This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/7d02a58d-b958-4219-86d3-61e43cee319a/0/AA90F6A6378710CD695B4CC742651F235E503C5B.mft File: AA90F6A6378710CD695B4CC742651F235E503C5B.mft (raw, json) Hash identifier: JY3ZvJhRRoA5lf59SXlcuiDmADbF6KeaTN60ptc3/qg= Subject key identifier: BE:68:B7:6B:4D:19:DD:70:97:D5:39:B3:14:57:45:B5:BA:27:3C:9D Authority key identifier: AA:90:F6:A6:37:87:10:CD:69:5B:4C:C7:42:65:1F:23:5E:50:3C:5B Certificate issuer: /CN=AA90F6A6378710CD695B4CC742651F235E503C5B Certificate serial: 5E7FEC7A92AC84C4352DC1398177D51D79E4A526 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AA90F6A6378710CD695B4CC742651F235E503C5B.cer Subject info access: rsync://repo-rpki.idnic.net/repo/7d02a58d-b958-4219-86d3-61e43cee319a/0/AA90F6A6378710CD695B4CC742651F235E503C5B.mft Manifest number: 0162 Signing time: Sun 25 Jan 2026 16:10:48 +0000 Manifest this update: Sun 25 Jan 2026 16:05:48 +0000 Manifest next update: Wed 28 Jan 2026 21:30:48 +0000 Files and hashes: 1: 3138302e3133312e3132382e302f32342d3234203d3e20313532303136.roa (hash: VFWMiazWmoGEVLtcrf1dTJMRZzx900Rx4cZwTnY4Hao=) 2: AA90F6A6378710CD695B4CC742651F235E503C5B.crl (hash: gbH5/GpH/quwqg3OOMB9S6BQCrWXyTvNVEWbUSZ8NjI=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/7d02a58d-b958-4219-86d3-61e43cee319a/0/AA90F6A6378710CD695B4CC742651F235E503C5B.crl rsync://repo-rpki.idnic.net/repo/7d02a58d-b958-4219-86d3-61e43cee319a/0/AA90F6A6378710CD695B4CC742651F235E503C5B.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AA90F6A6378710CD695B4CC742651F235E503C5B.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 28 Jan 2026 14:00:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5e:7f:ec:7a:92:ac:84:c4:35:2d:c1:39:81:77:d5:1d:79:e4:a5:26 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AA90F6A6378710CD695B4CC742651F235E503C5B Validity Not Before: Jan 25 16:05:48 2026 GMT Not After : Jan 28 21:30:48 2026 GMT Subject: CN=BE68B76B4D19DD7097D539B3145745B5BA273C9D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:d8:4a:49:8e:04:5f:44:52:18:8b:f7:88:21: c4:5f:70:f8:d8:d7:fd:3d:73:fc:ce:3d:c7:75:fd: e3:7a:22:6d:33:29:45:68:6a:2c:36:f9:3e:d9:ea: 1a:a4:11:7a:31:e1:10:0e:a1:48:30:66:61:cd:7e: 78:4c:46:fb:8b:af:9d:e6:3a:d7:7b:5a:ba:f3:7c: e5:eb:b2:ee:67:97:aa:4f:65:90:d2:75:a4:cd:3c: 1a:43:84:f2:bc:8b:8a:44:10:92:90:5c:6c:58:d6: e6:89:f8:0c:53:d1:dd:9c:ad:b1:25:21:79:ce:c1: f6:26:3f:28:0f:14:1b:f6:bb:51:f9:98:73:dd:87: ef:22:07:95:9b:91:a8:0e:a0:62:76:4b:33:0e:38: d6:ee:bc:bd:a2:30:17:0c:0d:ce:f8:fa:14:2b:60: 92:5e:ad:05:ad:95:05:ae:18:87:a7:b4:14:b5:ee: 28:eb:67:09:db:23:c5:cf:93:ca:7e:51:97:9e:56: 37:46:2d:57:44:42:97:e9:12:75:e8:3d:c2:a7:ae: df:44:a3:e8:df:f5:06:6a:e2:3f:14:4e:be:c5:4b: b4:a1:c2:85:a1:b3:7d:31:2d:b8:10:1b:a2:51:9e: 55:66:46:cc:c8:ed:a8:7d:35:96:b2:54:18:dd:04: 6b:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BE:68:B7:6B:4D:19:DD:70:97:D5:39:B3:14:57:45:B5:BA:27:3C:9D X509v3 Authority Key Identifier: keyid:AA:90:F6:A6:37:87:10:CD:69:5B:4C:C7:42:65:1F:23:5E:50:3C:5B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/7d02a58d-b958-4219-86d3-61e43cee319a/0/AA90F6A6378710CD695B4CC742651F235E503C5B.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AA90F6A6378710CD695B4CC742651F235E503C5B.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7d02a58d-b958-4219-86d3-61e43cee319a/0/AA90F6A6378710CD695B4CC742651F235E503C5B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3c:4a:33:66:0a:4d:6d:6e:d9:c8:10:34:5c:d4:63:34:2f:b1: 1c:58:55:5d:17:80:eb:1a:25:16:e6:94:ee:c6:df:36:24:37: a7:49:e4:0d:42:cb:ad:ae:1e:97:31:f7:e6:d5:8f:e9:a9:6b: 7c:e1:00:bb:0c:2a:c5:99:75:64:42:fd:e4:96:19:3d:7f:ba: 02:19:d1:a4:30:2f:77:50:4d:1c:92:43:f9:c1:ef:3c:b0:6c: fd:61:3a:c0:ef:b8:7c:9d:8e:40:c7:de:9f:e9:44:3b:97:65: 4d:b1:57:a4:aa:8a:08:fa:67:81:be:98:2e:49:3b:11:73:d5: 9f:49:db:f5:c7:51:ad:0a:ca:71:da:8a:ad:20:44:01:b9:21: 44:7b:f6:44:e1:19:02:15:cf:df:c0:4f:bf:79:37:ac:9b:8b: b6:13:35:5c:2b:61:bf:11:fa:77:32:29:cc:cd:14:c0:c8:91: 19:6c:49:c4:6f:81:4b:b6:30:f7:28:b0:cf:e2:2d:26:f1:bc: 6a:71:58:ef:27:ea:eb:9d:bf:c3:cd:ab:b8:07:9a:a6:47:ee: d2:58:a6:a3:68:32:d7:de:bf:74:4f:c3:1b:5f:ce:02:b9:83: 8e:45:4b:6a:9c:6d:19:65:ed:0b:cb:67:82:39:8c:5b:01:cd: ea:80:15:34 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUXn/sepKshMQ1LcE5gXfVHXnkpSYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUE5MEY2QTYzNzg3MTBDRDY5NUI0Q0M3NDI2NTFGMjM1 RTUwM0M1QjAeFw0yNjAxMjUxNjA1NDhaFw0yNjAxMjgyMTMwNDhaMDMxMTAvBgNV BAMTKEJFNjhCNzZCNEQxOURENzA5N0Q1MzlCMzE0NTc0NUI1QkEyNzNDOUQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCo2EpJjgRfRFIYi/eIIcRfcPjY 1/09c/zOPcd1/eN6Im0zKUVoaiw2+T7Z6hqkEXox4RAOoUgwZmHNfnhMRvuLr53m Otd7WrrzfOXrsu5nl6pPZZDSdaTNPBpDhPK8i4pEEJKQXGxY1uaJ+AxT0d2crbEl IXnOwfYmPygPFBv2u1H5mHPdh+8iB5WbkagOoGJ2SzMOONbuvL2iMBcMDc74+hQr YJJerQWtlQWuGIentBS17ijrZwnbI8XPk8p+UZeeVjdGLVdEQpfpEnXoPcKnrt9E o+jf9QZq4j8UTr7FS7ShwoWhs30xLbgQG6JRnlVmRszI7ah9NZayVBjdBGvJAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUvmi3a00Z3XCX1TmzFFdFtbonPJ0wHwYDVR0j BBgwFoAUqpD2pjeHEM1pW0zHQmUfI15QPFswDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 ZDAyYTU4ZC1iOTU4LTQyMTktODZkMy02MWU0M2NlZTMxOWEvMC9BQTkwRjZBNjM3 ODcxMENENjk1QjRDQzc0MjY1MUYyMzVFNTAzQzVCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQUE5MEY2QTYzNzg3MTBDRDY5NUI0Q0M3NDI2NTFGMjM1RTUw M0M1Qi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vN2QwMmE1OGQtYjk1OC00MjE5LTg2 ZDMtNjFlNDNjZWUzMTlhLzAvQUE5MEY2QTYzNzg3MTBDRDY5NUI0Q0M3NDI2NTFG MjM1RTUwM0M1Qi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADxKM2YKTW1u2cgQNFzUYzQvsRxYVV0XgOsa JRbmlO7G3zYkN6dJ5A1Cy62uHpcx9+bVj+mpa3zhALsMKsWZdWRC/eSWGT1/ugIZ 0aQwL3dQTRySQ/nB7zywbP1hOsDvuHydjkDH3p/pRDuXZU2xV6Sqigj6Z4G+mC5J OxFz1Z9J2/XHUa0KynHaiq0gRAG5IUR79kThGQIVz9/AT795N6ybi7YTNVwrYb8R +ncyKczNFMDIkRlsScRvgUu2MPcosM/iLSbxvGpxWO8n6uudv8PNq7gHmqZH7tJY pqNoMtfev3RPwxtfzgK5g45FS2qcbRll7QvLZ4I5jFsBzeqAFTQ= -----END CERTIFICATE-----Generated at Mon Jan 26 01:11:37 2026 by rpki-client