This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/85e51875-5087-4264-a8bd-4156f55baaab/0/132BBDF9D9F26F001CC0F0EF9590333D38D04410.mft File: 132BBDF9D9F26F001CC0F0EF9590333D38D04410.mft (raw, json) Hash identifier: 7Vz8iufpKpdHKFg3lsKG7WjQFwTx1vanIVpY+aNVdHQ= Subject key identifier: 21:C4:CE:0E:2B:5A:22:27:19:AE:5E:32:FA:07:B7:1F:69:B9:65:C6 Authority key identifier: 13:2B:BD:F9:D9:F2:6F:00:1C:C0:F0:EF:95:90:33:3D:38:D0:44:10 Certificate issuer: /CN=132BBDF9D9F26F001CC0F0EF9590333D38D04410 Certificate serial: 391580990C114E31AF76BF8E2820517A82E1508F Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/132BBDF9D9F26F001CC0F0EF9590333D38D04410.cer Subject info access: rsync://repo-rpki.idnic.net/repo/85e51875-5087-4264-a8bd-4156f55baaab/0/132BBDF9D9F26F001CC0F0EF9590333D38D04410.mft Manifest number: 022A Signing time: Sun 25 Jan 2026 03:51:07 +0000 Manifest this update: Sun 25 Jan 2026 03:46:07 +0000 Manifest next update: Wed 28 Jan 2026 09:44:07 +0000 Files and hashes: 1: 132BBDF9D9F26F001CC0F0EF9590333D38D04410.crl (hash: 5Ehyj/mN9gd+V1AtTA1eHca4p2+v48g+POaHX/Ihklg=) 2: 3130332e3231342e3130302e302f32342d3234203d3e203634303237.roa (hash: 8iq0XosbzhiWPtcHfo4nGBPqnMxkt+Ua/0NUs9QHFi0=) 3: 3130332e3231342e3130322e302f32342d3234203d3e203634303237.roa (hash: BHin+uya4bqzrUKtuCcm95zQM4QjV0bw8TFtDxFQplU=) 4: 3130332e3231342e3130332e302f32342d3234203d3e203634303237.roa (hash: iOkCV36uArsFxOyMUHtzF7wNM0XpfATD2EMHBB13ovA=) 5: 3130332e3231342e3130312e302f32342d3234203d3e203634303237.roa (hash: mA1v4/gF9RPJu0MW7l0pzYLVjmcmm1alZXrEuL5aYbI=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/85e51875-5087-4264-a8bd-4156f55baaab/0/132BBDF9D9F26F001CC0F0EF9590333D38D04410.crl rsync://repo-rpki.idnic.net/repo/85e51875-5087-4264-a8bd-4156f55baaab/0/132BBDF9D9F26F001CC0F0EF9590333D38D04410.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/132BBDF9D9F26F001CC0F0EF9590333D38D04410.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 28 Jan 2026 09:44:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 39:15:80:99:0c:11:4e:31:af:76:bf:8e:28:20:51:7a:82:e1:50:8f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=132BBDF9D9F26F001CC0F0EF9590333D38D04410 Validity Not Before: Jan 25 03:46:07 2026 GMT Not After : Jan 28 09:44:07 2026 GMT Subject: CN=21C4CE0E2B5A222719AE5E32FA07B71F69B965C6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:80:12:83:b8:9d:0f:f4:ac:d5:07:63:fe:69: 0b:89:53:9d:af:9a:51:90:93:08:b6:15:b2:ed:20: a4:09:85:41:8a:46:4f:5e:37:38:33:78:3a:9e:3f: 5d:cc:90:6b:f2:8a:45:55:5c:5c:28:bf:bb:b8:b9: 1a:03:28:17:db:c9:1f:21:7f:83:1f:ec:b1:76:50: d4:9d:94:34:1c:55:8f:cb:9a:a3:af:ce:52:da:21: 10:0e:46:e7:19:7a:8f:31:0e:f3:d8:5b:0b:27:1d: ef:94:fa:5f:ad:d6:63:6b:13:de:24:5f:7f:3d:7d: 9d:2b:84:e2:74:21:c5:ed:93:a9:2a:18:8d:4e:dc: b2:32:8c:52:ec:0b:a1:4a:bf:13:dc:65:6a:ab:9e: ee:cc:17:0e:bf:c4:30:f9:ba:b5:a8:ee:5e:48:f7: 05:69:4e:6a:82:36:65:10:bc:1a:6e:43:bb:4c:a6: ba:aa:be:8f:e7:8a:84:0d:b9:de:79:13:83:38:46: 55:36:1c:11:de:db:3d:ab:2e:87:d3:e1:2a:a6:1c: e2:c1:da:1b:1c:60:fa:b5:a4:84:41:e0:95:18:48: 03:a2:e2:68:ba:cb:4f:b7:44:10:a3:66:25:7d:89: 53:d1:ae:43:b1:08:d1:b6:ba:43:a0:1b:7b:d5:44: 39:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:C4:CE:0E:2B:5A:22:27:19:AE:5E:32:FA:07:B7:1F:69:B9:65:C6 X509v3 Authority Key Identifier: keyid:13:2B:BD:F9:D9:F2:6F:00:1C:C0:F0:EF:95:90:33:3D:38:D0:44:10 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/85e51875-5087-4264-a8bd-4156f55baaab/0/132BBDF9D9F26F001CC0F0EF9590333D38D04410.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/132BBDF9D9F26F001CC0F0EF9590333D38D04410.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/85e51875-5087-4264-a8bd-4156f55baaab/0/132BBDF9D9F26F001CC0F0EF9590333D38D04410.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4a:07:fc:f6:e3:87:fd:70:fa:e1:88:d8:75:57:fd:f5:0b:35: 2c:bd:c9:cc:41:eb:a0:3a:29:f4:d4:28:6e:c5:21:8a:83:7e: 77:ff:6c:0f:e1:bd:39:2b:a8:38:03:31:b1:d8:97:77:aa:4b: 53:3d:7a:f9:2b:49:03:1c:7b:ad:80:cc:40:e3:57:35:70:02: 3e:8b:c1:bd:fb:3d:c9:6a:2f:96:a7:f3:9b:c2:77:2d:a7:c2: 1c:71:ca:43:91:a6:71:12:08:c5:38:be:34:72:60:00:00:5d: 3d:06:d7:45:a0:6c:99:d2:bb:ac:75:4b:ad:6d:6a:36:ad:a3: 70:8b:36:c8:8b:3f:28:cd:e5:48:56:d3:9a:7b:61:0c:e7:f8: d9:85:e5:09:6f:53:65:29:d0:1a:74:45:14:aa:d9:e6:6b:18: d4:95:8a:2e:0b:ad:a8:1b:db:74:3c:43:52:75:9f:b1:eb:06: ef:36:36:61:55:80:9d:4a:c4:6c:0d:44:8a:0b:9c:7f:48:35: 40:6d:e5:89:8c:c2:b0:e6:57:e0:d9:6a:57:3d:97:c9:67:e3: d6:17:8f:39:a5:04:ab:ec:7e:e5:3b:0a:b2:7b:0b:79:63:a9: 84:6b:4f:9b:24:d3:b3:f0:cf:2b:c2:22:25:7d:2e:6f:67:f4: c0:d0:8b:f1 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUORWAmQwRTjGvdr+OKCBReoLhUI8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTMyQkJERjlEOUYyNkYwMDFDQzBGMEVGOTU5MDMzM0Qz OEQwNDQxMDAeFw0yNjAxMjUwMzQ2MDdaFw0yNjAxMjgwOTQ0MDdaMDMxMTAvBgNV BAMTKDIxQzRDRTBFMkI1QTIyMjcxOUFFNUUzMkZBMDdCNzFGNjlCOTY1QzYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDggBKDuJ0P9KzVB2P+aQuJU52v mlGQkwi2FbLtIKQJhUGKRk9eNzgzeDqeP13MkGvyikVVXFwov7u4uRoDKBfbyR8h f4Mf7LF2UNSdlDQcVY/LmqOvzlLaIRAORucZeo8xDvPYWwsnHe+U+l+t1mNrE94k X389fZ0rhOJ0IcXtk6kqGI1O3LIyjFLsC6FKvxPcZWqrnu7MFw6/xDD5urWo7l5I 9wVpTmqCNmUQvBpuQ7tMprqqvo/nioQNud55E4M4RlU2HBHe2z2rLofT4SqmHOLB 2hscYPq1pIRB4JUYSAOi4mi6y0+3RBCjZiV9iVPRrkOxCNG2ukOgG3vVRDm7AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUIcTODitaIicZrl4y+ge3H2m5ZcYwHwYDVR0j BBgwFoAUEyu9+dnybwAcwPDvlZAzPTjQRBAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 NWU1MTg3NS01MDg3LTQyNjQtYThiZC00MTU2ZjU1YmFhYWIvMC8xMzJCQkRGOUQ5 RjI2RjAwMUNDMEYwRUY5NTkwMzMzRDM4RDA0NDEwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMTMyQkJERjlEOUYyNkYwMDFDQzBGMEVGOTU5MDMzM0QzOEQw NDQxMC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vODVlNTE4NzUtNTA4Ny00MjY0LWE4 YmQtNDE1NmY1NWJhYWFiLzAvMTMyQkJERjlEOUYyNkYwMDFDQzBGMEVGOTU5MDMz M0QzOEQwNDQxMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEoH/Pbjh/1w+uGI2HVX/fULNSy9ycxB66A6 KfTUKG7FIYqDfnf/bA/hvTkrqDgDMbHYl3eqS1M9evkrSQMce62AzEDjVzVwAj6L wb37PclqL5an85vCdy2nwhxxykORpnESCMU4vjRyYAAAXT0G10WgbJnSu6x1S61t ajato3CLNsiLPyjN5UhW05p7YQzn+NmF5QlvU2Up0Bp0RRSq2eZrGNSVii4Lragb 23Q8Q1J1n7HrBu82NmFVgJ1KxGwNRIoLnH9INUBt5YmMwrDmV+DZalc9l8ln49YX jzmlBKvsfuU7CrJ7C3ljqYRrT5sk07PwzyvCIiV9Lm9n9MDQi/E= -----END CERTIFICATE-----Generated at Sun Jan 25 20:37:06 2026 by rpki-client