This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/7b40b09e-e9f8-4826-92b5-ba9d57579b26/0/AD5F121BCE742FD0358AE347D984F209BC381871.mft File: AD5F121BCE742FD0358AE347D984F209BC381871.mft (raw, json) Hash identifier: PRsymFolzZ6WP0fYhiVNQk+DLj3oNFcBeyuJhT1Du/8= Subject key identifier: 1F:8A:99:DE:07:89:A3:0D:B0:BD:BD:E3:A0:E8:C0:66:4F:E6:96:E9 Authority key identifier: AD:5F:12:1B:CE:74:2F:D0:35:8A:E3:47:D9:84:F2:09:BC:38:18:71 Certificate issuer: /CN=AD5F121BCE742FD0358AE347D984F209BC381871 Certificate serial: 0C8C015F1EC456FD4E9ECB984EE31E5BD371B972 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AD5F121BCE742FD0358AE347D984F209BC381871.cer Subject info access: rsync://repo-rpki.idnic.net/repo/7b40b09e-e9f8-4826-92b5-ba9d57579b26/0/AD5F121BCE742FD0358AE347D984F209BC381871.mft Manifest number: 0349 Signing time: Sat 24 Jan 2026 05:01:35 +0000 Manifest this update: Sat 24 Jan 2026 04:56:35 +0000 Manifest next update: Tue 27 Jan 2026 13:08:35 +0000 Files and hashes: 1: 3130332e3137302e32342e302f32332d3234203d3e20313432333630.roa (hash: RMi8wIknD/gpfFnF26an+gZf/7MdAT/Qz50WllzD+8A=) 2: AD5F121BCE742FD0358AE347D984F209BC381871.crl (hash: rIr45D1foq+arVjWhXrg6VS5yP4ZbRrT71II1g8KMKE=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/7b40b09e-e9f8-4826-92b5-ba9d57579b26/0/AD5F121BCE742FD0358AE347D984F209BC381871.crl rsync://repo-rpki.idnic.net/repo/7b40b09e-e9f8-4826-92b5-ba9d57579b26/0/AD5F121BCE742FD0358AE347D984F209BC381871.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AD5F121BCE742FD0358AE347D984F209BC381871.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 27 Jan 2026 13:08:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0c:8c:01:5f:1e:c4:56:fd:4e:9e:cb:98:4e:e3:1e:5b:d3:71:b9:72 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AD5F121BCE742FD0358AE347D984F209BC381871 Validity Not Before: Jan 24 04:56:35 2026 GMT Not After : Jan 27 13:08:35 2026 GMT Subject: CN=1F8A99DE0789A30DB0BDBDE3A0E8C0664FE696E9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:ad:a6:a8:6e:71:40:57:d6:30:38:f3:7f:6c: e3:a0:b2:da:e6:36:1c:07:40:f7:6a:2b:78:b0:7a: 0b:9d:7d:26:4b:20:1d:d8:8a:ea:a7:7b:c3:71:33: 66:9d:d6:ab:ad:5d:80:25:bd:72:a5:25:c2:2e:34: b4:ee:8d:0b:bf:e3:79:7d:f7:36:db:6a:a1:3d:f7: 19:d1:50:c7:8e:2f:c1:a4:f3:f2:fc:af:4c:b6:6f: 42:aa:51:b7:91:0a:cc:af:b0:c6:93:f7:60:aa:a5: 8d:e5:22:2c:43:9b:e7:8a:27:e3:51:4e:06:bc:06: 0f:7b:33:da:f8:0c:27:02:3f:43:21:79:09:1a:61: 82:67:24:8d:79:62:ff:08:9b:c8:6d:47:b6:e9:a0: be:27:dc:1d:02:0a:7b:29:cb:64:c0:e4:14:0c:c8: bc:3d:d3:d7:26:e9:ea:33:50:cf:af:50:06:71:72: 62:f0:5b:fc:a1:63:77:00:86:da:df:3e:af:02:94: b0:4e:1e:92:42:99:56:4b:f3:08:80:ca:a0:25:36: fd:5f:6a:a1:74:e5:99:ee:0c:45:ca:12:bd:f4:e4: 0f:30:b3:34:a5:8b:06:55:39:9d:35:0c:16:c2:58: 03:d8:ae:ab:5f:61:53:d0:7e:48:f1:00:8a:59:b5: a6:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:8A:99:DE:07:89:A3:0D:B0:BD:BD:E3:A0:E8:C0:66:4F:E6:96:E9 X509v3 Authority Key Identifier: keyid:AD:5F:12:1B:CE:74:2F:D0:35:8A:E3:47:D9:84:F2:09:BC:38:18:71 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/7b40b09e-e9f8-4826-92b5-ba9d57579b26/0/AD5F121BCE742FD0358AE347D984F209BC381871.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AD5F121BCE742FD0358AE347D984F209BC381871.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7b40b09e-e9f8-4826-92b5-ba9d57579b26/0/AD5F121BCE742FD0358AE347D984F209BC381871.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 03:8f:3a:4d:86:3d:3b:0c:45:dc:fc:10:c6:3b:52:96:01:55: 35:5c:57:a1:ab:a6:93:9d:6d:33:78:89:99:d8:fa:44:bc:f9: 4c:42:eb:15:7e:4b:0c:8c:46:02:2f:ad:ab:df:a8:32:88:66: cc:aa:18:40:1f:10:50:01:a3:fc:9b:2a:16:23:b8:08:fd:44: 49:5d:d3:37:1c:3f:b8:ce:4d:65:9e:b4:0f:f0:64:ee:93:dd: d9:e2:83:2f:0f:9f:af:ab:66:2a:88:d9:20:9d:e6:4c:4b:04: b9:c5:30:bd:ae:8b:52:aa:a1:fb:22:6f:85:f3:65:b5:51:9e: 26:31:15:8a:90:92:11:88:66:9f:83:5d:f0:fa:c6:8d:69:90: 55:6d:88:c6:9f:d0:0b:29:1d:64:ff:a8:aa:53:2c:26:42:9a: 60:39:e1:5e:42:aa:c7:5c:b3:0b:63:b1:b8:7b:9c:df:3c:4a: 16:fa:55:b2:0c:cc:d5:44:1e:6f:f9:9a:9f:ea:2c:eb:76:8e: da:12:3a:86:d3:ff:3b:d7:eb:94:44:f4:47:2b:0b:8e:92:61: ff:6d:2a:af:5a:84:80:37:96:da:cd:2b:18:f9:e2:98:a7:64: e8:e4:91:8d:3e:56:e2:cc:27:b9:0d:07:6d:9a:05:12:43:a1: d1:2d:0a:d2 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUDIwBXx7EVv1OnsuYTuMeW9NxuXIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUQ1RjEyMUJDRTc0MkZEMDM1OEFFMzQ3RDk4NEYyMDlC QzM4MTg3MTAeFw0yNjAxMjQwNDU2MzVaFw0yNjAxMjcxMzA4MzVaMDMxMTAvBgNV BAMTKDFGOEE5OURFMDc4OUEzMERCMEJEQkRFM0EwRThDMDY2NEZFNjk2RTkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCYraaobnFAV9YwOPN/bOOgstrm NhwHQPdqK3iwegudfSZLIB3Yiuqne8NxM2ad1qutXYAlvXKlJcIuNLTujQu/43l9 9zbbaqE99xnRUMeOL8Gk8/L8r0y2b0KqUbeRCsyvsMaT92CqpY3lIixDm+eKJ+NR Tga8Bg97M9r4DCcCP0MheQkaYYJnJI15Yv8Im8htR7bpoL4n3B0CCnspy2TA5BQM yLw909cm6eozUM+vUAZxcmLwW/yhY3cAhtrfPq8ClLBOHpJCmVZL8wiAyqAlNv1f aqF05ZnuDEXKEr305A8wszSliwZVOZ01DBbCWAPYrqtfYVPQfkjxAIpZtabrAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUH4qZ3geJow2wvb3joOjAZk/mlukwHwYDVR0j BBgwFoAUrV8SG850L9A1iuNH2YTyCbw4GHEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 YjQwYjA5ZS1lOWY4LTQ4MjYtOTJiNS1iYTlkNTc1NzliMjYvMC9BRDVGMTIxQkNF NzQyRkQwMzU4QUUzNDdEOTg0RjIwOUJDMzgxODcxLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQUQ1RjEyMUJDRTc0MkZEMDM1OEFFMzQ3RDk4NEYyMDlCQzM4 MTg3MS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vN2I0MGIwOWUtZTlmOC00ODI2LTky YjUtYmE5ZDU3NTc5YjI2LzAvQUQ1RjEyMUJDRTc0MkZEMDM1OEFFMzQ3RDk4NEYy MDlCQzM4MTg3MS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAOPOk2GPTsMRdz8EMY7UpYBVTVcV6GrppOd bTN4iZnY+kS8+UxC6xV+SwyMRgIvravfqDKIZsyqGEAfEFABo/ybKhYjuAj9REld 0zccP7jOTWWetA/wZO6T3dnigy8Pn6+rZiqI2SCd5kxLBLnFML2ui1Kqofsib4Xz ZbVRniYxFYqQkhGIZp+DXfD6xo1pkFVtiMaf0AspHWT/qKpTLCZCmmA54V5Cqsdc swtjsbh7nN88Shb6VbIMzNVEHm/5mp/qLOt2jtoSOobT/zvX65RE9EcrC46SYf9t Kq9ahIA3ltrNKxj54pinZOjkkY0+VuLMJ7kNB22aBRJDodEtCtI= -----END CERTIFICATE-----Generated at Sun Jan 25 20:33:03 2026 by rpki-client