This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/6deef218-0d9b-4d0d-a5c5-f832b8eb5aba/0/A35D0D096727FDBE2A4EED451994708ECB4A5F14.mft File: A35D0D096727FDBE2A4EED451994708ECB4A5F14.mft (raw, json) Hash identifier: P1QMv6uptZPg8lyNdnWnUf4uve+IeDYzz/qdP3pU99w= Subject key identifier: E8:D1:B9:A3:86:18:38:B2:A9:E0:70:34:A5:EB:08:02:BD:28:A8:BA Authority key identifier: A3:5D:0D:09:67:27:FD:BE:2A:4E:ED:45:19:94:70:8E:CB:4A:5F:14 Certificate issuer: /CN=A35D0D096727FDBE2A4EED451994708ECB4A5F14 Certificate serial: 2A07BA0A80E867371DDBE04C4ABC68F646BB2FD6 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A35D0D096727FDBE2A4EED451994708ECB4A5F14.cer Subject info access: rsync://repo-rpki.idnic.net/repo/6deef218-0d9b-4d0d-a5c5-f832b8eb5aba/0/A35D0D096727FDBE2A4EED451994708ECB4A5F14.mft Manifest number: 0164 Signing time: Fri 23 Jan 2026 10:52:17 +0000 Manifest this update: Fri 23 Jan 2026 10:47:17 +0000 Manifest next update: Mon 26 Jan 2026 18:18:17 +0000 Files and hashes: 1: 3130332e3134322e32302e302f32342d3234203d3e20313531353734.roa (hash: SrZZMNyD+weFJ6GOZ0htogUZ6HrLc/IW65Udx/Gnnmc=) 2: A35D0D096727FDBE2A4EED451994708ECB4A5F14.crl (hash: ly2O/9TPv9z9Guj6lHu/zSONoaEek8jRCNGnYEGD4tk=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/6deef218-0d9b-4d0d-a5c5-f832b8eb5aba/0/A35D0D096727FDBE2A4EED451994708ECB4A5F14.crl rsync://repo-rpki.idnic.net/repo/6deef218-0d9b-4d0d-a5c5-f832b8eb5aba/0/A35D0D096727FDBE2A4EED451994708ECB4A5F14.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A35D0D096727FDBE2A4EED451994708ECB4A5F14.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 26 Jan 2026 18:18:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2a:07:ba:0a:80:e8:67:37:1d:db:e0:4c:4a:bc:68:f6:46:bb:2f:d6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A35D0D096727FDBE2A4EED451994708ECB4A5F14 Validity Not Before: Jan 23 10:47:17 2026 GMT Not After : Jan 26 18:18:17 2026 GMT Subject: CN=E8D1B9A3861838B2A9E07034A5EB0802BD28A8BA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:d2:3b:a5:08:24:cd:ca:7f:f2:53:05:43:7f: 42:cc:af:4b:5f:b8:c6:93:34:98:e8:bb:89:2b:01: 7d:c3:01:1b:f7:91:41:2d:35:70:e4:60:e5:ae:4e: ce:3d:de:04:04:59:94:6c:09:01:17:c8:35:20:ae: 57:ec:62:b9:da:c7:fa:05:6c:c2:04:45:2e:66:c3: f6:4c:0b:e0:47:59:79:05:e5:b7:c0:ab:46:fb:84: 2a:1c:a8:d3:f4:c9:1a:67:82:a7:eb:e6:17:5b:f3: ff:1a:6f:8e:d7:78:45:8b:26:ec:4d:07:22:cb:b6: e7:25:04:55:8f:08:cd:9c:96:6f:69:c5:af:45:0e: 30:52:0a:d1:46:c8:ea:fb:00:43:77:dc:42:5b:5d: 93:6e:ce:64:ad:29:4c:d0:a5:63:f7:b8:ff:45:a3: 07:08:81:a0:5a:08:05:ac:a6:96:d0:e7:cc:de:0c: 0b:2b:71:23:15:05:f0:c8:8a:e2:ca:81:26:52:57: 12:22:5d:a3:96:12:b1:ec:34:67:a6:d0:63:7c:22: c3:03:7e:c2:77:f2:11:fa:57:e7:a7:85:3d:19:06: b9:28:7f:79:d6:61:e7:4a:2e:e4:11:e3:69:82:4b: 15:33:d5:32:80:9b:80:2e:21:9f:ee:2c:d2:2b:c5: ad:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E8:D1:B9:A3:86:18:38:B2:A9:E0:70:34:A5:EB:08:02:BD:28:A8:BA X509v3 Authority Key Identifier: keyid:A3:5D:0D:09:67:27:FD:BE:2A:4E:ED:45:19:94:70:8E:CB:4A:5F:14 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/6deef218-0d9b-4d0d-a5c5-f832b8eb5aba/0/A35D0D096727FDBE2A4EED451994708ECB4A5F14.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A35D0D096727FDBE2A4EED451994708ECB4A5F14.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/6deef218-0d9b-4d0d-a5c5-f832b8eb5aba/0/A35D0D096727FDBE2A4EED451994708ECB4A5F14.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 33:98:38:4d:8f:56:c2:49:3c:f4:3a:89:40:31:53:0e:b1:2b: 79:d3:dc:8f:5b:3e:78:9b:ea:f6:65:4e:37:26:70:ee:bf:9c: 20:63:c2:ad:d2:7f:09:75:87:40:da:31:9a:bf:6b:32:79:3d: 81:68:0e:fc:a0:20:d7:5b:97:6a:cc:3d:69:e8:07:c1:77:93: 40:1a:e2:80:50:5e:67:1b:75:6e:6f:6f:8b:65:64:36:c6:e7: 29:23:43:ea:31:46:af:c4:12:23:ee:d4:4b:44:b1:b5:61:54: ba:7b:f9:60:97:af:5b:bb:98:63:1b:14:d0:71:7d:06:36:e6: 29:30:31:5b:2c:95:56:f4:b9:1b:56:40:9c:10:e9:5d:f2:ac: 5c:60:a0:e0:26:e2:7a:68:ec:11:9f:30:78:b4:a9:48:d5:40: bd:cf:2c:af:06:40:27:55:56:73:6a:16:f5:26:7d:9d:2e:30: 22:5a:b5:4d:e6:90:1a:f6:6c:ee:10:a4:5b:26:58:cc:9d:16: 53:fb:e0:d2:ab:dc:16:50:30:b2:80:ad:1d:66:96:74:81:3e: 34:c1:d6:63:c8:e9:f5:6f:5b:4a:3e:bd:aa:c6:30:fe:d7:06: 8d:b2:74:67:19:48:92:43:e8:19:eb:0e:db:71:60:8e:e3:99: 80:ca:9b:bf -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUKge6CoDoZzcd2+BMSrxo9ka7L9YwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTM1RDBEMDk2NzI3RkRCRTJBNEVFRDQ1MTk5NDcwOEVD QjRBNUYxNDAeFw0yNjAxMjMxMDQ3MTdaFw0yNjAxMjYxODE4MTdaMDMxMTAvBgNV BAMTKEU4RDFCOUEzODYxODM4QjJBOUUwNzAzNEE1RUIwODAyQkQyOEE4QkEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC90julCCTNyn/yUwVDf0LMr0tf uMaTNJjou4krAX3DARv3kUEtNXDkYOWuTs493gQEWZRsCQEXyDUgrlfsYrnax/oF bMIERS5mw/ZMC+BHWXkF5bfAq0b7hCocqNP0yRpngqfr5hdb8/8ab47XeEWLJuxN ByLLtuclBFWPCM2clm9pxa9FDjBSCtFGyOr7AEN33EJbXZNuzmStKUzQpWP3uP9F owcIgaBaCAWsppbQ58zeDAsrcSMVBfDIiuLKgSZSVxIiXaOWErHsNGem0GN8IsMD fsJ38hH6V+enhT0ZBrkof3nWYedKLuQR42mCSxUz1TKAm4AuIZ/uLNIrxa1HAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU6NG5o4YYOLKp4HA0pesIAr0oqLowHwYDVR0j BBgwFoAUo10NCWcn/b4qTu1FGZRwjstKXxQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 ZGVlZjIxOC0wZDliLTRkMGQtYTVjNS1mODMyYjhlYjVhYmEvMC9BMzVEMEQwOTY3 MjdGREJFMkE0RUVENDUxOTk0NzA4RUNCNEE1RjE0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQTM1RDBEMDk2NzI3RkRCRTJBNEVFRDQ1MTk5NDcwOEVDQjRB NUYxNC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNmRlZWYyMTgtMGQ5Yi00ZDBkLWE1 YzUtZjgzMmI4ZWI1YWJhLzAvQTM1RDBEMDk2NzI3RkRCRTJBNEVFRDQ1MTk5NDcw OEVDQjRBNUYxNC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADOYOE2PVsJJPPQ6iUAxUw6xK3nT3I9bPnib 6vZlTjcmcO6/nCBjwq3Sfwl1h0DaMZq/azJ5PYFoDvygINdbl2rMPWnoB8F3k0Aa 4oBQXmcbdW5vb4tlZDbG5ykjQ+oxRq/EEiPu1EtEsbVhVLp7+WCXr1u7mGMbFNBx fQY25ikwMVsslVb0uRtWQJwQ6V3yrFxgoOAm4npo7BGfMHi0qUjVQL3PLK8GQCdV VnNqFvUmfZ0uMCJatU3mkBr2bO4QpFsmWMydFlP74NKr3BZQMLKArR1mlnSBPjTB 1mPI6fVvW0o+varGMP7XBo2ydGcZSJJD6BnrDttxYI7jmYDKm78= -----END CERTIFICATE-----Generated at Sun Jan 25 18:52:44 2026 by rpki-client