -----END CERTIFICATE-----Generated at Mon Jan 26 01:32:53 2026 by rpki-client