This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/66f7ef34-4991-4bb1-96b4-be43f1ecabb4/0/651790FFFC1688AFA384D136FC4792AD18879019.mft File: 651790FFFC1688AFA384D136FC4792AD18879019.mft (raw, json) Hash identifier: 5oNKcqvU+9P0xC6P5yxmyfGS6gXtjakhdA22FD6nqRs= Subject key identifier: F0:73:D6:27:94:E0:88:CC:BD:C0:D0:4D:BC:6E:25:25:14:4E:0E:CE Authority key identifier: 65:17:90:FF:FC:16:88:AF:A3:84:D1:36:FC:47:92:AD:18:87:90:19 Certificate issuer: /CN=651790FFFC1688AFA384D136FC4792AD18879019 Certificate serial: 6D04E873DCAE18E765ED7E702BBF9618C1625B84 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/651790FFFC1688AFA384D136FC4792AD18879019.cer Subject info access: rsync://repo-rpki.idnic.net/repo/66f7ef34-4991-4bb1-96b4-be43f1ecabb4/0/651790FFFC1688AFA384D136FC4792AD18879019.mft Manifest number: 0542 Signing time: Sat 24 Jan 2026 09:22:20 +0000 Manifest this update: Sat 24 Jan 2026 09:17:20 +0000 Manifest next update: Tue 27 Jan 2026 15:13:20 +0000 Files and hashes: 1: 651790FFFC1688AFA384D136FC4792AD18879019.crl (hash: kZSOTBYnzfLmfHWTseWeKQSLHWWFjTnhEPgXrip4Eb4=) 2: 323430323a353538303a3a2f33322d3438203d3e20313333383137.roa (hash: dttoTx4BQRFnMAvnuJnvYcnCQ5YOgtytig0qE7CIy64=) 3: 3130332e35332e37362e302f32322d3234203d3e20313333383137.roa (hash: +2/fO8INW6MBjsIr2MpsMr5pDS/07SU3AZAKJ801ins=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/66f7ef34-4991-4bb1-96b4-be43f1ecabb4/0/651790FFFC1688AFA384D136FC4792AD18879019.crl rsync://repo-rpki.idnic.net/repo/66f7ef34-4991-4bb1-96b4-be43f1ecabb4/0/651790FFFC1688AFA384D136FC4792AD18879019.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/651790FFFC1688AFA384D136FC4792AD18879019.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 27 Jan 2026 15:13:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6d:04:e8:73:dc:ae:18:e7:65:ed:7e:70:2b:bf:96:18:c1:62:5b:84 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=651790FFFC1688AFA384D136FC4792AD18879019 Validity Not Before: Jan 24 09:17:20 2026 GMT Not After : Jan 27 15:13:20 2026 GMT Subject: CN=F073D62794E088CCBDC0D04DBC6E2525144E0ECE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:e8:e9:d8:e6:bc:f5:16:c0:e7:46:c0:ed:46: 7f:82:49:fe:45:d5:80:12:ca:41:59:8f:10:9d:7c: 52:41:7c:1a:d3:4f:53:c5:ff:5f:4d:a6:e5:08:70: a3:24:14:e9:db:ee:e9:61:af:5b:65:7f:a1:be:6d: c0:52:44:31:05:b8:b0:74:db:bd:30:07:8e:af:32: b2:ae:99:8f:b8:d0:fb:1d:b0:b4:14:ee:26:a4:a9: fe:a2:56:ee:ef:92:5a:10:83:e8:c7:13:28:b9:c3: ff:f8:f2:b4:63:5c:b8:78:f2:ee:8f:c1:ff:75:5f: ef:7e:d4:02:49:ec:d4:44:f5:ea:8b:db:9a:a6:d7: 2c:0a:36:70:ab:d1:5f:25:30:07:46:a0:e7:74:00: f6:15:6a:f0:59:c8:40:33:9f:5e:db:64:d8:45:1b: e2:dc:68:83:b9:32:ef:2f:39:f4:1e:af:0a:c4:81: 11:48:a1:cb:2a:d5:b6:a1:a6:db:4e:fb:7f:03:4a: 2c:7c:01:9e:cf:5d:16:3f:16:c3:04:8d:49:cb:7e: dc:fd:6f:7f:7d:ec:1e:7b:a9:ae:f7:2b:ea:35:f5: 02:74:fa:86:d8:c6:51:a2:d6:8a:e3:57:60:83:63: c3:81:2f:7e:f8:79:62:81:b0:eb:eb:d2:bc:30:77: 05:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F0:73:D6:27:94:E0:88:CC:BD:C0:D0:4D:BC:6E:25:25:14:4E:0E:CE X509v3 Authority Key Identifier: keyid:65:17:90:FF:FC:16:88:AF:A3:84:D1:36:FC:47:92:AD:18:87:90:19 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/66f7ef34-4991-4bb1-96b4-be43f1ecabb4/0/651790FFFC1688AFA384D136FC4792AD18879019.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/651790FFFC1688AFA384D136FC4792AD18879019.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/66f7ef34-4991-4bb1-96b4-be43f1ecabb4/0/651790FFFC1688AFA384D136FC4792AD18879019.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 31:33:06:ee:f7:98:61:27:90:84:a3:b1:72:c6:f8:36:55:04: ca:ff:36:4b:2c:e0:a4:b9:2a:37:21:e0:32:3d:4c:fd:b5:7c: af:d4:cd:61:76:66:e9:9e:d6:6b:d8:8e:b8:f6:82:fd:08:50: 52:fd:9f:d9:11:9e:57:99:10:99:3b:71:0a:c5:ac:95:bb:fd: 03:f8:8c:4e:0d:25:18:b7:a4:8c:46:3f:84:f2:8c:b4:38:3b: b3:87:96:66:c6:ba:72:5a:08:91:90:fd:11:d0:c6:93:9c:8e: ca:da:9b:3f:35:05:c2:2e:dd:72:cb:97:bb:71:8a:6d:ee:05: 56:e2:a5:85:6e:7a:86:8e:b0:c9:a9:6a:e1:0a:80:6f:be:a7: ed:28:03:b2:c4:61:83:f6:41:7e:ce:0f:6c:e5:58:a8:41:56: e1:82:a5:b3:c8:10:3b:ce:f7:25:b6:7e:88:5e:76:0b:5d:af: d3:e0:2c:3e:b1:e5:6a:14:59:d9:1a:c3:01:98:81:2e:15:34: 57:dd:2e:c3:76:6d:be:a6:19:6e:32:5c:9a:2a:03:11:92:a4: b7:df:29:b9:c4:aa:54:bd:c9:28:6f:2c:4a:12:5d:95:d4:22: 0b:45:7f:b4:3d:b7:d8:d5:bd:46:58:2c:79:cd:96:be:a0:b5: 65:b7:ac:52 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUbQToc9yuGOdl7X5wK7+WGMFiW4QwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjUxNzkwRkZGQzE2ODhBRkEzODREMTM2RkM0NzkyQUQx ODg3OTAxOTAeFw0yNjAxMjQwOTE3MjBaFw0yNjAxMjcxNTEzMjBaMDMxMTAvBgNV BAMTKEYwNzNENjI3OTRFMDg4Q0NCREMwRDA0REJDNkUyNTI1MTQ0RTBFQ0UwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDR6OnY5rz1FsDnRsDtRn+CSf5F 1YASykFZjxCdfFJBfBrTT1PF/19NpuUIcKMkFOnb7ulhr1tlf6G+bcBSRDEFuLB0 270wB46vMrKumY+40PsdsLQU7iakqf6iVu7vkloQg+jHEyi5w//48rRjXLh48u6P wf91X+9+1AJJ7NRE9eqL25qm1ywKNnCr0V8lMAdGoOd0APYVavBZyEAzn17bZNhF G+LcaIO5Mu8vOfQerwrEgRFIocsq1bahpttO+38DSix8AZ7PXRY/FsMEjUnLftz9 b3997B57qa73K+o19QJ0+obYxlGi1orjV2CDY8OBL374eWKBsOvr0rwwdwXRAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU8HPWJ5TgiMy9wNBNvG4lJRRODs4wHwYDVR0j BBgwFoAUZReQ//wWiK+jhNE2/EeSrRiHkBkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 NmY3ZWYzNC00OTkxLTRiYjEtOTZiNC1iZTQzZjFlY2FiYjQvMC82NTE3OTBGRkZD MTY4OEFGQTM4NEQxMzZGQzQ3OTJBRDE4ODc5MDE5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNjUxNzkwRkZGQzE2ODhBRkEzODREMTM2RkM0NzkyQUQxODg3 OTAxOS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNjZmN2VmMzQtNDk5MS00YmIxLTk2 YjQtYmU0M2YxZWNhYmI0LzAvNjUxNzkwRkZGQzE2ODhBRkEzODREMTM2RkM0Nzky QUQxODg3OTAxOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADEzBu73mGEnkISjsXLG+DZVBMr/Nkss4KS5 Kjch4DI9TP21fK/UzWF2Zume1mvYjrj2gv0IUFL9n9kRnleZEJk7cQrFrJW7/QP4 jE4NJRi3pIxGP4TyjLQ4O7OHlmbGunJaCJGQ/RHQxpOcjsramz81BcIu3XLLl7tx im3uBVbipYVueoaOsMmpauEKgG++p+0oA7LEYYP2QX7OD2zlWKhBVuGCpbPIEDvO 9yW2fohedgtdr9PgLD6x5WoUWdkawwGYgS4VNFfdLsN2bb6mGW4yXJoqAxGSpLff KbnEqlS9yShvLEoSXZXUIgtFf7Q9t9jVvUZYLHnNlr6gtWW3rFI= -----END CERTIFICATE-----Generated at Mon Jan 26 05:37:12 2026 by rpki-client