This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/732e4f86-48e7-48c7-ba91-e25968378e95/0/C88864DD3C1E6D0D5FA91467F03B266DF5F79255.mft File: C88864DD3C1E6D0D5FA91467F03B266DF5F79255.mft (raw, json) Hash identifier: Y33C/IlCLlRfx0mp3ytIA4PksagQNlCUnZLsz0acaQM= Subject key identifier: 2B:96:D8:B1:CB:09:A3:59:ED:6C:29:3B:5B:23:69:5F:9F:CB:46:55 Authority key identifier: C8:88:64:DD:3C:1E:6D:0D:5F:A9:14:67:F0:3B:26:6D:F5:F7:92:55 Certificate issuer: /CN=C88864DD3C1E6D0D5FA91467F03B266DF5F79255 Certificate serial: 29677B187896B3E9993E7DBAE7ADA08B7FBD0C9D Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/C88864DD3C1E6D0D5FA91467F03B266DF5F79255.cer Subject info access: rsync://repo-rpki.idnic.net/repo/732e4f86-48e7-48c7-ba91-e25968378e95/0/C88864DD3C1E6D0D5FA91467F03B266DF5F79255.mft Manifest number: 014F Signing time: Sat 24 Jan 2026 17:11:52 +0000 Manifest this update: Sat 24 Jan 2026 17:06:52 +0000 Manifest next update: Tue 27 Jan 2026 18:35:52 +0000 Files and hashes: 1: 3135372e31302e38382e302f32332d3233203d3e20313532303832.roa (hash: 2xXRATtqKTFJTL45kpKCrmgQ+OKbp2ZlcGtRfjkIZUg=) 2: 3135372e31302e38392e302f32342d3234203d3e20313532303832.roa (hash: r0yQckJKHz7cgtDpBZ5DT3GZabnNshDA9NVYp4KqxPI=) 3: 3135372e31302e38382e302f32342d3234203d3e20313532303832.roa (hash: iu1Dc54YlpkWXrRrlgFt9MyI1bbMWnH2lViKwPc2SC4=) 4: C88864DD3C1E6D0D5FA91467F03B266DF5F79255.crl (hash: rrjGlWucejh/NiWUFwZd2If2t9EQpLLwWpjfhDAAeAo=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/732e4f86-48e7-48c7-ba91-e25968378e95/0/C88864DD3C1E6D0D5FA91467F03B266DF5F79255.crl rsync://repo-rpki.idnic.net/repo/732e4f86-48e7-48c7-ba91-e25968378e95/0/C88864DD3C1E6D0D5FA91467F03B266DF5F79255.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/C88864DD3C1E6D0D5FA91467F03B266DF5F79255.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 27 Jan 2026 18:35:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 29:67:7b:18:78:96:b3:e9:99:3e:7d:ba:e7:ad:a0:8b:7f:bd:0c:9d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C88864DD3C1E6D0D5FA91467F03B266DF5F79255 Validity Not Before: Jan 24 17:06:52 2026 GMT Not After : Jan 27 18:35:52 2026 GMT Subject: CN=2B96D8B1CB09A359ED6C293B5B23695F9FCB4655 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:34:04:e5:7d:2b:b6:f6:77:15:5c:5a:ac:85: c5:f2:75:3d:ef:a3:7b:3a:9f:60:7a:e7:93:29:65: 11:dc:44:09:0b:54:9d:4b:0b:6e:ca:84:30:9b:87: fa:68:aa:2c:0e:a6:4b:ed:be:85:6b:15:cb:ff:e9: a3:69:17:88:02:de:11:f6:ca:03:66:42:c4:41:4a: de:1e:fa:5e:45:61:25:d3:9b:37:0f:66:7d:b4:85: c1:5a:97:f4:d0:07:37:36:4e:82:56:0b:d8:5c:9b: c8:55:88:ad:7b:cc:62:e7:92:ee:ac:97:c1:13:9a: d6:16:66:8c:2c:1a:6d:a0:cf:b5:11:97:20:fe:12: d2:5f:a9:f9:9e:65:d7:a6:ea:cd:c4:65:5c:5f:97: 76:d3:cf:0d:b1:d2:16:c3:e1:ad:94:24:e5:37:92: ad:10:fd:bc:04:b4:91:bd:b9:73:fc:e4:6b:72:de: 9e:1a:ab:f6:a2:2a:dd:87:1f:2e:e3:35:dd:71:3a: 7f:ec:8b:bc:92:13:16:3f:9e:cc:07:47:e9:36:67: e6:b8:68:c9:c9:89:7e:1f:93:95:f5:98:dc:c1:5b: 10:b7:28:31:9e:46:48:ab:e4:93:4a:91:50:1a:45: f9:48:b3:30:1c:e7:b1:c0:94:11:77:ce:0c:0d:92: d7:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:96:D8:B1:CB:09:A3:59:ED:6C:29:3B:5B:23:69:5F:9F:CB:46:55 X509v3 Authority Key Identifier: keyid:C8:88:64:DD:3C:1E:6D:0D:5F:A9:14:67:F0:3B:26:6D:F5:F7:92:55 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/732e4f86-48e7-48c7-ba91-e25968378e95/0/C88864DD3C1E6D0D5FA91467F03B266DF5F79255.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/C88864DD3C1E6D0D5FA91467F03B266DF5F79255.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/732e4f86-48e7-48c7-ba91-e25968378e95/0/C88864DD3C1E6D0D5FA91467F03B266DF5F79255.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 69:1c:01:16:38:d2:86:b5:21:cc:c6:7b:6e:f2:fe:50:28:12: 37:e5:80:2b:cf:d7:b9:80:1b:46:4b:73:c1:8c:79:99:58:23: 60:ad:f0:8e:aa:26:8a:4a:cc:c6:ad:9f:10:45:24:98:3c:79: 32:46:2d:91:65:ea:e6:8a:dd:fb:2b:f9:52:7a:41:13:ba:b1: 7f:db:30:4f:33:3b:4a:fd:24:4e:6e:9f:d8:88:c9:9a:bb:cc: 1c:7e:ed:8b:55:bd:6f:9e:d1:b3:e7:e2:93:6c:bf:a5:84:d1: a9:e1:00:b9:10:b6:48:e6:08:6c:3a:12:24:dd:79:0e:bc:10: 22:ad:4a:3b:c4:aa:5c:8e:5e:b6:b2:5f:e5:83:b9:5d:20:d2: 47:bb:0b:0d:fa:f8:59:5c:bb:4e:71:25:b6:d1:92:e6:68:0b: 1a:29:09:a9:3f:ae:94:26:c3:8c:66:12:0c:ac:a2:7e:28:fb: e5:ea:15:a9:c7:4a:14:4d:8a:e6:c9:c9:d5:8c:c9:87:fe:68: f9:c9:5e:53:42:12:cd:9b:3d:79:15:50:c7:01:78:89:bc:3e: 88:82:9d:9e:46:9d:d9:9c:b3:8a:b2:1c:21:fd:66:bf:20:c3: 51:8c:35:51:f7:e7:a0:9f:42:3a:9e:15:c7:63:42:91:0e:87: b0:2c:22:ff -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUKWd7GHiWs+mZPn26562gi3+9DJ0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzg4ODY0REQzQzFFNkQwRDVGQTkxNDY3RjAzQjI2NkRG NUY3OTI1NTAeFw0yNjAxMjQxNzA2NTJaFw0yNjAxMjcxODM1NTJaMDMxMTAvBgNV BAMTKDJCOTZEOEIxQ0IwOUEzNTlFRDZDMjkzQjVCMjM2OTVGOUZDQjQ2NTUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDENATlfSu29ncVXFqshcXydT3v o3s6n2B655MpZRHcRAkLVJ1LC27KhDCbh/poqiwOpkvtvoVrFcv/6aNpF4gC3hH2 ygNmQsRBSt4e+l5FYSXTmzcPZn20hcFal/TQBzc2ToJWC9hcm8hViK17zGLnku6s l8ETmtYWZowsGm2gz7URlyD+EtJfqfmeZdem6s3EZVxfl3bTzw2x0hbD4a2UJOU3 kq0Q/bwEtJG9uXP85Gty3p4aq/aiKt2HHy7jNd1xOn/si7ySExY/nswHR+k2Z+a4 aMnJiX4fk5X1mNzBWxC3KDGeRkir5JNKkVAaRflIszAc57HAlBF3zgwNktf7AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUK5bYscsJo1ntbCk7WyNpX5/LRlUwHwYDVR0j BBgwFoAUyIhk3TwebQ1fqRRn8DsmbfX3klUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 MzJlNGY4Ni00OGU3LTQ4YzctYmE5MS1lMjU5NjgzNzhlOTUvMC9DODg4NjRERDND MUU2RDBENUZBOTE0NjdGMDNCMjY2REY1Rjc5MjU1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvQzg4ODY0REQzQzFFNkQwRDVGQTkxNDY3RjAzQjI2NkRGNUY3 OTI1NS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNzMyZTRmODYtNDhlNy00OGM3LWJh OTEtZTI1OTY4Mzc4ZTk1LzAvQzg4ODY0REQzQzFFNkQwRDVGQTkxNDY3RjAzQjI2 NkRGNUY3OTI1NS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGkcARY40oa1IczGe27y/lAoEjflgCvP17mA G0ZLc8GMeZlYI2Ct8I6qJopKzMatnxBFJJg8eTJGLZFl6uaK3fsr+VJ6QRO6sX/b ME8zO0r9JE5un9iIyZq7zBx+7YtVvW+e0bPn4pNsv6WE0anhALkQtkjmCGw6EiTd eQ68ECKtSjvEqlyOXrayX+WDuV0g0ke7Cw36+Flcu05xJbbRkuZoCxopCak/rpQm w4xmEgyson4o++XqFanHShRNiubJydWMyYf+aPnJXlNCEs2bPXkVUMcBeIm8PoiC nZ5Gndmcs4qyHCH9Zr8gw1GMNVH356CfQjqeFcdjQpEOh7AsIv8= -----END CERTIFICATE-----Generated at Mon Jan 26 01:19:23 2026 by rpki-client