This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/5b64a78c-dd4c-4c9d-bcf0-6de6cdb925b0/0/385CADA9D59B15B5F48DCBA1C80B7EDAC282D804.mft File: 385CADA9D59B15B5F48DCBA1C80B7EDAC282D804.mft (raw, json) Hash identifier: czQkhrii175VBVzEWRZYew+IB8YerzAI+SuKPfpxSwA= Subject key identifier: 48:D6:23:52:36:B0:61:F5:1D:93:A7:94:44:37:6C:9D:A1:0C:11:F1 Authority key identifier: 38:5C:AD:A9:D5:9B:15:B5:F4:8D:CB:A1:C8:0B:7E:DA:C2:82:D8:04 Certificate issuer: /CN=385CADA9D59B15B5F48DCBA1C80B7EDAC282D804 Certificate serial: 78F7D9499D806D523596FB025F5583BAD695712E Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/385CADA9D59B15B5F48DCBA1C80B7EDAC282D804.cer Subject info access: rsync://repo-rpki.idnic.net/repo/5b64a78c-dd4c-4c9d-bcf0-6de6cdb925b0/0/385CADA9D59B15B5F48DCBA1C80B7EDAC282D804.mft Manifest number: 0232 Signing time: Sun 25 Jan 2026 20:41:24 +0000 Manifest this update: Sun 25 Jan 2026 20:36:24 +0000 Manifest next update: Thu 29 Jan 2026 01:21:24 +0000 Files and hashes: 1: 3130332e3231322e3137382e302f32332d3233203d3e2039333431.roa (hash: QJX8gN5qCZ248XxYcOkj9y8Yy9OG8gAXiFIbOeNfS/4=) 2: 385CADA9D59B15B5F48DCBA1C80B7EDAC282D804.crl (hash: e/frAomhCNgtN2TGAPP2bkswR7j9V0/3CR3MZm8OqoU=) 3: 3130332e3231322e3137382e302f32342d3234203d3e2039333431.roa (hash: Up0WVIVn1DSp86oc5duyiu8N6jL5NwEXZcZF3tRKCnk=) 4: 3130332e3231322e3137392e302f32342d3234203d3e2039333431.roa (hash: Y6FVrv8+kgK0K+g5zRAWYyaW8dIXM4ilb/pbLuxnf+I=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/5b64a78c-dd4c-4c9d-bcf0-6de6cdb925b0/0/385CADA9D59B15B5F48DCBA1C80B7EDAC282D804.crl rsync://repo-rpki.idnic.net/repo/5b64a78c-dd4c-4c9d-bcf0-6de6cdb925b0/0/385CADA9D59B15B5F48DCBA1C80B7EDAC282D804.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/385CADA9D59B15B5F48DCBA1C80B7EDAC282D804.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 28 Jan 2026 14:00:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 78:f7:d9:49:9d:80:6d:52:35:96:fb:02:5f:55:83:ba:d6:95:71:2e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=385CADA9D59B15B5F48DCBA1C80B7EDAC282D804 Validity Not Before: Jan 25 20:36:24 2026 GMT Not After : Jan 29 01:21:24 2026 GMT Subject: CN=48D6235236B061F51D93A79444376C9DA10C11F1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:12:ae:1e:e8:dc:da:b0:0b:41:2c:95:d3:ad: 8b:39:72:c1:6c:72:56:47:e9:28:1d:ca:7f:44:94: b8:2b:2b:94:4b:66:0b:d2:bc:24:ed:82:10:7c:cd: 82:66:eb:11:77:e1:fc:67:e4:42:b1:4c:fe:26:46: e5:b2:24:52:c8:dd:aa:20:65:f8:47:e2:94:68:20: 9f:d6:4e:c3:6d:c1:75:64:43:c4:c4:03:59:6c:93: a5:af:00:54:0a:4a:f7:74:2a:1b:50:e0:89:34:bc: 92:b3:a3:6a:d0:4d:7e:d7:6c:ff:08:b4:d4:9a:18: f1:53:a4:1d:74:1e:70:73:70:72:66:16:c7:2d:af: 28:5a:12:f6:0d:3f:93:52:04:e7:0c:0e:ea:7f:2e: dd:bb:d6:cc:ff:4a:4c:35:c2:5b:56:8a:d1:2a:42: 84:79:30:9f:fa:50:30:dc:07:a3:7e:50:38:39:6f: 3a:3b:32:d0:4f:0b:df:6e:ed:08:3f:42:0b:86:9a: 69:30:f7:15:7e:89:e5:31:6e:8c:68:31:9b:41:4b: f0:45:b9:bc:1b:57:92:9a:39:ab:19:ed:5c:36:92: 89:7e:84:bf:03:4b:f5:c9:5e:23:37:19:da:ae:7a: bc:ab:99:75:05:49:eb:71:ee:54:10:6c:75:12:47: 1a:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 48:D6:23:52:36:B0:61:F5:1D:93:A7:94:44:37:6C:9D:A1:0C:11:F1 X509v3 Authority Key Identifier: keyid:38:5C:AD:A9:D5:9B:15:B5:F4:8D:CB:A1:C8:0B:7E:DA:C2:82:D8:04 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/5b64a78c-dd4c-4c9d-bcf0-6de6cdb925b0/0/385CADA9D59B15B5F48DCBA1C80B7EDAC282D804.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/385CADA9D59B15B5F48DCBA1C80B7EDAC282D804.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/5b64a78c-dd4c-4c9d-bcf0-6de6cdb925b0/0/385CADA9D59B15B5F48DCBA1C80B7EDAC282D804.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 10:3d:c8:d3:b1:db:09:7e:6e:c9:ac:bb:e6:c3:db:31:8a:d6: 23:67:f8:91:10:4e:34:7b:47:50:39:6d:32:18:f8:06:59:b8: 61:ea:ef:c3:8a:a6:eb:a2:7d:1d:76:8b:34:52:76:3d:24:c8: 5d:be:2f:3b:b3:af:21:a7:b0:de:75:79:ac:f8:c5:11:d2:05: 4a:6f:b4:14:70:2b:08:bd:c3:bd:97:8a:5c:03:9a:04:47:57: 30:e1:4c:86:f8:86:34:d6:5b:89:39:20:98:38:64:ab:f4:0f: 41:74:39:f7:fb:cd:39:50:70:2b:b8:a3:3a:83:6d:30:07:27: dd:36:6d:6b:b8:ea:05:5d:4c:4c:18:18:64:c4:ae:71:f7:9b: c8:33:90:a1:dc:8f:88:6f:ef:bb:3a:50:9f:3c:90:5e:4c:c8: 8b:13:a2:cb:8f:62:d3:a3:74:84:4a:7f:90:d1:20:35:b5:bc: ba:2c:01:c4:1f:c9:aa:61:dc:51:c6:a2:1d:c0:ae:49:08:ac: 35:d3:1b:05:bd:c5:58:b0:c7:cb:6c:e6:9e:27:72:69:e5:17: 2e:e3:d6:d2:88:cc:9f:26:6c:69:52:13:b5:32:36:6a:d0:9a: 2e:33:9d:c4:7a:13:fe:aa:a1:5c:c8:2b:3a:af:61:dd:ef:29: fd:97:ac:fb -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUePfZSZ2AbVI1lvsCX1WDutaVcS4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzg1Q0FEQTlENTlCMTVCNUY0OERDQkExQzgwQjdFREFD MjgyRDgwNDAeFw0yNjAxMjUyMDM2MjRaFw0yNjAxMjkwMTIxMjRaMDMxMTAvBgNV BAMTKDQ4RDYyMzUyMzZCMDYxRjUxRDkzQTc5NDQ0Mzc2QzlEQTEwQzExRjEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDCEq4e6NzasAtBLJXTrYs5csFs clZH6Sgdyn9ElLgrK5RLZgvSvCTtghB8zYJm6xF34fxn5EKxTP4mRuWyJFLI3aog ZfhH4pRoIJ/WTsNtwXVkQ8TEA1lsk6WvAFQKSvd0KhtQ4Ik0vJKzo2rQTX7XbP8I tNSaGPFTpB10HnBzcHJmFsctryhaEvYNP5NSBOcMDup/Lt271sz/Skw1wltWitEq QoR5MJ/6UDDcB6N+UDg5bzo7MtBPC99u7Qg/QguGmmkw9xV+ieUxboxoMZtBS/BF ubwbV5KaOasZ7Vw2kol+hL8DS/XJXiM3GdqueryrmXUFSetx7lQQbHUSRxonAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUSNYjUjawYfUdk6eURDdsnaEMEfEwHwYDVR0j BBgwFoAUOFytqdWbFbX0jcuhyAt+2sKC2AQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 YjY0YTc4Yy1kZDRjLTRjOWQtYmNmMC02ZGU2Y2RiOTI1YjAvMC8zODVDQURBOUQ1 OUIxNUI1RjQ4RENCQTFDODBCN0VEQUMyODJEODA0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMzg1Q0FEQTlENTlCMTVCNUY0OERDQkExQzgwQjdFREFDMjgy RDgwNC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNWI2NGE3OGMtZGQ0Yy00YzlkLWJj ZjAtNmRlNmNkYjkyNWIwLzAvMzg1Q0FEQTlENTlCMTVCNUY0OERDQkExQzgwQjdF REFDMjgyRDgwNC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABA9yNOx2wl+bsmsu+bD2zGK1iNn+JEQTjR7 R1A5bTIY+AZZuGHq78OKpuuifR12izRSdj0kyF2+LzuzryGnsN51eaz4xRHSBUpv tBRwKwi9w72XilwDmgRHVzDhTIb4hjTWW4k5IJg4ZKv0D0F0Off7zTlQcCu4ozqD bTAHJ902bWu46gVdTEwYGGTErnH3m8gzkKHcj4hv77s6UJ88kF5MyIsTosuPYtOj dIRKf5DRIDW1vLosAcQfyaph3FHGoh3ArkkIrDXTGwW9xViwx8ts5p4ncmnlFy7j 1tKIzJ8mbGlSE7UyNmrQmi4zncR6E/6qoVzIKzqvYd3vKf2XrPs= -----END CERTIFICATE-----Generated at Sun Jan 25 22:52:43 2026 by rpki-client