This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/6939dbf1-3075-4519-ba90-cee8d3979fcd/0/2146CDCD7A3C7A1915B78C5B2C9FCFBA8A3B6E79.mft File: 2146CDCD7A3C7A1915B78C5B2C9FCFBA8A3B6E79.mft (raw, json) Hash identifier: es9H+9vHFEj8KiYg6i4OTdSqB1XyvFa8k/uAXosd2gA= Subject key identifier: 1D:8E:EA:5A:44:05:EE:E6:32:31:C0:00:D6:A1:96:5E:AE:71:C4:14 Authority key identifier: 21:46:CD:CD:7A:3C:7A:19:15:B7:8C:5B:2C:9F:CF:BA:8A:3B:6E:79 Certificate issuer: /CN=2146CDCD7A3C7A1915B78C5B2C9FCFBA8A3B6E79 Certificate serial: 36091DC50B413F04ECF4A1A9583C3795BCDA4EB5 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2146CDCD7A3C7A1915B78C5B2C9FCFBA8A3B6E79.cer Subject info access: rsync://repo-rpki.idnic.net/repo/6939dbf1-3075-4519-ba90-cee8d3979fcd/0/2146CDCD7A3C7A1915B78C5B2C9FCFBA8A3B6E79.mft Manifest number: 0398 Signing time: Sun 25 Jan 2026 09:01:06 +0000 Manifest this update: Sun 25 Jan 2026 08:56:06 +0000 Manifest next update: Wed 28 Jan 2026 13:45:06 +0000 Files and hashes: 1: 3230332e39362e3232382e302f32332d3234203d3e20313334363535.roa (hash: WnEoSKGZIFsfEoy7vBg6GUxPJ2sdlBMhPa8SmUKwOwQ=) 2: 2146CDCD7A3C7A1915B78C5B2C9FCFBA8A3B6E79.crl (hash: bw5Pn8BHRmQJHyJop8p9pv5DWOKG3vetO43Bv6Qey8k=) 3: 323430343a353938303a3a2f33322d3332203d3e20313334363535.roa (hash: QZavpRmJwgWpUP/+i0D2076ri9bNfiH2V5J64XJ0fT4=) 4: 3130332e3230392e3138342e302f32322d3234203d3e20313334363535.roa (hash: AOicjomaXVowUxKVLUAzngaobesRemFsc6Mjiuwj2Bg=) 5: 3130332e3234372e3231312e302f32342d3234203d3e20313334363535.roa (hash: +RIUAVxGB33d0KDSRHLJ9X8+j7gj5NlzbX8RpGUfLIQ=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/6939dbf1-3075-4519-ba90-cee8d3979fcd/0/2146CDCD7A3C7A1915B78C5B2C9FCFBA8A3B6E79.crl rsync://repo-rpki.idnic.net/repo/6939dbf1-3075-4519-ba90-cee8d3979fcd/0/2146CDCD7A3C7A1915B78C5B2C9FCFBA8A3B6E79.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2146CDCD7A3C7A1915B78C5B2C9FCFBA8A3B6E79.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 28 Jan 2026 13:45:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 36:09:1d:c5:0b:41:3f:04:ec:f4:a1:a9:58:3c:37:95:bc:da:4e:b5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2146CDCD7A3C7A1915B78C5B2C9FCFBA8A3B6E79 Validity Not Before: Jan 25 08:56:06 2026 GMT Not After : Jan 28 13:45:06 2026 GMT Subject: CN=1D8EEA5A4405EEE63231C000D6A1965EAE71C414 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:63:73:59:cf:e7:d0:89:1a:26:0c:60:a4:6d: 0d:f8:7c:0e:56:54:bb:a9:91:ff:72:53:c6:ea:dc: b9:17:c0:e2:5b:d2:13:72:e2:f8:9d:2f:79:f5:9a: 4f:bc:c0:97:0a:39:55:c7:29:8e:a8:d3:cc:d3:8c: 06:46:d9:c0:21:2a:a1:6c:e9:93:3b:5d:75:b8:79: 9c:3a:93:80:1e:ff:3f:e3:45:14:55:6c:76:78:e3: 57:e5:34:1c:b5:67:39:6c:d3:06:70:ea:64:73:50: dd:ee:35:41:2b:d6:66:4e:57:4f:69:89:57:78:33: 24:1e:8c:55:64:23:bd:ee:a8:61:88:5c:80:5e:31: b4:b5:34:95:e8:1c:94:e4:b3:47:36:09:5c:62:10: 6b:78:35:20:7d:3d:6f:13:c3:3a:f0:dc:3a:53:82: 79:0b:2d:b4:d5:37:f1:0d:a2:b0:f3:b6:ec:b0:bb: 99:bd:d2:60:23:bb:68:1a:a0:dd:8a:6d:2d:3c:c8: da:0f:6f:f5:eb:f7:83:ec:f8:67:54:45:46:b5:7d: e9:0f:e5:96:a7:c9:89:ef:94:3b:a1:0d:0c:d6:54: e5:5b:d4:1f:06:8d:56:e3:6e:4e:04:4a:f7:5b:ec: 8e:7a:0e:1c:53:4a:14:3e:76:b9:9a:6f:33:fd:a7: 7a:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:8E:EA:5A:44:05:EE:E6:32:31:C0:00:D6:A1:96:5E:AE:71:C4:14 X509v3 Authority Key Identifier: keyid:21:46:CD:CD:7A:3C:7A:19:15:B7:8C:5B:2C:9F:CF:BA:8A:3B:6E:79 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/6939dbf1-3075-4519-ba90-cee8d3979fcd/0/2146CDCD7A3C7A1915B78C5B2C9FCFBA8A3B6E79.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2146CDCD7A3C7A1915B78C5B2C9FCFBA8A3B6E79.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/6939dbf1-3075-4519-ba90-cee8d3979fcd/0/2146CDCD7A3C7A1915B78C5B2C9FCFBA8A3B6E79.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ba:df:e4:ab:a0:bb:62:44:14:b9:d0:4c:00:f1:6d:9c:12:6e: 45:d7:07:f2:0d:68:f2:2a:7c:07:7c:ec:ab:9b:30:7a:86:76: 14:0e:55:58:e0:fc:21:da:8a:9b:bb:04:71:d9:6f:78:b4:20: 84:7b:02:20:64:3f:87:0a:8e:ff:d6:65:75:13:84:1a:13:3b: 07:a3:6f:73:38:bd:d0:61:6f:9c:9d:c1:d5:7d:8b:19:fb:52: 0c:33:b4:59:39:89:0b:0c:0b:c5:87:cd:ca:ba:17:0d:9d:c7: e4:fd:71:0f:26:b5:4e:17:ac:0b:e1:1d:2d:d2:34:07:fc:13: 6e:87:73:b7:a1:68:93:64:de:21:b0:21:5c:7f:b8:f1:d0:68: e6:eb:ba:bc:d0:f8:41:9c:d0:ed:e5:93:5d:cc:32:33:2a:c1: ec:6e:cd:23:cd:c8:14:30:7b:f1:0c:01:98:6b:45:c4:4c:7e: 1b:69:c7:4c:e4:2c:ea:2b:33:07:3f:33:ca:13:54:73:07:1c: f5:5c:d9:fb:c7:b7:fa:44:16:0d:ce:6c:06:c6:f0:ee:0c:7c: bc:e1:99:7c:bd:e9:20:27:60:eb:8a:29:b7:be:e1:1a:73:63: 33:bc:31:88:4f:db:c7:6d:61:30:fc:34:6c:b4:d6:fb:22:24: b4:5f:35:90 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUNgkdxQtBPwTs9KGpWDw3lbzaTrUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjE0NkNEQ0Q3QTNDN0ExOTE1Qjc4QzVCMkM5RkNGQkE4 QTNCNkU3OTAeFw0yNjAxMjUwODU2MDZaFw0yNjAxMjgxMzQ1MDZaMDMxMTAvBgNV BAMTKDFEOEVFQTVBNDQwNUVFRTYzMjMxQzAwMEQ2QTE5NjVFQUU3MUM0MTQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDfY3NZz+fQiRomDGCkbQ34fA5W VLupkf9yU8bq3LkXwOJb0hNy4vidL3n1mk+8wJcKOVXHKY6o08zTjAZG2cAhKqFs 6ZM7XXW4eZw6k4Ae/z/jRRRVbHZ441flNBy1Zzls0wZw6mRzUN3uNUEr1mZOV09p iVd4MyQejFVkI73uqGGIXIBeMbS1NJXoHJTks0c2CVxiEGt4NSB9PW8Twzrw3DpT gnkLLbTVN/ENorDztuywu5m90mAju2gaoN2KbS08yNoPb/Xr94Ps+GdURUa1fekP 5ZanyYnvlDuhDQzWVOVb1B8GjVbjbk4ESvdb7I56DhxTShQ+drmabzP9p3o9AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUHY7qWkQF7uYyMcAA1qGWXq5xxBQwHwYDVR0j BBgwFoAUIUbNzXo8ehkVt4xbLJ/Puoo7bnkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 OTM5ZGJmMS0zMDc1LTQ1MTktYmE5MC1jZWU4ZDM5NzlmY2QvMC8yMTQ2Q0RDRDdB M0M3QTE5MTVCNzhDNUIyQzlGQ0ZCQThBM0I2RTc5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMjE0NkNEQ0Q3QTNDN0ExOTE1Qjc4QzVCMkM5RkNGQkE4QTNC NkU3OS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNjkzOWRiZjEtMzA3NS00NTE5LWJh OTAtY2VlOGQzOTc5ZmNkLzAvMjE0NkNEQ0Q3QTNDN0ExOTE1Qjc4QzVCMkM5RkNG QkE4QTNCNkU3OS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALrf5Kugu2JEFLnQTADxbZwSbkXXB/INaPIq fAd87KubMHqGdhQOVVjg/CHaipu7BHHZb3i0IIR7AiBkP4cKjv/WZXUThBoTOwej b3M4vdBhb5ydwdV9ixn7UgwztFk5iQsMC8WHzcq6Fw2dx+T9cQ8mtU4XrAvhHS3S NAf8E26Hc7ehaJNk3iGwIVx/uPHQaObrurzQ+EGc0O3lk13MMjMqwexuzSPNyBQw e/EMAZhrRcRMfhtpx0zkLOorMwc/M8oTVHMHHPVc2fvHt/pEFg3ObAbG8O4MfLzh mXy96SAnYOuKKbe+4RpzYzO8MYhP28dtYTD8NGy01vsiJLRfNZA= -----END CERTIFICATE-----Generated at Sun Jan 25 22:00:43 2026 by rpki-client