This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/7f3404e6-bb2a-44b0-bede-a8b35014612d/0/0104E70C07F39CF9F3B1D592DF9043B5EABBD171.mft File: 0104E70C07F39CF9F3B1D592DF9043B5EABBD171.mft (raw, json) Hash identifier: CEfWcNz7thOhft6sOkdk1mCHKxsSpa7nCF1S6ev+9vA= Subject key identifier: 38:A8:01:68:AD:0C:68:A0:B0:E1:8D:5D:4B:11:47:53:BC:1B:86:71 Authority key identifier: 01:04:E7:0C:07:F3:9C:F9:F3:B1:D5:92:DF:90:43:B5:EA:BB:D1:71 Certificate issuer: /CN=0104E70C07F39CF9F3B1D592DF9043B5EABBD171 Certificate serial: 0AD2DD1D7E7E9F6C90D3F9AEABCAAE16E516EDA7 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0104E70C07F39CF9F3B1D592DF9043B5EABBD171.cer Subject info access: rsync://repo-rpki.idnic.net/repo/7f3404e6-bb2a-44b0-bede-a8b35014612d/0/0104E70C07F39CF9F3B1D592DF9043B5EABBD171.mft Manifest number: 0119 Signing time: Sat 24 Jan 2026 05:11:56 +0000 Manifest this update: Sat 24 Jan 2026 05:06:56 +0000 Manifest next update: Tue 27 Jan 2026 10:55:56 +0000 Files and hashes: 1: 0104E70C07F39CF9F3B1D592DF9043B5EABBD171.crl (hash: j9H4qdyX32Q2eeBDUzFptz7BcL/H+dmDKeY5lemVf7s=) 2: 3130332e3130382e3139302e302f32342d3234203d3e20313336313031.roa (hash: T2D7Ik57LWitANbUBj1vncC8ew04uMky94+sr3cdwuM=) 3: 3130332e3130382e3230312e302f32342d3234203d3e20313336313031.roa (hash: ACG9hajuMFT0+8svEGQ07Y/XNV8chpJuNQjxcUKetA0=) 4: 3130332e39302e36342e302f32342d3234203d3e20313336313031.roa (hash: MTpni3DELnbETe3zjikeTT4U4vK8pVGyjaC6JDaZsjM=) 5: 3130332e3130382e3230302e302f32342d3234203d3e20313336313031.roa (hash: IcKfPPs3w6Xh7zwwD7slSQo8D2QxmEcAjDYuyZL8Emc=) 6: 323030313a6466303a643730303a3a2f34382d3438203d3e20313336313031.roa (hash: XbVDn1xPJRDbPissRw2Bd3CFuuLlmjdc5fNqxvpM/iY=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/7f3404e6-bb2a-44b0-bede-a8b35014612d/0/0104E70C07F39CF9F3B1D592DF9043B5EABBD171.crl rsync://repo-rpki.idnic.net/repo/7f3404e6-bb2a-44b0-bede-a8b35014612d/0/0104E70C07F39CF9F3B1D592DF9043B5EABBD171.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0104E70C07F39CF9F3B1D592DF9043B5EABBD171.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 27 Jan 2026 10:55:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0a:d2:dd:1d:7e:7e:9f:6c:90:d3:f9:ae:ab:ca:ae:16:e5:16:ed:a7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0104E70C07F39CF9F3B1D592DF9043B5EABBD171 Validity Not Before: Jan 24 05:06:56 2026 GMT Not After : Jan 27 10:55:56 2026 GMT Subject: CN=38A80168AD0C68A0B0E18D5D4B114753BC1B8671 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:8c:43:0f:f8:eb:87:f8:6c:92:d2:bc:e7:c0: 6f:0d:2d:1d:6b:96:60:3f:a4:c6:31:51:c8:b9:40: ae:cd:72:a4:cc:54:d8:a9:60:b1:b8:9b:44:64:8d: b5:40:94:f5:dd:f3:9c:c9:4e:d4:1b:92:e6:15:24: 5d:b4:24:0d:99:c1:46:7f:07:02:81:1a:aa:9c:e7: 46:f4:c7:9e:e9:20:13:63:a9:f5:4f:be:f4:c7:27: 12:01:62:84:8c:74:bc:55:bb:99:32:6d:d8:1e:e9: 66:9f:60:62:75:99:e0:75:1d:75:fd:8e:63:a9:da: 81:31:9f:b5:ea:13:04:32:45:21:b9:90:f1:fd:d1: a2:ae:fe:3a:98:1c:77:e6:27:bd:c1:8b:1d:14:43: 85:f9:6e:ad:1a:ec:0d:23:aa:ad:64:15:dc:6f:3d: 2a:49:c8:a6:bc:de:a2:90:85:54:20:30:5d:13:91: 2a:c9:c3:b3:1a:8f:f5:fd:ea:3e:1f:e4:c3:ea:a6: d4:8d:94:36:df:c2:4c:14:ff:a0:eb:43:74:50:52: a5:f1:58:b8:d8:78:14:44:7f:c0:4e:1b:10:40:ac: 9d:06:91:a0:6e:8a:86:ed:60:e5:85:e4:a5:62:f7: c9:d3:49:62:66:a1:97:01:d5:38:27:b2:e1:1e:5a: c4:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:A8:01:68:AD:0C:68:A0:B0:E1:8D:5D:4B:11:47:53:BC:1B:86:71 X509v3 Authority Key Identifier: keyid:01:04:E7:0C:07:F3:9C:F9:F3:B1:D5:92:DF:90:43:B5:EA:BB:D1:71 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/7f3404e6-bb2a-44b0-bede-a8b35014612d/0/0104E70C07F39CF9F3B1D592DF9043B5EABBD171.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0104E70C07F39CF9F3B1D592DF9043B5EABBD171.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7f3404e6-bb2a-44b0-bede-a8b35014612d/0/0104E70C07F39CF9F3B1D592DF9043B5EABBD171.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 00:b8:98:92:35:af:3a:46:63:0f:1a:79:3d:0f:ec:8c:fe:c5: fc:f8:cc:a9:8f:f3:28:2d:f6:1e:e0:20:25:47:a5:6a:36:7a: d4:92:fb:e6:5b:ca:70:48:a1:cd:20:1b:46:55:1b:d0:e1:b4: 63:cf:86:2c:e0:5b:37:a7:cf:ec:75:00:34:58:09:15:5d:66: d9:6e:6c:54:93:45:f9:3f:b3:45:5d:68:ba:2e:97:66:21:a9: 68:83:a5:6a:1e:13:53:52:66:8c:c5:32:a9:ef:c2:16:a4:f5: 29:67:a9:f3:88:42:b7:6e:30:fb:c2:70:97:5e:65:f7:a0:81: 44:2e:f9:fa:37:54:42:c1:95:86:61:37:04:25:5a:90:9d:89: 9c:f1:d5:b3:c8:89:5e:9a:05:fb:7e:ea:0e:61:0c:7e:cc:2e: ae:4f:e3:53:55:35:e9:1f:b6:50:8a:88:f9:8a:99:06:20:43: 55:9f:cc:9d:95:20:a1:d9:c5:7a:89:49:9a:94:fa:0e:dd:ee: db:29:fe:2b:56:ca:6a:02:86:ac:ed:c8:55:d6:14:50:f0:85: 4f:ae:7b:33:2c:37:e5:57:e0:64:04:80:10:c9:7a:08:38:c8: 3b:ba:37:79:01:cd:c5:ce:ab:70:bb:9c:55:41:46:0d:c8:51: ad:d9:47:f0 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUCtLdHX5+n2yQ0/muq8quFuUW7acwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDEwNEU3MEMwN0YzOUNGOUYzQjFENTkyREY5MDQzQjVF QUJCRDE3MTAeFw0yNjAxMjQwNTA2NTZaFw0yNjAxMjcxMDU1NTZaMDMxMTAvBgNV BAMTKDM4QTgwMTY4QUQwQzY4QTBCMEUxOEQ1RDRCMTE0NzUzQkMxQjg2NzEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCrjEMP+OuH+GyS0rznwG8NLR1r lmA/pMYxUci5QK7NcqTMVNipYLG4m0RkjbVAlPXd85zJTtQbkuYVJF20JA2ZwUZ/ BwKBGqqc50b0x57pIBNjqfVPvvTHJxIBYoSMdLxVu5kybdge6WafYGJ1meB1HXX9 jmOp2oExn7XqEwQyRSG5kPH90aKu/jqYHHfmJ73Bix0UQ4X5bq0a7A0jqq1kFdxv PSpJyKa83qKQhVQgMF0TkSrJw7Maj/X96j4f5MPqptSNlDbfwkwU/6DrQ3RQUqXx WLjYeBREf8BOGxBArJ0GkaBuiobtYOWF5KVi98nTSWJmoZcB1TgnsuEeWsTRAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUOKgBaK0MaKCw4Y1dSxFHU7wbhnEwHwYDVR0j BBgwFoAUAQTnDAfznPnzsdWS35BDteq70XEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 ZjM0MDRlNi1iYjJhLTQ0YjAtYmVkZS1hOGIzNTAxNDYxMmQvMC8wMTA0RTcwQzA3 RjM5Q0Y5RjNCMUQ1OTJERjkwNDNCNUVBQkJEMTcxLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMDEwNEU3MEMwN0YzOUNGOUYzQjFENTkyREY5MDQzQjVFQUJC RDE3MS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vN2YzNDA0ZTYtYmIyYS00NGIwLWJl ZGUtYThiMzUwMTQ2MTJkLzAvMDEwNEU3MEMwN0YzOUNGOUYzQjFENTkyREY5MDQz QjVFQUJCRDE3MS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAC4mJI1rzpGYw8aeT0P7Iz+xfz4zKmP8ygt 9h7gICVHpWo2etSS++ZbynBIoc0gG0ZVG9DhtGPPhizgWzenz+x1ADRYCRVdZtlu bFSTRfk/s0VdaLoul2YhqWiDpWoeE1NSZozFMqnvwhak9SlnqfOIQrduMPvCcJde ZfeggUQu+fo3VELBlYZhNwQlWpCdiZzx1bPIiV6aBft+6g5hDH7MLq5P41NVNekf tlCKiPmKmQYgQ1WfzJ2VIKHZxXqJSZqU+g7d7tsp/itWymoChqztyFXWFFDwhU+u ezMsN+VX4GQEgBDJegg4yDu6N3kBzcXOq3C7nFVBRg3IUa3ZR/A= -----END CERTIFICATE-----Generated at Mon Jan 26 01:09:49 2026 by rpki-client