This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/60649c47-dfc3-4a20-b5b4-879675e5db92/0/A496844B5B43BD38E2F4FD6EBD252D2832E9AE81.mft File: A496844B5B43BD38E2F4FD6EBD252D2832E9AE81.mft (raw, json) Hash identifier: gSL25UFSfUiJi1Q3llffI3l92PQC2elV9tNL8CJjDWI= Subject key identifier: B5:F8:DA:FA:8E:93:AA:FF:9B:15:0F:8B:8B:B5:33:53:CA:A4:76:0F Authority key identifier: A4:96:84:4B:5B:43:BD:38:E2:F4:FD:6E:BD:25:2D:28:32:E9:AE:81 Certificate issuer: /CN=A496844B5B43BD38E2F4FD6EBD252D2832E9AE81 Certificate serial: 6A35883CB59944AAB9B40F739621FCE0AE5E937F Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A496844B5B43BD38E2F4FD6EBD252D2832E9AE81.cer Subject info access: rsync://repo-rpki.idnic.net/repo/60649c47-dfc3-4a20-b5b4-879675e5db92/0/A496844B5B43BD38E2F4FD6EBD252D2832E9AE81.mft Manifest number: 0259 Signing time: Sat 24 Jan 2026 06:01:08 +0000 Manifest this update: Sat 24 Jan 2026 05:56:08 +0000 Manifest next update: Tue 27 Jan 2026 10:53:08 +0000 Files and hashes: 1: A496844B5B43BD38E2F4FD6EBD252D2832E9AE81.crl (hash: niL+twgJf1wSeZUwakM/Htr0U+rS0U3XzMHQeSbCjuQ=) 2: 3130332e3138342e3136372e302f32342d3234203d3e20313439363631.roa (hash: 29EwyU92wMo2KWDvgyD1kquOJ0/UWDMTbcLOQRMaasg=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/60649c47-dfc3-4a20-b5b4-879675e5db92/0/A496844B5B43BD38E2F4FD6EBD252D2832E9AE81.crl rsync://repo-rpki.idnic.net/repo/60649c47-dfc3-4a20-b5b4-879675e5db92/0/A496844B5B43BD38E2F4FD6EBD252D2832E9AE81.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A496844B5B43BD38E2F4FD6EBD252D2832E9AE81.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 27 Jan 2026 10:53:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6a:35:88:3c:b5:99:44:aa:b9:b4:0f:73:96:21:fc:e0:ae:5e:93:7f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A496844B5B43BD38E2F4FD6EBD252D2832E9AE81 Validity Not Before: Jan 24 05:56:08 2026 GMT Not After : Jan 27 10:53:08 2026 GMT Subject: CN=B5F8DAFA8E93AAFF9B150F8B8BB53353CAA4760F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:fa:5c:48:54:ac:70:87:80:0a:98:62:f8:ff: 0f:bd:12:68:43:c4:9a:88:37:b2:5d:0a:e8:53:f1: c8:47:5e:32:7e:e8:a9:4c:05:e2:35:7d:0a:8c:3e: 6e:b0:e4:3c:b0:9a:4d:59:ed:5f:88:45:ae:a3:74: 90:95:96:90:9c:c4:f6:36:c8:53:4e:6d:69:9d:79: 15:74:ef:bc:8c:40:4f:d1:f8:b1:ce:a3:73:63:11: 62:82:e6:64:f5:33:b6:69:80:d7:7d:52:fd:65:ba: 44:3e:0b:66:cc:cb:92:08:3f:3a:b4:1e:5a:fd:b0: c5:36:b0:eb:11:47:25:5d:43:45:bb:47:01:11:47: 14:9b:e4:7b:c7:40:26:3e:db:fd:77:82:74:95:bb: 39:33:a6:c7:74:6e:96:e2:54:cc:52:1a:f7:27:18: 99:39:fd:de:98:e2:d4:0b:25:de:93:85:5d:21:e5: 2a:71:eb:21:d4:2a:27:3c:0b:f9:9e:14:d1:01:c0: 54:d2:b1:a2:28:ec:85:74:d9:15:04:4d:cb:e1:b7: 3d:41:a6:7d:e7:24:46:42:66:6b:63:7a:1f:77:6c: 34:85:31:2e:28:bf:56:bc:02:87:55:cd:18:dc:f7: 21:0c:20:93:da:b8:4e:46:1e:d4:71:27:56:4a:1a: 16:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B5:F8:DA:FA:8E:93:AA:FF:9B:15:0F:8B:8B:B5:33:53:CA:A4:76:0F X509v3 Authority Key Identifier: keyid:A4:96:84:4B:5B:43:BD:38:E2:F4:FD:6E:BD:25:2D:28:32:E9:AE:81 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/60649c47-dfc3-4a20-b5b4-879675e5db92/0/A496844B5B43BD38E2F4FD6EBD252D2832E9AE81.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A496844B5B43BD38E2F4FD6EBD252D2832E9AE81.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/60649c47-dfc3-4a20-b5b4-879675e5db92/0/A496844B5B43BD38E2F4FD6EBD252D2832E9AE81.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 05:1d:c1:07:6e:3e:42:f0:c2:5a:79:fa:9a:0e:e9:ea:a6:2e: 0d:20:b2:38:c6:47:b8:91:4f:f3:c3:ba:8f:16:17:88:90:05: 94:13:d5:8e:e1:f0:ef:ee:47:8c:2b:f4:89:62:bb:0f:67:c8: 37:19:2a:c0:ba:84:a7:ad:81:4f:6b:f7:0d:80:56:3d:13:61: ab:4e:c6:23:e6:58:68:e5:9d:b1:42:d0:c7:9b:45:d5:c5:b8: b2:b2:8f:34:46:3f:78:46:4b:a5:00:7b:d2:e8:55:66:7f:9f: 95:08:b6:47:57:0c:13:6f:3b:6c:dd:67:73:c8:51:43:8f:30: d3:85:13:bb:1c:16:a8:23:e9:c7:c1:87:87:99:bc:df:1f:fb: 18:39:50:67:ad:5e:57:b1:9b:f8:1f:f5:c3:56:2a:ef:f8:ef: 29:5d:e2:48:2d:17:2f:29:ea:b0:29:cb:47:64:c2:8c:45:44: 60:ae:30:04:1b:dd:74:10:d3:bb:fa:61:72:f5:6a:f8:96:cf: ac:7d:e3:20:19:68:21:36:60:b3:c0:60:61:f5:5f:22:d0:39: f9:18:1d:b0:77:e7:17:4a:8f:d6:1c:e5:5b:7c:a5:17:78:b0: 05:19:3d:b5:d8:eb:4a:ad:95:1f:86:bd:3d:de:35:2b:8f:9c: c5:1a:76:79 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUajWIPLWZRKq5tA9zliH84K5ek38wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTQ5Njg0NEI1QjQzQkQzOEUyRjRGRDZFQkQyNTJEMjgz MkU5QUU4MTAeFw0yNjAxMjQwNTU2MDhaFw0yNjAxMjcxMDUzMDhaMDMxMTAvBgNV BAMTKEI1RjhEQUZBOEU5M0FBRkY5QjE1MEY4QjhCQjUzMzUzQ0FBNDc2MEYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCg+lxIVKxwh4AKmGL4/w+9EmhD xJqIN7JdCuhT8chHXjJ+6KlMBeI1fQqMPm6w5Dywmk1Z7V+IRa6jdJCVlpCcxPY2 yFNObWmdeRV077yMQE/R+LHOo3NjEWKC5mT1M7ZpgNd9Uv1lukQ+C2bMy5IIPzq0 Hlr9sMU2sOsRRyVdQ0W7RwERRxSb5HvHQCY+2/13gnSVuzkzpsd0bpbiVMxSGvcn GJk5/d6Y4tQLJd6ThV0h5Spx6yHUKic8C/meFNEBwFTSsaIo7IV02RUETcvhtz1B pn3nJEZCZmtjeh93bDSFMS4ov1a8AodVzRjc9yEMIJPauE5GHtRxJ1ZKGhbBAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUtfja+o6Tqv+bFQ+Li7UzU8qkdg8wHwYDVR0j BBgwFoAUpJaES1tDvTji9P1uvSUtKDLproEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 MDY0OWM0Ny1kZmMzLTRhMjAtYjViNC04Nzk2NzVlNWRiOTIvMC9BNDk2ODQ0QjVC NDNCRDM4RTJGNEZENkVCRDI1MkQyODMyRTlBRTgxLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQTQ5Njg0NEI1QjQzQkQzOEUyRjRGRDZFQkQyNTJEMjgzMkU5 QUU4MS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNjA2NDljNDctZGZjMy00YTIwLWI1 YjQtODc5Njc1ZTVkYjkyLzAvQTQ5Njg0NEI1QjQzQkQzOEUyRjRGRDZFQkQyNTJE MjgzMkU5QUU4MS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAUdwQduPkLwwlp5+poO6eqmLg0gsjjGR7iR T/PDuo8WF4iQBZQT1Y7h8O/uR4wr9Iliuw9nyDcZKsC6hKetgU9r9w2AVj0TYatO xiPmWGjlnbFC0MebRdXFuLKyjzRGP3hGS6UAe9LoVWZ/n5UItkdXDBNvO2zdZ3PI UUOPMNOFE7scFqgj6cfBh4eZvN8f+xg5UGetXlexm/gf9cNWKu/47yld4kgtFy8p 6rApy0dkwoxFRGCuMAQb3XQQ07v6YXL1aviWz6x94yAZaCE2YLPAYGH1XyLQOfkY HbB35xdKj9Yc5Vt8pRd4sAUZPbXY60qtlR+GvT3eNSuPnMUadnk= -----END CERTIFICATE-----Generated at Sun Jan 25 20:38:57 2026 by rpki-client