This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/aea26a10-58e8-43c7-947e-722173d66614/0/020EA2304929066809CA6F723574798639D77438.mft File: 020EA2304929066809CA6F723574798639D77438.mft (raw, json) Hash identifier: 37P0J2N6rEkrOSc0dn9vuUw3vu/vXR4d5wh8odbtBWA= Subject key identifier: 75:FC:2A:09:38:A9:76:B1:13:AC:59:AD:72:21:38:D0:2C:53:BC:6A Authority key identifier: 02:0E:A2:30:49:29:06:68:09:CA:6F:72:35:74:79:86:39:D7:74:38 Certificate issuer: /CN=020EA2304929066809CA6F723574798639D77438 Certificate serial: 183786655AFAEB358330D0FB01A25164D2D04323 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/020EA2304929066809CA6F723574798639D77438.cer Subject info access: rsync://repo-rpki.idnic.net/repo/aea26a10-58e8-43c7-947e-722173d66614/0/020EA2304929066809CA6F723574798639D77438.mft Manifest number: 0112 Signing time: Sat 24 Jan 2026 01:10:44 +0000 Manifest this update: Sat 24 Jan 2026 01:05:44 +0000 Manifest next update: Tue 27 Jan 2026 05:57:44 +0000 Files and hashes: 1: 3136302e32352e35352e302f32342d3234203d3e20313533303630.roa (hash: MP77i5+UkMfE9Efc/VCdIpK7dS6PJg0LKmWtQikmXHg=) 2: 020EA2304929066809CA6F723574798639D77438.crl (hash: 2ucqect+k3JUrEPPIfOQGhtdVBqEoe9h+DhuKrizbJ0=) 3: 3136302e32352e35342e302f32342d3234203d3e20313533303630.roa (hash: F+hf6H0tQ4o5DL4EaEr99NgmrD9BB/0HbFh2DX09QTE=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/aea26a10-58e8-43c7-947e-722173d66614/0/020EA2304929066809CA6F723574798639D77438.crl rsync://repo-rpki.idnic.net/repo/aea26a10-58e8-43c7-947e-722173d66614/0/020EA2304929066809CA6F723574798639D77438.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/020EA2304929066809CA6F723574798639D77438.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 27 Jan 2026 05:57:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 18:37:86:65:5a:fa:eb:35:83:30:d0:fb:01:a2:51:64:d2:d0:43:23 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=020EA2304929066809CA6F723574798639D77438 Validity Not Before: Jan 24 01:05:44 2026 GMT Not After : Jan 27 05:57:44 2026 GMT Subject: CN=75FC2A0938A976B113AC59AD722138D02C53BC6A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:4b:1c:c8:b3:9b:55:04:a2:91:11:c8:5b:f8: 0d:0a:8d:28:61:f9:b0:63:0b:46:a7:b8:f4:01:87: df:4f:0d:d2:92:ff:ac:fe:12:dc:bc:78:e9:72:c2: 81:51:52:23:44:43:9e:f8:fe:d0:ba:cc:44:b2:93: 23:fb:01:56:02:25:87:e6:4e:83:14:53:d6:de:18: 52:67:61:ac:e5:41:85:37:ee:c6:02:bc:ba:10:df: bf:59:95:b6:f1:c8:3d:97:59:80:bc:b2:23:30:28: 07:84:4a:9c:8a:c9:56:3b:e0:8d:01:83:48:12:cf: d3:91:c7:f7:56:46:67:07:33:0d:37:e5:4c:8c:4b: e8:91:16:29:0d:fc:3a:22:ce:67:85:f1:4e:f2:a8: b3:54:97:4f:c5:f5:30:73:0b:f3:33:68:8a:78:8a: ae:f0:3b:c0:ec:d2:36:5a:58:5a:af:ff:64:63:7d: 1c:68:fb:48:56:40:66:e5:43:d7:12:1d:69:df:23: 4c:b0:b0:58:7d:d1:44:5c:32:cb:68:df:3e:26:5b: 7d:25:9b:ad:b9:74:19:a9:5b:e1:7b:4f:01:e0:61: f7:7d:bd:c0:c7:e2:ea:8f:24:1d:c5:b5:11:46:58: 11:4b:01:02:dc:8f:c2:9d:42:9b:05:35:89:14:0c: df:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 75:FC:2A:09:38:A9:76:B1:13:AC:59:AD:72:21:38:D0:2C:53:BC:6A X509v3 Authority Key Identifier: keyid:02:0E:A2:30:49:29:06:68:09:CA:6F:72:35:74:79:86:39:D7:74:38 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/aea26a10-58e8-43c7-947e-722173d66614/0/020EA2304929066809CA6F723574798639D77438.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/020EA2304929066809CA6F723574798639D77438.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/aea26a10-58e8-43c7-947e-722173d66614/0/020EA2304929066809CA6F723574798639D77438.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 67:3a:e3:bc:55:eb:18:77:f1:6c:5c:4f:49:b7:24:a1:bb:27: 56:bf:0d:24:09:82:6c:bc:b5:b4:81:16:06:0e:cb:0c:fa:a7: 2c:75:1e:ac:62:89:5c:7a:e4:b8:0f:2b:b8:ba:45:80:bb:e6: 43:35:8f:8a:fc:f0:69:48:67:6f:3e:05:dc:f3:01:02:bf:b3: 2c:3d:31:5e:8e:aa:8d:dd:4d:ea:5f:f4:80:da:9b:f4:53:11: de:ef:15:2b:43:9d:23:2c:8f:55:72:7a:78:3a:3c:5d:2c:a0: b0:66:2f:d3:9d:3d:c8:e9:e0:94:e1:8e:11:77:ab:db:98:c2: 13:02:3b:e1:ed:67:9e:d0:9f:c3:0d:92:f2:8d:6c:5f:72:8d: d1:e1:b8:74:19:64:19:d9:f4:41:66:1c:b8:a2:e1:98:90:53: dd:dc:a4:97:a7:79:12:8e:33:37:6a:a9:a3:94:7c:2a:f5:e3: ef:62:71:f7:8d:2a:4c:fb:7e:58:d7:58:49:6c:93:72:18:15: a5:79:60:36:b2:90:bc:9f:21:30:8c:89:4b:50:ff:cb:e1:75: 9e:a7:76:68:5a:fc:b4:cf:59:ee:f5:e4:9e:8c:72:07:78:dd: b5:04:31:15:d3:46:5b:c2:90:36:72:64:31:66:d9:92:05:05: 95:03:80:c1 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUGDeGZVr66zWDMND7AaJRZNLQQyMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDIwRUEyMzA0OTI5MDY2ODA5Q0E2RjcyMzU3NDc5ODYz OUQ3NzQzODAeFw0yNjAxMjQwMTA1NDRaFw0yNjAxMjcwNTU3NDRaMDMxMTAvBgNV BAMTKDc1RkMyQTA5MzhBOTc2QjExM0FDNTlBRDcyMjEzOEQwMkM1M0JDNkEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC1SxzIs5tVBKKREchb+A0KjShh +bBjC0anuPQBh99PDdKS/6z+Ety8eOlywoFRUiNEQ574/tC6zESykyP7AVYCJYfm ToMUU9beGFJnYazlQYU37sYCvLoQ379ZlbbxyD2XWYC8siMwKAeESpyKyVY74I0B g0gSz9ORx/dWRmcHMw035UyMS+iRFikN/DoizmeF8U7yqLNUl0/F9TBzC/MzaIp4 iq7wO8Ds0jZaWFqv/2RjfRxo+0hWQGblQ9cSHWnfI0ywsFh90URcMsto3z4mW30l m625dBmpW+F7TwHgYfd9vcDH4uqPJB3FtRFGWBFLAQLcj8KdQpsFNYkUDN9/AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUdfwqCTipdrETrFmtciE40CxTvGowHwYDVR0j BBgwFoAUAg6iMEkpBmgJym9yNXR5hjnXdDgwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h ZWEyNmExMC01OGU4LTQzYzctOTQ3ZS03MjIxNzNkNjY2MTQvMC8wMjBFQTIzMDQ5 MjkwNjY4MDlDQTZGNzIzNTc0Nzk4NjM5RDc3NDM4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvMDIwRUEyMzA0OTI5MDY2ODA5Q0E2RjcyMzU3NDc5ODYzOUQ3 NzQzOC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYWVhMjZhMTAtNThlOC00M2M3LTk0 N2UtNzIyMTczZDY2NjE0LzAvMDIwRUEyMzA0OTI5MDY2ODA5Q0E2RjcyMzU3NDc5 ODYzOUQ3NzQzOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGc647xV6xh38WxcT0m3JKG7J1a/DSQJgmy8 tbSBFgYOywz6pyx1HqxiiVx65LgPK7i6RYC75kM1j4r88GlIZ28+BdzzAQK/syw9 MV6Oqo3dTepf9IDam/RTEd7vFStDnSMsj1Vyeng6PF0soLBmL9OdPcjp4JThjhF3 q9uYwhMCO+HtZ57Qn8MNkvKNbF9yjdHhuHQZZBnZ9EFmHLii4ZiQU93cpJeneRKO MzdqqaOUfCr14+9icfeNKkz7fljXWElsk3IYFaV5YDaykLyfITCMiUtQ/8vhdZ6n dmha/LTPWe715J6Mcgd43bUEMRXTRlvCkDZyZDFm2ZIFBZUDgME= -----END CERTIFICATE-----Generated at Sun Jan 25 23:57:24 2026 by rpki-client