This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/63c197f8-4e2e-46d9-be2b-e348a133dc57/0/64285236074D6BC2BB384B2D544C7F545C16CF31.mft File: 64285236074D6BC2BB384B2D544C7F545C16CF31.mft (raw, json) Hash identifier: QNfChQqG649QUw2dORJznVq6XFXpo6/rOq1u2uFBVUk= Subject key identifier: EB:AA:BB:3E:ED:8D:3E:96:07:DE:E0:89:A9:E8:B1:CE:64:71:51:3E Authority key identifier: 64:28:52:36:07:4D:6B:C2:BB:38:4B:2D:54:4C:7F:54:5C:16:CF:31 Certificate issuer: /CN=64285236074D6BC2BB384B2D544C7F545C16CF31 Certificate serial: 22A5C6352FFBEF4C3E3B4E857E1A84BC69481964 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/64285236074D6BC2BB384B2D544C7F545C16CF31.cer Subject info access: rsync://repo-rpki.idnic.net/repo/63c197f8-4e2e-46d9-be2b-e348a133dc57/0/64285236074D6BC2BB384B2D544C7F545C16CF31.mft Manifest number: 026F Signing time: Fri 23 Jan 2026 21:41:37 +0000 Manifest this update: Fri 23 Jan 2026 21:36:37 +0000 Manifest next update: Tue 27 Jan 2026 04:05:37 +0000 Files and hashes: 1: 3130332e3138342e35302e302f32332d3234203d3e20313439363732.roa (hash: wmIuzk0Oh9311GQSErNLF7rj7zFPZyoKari4za10W8M=) 2: 64285236074D6BC2BB384B2D544C7F545C16CF31.crl (hash: 7KL8KGckRAJazgl+rWMgEtmVTutihuyMSVGHeUKOr34=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/63c197f8-4e2e-46d9-be2b-e348a133dc57/0/64285236074D6BC2BB384B2D544C7F545C16CF31.crl rsync://repo-rpki.idnic.net/repo/63c197f8-4e2e-46d9-be2b-e348a133dc57/0/64285236074D6BC2BB384B2D544C7F545C16CF31.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/64285236074D6BC2BB384B2D544C7F545C16CF31.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 27 Jan 2026 04:05:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 22:a5:c6:35:2f:fb:ef:4c:3e:3b:4e:85:7e:1a:84:bc:69:48:19:64 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=64285236074D6BC2BB384B2D544C7F545C16CF31 Validity Not Before: Jan 23 21:36:37 2026 GMT Not After : Jan 27 04:05:37 2026 GMT Subject: CN=EBAABB3EED8D3E9607DEE089A9E8B1CE6471513E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:2b:0a:3d:9d:ba:d4:c2:49:49:5b:d0:9d:07: f9:50:27:3e:5a:d3:fe:6e:11:a5:6e:87:40:a8:b9: d5:18:a1:c1:35:39:c6:e0:3c:67:d1:39:7e:6b:36: b0:75:cb:6f:bc:65:a8:b3:36:e2:ab:9e:11:e8:1f: 57:9a:ba:20:86:7b:4e:60:7e:49:c5:c0:89:a8:7f: c9:4d:e7:fc:35:3e:3f:12:88:78:40:48:95:a2:1d: 36:85:a0:4b:5f:9e:99:f6:d4:ac:88:95:38:66:8d: 54:b9:eb:09:b3:9c:1f:80:60:ed:b8:9d:74:d1:32: ef:b7:62:2e:83:7f:fb:07:64:4c:af:e6:58:b6:25: 5a:1f:2a:32:54:0e:91:60:7e:10:83:a0:c8:95:2b: ee:56:6f:ed:87:57:39:5a:af:90:81:88:2e:18:8b: 2d:f4:ad:2c:8e:0d:e2:d5:13:57:71:1e:72:e5:f2: d5:de:45:e6:fd:5f:42:34:6f:98:0f:bd:c6:f8:9a: 2a:33:68:4d:7a:52:66:ff:5a:08:30:db:fa:8e:a8: cb:58:f7:7e:69:96:31:6f:fb:ba:0d:10:0a:f9:ea: be:6f:b3:98:cd:a6:c5:86:7a:1a:f1:e1:68:3e:aa: 4d:23:8c:f1:27:2c:bc:fc:f7:48:fc:d5:da:0c:b3: a3:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EB:AA:BB:3E:ED:8D:3E:96:07:DE:E0:89:A9:E8:B1:CE:64:71:51:3E X509v3 Authority Key Identifier: keyid:64:28:52:36:07:4D:6B:C2:BB:38:4B:2D:54:4C:7F:54:5C:16:CF:31 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/63c197f8-4e2e-46d9-be2b-e348a133dc57/0/64285236074D6BC2BB384B2D544C7F545C16CF31.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/64285236074D6BC2BB384B2D544C7F545C16CF31.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/63c197f8-4e2e-46d9-be2b-e348a133dc57/0/64285236074D6BC2BB384B2D544C7F545C16CF31.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 39:89:91:bf:ae:98:29:6d:3e:2a:e0:08:d8:54:15:27:a8:2a: 2f:c3:d7:9e:1f:1d:ca:a7:ca:e6:8e:40:66:d7:ad:72:e6:9c: 8c:43:a1:9d:0f:60:15:1a:5d:2c:e4:d4:52:c9:bd:09:5e:1f: 13:45:5d:46:75:22:c8:9c:9e:78:2d:4d:71:c5:53:75:b9:ea: 64:d6:dc:9d:45:93:1a:61:67:33:dc:40:b1:03:cb:a5:ce:ff: 9f:2f:a9:83:50:8d:b7:e8:0e:31:4c:0e:aa:a1:f3:53:5f:2e: 93:fa:08:a0:f2:83:98:c4:df:0a:63:ac:da:9b:42:51:ff:af: 8d:d4:d8:57:22:11:d3:2d:73:93:32:25:39:db:07:1c:77:ca: b2:73:05:f7:76:5b:f2:45:fe:84:cb:67:2f:ff:f0:8d:9b:03: 23:2c:89:ce:07:01:e7:b1:3f:98:3e:4b:93:fa:5c:0c:15:b6: 5c:30:49:ce:5f:47:ed:d1:55:cb:39:92:77:0d:e9:4e:12:c8: 54:dc:2a:d1:6f:73:88:81:ce:9a:a0:2f:ea:e6:78:6a:86:6c: ce:d3:73:d2:ab:57:48:55:c6:5d:62:5b:f2:e2:be:03:a6:83: 7d:3d:99:2c:3c:bf:d4:cb:9c:bb:dd:50:10:b0:77:71:eb:d8: 6f:c6:6e:0f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUIqXGNS/770w+O06FfhqEvGlIGWQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjQyODUyMzYwNzRENkJDMkJCMzg0QjJENTQ0QzdGNTQ1 QzE2Q0YzMTAeFw0yNjAxMjMyMTM2MzdaFw0yNjAxMjcwNDA1MzdaMDMxMTAvBgNV BAMTKEVCQUFCQjNFRUQ4RDNFOTYwN0RFRTA4OUE5RThCMUNFNjQ3MTUxM0UwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDFKwo9nbrUwklJW9CdB/lQJz5a 0/5uEaVuh0CoudUYocE1OcbgPGfROX5rNrB1y2+8ZaizNuKrnhHoH1eauiCGe05g fknFwImof8lN5/w1Pj8SiHhASJWiHTaFoEtfnpn21KyIlThmjVS56wmznB+AYO24 nXTRMu+3Yi6Df/sHZEyv5li2JVofKjJUDpFgfhCDoMiVK+5Wb+2HVzlar5CBiC4Y iy30rSyODeLVE1dxHnLl8tXeReb9X0I0b5gPvcb4miozaE16Umb/Wggw2/qOqMtY 935pljFv+7oNEAr56r5vs5jNpsWGehrx4Wg+qk0jjPEnLLz890j81doMs6NpAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU66q7Pu2NPpYH3uCJqeixzmRxUT4wHwYDVR0j BBgwFoAUZChSNgdNa8K7OEstVEx/VFwWzzEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 M2MxOTdmOC00ZTJlLTQ2ZDktYmUyYi1lMzQ4YTEzM2RjNTcvMC82NDI4NTIzNjA3 NEQ2QkMyQkIzODRCMkQ1NDRDN0Y1NDVDMTZDRjMxLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNjQyODUyMzYwNzRENkJDMkJCMzg0QjJENTQ0QzdGNTQ1QzE2 Q0YzMS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNjNjMTk3ZjgtNGUyZS00NmQ5LWJl MmItZTM0OGExMzNkYzU3LzAvNjQyODUyMzYwNzRENkJDMkJCMzg0QjJENTQ0QzdG NTQ1QzE2Q0YzMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADmJkb+umCltPirgCNhUFSeoKi/D154fHcqn yuaOQGbXrXLmnIxDoZ0PYBUaXSzk1FLJvQleHxNFXUZ1IsicnngtTXHFU3W56mTW 3J1FkxphZzPcQLEDy6XO/58vqYNQjbfoDjFMDqqh81NfLpP6CKDyg5jE3wpjrNqb QlH/r43U2FciEdMtc5MyJTnbBxx3yrJzBfd2W/JF/oTLZy//8I2bAyMsic4HAeex P5g+S5P6XAwVtlwwSc5fR+3RVcs5kncN6U4SyFTcKtFvc4iBzpqgL+rmeGqGbM7T c9KrV0hVxl1iW/LivgOmg309mSw8v9TLnLvdUBCwd3Hr2G/Gbg8= -----END CERTIFICATE-----Generated at Sun Jan 25 23:09:20 2026 by rpki-client