This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/a3fc1da3-8bf3-4ff2-977c-23cb273ad248/0/104297C14501204E355A97BD8ED42B1FB7C82B01.mft File: 104297C14501204E355A97BD8ED42B1FB7C82B01.mft (raw, json) Hash identifier: KgL2RQfkN05L7yRW+D67G6Ps8LKDBsVFj/YEZOIlz8Y= Subject key identifier: 30:8D:F7:CC:7A:25:59:17:A8:12:BD:CD:19:55:DA:66:CB:C8:5E:87 Authority key identifier: 10:42:97:C1:45:01:20:4E:35:5A:97:BD:8E:D4:2B:1F:B7:C8:2B:01 Certificate issuer: /CN=104297C14501204E355A97BD8ED42B1FB7C82B01 Certificate serial: 5A322FE571F375A5B4E7B398F039949ACA6E4B58 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/104297C14501204E355A97BD8ED42B1FB7C82B01.cer Subject info access: rsync://repo-rpki.idnic.net/repo/a3fc1da3-8bf3-4ff2-977c-23cb273ad248/0/104297C14501204E355A97BD8ED42B1FB7C82B01.mft Manifest number: 026E Signing time: Sat 24 Jan 2026 09:21:50 +0000 Manifest this update: Sat 24 Jan 2026 09:16:50 +0000 Manifest next update: Tue 27 Jan 2026 19:29:50 +0000 Files and hashes: 1: 104297C14501204E355A97BD8ED42B1FB7C82B01.crl (hash: tgr/7+DaNBtX+2Wjmw6QX/t1euY3ZDDswUQniS+LcQg=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/a3fc1da3-8bf3-4ff2-977c-23cb273ad248/0/104297C14501204E355A97BD8ED42B1FB7C82B01.crl rsync://repo-rpki.idnic.net/repo/a3fc1da3-8bf3-4ff2-977c-23cb273ad248/0/104297C14501204E355A97BD8ED42B1FB7C82B01.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/104297C14501204E355A97BD8ED42B1FB7C82B01.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 27 Jan 2026 19:29:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5a:32:2f:e5:71:f3:75:a5:b4:e7:b3:98:f0:39:94:9a:ca:6e:4b:58 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=104297C14501204E355A97BD8ED42B1FB7C82B01 Validity Not Before: Jan 24 09:16:50 2026 GMT Not After : Jan 27 19:29:50 2026 GMT Subject: CN=308DF7CC7A255917A812BDCD1955DA66CBC85E87 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:81:29:fb:21:5e:1f:80:b1:64:e9:a0:b1:b9: a2:c1:28:1e:66:ff:90:95:8e:30:4c:e1:5a:f1:69: 42:29:80:c1:a6:72:8f:e0:41:fc:eb:65:fe:d7:4c: 1c:5d:8f:f4:4a:37:76:98:ed:5e:23:e9:39:3e:94: 4a:54:e5:47:24:41:d2:94:40:60:8d:f5:f0:b6:41: b7:03:3b:94:b3:79:d2:16:80:5d:8f:e7:74:20:9d: 4e:d9:fa:ed:87:4b:ee:ab:ff:03:30:82:02:cc:42: 9e:ac:6d:79:a5:95:78:0d:c1:cb:74:62:ac:e6:af: 86:48:e3:00:65:ac:f4:b3:36:c9:c4:b0:ca:c6:41: c0:45:a0:e6:74:6f:70:b3:90:39:3a:42:c4:23:0d: 8c:ac:d3:3a:56:9d:76:7d:71:78:d9:9d:0f:8b:d0: 57:2c:c5:50:18:c9:76:dd:a4:39:ea:0e:b7:56:d6: cc:81:69:95:51:10:0e:9f:81:51:2f:01:e1:bf:0a: 27:7d:3c:32:d4:40:b2:fe:44:27:63:1e:09:d3:c7: 71:e4:1b:54:f8:97:01:49:fb:b3:63:9b:23:b2:dc: fb:c1:7a:77:b2:65:ba:c8:a0:80:73:49:69:73:8f: a7:3f:c0:ce:b4:0b:08:7b:72:64:e8:30:12:6f:f0: 70:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 30:8D:F7:CC:7A:25:59:17:A8:12:BD:CD:19:55:DA:66:CB:C8:5E:87 X509v3 Authority Key Identifier: keyid:10:42:97:C1:45:01:20:4E:35:5A:97:BD:8E:D4:2B:1F:B7:C8:2B:01 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/a3fc1da3-8bf3-4ff2-977c-23cb273ad248/0/104297C14501204E355A97BD8ED42B1FB7C82B01.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/104297C14501204E355A97BD8ED42B1FB7C82B01.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a3fc1da3-8bf3-4ff2-977c-23cb273ad248/0/104297C14501204E355A97BD8ED42B1FB7C82B01.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 96:c3:73:fb:4a:69:6d:96:19:db:08:f4:c2:b7:9d:ad:c3:05: 1a:cc:4b:47:84:4f:53:e5:4c:0d:a1:f1:1e:92:c2:2c:22:7d: aa:ea:f6:5b:ed:29:ab:7c:bc:05:6c:28:a6:ba:2c:d8:62:30: b2:4e:91:c1:db:50:d0:9a:15:4f:f4:75:b6:00:84:3a:e3:8f: 75:20:10:2d:e2:51:81:5e:5e:c0:fc:8f:38:08:dc:fa:e9:bd: f3:2d:66:f8:e2:d0:2d:a4:5f:75:81:47:a8:bc:41:4d:1e:0c: b8:22:10:b4:cf:9e:e2:7c:5e:7f:f0:c1:6c:c6:6c:01:f4:56: 43:d4:f3:aa:5a:56:e5:be:d1:d9:d9:f6:92:a8:b8:65:e6:7e: 58:aa:72:39:24:04:54:cc:17:8b:46:7e:75:f1:f4:85:2c:18: 98:40:99:c8:3e:63:23:bc:ee:80:14:1f:4a:a0:f8:fe:26:9e: a8:39:58:a2:77:dc:a0:7f:31:0d:7c:7f:2c:ea:37:d5:4e:b0: 49:6d:c1:a8:5c:90:c3:c2:87:55:57:a4:73:d9:0d:92:01:5d: 16:18:b5:f3:11:58:e9:25:0e:32:d7:7d:15:07:10:c1:52:cf: b8:93:b5:35:21:05:bf:9b:a9:cb:b8:ef:eb:60:a3:0d:0e:e5: 18:da:0b:84 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUWjIv5XHzdaW057OY8DmUmspuS1gwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTA0Mjk3QzE0NTAxMjA0RTM1NUE5N0JEOEVENDJCMUZC N0M4MkIwMTAeFw0yNjAxMjQwOTE2NTBaFw0yNjAxMjcxOTI5NTBaMDMxMTAvBgNV BAMTKDMwOERGN0NDN0EyNTU5MTdBODEyQkRDRDE5NTVEQTY2Q0JDODVFODcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDPgSn7IV4fgLFk6aCxuaLBKB5m /5CVjjBM4VrxaUIpgMGmco/gQfzrZf7XTBxdj/RKN3aY7V4j6Tk+lEpU5UckQdKU QGCN9fC2QbcDO5SzedIWgF2P53QgnU7Z+u2HS+6r/wMwggLMQp6sbXmllXgNwct0 Yqzmr4ZI4wBlrPSzNsnEsMrGQcBFoOZ0b3CzkDk6QsQjDYys0zpWnXZ9cXjZnQ+L 0FcsxVAYyXbdpDnqDrdW1syBaZVREA6fgVEvAeG/Cid9PDLUQLL+RCdjHgnTx3Hk G1T4lwFJ+7NjmyOy3PvBeneyZbrIoIBzSWlzj6c/wM60Cwh7cmToMBJv8HAzAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUMI33zHolWReoEr3NGVXaZsvIXocwHwYDVR0j BBgwFoAUEEKXwUUBIE41Wpe9jtQrH7fIKwEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h M2ZjMWRhMy04YmYzLTRmZjItOTc3Yy0yM2NiMjczYWQyNDgvMC8xMDQyOTdDMTQ1 MDEyMDRFMzU1QTk3QkQ4RUQ0MkIxRkI3QzgyQjAxLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMTA0Mjk3QzE0NTAxMjA0RTM1NUE5N0JEOEVENDJCMUZCN0M4 MkIwMS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYTNmYzFkYTMtOGJmMy00ZmYyLTk3 N2MtMjNjYjI3M2FkMjQ4LzAvMTA0Mjk3QzE0NTAxMjA0RTM1NUE5N0JEOEVENDJC MUZCN0M4MkIwMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJbDc/tKaW2WGdsI9MK3na3DBRrMS0eET1Pl TA2h8R6Swiwifarq9lvtKat8vAVsKKa6LNhiMLJOkcHbUNCaFU/0dbYAhDrjj3Ug EC3iUYFeXsD8jzgI3PrpvfMtZvji0C2kX3WBR6i8QU0eDLgiELTPnuJ8Xn/wwWzG bAH0VkPU86paVuW+0dnZ9pKouGXmfliqcjkkBFTMF4tGfnXx9IUsGJhAmcg+YyO8 7oAUH0qg+P4mnqg5WKJ33KB/MQ18fyzqN9VOsEltwahckMPCh1VXpHPZDZIBXRYY tfMRWOklDjLXfRUHEMFSz7iTtTUhBb+bqcu47+tgow0O5RjaC4Q= -----END CERTIFICATE-----Generated at Sun Jan 25 21:49:04 2026 by rpki-client