This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/ae0e5ac2-b6bb-4bec-9dc9-e430a6733216/0/0E4226A5F1766AEAE768A2A676C3E8B2CAEADC96.mft File: 0E4226A5F1766AEAE768A2A676C3E8B2CAEADC96.mft (raw, json) Hash identifier: GrIrM2/LQCcxM2oGjkwnUzglG3mfxQgHTASocqjtQ/E= Subject key identifier: 08:1D:4B:94:8F:07:03:5F:0C:36:A8:66:40:88:1D:14:73:79:A3:5D Authority key identifier: 0E:42:26:A5:F1:76:6A:EA:E7:68:A2:A6:76:C3:E8:B2:CA:EA:DC:96 Certificate issuer: /CN=0E4226A5F1766AEAE768A2A676C3E8B2CAEADC96 Certificate serial: 2D8D39D47E6D2F30FD590FDD0F4F08E01DB3F8A7 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0E4226A5F1766AEAE768A2A676C3E8B2CAEADC96.cer Subject info access: rsync://repo-rpki.idnic.net/repo/ae0e5ac2-b6bb-4bec-9dc9-e430a6733216/0/0E4226A5F1766AEAE768A2A676C3E8B2CAEADC96.mft Manifest number: 01B9 Signing time: Sat 24 Jan 2026 22:01:24 +0000 Manifest this update: Sat 24 Jan 2026 21:56:24 +0000 Manifest next update: Wed 28 Jan 2026 00:10:24 +0000 Files and hashes: 1: 323430303a613334303a3a2f33322d3332203d3e20313336303735.roa (hash: lN/0N+kBLkh9oCnDV7GHH4dEry+Eu95iWP1NL/JaKa0=) 2: 0E4226A5F1766AEAE768A2A676C3E8B2CAEADC96.crl (hash: 2gn9iLSc1quIp147mX0+hf/oSozgPDGIZVTKyAhiuak=) 3: 3130332e38342e3230382e302f32342d3234203d3e20313336303735.roa (hash: 5vckiyQJuSi5InScnRJB6lh0igVA9LU4uDMI9g1nnHk=) 4: 3130332e38342e3231312e302f32342d3234203d3e20313336303735.roa (hash: yEcjBYMEhWAt95OnuEgZE8+ngUIiXOyjNrn3KEwiAMQ=) 5: 3130332e38342e3230392e302f32342d3234203d3e20313336303735.roa (hash: aKqDqYBnpCKhc8gJwr/XqiZQGx53wEdqRvJeZczMctg=) 6: 3130332e38342e3231302e302f32342d3234203d3e20313336303735.roa (hash: YVW6U8qaSLxFWjHeTdwpm9kiRp4vZO+dMYcJdXXF9qE=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/ae0e5ac2-b6bb-4bec-9dc9-e430a6733216/0/0E4226A5F1766AEAE768A2A676C3E8B2CAEADC96.crl rsync://repo-rpki.idnic.net/repo/ae0e5ac2-b6bb-4bec-9dc9-e430a6733216/0/0E4226A5F1766AEAE768A2A676C3E8B2CAEADC96.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0E4226A5F1766AEAE768A2A676C3E8B2CAEADC96.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 28 Jan 2026 00:10:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2d:8d:39:d4:7e:6d:2f:30:fd:59:0f:dd:0f:4f:08:e0:1d:b3:f8:a7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0E4226A5F1766AEAE768A2A676C3E8B2CAEADC96 Validity Not Before: Jan 24 21:56:24 2026 GMT Not After : Jan 28 00:10:24 2026 GMT Subject: CN=081D4B948F07035F0C36A86640881D147379A35D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:43:e8:0b:1c:d7:58:34:5c:51:0e:06:42:45: 50:4a:19:76:e5:5f:5c:65:8c:ca:e6:77:47:ac:a8: 3c:e7:93:44:2b:68:c0:76:13:a2:6b:dd:a2:e1:47: 16:ea:13:b5:0d:9f:4c:1e:fd:ab:1b:95:c4:d7:74: e6:d0:63:28:9b:f9:57:bf:b4:1e:b1:67:ba:67:a0: 98:56:7b:56:ac:46:07:7b:37:96:a1:75:20:f9:b5: ad:f4:94:91:23:17:3b:51:3d:e4:2a:49:c7:e4:91: b8:53:b7:78:55:1c:43:ca:7f:bc:25:68:45:cb:f0: 70:d2:a1:48:f8:68:14:ea:e2:48:6f:aa:91:e7:61: 17:3e:fd:9b:c9:e2:e5:7e:87:a1:78:60:dd:fa:e3: da:2f:47:b3:ca:35:a1:49:33:21:9e:f7:5a:7b:e2: ab:27:97:de:54:c2:76:bd:79:81:3b:1a:37:40:6c: b9:77:56:7c:ee:a6:f5:9d:13:78:d7:82:ef:26:e6: 94:29:db:ae:b0:7f:ad:7d:2f:d9:70:66:78:f2:57: 66:ac:76:26:9c:0a:09:63:55:82:11:b0:de:5a:67: 1c:e7:1b:4c:a3:75:e4:c1:0b:09:e9:67:74:21:05: 4f:fc:8a:f3:ff:58:70:c0:75:41:09:8a:a1:22:d2: c6:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 08:1D:4B:94:8F:07:03:5F:0C:36:A8:66:40:88:1D:14:73:79:A3:5D X509v3 Authority Key Identifier: keyid:0E:42:26:A5:F1:76:6A:EA:E7:68:A2:A6:76:C3:E8:B2:CA:EA:DC:96 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/ae0e5ac2-b6bb-4bec-9dc9-e430a6733216/0/0E4226A5F1766AEAE768A2A676C3E8B2CAEADC96.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0E4226A5F1766AEAE768A2A676C3E8B2CAEADC96.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ae0e5ac2-b6bb-4bec-9dc9-e430a6733216/0/0E4226A5F1766AEAE768A2A676C3E8B2CAEADC96.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 31:8d:a0:f2:e8:b2:68:f7:63:ad:6c:c4:88:e9:3e:9a:13:4d: b1:1a:f8:67:d1:c0:d9:32:f1:34:73:aa:59:ac:20:89:36:fe: f5:cf:91:14:4a:e0:20:bc:79:a7:78:84:66:ea:b9:6f:99:bb: 0e:87:f4:53:1d:f0:8a:48:d5:25:db:f4:c5:ac:c9:5a:98:86: 32:24:be:50:f1:9b:6e:e2:3f:8c:37:14:90:f4:b1:fd:44:ea: c4:3b:18:5d:1c:ba:da:27:11:ec:eb:43:f4:0a:15:03:9d:f7: 68:72:ea:fb:4a:05:26:92:b2:71:3d:0d:a3:a1:f8:f3:6a:5d: b2:ee:5d:49:3f:37:e5:23:31:c5:f6:8a:5e:63:ba:c5:f2:1a: 71:45:d3:9d:a2:fc:4d:97:27:a3:f5:78:59:b3:9f:1a:fc:cc: 1a:5e:4c:77:9a:e8:73:0b:dd:db:e5:33:b9:b4:08:f4:48:0d: f3:4e:58:e0:4d:c2:36:3a:4b:e9:81:e5:29:52:bf:10:7c:4e: ac:a5:e2:b5:b2:7e:a2:59:6f:a6:d1:35:f1:77:0f:47:99:27: 81:d9:55:93:30:18:e8:c5:d4:2a:a4:dc:8d:04:21:12:28:00: ce:da:4e:16:1a:86:48:cf:ba:cd:dc:62:29:ee:f1:4f:b7:58: 57:27:a4:77 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIULY051H5tLzD9WQ/dD08I4B2z+KcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMEU0MjI2QTVGMTc2NkFFQUU3NjhBMkE2NzZDM0U4QjJD QUVBREM5NjAeFw0yNjAxMjQyMTU2MjRaFw0yNjAxMjgwMDEwMjRaMDMxMTAvBgNV BAMTKDA4MUQ0Qjk0OEYwNzAzNUYwQzM2QTg2NjQwODgxRDE0NzM3OUEzNUQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/Q+gLHNdYNFxRDgZCRVBKGXbl X1xljMrmd0esqDznk0QraMB2E6Jr3aLhRxbqE7UNn0we/asblcTXdObQYyib+Ve/ tB6xZ7pnoJhWe1asRgd7N5ahdSD5ta30lJEjFztRPeQqScfkkbhTt3hVHEPKf7wl aEXL8HDSoUj4aBTq4khvqpHnYRc+/ZvJ4uV+h6F4YN3649ovR7PKNaFJMyGe91p7 4qsnl95Uwna9eYE7GjdAbLl3VnzupvWdE3jXgu8m5pQp266wf619L9lwZnjyV2as diacCgljVYIRsN5aZxznG0yjdeTBCwnpZ3QhBU/8ivP/WHDAdUEJiqEi0sYzAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUCB1LlI8HA18MNqhmQIgdFHN5o10wHwYDVR0j BBgwFoAUDkImpfF2aurnaKKmdsPossrq3JYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h ZTBlNWFjMi1iNmJiLTRiZWMtOWRjOS1lNDMwYTY3MzMyMTYvMC8wRTQyMjZBNUYx NzY2QUVBRTc2OEEyQTY3NkMzRThCMkNBRUFEQzk2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMEU0MjI2QTVGMTc2NkFFQUU3NjhBMkE2NzZDM0U4QjJDQUVB REM5Ni5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYWUwZTVhYzItYjZiYi00YmVjLTlk YzktZTQzMGE2NzMzMjE2LzAvMEU0MjI2QTVGMTc2NkFFQUU3NjhBMkE2NzZDM0U4 QjJDQUVBREM5Ni5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADGNoPLosmj3Y61sxIjpPpoTTbEa+GfRwNky 8TRzqlmsIIk2/vXPkRRK4CC8ead4hGbquW+Zuw6H9FMd8IpI1SXb9MWsyVqYhjIk vlDxm27iP4w3FJD0sf1E6sQ7GF0cutonEezrQ/QKFQOd92hy6vtKBSaSsnE9DaOh +PNqXbLuXUk/N+UjMcX2il5jusXyGnFF052i/E2XJ6P1eFmznxr8zBpeTHea6HML 3dvlM7m0CPRIDfNOWOBNwjY6S+mB5SlSvxB8Tqyl4rWyfqJZb6bRNfF3D0eZJ4HZ VZMwGOjF1Cqk3I0EIRIoAM7aThYahkjPus3cYinu8U+3WFcnpHc= -----END CERTIFICATE-----Generated at Mon Jan 26 08:02:24 2026 by rpki-client