This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/9ebe7ad8-e15c-4014-bfb3-be69b7d5de88/0/C20DD37AF0EF3CA055DFDF8F3F5D18F0818196F4.mft File: C20DD37AF0EF3CA055DFDF8F3F5D18F0818196F4.mft (raw, json) Hash identifier: i5yihPBYA7FE3PfMYcPn2V4LjSmOqE8wkYjuE5GqZKA= Subject key identifier: A0:70:B3:85:FC:BB:79:BF:7C:13:13:4A:B5:CF:6D:3F:76:66:9D:26 Authority key identifier: C2:0D:D3:7A:F0:EF:3C:A0:55:DF:DF:8F:3F:5D:18:F0:81:81:96:F4 Certificate issuer: /CN=C20DD37AF0EF3CA055DFDF8F3F5D18F0818196F4 Certificate serial: 2FC2AC18E3E4E03DD97AF52803F96D6B9D4D8D17 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C20DD37AF0EF3CA055DFDF8F3F5D18F0818196F4.cer Subject info access: rsync://repo-rpki.idnic.net/repo/9ebe7ad8-e15c-4014-bfb3-be69b7d5de88/0/C20DD37AF0EF3CA055DFDF8F3F5D18F0818196F4.mft Manifest number: 0390 Signing time: Sat 24 Jan 2026 00:12:08 +0000 Manifest this update: Sat 24 Jan 2026 00:07:08 +0000 Manifest next update: Tue 27 Jan 2026 06:35:08 +0000 Files and hashes: 1: 3130332e3136312e37332e302f32342d3234203d3e20313430333936.roa (hash: /rt35EUSw4Ix6/cmxLUEYEesdVZ42xEum9IJJSBZ0aY=) 2: 3130332e3136312e37322e302f32342d3234203d3e203538333738.roa (hash: KGeHvvLL7YUj6ruPXwXmEedVa7petv8U3MdeekZgjts=) 3: C20DD37AF0EF3CA055DFDF8F3F5D18F0818196F4.crl (hash: n1PuFTdx+BR00JemvwD+qAhcm2JjZWDnz/z1zk86XAY=) 4: 3130332e3136312e37332e302f32342d3234203d3e203538333738.roa (hash: yhKeiwU+JCs9UN8oh228h1Q0h11o4+yJwLGZRxsDQjM=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/9ebe7ad8-e15c-4014-bfb3-be69b7d5de88/0/C20DD37AF0EF3CA055DFDF8F3F5D18F0818196F4.crl rsync://repo-rpki.idnic.net/repo/9ebe7ad8-e15c-4014-bfb3-be69b7d5de88/0/C20DD37AF0EF3CA055DFDF8F3F5D18F0818196F4.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C20DD37AF0EF3CA055DFDF8F3F5D18F0818196F4.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 27 Jan 2026 06:35:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2f:c2:ac:18:e3:e4:e0:3d:d9:7a:f5:28:03:f9:6d:6b:9d:4d:8d:17 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C20DD37AF0EF3CA055DFDF8F3F5D18F0818196F4 Validity Not Before: Jan 24 00:07:08 2026 GMT Not After : Jan 27 06:35:08 2026 GMT Subject: CN=A070B385FCBB79BF7C13134AB5CF6D3F76669D26 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:7a:46:47:90:58:8d:69:bf:fb:a2:aa:68:57: 91:01:e8:65:62:f3:14:fe:ab:58:e0:db:4b:0b:e9: 38:04:d6:06:e9:1c:aa:6c:73:35:41:08:4c:ae:87: f8:ba:8d:8d:ce:73:70:c6:81:7e:18:00:9a:30:fa: d6:da:b8:f8:cc:11:bd:fc:54:5a:a0:70:ad:20:98: ec:a9:ec:b2:6d:69:66:52:dc:d7:e4:cb:a3:bd:87: 2b:10:10:3f:26:c6:f6:80:0c:d9:70:55:f9:c7:6a: 85:9b:65:cb:58:c3:24:46:28:84:a5:4d:9e:ea:1c: 13:9f:5a:be:1c:46:8d:ea:da:06:c1:9a:25:85:2b: 14:d9:5c:b8:df:82:a0:10:58:ab:b8:a2:95:5c:44: 86:24:6a:54:1f:3d:53:a7:5e:e3:c3:56:c9:5a:dc: 7a:1d:cb:a3:2c:80:c3:b1:2a:e0:74:19:54:7d:d9: fd:42:f4:03:d7:3a:2c:91:2e:1a:c0:a9:7c:a1:9b: 1e:2e:4e:e0:4a:50:0b:78:0f:93:6f:5a:08:2f:a9: 63:7d:c8:68:53:a0:d0:62:a5:ae:e5:64:c5:dc:77: 32:cf:6a:28:c4:34:ac:e6:b0:77:2f:28:20:26:88: f3:6c:9d:ca:9a:64:ce:6a:04:0c:85:e8:ed:26:c6: b5:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:70:B3:85:FC:BB:79:BF:7C:13:13:4A:B5:CF:6D:3F:76:66:9D:26 X509v3 Authority Key Identifier: keyid:C2:0D:D3:7A:F0:EF:3C:A0:55:DF:DF:8F:3F:5D:18:F0:81:81:96:F4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/9ebe7ad8-e15c-4014-bfb3-be69b7d5de88/0/C20DD37AF0EF3CA055DFDF8F3F5D18F0818196F4.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C20DD37AF0EF3CA055DFDF8F3F5D18F0818196F4.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/9ebe7ad8-e15c-4014-bfb3-be69b7d5de88/0/C20DD37AF0EF3CA055DFDF8F3F5D18F0818196F4.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 31:e8:23:98:7e:39:55:54:f0:0d:73:2e:8d:43:34:d8:4a:5b: b7:90:27:a9:97:44:05:53:23:9b:40:3a:8a:f2:56:ee:f7:01: 42:8a:1d:b1:fe:14:f1:85:53:2b:13:56:12:ec:55:7d:f3:8e: af:30:c2:8b:b9:ea:7d:57:cd:82:23:ad:d3:42:86:35:e6:1e: 85:7c:1c:e8:74:f9:09:a9:4f:e2:3a:d5:1f:64:56:ea:3f:30: 60:95:b8:60:1a:32:7e:e0:27:1d:d9:f6:f3:bd:23:18:ab:56: 50:5b:cf:ea:06:44:78:cf:36:19:9e:1a:64:d6:67:c9:f0:ef: e3:41:dd:51:f7:98:95:5e:f8:dc:29:dd:06:f8:71:fd:1e:29: cc:86:2c:71:b0:26:92:aa:d7:a6:e0:4e:d9:63:54:09:3f:e4: e4:fa:d8:e7:89:70:6e:64:8a:5f:61:1a:64:1c:b1:06:89:69: 2d:eb:0f:30:82:f9:27:19:ee:24:52:da:bc:5f:6c:51:56:f5: 2f:d2:2f:ff:eb:55:82:00:2d:b9:77:74:04:8e:bc:fa:4f:7b: 6b:93:c7:85:f4:76:f0:52:73:1f:12:be:54:ce:e8:a2:ed:b0: 8f:62:e6:fc:56:45:d3:4a:81:cd:68:a8:d6:23:30:92:31:c7: ed:a0:8f:9c -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUL8KsGOPk4D3ZevUoA/lta51NjRcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzIwREQzN0FGMEVGM0NBMDU1REZERjhGM0Y1RDE4RjA4 MTgxOTZGNDAeFw0yNjAxMjQwMDA3MDhaFw0yNjAxMjcwNjM1MDhaMDMxMTAvBgNV BAMTKEEwNzBCMzg1RkNCQjc5QkY3QzEzMTM0QUI1Q0Y2RDNGNzY2NjlEMjYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDOekZHkFiNab/7oqpoV5EB6GVi 8xT+q1jg20sL6TgE1gbpHKpsczVBCEyuh/i6jY3Oc3DGgX4YAJow+tbauPjMEb38 VFqgcK0gmOyp7LJtaWZS3Nfky6O9hysQED8mxvaADNlwVfnHaoWbZctYwyRGKISl TZ7qHBOfWr4cRo3q2gbBmiWFKxTZXLjfgqAQWKu4opVcRIYkalQfPVOnXuPDVsla 3Hody6MsgMOxKuB0GVR92f1C9APXOiyRLhrAqXyhmx4uTuBKUAt4D5NvWggvqWN9 yGhToNBipa7lZMXcdzLPaijENKzmsHcvKCAmiPNsncqaZM5qBAyF6O0mxrWJAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUoHCzhfy7eb98ExNKtc9tP3ZmnSYwHwYDVR0j BBgwFoAUwg3TevDvPKBV39+PP10Y8IGBlvQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 ZWJlN2FkOC1lMTVjLTQwMTQtYmZiMy1iZTY5YjdkNWRlODgvMC9DMjBERDM3QUYw RUYzQ0EwNTVERkRGOEYzRjVEMThGMDgxODE5NkY0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQzIwREQzN0FGMEVGM0NBMDU1REZERjhGM0Y1RDE4RjA4MTgx OTZGNC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOWViZTdhZDgtZTE1Yy00MDE0LWJm YjMtYmU2OWI3ZDVkZTg4LzAvQzIwREQzN0FGMEVGM0NBMDU1REZERjhGM0Y1RDE4 RjA4MTgxOTZGNC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADHoI5h+OVVU8A1zLo1DNNhKW7eQJ6mXRAVT I5tAOoryVu73AUKKHbH+FPGFUysTVhLsVX3zjq8wwou56n1XzYIjrdNChjXmHoV8 HOh0+QmpT+I61R9kVuo/MGCVuGAaMn7gJx3Z9vO9IxirVlBbz+oGRHjPNhmeGmTW Z8nw7+NB3VH3mJVe+Nwp3Qb4cf0eKcyGLHGwJpKq16bgTtljVAk/5OT62OeJcG5k il9hGmQcsQaJaS3rDzCC+ScZ7iRS2rxfbFFW9S/SL//rVYIALbl3dASOvPpPe2uT x4X0dvBScx8SvlTO6KLtsI9i5vxWRdNKgc1oqNYjMJIxx+2gj5w= -----END CERTIFICATE-----Generated at Sun Jan 25 18:53:41 2026 by rpki-client