This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/a13de3ec-4d3c-4402-a7b8-8a1b96226e75/1/1D024B7DF6A4F54213C50C405AE1E37B8521B49A.mft File: 1D024B7DF6A4F54213C50C405AE1E37B8521B49A.mft (raw, json) Hash identifier: 9zFbfCyTvZY1rjtqq4GUME3etqAzOEg/I5GhgbkZ5Qo= Subject key identifier: C6:6B:9A:48:50:E2:F9:64:0B:8D:77:0E:7A:53:67:4A:CD:53:F7:CC Authority key identifier: 1D:02:4B:7D:F6:A4:F5:42:13:C5:0C:40:5A:E1:E3:7B:85:21:B4:9A Certificate issuer: /CN=1D024B7DF6A4F54213C50C405AE1E37B8521B49A Certificate serial: 6252F17DFD136D01543CD4E53AFD65964818092D Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1D024B7DF6A4F54213C50C405AE1E37B8521B49A.cer Subject info access: rsync://repo-rpki.idnic.net/repo/a13de3ec-4d3c-4402-a7b8-8a1b96226e75/1/1D024B7DF6A4F54213C50C405AE1E37B8521B49A.mft Manifest number: BC Signing time: Sun 25 Jan 2026 13:21:20 +0000 Manifest this update: Sun 25 Jan 2026 13:16:20 +0000 Manifest next update: Wed 28 Jan 2026 18:02:20 +0000 Files and hashes: 1: 1D024B7DF6A4F54213C50C405AE1E37B8521B49A.crl (hash: ur1wwcinUK+LGct0XK8xBJx6IrV4LzoK+cC2cyMYtlM=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/a13de3ec-4d3c-4402-a7b8-8a1b96226e75/1/1D024B7DF6A4F54213C50C405AE1E37B8521B49A.crl rsync://repo-rpki.idnic.net/repo/a13de3ec-4d3c-4402-a7b8-8a1b96226e75/1/1D024B7DF6A4F54213C50C405AE1E37B8521B49A.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1D024B7DF6A4F54213C50C405AE1E37B8521B49A.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 28 Jan 2026 14:00:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 62:52:f1:7d:fd:13:6d:01:54:3c:d4:e5:3a:fd:65:96:48:18:09:2d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1D024B7DF6A4F54213C50C405AE1E37B8521B49A Validity Not Before: Jan 25 13:16:20 2026 GMT Not After : Jan 28 18:02:20 2026 GMT Subject: CN=C66B9A4850E2F9640B8D770E7A53674ACD53F7CC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:6d:de:5e:5b:c9:c0:e8:7a:be:7d:f6:50:ef: 97:04:bd:38:16:4d:93:0f:e9:ef:ef:2e:8b:b2:47: e0:fa:81:2e:e2:c1:3a:23:c6:66:57:7b:3c:73:18: 30:2e:05:ad:6a:e8:59:bb:a5:d3:45:6c:39:04:68: 5b:fd:dc:79:99:18:b3:0e:5e:d4:4e:01:b1:56:0a: 4c:f9:4d:2b:cf:06:db:86:2e:ae:67:65:e2:e1:8c: 5f:0e:ff:ac:9b:f1:53:48:81:86:cd:8d:89:c2:b1: 88:c2:73:f6:d6:87:ff:19:c0:b5:bb:2d:bb:6a:07: fc:b6:8f:b6:ba:35:b4:b3:f1:d0:10:00:ae:df:24: cb:d4:b8:02:8e:ba:6d:c8:86:ca:c1:6e:e9:b7:ad: 95:71:34:2c:f5:57:b5:38:96:aa:63:f2:af:65:11: c0:bd:5a:4c:5e:bf:f0:09:b2:a9:a1:e4:44:6a:34: 1f:87:46:c4:aa:9e:2f:6d:57:b7:fe:5e:ec:9b:75: 9b:4e:4d:94:a5:8c:78:b1:07:ee:a1:cc:4b:0a:02: f1:15:7c:9e:18:df:24:59:9c:c7:e1:93:5d:95:9e: 9d:f2:b7:5b:f3:da:71:2a:7e:22:54:22:ea:28:e5: 2e:bb:c5:24:35:23:64:6b:d6:73:45:eb:51:64:0d: ac:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C6:6B:9A:48:50:E2:F9:64:0B:8D:77:0E:7A:53:67:4A:CD:53:F7:CC X509v3 Authority Key Identifier: keyid:1D:02:4B:7D:F6:A4:F5:42:13:C5:0C:40:5A:E1:E3:7B:85:21:B4:9A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/a13de3ec-4d3c-4402-a7b8-8a1b96226e75/1/1D024B7DF6A4F54213C50C405AE1E37B8521B49A.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1D024B7DF6A4F54213C50C405AE1E37B8521B49A.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a13de3ec-4d3c-4402-a7b8-8a1b96226e75/1/1D024B7DF6A4F54213C50C405AE1E37B8521B49A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5d:c6:23:88:78:f4:b6:9a:de:56:74:ec:12:ff:bd:0f:e1:3b: 6b:9c:a8:76:ad:ec:15:9b:2c:9f:87:65:0a:2d:ed:68:bb:1c: 9d:de:50:c5:56:7a:76:e0:1e:7c:ba:24:39:52:65:2e:1e:8e: b3:a3:c6:3b:23:10:6d:23:9d:ab:af:92:ad:8f:2d:05:60:96: ce:d4:f5:48:17:b2:3d:90:73:69:6f:38:6d:f3:c3:83:a7:0f: 2b:67:f6:e0:d7:75:6e:87:1d:b8:95:55:58:fd:96:f1:57:b3: 69:10:a7:90:4e:da:ac:eb:b7:d3:3a:a3:97:64:5f:1f:9b:3f: c0:98:26:5f:7e:75:62:f0:88:31:ff:d3:da:89:e6:b5:2f:71: 6e:06:fc:3c:f6:6f:c7:d8:68:4d:87:6a:35:a7:83:81:e9:42: a9:a6:b7:0c:1c:88:35:73:2c:28:f0:6d:f4:d5:5d:4f:0f:a1: 33:3a:f6:c3:52:4a:91:16:91:d9:89:c8:bf:26:73:4b:02:89: 9f:3f:5e:18:e8:db:af:0c:8e:55:db:b8:ec:81:37:49:03:e9: b8:be:28:10:34:ee:73:90:43:eb:18:35:5b:75:53:bd:fa:96: f2:1f:97:c9:35:52:a2:08:1c:0f:a6:4f:5c:f6:0b:75:5d:39: 69:38:bd:74 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUYlLxff0TbQFUPNTlOv1llkgYCS0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUQwMjRCN0RGNkE0RjU0MjEzQzUwQzQwNUFFMUUzN0I4 NTIxQjQ5QTAeFw0yNjAxMjUxMzE2MjBaFw0yNjAxMjgxODAyMjBaMDMxMTAvBgNV BAMTKEM2NkI5QTQ4NTBFMkY5NjQwQjhENzcwRTdBNTM2NzRBQ0Q1M0Y3Q0MwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDnbd5eW8nA6Hq+ffZQ75cEvTgW TZMP6e/vLouyR+D6gS7iwTojxmZXezxzGDAuBa1q6Fm7pdNFbDkEaFv93HmZGLMO XtROAbFWCkz5TSvPBtuGLq5nZeLhjF8O/6yb8VNIgYbNjYnCsYjCc/bWh/8ZwLW7 LbtqB/y2j7a6NbSz8dAQAK7fJMvUuAKOum3IhsrBbum3rZVxNCz1V7U4lqpj8q9l EcC9Wkxev/AJsqmh5ERqNB+HRsSqni9tV7f+XuybdZtOTZSljHixB+6hzEsKAvEV fJ4Y3yRZnMfhk12Vnp3yt1vz2nEqfiJUIuoo5S67xSQ1I2Rr1nNF61FkDaxrAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUxmuaSFDi+WQLjXcOelNnSs1T98wwHwYDVR0j BBgwFoAUHQJLffak9UITxQxAWuHje4UhtJowDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h MTNkZTNlYy00ZDNjLTQ0MDItYTdiOC04YTFiOTYyMjZlNzUvMS8xRDAyNEI3REY2 QTRGNTQyMTNDNTBDNDA1QUUxRTM3Qjg1MjFCNDlBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMUQwMjRCN0RGNkE0RjU0MjEzQzUwQzQwNUFFMUUzN0I4NTIx QjQ5QS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYTEzZGUzZWMtNGQzYy00NDAyLWE3 YjgtOGExYjk2MjI2ZTc1LzEvMUQwMjRCN0RGNkE0RjU0MjEzQzUwQzQwNUFFMUUz N0I4NTIxQjQ5QS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAF3GI4h49Laa3lZ07BL/vQ/hO2ucqHat7BWb LJ+HZQot7Wi7HJ3eUMVWenbgHny6JDlSZS4ejrOjxjsjEG0jnauvkq2PLQVgls7U 9UgXsj2Qc2lvOG3zw4OnDytn9uDXdW6HHbiVVVj9lvFXs2kQp5BO2qzrt9M6o5dk Xx+bP8CYJl9+dWLwiDH/09qJ5rUvcW4G/Dz2b8fYaE2HajWng4HpQqmmtwwciDVz LCjwbfTVXU8PoTM69sNSSpEWkdmJyL8mc0sCiZ8/Xhjo268MjlXbuOyBN0kD6bi+ KBA07nOQQ+sYNVt1U736lvIfl8k1UqIIHA+mT1z2C3VdOWk4vXQ= -----END CERTIFICATE-----Generated at Sun Jan 25 18:44:19 2026 by rpki-client