This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/80db0dec-f49a-4e7c-856b-b1f0540b1e25/0/32F0F1CEAB608E66E561433AF6CD9BE12F5602E5.mft File: 32F0F1CEAB608E66E561433AF6CD9BE12F5602E5.mft (raw, json) Hash identifier: DMEwvmhLIUqN51LsNqOa9nd00rZdcpdm/HFcigPW2QA= Subject key identifier: B7:8C:57:AB:A9:22:D6:63:21:40:B7:E2:69:39:5B:CA:59:B1:79:C0 Authority key identifier: 32:F0:F1:CE:AB:60:8E:66:E5:61:43:3A:F6:CD:9B:E1:2F:56:02:E5 Certificate issuer: /CN=32F0F1CEAB608E66E561433AF6CD9BE12F5602E5 Certificate serial: 2BD4864F0C4B26ADA0CC71A90611223C522F6547 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/32F0F1CEAB608E66E561433AF6CD9BE12F5602E5.cer Subject info access: rsync://repo-rpki.idnic.net/repo/80db0dec-f49a-4e7c-856b-b1f0540b1e25/0/32F0F1CEAB608E66E561433AF6CD9BE12F5602E5.mft Manifest number: 0166 Signing time: Sat 24 Jan 2026 13:00:58 +0000 Manifest this update: Sat 24 Jan 2026 12:55:58 +0000 Manifest next update: Tue 27 Jan 2026 16:54:58 +0000 Files and hashes: 1: 3130332e3234342e3130372e302f32342d3234203d3e20313531353432.roa (hash: dSVS127lwWi8iK2HhNgRMx5903WtJScz9453drHDtJU=) 2: 3130332e3234342e3130362e302f32342d3234203d3e20313531353432.roa (hash: 6xlug0XUa7+3muEc0qZobCHKsLZsnvqmD4DOKyPgW3E=) 3: 3130332e3234342e3130362e302f32332d3234203d3e20313531353432.roa (hash: lvsTtW252Ri8zLP6LeQkBWwPzY993cpPilJUNYfFwDQ=) 4: 32F0F1CEAB608E66E561433AF6CD9BE12F5602E5.crl (hash: XWdhXJs5sslOlrWzyCDgnZi9seTm7919liQw06TEv3w=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/80db0dec-f49a-4e7c-856b-b1f0540b1e25/0/32F0F1CEAB608E66E561433AF6CD9BE12F5602E5.crl rsync://repo-rpki.idnic.net/repo/80db0dec-f49a-4e7c-856b-b1f0540b1e25/0/32F0F1CEAB608E66E561433AF6CD9BE12F5602E5.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/32F0F1CEAB608E66E561433AF6CD9BE12F5602E5.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 27 Jan 2026 16:54:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2b:d4:86:4f:0c:4b:26:ad:a0:cc:71:a9:06:11:22:3c:52:2f:65:47 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=32F0F1CEAB608E66E561433AF6CD9BE12F5602E5 Validity Not Before: Jan 24 12:55:58 2026 GMT Not After : Jan 27 16:54:58 2026 GMT Subject: CN=B78C57ABA922D6632140B7E269395BCA59B179C0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:c4:d3:88:ab:d4:3c:9e:fd:13:83:5b:7e:cb: bc:98:c3:68:f4:21:19:d2:da:c7:aa:97:c5:bd:f3: 8d:8b:e0:ab:d1:e2:4f:f7:a1:9e:07:a4:b4:66:21: ab:5f:cf:aa:d5:63:d9:cb:e1:2a:16:85:b1:fd:4a: b2:f3:03:d4:b6:d4:55:f8:b5:be:04:9f:3b:53:99: 9c:bc:1a:72:17:e4:83:52:fb:f9:18:9e:88:37:ba: 95:ff:65:10:93:0b:8c:ef:65:f0:c5:ec:db:2a:de: 28:99:4e:df:22:01:43:f2:f8:8a:5d:1e:c2:79:d4: 2f:2c:51:1c:4d:47:43:9b:2e:b1:90:a3:58:78:30: 1e:53:0d:4d:56:61:79:76:5a:ac:b0:dd:86:c7:6e: 0a:48:b5:bc:3c:b7:c7:2c:70:df:6d:aa:0b:68:bb: ca:c5:06:d7:d0:47:bd:f1:2b:6d:45:ab:34:d4:07: 16:37:15:0b:72:70:79:c4:e1:a6:12:da:1f:c5:e9: e6:fa:ce:9c:b8:fb:da:83:a1:ea:6b:fc:33:82:f7: 10:67:de:36:7a:12:cb:6e:75:5b:2b:b6:f6:03:b6: f4:3a:13:9f:dc:ca:d2:04:60:87:d5:c0:f8:dc:34: fe:32:72:64:b3:71:ec:a2:3e:96:37:a7:ab:09:6e: 50:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B7:8C:57:AB:A9:22:D6:63:21:40:B7:E2:69:39:5B:CA:59:B1:79:C0 X509v3 Authority Key Identifier: keyid:32:F0:F1:CE:AB:60:8E:66:E5:61:43:3A:F6:CD:9B:E1:2F:56:02:E5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/80db0dec-f49a-4e7c-856b-b1f0540b1e25/0/32F0F1CEAB608E66E561433AF6CD9BE12F5602E5.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/32F0F1CEAB608E66E561433AF6CD9BE12F5602E5.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/80db0dec-f49a-4e7c-856b-b1f0540b1e25/0/32F0F1CEAB608E66E561433AF6CD9BE12F5602E5.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1a:1d:c1:64:69:4a:a2:6a:88:4c:ac:21:a8:af:fd:cb:68:4a: 6b:c0:ad:be:04:a5:b3:61:87:1d:ea:02:d8:e4:96:1f:d3:38: f2:ef:37:85:18:40:b4:96:51:0e:f2:c0:8e:ba:0d:85:eb:2d: 49:d0:8b:22:03:07:59:69:f2:38:9c:6d:ef:ca:05:35:7c:ec: ce:d2:77:55:53:08:ae:b9:b9:c8:ac:b1:c3:7f:74:61:99:08: b4:8d:ec:aa:60:04:13:41:32:45:a4:9a:c1:bb:27:41:3a:a6: 88:e5:c1:fb:64:71:ee:3f:4f:d0:8a:58:be:a0:cb:ff:d9:96: 95:1e:70:2d:79:6e:fc:87:a6:8e:05:23:63:42:0c:c1:52:7e: 37:1c:dc:ef:d4:d9:aa:b6:ae:00:e9:dc:ac:52:8d:d3:25:51: 0e:ba:36:3e:3c:8c:c7:bc:19:b7:5c:23:b0:6f:33:4f:f5:f9: 67:d6:04:22:92:29:30:90:f0:06:1b:6f:97:8f:fd:69:2f:de: 12:01:30:d0:e4:69:15:38:38:cc:54:cd:c5:90:d7:31:a9:a4: 58:16:f5:ba:18:f6:e6:2f:2a:21:7c:b6:9c:a6:f3:87:dc:19: cb:19:88:7e:81:ec:bc:09:6d:e9:9c:30:05:3a:50:b8:52:17: e3:9c:2e:66 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUK9SGTwxLJq2gzHGpBhEiPFIvZUcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzJGMEYxQ0VBQjYwOEU2NkU1NjE0MzNBRjZDRDlCRTEy RjU2MDJFNTAeFw0yNjAxMjQxMjU1NThaFw0yNjAxMjcxNjU0NThaMDMxMTAvBgNV BAMTKEI3OEM1N0FCQTkyMkQ2NjMyMTQwQjdFMjY5Mzk1QkNBNTlCMTc5QzAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDKxNOIq9Q8nv0Tg1t+y7yYw2j0 IRnS2seql8W9842L4KvR4k/3oZ4HpLRmIatfz6rVY9nL4SoWhbH9SrLzA9S21FX4 tb4EnztTmZy8GnIX5INS+/kYnog3upX/ZRCTC4zvZfDF7Nsq3iiZTt8iAUPy+Ipd HsJ51C8sURxNR0ObLrGQo1h4MB5TDU1WYXl2Wqyw3YbHbgpItbw8t8cscN9tqgto u8rFBtfQR73xK21FqzTUBxY3FQtycHnE4aYS2h/F6eb6zpy4+9qDoepr/DOC9xBn 3jZ6EstudVsrtvYDtvQ6E5/cytIEYIfVwPjcNP4ycmSzceyiPpY3p6sJblA/AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUt4xXq6ki1mMhQLfiaTlbylmxecAwHwYDVR0j BBgwFoAUMvDxzqtgjmblYUM69s2b4S9WAuUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 MGRiMGRlYy1mNDlhLTRlN2MtODU2Yi1iMWYwNTQwYjFlMjUvMC8zMkYwRjFDRUFC NjA4RTY2RTU2MTQzM0FGNkNEOUJFMTJGNTYwMkU1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMzJGMEYxQ0VBQjYwOEU2NkU1NjE0MzNBRjZDRDlCRTEyRjU2 MDJFNS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vODBkYjBkZWMtZjQ5YS00ZTdjLTg1 NmItYjFmMDU0MGIxZTI1LzAvMzJGMEYxQ0VBQjYwOEU2NkU1NjE0MzNBRjZDRDlC RTEyRjU2MDJFNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABodwWRpSqJqiEysIaiv/ctoSmvArb4EpbNh hx3qAtjklh/TOPLvN4UYQLSWUQ7ywI66DYXrLUnQiyIDB1lp8jicbe/KBTV87M7S d1VTCK65ucisscN/dGGZCLSN7KpgBBNBMkWkmsG7J0E6pojlwftkce4/T9CKWL6g y//ZlpUecC15bvyHpo4FI2NCDMFSfjcc3O/U2aq2rgDp3KxSjdMlUQ66Nj48jMe8 GbdcI7BvM0/1+WfWBCKSKTCQ8AYbb5eP/Wkv3hIBMNDkaRU4OMxUzcWQ1zGppFgW 9boY9uYvKiF8tpym84fcGcsZiH6B7LwJbemcMAU6ULhSF+OcLmY= -----END CERTIFICATE-----Generated at Mon Jan 26 05:37:16 2026 by rpki-client