This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/ab313d17-5b9b-4d23-9424-74579508ba54/0/64FFF4BF67B5B3EF9DC6545842C118D75F6042D8.mft File: 64FFF4BF67B5B3EF9DC6545842C118D75F6042D8.mft (raw, json) Hash identifier: yMyypx1AmVJYf/0dnYzrMrUEmWR17tmSszQ34WdUiMk= Subject key identifier: 5F:A6:54:27:70:89:73:92:DF:51:3E:7B:BB:47:E8:D7:1D:FB:92:3F Authority key identifier: 64:FF:F4:BF:67:B5:B3:EF:9D:C6:54:58:42:C1:18:D7:5F:60:42:D8 Certificate issuer: /CN=64FFF4BF67B5B3EF9DC6545842C118D75F6042D8 Certificate serial: 73D5CBBAAA970023983A1DB9E0287F3C2AEE0F77 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/64FFF4BF67B5B3EF9DC6545842C118D75F6042D8.cer Subject info access: rsync://repo-rpki.idnic.net/repo/ab313d17-5b9b-4d23-9424-74579508ba54/0/64FFF4BF67B5B3EF9DC6545842C118D75F6042D8.mft Manifest number: 01C1 Signing time: Sat 24 Jan 2026 20:02:41 +0000 Manifest this update: Sat 24 Jan 2026 19:57:41 +0000 Manifest next update: Tue 27 Jan 2026 20:56:41 +0000 Files and hashes: 1: 3130332e33372e3232392e302f32342d3234203d3e20313333333631.roa (hash: OMvT7v+SWmvCcI/oQS1wfiv6hD1AXfKdII4PA3MiDEc=) 2: 64FFF4BF67B5B3EF9DC6545842C118D75F6042D8.crl (hash: SUhf3xt+RAQDCZqsMDWhV5ypxNI7P0Pam6CHYCNmn8o=) 3: 3130332e33362e36382e302f32342d3234203d3e20313333333631.roa (hash: oP07dPM6PnkRNB+PzrhdYOY9okyRdrsFM/T0aA1Ih1s=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/ab313d17-5b9b-4d23-9424-74579508ba54/0/64FFF4BF67B5B3EF9DC6545842C118D75F6042D8.crl rsync://repo-rpki.idnic.net/repo/ab313d17-5b9b-4d23-9424-74579508ba54/0/64FFF4BF67B5B3EF9DC6545842C118D75F6042D8.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/64FFF4BF67B5B3EF9DC6545842C118D75F6042D8.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 27 Jan 2026 20:56:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 73:d5:cb:ba:aa:97:00:23:98:3a:1d:b9:e0:28:7f:3c:2a:ee:0f:77 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=64FFF4BF67B5B3EF9DC6545842C118D75F6042D8 Validity Not Before: Jan 24 19:57:41 2026 GMT Not After : Jan 27 20:56:41 2026 GMT Subject: CN=5FA6542770897392DF513E7BBB47E8D71DFB923F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:5f:19:2e:89:bd:e1:48:38:4c:1f:ac:d3:f7: 1e:19:d2:32:a5:e2:5c:fd:1c:22:c4:1d:db:73:ee: dd:fe:db:d2:a5:62:1e:6a:d4:85:21:f0:30:24:37: f0:73:0c:ba:e7:74:6c:1b:a1:a7:2d:97:8d:01:8c: cd:10:95:2f:b8:f7:c1:32:56:5f:6c:02:fb:45:06: 64:07:86:35:dd:13:9e:fc:7a:6d:4e:c8:17:e8:86: 1c:f6:70:ef:65:84:6a:33:54:e6:44:03:d3:72:66: 0a:c9:86:8f:0c:23:37:39:c5:74:6d:12:81:59:12: 85:fd:dc:02:69:3a:b2:4d:5d:84:18:cf:48:77:ae: 37:44:9f:d1:12:9d:33:0e:2d:96:1f:78:d0:e7:51: 87:03:bf:f3:ff:54:a4:43:bf:54:d7:bd:21:d3:d6: 4b:96:64:49:8e:3b:fa:e1:dd:57:85:14:b3:58:c4: 41:7b:5e:6e:07:b9:2c:d8:b4:57:d3:7a:5d:cd:f9: c9:66:c8:c4:21:92:4b:58:da:6d:fd:a1:d4:b6:9d: fe:70:d7:01:04:67:c0:61:d2:37:5f:51:54:f9:c1: de:7b:37:3c:72:51:52:db:27:02:12:21:a0:17:52: 80:6e:f0:18:08:21:21:64:d5:07:be:56:70:50:ac: 85:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:A6:54:27:70:89:73:92:DF:51:3E:7B:BB:47:E8:D7:1D:FB:92:3F X509v3 Authority Key Identifier: keyid:64:FF:F4:BF:67:B5:B3:EF:9D:C6:54:58:42:C1:18:D7:5F:60:42:D8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/ab313d17-5b9b-4d23-9424-74579508ba54/0/64FFF4BF67B5B3EF9DC6545842C118D75F6042D8.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/64FFF4BF67B5B3EF9DC6545842C118D75F6042D8.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ab313d17-5b9b-4d23-9424-74579508ba54/0/64FFF4BF67B5B3EF9DC6545842C118D75F6042D8.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8d:a5:49:72:2b:d5:71:ce:1f:50:c1:83:94:ae:13:26:d2:ab: 4f:14:11:7c:0a:0a:fe:1e:c2:1c:60:67:8c:8e:19:0a:99:65: 86:1a:ce:6b:d9:a1:f9:41:cd:b2:9e:9d:29:be:c7:d4:19:4a: c1:c6:63:4b:a6:de:e2:ca:31:d3:99:3f:e5:17:76:d2:54:c7: 51:ff:4f:b8:c7:0f:ab:33:ad:3e:c0:18:33:fa:c7:60:11:61: 85:68:f8:45:4b:1a:70:53:03:70:50:ee:92:11:e2:0b:85:6a: 7b:23:b2:9b:8b:5f:c8:75:0f:6d:0a:fd:80:a0:e1:6a:88:51: e5:f8:2a:7e:27:d1:74:8f:37:85:10:57:d4:14:f0:b7:4e:b8: 9a:36:04:ee:5b:6d:c0:6d:e0:09:88:de:93:36:84:13:6a:0f: a9:d1:b6:7d:cb:c2:80:d5:a0:88:ee:02:d7:ee:92:a5:25:88: b0:f3:73:97:46:16:8a:ea:8e:a2:4d:42:6e:0e:7a:be:e8:c9: 94:bc:cf:92:a2:db:98:b4:d5:86:0b:23:27:24:c0:aa:3d:76: a5:04:3e:3b:d5:89:b3:03:58:bd:da:b9:eb:cc:8f:33:36:12: e8:d4:31:c6:36:3b:13:c7:f1:ba:0c:a5:73:b0:3d:c2:65:cc: 7c:49:9c:e4 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUc9XLuqqXACOYOh254Ch/PCruD3cwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjRGRkY0QkY2N0I1QjNFRjlEQzY1NDU4NDJDMTE4RDc1 RjYwNDJEODAeFw0yNjAxMjQxOTU3NDFaFw0yNjAxMjcyMDU2NDFaMDMxMTAvBgNV BAMTKDVGQTY1NDI3NzA4OTczOTJERjUxM0U3QkJCNDdFOEQ3MURGQjkyM0YwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDDXxkuib3hSDhMH6zT9x4Z0jKl 4lz9HCLEHdtz7t3+29KlYh5q1IUh8DAkN/BzDLrndGwboactl40BjM0QlS+498Ey Vl9sAvtFBmQHhjXdE578em1OyBfohhz2cO9lhGozVOZEA9NyZgrJho8MIzc5xXRt EoFZEoX93AJpOrJNXYQYz0h3rjdEn9ESnTMOLZYfeNDnUYcDv/P/VKRDv1TXvSHT 1kuWZEmOO/rh3VeFFLNYxEF7Xm4HuSzYtFfTel3N+clmyMQhkktY2m39odS2nf5w 1wEEZ8Bh0jdfUVT5wd57NzxyUVLbJwISIaAXUoBu8BgIISFk1Qe+VnBQrIXZAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUX6ZUJ3CJc5LfUT57u0fo1x37kj8wHwYDVR0j BBgwFoAUZP/0v2e1s++dxlRYQsEY119gQtgwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h YjMxM2QxNy01YjliLTRkMjMtOTQyNC03NDU3OTUwOGJhNTQvMC82NEZGRjRCRjY3 QjVCM0VGOURDNjU0NTg0MkMxMThENzVGNjA0MkQ4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNjRGRkY0QkY2N0I1QjNFRjlEQzY1NDU4NDJDMTE4RDc1RjYw NDJEOC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYWIzMTNkMTctNWI5Yi00ZDIzLTk0 MjQtNzQ1Nzk1MDhiYTU0LzAvNjRGRkY0QkY2N0I1QjNFRjlEQzY1NDU4NDJDMTE4 RDc1RjYwNDJEOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAI2lSXIr1XHOH1DBg5SuEybSq08UEXwKCv4e whxgZ4yOGQqZZYYazmvZoflBzbKenSm+x9QZSsHGY0um3uLKMdOZP+UXdtJUx1H/ T7jHD6szrT7AGDP6x2ARYYVo+EVLGnBTA3BQ7pIR4guFansjspuLX8h1D20K/YCg 4WqIUeX4Kn4n0XSPN4UQV9QU8LdOuJo2BO5bbcBt4AmI3pM2hBNqD6nRtn3LwoDV oIjuAtfukqUliLDzc5dGForqjqJNQm4Oer7oyZS8z5Ki25i01YYLIyckwKo9dqUE PjvVibMDWL3auevMjzM2EujUMcY2OxPH8boMpXOwPcJlzHxJnOQ= -----END CERTIFICATE-----Generated at Sun Jan 25 19:00:37 2026 by rpki-client