This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/59a74ac9-8fa5-439b-8f21-08f284677aa3/0/26D5C063BEB580B38F28F3CC16B958634FF7A48B.mft File: 26D5C063BEB580B38F28F3CC16B958634FF7A48B.mft (raw, json) Hash identifier: 0EQzv2dH94+iq4Ob6vhSSyAWCh3IhfL5xiwbLSh9veM= Subject key identifier: D9:19:FD:5A:33:D4:EE:54:EF:00:4E:82:32:09:CF:C1:C4:AC:FF:00 Authority key identifier: 26:D5:C0:63:BE:B5:80:B3:8F:28:F3:CC:16:B9:58:63:4F:F7:A4:8B Certificate issuer: /CN=26D5C063BEB580B38F28F3CC16B958634FF7A48B Certificate serial: 45628DC4385E114AAAD07804F85C4A9D474D41AD Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/26D5C063BEB580B38F28F3CC16B958634FF7A48B.cer Subject info access: rsync://repo-rpki.idnic.net/repo/59a74ac9-8fa5-439b-8f21-08f284677aa3/0/26D5C063BEB580B38F28F3CC16B958634FF7A48B.mft Manifest number: 0252 Signing time: Sun 25 Jan 2026 10:52:21 +0000 Manifest this update: Sun 25 Jan 2026 10:47:21 +0000 Manifest next update: Wed 28 Jan 2026 22:31:21 +0000 Files and hashes: 1: 26D5C063BEB580B38F28F3CC16B958634FF7A48B.crl (hash: 2ArsQThemQioVNacvSWoTZBcrvf7aEQqw5e6vKSNsJg=) 2: 3130332e3138392e312e302f32342d3234203d3e20313439383830.roa (hash: lNbPUGA/82mjhGneJ7g/W99enSkyu+j5sTgsqJn2Sk0=) 3: 3130332e3138392e302e302f32342d3234203d3e20313439383830.roa (hash: uqS3f/a/mCNWGnrE+t9GmuqXdPtzmTdKMITykozV6Ak=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/59a74ac9-8fa5-439b-8f21-08f284677aa3/0/26D5C063BEB580B38F28F3CC16B958634FF7A48B.crl rsync://repo-rpki.idnic.net/repo/59a74ac9-8fa5-439b-8f21-08f284677aa3/0/26D5C063BEB580B38F28F3CC16B958634FF7A48B.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/26D5C063BEB580B38F28F3CC16B958634FF7A48B.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 28 Jan 2026 14:00:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 45:62:8d:c4:38:5e:11:4a:aa:d0:78:04:f8:5c:4a:9d:47:4d:41:ad Signature Algorithm: sha256WithRSAEncryption Issuer: CN=26D5C063BEB580B38F28F3CC16B958634FF7A48B Validity Not Before: Jan 25 10:47:21 2026 GMT Not After : Jan 28 22:31:21 2026 GMT Subject: CN=D919FD5A33D4EE54EF004E823209CFC1C4ACFF00 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:fb:38:79:4f:c7:91:a5:0d:c9:a5:0c:8a:cc: d3:db:68:00:06:28:47:e7:b6:b8:22:ff:e3:83:9e: e6:ac:a2:38:e8:8b:a8:a5:41:0e:ae:ca:5d:fd:cd: 29:7b:f5:0d:14:ce:3c:18:c9:3a:a4:88:b1:6c:1c: fb:d5:24:eb:80:76:87:c3:28:b8:87:e2:19:4f:1b: 28:b1:51:53:36:01:58:63:af:f7:2d:72:6e:dd:83: 83:3b:99:75:f6:47:6a:4b:dd:6b:a7:d9:66:9a:ae: 2c:58:7a:b0:c3:3c:14:ea:c2:04:42:0a:9b:76:06: cb:21:55:1f:01:e5:fa:04:fc:a6:2f:36:c2:f1:bc: 80:46:c2:5c:97:47:e8:37:85:1d:a4:6c:20:f5:af: 4f:f8:ff:d5:1f:ed:db:55:24:15:fe:96:39:2b:23: ec:10:33:d5:06:d3:8e:65:92:01:c1:d1:07:8a:a4: 7f:06:e4:d3:f5:f7:7b:7d:d1:80:4c:a8:b8:e6:fa: 62:c0:09:ce:0f:65:db:6e:14:25:b5:6a:97:88:73: a1:dc:2b:d0:38:65:e9:7e:71:28:91:77:60:b0:ce: 97:38:2b:8b:84:15:50:89:e4:d5:20:d8:c7:94:13: 87:61:c1:b7:6e:ed:2f:ce:0b:3a:f3:0d:b1:83:30: eb:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:19:FD:5A:33:D4:EE:54:EF:00:4E:82:32:09:CF:C1:C4:AC:FF:00 X509v3 Authority Key Identifier: keyid:26:D5:C0:63:BE:B5:80:B3:8F:28:F3:CC:16:B9:58:63:4F:F7:A4:8B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/59a74ac9-8fa5-439b-8f21-08f284677aa3/0/26D5C063BEB580B38F28F3CC16B958634FF7A48B.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/26D5C063BEB580B38F28F3CC16B958634FF7A48B.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/59a74ac9-8fa5-439b-8f21-08f284677aa3/0/26D5C063BEB580B38F28F3CC16B958634FF7A48B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption d3:14:05:e4:75:86:87:c9:fc:f6:b9:49:3a:7a:15:04:8c:6f: d2:31:41:95:61:ed:31:02:0d:1e:5c:20:02:4c:9d:e9:86:9d: e4:17:79:8f:ab:19:75:dc:c8:80:5e:ec:47:80:dc:41:0e:4a: 97:fb:09:9c:6d:5d:a3:f4:75:34:38:66:73:03:64:9e:b0:92: 36:fb:50:cf:cc:ed:97:89:80:77:fc:d5:74:5a:5a:ed:09:c3: 7b:7d:60:80:69:5d:cb:ae:c5:91:0b:ed:96:6a:aa:dd:55:a0: ac:c5:3e:e8:a9:11:4d:d7:7d:32:80:bd:da:02:05:ca:b1:67: c4:7d:11:28:49:6e:51:66:de:cc:34:7b:49:c2:56:99:3b:ba: ae:21:0b:ef:fc:19:d4:92:16:ba:3d:42:eb:23:ad:52:0a:21: f8:8b:71:20:71:54:d5:e6:f1:41:3d:5a:ee:56:8f:00:29:3d: c1:02:fd:a5:d4:ce:8a:76:02:86:3c:eb:90:6f:e6:ed:81:55: 12:21:58:1b:60:86:77:73:b7:42:ff:09:c9:73:64:df:91:05: c0:14:49:41:d3:de:72:9a:47:d0:42:4f:32:f0:05:dc:1e:62: f6:9b:e1:c3:c5:da:f7:12:21:42:7b:cd:c7:4a:5b:92:00:19: c6:98:4b:d4 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIURWKNxDheEUqq0HgE+FxKnUdNQa0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjZENUMwNjNCRUI1ODBCMzhGMjhGM0NDMTZCOTU4NjM0 RkY3QTQ4QjAeFw0yNjAxMjUxMDQ3MjFaFw0yNjAxMjgyMjMxMjFaMDMxMTAvBgNV BAMTKEQ5MTlGRDVBMzNENEVFNTRFRjAwNEU4MjMyMDlDRkMxQzRBQ0ZGMDAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDb+zh5T8eRpQ3JpQyKzNPbaAAG KEfntrgi/+ODnuasojjoi6ilQQ6uyl39zSl79Q0UzjwYyTqkiLFsHPvVJOuAdofD KLiH4hlPGyixUVM2AVhjr/ctcm7dg4M7mXX2R2pL3Wun2WaarixYerDDPBTqwgRC Cpt2BsshVR8B5foE/KYvNsLxvIBGwlyXR+g3hR2kbCD1r0/4/9Uf7dtVJBX+ljkr I+wQM9UG045lkgHB0QeKpH8G5NP193t90YBMqLjm+mLACc4PZdtuFCW1apeIc6Hc K9A4Zel+cSiRd2Cwzpc4K4uEFVCJ5NUg2MeUE4dhwbdu7S/OCzrzDbGDMOvXAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU2Rn9WjPU7lTvAE6CMgnPwcSs/wAwHwYDVR0j BBgwFoAUJtXAY761gLOPKPPMFrlYY0/3pIswDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 OWE3NGFjOS04ZmE1LTQzOWItOGYyMS0wOGYyODQ2NzdhYTMvMC8yNkQ1QzA2M0JF QjU4MEIzOEYyOEYzQ0MxNkI5NTg2MzRGRjdBNDhCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMjZENUMwNjNCRUI1ODBCMzhGMjhGM0NDMTZCOTU4NjM0RkY3 QTQ4Qi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNTlhNzRhYzktOGZhNS00MzliLThm MjEtMDhmMjg0Njc3YWEzLzAvMjZENUMwNjNCRUI1ODBCMzhGMjhGM0NDMTZCOTU4 NjM0RkY3QTQ4Qi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBANMUBeR1hofJ/Pa5STp6FQSMb9IxQZVh7TEC DR5cIAJMnemGneQXeY+rGXXcyIBe7EeA3EEOSpf7CZxtXaP0dTQ4ZnMDZJ6wkjb7 UM/M7ZeJgHf81XRaWu0Jw3t9YIBpXcuuxZEL7ZZqqt1VoKzFPuipEU3XfTKAvdoC BcqxZ8R9EShJblFm3sw0e0nCVpk7uq4hC+/8GdSSFro9QusjrVIKIfiLcSBxVNXm 8UE9Wu5WjwApPcEC/aXUzop2AoY865Bv5u2BVRIhWBtghndzt0L/CclzZN+RBcAU SUHT3nKaR9BCTzLwBdweYvab4cPF2vcSIUJ7zcdKW5IAGcaYS9Q= -----END CERTIFICATE-----Generated at Sun Jan 25 18:48:54 2026 by rpki-client