This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/67db23b7-9159-46c7-8853-06654ae47aed/0/20ABF702057AD5F01207F6C578160654EB44C914.mft File: 20ABF702057AD5F01207F6C578160654EB44C914.mft (raw, json) Hash identifier: BTvf0CGLH0xfWVPPGCq7AZenqFeuJzZw5cROoSgAaQQ= Subject key identifier: 55:A9:77:A9:6D:48:5E:93:D9:9F:52:A5:E0:AE:4C:23:CC:00:D3:4B Authority key identifier: 20:AB:F7:02:05:7A:D5:F0:12:07:F6:C5:78:16:06:54:EB:44:C9:14 Certificate issuer: /CN=20ABF702057AD5F01207F6C578160654EB44C914 Certificate serial: 2AC3D4EF415CA03F77489D44A4122E00B4DDF1AB Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/20ABF702057AD5F01207F6C578160654EB44C914.cer Subject info access: rsync://repo-rpki.idnic.net/repo/67db23b7-9159-46c7-8853-06654ae47aed/0/20ABF702057AD5F01207F6C578160654EB44C914.mft Manifest number: 020A Signing time: Fri 23 Jan 2026 12:30:41 +0000 Manifest this update: Fri 23 Jan 2026 12:25:41 +0000 Manifest next update: Mon 26 Jan 2026 22:44:41 +0000 Files and hashes: 1: 3130332e3136342e38302e302f32342d3234203d3e20313334363530.roa (hash: OD/D5T7a6GncQciIiADZaQN4vuFZ+yDbdXQnN4HIA9Q=) 2: 20ABF702057AD5F01207F6C578160654EB44C914.crl (hash: GrAfrCjrIXjmEO+YgNxEcKUOPZiuHsZ8xCh4chTTmFU=) 3: 3130332e3230392e312e302f32342d3234203d3e20313334363530.roa (hash: giWrIN8j+wY4pRI/HaMvfZbbTtdidSjlnNRfZ7I7NOU=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/67db23b7-9159-46c7-8853-06654ae47aed/0/20ABF702057AD5F01207F6C578160654EB44C914.crl rsync://repo-rpki.idnic.net/repo/67db23b7-9159-46c7-8853-06654ae47aed/0/20ABF702057AD5F01207F6C578160654EB44C914.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/20ABF702057AD5F01207F6C578160654EB44C914.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 26 Jan 2026 22:44:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2a:c3:d4:ef:41:5c:a0:3f:77:48:9d:44:a4:12:2e:00:b4:dd:f1:ab Signature Algorithm: sha256WithRSAEncryption Issuer: CN=20ABF702057AD5F01207F6C578160654EB44C914 Validity Not Before: Jan 23 12:25:41 2026 GMT Not After : Jan 26 22:44:41 2026 GMT Subject: CN=55A977A96D485E93D99F52A5E0AE4C23CC00D34B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:a3:ca:c6:a0:49:56:4f:46:b7:11:c9:6d:ee: 6f:19:75:56:9e:6f:42:f9:d4:5e:0c:3c:3f:ff:98: a8:c1:20:38:04:f8:22:e8:19:ad:06:eb:0f:9d:99: b5:95:76:0b:9a:b9:05:7b:43:39:fc:f1:21:37:2c: ee:56:61:d6:34:47:46:7d:fd:c1:96:54:cb:df:92: 76:66:e4:82:c7:d7:ac:3a:be:9f:da:cc:74:2a:e3: ee:0f:0b:87:d0:9d:8e:1f:6d:b0:04:90:97:93:6e: 9e:80:92:f1:a9:92:f2:4f:88:1a:3f:8c:ed:d9:c1: 56:3c:a2:0c:41:96:e4:ad:f7:87:6b:41:f5:29:7b: 17:48:38:0f:48:89:aa:48:de:d8:d6:82:bd:a4:b0: 00:8b:04:55:2d:8c:fe:a6:ab:5f:0b:93:67:24:f6: 06:05:00:5b:61:56:ef:ce:92:a3:2a:96:b0:04:33: 57:98:b3:12:b7:e1:8a:94:95:90:dd:fc:ce:cb:80: ec:78:24:93:d1:12:34:b1:47:b8:e9:be:10:6f:5c: 04:7e:75:2d:f4:3b:7b:9f:3c:d1:77:a6:c0:a7:cf: 15:81:69:67:d6:5f:ad:22:26:d1:4b:58:67:7a:7e: b3:b5:59:3b:29:1c:6d:fd:04:c9:de:0f:23:53:01: 93:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 55:A9:77:A9:6D:48:5E:93:D9:9F:52:A5:E0:AE:4C:23:CC:00:D3:4B X509v3 Authority Key Identifier: keyid:20:AB:F7:02:05:7A:D5:F0:12:07:F6:C5:78:16:06:54:EB:44:C9:14 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/67db23b7-9159-46c7-8853-06654ae47aed/0/20ABF702057AD5F01207F6C578160654EB44C914.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/20ABF702057AD5F01207F6C578160654EB44C914.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/67db23b7-9159-46c7-8853-06654ae47aed/0/20ABF702057AD5F01207F6C578160654EB44C914.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 52:dd:43:7d:37:7c:44:97:47:b2:18:c5:fc:93:f4:a2:79:77: 26:38:72:6f:1b:e3:48:7d:aa:f1:e1:ea:ef:57:ca:3b:7b:3c: 3f:5d:45:10:3e:10:14:24:32:1d:91:5e:e1:31:8d:32:8d:7d: 86:26:e9:43:47:b7:b1:3f:d3:80:8f:60:45:62:22:40:a8:03: 26:80:28:17:de:5b:2b:cb:fb:4b:73:31:5e:bb:0e:a5:2b:73: 12:26:ca:53:b3:bf:31:ef:d2:1c:10:54:af:f4:65:2c:23:6c: 72:88:14:6f:04:8c:2d:a9:68:b1:02:22:90:4a:30:d3:34:1e: e1:71:2b:42:30:33:5d:75:28:08:9f:52:2a:3d:c5:da:30:24: 0f:e3:5d:e6:d0:e3:c4:3a:75:ea:8d:70:69:b8:2e:3b:42:b7: d0:2b:6c:94:84:ba:19:13:7b:c4:5b:6d:03:0f:b4:d5:c9:d4: 81:c8:b5:2f:02:72:83:cc:1e:2e:8d:09:25:27:7b:59:f6:e3: c2:32:2c:97:11:c4:79:b5:b9:a1:5d:3e:c3:96:4b:af:6a:a0: 72:b6:00:18:82:d9:ff:d6:42:60:d7:a7:e6:ef:c7:57:5a:e2: d9:5d:8c:9f:9f:7f:e6:9b:8f:92:7e:27:10:0b:48:b2:b6:6a: 36:15:cd:d3 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUKsPU70FcoD93SJ1EpBIuALTd8aswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjBBQkY3MDIwNTdBRDVGMDEyMDdGNkM1NzgxNjA2NTRF QjQ0QzkxNDAeFw0yNjAxMjMxMjI1NDFaFw0yNjAxMjYyMjQ0NDFaMDMxMTAvBgNV BAMTKDU1QTk3N0E5NkQ0ODVFOTNEOTlGNTJBNUUwQUU0QzIzQ0MwMEQzNEIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC7o8rGoElWT0a3Eclt7m8ZdVae b0L51F4MPD//mKjBIDgE+CLoGa0G6w+dmbWVdguauQV7Qzn88SE3LO5WYdY0R0Z9 /cGWVMvfknZm5ILH16w6vp/azHQq4+4PC4fQnY4fbbAEkJeTbp6AkvGpkvJPiBo/ jO3ZwVY8ogxBluSt94drQfUpexdIOA9IiapI3tjWgr2ksACLBFUtjP6mq18Lk2ck 9gYFAFthVu/OkqMqlrAEM1eYsxK34YqUlZDd/M7LgOx4JJPREjSxR7jpvhBvXAR+ dS30O3ufPNF3psCnzxWBaWfWX60iJtFLWGd6frO1WTspHG39BMneDyNTAZMpAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUVal3qW1IXpPZn1Kl4K5MI8wA00swHwYDVR0j BBgwFoAUIKv3AgV61fASB/bFeBYGVOtEyRQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 N2RiMjNiNy05MTU5LTQ2YzctODg1My0wNjY1NGFlNDdhZWQvMC8yMEFCRjcwMjA1 N0FENUYwMTIwN0Y2QzU3ODE2MDY1NEVCNDRDOTE0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMjBBQkY3MDIwNTdBRDVGMDEyMDdGNkM1NzgxNjA2NTRFQjQ0 QzkxNC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNjdkYjIzYjctOTE1OS00NmM3LTg4 NTMtMDY2NTRhZTQ3YWVkLzAvMjBBQkY3MDIwNTdBRDVGMDEyMDdGNkM1NzgxNjA2 NTRFQjQ0QzkxNC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFLdQ303fESXR7IYxfyT9KJ5dyY4cm8b40h9 qvHh6u9Xyjt7PD9dRRA+EBQkMh2RXuExjTKNfYYm6UNHt7E/04CPYEViIkCoAyaA KBfeWyvL+0tzMV67DqUrcxImylOzvzHv0hwQVK/0ZSwjbHKIFG8EjC2paLECIpBK MNM0HuFxK0IwM111KAifUio9xdowJA/jXebQ48Q6deqNcGm4LjtCt9ArbJSEuhkT e8RbbQMPtNXJ1IHItS8CcoPMHi6NCSUne1n248IyLJcRxHm1uaFdPsOWS69qoHK2 ABiC2f/WQmDXp+bvx1da4tldjJ+ff+abj5J+JxALSLK2ajYVzdM= -----END CERTIFICATE-----Generated at Sun Jan 25 18:59:31 2026 by rpki-client