This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/a634c8dc-8853-4f65-8209-4fbee7ab4252/0/292C6CF5F336CE0D758E47F5DF9778633CDCA769.mft File: 292C6CF5F336CE0D758E47F5DF9778633CDCA769.mft (raw, json) Hash identifier: F5laBt0croKowGG3a3zGIdYEZC08XFBK+US8+0OYWAE= Subject key identifier: 28:B4:44:E6:26:F4:50:47:E8:66:D0:D3:F3:B2:78:97:36:FA:2D:E3 Authority key identifier: 29:2C:6C:F5:F3:36:CE:0D:75:8E:47:F5:DF:97:78:63:3C:DC:A7:69 Certificate issuer: /CN=292C6CF5F336CE0D758E47F5DF9778633CDCA769 Certificate serial: 2A986E5BB424D48230E83A3266958DA6D3CE7A3A Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/292C6CF5F336CE0D758E47F5DF9778633CDCA769.cer Subject info access: rsync://repo-rpki.idnic.net/repo/a634c8dc-8853-4f65-8209-4fbee7ab4252/0/292C6CF5F336CE0D758E47F5DF9778633CDCA769.mft Manifest number: 03C2 Signing time: Sun 25 Jan 2026 02:02:33 +0000 Manifest this update: Sun 25 Jan 2026 01:57:33 +0000 Manifest next update: Wed 28 Jan 2026 04:07:33 +0000 Files and hashes: 1: 292C6CF5F336CE0D758E47F5DF9778633CDCA769.crl (hash: 6Q+ZSM15FbS+jBBG0GM5DIrry122wrgUOuUlyPaa15g=) 2: 3130332e3136362e3133362e302f32332d3234203d3e203137393935.roa (hash: bN0O+3JGtIOaU62palp9MIrngagfeVADVprJx+0r0Fs=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/a634c8dc-8853-4f65-8209-4fbee7ab4252/0/292C6CF5F336CE0D758E47F5DF9778633CDCA769.crl rsync://repo-rpki.idnic.net/repo/a634c8dc-8853-4f65-8209-4fbee7ab4252/0/292C6CF5F336CE0D758E47F5DF9778633CDCA769.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/292C6CF5F336CE0D758E47F5DF9778633CDCA769.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 27 Jan 2026 15:32:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2a:98:6e:5b:b4:24:d4:82:30:e8:3a:32:66:95:8d:a6:d3:ce:7a:3a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=292C6CF5F336CE0D758E47F5DF9778633CDCA769 Validity Not Before: Jan 25 01:57:33 2026 GMT Not After : Jan 28 04:07:33 2026 GMT Subject: CN=28B444E626F45047E866D0D3F3B2789736FA2DE3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:2c:72:bc:ef:13:ce:53:4a:ac:c5:a9:80:f6: be:03:24:eb:18:25:f9:bd:b6:5b:55:13:8a:e1:e7: ea:21:a0:45:31:b0:94:68:c1:11:92:5c:2d:44:a0: c3:af:5b:2b:3e:39:9c:b1:4b:49:94:7a:aa:1e:79: e2:dd:9c:f3:ff:6e:0e:5c:22:5a:7b:b1:99:23:88: 41:9e:3f:cf:cc:0f:64:08:23:dc:5b:84:06:05:dd: 46:75:69:02:30:ff:0f:5e:8e:b9:c1:af:64:f6:76: 86:cd:8c:fe:1c:98:4c:fd:d7:c8:85:08:38:15:fe: c3:28:ab:31:14:6c:fe:b4:fa:7c:eb:41:63:0c:fa: 1a:04:08:ea:1f:b0:1a:53:85:7f:46:7c:37:19:6b: 28:a9:47:1b:55:41:aa:8b:de:0a:5d:a3:89:1f:a8: ba:79:b6:79:6b:e3:b2:9c:e6:da:06:71:26:36:af: dc:1d:de:08:0f:f8:82:02:76:bd:86:01:9a:de:54: e3:f6:77:d0:98:4d:18:c4:f0:10:e7:ef:f3:f4:2b: 02:cc:39:45:ab:f1:cd:e1:be:5f:79:4f:f9:ce:21: 67:d0:2f:72:93:1c:5c:67:22:3d:ef:34:7c:35:68: 1e:aa:a8:be:34:5b:6e:a0:52:a1:78:dd:37:d2:ec: 30:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:B4:44:E6:26:F4:50:47:E8:66:D0:D3:F3:B2:78:97:36:FA:2D:E3 X509v3 Authority Key Identifier: keyid:29:2C:6C:F5:F3:36:CE:0D:75:8E:47:F5:DF:97:78:63:3C:DC:A7:69 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/a634c8dc-8853-4f65-8209-4fbee7ab4252/0/292C6CF5F336CE0D758E47F5DF9778633CDCA769.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/292C6CF5F336CE0D758E47F5DF9778633CDCA769.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a634c8dc-8853-4f65-8209-4fbee7ab4252/0/292C6CF5F336CE0D758E47F5DF9778633CDCA769.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8d:6d:b5:ef:f8:6f:97:0c:fc:54:79:b7:6f:05:0e:69:c8:fe: 33:44:1b:c3:9b:d6:5b:d1:d7:0e:da:c1:7a:88:f1:d0:34:91: b7:d1:e4:5a:21:11:3a:1f:1f:1f:01:00:fb:d8:cd:b2:28:db: 25:5b:ad:be:0e:b1:30:59:02:68:d5:68:d5:1b:b6:ec:df:5d: ab:b2:db:fb:a0:aa:1a:7b:bd:cb:04:91:7e:75:2d:f8:64:c8: 01:08:f6:16:ba:c8:da:9c:27:a7:fb:b7:35:66:40:8d:34:04: 58:13:d4:3d:d6:92:d1:e1:9c:49:69:7b:f9:12:c0:5a:a9:87: a0:a1:bd:4c:10:78:e5:b6:79:65:35:29:b2:71:62:76:83:86: 9e:0f:ad:77:b8:3f:bc:c4:77:85:9e:d1:99:62:1b:53:d2:53: 64:b2:0a:9c:be:30:21:74:7d:a8:78:ab:2c:e5:7a:70:fc:11: c8:25:3f:37:7f:63:4c:07:12:2d:b2:69:7a:b6:84:60:8a:c4: c1:b0:a4:11:8d:92:7d:9b:63:e2:eb:22:bc:78:be:76:ee:74: 32:19:2c:01:eb:0b:49:9d:16:49:95:79:7b:11:2d:36:e7:38: 42:6f:0d:c6:66:67:37:5e:66:f5:00:b9:b6:68:fe:f0:0a:81: 54:d7:6a:05 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUKphuW7Qk1IIw6DoyZpWNptPOejowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjkyQzZDRjVGMzM2Q0UwRDc1OEU0N0Y1REY5Nzc4NjMz Q0RDQTc2OTAeFw0yNjAxMjUwMTU3MzNaFw0yNjAxMjgwNDA3MzNaMDMxMTAvBgNV BAMTKDI4QjQ0NEU2MjZGNDUwNDdFODY2RDBEM0YzQjI3ODk3MzZGQTJERTMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDlLHK87xPOU0qsxamA9r4DJOsY Jfm9tltVE4rh5+ohoEUxsJRowRGSXC1EoMOvWys+OZyxS0mUeqoeeeLdnPP/bg5c Ilp7sZkjiEGeP8/MD2QII9xbhAYF3UZ1aQIw/w9ejrnBr2T2dobNjP4cmEz918iF CDgV/sMoqzEUbP60+nzrQWMM+hoECOofsBpThX9GfDcZayipRxtVQaqL3gpdo4kf qLp5tnlr47Kc5toGcSY2r9wd3ggP+IICdr2GAZreVOP2d9CYTRjE8BDn7/P0KwLM OUWr8c3hvl95T/nOIWfQL3KTHFxnIj3vNHw1aB6qqL40W26gUqF43TfS7DCxAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUKLRE5ib0UEfoZtDT87J4lzb6LeMwHwYDVR0j BBgwFoAUKSxs9fM2zg11jkf135d4Yzzcp2kwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h NjM0YzhkYy04ODUzLTRmNjUtODIwOS00ZmJlZTdhYjQyNTIvMC8yOTJDNkNGNUYz MzZDRTBENzU4RTQ3RjVERjk3Nzg2MzNDRENBNzY5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMjkyQzZDRjVGMzM2Q0UwRDc1OEU0N0Y1REY5Nzc4NjMzQ0RD QTc2OS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYTYzNGM4ZGMtODg1My00ZjY1LTgy MDktNGZiZWU3YWI0MjUyLzAvMjkyQzZDRjVGMzM2Q0UwRDc1OEU0N0Y1REY5Nzc4 NjMzQ0RDQTc2OS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAI1tte/4b5cM/FR5t28FDmnI/jNEG8Ob1lvR 1w7awXqI8dA0kbfR5FohETofHx8BAPvYzbIo2yVbrb4OsTBZAmjVaNUbtuzfXauy 2/ugqhp7vcsEkX51LfhkyAEI9ha6yNqcJ6f7tzVmQI00BFgT1D3WktHhnElpe/kS wFqph6ChvUwQeOW2eWU1KbJxYnaDhp4PrXe4P7zEd4We0ZliG1PSU2SyCpy+MCF0 fah4qyzlenD8EcglPzd/Y0wHEi2yaXq2hGCKxMGwpBGNkn2bY+LrIrx4vnbudDIZ LAHrC0mdFkmVeXsRLTbnOEJvDcZmZzdeZvUAubZo/vAKgVTXagU= -----END CERTIFICATE-----Generated at Sun Jan 25 14:21:24 2026 by rpki-client