This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/95c321eb-15f8-4646-b053-f199d6fa7f53/0/13D80EA535A5CA2E0E00F7C776A471C5E5A5A479.mft File: 13D80EA535A5CA2E0E00F7C776A471C5E5A5A479.mft (raw, json) Hash identifier: pr9iSX6x3fvOaj+vXmrw4m4s+p4xwPSvnnRyNg+wrZA= Subject key identifier: 32:BB:57:00:3A:1B:EA:A8:01:31:1B:E7:72:9D:46:2C:E7:68:BD:78 Authority key identifier: 13:D8:0E:A5:35:A5:CA:2E:0E:00:F7:C7:76:A4:71:C5:E5:A5:A4:79 Certificate issuer: /CN=13D80EA535A5CA2E0E00F7C776A471C5E5A5A479 Certificate serial: 42F940EDAE76D62FB93CAB6500E41C08E65CB744 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/13D80EA535A5CA2E0E00F7C776A471C5E5A5A479.cer Subject info access: rsync://repo-rpki.idnic.net/repo/95c321eb-15f8-4646-b053-f199d6fa7f53/0/13D80EA535A5CA2E0E00F7C776A471C5E5A5A479.mft Manifest number: 0229 Signing time: Sat 24 Jan 2026 05:11:25 +0000 Manifest this update: Sat 24 Jan 2026 05:06:25 +0000 Manifest next update: Tue 27 Jan 2026 09:40:25 +0000 Files and hashes: 1: 3130332e3134372e3232302e302f32332d3234203d3e20313339393639.roa (hash: 1oyOtVjk62XnsKC1vK32tmLaEZwZLuTAQ3Yr7rjhcoM=) 2: 13D80EA535A5CA2E0E00F7C776A471C5E5A5A479.crl (hash: /FIVf3DlwIwhegmkVlw+aI/o/q80PtL7pOLAPHfhCmk=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/95c321eb-15f8-4646-b053-f199d6fa7f53/0/13D80EA535A5CA2E0E00F7C776A471C5E5A5A479.crl rsync://repo-rpki.idnic.net/repo/95c321eb-15f8-4646-b053-f199d6fa7f53/0/13D80EA535A5CA2E0E00F7C776A471C5E5A5A479.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/13D80EA535A5CA2E0E00F7C776A471C5E5A5A479.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 27 Jan 2026 09:40:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 42:f9:40:ed:ae:76:d6:2f:b9:3c:ab:65:00:e4:1c:08:e6:5c:b7:44 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=13D80EA535A5CA2E0E00F7C776A471C5E5A5A479 Validity Not Before: Jan 24 05:06:25 2026 GMT Not After : Jan 27 09:40:25 2026 GMT Subject: CN=32BB57003A1BEAA801311BE7729D462CE768BD78 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:67:8c:09:a0:8d:df:a5:be:c0:33:5c:41:47: 2e:43:ad:a4:29:ae:6b:ee:6a:46:32:7a:63:22:c4: 70:e0:28:09:eb:51:d5:54:eb:e1:f0:42:9c:d3:50: 65:f6:47:2b:6f:94:e4:58:ac:62:ac:04:8b:1b:a4: 4a:98:2e:20:9e:d6:ed:73:94:19:6f:92:ff:13:bf: c2:57:70:9d:fc:b1:3b:2c:60:07:e3:a9:6c:57:48: b9:4d:97:d5:04:56:df:28:2f:e5:54:a4:0e:5a:d0: 97:bf:4f:ee:87:b9:d2:68:0d:fc:01:31:aa:42:1e: dc:54:b7:ba:eb:18:d1:b7:0a:13:fd:00:86:12:f2: 80:e0:c0:23:d6:91:8d:17:94:7c:42:58:cb:39:fa: d9:ea:9b:db:cb:2f:c4:64:06:69:41:24:04:4e:92: a2:f0:43:87:a1:93:3c:c5:e5:19:07:b4:d1:ec:52: 31:9c:a1:45:45:f4:6d:bb:99:37:7d:e1:06:f9:3e: 10:d2:00:20:6c:0b:fd:5f:ae:95:dc:cc:ca:1f:8a: 93:dc:39:1b:49:49:be:d1:1a:32:42:6d:90:f9:7a: 0b:c5:fc:a6:b0:26:06:ac:58:13:69:8b:87:0a:d1: 16:2e:fb:f0:e5:b8:58:24:c4:23:bc:fd:a9:95:e8: be:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:BB:57:00:3A:1B:EA:A8:01:31:1B:E7:72:9D:46:2C:E7:68:BD:78 X509v3 Authority Key Identifier: keyid:13:D8:0E:A5:35:A5:CA:2E:0E:00:F7:C7:76:A4:71:C5:E5:A5:A4:79 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/95c321eb-15f8-4646-b053-f199d6fa7f53/0/13D80EA535A5CA2E0E00F7C776A471C5E5A5A479.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/13D80EA535A5CA2E0E00F7C776A471C5E5A5A479.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/95c321eb-15f8-4646-b053-f199d6fa7f53/0/13D80EA535A5CA2E0E00F7C776A471C5E5A5A479.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 70:fa:57:39:d8:3f:fa:23:c3:81:76:43:03:98:11:3b:5a:3c: 3f:e3:07:ff:08:8b:1a:d0:af:c8:cf:cf:c5:c1:d9:42:6c:d7: 9d:cd:a6:1f:7d:2e:2b:65:6b:bf:f4:1e:a9:fb:10:c2:83:77: b5:44:b9:74:9b:28:b8:fd:c8:8c:bc:d4:76:c7:c8:d7:45:5a: d5:77:c0:67:36:10:7e:9f:65:42:8e:e9:52:55:87:d1:70:08: a1:c2:b2:72:fc:e2:23:a6:5e:a0:af:67:8d:65:16:9c:43:ee: 30:58:9a:59:18:6e:7f:c7:01:e9:c3:ee:1e:62:c4:51:02:0d: 97:65:60:f7:3c:68:63:60:a8:9a:92:41:24:e5:4e:05:0e:81: 92:cc:fe:7b:32:0e:6c:a5:e8:6a:44:a8:bf:00:c4:75:a3:30: b5:4f:91:2e:fb:b6:65:7b:ba:a7:26:b7:d9:d1:40:45:2c:8f: 50:23:11:f1:32:86:69:c0:c2:18:f2:fd:d9:91:8e:56:2b:77: 89:a2:00:1a:c7:f9:29:c7:b0:29:0a:4d:02:e3:c2:c0:71:2c: 3f:1b:95:76:a6:68:ea:be:4b:7c:e4:14:75:b1:22:dc:e7:cb: 07:68:95:1c:a9:f7:de:8e:25:46:6e:c2:f1:21:5c:29:b6:01: 53:aa:19:71 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUQvlA7a521i+5PKtlAOQcCOZct0QwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTNEODBFQTUzNUE1Q0EyRTBFMDBGN0M3NzZBNDcxQzVF NUE1QTQ3OTAeFw0yNjAxMjQwNTA2MjVaFw0yNjAxMjcwOTQwMjVaMDMxMTAvBgNV BAMTKDMyQkI1NzAwM0ExQkVBQTgwMTMxMUJFNzcyOUQ0NjJDRTc2OEJENzgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCgZ4wJoI3fpb7AM1xBRy5DraQp rmvuakYyemMixHDgKAnrUdVU6+HwQpzTUGX2RytvlORYrGKsBIsbpEqYLiCe1u1z lBlvkv8Tv8JXcJ38sTssYAfjqWxXSLlNl9UEVt8oL+VUpA5a0Je/T+6HudJoDfwB MapCHtxUt7rrGNG3ChP9AIYS8oDgwCPWkY0XlHxCWMs5+tnqm9vLL8RkBmlBJARO kqLwQ4ehkzzF5RkHtNHsUjGcoUVF9G27mTd94Qb5PhDSACBsC/1frpXczMofipPc ORtJSb7RGjJCbZD5egvF/KawJgasWBNpi4cK0RYu+/DluFgkxCO8/amV6L5zAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUMrtXADob6qgBMRvncp1GLOdovXgwHwYDVR0j BBgwFoAUE9gOpTWlyi4OAPfHdqRxxeWlpHkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 NWMzMjFlYi0xNWY4LTQ2NDYtYjA1My1mMTk5ZDZmYTdmNTMvMC8xM0Q4MEVBNTM1 QTVDQTJFMEUwMEY3Qzc3NkE0NzFDNUU1QTVBNDc5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMTNEODBFQTUzNUE1Q0EyRTBFMDBGN0M3NzZBNDcxQzVFNUE1 QTQ3OS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOTVjMzIxZWItMTVmOC00NjQ2LWIw NTMtZjE5OWQ2ZmE3ZjUzLzAvMTNEODBFQTUzNUE1Q0EyRTBFMDBGN0M3NzZBNDcx QzVFNUE1QTQ3OS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHD6VznYP/ojw4F2QwOYETtaPD/jB/8IixrQ r8jPz8XB2UJs153Nph99Litla7/0Hqn7EMKDd7VEuXSbKLj9yIy81HbHyNdFWtV3 wGc2EH6fZUKO6VJVh9FwCKHCsnL84iOmXqCvZ41lFpxD7jBYmlkYbn/HAenD7h5i xFECDZdlYPc8aGNgqJqSQSTlTgUOgZLM/nsyDmyl6GpEqL8AxHWjMLVPkS77tmV7 uqcmt9nRQEUsj1AjEfEyhmnAwhjy/dmRjlYrd4miABrH+SnHsCkKTQLjwsBxLD8b lXamaOq+S3zkFHWxItznywdolRyp996OJUZuwvEhXCm2AVOqGXE= -----END CERTIFICATE-----Generated at Sun Jan 25 23:58:13 2026 by rpki-client