This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/5bf2cf03-f9f9-4bca-8c2c-6073280dfea8/0/B392381083372148D0977D0066CFF38FD5A32CDB.mft File: B392381083372148D0977D0066CFF38FD5A32CDB.mft (raw, json) Hash identifier: kN6tY7m2s+NCW6IVvxv+D0j8IP2ZsXyMGlkBRFZB3mk= Subject key identifier: A7:AA:78:6E:D8:D6:B7:59:5D:71:2C:AB:CD:47:DF:78:88:AB:51:CD Authority key identifier: B3:92:38:10:83:37:21:48:D0:97:7D:00:66:CF:F3:8F:D5:A3:2C:DB Certificate issuer: /CN=B392381083372148D0977D0066CFF38FD5A32CDB Certificate serial: 3B42918D23D7472DB1C93B571940C99B28A8D24A Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B392381083372148D0977D0066CFF38FD5A32CDB.cer Subject info access: rsync://repo-rpki.idnic.net/repo/5bf2cf03-f9f9-4bca-8c2c-6073280dfea8/0/B392381083372148D0977D0066CFF38FD5A32CDB.mft Manifest number: 026E Signing time: Sun 25 Jan 2026 06:52:04 +0000 Manifest this update: Sun 25 Jan 2026 06:47:04 +0000 Manifest next update: Wed 28 Jan 2026 07:12:04 +0000 Files and hashes: 1: 3130332e3138352e38322e302f32332d3234203d3e203538383230.roa (hash: KYSy/nRpWJvgJOx3JwwIgJ7/nxfWqKSbFEYRVqxBqWw=) 2: B392381083372148D0977D0066CFF38FD5A32CDB.crl (hash: gBGkTseChSV4hOgQY8lVYyZIJF+iGOw2jcFJG+mxjV0=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/5bf2cf03-f9f9-4bca-8c2c-6073280dfea8/0/B392381083372148D0977D0066CFF38FD5A32CDB.crl rsync://repo-rpki.idnic.net/repo/5bf2cf03-f9f9-4bca-8c2c-6073280dfea8/0/B392381083372148D0977D0066CFF38FD5A32CDB.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B392381083372148D0977D0066CFF38FD5A32CDB.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 28 Jan 2026 07:12:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3b:42:91:8d:23:d7:47:2d:b1:c9:3b:57:19:40:c9:9b:28:a8:d2:4a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B392381083372148D0977D0066CFF38FD5A32CDB Validity Not Before: Jan 25 06:47:04 2026 GMT Not After : Jan 28 07:12:04 2026 GMT Subject: CN=A7AA786ED8D6B7595D712CABCD47DF7888AB51CD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:28:9a:d1:b4:80:2c:9b:17:a4:de:fe:0f:06: 04:33:c7:00:c8:e8:05:91:20:04:2b:26:b7:6b:a2: 16:ff:7f:9d:af:6d:b5:e8:4e:89:c1:d3:0d:68:a0: 15:d8:bd:de:f8:a2:bd:a1:ac:f6:fe:96:1a:83:92: 29:fe:6d:35:03:97:a3:dd:84:7c:2d:63:91:62:80: fd:27:81:6f:ae:9e:37:36:c4:55:82:9a:ca:70:f5: 3c:37:53:f2:63:8d:49:99:5e:bb:96:24:fa:de:06: 49:ef:3a:71:e9:82:50:93:b1:c4:48:6a:ac:57:81: 26:3e:52:97:f0:92:81:3b:0a:41:3a:b2:fc:9f:92: 05:36:c0:af:d9:6d:6e:d9:04:f1:d3:c5:fa:b7:80: cc:81:5b:4c:26:50:84:4e:03:46:0c:0d:e4:f5:81: 4e:b3:8a:f5:4f:9b:50:13:d4:09:23:fd:95:c8:df: 7f:94:82:5e:24:fa:65:8b:b5:aa:d9:3f:94:31:b7: 44:97:28:96:22:ca:bb:1f:e6:3f:b0:55:da:38:3d: 97:78:c4:d0:7b:81:93:13:2f:c9:36:fe:ea:cf:61: f5:30:3d:52:70:0a:bd:b4:03:d8:93:b3:a1:a3:00: 3a:28:ea:43:b5:67:0d:93:5e:dd:f9:6d:5e:65:4f: 1f:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:AA:78:6E:D8:D6:B7:59:5D:71:2C:AB:CD:47:DF:78:88:AB:51:CD X509v3 Authority Key Identifier: keyid:B3:92:38:10:83:37:21:48:D0:97:7D:00:66:CF:F3:8F:D5:A3:2C:DB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/5bf2cf03-f9f9-4bca-8c2c-6073280dfea8/0/B392381083372148D0977D0066CFF38FD5A32CDB.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B392381083372148D0977D0066CFF38FD5A32CDB.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/5bf2cf03-f9f9-4bca-8c2c-6073280dfea8/0/B392381083372148D0977D0066CFF38FD5A32CDB.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9d:b9:6d:ac:4c:8d:c7:df:c0:12:29:4c:1b:76:62:7a:a5:68: 15:24:27:68:c8:ce:15:a0:fa:ba:82:ef:30:9d:bd:96:7d:85: c6:52:97:2c:82:e3:8c:3a:dd:d9:43:40:c8:1f:11:ef:47:60: 1a:03:08:98:3c:04:e5:82:23:04:1b:16:4e:60:9b:42:92:aa: 4e:77:a7:23:c4:83:63:4e:ca:85:09:6e:69:ca:e7:52:54:7b: 31:c2:ba:0e:54:c5:f9:63:1d:1a:12:98:8f:5c:4b:a6:fb:2b: ee:43:db:bf:6a:65:da:fb:19:1a:35:4c:95:3f:3f:6e:bb:40: 26:90:ee:29:80:39:37:4a:4f:e9:bc:43:ad:5c:fa:8e:e8:09: 12:04:02:88:76:29:41:f0:01:a7:e8:cf:53:71:eb:a1:a6:e7: ef:b6:08:9c:2e:88:03:fe:19:1b:c2:e0:32:9d:72:cc:54:e4: fa:28:8f:fb:90:49:5b:fb:db:0b:b7:c2:68:23:2a:09:8f:2b: b9:1b:28:c6:90:ad:1d:47:fd:10:c6:6b:80:36:e5:64:32:bc: 5a:1b:a3:a5:84:46:6b:b4:b2:2b:4c:39:bd:9d:dd:6d:21:a5: f4:f9:90:a8:ba:f1:60:23:59:4a:63:7f:76:ee:ef:73:02:c7: 21:50:27:80 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUO0KRjSPXRy2xyTtXGUDJmyio0kowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjM5MjM4MTA4MzM3MjE0OEQwOTc3RDAwNjZDRkYzOEZE NUEzMkNEQjAeFw0yNjAxMjUwNjQ3MDRaFw0yNjAxMjgwNzEyMDRaMDMxMTAvBgNV BAMTKEE3QUE3ODZFRDhENkI3NTk1RDcxMkNBQkNENDdERjc4ODhBQjUxQ0QwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDYKJrRtIAsmxek3v4PBgQzxwDI 6AWRIAQrJrdrohb/f52vbbXoTonB0w1ooBXYvd74or2hrPb+lhqDkin+bTUDl6Pd hHwtY5FigP0ngW+unjc2xFWCmspw9Tw3U/JjjUmZXruWJPreBknvOnHpglCTscRI aqxXgSY+UpfwkoE7CkE6svyfkgU2wK/ZbW7ZBPHTxfq3gMyBW0wmUIROA0YMDeT1 gU6zivVPm1AT1Akj/ZXI33+Ugl4k+mWLtarZP5Qxt0SXKJYiyrsf5j+wVdo4PZd4 xNB7gZMTL8k2/urPYfUwPVJwCr20A9iTs6GjADoo6kO1Zw2TXt35bV5lTx/dAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUp6p4btjWt1ldcSyrzUffeIirUc0wHwYDVR0j BBgwFoAUs5I4EIM3IUjQl30AZs/zj9WjLNswDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 YmYyY2YwMy1mOWY5LTRiY2EtOGMyYy02MDczMjgwZGZlYTgvMC9CMzkyMzgxMDgz MzcyMTQ4RDA5NzdEMDA2NkNGRjM4RkQ1QTMyQ0RCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQjM5MjM4MTA4MzM3MjE0OEQwOTc3RDAwNjZDRkYzOEZENUEz MkNEQi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNWJmMmNmMDMtZjlmOS00YmNhLThj MmMtNjA3MzI4MGRmZWE4LzAvQjM5MjM4MTA4MzM3MjE0OEQwOTc3RDAwNjZDRkYz OEZENUEzMkNEQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJ25baxMjcffwBIpTBt2YnqlaBUkJ2jIzhWg +rqC7zCdvZZ9hcZSlyyC44w63dlDQMgfEe9HYBoDCJg8BOWCIwQbFk5gm0KSqk53 pyPEg2NOyoUJbmnK51JUezHCug5UxfljHRoSmI9cS6b7K+5D279qZdr7GRo1TJU/ P267QCaQ7imAOTdKT+m8Q61c+o7oCRIEAoh2KUHwAafoz1Nx66Gm5++2CJwuiAP+ GRvC4DKdcsxU5Pooj/uQSVv72wu3wmgjKgmPK7kbKMaQrR1H/RDGa4A25WQyvFob o6WERmu0sitMOb2d3W0hpfT5kKi68WAjWUpjf3bu73MCxyFQJ4A= -----END CERTIFICATE-----Generated at Mon Jan 26 01:11:33 2026 by rpki-client