This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/70e6fd81-b877-4f7c-abc6-082fcbea189f/0/1BD753D8CEFFB0C4CBB19A2E15765EC32333A873.mft File: 1BD753D8CEFFB0C4CBB19A2E15765EC32333A873.mft (raw, json) Hash identifier: T3giEXPIihYDkofOkjKol/WHwnD58r2xomf5A8mm8Jk= Subject key identifier: 8E:C5:03:22:A5:3C:CB:1D:95:D8:E6:BB:FC:8D:5D:1A:10:8D:0C:D2 Authority key identifier: 1B:D7:53:D8:CE:FF:B0:C4:CB:B1:9A:2E:15:76:5E:C3:23:33:A8:73 Certificate issuer: /CN=1BD753D8CEFFB0C4CBB19A2E15765EC32333A873 Certificate serial: 156109CF24C1018B595C8CC5B013F35ED5E2E196 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1BD753D8CEFFB0C4CBB19A2E15765EC32333A873.cer Subject info access: rsync://repo-rpki.idnic.net/repo/70e6fd81-b877-4f7c-abc6-082fcbea189f/0/1BD753D8CEFFB0C4CBB19A2E15765EC32333A873.mft Manifest number: 02A2 Signing time: Sat 24 Jan 2026 00:32:09 +0000 Manifest this update: Sat 24 Jan 2026 00:27:09 +0000 Manifest next update: Tue 27 Jan 2026 07:14:09 +0000 Files and hashes: 1: 1BD753D8CEFFB0C4CBB19A2E15765EC32333A873.crl (hash: KVjsW7v97aXvHsFuh0q4ytbpCef7Mn4Pw5Frjlvg0jE=) 2: 3130332e3137362e3138322e302f32332d3234203d3e20313437313332.roa (hash: 3b02tyVyXZeMs6y0uPPq0P29J4NxhIV9FAqBTSQpOwg=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/70e6fd81-b877-4f7c-abc6-082fcbea189f/0/1BD753D8CEFFB0C4CBB19A2E15765EC32333A873.crl rsync://repo-rpki.idnic.net/repo/70e6fd81-b877-4f7c-abc6-082fcbea189f/0/1BD753D8CEFFB0C4CBB19A2E15765EC32333A873.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1BD753D8CEFFB0C4CBB19A2E15765EC32333A873.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 27 Jan 2026 07:14:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 15:61:09:cf:24:c1:01:8b:59:5c:8c:c5:b0:13:f3:5e:d5:e2:e1:96 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1BD753D8CEFFB0C4CBB19A2E15765EC32333A873 Validity Not Before: Jan 24 00:27:09 2026 GMT Not After : Jan 27 07:14:09 2026 GMT Subject: CN=8EC50322A53CCB1D95D8E6BBFC8D5D1A108D0CD2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:d4:04:ee:f3:10:32:b6:2c:39:ec:d8:08:c6: 6c:14:4f:09:d1:bb:56:fc:d2:53:f5:56:64:e9:45: 18:26:a2:86:3c:b9:58:ce:f1:78:f5:de:3c:19:b7: 7d:33:25:e5:1b:82:1e:91:df:89:3c:3c:b8:3c:9e: 8c:c1:ca:d1:d8:0b:0c:6a:12:7c:f8:bc:b9:cb:8b: 36:4a:b8:4c:05:da:d6:03:f5:8e:33:d3:3b:53:66: c3:23:e3:60:7b:d5:99:15:69:c3:51:ed:c4:90:2f: 11:f0:58:16:6f:e1:be:98:56:78:8a:e7:56:8b:f7: a4:05:1f:b5:e0:dc:98:2d:d9:11:df:7e:02:fc:7a: 4e:d6:62:06:3c:a9:b0:7a:1d:0d:cf:fa:98:aa:e8: e0:ad:e0:f6:9f:62:c0:c4:a3:5c:15:4b:9e:80:e6: 25:db:eb:a5:58:f6:76:72:6c:0b:f9:1b:1c:6e:ee: 8e:14:e2:1d:a5:6e:ce:dd:de:6f:aa:38:5e:cd:82: c0:2b:90:26:87:0e:b5:f4:c8:f6:74:16:af:bd:c4: 7a:9e:3a:58:49:9e:f3:fa:25:a4:b0:43:f5:01:67: 03:84:e2:08:82:fa:f3:ca:af:d3:25:75:dc:1d:66: 51:c8:0f:a2:f2:69:49:f6:e1:3e:8e:48:9f:7d:cc: 0d:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:C5:03:22:A5:3C:CB:1D:95:D8:E6:BB:FC:8D:5D:1A:10:8D:0C:D2 X509v3 Authority Key Identifier: keyid:1B:D7:53:D8:CE:FF:B0:C4:CB:B1:9A:2E:15:76:5E:C3:23:33:A8:73 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/70e6fd81-b877-4f7c-abc6-082fcbea189f/0/1BD753D8CEFFB0C4CBB19A2E15765EC32333A873.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1BD753D8CEFFB0C4CBB19A2E15765EC32333A873.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/70e6fd81-b877-4f7c-abc6-082fcbea189f/0/1BD753D8CEFFB0C4CBB19A2E15765EC32333A873.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption cb:3a:3d:6f:73:08:97:71:60:c6:4c:57:b9:2d:b6:a9:30:f2: 03:ee:df:51:42:ee:64:d5:60:e1:6d:fd:73:42:09:4b:8c:ff: a6:24:88:19:51:5d:e2:0b:1b:7b:ec:22:38:1b:2d:0e:ad:c0: ee:d8:2a:b3:de:00:81:f1:ae:46:fc:3a:1a:d7:b0:eb:f2:ee: 7c:f4:7c:c9:67:65:64:0e:9c:fc:d5:86:18:66:9b:41:ec:cb: ee:61:37:3e:da:c7:09:a2:10:ca:82:d2:74:84:79:fe:98:ee: f3:f7:74:d4:a6:13:32:f1:8d:0b:88:41:06:c5:1e:4a:2d:34: cb:0d:88:02:b5:6a:68:d7:c7:f0:24:d2:3b:81:a5:3b:25:45: b5:bb:af:39:8f:2c:5a:a2:ec:a4:73:ab:b8:f3:3a:d1:92:9e: 91:16:16:a8:5a:93:18:59:89:0e:a9:11:2e:c3:7a:e7:b1:92: 96:36:bb:dd:ad:66:27:88:fa:d4:8c:14:24:b8:c7:9a:4c:4d: 01:e3:0e:a5:25:31:87:d8:6f:d1:2b:b3:72:3b:c7:bc:e7:74: 0f:f6:ab:fb:0c:c8:97:5e:6d:57:82:20:25:a3:c6:44:ef:27: 92:29:83:b8:07:30:29:17:b5:21:1a:6e:b2:ea:6e:75:1d:94: 36:84:86:d5 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUFWEJzyTBAYtZXIzFsBPzXtXi4ZYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUJENzUzRDhDRUZGQjBDNENCQjE5QTJFMTU3NjVFQzMy MzMzQTg3MzAeFw0yNjAxMjQwMDI3MDlaFw0yNjAxMjcwNzE0MDlaMDMxMTAvBgNV BAMTKDhFQzUwMzIyQTUzQ0NCMUQ5NUQ4RTZCQkZDOEQ1RDFBMTA4RDBDRDIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDC1ATu8xAytiw57NgIxmwUTwnR u1b80lP1VmTpRRgmooY8uVjO8Xj13jwZt30zJeUbgh6R34k8PLg8nozBytHYCwxq Enz4vLnLizZKuEwF2tYD9Y4z0ztTZsMj42B71ZkVacNR7cSQLxHwWBZv4b6YVniK 51aL96QFH7Xg3Jgt2RHffgL8ek7WYgY8qbB6HQ3P+piq6OCt4PafYsDEo1wVS56A 5iXb66VY9nZybAv5Gxxu7o4U4h2lbs7d3m+qOF7NgsArkCaHDrX0yPZ0Fq+9xHqe OlhJnvP6JaSwQ/UBZwOE4giC+vPKr9MlddwdZlHID6LyaUn24T6OSJ99zA2vAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUjsUDIqU8yx2V2Oa7/I1dGhCNDNIwHwYDVR0j BBgwFoAUG9dT2M7/sMTLsZouFXZewyMzqHMwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 MGU2ZmQ4MS1iODc3LTRmN2MtYWJjNi0wODJmY2JlYTE4OWYvMC8xQkQ3NTNEOENF RkZCMEM0Q0JCMTlBMkUxNTc2NUVDMzIzMzNBODczLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMUJENzUzRDhDRUZGQjBDNENCQjE5QTJFMTU3NjVFQzMyMzMz QTg3My5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNzBlNmZkODEtYjg3Ny00ZjdjLWFi YzYtMDgyZmNiZWExODlmLzAvMUJENzUzRDhDRUZGQjBDNENCQjE5QTJFMTU3NjVF QzMyMzMzQTg3My5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAMs6PW9zCJdxYMZMV7kttqkw8gPu31FC7mTV YOFt/XNCCUuM/6YkiBlRXeILG3vsIjgbLQ6twO7YKrPeAIHxrkb8OhrXsOvy7nz0 fMlnZWQOnPzVhhhmm0Hsy+5hNz7axwmiEMqC0nSEef6Y7vP3dNSmEzLxjQuIQQbF HkotNMsNiAK1amjXx/Ak0juBpTslRbW7rzmPLFqi7KRzq7jzOtGSnpEWFqhakxhZ iQ6pES7DeuexkpY2u92tZieI+tSMFCS4x5pMTQHjDqUlMYfYb9Ers3I7x7zndA/2 q/sMyJdebVeCICWjxkTvJ5Ipg7gHMCkXtSEabrLqbnUdlDaEhtU= -----END CERTIFICATE-----Generated at Mon Jan 26 04:01:50 2026 by rpki-client