This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/7cd323be-837d-4244-846c-7d2393a9a009/0/B0928A45D014D8D5FAD50314E828086F12B15610.mft File: B0928A45D014D8D5FAD50314E828086F12B15610.mft (raw, json) Hash identifier: vXT60tjhf5j1Rm2MGpVl8YqYKP7xsh/tr5B5/xJ6dlo= Subject key identifier: 21:F3:E3:34:61:6F:84:24:76:B8:3B:10:2D:9E:CA:21:4B:F9:D2:9E Authority key identifier: B0:92:8A:45:D0:14:D8:D5:FA:D5:03:14:E8:28:08:6F:12:B1:56:10 Certificate issuer: /CN=B0928A45D014D8D5FAD50314E828086F12B15610 Certificate serial: 5189B3F09BF4B56CC66D8B145903D36F2D17E616 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B0928A45D014D8D5FAD50314E828086F12B15610.cer Subject info access: rsync://repo-rpki.idnic.net/repo/7cd323be-837d-4244-846c-7d2393a9a009/0/B0928A45D014D8D5FAD50314E828086F12B15610.mft Manifest number: 0346 Signing time: Sat 24 Jan 2026 22:01:27 +0000 Manifest this update: Sat 24 Jan 2026 21:56:27 +0000 Manifest next update: Wed 28 Jan 2026 01:22:27 +0000 Files and hashes: 1: 3230322e3132352e38322e302f32332d3233203d3e20313430343433.roa (hash: g4b6/Xa0b41J+1gc8Xz+JaVY6mTt5QNosbt82K9ZCLY=) 2: 3230322e3132352e38322e302f32342d3234203d3e20313430343433.roa (hash: svi5IuXnIA+13Wc0eQrV3WQdaOBiVClli1PIWM+ewGc=) 3: 3230322e37302e3133322e302f32342d3234203d3e20313430343433.roa (hash: hnSe2L9heULKYvVeefFY6CeCDXE6iTWu+s4r/qCo/4o=) 4: 3230322e3132352e38332e302f32342d3234203d3e20313430343433.roa (hash: Ky8MrLU9AvVMvZfrLkoaRO/9X/2qSweH3weFbcGoV3c=) 5: 3230322e37302e3133332e302f32342d3234203d3e20313430343433.roa (hash: wdtK/qmLPSYK98usl8We2OAmclE1Y5QskILTtOqsrh0=) 6: B0928A45D014D8D5FAD50314E828086F12B15610.crl (hash: ByXEWd2/0KluNIFEL2P1jYa+IcYhMn+QkFSKSOKzZxU=) 7: 3230322e37302e3133322e302f32332d3233203d3e20313430343433.roa (hash: unxNSSNtfbW/QtJSHv1+Jppsd16Z88+qlZSg2ZXLUc0=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/7cd323be-837d-4244-846c-7d2393a9a009/0/B0928A45D014D8D5FAD50314E828086F12B15610.crl rsync://repo-rpki.idnic.net/repo/7cd323be-837d-4244-846c-7d2393a9a009/0/B0928A45D014D8D5FAD50314E828086F12B15610.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B0928A45D014D8D5FAD50314E828086F12B15610.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 28 Jan 2026 01:22:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 51:89:b3:f0:9b:f4:b5:6c:c6:6d:8b:14:59:03:d3:6f:2d:17:e6:16 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B0928A45D014D8D5FAD50314E828086F12B15610 Validity Not Before: Jan 24 21:56:27 2026 GMT Not After : Jan 28 01:22:27 2026 GMT Subject: CN=21F3E334616F842476B83B102D9ECA214BF9D29E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:dd:33:c7:da:6f:4f:1f:b3:f0:d1:b4:5f:c3: f2:df:aa:a4:17:63:9e:ea:91:fc:ac:06:40:37:a2: 3d:82:81:f3:55:a5:af:8d:5e:55:1a:a0:99:fb:62: cb:54:65:60:ce:d1:4d:3c:bd:73:7e:eb:df:9c:0a: ed:c1:96:3c:92:a9:39:7e:80:14:43:12:4a:2f:15: 48:ab:1f:b3:d0:21:9d:a2:66:0c:ef:f7:79:a5:a9: e4:cc:3f:79:cf:01:d7:61:9d:16:bd:48:9c:50:86: 8b:e4:1f:00:48:46:11:dd:a8:93:8f:63:8a:10:d8: 4e:c5:a1:1d:64:2a:51:86:e1:98:c8:5d:02:36:7a: 10:ff:de:ba:45:04:a9:ac:ff:d3:7b:87:76:7e:34: 51:1a:d3:84:40:2c:76:3d:c6:9c:d9:21:28:27:2f: 2e:85:ab:f1:c8:1e:bd:50:db:e3:f9:33:a8:53:07: 54:39:d9:cb:62:27:2c:b8:41:56:a1:1f:a9:6f:16: b6:a1:7d:ef:5d:3d:8c:8a:ae:99:14:23:e4:8b:35: 15:cf:6a:83:c9:e4:a2:f6:25:ea:74:e7:f9:d3:37: 9f:bf:21:f9:c2:3c:cb:5c:54:86:f9:9a:05:a3:ba: 9b:be:37:78:c7:9e:0c:3e:42:45:10:d3:37:00:2b: 15:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:F3:E3:34:61:6F:84:24:76:B8:3B:10:2D:9E:CA:21:4B:F9:D2:9E X509v3 Authority Key Identifier: keyid:B0:92:8A:45:D0:14:D8:D5:FA:D5:03:14:E8:28:08:6F:12:B1:56:10 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/7cd323be-837d-4244-846c-7d2393a9a009/0/B0928A45D014D8D5FAD50314E828086F12B15610.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B0928A45D014D8D5FAD50314E828086F12B15610.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7cd323be-837d-4244-846c-7d2393a9a009/0/B0928A45D014D8D5FAD50314E828086F12B15610.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ad:f7:1b:d6:26:65:41:7d:6d:f2:ae:0b:92:d7:d8:f6:d0:48: 2a:40:f3:82:40:02:a8:52:7e:4c:d0:92:87:f4:88:62:db:65: 94:50:e9:f0:f5:58:18:1e:5a:42:50:ea:65:03:ec:31:83:a9: 58:18:5b:b0:39:ac:71:10:7d:db:98:2d:53:de:fe:11:a9:64: 12:63:70:be:74:f9:13:b9:13:5b:f2:46:a9:ee:4e:34:40:c4: 5a:7f:4b:c7:e6:1b:40:49:0c:9e:4b:c4:c7:fa:32:0b:e2:68: 5d:97:d5:db:31:03:5a:09:a4:a1:7c:ee:99:7b:6c:29:12:41: aa:7c:fc:f9:83:b7:a1:5c:72:da:99:fe:8c:32:ac:88:c1:90: 0e:d9:e3:c9:72:c0:30:1e:17:94:9f:6c:62:76:df:f5:d0:0a: 7e:ae:f3:f4:30:95:67:f8:e5:63:e1:77:c8:24:45:04:23:14: e1:a5:5c:bc:9c:6e:c8:79:ed:87:16:b8:d9:99:f5:cb:3d:88: 67:9c:03:83:98:d4:37:ac:42:e9:53:bc:75:a1:c7:10:63:1a: 5e:a7:be:b6:38:ac:ad:34:00:52:f6:5e:57:47:9f:67:48:1a: d7:f4:48:7d:ed:80:a5:1b:59:6a:85:3f:62:82:a7:7f:e5:9f: 9a:ba:00:87 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUUYmz8Jv0tWzGbYsUWQPTby0X5hYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjA5MjhBNDVEMDE0RDhENUZBRDUwMzE0RTgyODA4NkYx MkIxNTYxMDAeFw0yNjAxMjQyMTU2MjdaFw0yNjAxMjgwMTIyMjdaMDMxMTAvBgNV BAMTKDIxRjNFMzM0NjE2Rjg0MjQ3NkI4M0IxMDJEOUVDQTIxNEJGOUQyOUUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC53TPH2m9PH7Pw0bRfw/LfqqQX Y57qkfysBkA3oj2CgfNVpa+NXlUaoJn7YstUZWDO0U08vXN+69+cCu3BljySqTl+ gBRDEkovFUirH7PQIZ2iZgzv93mlqeTMP3nPAddhnRa9SJxQhovkHwBIRhHdqJOP Y4oQ2E7FoR1kKlGG4ZjIXQI2ehD/3rpFBKms/9N7h3Z+NFEa04RALHY9xpzZISgn Ly6Fq/HIHr1Q2+P5M6hTB1Q52ctiJyy4QVahH6lvFrahfe9dPYyKrpkUI+SLNRXP aoPJ5KL2Jep05/nTN5+/IfnCPMtcVIb5mgWjupu+N3jHngw+QkUQ0zcAKxUxAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUIfPjNGFvhCR2uDsQLZ7KIUv50p4wHwYDVR0j BBgwFoAUsJKKRdAU2NX61QMU6CgIbxKxVhAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 Y2QzMjNiZS04MzdkLTQyNDQtODQ2Yy03ZDIzOTNhOWEwMDkvMC9CMDkyOEE0NUQw MTREOEQ1RkFENTAzMTRFODI4MDg2RjEyQjE1NjEwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQjA5MjhBNDVEMDE0RDhENUZBRDUwMzE0RTgyODA4NkYxMkIx NTYxMC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vN2NkMzIzYmUtODM3ZC00MjQ0LTg0 NmMtN2QyMzkzYTlhMDA5LzAvQjA5MjhBNDVEMDE0RDhENUZBRDUwMzE0RTgyODA4 NkYxMkIxNTYxMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAK33G9YmZUF9bfKuC5LX2PbQSCpA84JAAqhS fkzQkof0iGLbZZRQ6fD1WBgeWkJQ6mUD7DGDqVgYW7A5rHEQfduYLVPe/hGpZBJj cL50+RO5E1vyRqnuTjRAxFp/S8fmG0BJDJ5LxMf6MgviaF2X1dsxA1oJpKF87pl7 bCkSQap8/PmDt6FcctqZ/owyrIjBkA7Z48lywDAeF5SfbGJ23/XQCn6u8/QwlWf4 5WPhd8gkRQQjFOGlXLycbsh57YcWuNmZ9cs9iGecA4OY1DesQulTvHWhxxBjGl6n vrY4rK00AFL2XldHn2dIGtf0SH3tgKUbWWqFP2KCp3/ln5q6AIc= -----END CERTIFICATE-----Generated at Sun Jan 25 18:36:38 2026 by rpki-client