This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/94dcef65-5de3-4129-ac27-7706d7266001/0/1D21385EB5B3F82C7D1AB5C7FD3EF27BE8E83A7B.mft File: 1D21385EB5B3F82C7D1AB5C7FD3EF27BE8E83A7B.mft (raw, json) Hash identifier: RoitlhqALO8TvYd+ZMXMSZJePpegJpwoqBzSdS1cAy0= Subject key identifier: 00:0B:AA:75:9B:5F:A3:75:4E:A2:91:20:E4:D1:1F:C9:D5:30:6B:BF Authority key identifier: 1D:21:38:5E:B5:B3:F8:2C:7D:1A:B5:C7:FD:3E:F2:7B:E8:E8:3A:7B Certificate issuer: /CN=1D21385EB5B3F82C7D1AB5C7FD3EF27BE8E83A7B Certificate serial: 41E482144D500B1F439FAE5FE860FD9CE652F68E Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1D21385EB5B3F82C7D1AB5C7FD3EF27BE8E83A7B.cer Subject info access: rsync://repo-rpki.idnic.net/repo/94dcef65-5de3-4129-ac27-7706d7266001/0/1D21385EB5B3F82C7D1AB5C7FD3EF27BE8E83A7B.mft Manifest number: 011A Signing time: Sun 25 Jan 2026 14:02:31 +0000 Manifest this update: Sun 25 Jan 2026 13:57:31 +0000 Manifest next update: Wed 28 Jan 2026 21:36:31 +0000 Files and hashes: 1: 3130332e3138362e3231312e302f32342d3234203d3e20313439373136.roa (hash: j4UVAm85xznfydPQ3h7b+m7Leez4agyKq00s/igegvE=) 2: 1D21385EB5B3F82C7D1AB5C7FD3EF27BE8E83A7B.crl (hash: eNjM8TLW5c9P3v1TOjFB9+oPNspguAD+Pd9uQ7+Qp1s=) 3: 3130332e3138362e3231302e302f32342d3234203d3e20313439373136.roa (hash: V3n7iTqFLIuD2Vsrr8YhXUNiWyUGWv7MsjGLhbtU/DY=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/94dcef65-5de3-4129-ac27-7706d7266001/0/1D21385EB5B3F82C7D1AB5C7FD3EF27BE8E83A7B.crl rsync://repo-rpki.idnic.net/repo/94dcef65-5de3-4129-ac27-7706d7266001/0/1D21385EB5B3F82C7D1AB5C7FD3EF27BE8E83A7B.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1D21385EB5B3F82C7D1AB5C7FD3EF27BE8E83A7B.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 28 Jan 2026 14:00:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 41:e4:82:14:4d:50:0b:1f:43:9f:ae:5f:e8:60:fd:9c:e6:52:f6:8e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1D21385EB5B3F82C7D1AB5C7FD3EF27BE8E83A7B Validity Not Before: Jan 25 13:57:31 2026 GMT Not After : Jan 28 21:36:31 2026 GMT Subject: CN=000BAA759B5FA3754EA29120E4D11FC9D5306BBF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:ae:6b:9d:27:11:66:da:8b:c9:d6:6c:c0:78: 97:56:6c:75:75:1c:c3:08:b1:2c:58:d0:b2:d6:51: 3d:98:e3:cf:ad:d2:02:18:9e:1e:e5:12:0a:8f:8f: 2b:7c:e4:86:3a:d4:05:9b:2d:fe:f8:df:e1:f4:b4: 77:b1:d6:f2:13:24:e3:9b:86:21:0b:2e:50:52:47: 3d:e3:a0:35:87:37:b6:3b:5e:0b:e7:d5:cc:ee:9f: 29:75:eb:94:87:f4:92:85:d3:ec:7a:58:20:f8:5f: 74:ea:b6:7f:ba:46:00:8a:29:94:f6:4e:30:53:40: b6:ea:b3:02:55:2d:08:e0:2d:6e:e8:5f:ba:ad:71: d0:1a:51:a3:6e:48:a3:77:c2:fb:25:58:17:db:f5: 4b:8c:13:50:77:c1:33:dc:f8:e5:b4:5a:d7:8a:5a: b3:2b:56:c3:59:3b:52:8a:9f:61:cf:d2:60:d4:fb: 49:1c:4a:20:44:59:e7:d7:c5:85:51:76:bc:0e:f6: d6:98:77:e4:30:84:3b:34:c1:eb:78:05:f7:33:50: 0f:e0:23:26:00:05:8a:1e:98:76:ff:af:5c:7c:21: 97:41:08:e8:ad:55:09:36:51:8c:f7:7b:bc:51:fb: 9c:58:5f:37:89:de:66:8f:58:25:d8:54:a2:94:d7: d2:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:0B:AA:75:9B:5F:A3:75:4E:A2:91:20:E4:D1:1F:C9:D5:30:6B:BF X509v3 Authority Key Identifier: keyid:1D:21:38:5E:B5:B3:F8:2C:7D:1A:B5:C7:FD:3E:F2:7B:E8:E8:3A:7B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/94dcef65-5de3-4129-ac27-7706d7266001/0/1D21385EB5B3F82C7D1AB5C7FD3EF27BE8E83A7B.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1D21385EB5B3F82C7D1AB5C7FD3EF27BE8E83A7B.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/94dcef65-5de3-4129-ac27-7706d7266001/0/1D21385EB5B3F82C7D1AB5C7FD3EF27BE8E83A7B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 83:27:c6:59:ac:88:54:63:8b:71:2f:dc:a0:0c:5d:68:fe:72: a6:ef:64:0d:94:a4:3a:2a:48:bf:d6:a5:e2:93:a7:a4:25:15: e9:7a:9e:0d:16:af:5e:c3:43:81:0a:5f:d4:dd:6c:3e:08:b1: 6a:50:c5:ac:c3:02:fd:35:fc:09:8d:7b:48:17:0c:13:b5:27: 7d:4c:8f:52:1c:ba:2f:65:c8:64:f4:71:62:b9:a5:fc:a9:a0: 20:f1:b9:c7:78:96:d2:2a:38:6d:90:66:45:74:98:25:a6:ac: ef:33:67:8a:a9:4f:a2:1a:d0:f0:d8:38:c0:64:47:f9:12:d0: 03:17:3f:e9:c3:c2:e7:5e:a1:0f:01:39:16:eb:7d:88:26:5e: 05:0d:f2:a9:cf:26:43:65:9c:a0:27:c0:a5:0b:7f:01:e3:f9: 7d:9e:90:ba:0c:4d:52:e3:c7:95:48:9d:13:95:53:aa:6b:f9: 33:ee:51:61:20:ec:27:2d:b6:3a:50:40:01:eb:a9:2b:9b:b8: 4c:33:3e:f7:b4:b5:fa:fe:21:10:9d:4e:ed:8f:54:37:78:5a: f4:9b:1b:18:53:1b:9f:62:73:76:a0:27:9e:bf:83:2f:6a:57: 41:12:5e:f8:a3:0c:39:ab:ac:af:16:9e:f7:93:3b:bb:a7:f3: 5e:ba:40:22 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUQeSCFE1QCx9Dn65f6GD9nOZS9o4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUQyMTM4NUVCNUIzRjgyQzdEMUFCNUM3RkQzRUYyN0JF OEU4M0E3QjAeFw0yNjAxMjUxMzU3MzFaFw0yNjAxMjgyMTM2MzFaMDMxMTAvBgNV BAMTKDAwMEJBQTc1OUI1RkEzNzU0RUEyOTEyMEU0RDExRkM5RDUzMDZCQkYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDfrmudJxFm2ovJ1mzAeJdWbHV1 HMMIsSxY0LLWUT2Y48+t0gIYnh7lEgqPjyt85IY61AWbLf743+H0tHex1vITJOOb hiELLlBSRz3joDWHN7Y7Xgvn1czunyl165SH9JKF0+x6WCD4X3Tqtn+6RgCKKZT2 TjBTQLbqswJVLQjgLW7oX7qtcdAaUaNuSKN3wvslWBfb9UuME1B3wTPc+OW0WteK WrMrVsNZO1KKn2HP0mDU+0kcSiBEWefXxYVRdrwO9taYd+QwhDs0wet4BfczUA/g IyYABYoemHb/r1x8IZdBCOitVQk2UYz3e7xR+5xYXzeJ3maPWCXYVKKU19IxAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUAAuqdZtfo3VOopEg5NEfydUwa78wHwYDVR0j BBgwFoAUHSE4XrWz+Cx9GrXH/T7ye+joOnswDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 NGRjZWY2NS01ZGUzLTQxMjktYWMyNy03NzA2ZDcyNjYwMDEvMC8xRDIxMzg1RUI1 QjNGODJDN0QxQUI1QzdGRDNFRjI3QkU4RTgzQTdCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMUQyMTM4NUVCNUIzRjgyQzdEMUFCNUM3RkQzRUYyN0JFOEU4 M0E3Qi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOTRkY2VmNjUtNWRlMy00MTI5LWFj MjctNzcwNmQ3MjY2MDAxLzAvMUQyMTM4NUVCNUIzRjgyQzdEMUFCNUM3RkQzRUYy N0JFOEU4M0E3Qi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIMnxlmsiFRji3Ev3KAMXWj+cqbvZA2UpDoq SL/WpeKTp6QlFel6ng0Wr17DQ4EKX9TdbD4IsWpQxazDAv01/AmNe0gXDBO1J31M j1Icui9lyGT0cWK5pfypoCDxucd4ltIqOG2QZkV0mCWmrO8zZ4qpT6Ia0PDYOMBk R/kS0AMXP+nDwudeoQ8BORbrfYgmXgUN8qnPJkNlnKAnwKULfwHj+X2ekLoMTVLj x5VInROVU6pr+TPuUWEg7CcttjpQQAHrqSubuEwzPve0tfr+IRCdTu2PVDd4WvSb GxhTG59ic3agJ56/gy9qV0ESXvijDDmrrK8WnveTO7un8166QCI= -----END CERTIFICATE-----Generated at Mon Jan 26 01:20:49 2026 by rpki-client