This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/82fab611-8be3-4b44-9561-752a1eda065c/0/1DE04B1502D06C1C133ACE901223884FB36B2638.mft File: 1DE04B1502D06C1C133ACE901223884FB36B2638.mft (raw, json) Hash identifier: gKuWQWdnfqZbnp1X1ZTj/eqpN4+ZdCqVIBUMhQT2X8k= Subject key identifier: 71:47:83:B0:A3:FD:8F:C5:AA:F3:20:68:D1:0E:BC:D1:AE:A6:F6:E0 Authority key identifier: 1D:E0:4B:15:02:D0:6C:1C:13:3A:CE:90:12:23:88:4F:B3:6B:26:38 Certificate issuer: /CN=1DE04B1502D06C1C133ACE901223884FB36B2638 Certificate serial: 1A4FCA770CE86D24FAD923E120B40AAE30E399AC Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1DE04B1502D06C1C133ACE901223884FB36B2638.cer Subject info access: rsync://repo-rpki.idnic.net/repo/82fab611-8be3-4b44-9561-752a1eda065c/0/1DE04B1502D06C1C133ACE901223884FB36B2638.mft Manifest number: 0246 Signing time: Mon 26 Jan 2026 02:01:13 +0000 Manifest this update: Mon 26 Jan 2026 01:56:13 +0000 Manifest next update: Thu 29 Jan 2026 13:37:13 +0000 Files and hashes: 1: 3130332e3138372e3131342e302f32342d3234203d3e203633383738.roa (hash: Dbua1W+dq/k6Z9uQfXqPhRIcFQdPJ4Cp3vbD2GRN4CU=) 2: 1DE04B1502D06C1C133ACE901223884FB36B2638.crl (hash: YsQbU6XVBWBHRD3mJ4wdR2t9bhXUhEt3f2MvsqPN5Oc=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/82fab611-8be3-4b44-9561-752a1eda065c/0/1DE04B1502D06C1C133ACE901223884FB36B2638.crl rsync://repo-rpki.idnic.net/repo/82fab611-8be3-4b44-9561-752a1eda065c/0/1DE04B1502D06C1C133ACE901223884FB36B2638.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1DE04B1502D06C1C133ACE901223884FB36B2638.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 29 Jan 2026 05:17:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1a:4f:ca:77:0c:e8:6d:24:fa:d9:23:e1:20:b4:0a:ae:30:e3:99:ac Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1DE04B1502D06C1C133ACE901223884FB36B2638 Validity Not Before: Jan 26 01:56:13 2026 GMT Not After : Jan 29 13:37:13 2026 GMT Subject: CN=714783B0A3FD8FC5AAF32068D10EBCD1AEA6F6E0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:ca:2a:e8:28:5f:dc:f5:6a:78:c6:37:1a:e3: 06:bb:7e:e5:94:5a:4d:2b:fd:a0:6e:09:ea:24:49: df:5c:9b:f9:38:4a:3f:95:7b:06:43:0f:5b:74:b5: 9e:bd:da:17:5f:56:ab:7a:50:fe:69:70:bd:fa:d9: 15:47:cd:ee:0f:4a:b2:50:af:23:9f:a9:e0:d1:9e: 26:79:f7:71:4a:8c:d7:c0:a9:d9:d7:f2:28:2e:05: e5:4a:9f:55:d9:b3:cf:05:fb:c9:b4:7a:70:8a:24: f0:4d:11:46:e9:de:64:f8:9f:78:ed:9c:b2:54:93: 39:ce:19:99:94:22:87:6b:9a:42:19:f9:ed:af:63: 69:4c:aa:6e:64:7a:91:ce:29:fe:09:61:a4:82:fe: dd:ce:4f:63:6c:a6:a9:5d:68:61:71:87:ac:5b:ae: b1:cc:cb:37:17:25:9b:20:e5:00:24:dd:d0:b8:2e: d6:6a:c8:d7:8a:18:f2:2d:9d:33:9f:bb:b8:40:58: 6e:1f:4d:b8:54:c2:ac:0b:cc:72:2e:93:03:18:e4: 3a:3c:f2:68:a8:58:29:8c:07:cb:ad:65:6d:ce:5d: 2e:03:21:15:14:9f:bd:64:69:bd:01:9a:bf:b6:1b: 58:9b:5c:71:a0:ea:63:d7:8d:90:f9:d6:81:1f:27: f4:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:47:83:B0:A3:FD:8F:C5:AA:F3:20:68:D1:0E:BC:D1:AE:A6:F6:E0 X509v3 Authority Key Identifier: keyid:1D:E0:4B:15:02:D0:6C:1C:13:3A:CE:90:12:23:88:4F:B3:6B:26:38 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/82fab611-8be3-4b44-9561-752a1eda065c/0/1DE04B1502D06C1C133ACE901223884FB36B2638.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1DE04B1502D06C1C133ACE901223884FB36B2638.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/82fab611-8be3-4b44-9561-752a1eda065c/0/1DE04B1502D06C1C133ACE901223884FB36B2638.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8f:57:81:5d:bc:70:3c:07:94:27:03:ce:66:e2:b4:5d:7c:48: c8:d8:73:92:80:83:48:d7:d8:b7:37:e6:32:48:71:6e:d3:dc: c9:9c:4b:d5:43:73:00:1c:34:74:83:38:d9:83:8c:16:63:f4: 92:eb:04:e5:1b:97:25:71:71:ed:c6:7f:0e:80:db:0b:db:57: 18:09:8b:80:b1:e5:f9:6a:d9:47:81:ed:d5:ed:88:43:b4:f3: 36:5c:f9:b2:50:c0:45:ca:0b:69:d8:b9:5e:36:2d:43:e6:17: 9f:f6:95:3f:46:41:cb:1e:06:59:5c:b8:fa:37:6b:0a:67:63: 7a:3f:ad:79:fc:8b:3f:f9:b1:27:b9:f5:a7:fb:14:d9:93:f9: 78:95:9c:ee:27:00:f8:8d:6f:c6:11:01:52:bf:51:eb:b8:f5: 68:ac:d6:b9:09:33:ba:33:c2:a9:8a:2c:fd:3c:e6:cc:00:97: 09:d2:d2:7f:38:96:fa:22:55:3a:8e:4b:b3:e3:89:83:00:90: 09:6d:e5:31:84:1f:dd:45:2b:b7:24:4b:80:88:f1:45:fb:05: 34:b9:78:e6:4a:a7:c7:22:57:e4:eb:66:18:6c:3a:99:78:f3: db:90:fa:5c:27:55:83:83:7c:74:b8:19:71:48:fc:04:f6:6a: fd:fe:5c:b7 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUGk/KdwzobST62SPhILQKrjDjmawwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMURFMDRCMTUwMkQwNkMxQzEzM0FDRTkwMTIyMzg4NEZC MzZCMjYzODAeFw0yNjAxMjYwMTU2MTNaFw0yNjAxMjkxMzM3MTNaMDMxMTAvBgNV BAMTKDcxNDc4M0IwQTNGRDhGQzVBQUYzMjA2OEQxMEVCQ0QxQUVBNkY2RTAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDCyiroKF/c9Wp4xjca4wa7fuWU Wk0r/aBuCeokSd9cm/k4Sj+VewZDD1t0tZ692hdfVqt6UP5pcL362RVHze4PSrJQ ryOfqeDRniZ593FKjNfAqdnX8iguBeVKn1XZs88F+8m0enCKJPBNEUbp3mT4n3jt nLJUkznOGZmUIodrmkIZ+e2vY2lMqm5kepHOKf4JYaSC/t3OT2NspqldaGFxh6xb rrHMyzcXJZsg5QAk3dC4LtZqyNeKGPItnTOfu7hAWG4fTbhUwqwLzHIukwMY5Do8 8mioWCmMB8utZW3OXS4DIRUUn71kab0Bmr+2G1ibXHGg6mPXjZD51oEfJ/S/AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUcUeDsKP9j8Wq8yBo0Q680a6m9uAwHwYDVR0j BBgwFoAUHeBLFQLQbBwTOs6QEiOIT7NrJjgwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 MmZhYjYxMS04YmUzLTRiNDQtOTU2MS03NTJhMWVkYTA2NWMvMC8xREUwNEIxNTAy RDA2QzFDMTMzQUNFOTAxMjIzODg0RkIzNkIyNjM4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMURFMDRCMTUwMkQwNkMxQzEzM0FDRTkwMTIyMzg4NEZCMzZC MjYzOC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vODJmYWI2MTEtOGJlMy00YjQ0LTk1 NjEtNzUyYTFlZGEwNjVjLzAvMURFMDRCMTUwMkQwNkMxQzEzM0FDRTkwMTIyMzg4 NEZCMzZCMjYzOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAI9XgV28cDwHlCcDzmbitF18SMjYc5KAg0jX 2Lc35jJIcW7T3MmcS9VDcwAcNHSDONmDjBZj9JLrBOUblyVxce3Gfw6A2wvbVxgJ i4Cx5flq2UeB7dXtiEO08zZc+bJQwEXKC2nYuV42LUPmF5/2lT9GQcseBllcuPo3 awpnY3o/rXn8iz/5sSe59af7FNmT+XiVnO4nAPiNb8YRAVK/Ueu49Wis1rkJM7oz wqmKLP085swAlwnS0n84lvoiVTqOS7PjiYMAkAlt5TGEH91FK7ckS4CI8UX7BTS5 eOZKp8ciV+TrZhhsOpl489uQ+lwnVYODfHS4GXFI/AT2av3+XLc= -----END CERTIFICATE-----Generated at Mon Jan 26 07:34:59 2026 by rpki-client