This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/91a2929c-6088-4cb5-83c6-f4a356b20f9d/0/2F24A2044806301EB7FA6CE5C8521FE03941B7BA.mft File: 2F24A2044806301EB7FA6CE5C8521FE03941B7BA.mft (raw, json) Hash identifier: fcvpIOVwAxmqxQQx18ozpvG95eNPm+cg5gFhebVhzy0= Subject key identifier: 1C:67:5A:68:20:BA:EF:D4:49:75:9C:8A:1A:19:81:9A:1F:5C:3B:A3 Authority key identifier: 2F:24:A2:04:48:06:30:1E:B7:FA:6C:E5:C8:52:1F:E0:39:41:B7:BA Certificate issuer: /CN=2F24A2044806301EB7FA6CE5C8521FE03941B7BA Certificate serial: 2E6E5B953A26164F52A39C8D1D608F06CDB61DED Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2F24A2044806301EB7FA6CE5C8521FE03941B7BA.cer Subject info access: rsync://repo-rpki.idnic.net/repo/91a2929c-6088-4cb5-83c6-f4a356b20f9d/0/2F24A2044806301EB7FA6CE5C8521FE03941B7BA.mft Manifest number: 0145 Signing time: Sat 24 Jan 2026 04:01:30 +0000 Manifest this update: Sat 24 Jan 2026 03:56:30 +0000 Manifest next update: Tue 27 Jan 2026 06:22:30 +0000 Files and hashes: 1: 2F24A2044806301EB7FA6CE5C8521FE03941B7BA.crl (hash: QuV97vlQ5X8bcwG94FHNt5xFID1sqyjs9HvRYreEzII=) 2: 3130332e3138342e35372e302f32342d3234203d3e20313532333532.roa (hash: bpEdGaau57Ls0LX+FXCrBVL5qcwulWWQkMdNRaMhV9U=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/91a2929c-6088-4cb5-83c6-f4a356b20f9d/0/2F24A2044806301EB7FA6CE5C8521FE03941B7BA.crl rsync://repo-rpki.idnic.net/repo/91a2929c-6088-4cb5-83c6-f4a356b20f9d/0/2F24A2044806301EB7FA6CE5C8521FE03941B7BA.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2F24A2044806301EB7FA6CE5C8521FE03941B7BA.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 27 Jan 2026 06:22:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2e:6e:5b:95:3a:26:16:4f:52:a3:9c:8d:1d:60:8f:06:cd:b6:1d:ed Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2F24A2044806301EB7FA6CE5C8521FE03941B7BA Validity Not Before: Jan 24 03:56:30 2026 GMT Not After : Jan 27 06:22:30 2026 GMT Subject: CN=1C675A6820BAEFD449759C8A1A19819A1F5C3BA3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:05:26:d7:44:7d:e5:4b:c9:f2:2f:28:3e:57: b8:3c:06:1e:4c:91:f1:5d:e7:dd:92:66:ee:6c:1d: 82:54:04:5f:77:2f:2f:18:d2:8a:cd:7c:d4:7f:29: 4c:2a:62:f5:8d:49:e8:0b:11:a7:f6:92:4e:59:a5: f6:41:9b:c2:bd:7e:5c:22:6d:25:17:bb:75:8e:f2: b5:4a:7d:8a:d9:92:b2:12:57:b6:4a:75:0b:1b:9f: c5:ca:2e:93:e6:8c:f2:8a:35:45:12:d4:03:50:41: ca:5c:03:40:ad:ea:9d:5a:63:70:5d:2b:8c:e6:e8: eb:0f:13:e4:13:50:11:ef:20:73:21:5a:29:3a:06: de:9c:44:03:0b:d8:ad:d3:42:5f:e1:67:fc:15:91: 23:21:13:93:b1:79:a0:f5:ad:d9:da:fb:a2:f2:97: 32:76:4a:06:9f:34:a8:7a:2d:e4:e9:24:bd:2d:08: c8:c1:d6:be:3e:bd:3b:71:ff:67:ea:71:e3:02:8a: 7d:73:48:44:93:0c:cd:60:99:92:8e:94:2a:14:bf: a2:cb:f5:e6:77:93:a8:25:4a:c3:bd:f2:87:45:96: 5b:71:3b:ca:77:7d:55:e1:12:b9:f7:6d:41:89:34: aa:bf:91:4d:91:4b:96:55:43:4c:da:c3:bd:8e:c7: 0e:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1C:67:5A:68:20:BA:EF:D4:49:75:9C:8A:1A:19:81:9A:1F:5C:3B:A3 X509v3 Authority Key Identifier: keyid:2F:24:A2:04:48:06:30:1E:B7:FA:6C:E5:C8:52:1F:E0:39:41:B7:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/91a2929c-6088-4cb5-83c6-f4a356b20f9d/0/2F24A2044806301EB7FA6CE5C8521FE03941B7BA.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2F24A2044806301EB7FA6CE5C8521FE03941B7BA.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/91a2929c-6088-4cb5-83c6-f4a356b20f9d/0/2F24A2044806301EB7FA6CE5C8521FE03941B7BA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1d:b5:6e:2b:ad:12:58:3a:2c:e6:b4:53:8e:26:f5:b6:30:eb: 99:2f:7e:68:ba:b5:88:ca:0e:4b:e5:64:66:91:1e:93:2a:1f: 0b:8e:96:dd:fc:52:73:9b:e0:a0:89:db:84:40:f0:d8:b4:ba: f3:fa:01:21:a5:a6:ef:16:99:5d:d8:fa:31:01:11:db:5e:39: c2:97:d4:54:8b:80:73:ce:a7:8f:05:99:ee:f5:1b:ce:c8:45: 24:2f:81:3b:e2:3f:ce:b0:22:92:1f:d4:27:3c:06:b6:d1:3a: 38:59:22:da:fa:d3:74:41:71:db:42:4a:4e:c4:79:ae:6b:f1: 36:d4:a9:61:ea:f8:84:7b:0e:80:f2:92:9e:14:80:20:3b:18: f9:22:8d:7b:2d:72:66:b8:7c:00:99:c5:0a:de:50:32:7a:e2: 05:ce:72:f0:71:dc:36:2d:3e:96:01:99:d5:93:ef:1b:04:ba: 37:54:97:82:51:38:92:71:77:df:71:7a:31:96:db:6d:9f:3a: d0:7f:50:f4:94:db:c8:c6:34:84:11:6f:37:68:03:60:5b:99: 3e:40:89:93:0a:26:d1:7b:cf:18:d8:43:d1:72:48:0a:fa:53: 16:86:6a:2a:86:a7:2b:06:66:ad:49:e6:36:9d:4e:cb:34:b2: 49:11:85:ae -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIULm5blTomFk9So5yNHWCPBs22He0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkYyNEEyMDQ0ODA2MzAxRUI3RkE2Q0U1Qzg1MjFGRTAz OTQxQjdCQTAeFw0yNjAxMjQwMzU2MzBaFw0yNjAxMjcwNjIyMzBaMDMxMTAvBgNV BAMTKDFDNjc1QTY4MjBCQUVGRDQ0OTc1OUM4QTFBMTk4MTlBMUY1QzNCQTMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDNBSbXRH3lS8nyLyg+V7g8Bh5M kfFd592SZu5sHYJUBF93Ly8Y0orNfNR/KUwqYvWNSegLEaf2kk5ZpfZBm8K9flwi bSUXu3WO8rVKfYrZkrISV7ZKdQsbn8XKLpPmjPKKNUUS1ANQQcpcA0Ct6p1aY3Bd K4zm6OsPE+QTUBHvIHMhWik6Bt6cRAML2K3TQl/hZ/wVkSMhE5OxeaD1rdna+6Ly lzJ2SgafNKh6LeTpJL0tCMjB1r4+vTtx/2fqceMCin1zSESTDM1gmZKOlCoUv6LL 9eZ3k6glSsO98odFlltxO8p3fVXhErn3bUGJNKq/kU2RS5ZVQ0zaw72Oxw4nAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUHGdaaCC679RJdZyKGhmBmh9cO6MwHwYDVR0j BBgwFoAULySiBEgGMB63+mzlyFIf4DlBt7owDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 MWEyOTI5Yy02MDg4LTRjYjUtODNjNi1mNGEzNTZiMjBmOWQvMC8yRjI0QTIwNDQ4 MDYzMDFFQjdGQTZDRTVDODUyMUZFMDM5NDFCN0JBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMkYyNEEyMDQ0ODA2MzAxRUI3RkE2Q0U1Qzg1MjFGRTAzOTQx QjdCQS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOTFhMjkyOWMtNjA4OC00Y2I1LTgz YzYtZjRhMzU2YjIwZjlkLzAvMkYyNEEyMDQ0ODA2MzAxRUI3RkE2Q0U1Qzg1MjFG RTAzOTQxQjdCQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAB21biutElg6LOa0U44m9bYw65kvfmi6tYjK DkvlZGaRHpMqHwuOlt38UnOb4KCJ24RA8Ni0uvP6ASGlpu8WmV3Y+jEBEdteOcKX 1FSLgHPOp48Fme71G87IRSQvgTviP86wIpIf1Cc8BrbROjhZItr603RBcdtCSk7E ea5r8TbUqWHq+IR7DoDykp4UgCA7GPkijXstcma4fACZxQreUDJ64gXOcvBx3DYt PpYBmdWT7xsEujdUl4JROJJxd99xejGW222fOtB/UPSU28jGNIQRbzdoA2BbmT5A iZMKJtF7zxjYQ9FySAr6UxaGaiqGpysGZq1J5jadTss0skkRha4= -----END CERTIFICATE-----Generated at Mon Jan 26 02:39:49 2026 by rpki-client