This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/4ebf63ed-d450-477e-b31b-af92b1726d2e/0/19280B8F5AA4FBDEC679C351EB040D284CF791BE.mft File: 19280B8F5AA4FBDEC679C351EB040D284CF791BE.mft (raw, json) Hash identifier: A8d+bTwDXw0goXtUZ/8FFUgfrIn+qsTXMUretwPE6JI= Subject key identifier: BA:9C:0F:08:0E:70:95:65:EC:E1:EA:8B:35:BB:AF:D4:5F:F5:62:ED Authority key identifier: 19:28:0B:8F:5A:A4:FB:DE:C6:79:C3:51:EB:04:0D:28:4C:F7:91:BE Certificate issuer: /CN=19280B8F5AA4FBDEC679C351EB040D284CF791BE Certificate serial: 1FA99BDA3A4746BACBF655EEBF613C62B256CA0F Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/19280B8F5AA4FBDEC679C351EB040D284CF791BE.cer Subject info access: rsync://repo-rpki.idnic.net/repo/4ebf63ed-d450-477e-b31b-af92b1726d2e/0/19280B8F5AA4FBDEC679C351EB040D284CF791BE.mft Manifest number: 01DF Signing time: Sat 24 Jan 2026 06:52:08 +0000 Manifest this update: Sat 24 Jan 2026 06:47:08 +0000 Manifest next update: Tue 27 Jan 2026 11:44:08 +0000 Files and hashes: 1: 3130332e36382e3231342e302f32332d3234203d3e20313530353137.roa (hash: 5eHMmSOXqcaio0G7mCeIUfZJCaBBOr7GrZWeXm+wBUE=) 2: 19280B8F5AA4FBDEC679C351EB040D284CF791BE.crl (hash: IYfvcev85KOfmqiGE9HHeIQUy7WaCyQ6B3hfXE8WkrY=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/4ebf63ed-d450-477e-b31b-af92b1726d2e/0/19280B8F5AA4FBDEC679C351EB040D284CF791BE.crl rsync://repo-rpki.idnic.net/repo/4ebf63ed-d450-477e-b31b-af92b1726d2e/0/19280B8F5AA4FBDEC679C351EB040D284CF791BE.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/19280B8F5AA4FBDEC679C351EB040D284CF791BE.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 27 Jan 2026 11:44:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1f:a9:9b:da:3a:47:46:ba:cb:f6:55:ee:bf:61:3c:62:b2:56:ca:0f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=19280B8F5AA4FBDEC679C351EB040D284CF791BE Validity Not Before: Jan 24 06:47:08 2026 GMT Not After : Jan 27 11:44:08 2026 GMT Subject: CN=BA9C0F080E709565ECE1EA8B35BBAFD45FF562ED Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:27:54:b3:c2:24:f2:fe:4a:f8:77:9a:71:46: ef:c6:27:d1:38:37:9f:25:1c:0f:78:37:25:02:e2: b8:af:3d:85:69:6d:20:34:6a:bb:9f:15:1e:b1:cc: 8f:a8:52:8e:a1:63:84:78:5b:54:9a:81:6f:7c:32: 35:53:ee:df:d2:ca:17:21:1f:da:aa:82:64:2b:b2: 05:81:1b:9f:42:14:9f:ab:41:eb:58:0a:ec:9b:28: 98:ca:76:7d:91:bd:a7:ec:f2:8c:ae:34:fd:89:69: 5b:37:81:d4:cd:82:10:e0:57:bf:3d:2a:31:da:cf: 1e:4b:8d:15:b6:23:10:24:ef:53:59:70:a8:b2:da: d8:cc:1b:cf:f3:c7:98:63:e5:64:e6:d5:62:9d:0a: e0:ed:c2:bb:c7:2f:88:c8:3f:b5:fd:61:b8:6a:ac: 8b:16:c5:9f:7a:6a:e6:df:87:2c:a5:e1:d9:b5:a9: cc:76:54:45:92:57:84:04:97:1f:06:2b:b5:df:a1: 1f:80:81:80:7b:1a:bf:4f:1a:61:99:7a:de:28:71: e5:3a:5b:4f:f4:c3:5b:f0:ee:4b:ef:ca:d2:fd:3f: 1e:af:0f:72:fb:db:8a:ba:15:19:9f:81:92:66:68: c1:34:43:30:29:20:00:4f:88:82:8e:b2:e0:cd:a0: 01:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:9C:0F:08:0E:70:95:65:EC:E1:EA:8B:35:BB:AF:D4:5F:F5:62:ED X509v3 Authority Key Identifier: keyid:19:28:0B:8F:5A:A4:FB:DE:C6:79:C3:51:EB:04:0D:28:4C:F7:91:BE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/4ebf63ed-d450-477e-b31b-af92b1726d2e/0/19280B8F5AA4FBDEC679C351EB040D284CF791BE.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/19280B8F5AA4FBDEC679C351EB040D284CF791BE.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/4ebf63ed-d450-477e-b31b-af92b1726d2e/0/19280B8F5AA4FBDEC679C351EB040D284CF791BE.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1c:74:7c:2c:02:b8:2d:e4:d0:b8:a7:ed:d4:18:3a:78:bf:02: 59:66:e0:20:74:1c:d2:52:2e:7a:9a:95:94:bd:f5:13:e1:5e: 92:c3:94:30:fe:b6:7e:0a:9b:bb:ae:db:02:b4:87:7c:f2:29: 11:00:7f:84:a7:be:4c:a7:8b:b0:7a:7a:91:62:bf:9f:1d:e5: 42:e7:8d:ef:62:bf:c0:57:84:04:a7:62:ad:4d:71:01:74:4f: 08:13:dc:9c:d5:0c:bc:32:62:2f:16:b4:dc:36:69:3b:54:fc: 60:e6:c0:49:93:dd:cb:ef:3f:ca:80:8a:85:65:bc:74:59:ef: ed:1f:ba:b1:42:61:be:bb:e6:7e:3a:f1:7d:00:2b:35:60:f7: 83:79:37:c2:89:0b:eb:de:3d:11:ae:e5:c5:2c:81:8c:a4:ec: 1d:a6:66:e9:56:d4:1d:82:a5:b4:e7:8e:e2:a7:29:d6:90:ee: 0d:6b:0b:65:58:34:fb:81:27:a6:c8:cf:27:b1:ff:0e:35:42: ab:55:f6:a7:c3:22:0b:66:6c:7c:cb:c5:fd:09:08:6e:02:10: 71:1c:46:a3:c0:3a:be:46:fa:7b:f9:8d:8c:88:59:4b:65:33: ad:8a:fe:f9:7c:ad:e7:ae:1c:75:73:9a:1a:b9:aa:5e:3f:93: 42:07:8c:62 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUH6mb2jpHRrrL9lXuv2E8YrJWyg8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTkyODBCOEY1QUE0RkJERUM2NzlDMzUxRUIwNDBEMjg0 Q0Y3OTFCRTAeFw0yNjAxMjQwNjQ3MDhaFw0yNjAxMjcxMTQ0MDhaMDMxMTAvBgNV BAMTKEJBOUMwRjA4MEU3MDk1NjVFQ0UxRUE4QjM1QkJBRkQ0NUZGNTYyRUQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC1J1SzwiTy/kr4d5pxRu/GJ9E4 N58lHA94NyUC4rivPYVpbSA0arufFR6xzI+oUo6hY4R4W1SagW98MjVT7t/Syhch H9qqgmQrsgWBG59CFJ+rQetYCuybKJjKdn2Rvafs8oyuNP2JaVs3gdTNghDgV789 KjHazx5LjRW2IxAk71NZcKiy2tjMG8/zx5hj5WTm1WKdCuDtwrvHL4jIP7X9Ybhq rIsWxZ96aubfhyyl4dm1qcx2VEWSV4QElx8GK7XfoR+AgYB7Gr9PGmGZet4oceU6 W0/0w1vw7kvvytL9Px6vD3L724q6FRmfgZJmaME0QzApIABPiIKOsuDNoAFhAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUupwPCA5wlWXs4eqLNbuv1F/1Yu0wHwYDVR0j BBgwFoAUGSgLj1qk+97GecNR6wQNKEz3kb4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 ZWJmNjNlZC1kNDUwLTQ3N2UtYjMxYi1hZjkyYjE3MjZkMmUvMC8xOTI4MEI4RjVB QTRGQkRFQzY3OUMzNTFFQjA0MEQyODRDRjc5MUJFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMTkyODBCOEY1QUE0RkJERUM2NzlDMzUxRUIwNDBEMjg0Q0Y3 OTFCRS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNGViZjYzZWQtZDQ1MC00NzdlLWIz MWItYWY5MmIxNzI2ZDJlLzAvMTkyODBCOEY1QUE0RkJERUM2NzlDMzUxRUIwNDBE Mjg0Q0Y3OTFCRS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABx0fCwCuC3k0Lin7dQYOni/Allm4CB0HNJS LnqalZS99RPhXpLDlDD+tn4Km7uu2wK0h3zyKREAf4Snvkyni7B6epFiv58d5ULn je9iv8BXhASnYq1NcQF0TwgT3JzVDLwyYi8WtNw2aTtU/GDmwEmT3cvvP8qAioVl vHRZ7+0furFCYb675n468X0AKzVg94N5N8KJC+vePRGu5cUsgYyk7B2mZulW1B2C pbTnjuKnKdaQ7g1rC2VYNPuBJ6bIzyex/w41QqtV9qfDIgtmbHzLxf0JCG4CEHEc RqPAOr5G+nv5jYyIWUtlM62K/vl8reeuHHVzmhq5ql4/k0IHjGI= -----END CERTIFICATE-----Generated at Mon Jan 26 01:13:49 2026 by rpki-client