This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/7bed83bd-8986-4429-a011-ac590724d586/0/1BA1ADD734797C0383628A8723DEBADA827B5B02.mft File: 1BA1ADD734797C0383628A8723DEBADA827B5B02.mft (raw, json) Hash identifier: lzd3U25eheYnpHldYOVbAjSHXboensOluIWDE4KFMG8= Subject key identifier: F8:FC:05:BA:71:20:2E:AC:EE:FF:5A:CC:1C:71:EB:46:A7:2F:8F:32 Authority key identifier: 1B:A1:AD:D7:34:79:7C:03:83:62:8A:87:23:DE:BA:DA:82:7B:5B:02 Certificate issuer: /CN=1BA1ADD734797C0383628A8723DEBADA827B5B02 Certificate serial: 2A529C05CD78ADCC847FA87CD81C679381379AD2 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1BA1ADD734797C0383628A8723DEBADA827B5B02.cer Subject info access: rsync://repo-rpki.idnic.net/repo/7bed83bd-8986-4429-a011-ac590724d586/0/1BA1ADD734797C0383628A8723DEBADA827B5B02.mft Manifest number: 014A Signing time: Sun 25 Jan 2026 06:41:42 +0000 Manifest this update: Sun 25 Jan 2026 06:36:42 +0000 Manifest next update: Wed 28 Jan 2026 10:43:42 +0000 Files and hashes: 1: 1BA1ADD734797C0383628A8723DEBADA827B5B02.crl (hash: h3thFbABIRBoL4jY6LDpyNhanKuwTuHVSFYPwe+KLXQ=) 2: 323030313a6466313a316438303a3a2f34382d3438203d3e20313339333635.roa (hash: GA6rUIyaqIB58eM6Y3Tv2tAamvlNcofAYPow7jpjhqA=) 3: 3130332e3134312e3234352e302f32342d3234203d3e20313339333635.roa (hash: hjP0N7FVqxd5mdZscYDmp6xMH5tmWzueXb7HkGf6Xog=) 4: 3130332e3134312e3234342e302f32342d3234203d3e20313339333635.roa (hash: JKPKSxtNr4roaOU1GUo5PklwixfLAP/k426kY4JyNts=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/7bed83bd-8986-4429-a011-ac590724d586/0/1BA1ADD734797C0383628A8723DEBADA827B5B02.crl rsync://repo-rpki.idnic.net/repo/7bed83bd-8986-4429-a011-ac590724d586/0/1BA1ADD734797C0383628A8723DEBADA827B5B02.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1BA1ADD734797C0383628A8723DEBADA827B5B02.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 28 Jan 2026 10:43:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2a:52:9c:05:cd:78:ad:cc:84:7f:a8:7c:d8:1c:67:93:81:37:9a:d2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1BA1ADD734797C0383628A8723DEBADA827B5B02 Validity Not Before: Jan 25 06:36:42 2026 GMT Not After : Jan 28 10:43:42 2026 GMT Subject: CN=F8FC05BA71202EACEEFF5ACC1C71EB46A72F8F32 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:f2:f2:a3:36:2d:6a:c0:91:6c:de:ee:20:fc: 00:e9:e5:8e:83:99:0d:6a:4e:85:df:79:da:5d:02: a1:38:00:b5:38:9b:90:3d:16:b2:7f:06:9e:cc:14: 97:a9:ba:6d:9e:55:d3:55:89:2b:0a:10:39:56:72: 8b:b9:a7:61:15:58:f5:b2:33:db:d2:e2:24:e2:df: c2:d9:da:82:50:72:86:2c:d0:70:a9:d8:44:11:a2: 88:f0:15:09:f9:28:1a:fa:37:e8:13:14:7b:4d:3d: f0:bd:c0:7f:30:3a:e3:e4:dc:41:fc:bb:a4:cc:53: ef:fb:5a:51:22:ac:9a:b1:87:48:f3:2c:f8:40:7c: 0e:b7:c7:0c:5b:e1:f4:e5:31:ed:01:e2:29:65:37: 49:05:07:86:89:1a:16:ee:5c:6c:b1:cb:77:84:fd: aa:03:e6:d4:ab:8c:4f:d1:93:39:a1:08:cb:c1:23: 92:5f:46:13:e0:45:98:ce:fd:77:67:07:2d:b6:8e: 9f:21:99:5f:eb:44:74:f1:bf:c3:cc:6d:c2:e2:85: 57:20:8c:c5:52:7f:fc:59:e6:42:a7:91:43:d5:14: 1d:75:cd:ec:3c:5d:f4:eb:5c:f5:45:e3:87:3a:f9: f2:36:43:4a:3d:00:bd:9b:1e:5c:90:c6:37:21:e1: 21:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:FC:05:BA:71:20:2E:AC:EE:FF:5A:CC:1C:71:EB:46:A7:2F:8F:32 X509v3 Authority Key Identifier: keyid:1B:A1:AD:D7:34:79:7C:03:83:62:8A:87:23:DE:BA:DA:82:7B:5B:02 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/7bed83bd-8986-4429-a011-ac590724d586/0/1BA1ADD734797C0383628A8723DEBADA827B5B02.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1BA1ADD734797C0383628A8723DEBADA827B5B02.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7bed83bd-8986-4429-a011-ac590724d586/0/1BA1ADD734797C0383628A8723DEBADA827B5B02.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a4:0c:1b:8f:b1:34:9f:90:5a:5f:39:f9:0e:b0:06:bd:cf:0b: fd:c2:de:25:78:3e:ec:fb:ca:85:ee:e9:41:95:de:55:5f:6a: 9c:0d:b2:83:bc:9f:2d:6d:0f:23:75:ca:0a:d5:34:87:46:fa: c0:6a:c6:e6:35:89:06:c1:89:91:8b:6e:11:e9:e9:56:b9:da: 0d:85:27:77:d5:4f:dd:9f:21:f9:7d:71:c2:a8:a5:82:4a:4b: 87:1d:c6:15:37:fa:08:3c:3e:b0:6d:f8:e6:a6:68:bf:44:3f: be:9b:21:8b:02:33:11:c5:1c:c7:a3:12:9f:f5:17:97:ba:b1: 19:55:d4:ce:d8:28:13:61:ed:96:72:72:26:ea:a7:56:f5:b0: 24:eb:78:15:c6:04:6d:20:26:13:d2:00:1b:34:c8:f9:7c:f6: 29:9b:c6:00:6f:d8:95:50:95:15:16:1e:f5:46:dc:21:5d:d5: 93:db:52:7a:52:b0:cf:1f:a8:d9:cc:9f:41:f2:96:7f:e8:27: 5b:cf:bb:7b:71:8c:61:b2:10:6c:91:51:34:46:57:31:d7:71: df:a6:80:1d:0d:22:52:ba:d4:62:b8:eb:85:41:c5:f3:8e:63: b3:74:80:86:99:4b:e2:59:43:b2:13:53:46:8b:f0:63:aa:be: 8c:3c:0b:d4 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUKlKcBc14rcyEf6h82Bxnk4E3mtIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUJBMUFERDczNDc5N0MwMzgzNjI4QTg3MjNERUJBREE4 MjdCNUIwMjAeFw0yNjAxMjUwNjM2NDJaFw0yNjAxMjgxMDQzNDJaMDMxMTAvBgNV BAMTKEY4RkMwNUJBNzEyMDJFQUNFRUZGNUFDQzFDNzFFQjQ2QTcyRjhGMzIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCZ8vKjNi1qwJFs3u4g/ADp5Y6D mQ1qToXfedpdAqE4ALU4m5A9FrJ/Bp7MFJepum2eVdNViSsKEDlWcou5p2EVWPWy M9vS4iTi38LZ2oJQcoYs0HCp2EQRoojwFQn5KBr6N+gTFHtNPfC9wH8wOuPk3EH8 u6TMU+/7WlEirJqxh0jzLPhAfA63xwxb4fTlMe0B4illN0kFB4aJGhbuXGyxy3eE /aoD5tSrjE/RkzmhCMvBI5JfRhPgRZjO/XdnBy22jp8hmV/rRHTxv8PMbcLihVcg jMVSf/xZ5kKnkUPVFB11zew8XfTrXPVF44c6+fI2Q0o9AL2bHlyQxjch4SEHAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU+PwFunEgLqzu/1rMHHHrRqcvjzIwHwYDVR0j BBgwFoAUG6Gt1zR5fAODYoqHI9662oJ7WwIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 YmVkODNiZC04OTg2LTQ0MjktYTAxMS1hYzU5MDcyNGQ1ODYvMC8xQkExQURENzM0 Nzk3QzAzODM2MjhBODcyM0RFQkFEQTgyN0I1QjAyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMUJBMUFERDczNDc5N0MwMzgzNjI4QTg3MjNERUJBREE4MjdC NUIwMi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vN2JlZDgzYmQtODk4Ni00NDI5LWEw MTEtYWM1OTA3MjRkNTg2LzAvMUJBMUFERDczNDc5N0MwMzgzNjI4QTg3MjNERUJB REE4MjdCNUIwMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKQMG4+xNJ+QWl85+Q6wBr3PC/3C3iV4Puz7 yoXu6UGV3lVfapwNsoO8ny1tDyN1ygrVNIdG+sBqxuY1iQbBiZGLbhHp6Va52g2F J3fVT92fIfl9ccKopYJKS4cdxhU3+gg8PrBt+OamaL9EP76bIYsCMxHFHMejEp/1 F5e6sRlV1M7YKBNh7ZZycibqp1b1sCTreBXGBG0gJhPSABs0yPl89imbxgBv2JVQ lRUWHvVG3CFd1ZPbUnpSsM8fqNnMn0Hyln/oJ1vPu3txjGGyEGyRUTRGVzHXcd+m gB0NIlK61GK464VBxfOOY7N0gIaZS+JZQ7ITU0aL8GOqvow8C9Q= -----END CERTIFICATE-----Generated at Mon Jan 26 02:48:10 2026 by rpki-client