This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/51234c4a-a8ff-4036-8420-da8162111806/1/1AC49AEAF48C9251C7913EA38CF4BAF8E40B7E4F.mft File: 1AC49AEAF48C9251C7913EA38CF4BAF8E40B7E4F.mft (raw, json) Hash identifier: vFU23uYyEYd9eG9UMp/6cmdfULtx0JbFy0G5+c/Ljf4= Subject key identifier: 57:E9:8F:07:6D:C4:09:AD:04:52:B0:BA:0C:74:1F:95:60:91:C8:E7 Authority key identifier: 1A:C4:9A:EA:F4:8C:92:51:C7:91:3E:A3:8C:F4:BA:F8:E4:0B:7E:4F Certificate issuer: /CN=1AC49AEAF48C9251C7913EA38CF4BAF8E40B7E4F Certificate serial: 151A5B941A344317D6720AB30284A7B79CF2B0F4 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1AC49AEAF48C9251C7913EA38CF4BAF8E40B7E4F.cer Subject info access: rsync://repo-rpki.idnic.net/repo/51234c4a-a8ff-4036-8420-da8162111806/1/1AC49AEAF48C9251C7913EA38CF4BAF8E40B7E4F.mft Manifest number: 012E Signing time: Sat 24 Jan 2026 20:50:43 +0000 Manifest this update: Sat 24 Jan 2026 20:45:43 +0000 Manifest next update: Tue 27 Jan 2026 22:08:43 +0000 Files and hashes: 1: 323030313a6466333a373263303a3a2f34382d3438203d3e20313532333733.roa (hash: 942czowzjJh0U0LSw2/9UwfW1RkF7wxSGzzd06JKS0Q=) 2: 1AC49AEAF48C9251C7913EA38CF4BAF8E40B7E4F.crl (hash: uYbqXX5RiCS8BQ+BgFeswln9kZxeo9STlOQ+XTGOPTg=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/51234c4a-a8ff-4036-8420-da8162111806/1/1AC49AEAF48C9251C7913EA38CF4BAF8E40B7E4F.crl rsync://repo-rpki.idnic.net/repo/51234c4a-a8ff-4036-8420-da8162111806/1/1AC49AEAF48C9251C7913EA38CF4BAF8E40B7E4F.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1AC49AEAF48C9251C7913EA38CF4BAF8E40B7E4F.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 27 Jan 2026 22:08:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 15:1a:5b:94:1a:34:43:17:d6:72:0a:b3:02:84:a7:b7:9c:f2:b0:f4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1AC49AEAF48C9251C7913EA38CF4BAF8E40B7E4F Validity Not Before: Jan 24 20:45:43 2026 GMT Not After : Jan 27 22:08:43 2026 GMT Subject: CN=57E98F076DC409AD0452B0BA0C741F956091C8E7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:69:27:26:9d:9a:4b:33:72:d5:14:42:d1:21: 10:4f:c6:2e:ef:c9:41:19:79:13:85:89:a9:1e:f5: 18:d9:ac:83:20:eb:8f:86:bf:06:32:e1:36:c0:d6: 87:17:aa:16:18:5f:20:ad:04:36:10:bd:af:3d:29: 05:88:c6:60:21:97:74:5f:07:98:9a:0e:2c:01:be: b9:5e:7e:fc:3b:5b:c6:5f:25:2d:12:7d:9f:a0:8e: d8:6b:7d:7e:52:0f:64:ec:b2:99:44:0a:c2:c5:a4: 87:98:cb:2e:50:83:a3:70:ec:9c:f1:18:fb:f0:33: c2:51:3d:fa:fa:9a:4d:e0:39:ce:5e:da:e4:52:5a: 12:b0:ac:87:8e:e9:5b:71:e1:64:6c:d9:5a:1f:73: e3:c8:54:c5:12:7f:b9:ec:59:5e:69:c4:ce:1f:11: 44:19:f3:79:94:14:5b:fd:20:f8:ce:b3:20:65:11: 75:35:db:79:39:fc:32:4e:f4:84:4a:0b:2e:df:55: de:4a:8b:a1:15:c6:e1:2e:8d:37:99:b9:e8:55:c2: e6:e6:89:45:1b:ad:b4:f2:ed:03:64:04:b7:82:bf: cf:f8:77:25:f8:76:b9:70:0d:24:9b:ba:43:a8:45: 04:36:e2:5c:06:e0:70:81:c3:bf:0d:5b:f2:0c:ca: f6:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 57:E9:8F:07:6D:C4:09:AD:04:52:B0:BA:0C:74:1F:95:60:91:C8:E7 X509v3 Authority Key Identifier: keyid:1A:C4:9A:EA:F4:8C:92:51:C7:91:3E:A3:8C:F4:BA:F8:E4:0B:7E:4F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/51234c4a-a8ff-4036-8420-da8162111806/1/1AC49AEAF48C9251C7913EA38CF4BAF8E40B7E4F.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1AC49AEAF48C9251C7913EA38CF4BAF8E40B7E4F.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/51234c4a-a8ff-4036-8420-da8162111806/1/1AC49AEAF48C9251C7913EA38CF4BAF8E40B7E4F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 71:95:44:1c:fe:b0:0d:2f:e7:88:02:a4:e8:b4:07:1d:25:37: 61:46:83:77:f2:9f:db:fc:ce:fd:48:6e:db:b6:c6:a6:f9:fd: 00:99:98:76:6e:ed:73:e7:06:f6:17:e3:e9:48:f8:0d:57:a0: e2:bd:58:ee:af:0f:0f:4e:4c:f4:be:ce:06:ec:45:8f:8b:12: be:6e:a2:ad:c6:5e:61:d4:71:a0:cc:87:12:75:71:73:eb:b2: 8e:22:ae:b8:04:65:27:5f:5e:c1:28:21:e6:db:2f:30:03:62: cc:8c:df:06:98:78:13:44:15:61:c3:a4:ab:c3:b0:10:74:77: ed:70:cf:a2:b7:7b:e8:21:a2:2e:26:6f:9f:ee:c4:08:0c:a1: b0:90:f8:e5:34:78:ae:79:00:6a:37:cf:ae:88:96:e4:be:48: 2b:98:4f:9d:05:6a:a5:22:71:db:d2:20:f0:cb:13:21:e0:fb: c1:fa:70:60:9b:03:91:ee:6c:a3:36:15:68:90:c9:0c:ae:e6: 49:4f:0f:90:d6:b7:b4:62:df:5d:99:f3:ae:7e:e9:19:c1:61: ee:c1:14:11:c2:b2:a2:75:f6:a8:90:0a:e9:77:18:c3:f6:f8: 4e:84:19:b3:5d:d4:fc:d2:d5:00:b3:ff:c7:a6:d5:72:bb:55: c9:8a:1d:7b -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUFRpblBo0QxfWcgqzAoSnt5zysPQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUFDNDlBRUFGNDhDOTI1MUM3OTEzRUEzOENGNEJBRjhF NDBCN0U0RjAeFw0yNjAxMjQyMDQ1NDNaFw0yNjAxMjcyMjA4NDNaMDMxMTAvBgNV BAMTKDU3RTk4RjA3NkRDNDA5QUQwNDUyQjBCQTBDNzQxRjk1NjA5MUM4RTcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDnaScmnZpLM3LVFELRIRBPxi7v yUEZeROFiake9RjZrIMg64+GvwYy4TbA1ocXqhYYXyCtBDYQva89KQWIxmAhl3Rf B5iaDiwBvrlefvw7W8ZfJS0SfZ+gjthrfX5SD2TssplECsLFpIeYyy5Qg6Nw7Jzx GPvwM8JRPfr6mk3gOc5e2uRSWhKwrIeO6Vtx4WRs2Vofc+PIVMUSf7nsWV5pxM4f EUQZ83mUFFv9IPjOsyBlEXU123k5/DJO9IRKCy7fVd5Ki6EVxuEujTeZuehVwubm iUUbrbTy7QNkBLeCv8/4dyX4drlwDSSbukOoRQQ24lwG4HCBw78NW/IMyvZ5AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUV+mPB23ECa0EUrC6DHQflWCRyOcwHwYDVR0j BBgwFoAUGsSa6vSMklHHkT6jjPS6+OQLfk8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 MTIzNGM0YS1hOGZmLTQwMzYtODQyMC1kYTgxNjIxMTE4MDYvMS8xQUM0OUFFQUY0 OEM5MjUxQzc5MTNFQTM4Q0Y0QkFGOEU0MEI3RTRGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMUFDNDlBRUFGNDhDOTI1MUM3OTEzRUEzOENGNEJBRjhFNDBC N0U0Ri5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNTEyMzRjNGEtYThmZi00MDM2LTg0 MjAtZGE4MTYyMTExODA2LzEvMUFDNDlBRUFGNDhDOTI1MUM3OTEzRUEzOENGNEJB RjhFNDBCN0U0Ri5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHGVRBz+sA0v54gCpOi0Bx0lN2FGg3fyn9v8 zv1Ibtu2xqb5/QCZmHZu7XPnBvYX4+lI+A1XoOK9WO6vDw9OTPS+zgbsRY+LEr5u oq3GXmHUcaDMhxJ1cXPrso4irrgEZSdfXsEoIebbLzADYsyM3waYeBNEFWHDpKvD sBB0d+1wz6K3e+ghoi4mb5/uxAgMobCQ+OU0eK55AGo3z66IluS+SCuYT50FaqUi cdvSIPDLEyHg+8H6cGCbA5HubKM2FWiQyQyu5klPD5DWt7Ri312Z865+6RnBYe7B FBHCsqJ19qiQCul3GMP2+E6EGbNd1PzS1QCz/8em1XK7VcmKHXs= -----END CERTIFICATE-----Generated at Sun Jan 25 18:58:38 2026 by rpki-client