This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/ad598e99-e9ff-4abe-b08e-226fdd07f9ae/0/516450A151C5487FCC5911F4C18941CA895B07A5.mft File: 516450A151C5487FCC5911F4C18941CA895B07A5.mft (raw, json) Hash identifier: wAsFKvFqg0mGh1Vl4yHNEdJZINIptXrrIpDCLBotcOg= Subject key identifier: D3:AE:4B:8A:54:33:4F:2D:50:E1:38:B7:DE:B3:AD:D4:A3:C4:56:1C Authority key identifier: 51:64:50:A1:51:C5:48:7F:CC:59:11:F4:C1:89:41:CA:89:5B:07:A5 Certificate issuer: /CN=516450A151C5487FCC5911F4C18941CA895B07A5 Certificate serial: 12C6C677F86260A44DD426A24B2E609D9BF5A288 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/516450A151C5487FCC5911F4C18941CA895B07A5.cer Subject info access: rsync://repo-rpki.idnic.net/repo/ad598e99-e9ff-4abe-b08e-226fdd07f9ae/0/516450A151C5487FCC5911F4C18941CA895B07A5.mft Manifest number: 0343 Signing time: Sun 25 Jan 2026 12:21:02 +0000 Manifest this update: Sun 25 Jan 2026 12:16:02 +0000 Manifest next update: Wed 28 Jan 2026 18:01:02 +0000 Files and hashes: 1: 323430353a363263303a3a2f33322d3332203d3e20313339343138.roa (hash: z85xof54DRtz327x0y44Pw+jx9DlTvA8Q/kbbufAMJs=) 2: 516450A151C5487FCC5911F4C18941CA895B07A5.crl (hash: MAx6euz416lkU2zqyMo3bMwTHHUKMQ94Fky8to0gl5w=) 3: 3130332e3134342e31382e302f32342d3234203d3e20313339343138.roa (hash: +9l9/c1oHNd6x+rotlaCAqAorgvfQYB/2M8mOFajTwg=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/ad598e99-e9ff-4abe-b08e-226fdd07f9ae/0/516450A151C5487FCC5911F4C18941CA895B07A5.crl rsync://repo-rpki.idnic.net/repo/ad598e99-e9ff-4abe-b08e-226fdd07f9ae/0/516450A151C5487FCC5911F4C18941CA895B07A5.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/516450A151C5487FCC5911F4C18941CA895B07A5.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 28 Jan 2026 14:00:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 12:c6:c6:77:f8:62:60:a4:4d:d4:26:a2:4b:2e:60:9d:9b:f5:a2:88 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=516450A151C5487FCC5911F4C18941CA895B07A5 Validity Not Before: Jan 25 12:16:02 2026 GMT Not After : Jan 28 18:01:02 2026 GMT Subject: CN=D3AE4B8A54334F2D50E138B7DEB3ADD4A3C4561C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:b7:e4:71:f9:48:33:e3:9b:62:6e:63:92:38: f1:fd:97:66:60:97:88:f8:09:7c:58:bc:d2:c8:8a: ba:c8:2e:83:47:e0:2b:c1:4d:c8:c5:87:8d:a8:10: 1f:fb:26:df:a3:1d:28:3f:e3:e5:26:fc:a8:99:19: c7:24:cb:b6:ca:d2:bd:d0:3a:d9:d2:1b:c3:a9:d6: 3a:c4:37:61:7f:d8:d2:21:0c:19:87:80:3a:e1:77: 7d:35:8a:b3:a3:fe:cc:8b:8b:14:00:cf:c2:a1:b3: 17:d5:2d:69:19:8c:c2:d4:d1:12:a9:12:b6:24:48: ec:77:94:d5:85:b2:55:dc:2b:f6:38:b4:f8:94:7e: 9f:2e:3c:d2:6f:bc:27:57:d6:3f:f0:1f:4c:82:75: ea:be:6d:03:cd:a9:39:84:df:52:81:72:05:41:8d: c6:3d:0a:a3:1e:68:d6:c8:c3:98:3e:0b:2f:a4:b1: 70:ca:a6:df:d2:a5:88:91:b1:2c:1d:67:bd:1e:6c: ad:ec:be:53:e5:2d:fc:73:6f:6d:e9:a0:ff:76:15: f6:71:18:b1:e9:b2:de:a5:6b:ef:c3:f4:8c:43:dd: fa:86:39:06:4e:be:f0:1d:a0:20:cf:f6:60:04:d1: c3:b1:a6:1d:fc:4d:d6:b0:a6:88:dc:15:06:ee:a6: b5:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:AE:4B:8A:54:33:4F:2D:50:E1:38:B7:DE:B3:AD:D4:A3:C4:56:1C X509v3 Authority Key Identifier: keyid:51:64:50:A1:51:C5:48:7F:CC:59:11:F4:C1:89:41:CA:89:5B:07:A5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/ad598e99-e9ff-4abe-b08e-226fdd07f9ae/0/516450A151C5487FCC5911F4C18941CA895B07A5.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/516450A151C5487FCC5911F4C18941CA895B07A5.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ad598e99-e9ff-4abe-b08e-226fdd07f9ae/0/516450A151C5487FCC5911F4C18941CA895B07A5.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c7:f1:6f:73:96:37:44:90:34:81:52:b9:1f:37:ca:aa:53:cf: 07:a1:db:e8:ae:4b:8d:42:d7:c7:92:74:98:90:80:d7:2a:64: 1f:32:76:7a:e0:bb:a8:ad:98:ee:2c:27:e3:6e:9a:e4:5d:04: 6d:4f:b8:46:50:f5:fb:32:5f:fd:ec:99:a6:59:cd:4f:d5:7f: 86:4a:25:bd:de:58:46:93:4e:a2:88:d8:16:62:bd:e4:ac:0b: 2f:05:d8:df:ab:d9:72:1e:a9:8b:4a:b7:ba:b5:ed:d9:d6:bb: 1f:96:a4:87:c8:a2:8f:00:08:d1:52:79:50:3b:c0:35:0e:b8: f8:94:eb:e9:94:3f:77:59:8a:09:ec:0b:f6:cd:72:e9:f8:cb: e9:c6:79:96:c4:a4:7c:17:45:b1:41:39:82:e6:e0:79:ac:19: b6:84:eb:13:ac:4f:27:75:2b:b7:7e:83:29:d8:b4:13:50:da: 9b:d4:72:20:01:17:69:7f:0e:4b:26:dc:aa:39:68:c2:15:e0: 4c:9c:a5:22:78:13:77:b0:5f:e8:a0:8f:04:29:ac:d4:8b:0e: 39:9b:29:54:6d:46:6b:68:39:c3:b6:40:b7:64:3b:39:7a:9a: cd:1b:24:33:8b:d6:8c:d9:e7:cb:7a:98:84:b3:48:46:1f:d0: bc:9a:1c:45 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUEsbGd/hiYKRN1CaiSy5gnZv1oogwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTE2NDUwQTE1MUM1NDg3RkNDNTkxMUY0QzE4OTQxQ0E4 OTVCMDdBNTAeFw0yNjAxMjUxMjE2MDJaFw0yNjAxMjgxODAxMDJaMDMxMTAvBgNV BAMTKEQzQUU0QjhBNTQzMzRGMkQ1MEUxMzhCN0RFQjNBREQ0QTNDNDU2MUMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/t+Rx+Ugz45tibmOSOPH9l2Zg l4j4CXxYvNLIirrILoNH4CvBTcjFh42oEB/7Jt+jHSg/4+Um/KiZGccky7bK0r3Q OtnSG8Op1jrEN2F/2NIhDBmHgDrhd301irOj/syLixQAz8KhsxfVLWkZjMLU0RKp ErYkSOx3lNWFslXcK/Y4tPiUfp8uPNJvvCdX1j/wH0yCdeq+bQPNqTmE31KBcgVB jcY9CqMeaNbIw5g+Cy+ksXDKpt/SpYiRsSwdZ70ebK3svlPlLfxzb23poP92FfZx GLHpst6la+/D9IxD3fqGOQZOvvAdoCDP9mAE0cOxph38TdawpojcFQbuprWpAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU065LilQzTy1Q4Ti33rOt1KPEVhwwHwYDVR0j BBgwFoAUUWRQoVHFSH/MWRH0wYlByolbB6UwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h ZDU5OGU5OS1lOWZmLTRhYmUtYjA4ZS0yMjZmZGQwN2Y5YWUvMC81MTY0NTBBMTUx QzU0ODdGQ0M1OTExRjRDMTg5NDFDQTg5NUIwN0E1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNTE2NDUwQTE1MUM1NDg3RkNDNTkxMUY0QzE4OTQxQ0E4OTVC MDdBNS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYWQ1OThlOTktZTlmZi00YWJlLWIw OGUtMjI2ZmRkMDdmOWFlLzAvNTE2NDUwQTE1MUM1NDg3RkNDNTkxMUY0QzE4OTQx Q0E4OTVCMDdBNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAMfxb3OWN0SQNIFSuR83yqpTzweh2+iuS41C 18eSdJiQgNcqZB8ydnrgu6itmO4sJ+NumuRdBG1PuEZQ9fsyX/3smaZZzU/Vf4ZK Jb3eWEaTTqKI2BZiveSsCy8F2N+r2XIeqYtKt7q17dnWux+WpIfIoo8ACNFSeVA7 wDUOuPiU6+mUP3dZignsC/bNcun4y+nGeZbEpHwXRbFBOYLm4HmsGbaE6xOsTyd1 K7d+gynYtBNQ2pvUciABF2l/Dksm3Ko5aMIV4EycpSJ4E3ewX+igjwQprNSLDjmb KVRtRmtoOcO2QLdkOzl6ms0bJDOL1ozZ58t6mISzSEYf0LyaHEU= -----END CERTIFICATE-----Generated at Sun Jan 25 23:08:56 2026 by rpki-client