This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/93d9268b-5e61-43b2-a624-41b01d7d76b2/0/129285A478A166EE0B54DBCDA60771DA54C4F65F.mft File: 129285A478A166EE0B54DBCDA60771DA54C4F65F.mft (raw, json) Hash identifier: ufV8ZcpiZc5FYyFyujyRtZJMK5zAa0PRd2RCRYCKRF8= Subject key identifier: 8C:28:EF:89:14:86:41:DF:3D:68:FC:90:2E:64:C4:30:72:D0:29:10 Authority key identifier: 12:92:85:A4:78:A1:66:EE:0B:54:DB:CD:A6:07:71:DA:54:C4:F6:5F Certificate issuer: /CN=129285A478A166EE0B54DBCDA60771DA54C4F65F Certificate serial: 5F8AD7FC337151E1D746A9121850834A9BA29953 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/129285A478A166EE0B54DBCDA60771DA54C4F65F.cer Subject info access: rsync://repo-rpki.idnic.net/repo/93d9268b-5e61-43b2-a624-41b01d7d76b2/0/129285A478A166EE0B54DBCDA60771DA54C4F65F.mft Manifest number: 0550 Signing time: Sun 25 Jan 2026 00:20:40 +0000 Manifest this update: Sun 25 Jan 2026 00:15:40 +0000 Manifest next update: Wed 28 Jan 2026 04:25:40 +0000 Files and hashes: 1: 129285A478A166EE0B54DBCDA60771DA54C4F65F.crl (hash: NY4aSX+cC8YPlFbVyYnwR9gsW/SAxTiG5Hs5eKRqr1g=) 2: 3130332e3132352e3138342e302f32342d3234203d3e20313338313134.roa (hash: IVCqBdFN38jWB6ahE4bcDTBKo48M7ALZxNEE15iGilE=) 3: 3130332e3132352e3138352e302f32342d3234203d3e20313338313134.roa (hash: noI2jWxEeYAXqaAE/PBFmQAfbP3FU/DH8uqnt/6EwU8=) 4: 323030313a6466373a326630303a3a2f34382d3438203d3e20313338313134.roa (hash: 8WcP2WWEYHZ1TNae3+A3s6W018bl6aSTVI6LBUjwgfE=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/93d9268b-5e61-43b2-a624-41b01d7d76b2/0/129285A478A166EE0B54DBCDA60771DA54C4F65F.crl rsync://repo-rpki.idnic.net/repo/93d9268b-5e61-43b2-a624-41b01d7d76b2/0/129285A478A166EE0B54DBCDA60771DA54C4F65F.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/129285A478A166EE0B54DBCDA60771DA54C4F65F.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 28 Jan 2026 04:25:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5f:8a:d7:fc:33:71:51:e1:d7:46:a9:12:18:50:83:4a:9b:a2:99:53 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=129285A478A166EE0B54DBCDA60771DA54C4F65F Validity Not Before: Jan 25 00:15:40 2026 GMT Not After : Jan 28 04:25:40 2026 GMT Subject: CN=8C28EF89148641DF3D68FC902E64C43072D02910 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:b9:eb:64:27:e2:ed:9c:b1:10:b9:4b:44:eb: 80:58:59:67:72:d4:26:ee:ef:e8:f2:bc:e4:3e:cd: 5a:c6:a5:04:60:87:21:ed:ed:00:51:63:b9:ad:9c: 33:e5:21:54:a4:1e:2e:7b:fb:d9:6c:71:68:de:72: 11:59:ee:8f:ec:7c:47:cd:8d:9d:97:51:5b:e7:a5: 82:7a:99:1e:3d:22:07:35:b3:d9:79:6f:58:65:40: 0c:5f:48:ec:ee:c6:72:36:a4:62:52:5b:9b:30:4e: 8f:60:94:03:99:c3:f3:f9:33:b9:0a:24:8d:55:a9: 63:c4:fb:a8:12:23:d3:86:f0:02:28:bf:2f:4b:92: 30:22:bd:e6:aa:a8:6c:0d:6e:97:2f:e4:de:5a:cf: 74:58:99:0f:d4:f8:de:c1:a2:53:50:d4:7d:8c:ea: ef:26:d6:60:74:0e:46:21:af:83:25:a1:2e:d8:6e: 55:de:df:82:44:72:11:e8:eb:0d:e7:86:d1:63:e2: 1d:d5:16:87:c4:56:da:5d:97:16:ea:f8:31:fe:00: 5a:e8:1c:d8:cb:a0:6f:58:da:55:29:92:21:f7:2b: 0d:60:65:83:b9:7e:f9:d2:79:12:0b:6f:5c:e5:8b: c0:65:eb:0e:ec:19:b1:59:ce:e4:be:0a:f3:86:32: 41:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8C:28:EF:89:14:86:41:DF:3D:68:FC:90:2E:64:C4:30:72:D0:29:10 X509v3 Authority Key Identifier: keyid:12:92:85:A4:78:A1:66:EE:0B:54:DB:CD:A6:07:71:DA:54:C4:F6:5F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/93d9268b-5e61-43b2-a624-41b01d7d76b2/0/129285A478A166EE0B54DBCDA60771DA54C4F65F.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/129285A478A166EE0B54DBCDA60771DA54C4F65F.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/93d9268b-5e61-43b2-a624-41b01d7d76b2/0/129285A478A166EE0B54DBCDA60771DA54C4F65F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a3:ee:10:bf:0a:f6:93:07:64:bd:1b:d2:00:00:62:db:bc:21: 83:99:bc:23:e3:fb:7b:aa:93:58:2c:c2:9c:d8:a9:88:21:18: 8e:25:e7:a8:d4:d6:0c:60:aa:ad:88:cb:e3:ec:0a:14:7c:56: d9:d9:0d:ad:93:f0:cb:09:ce:0f:9b:82:29:a1:df:ae:d1:ab: 48:6b:27:d3:95:c5:5d:1c:bb:d3:bb:7c:70:e4:a6:fe:26:ca: be:b0:02:d9:95:a6:d6:74:ef:8f:11:69:ed:42:32:47:ca:c0: 72:a0:f3:ba:fd:e1:b1:d6:f1:27:4c:1c:da:97:c7:ac:9e:16: 1b:0a:66:1f:0d:13:c0:3a:5f:c3:83:8d:c2:f8:4f:40:c3:8c: ca:ea:08:58:51:82:e2:8a:5d:1b:30:32:07:08:dd:e0:b8:87: 2e:da:25:02:b0:d8:89:91:c2:ce:19:81:64:9d:33:4f:8a:b3: a4:d2:7b:83:84:eb:b0:05:71:2f:1c:49:93:38:45:cc:55:36: c9:89:71:e6:2c:00:cf:f6:1b:19:dc:3e:be:13:0d:1d:64:55: 12:a7:02:02:cd:e3:1d:b6:f7:75:a3:94:8c:fe:c1:f9:00:11: 06:36:e0:08:c7:90:b7:1a:d9:fa:6b:f6:3b:fb:66:28:c3:e5: 7b:51:fa:bf -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUX4rX/DNxUeHXRqkSGFCDSpuimVMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTI5Mjg1QTQ3OEExNjZFRTBCNTREQkNEQTYwNzcxREE1 NEM0RjY1RjAeFw0yNjAxMjUwMDE1NDBaFw0yNjAxMjgwNDI1NDBaMDMxMTAvBgNV BAMTKDhDMjhFRjg5MTQ4NjQxREYzRDY4RkM5MDJFNjRDNDMwNzJEMDI5MTAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC8uetkJ+LtnLEQuUtE64BYWWdy 1Cbu7+jyvOQ+zVrGpQRghyHt7QBRY7mtnDPlIVSkHi57+9lscWjechFZ7o/sfEfN jZ2XUVvnpYJ6mR49Igc1s9l5b1hlQAxfSOzuxnI2pGJSW5swTo9glAOZw/P5M7kK JI1VqWPE+6gSI9OG8AIovy9LkjAiveaqqGwNbpcv5N5az3RYmQ/U+N7BolNQ1H2M 6u8m1mB0DkYhr4MloS7YblXe34JEchHo6w3nhtFj4h3VFofEVtpdlxbq+DH+AFro HNjLoG9Y2lUpkiH3Kw1gZYO5fvnSeRILb1zli8Bl6w7sGbFZzuS+CvOGMkGfAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUjCjviRSGQd89aPyQLmTEMHLQKRAwHwYDVR0j BBgwFoAUEpKFpHihZu4LVNvNpgdx2lTE9l8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 M2Q5MjY4Yi01ZTYxLTQzYjItYTYyNC00MWIwMWQ3ZDc2YjIvMC8xMjkyODVBNDc4 QTE2NkVFMEI1NERCQ0RBNjA3NzFEQTU0QzRGNjVGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMTI5Mjg1QTQ3OEExNjZFRTBCNTREQkNEQTYwNzcxREE1NEM0 RjY1Ri5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOTNkOTI2OGItNWU2MS00M2IyLWE2 MjQtNDFiMDFkN2Q3NmIyLzAvMTI5Mjg1QTQ3OEExNjZFRTBCNTREQkNEQTYwNzcx REE1NEM0RjY1Ri5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKPuEL8K9pMHZL0b0gAAYtu8IYOZvCPj+3uq k1gswpzYqYghGI4l56jU1gxgqq2Iy+PsChR8VtnZDa2T8MsJzg+bgimh367Rq0hr J9OVxV0cu9O7fHDkpv4myr6wAtmVptZ0748Rae1CMkfKwHKg87r94bHW8SdMHNqX x6yeFhsKZh8NE8A6X8ODjcL4T0DDjMrqCFhRguKKXRswMgcI3eC4hy7aJQKw2ImR ws4ZgWSdM0+Ks6TSe4OE67AFcS8cSZM4RcxVNsmJceYsAM/2GxncPr4TDR1kVRKn AgLN4x2293WjlIz+wfkAEQY24AjHkLca2fpr9jv7ZijD5XtR+r8= -----END CERTIFICATE-----Generated at Sun Jan 25 22:00:45 2026 by rpki-client