This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/65c400d1-9bbd-4e2b-8d58-6f749dbc392d/0/C380A411E3CE15C60336341BB4B0994B307B920D.mft File: C380A411E3CE15C60336341BB4B0994B307B920D.mft (raw, json) Hash identifier: Mk8ENsTn/zPNPzG11FNW+inOKte6neR1TU3AioD5t7I= Subject key identifier: EA:62:BC:E0:A7:F2:70:D2:38:F5:14:51:6D:7D:6A:E3:EB:A4:4C:4E Authority key identifier: C3:80:A4:11:E3:CE:15:C6:03:36:34:1B:B4:B0:99:4B:30:7B:92:0D Certificate issuer: /CN=C380A411E3CE15C60336341BB4B0994B307B920D Certificate serial: 29E5ACB4A313AFB0C35A19A5C8AC901153CEEAB0 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C380A411E3CE15C60336341BB4B0994B307B920D.cer Subject info access: rsync://repo-rpki.idnic.net/repo/65c400d1-9bbd-4e2b-8d58-6f749dbc392d/0/C380A411E3CE15C60336341BB4B0994B307B920D.mft Manifest number: 0432 Signing time: Sat 24 Jan 2026 22:32:05 +0000 Manifest this update: Sat 24 Jan 2026 22:27:05 +0000 Manifest next update: Wed 28 Jan 2026 04:38:05 +0000 Files and hashes: 1: 3130332e3134332e32352e302f32342d3234203d3e203536323432.roa (hash: RAP4Y3UNMM22dRDZbSXvZfkAeFFl21PNSif0XVosalM=) 2: 3130332e3134332e32342e302f32332d3233203d3e203536323432.roa (hash: KoXVL6WzAZujvpo00umxzYa6CA8boG1qF0govC2qVVE=) 3: 3130332e3134332e32342e302f32342d3234203d3e203536323432.roa (hash: 2rrLsC09Wk5In+nn3fns2W2xhNn/o1UykNLInh2ZFNs=) 4: C380A411E3CE15C60336341BB4B0994B307B920D.crl (hash: aqSB5gsZbfXguG609YIas2Oe6lGkGMAJRFi+4fRjAAs=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/65c400d1-9bbd-4e2b-8d58-6f749dbc392d/0/C380A411E3CE15C60336341BB4B0994B307B920D.crl rsync://repo-rpki.idnic.net/repo/65c400d1-9bbd-4e2b-8d58-6f749dbc392d/0/C380A411E3CE15C60336341BB4B0994B307B920D.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C380A411E3CE15C60336341BB4B0994B307B920D.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 28 Jan 2026 04:38:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 29:e5:ac:b4:a3:13:af:b0:c3:5a:19:a5:c8:ac:90:11:53:ce:ea:b0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C380A411E3CE15C60336341BB4B0994B307B920D Validity Not Before: Jan 24 22:27:05 2026 GMT Not After : Jan 28 04:38:05 2026 GMT Subject: CN=EA62BCE0A7F270D238F514516D7D6AE3EBA44C4E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:80:a7:aa:79:f5:39:50:bc:96:23:ce:84:68: 42:f9:58:94:ee:0c:63:9a:8f:db:32:fc:8c:ed:30: 2f:fd:83:9e:9a:ac:ff:b7:ac:93:38:3f:dc:a8:9d: c6:2b:02:db:8d:75:86:6a:7b:22:e7:e2:05:85:89: 44:b7:aa:d8:c9:9b:95:ad:c9:8c:19:53:74:09:57: 88:7c:35:a1:fd:ef:7c:6b:03:eb:55:3c:a8:8e:65: b5:64:ab:18:ab:d6:93:c4:c0:9b:41:97:59:4f:37: ca:01:7f:c4:5c:80:03:64:2d:af:23:fa:ed:02:71: 50:41:d2:27:0d:a2:dc:09:e9:cd:67:9f:b5:68:22: ee:99:2c:a3:8c:12:dc:df:a3:c4:17:04:b9:55:64: 25:ea:a6:b4:c5:31:dc:a6:6d:35:56:30:ce:9c:cd: 08:25:28:d7:39:6d:cc:27:ed:1c:7b:8d:27:4f:b7: 0b:36:14:ae:7d:70:77:73:60:52:37:1b:57:56:11: 36:c3:86:f6:a8:38:54:d6:7f:80:ac:b4:e6:5b:b3: 20:69:0c:70:5b:b9:7b:59:fb:62:c4:7c:b7:c3:59: 4e:d7:ba:d6:de:4e:7d:95:6d:33:2f:f7:b4:f5:91: cc:75:4a:42:f4:90:46:5a:8a:da:8b:0f:04:33:51: 68:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EA:62:BC:E0:A7:F2:70:D2:38:F5:14:51:6D:7D:6A:E3:EB:A4:4C:4E X509v3 Authority Key Identifier: keyid:C3:80:A4:11:E3:CE:15:C6:03:36:34:1B:B4:B0:99:4B:30:7B:92:0D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/65c400d1-9bbd-4e2b-8d58-6f749dbc392d/0/C380A411E3CE15C60336341BB4B0994B307B920D.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C380A411E3CE15C60336341BB4B0994B307B920D.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/65c400d1-9bbd-4e2b-8d58-6f749dbc392d/0/C380A411E3CE15C60336341BB4B0994B307B920D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 81:11:74:82:2f:19:70:da:b5:ec:57:fb:70:f8:0a:b5:9b:34: b6:e7:4a:5a:a1:3b:55:97:43:75:8d:c6:e6:e3:87:78:f4:c4: 03:c2:bb:37:69:1b:65:7f:d0:cf:72:22:ae:1b:c5:2a:03:23: 7a:69:5a:7f:f8:2d:ff:38:b9:74:d3:d9:3d:6a:d7:e0:d2:0a: 17:4c:8d:4c:da:36:f4:1a:26:89:cb:26:01:f6:8b:30:2e:c4: 54:d0:0a:29:33:f4:d6:8f:c1:aa:69:57:7f:c4:f6:d4:9b:71: 90:c8:c3:f0:68:4f:f6:61:61:84:f7:a4:a6:40:f7:57:27:65: ee:1f:4e:61:4a:70:33:fd:7b:a8:05:9e:67:59:e1:1e:90:ef: b8:35:4b:b1:c1:2b:b9:05:d7:6a:ae:60:6c:51:90:ef:e7:24: 14:c3:eb:28:ce:f1:13:c4:e1:d4:3b:79:c6:6b:74:2d:21:f8: 9e:17:9e:86:eb:46:ed:38:31:2a:75:e0:73:52:05:17:7f:f1: b0:b5:66:b9:bb:8f:ee:d2:5e:cf:65:cd:39:f2:ae:8e:db:84: 61:e2:f0:8f:6a:b1:57:a9:40:30:b5:24:85:ba:28:b4:dd:b8: ab:23:0f:95:c5:e2:20:69:2f:47:48:96:ad:fc:b9:23:46:7f: a6:59:7e:d3 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUKeWstKMTr7DDWhmlyKyQEVPO6rAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzM4MEE0MTFFM0NFMTVDNjAzMzYzNDFCQjRCMDk5NEIz MDdCOTIwRDAeFw0yNjAxMjQyMjI3MDVaFw0yNjAxMjgwNDM4MDVaMDMxMTAvBgNV BAMTKEVBNjJCQ0UwQTdGMjcwRDIzOEY1MTQ1MTZEN0Q2QUUzRUJBNDRDNEUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCUgKeqefU5ULyWI86EaEL5WJTu DGOaj9sy/IztMC/9g56arP+3rJM4P9yoncYrAtuNdYZqeyLn4gWFiUS3qtjJm5Wt yYwZU3QJV4h8NaH973xrA+tVPKiOZbVkqxir1pPEwJtBl1lPN8oBf8RcgANkLa8j +u0CcVBB0icNotwJ6c1nn7VoIu6ZLKOMEtzfo8QXBLlVZCXqprTFMdymbTVWMM6c zQglKNc5bcwn7Rx7jSdPtws2FK59cHdzYFI3G1dWETbDhvaoOFTWf4CstOZbsyBp DHBbuXtZ+2LEfLfDWU7XutbeTn2VbTMv97T1kcx1SkL0kEZaitqLDwQzUWhnAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU6mK84KfycNI49RRRbX1q4+ukTE4wHwYDVR0j BBgwFoAUw4CkEePOFcYDNjQbtLCZSzB7kg0wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 NWM0MDBkMS05YmJkLTRlMmItOGQ1OC02Zjc0OWRiYzM5MmQvMC9DMzgwQTQxMUUz Q0UxNUM2MDMzNjM0MUJCNEIwOTk0QjMwN0I5MjBELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQzM4MEE0MTFFM0NFMTVDNjAzMzYzNDFCQjRCMDk5NEIzMDdC OTIwRC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNjVjNDAwZDEtOWJiZC00ZTJiLThk NTgtNmY3NDlkYmMzOTJkLzAvQzM4MEE0MTFFM0NFMTVDNjAzMzYzNDFCQjRCMDk5 NEIzMDdCOTIwRC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIERdIIvGXDatexX+3D4CrWbNLbnSlqhO1WX Q3WNxubjh3j0xAPCuzdpG2V/0M9yIq4bxSoDI3ppWn/4Lf84uXTT2T1q1+DSChdM jUzaNvQaJonLJgH2izAuxFTQCikz9NaPwappV3/E9tSbcZDIw/BoT/ZhYYT3pKZA 91cnZe4fTmFKcDP9e6gFnmdZ4R6Q77g1S7HBK7kF12quYGxRkO/nJBTD6yjO8RPE 4dQ7ecZrdC0h+J4XnobrRu04MSp14HNSBRd/8bC1Zrm7j+7SXs9lzTnyro7bhGHi 8I9qsVepQDC1JIW6KLTduKsjD5XF4iBpL0dIlq38uSNGf6ZZftM= -----END CERTIFICATE-----Generated at Mon Jan 26 01:32:49 2026 by rpki-client