This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/7467ec33-5a72-4c65-9fd3-66ef8479394d/0/1154D920B6A4209131871530AEE1F8B8A3D303D6.mft File: 1154D920B6A4209131871530AEE1F8B8A3D303D6.mft (raw, json) Hash identifier: v7HFUo5OzPEBWoKGrVGWnakgtZ2/DzC9nBMIYToU/EE= Subject key identifier: C9:A4:7F:CB:A0:36:05:46:19:5A:EE:92:4A:C4:FF:95:C5:EC:AF:58 Authority key identifier: 11:54:D9:20:B6:A4:20:91:31:87:15:30:AE:E1:F8:B8:A3:D3:03:D6 Certificate issuer: /CN=1154D920B6A4209131871530AEE1F8B8A3D303D6 Certificate serial: 73EBA08A0427BD1F297D323F7D8EF84718B29041 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1154D920B6A4209131871530AEE1F8B8A3D303D6.cer Subject info access: rsync://repo-rpki.idnic.net/repo/7467ec33-5a72-4c65-9fd3-66ef8479394d/0/1154D920B6A4209131871530AEE1F8B8A3D303D6.mft Manifest number: 0241 Signing time: Fri 23 Jan 2026 20:41:14 +0000 Manifest this update: Fri 23 Jan 2026 20:36:14 +0000 Manifest next update: Mon 26 Jan 2026 22:55:14 +0000 Files and hashes: 1: 3130332e3138382e3234392e302f32342d3234203d3e20313439393038.roa (hash: Pil6JjAZAhk6oGR6yVNwjzUnJBqxVVzN/QVFAe7clnM=) 2: 1154D920B6A4209131871530AEE1F8B8A3D303D6.crl (hash: 3Z4wvPW9s4b9Y8symvIzALXXSt/xQ2QII6Yp+Q3Na8E=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/7467ec33-5a72-4c65-9fd3-66ef8479394d/0/1154D920B6A4209131871530AEE1F8B8A3D303D6.crl rsync://repo-rpki.idnic.net/repo/7467ec33-5a72-4c65-9fd3-66ef8479394d/0/1154D920B6A4209131871530AEE1F8B8A3D303D6.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1154D920B6A4209131871530AEE1F8B8A3D303D6.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 26 Jan 2026 22:55:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 73:eb:a0:8a:04:27:bd:1f:29:7d:32:3f:7d:8e:f8:47:18:b2:90:41 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1154D920B6A4209131871530AEE1F8B8A3D303D6 Validity Not Before: Jan 23 20:36:14 2026 GMT Not After : Jan 26 22:55:14 2026 GMT Subject: CN=C9A47FCBA0360546195AEE924AC4FF95C5ECAF58 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:dd:7f:34:5b:ea:ed:2a:91:af:45:37:20:de: 1f:58:c9:c4:60:0c:9c:af:56:ba:1c:6a:0d:48:e0: 56:2b:2e:7b:b4:46:28:67:5d:26:53:99:ad:40:fc: ad:79:7a:bb:6a:98:e0:99:56:80:64:3a:70:bc:e2: f1:66:58:67:a1:fb:08:61:58:55:b5:d9:e3:ce:47: 48:c8:0c:0c:c6:3d:be:44:50:e0:06:ba:93:e6:c0: 62:a7:10:8f:77:c6:25:ef:05:93:3a:a5:5d:51:ec: 3c:17:6f:d7:d7:b0:6c:2a:45:ab:2b:b0:d9:f0:3b: 57:1d:36:6d:08:bb:f2:aa:6b:61:4b:bd:7c:32:49: 87:4b:89:5a:00:cf:cb:f1:e9:b2:91:97:f0:ce:3c: 40:c8:cf:07:50:ea:8a:7c:1a:c4:a2:ac:04:99:2b: 1e:7b:63:2f:36:5b:73:4c:6f:c6:71:34:4a:f3:5f: 72:03:e2:be:32:c1:e9:fe:ac:69:df:d9:55:6c:72: 97:23:fc:bf:3e:8c:6d:6e:ad:43:6d:39:ce:7f:8d: 1e:b2:71:fc:c4:cd:2e:7c:fd:43:81:05:32:ef:7b: f2:f6:14:69:69:70:4d:5c:1c:98:02:74:5c:7c:31: 71:c6:50:36:eb:fc:65:60:d4:c7:02:7e:b8:b9:47: a2:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:A4:7F:CB:A0:36:05:46:19:5A:EE:92:4A:C4:FF:95:C5:EC:AF:58 X509v3 Authority Key Identifier: keyid:11:54:D9:20:B6:A4:20:91:31:87:15:30:AE:E1:F8:B8:A3:D3:03:D6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/7467ec33-5a72-4c65-9fd3-66ef8479394d/0/1154D920B6A4209131871530AEE1F8B8A3D303D6.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1154D920B6A4209131871530AEE1F8B8A3D303D6.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7467ec33-5a72-4c65-9fd3-66ef8479394d/0/1154D920B6A4209131871530AEE1F8B8A3D303D6.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9b:e0:19:7c:8e:54:d7:82:a5:c4:09:76:97:3e:a8:f6:30:7c: de:c1:ac:a7:c3:3b:a9:43:12:aa:ef:c5:7d:9d:79:78:44:68: 5f:2e:52:1c:3f:d7:0a:e9:e4:4a:9e:60:8e:b2:df:c8:f7:02: 06:b7:60:15:13:a2:de:7e:f5:e7:5b:30:83:79:ca:40:cf:b1: fd:41:d7:30:69:2e:b4:df:ad:95:e2:a1:c9:8b:eb:cf:ac:76: 27:cf:d1:d2:60:c9:31:f9:48:58:4c:3d:d4:9d:a8:ef:2c:6c: 2e:f8:bb:8c:93:dc:d0:74:29:e4:a3:2d:2d:0f:5c:54:2c:41: 67:ee:e8:20:3b:ce:98:79:be:49:02:7a:28:38:33:62:a3:99: c8:b3:4f:1e:ef:79:37:e6:c7:74:71:05:89:ae:fa:0f:fd:5f: 3e:63:86:6a:7c:ce:f9:f3:96:f7:14:89:0a:b8:24:8f:e3:96: 17:57:c8:26:d9:40:ff:8b:c8:9d:93:d3:7c:46:18:d5:77:f0: b9:e3:2b:3e:50:6f:83:8d:8a:04:03:4c:f5:b1:fd:88:df:86: 36:8d:6b:e6:24:c0:b6:c9:e0:3c:40:8d:d9:5d:7e:0e:1c:2b: 6f:f6:8d:e9:5a:b6:17:d5:f3:8e:fd:4e:5e:fd:a6:b4:82:07: d4:4c:61:3e -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUc+ugigQnvR8pfTI/fY74RxiykEEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTE1NEQ5MjBCNkE0MjA5MTMxODcxNTMwQUVFMUY4QjhB M0QzMDNENjAeFw0yNjAxMjMyMDM2MTRaFw0yNjAxMjYyMjU1MTRaMDMxMTAvBgNV BAMTKEM5QTQ3RkNCQTAzNjA1NDYxOTVBRUU5MjRBQzRGRjk1QzVFQ0FGNTgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDE3X80W+rtKpGvRTcg3h9YycRg DJyvVrocag1I4FYrLnu0RihnXSZTma1A/K15ertqmOCZVoBkOnC84vFmWGeh+whh WFW12ePOR0jIDAzGPb5EUOAGupPmwGKnEI93xiXvBZM6pV1R7DwXb9fXsGwqRasr sNnwO1cdNm0Iu/Kqa2FLvXwySYdLiVoAz8vx6bKRl/DOPEDIzwdQ6op8GsSirASZ Kx57Yy82W3NMb8ZxNErzX3ID4r4ywen+rGnf2VVscpcj/L8+jG1urUNtOc5/jR6y cfzEzS58/UOBBTLve/L2FGlpcE1cHJgCdFx8MXHGUDbr/GVg1McCfri5R6J/AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUyaR/y6A2BUYZWu6SSsT/lcXsr1gwHwYDVR0j BBgwFoAUEVTZILakIJExhxUwruH4uKPTA9YwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 NDY3ZWMzMy01YTcyLTRjNjUtOWZkMy02NmVmODQ3OTM5NGQvMC8xMTU0RDkyMEI2 QTQyMDkxMzE4NzE1MzBBRUUxRjhCOEEzRDMwM0Q2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMTE1NEQ5MjBCNkE0MjA5MTMxODcxNTMwQUVFMUY4QjhBM0Qz MDNENi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNzQ2N2VjMzMtNWE3Mi00YzY1LTlm ZDMtNjZlZjg0NzkzOTRkLzAvMTE1NEQ5MjBCNkE0MjA5MTMxODcxNTMwQUVFMUY4 QjhBM0QzMDNENi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJvgGXyOVNeCpcQJdpc+qPYwfN7BrKfDO6lD EqrvxX2deXhEaF8uUhw/1wrp5EqeYI6y38j3Aga3YBUTot5+9edbMIN5ykDPsf1B 1zBpLrTfrZXiocmL68+sdifP0dJgyTH5SFhMPdSdqO8sbC74u4yT3NB0KeSjLS0P XFQsQWfu6CA7zph5vkkCeig4M2KjmcizTx7veTfmx3RxBYmu+g/9Xz5jhmp8zvnz lvcUiQq4JI/jlhdXyCbZQP+LyJ2T03xGGNV38LnjKz5Qb4ONigQDTPWx/YjfhjaN a+YkwLbJ4DxAjdldfg4cK2/2jelathfV8479Tl79prSCB9RMYT4= -----END CERTIFICATE-----Generated at Sun Jan 25 23:57:14 2026 by rpki-client