This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/7a22b4e2-26f6-41e8-8910-206bea783db9/0/29CF00DB5C2109C4B5090935368C9AC57C5BD2A4.mft File: 29CF00DB5C2109C4B5090935368C9AC57C5BD2A4.mft (raw, json) Hash identifier: bXbwpyLZ63ZZC3TUpDrDk4dz70VQYgV04Zq1iTj9FI4= Subject key identifier: 8C:AD:6D:57:F4:DC:D5:D8:41:8D:E6:E6:08:48:E1:3D:0D:77:C7:C1 Authority key identifier: 29:CF:00:DB:5C:21:09:C4:B5:09:09:35:36:8C:9A:C5:7C:5B:D2:A4 Certificate issuer: /CN=29CF00DB5C2109C4B5090935368C9AC57C5BD2A4 Certificate serial: 7CBDF8D1BA247FFA272BB4BC51327CCC8F3D894E Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/29CF00DB5C2109C4B5090935368C9AC57C5BD2A4.cer Subject info access: rsync://repo-rpki.idnic.net/repo/7a22b4e2-26f6-41e8-8910-206bea783db9/0/29CF00DB5C2109C4B5090935368C9AC57C5BD2A4.mft Manifest number: 023C Signing time: Fri 23 Jan 2026 17:20:56 +0000 Manifest this update: Fri 23 Jan 2026 17:15:56 +0000 Manifest next update: Tue 27 Jan 2026 02:59:56 +0000 Files and hashes: 1: 3130332e3139312e3137362e302f32332d3234203d3e2034383030.roa (hash: skxD93mSZPzFcHG9WbDQcpHQq3Kcwean+DkfNBxkL7o=) 2: 29CF00DB5C2109C4B5090935368C9AC57C5BD2A4.crl (hash: olgphLrS5+T7P9pZdRqDw3F36byzlT8D0nRSsp9EWqE=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/7a22b4e2-26f6-41e8-8910-206bea783db9/0/29CF00DB5C2109C4B5090935368C9AC57C5BD2A4.crl rsync://repo-rpki.idnic.net/repo/7a22b4e2-26f6-41e8-8910-206bea783db9/0/29CF00DB5C2109C4B5090935368C9AC57C5BD2A4.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/29CF00DB5C2109C4B5090935368C9AC57C5BD2A4.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 27 Jan 2026 02:59:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7c:bd:f8:d1:ba:24:7f:fa:27:2b:b4:bc:51:32:7c:cc:8f:3d:89:4e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=29CF00DB5C2109C4B5090935368C9AC57C5BD2A4 Validity Not Before: Jan 23 17:15:56 2026 GMT Not After : Jan 27 02:59:56 2026 GMT Subject: CN=8CAD6D57F4DCD5D8418DE6E60848E13D0D77C7C1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:ae:f2:cc:2c:e2:e9:7c:f4:92:f7:23:d5:dc: cd:6e:7e:bc:48:82:38:d8:4e:74:28:19:2f:74:40: 72:6c:ae:23:9c:19:25:2d:61:31:7b:09:7c:5f:6d: c7:a1:3e:a6:d5:73:df:3d:40:50:43:fc:1b:ac:5d: c2:b4:db:f1:53:13:cd:c2:6a:7f:ea:6e:03:db:b3: fb:32:e2:d0:26:0b:9e:79:e6:ed:d9:e4:ca:2f:b7: f4:e3:8b:88:45:53:67:24:87:8a:66:5b:cc:7d:19: 39:67:2a:9a:ae:b9:3e:74:89:ae:54:7f:42:a6:55: ce:ce:e0:ed:29:d4:cf:32:c6:ed:61:b0:02:4e:81: 27:cf:73:ba:ea:56:0b:34:61:51:2d:ce:e0:0c:7b: b6:7b:e9:97:40:93:7a:ac:34:4d:c7:8f:f2:e4:1a: 7d:a1:05:9e:bb:9d:37:19:c7:c9:cc:ac:3e:54:f4: e7:90:44:2d:b3:b5:ad:2d:4e:e6:58:24:45:79:db: 02:55:5b:33:52:51:7a:a5:c3:5e:b0:a0:15:30:43: 86:d5:b4:79:15:18:de:90:a4:ad:dd:2f:7f:9c:fc: 64:83:be:93:0f:9b:11:31:5c:24:0c:ca:06:9e:5b: f1:e6:5a:c1:00:73:6e:40:ff:84:6c:61:03:11:72: af:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8C:AD:6D:57:F4:DC:D5:D8:41:8D:E6:E6:08:48:E1:3D:0D:77:C7:C1 X509v3 Authority Key Identifier: keyid:29:CF:00:DB:5C:21:09:C4:B5:09:09:35:36:8C:9A:C5:7C:5B:D2:A4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/7a22b4e2-26f6-41e8-8910-206bea783db9/0/29CF00DB5C2109C4B5090935368C9AC57C5BD2A4.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/29CF00DB5C2109C4B5090935368C9AC57C5BD2A4.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7a22b4e2-26f6-41e8-8910-206bea783db9/0/29CF00DB5C2109C4B5090935368C9AC57C5BD2A4.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 14:8e:c5:8d:1a:f0:a5:80:8f:f8:c3:08:be:17:dc:dc:e8:39: 3c:9c:7f:19:65:f3:ac:bc:21:2c:b0:19:cc:ea:f1:40:14:1f: f2:a2:ad:49:df:c6:73:03:bd:85:52:ff:b1:7d:89:73:b7:cf: f9:74:ab:67:0e:5f:30:c2:bf:34:88:62:07:7c:31:2f:b7:91: 14:4c:e5:d3:ce:f5:35:09:6b:0a:0a:4d:fc:ae:81:a5:93:6a: eb:64:80:22:13:2d:06:62:83:7f:9b:d0:e3:e9:56:24:04:d5: c8:61:a7:37:60:17:ed:41:f1:44:15:71:04:66:a3:ee:0a:a4: 5c:ec:02:90:89:5a:d3:23:98:4e:90:cb:e0:21:02:8c:38:29: 44:8c:b5:19:83:f4:52:7c:41:27:47:e3:de:90:1d:c9:e4:25: e0:8e:6e:7e:5f:0e:db:2a:b8:1c:4a:d5:1e:1d:c0:32:c1:55: c7:73:43:c3:14:e0:26:78:5d:27:b8:3e:e6:7f:41:23:83:2c: 09:13:ea:20:33:c7:0f:33:f3:88:0d:b0:40:dc:34:94:ff:38: a2:1b:41:cd:4b:20:01:3f:72:18:80:bb:b6:5e:60:4d:ff:8a: a7:c3:78:fd:3c:a5:f2:71:1e:fb:cb:a3:72:77:58:02:01:92: 2a:90:b1:10 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUfL340bokf/onK7S8UTJ8zI89iU4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjlDRjAwREI1QzIxMDlDNEI1MDkwOTM1MzY4QzlBQzU3 QzVCRDJBNDAeFw0yNjAxMjMxNzE1NTZaFw0yNjAxMjcwMjU5NTZaMDMxMTAvBgNV BAMTKDhDQUQ2RDU3RjREQ0Q1RDg0MThERTZFNjA4NDhFMTNEMEQ3N0M3QzEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDQrvLMLOLpfPSS9yPV3M1ufrxI gjjYTnQoGS90QHJsriOcGSUtYTF7CXxfbcehPqbVc989QFBD/BusXcK02/FTE83C an/qbgPbs/sy4tAmC5555u3Z5Movt/Tji4hFU2ckh4pmW8x9GTlnKpquuT50ia5U f0KmVc7O4O0p1M8yxu1hsAJOgSfPc7rqVgs0YVEtzuAMe7Z76ZdAk3qsNE3Hj/Lk Gn2hBZ67nTcZx8nMrD5U9OeQRC2zta0tTuZYJEV52wJVWzNSUXqlw16woBUwQ4bV tHkVGN6QpK3dL3+c/GSDvpMPmxExXCQMygaeW/HmWsEAc25A/4RsYQMRcq/dAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUjK1tV/Tc1dhBjebmCEjhPQ13x8EwHwYDVR0j BBgwFoAUKc8A21whCcS1CQk1NoyaxXxb0qQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 YTIyYjRlMi0yNmY2LTQxZTgtODkxMC0yMDZiZWE3ODNkYjkvMC8yOUNGMDBEQjVD MjEwOUM0QjUwOTA5MzUzNjhDOUFDNTdDNUJEMkE0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMjlDRjAwREI1QzIxMDlDNEI1MDkwOTM1MzY4QzlBQzU3QzVC RDJBNC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vN2EyMmI0ZTItMjZmNi00MWU4LTg5 MTAtMjA2YmVhNzgzZGI5LzAvMjlDRjAwREI1QzIxMDlDNEI1MDkwOTM1MzY4QzlB QzU3QzVCRDJBNC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABSOxY0a8KWAj/jDCL4X3NzoOTycfxll86y8 ISywGczq8UAUH/KirUnfxnMDvYVS/7F9iXO3z/l0q2cOXzDCvzSIYgd8MS+3kRRM 5dPO9TUJawoKTfyugaWTautkgCITLQZig3+b0OPpViQE1chhpzdgF+1B8UQVcQRm o+4KpFzsApCJWtMjmE6Qy+AhAow4KUSMtRmD9FJ8QSdH496QHcnkJeCObn5fDtsq uBxK1R4dwDLBVcdzQ8MU4CZ4XSe4PuZ/QSODLAkT6iAzxw8z84gNsEDcNJT/OKIb Qc1LIAE/chiAu7ZeYE3/iqfDeP08pfJxHvvLo3J3WAIBkiqQsRA= -----END CERTIFICATE-----Generated at Sun Jan 25 20:32:48 2026 by rpki-client