This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/a36465ec-9160-459b-8d11-948fc26da1c0/0/415543D423E0BD035D612DEA9BF060290E5552D2.mft File: 415543D423E0BD035D612DEA9BF060290E5552D2.mft (raw, json) Hash identifier: LnuAmtnUolMvlbe2aSVJQW2a0Mgs8xztgSb9pcwDe4k= Subject key identifier: 0B:14:21:6D:09:5C:35:FC:1D:61:A3:68:9C:7D:1A:9F:4F:5D:B6:52 Authority key identifier: 41:55:43:D4:23:E0:BD:03:5D:61:2D:EA:9B:F0:60:29:0E:55:52:D2 Certificate issuer: /CN=415543D423E0BD035D612DEA9BF060290E5552D2 Certificate serial: 419C472A45C755094C03D3EBE49EE3C71D81F181 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/415543D423E0BD035D612DEA9BF060290E5552D2.cer Subject info access: rsync://repo-rpki.idnic.net/repo/a36465ec-9160-459b-8d11-948fc26da1c0/0/415543D423E0BD035D612DEA9BF060290E5552D2.mft Manifest number: 0279 Signing time: Sat 24 Jan 2026 05:31:23 +0000 Manifest this update: Sat 24 Jan 2026 05:26:23 +0000 Manifest next update: Tue 27 Jan 2026 09:15:23 +0000 Files and hashes: 1: 415543D423E0BD035D612DEA9BF060290E5552D2.crl (hash: WFPC6V1kft+Fvv/lQidhnaeclxtQftV26m3KjGlY7KU=) 2: 3130332e39352e382e302f32342d3234203d3e20313335343838.roa (hash: P5qy6MSQkzBzIpWfwlqRGgttfjrknKyQRFiwh+AluKw=) 3: 3130332e39352e31302e302f32342d3234203d3e20313335343838.roa (hash: nboIz3jrBgP6JOmA3BVAd2UeOfnp74QAUC5BcPTJ2ug=) 4: 3130332e39352e382e302f32322d3232203d3e20313335343838.roa (hash: V41dsoCGv/A1SNxCT74tNpzG0O4+YBlV/SgqxtUPiBI=) 5: 3130332e39352e392e302f32342d3234203d3e20313335343838.roa (hash: VFHHlL/fG0xnRMHoMgqrHUpXEdzrJEYbY3L4Yb6Ynkg=) 6: 3130332e39352e31312e302f32342d3234203d3e20313335343838.roa (hash: uRQw+5QQP0wXxplDqYvXD7a/PuPwjnqYNZPmeOG1eFc=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/a36465ec-9160-459b-8d11-948fc26da1c0/0/415543D423E0BD035D612DEA9BF060290E5552D2.crl rsync://repo-rpki.idnic.net/repo/a36465ec-9160-459b-8d11-948fc26da1c0/0/415543D423E0BD035D612DEA9BF060290E5552D2.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/415543D423E0BD035D612DEA9BF060290E5552D2.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 27 Jan 2026 09:15:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 41:9c:47:2a:45:c7:55:09:4c:03:d3:eb:e4:9e:e3:c7:1d:81:f1:81 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=415543D423E0BD035D612DEA9BF060290E5552D2 Validity Not Before: Jan 24 05:26:23 2026 GMT Not After : Jan 27 09:15:23 2026 GMT Subject: CN=0B14216D095C35FC1D61A3689C7D1A9F4F5DB652 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:14:c8:a5:4b:22:6e:af:62:ec:b0:27:63:d4: 9e:3c:3a:3c:5a:b8:f8:f6:a7:74:91:cf:b8:6b:63: e2:76:cd:f3:da:62:c6:2a:cd:06:bb:12:11:fd:ba: 23:ab:78:2e:20:77:f2:d1:fa:7d:be:43:f6:fa:b2: 78:d5:93:57:f9:18:5b:9c:ec:06:bc:8d:d1:35:a6: 82:e6:24:dd:5c:d0:63:32:7c:b0:67:eb:2b:ec:75: ef:3d:4e:d1:c9:25:8b:2f:ec:1c:f2:0f:a7:48:3a: 04:21:12:6a:d7:0d:fb:5b:95:2c:cf:51:75:95:dd: 90:51:d5:8e:d6:c2:22:29:d1:7d:59:13:c9:99:76: 0a:77:b0:b8:d4:46:6c:ee:d2:6e:90:ae:2e:57:b3: af:8a:30:af:79:49:3f:0f:2e:4a:3b:ce:4e:0c:6b: 44:23:08:99:57:38:65:1f:6d:5b:17:1c:9c:10:9e: 7c:53:0e:88:41:0e:59:4d:6e:3e:2c:09:5b:b3:8f: b6:bd:a2:b9:36:ac:06:82:22:07:27:1e:e3:45:52: 44:ed:75:87:d4:d0:e6:9b:29:b6:94:e5:e2:a7:ef: 09:1f:e2:59:d7:c1:08:73:c2:63:82:1d:01:d4:71: 8c:da:a6:fc:ef:91:52:cc:d8:eb:5e:94:aa:fc:9c: cd:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0B:14:21:6D:09:5C:35:FC:1D:61:A3:68:9C:7D:1A:9F:4F:5D:B6:52 X509v3 Authority Key Identifier: keyid:41:55:43:D4:23:E0:BD:03:5D:61:2D:EA:9B:F0:60:29:0E:55:52:D2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/a36465ec-9160-459b-8d11-948fc26da1c0/0/415543D423E0BD035D612DEA9BF060290E5552D2.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/415543D423E0BD035D612DEA9BF060290E5552D2.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a36465ec-9160-459b-8d11-948fc26da1c0/0/415543D423E0BD035D612DEA9BF060290E5552D2.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 90:6d:ff:e8:d8:76:7f:d1:0a:f6:b9:85:29:79:ab:97:a9:cd: 3b:43:0a:e9:5d:11:37:49:f6:dd:3a:e4:a9:86:55:fe:06:79: 1c:6a:7c:e1:1f:74:47:50:e9:a1:95:8f:8e:cc:4e:20:20:d6: 04:d6:ca:ca:fd:bf:40:94:cb:00:ff:18:3e:9f:33:9b:f7:1a: d5:c6:3c:cf:5c:79:05:cf:ab:2e:10:c4:55:97:2c:0e:3a:22: 54:38:1c:75:b0:ae:fd:4d:e4:e6:93:8a:79:cf:21:88:13:67: 3a:75:92:23:fe:99:9a:b1:52:72:d1:cf:79:02:44:88:40:03: 4c:e1:10:cf:50:55:4d:e1:f2:6f:f1:71:33:28:56:ef:16:de: fd:eb:a9:5b:e9:be:1c:5e:fe:62:f8:40:0f:ab:de:80:c7:16: 58:f8:24:c8:16:5e:6f:1f:90:3d:61:75:14:4e:77:71:6a:e0: 73:e6:d7:71:f5:4b:37:b7:aa:b8:24:1b:03:aa:37:62:3e:9e: 71:ef:02:ea:f4:26:db:cc:97:ae:f2:98:9b:b8:51:1b:65:19: 31:c7:48:77:72:75:c0:95:30:79:05:af:8e:69:e6:02:5c:6f: 58:5d:34:42:da:70:93:6a:8d:1d:93:56:2a:92:bb:fb:ff:f6: fd:12:16:79 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUQZxHKkXHVQlMA9Pr5J7jxx2B8YEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDE1NTQzRDQyM0UwQkQwMzVENjEyREVBOUJGMDYwMjkw RTU1NTJEMjAeFw0yNjAxMjQwNTI2MjNaFw0yNjAxMjcwOTE1MjNaMDMxMTAvBgNV BAMTKDBCMTQyMTZEMDk1QzM1RkMxRDYxQTM2ODlDN0QxQTlGNEY1REI2NTIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC8FMilSyJur2LssCdj1J48Ojxa uPj2p3SRz7hrY+J2zfPaYsYqzQa7EhH9uiOreC4gd/LR+n2+Q/b6snjVk1f5GFuc 7Aa8jdE1poLmJN1c0GMyfLBn6yvsde89TtHJJYsv7BzyD6dIOgQhEmrXDftblSzP UXWV3ZBR1Y7WwiIp0X1ZE8mZdgp3sLjURmzu0m6Qri5Xs6+KMK95ST8PLko7zk4M a0QjCJlXOGUfbVsXHJwQnnxTDohBDllNbj4sCVuzj7a9ork2rAaCIgcnHuNFUkTt dYfU0OabKbaU5eKn7wkf4lnXwQhzwmOCHQHUcYzapvzvkVLM2OtelKr8nM1hAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUCxQhbQlcNfwdYaNonH0an09dtlIwHwYDVR0j BBgwFoAUQVVD1CPgvQNdYS3qm/BgKQ5VUtIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h MzY0NjVlYy05MTYwLTQ1OWItOGQxMS05NDhmYzI2ZGExYzAvMC80MTU1NDNENDIz RTBCRDAzNUQ2MTJERUE5QkYwNjAyOTBFNTU1MkQyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNDE1NTQzRDQyM0UwQkQwMzVENjEyREVBOUJGMDYwMjkwRTU1 NTJEMi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYTM2NDY1ZWMtOTE2MC00NTliLThk MTEtOTQ4ZmMyNmRhMWMwLzAvNDE1NTQzRDQyM0UwQkQwMzVENjEyREVBOUJGMDYw MjkwRTU1NTJEMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJBt/+jYdn/RCva5hSl5q5epzTtDCuldETdJ 9t065KmGVf4GeRxqfOEfdEdQ6aGVj47MTiAg1gTWysr9v0CUywD/GD6fM5v3GtXG PM9ceQXPqy4QxFWXLA46IlQ4HHWwrv1N5OaTinnPIYgTZzp1kiP+mZqxUnLRz3kC RIhAA0zhEM9QVU3h8m/xcTMoVu8W3v3rqVvpvhxe/mL4QA+r3oDHFlj4JMgWXm8f kD1hdRROd3Fq4HPm13H1Sze3qrgkGwOqN2I+nnHvAur0JtvMl67ymJu4URtlGTHH SHdydcCVMHkFr45p5gJcb1hdNELacJNqjR2TViqSu/v/9v0SFnk= -----END CERTIFICATE-----Generated at Sun Jan 25 23:56:33 2026 by rpki-client