This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/5004e530-2fcf-4cd6-b05c-eb3c0c135608/0/F03499B3CFC25C7C508C14462AC4268BF1E9F67D.mft File: F03499B3CFC25C7C508C14462AC4268BF1E9F67D.mft (raw, json) Hash identifier: srM2BQ6yGfBn2kanCvHMf19ZGedRWM09My/gnMdtA3c= Subject key identifier: 0B:B4:34:DE:C2:82:F3:28:8A:CA:E1:0D:09:0A:41:EC:65:02:97:50 Authority key identifier: F0:34:99:B3:CF:C2:5C:7C:50:8C:14:46:2A:C4:26:8B:F1:E9:F6:7D Certificate issuer: /CN=F03499B3CFC25C7C508C14462AC4268BF1E9F67D Certificate serial: 14A216EE180F3B4B677F021252D1D42E6E1DF40A Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F03499B3CFC25C7C508C14462AC4268BF1E9F67D.cer Subject info access: rsync://repo-rpki.idnic.net/repo/5004e530-2fcf-4cd6-b05c-eb3c0c135608/0/F03499B3CFC25C7C508C14462AC4268BF1E9F67D.mft Manifest number: 01B8 Signing time: Sat 24 Jan 2026 15:42:15 +0000 Manifest this update: Sat 24 Jan 2026 15:37:15 +0000 Manifest next update: Tue 27 Jan 2026 18:41:15 +0000 Files and hashes: 1: 3130332e3137372e3139392e302f32342d3234203d3e20313437313133.roa (hash: pEHLezsTnYguADx1cbYPTZbHF6Ez4ndRML5zjv7PktU=) 2: 3130332e3137332e37322e302f32342d3234203d3e20313437313133.roa (hash: CjoIHvi7yqXvHMVwjtTCYFagfhfgPFy7R0tpEnYKeXM=) 3: F03499B3CFC25C7C508C14462AC4268BF1E9F67D.crl (hash: iEULc2NejrwSXqS73h0qYKYVf6/MgARfhd9q5nPbFBM=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/5004e530-2fcf-4cd6-b05c-eb3c0c135608/0/F03499B3CFC25C7C508C14462AC4268BF1E9F67D.crl rsync://repo-rpki.idnic.net/repo/5004e530-2fcf-4cd6-b05c-eb3c0c135608/0/F03499B3CFC25C7C508C14462AC4268BF1E9F67D.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F03499B3CFC25C7C508C14462AC4268BF1E9F67D.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 27 Jan 2026 18:41:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 14:a2:16:ee:18:0f:3b:4b:67:7f:02:12:52:d1:d4:2e:6e:1d:f4:0a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F03499B3CFC25C7C508C14462AC4268BF1E9F67D Validity Not Before: Jan 24 15:37:15 2026 GMT Not After : Jan 27 18:41:15 2026 GMT Subject: CN=0BB434DEC282F3288ACAE10D090A41EC65029750 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:82:e3:83:e5:11:2f:37:61:0f:8f:bf:bb:90: 8b:10:08:79:86:0a:80:7f:74:99:eb:db:ad:68:55: cd:31:cf:27:c9:89:b9:39:5e:e8:5f:5e:57:03:b4: a4:ca:63:96:10:51:69:1d:25:9b:06:33:9b:3c:70: 32:ef:cf:52:bc:09:45:09:4d:f9:36:07:3c:6d:6a: 16:98:8e:b7:92:ac:ba:5c:5d:df:e2:cd:07:1c:94: 15:38:02:6d:2c:3b:48:4f:be:cd:90:c2:72:df:bf: fa:2c:37:ae:93:74:bb:49:d2:63:42:ca:91:21:69: 3e:ba:2a:f0:6f:fb:46:6e:75:a4:6e:3a:87:6a:b8: a7:96:48:2f:16:8e:02:51:50:16:7b:16:48:38:d7: 8a:72:29:b7:6e:e6:93:ef:b3:a5:a6:a7:fc:10:65: 04:ab:08:74:e0:e3:55:ff:85:1a:43:c6:17:5a:5f: 57:0f:ab:f2:7d:a4:24:78:6b:f4:22:e3:2a:75:8b: 5b:e1:04:d6:70:4d:32:fa:f5:6f:26:65:e5:d6:c0: b1:13:e3:88:9d:f3:be:86:d8:7e:ab:6a:5c:61:3b: 21:55:58:be:e8:2d:c5:97:63:ad:f1:d1:02:5a:66: 5e:22:0d:a1:ba:d7:87:aa:d0:3e:4e:7d:75:36:f5: db:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0B:B4:34:DE:C2:82:F3:28:8A:CA:E1:0D:09:0A:41:EC:65:02:97:50 X509v3 Authority Key Identifier: keyid:F0:34:99:B3:CF:C2:5C:7C:50:8C:14:46:2A:C4:26:8B:F1:E9:F6:7D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/5004e530-2fcf-4cd6-b05c-eb3c0c135608/0/F03499B3CFC25C7C508C14462AC4268BF1E9F67D.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F03499B3CFC25C7C508C14462AC4268BF1E9F67D.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/5004e530-2fcf-4cd6-b05c-eb3c0c135608/0/F03499B3CFC25C7C508C14462AC4268BF1E9F67D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 42:aa:ea:13:7b:69:42:a5:8d:d9:29:b5:52:6b:bc:28:9f:47: a2:84:1a:c0:3d:ff:cc:3d:1b:f1:3f:7f:09:e5:08:d6:ba:b4: f8:02:42:94:a0:f1:80:c1:26:7c:af:2b:84:b9:5d:93:18:3f: 47:ea:e4:84:b3:86:4a:d1:44:58:7e:18:9a:e1:2e:c8:b1:df: 19:8b:c2:fb:f0:56:ee:fe:11:58:83:a7:ca:c1:db:cc:6e:90: 1d:56:c7:78:a9:b3:56:dc:df:17:44:85:df:d3:eb:f5:ad:16: 01:ca:6a:dd:c6:5d:56:aa:61:ad:12:e9:5d:fe:b4:8c:4a:f3: 3d:70:ad:76:92:0c:7d:42:96:70:a8:7b:5f:89:60:78:e5:ac: 36:cd:81:e1:13:79:88:62:eb:d7:1c:ee:bf:21:48:f9:4c:2d: 28:31:51:d7:e4:4d:19:e0:ce:da:79:63:df:6b:59:ea:19:3b: 8c:bc:f5:11:a0:c6:3b:b5:cf:9e:66:19:58:f6:68:cc:80:fd: ac:d0:06:96:36:61:1e:78:1d:ba:25:77:08:92:ad:48:97:05: 13:4b:f2:69:82:95:c1:71:db:64:08:e2:4d:a4:0b:09:57:9d: f1:3e:e7:f4:07:d6:91:6f:7d:61:e7:ed:19:19:fb:ba:64:d1: bd:b4:1e:79 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUFKIW7hgPO0tnfwISUtHULm4d9AowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjAzNDk5QjNDRkMyNUM3QzUwOEMxNDQ2MkFDNDI2OEJG MUU5RjY3RDAeFw0yNjAxMjQxNTM3MTVaFw0yNjAxMjcxODQxMTVaMDMxMTAvBgNV BAMTKDBCQjQzNERFQzI4MkYzMjg4QUNBRTEwRDA5MEE0MUVDNjUwMjk3NTAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDJguOD5REvN2EPj7+7kIsQCHmG CoB/dJnr261oVc0xzyfJibk5XuhfXlcDtKTKY5YQUWkdJZsGM5s8cDLvz1K8CUUJ Tfk2BzxtahaYjreSrLpcXd/izQcclBU4Am0sO0hPvs2QwnLfv/osN66TdLtJ0mNC ypEhaT66KvBv+0ZudaRuOodquKeWSC8WjgJRUBZ7Fkg414pyKbdu5pPvs6Wmp/wQ ZQSrCHTg41X/hRpDxhdaX1cPq/J9pCR4a/Qi4yp1i1vhBNZwTTL69W8mZeXWwLET 44id876G2H6ralxhOyFVWL7oLcWXY63x0QJaZl4iDaG614eq0D5OfXU29dtTAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUC7Q03sKC8yiKyuENCQpB7GUCl1AwHwYDVR0j BBgwFoAU8DSZs8/CXHxQjBRGKsQmi/Hp9n0wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 MDA0ZTUzMC0yZmNmLTRjZDYtYjA1Yy1lYjNjMGMxMzU2MDgvMC9GMDM0OTlCM0NG QzI1QzdDNTA4QzE0NDYyQUM0MjY4QkYxRTlGNjdELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRjAzNDk5QjNDRkMyNUM3QzUwOEMxNDQ2MkFDNDI2OEJGMUU5 RjY3RC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNTAwNGU1MzAtMmZjZi00Y2Q2LWIw NWMtZWIzYzBjMTM1NjA4LzAvRjAzNDk5QjNDRkMyNUM3QzUwOEMxNDQ2MkFDNDI2 OEJGMUU5RjY3RC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEKq6hN7aUKljdkptVJrvCifR6KEGsA9/8w9 G/E/fwnlCNa6tPgCQpSg8YDBJnyvK4S5XZMYP0fq5ISzhkrRRFh+GJrhLsix3xmL wvvwVu7+EViDp8rB28xukB1Wx3ips1bc3xdEhd/T6/WtFgHKat3GXVaqYa0S6V3+ tIxK8z1wrXaSDH1ClnCoe1+JYHjlrDbNgeETeYhi69cc7r8hSPlMLSgxUdfkTRng ztp5Y99rWeoZO4y89RGgxju1z55mGVj2aMyA/azQBpY2YR54HboldwiSrUiXBRNL 8mmClcFx22QI4k2kCwlXnfE+5/QH1pFvfWHn7RkZ+7pk0b20Hnk= -----END CERTIFICATE-----Generated at Mon Jan 26 01:11:36 2026 by rpki-client