This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/b5632d99-32b2-467b-b7fe-0d25f853bfa6/0/1D6001A4F46548B37ED871CA5CF088F7AF50D754.mft File: 1D6001A4F46548B37ED871CA5CF088F7AF50D754.mft (raw, json) Hash identifier: tjHXm8a2XxQRRnwwVo0uVsM5dvNvP8TdX1QAHowz8Fs= Subject key identifier: D2:C0:CE:E1:BB:7D:CC:67:C0:55:28:9D:4A:73:17:AF:AB:2D:D5:05 Authority key identifier: 1D:60:01:A4:F4:65:48:B3:7E:D8:71:CA:5C:F0:88:F7:AF:50:D7:54 Certificate issuer: /CN=1D6001A4F46548B37ED871CA5CF088F7AF50D754 Certificate serial: 2939822B1AF9D5AA0B2451653BCAAA0B64DAAF9F Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1D6001A4F46548B37ED871CA5CF088F7AF50D754.cer Subject info access: rsync://repo-rpki.idnic.net/repo/b5632d99-32b2-467b-b7fe-0d25f853bfa6/0/1D6001A4F46548B37ED871CA5CF088F7AF50D754.mft Manifest number: 0269 Signing time: Sat 24 Jan 2026 09:21:48 +0000 Manifest this update: Sat 24 Jan 2026 09:16:48 +0000 Manifest next update: Tue 27 Jan 2026 16:20:48 +0000 Files and hashes: 1: 3130332e3130322e3134302e302f32342d3234203d3e20313336383534.roa (hash: Jg0eBzFNwVRly/0j1c4wnh+Pn1/PmT37QsudfpP4Olc=) 2: 3130332e3130322e3134322e302f32342d3234203d3e20313336383534.roa (hash: FHbXQkePjO5Kv7MIwfEIPoO/ttV45kfWL4gTr6/e2cs=) 3: 3130332e3130322e3134302e302f32322d3232203d3e20313336383534.roa (hash: W4QqpemtzShS1QHLz/OQQiGGQqIHL/ZWTyinECHq8iM=) 4: 3130332e3130322e3134312e302f32342d3234203d3e20313336383534.roa (hash: Mn2kP+cKGGOLyQSD70wITKilYtAFBvqgDyOS5Ob9KJw=) 5: 1D6001A4F46548B37ED871CA5CF088F7AF50D754.crl (hash: 1HSVK1L4+O8j2+KDix1GA96J4xgQb/JEf3ncmqcaMVM=) 6: 3130332e3130322e3134332e302f32342d3234203d3e20313336383534.roa (hash: IHBWZ2aLtDtFiajS88smGA0f9ZjzM14ZA4EnckIFmqY=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/b5632d99-32b2-467b-b7fe-0d25f853bfa6/0/1D6001A4F46548B37ED871CA5CF088F7AF50D754.crl rsync://repo-rpki.idnic.net/repo/b5632d99-32b2-467b-b7fe-0d25f853bfa6/0/1D6001A4F46548B37ED871CA5CF088F7AF50D754.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1D6001A4F46548B37ED871CA5CF088F7AF50D754.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 27 Jan 2026 16:20:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 29:39:82:2b:1a:f9:d5:aa:0b:24:51:65:3b:ca:aa:0b:64:da:af:9f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1D6001A4F46548B37ED871CA5CF088F7AF50D754 Validity Not Before: Jan 24 09:16:48 2026 GMT Not After : Jan 27 16:20:48 2026 GMT Subject: CN=D2C0CEE1BB7DCC67C055289D4A7317AFAB2DD505 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:39:b7:d4:70:4b:d7:14:2a:86:cc:97:dc:47: 56:b6:3b:4e:0e:06:60:a1:04:c8:01:50:fb:1f:2c: c7:4b:cc:7d:27:19:69:30:58:db:5e:2b:a9:2d:9b: e0:56:2b:b0:b8:a8:84:f2:64:2f:8c:5d:d2:9b:48: a7:20:43:b2:a0:1d:e6:24:f5:6c:d8:26:a5:e9:5a: 49:94:b1:60:94:df:4c:50:43:de:b2:67:f9:bb:db: 6a:5c:5b:c4:06:00:40:e1:74:91:d0:99:58:41:ac: 1e:35:67:f1:6e:33:02:f9:4d:23:30:3c:14:ff:72: 94:f3:39:32:ce:1c:13:b1:47:f5:fe:df:65:0f:3c: 26:62:28:3f:47:b6:14:18:89:c1:75:8c:85:ca:75: 4a:71:82:99:7a:47:b1:e6:b2:da:eb:5d:ff:63:47: f7:02:41:f4:97:4b:a9:2e:14:ef:b3:d2:81:e6:81: 68:d3:4e:4b:0c:46:4a:26:75:1d:44:65:78:d9:12: 2a:c5:b4:6b:03:f6:d3:12:0e:6d:87:e3:56:74:42: ad:73:85:b5:6b:ab:c0:a4:97:8a:ef:80:94:aa:8f: d4:5b:53:ec:89:8f:f0:b9:19:95:62:b4:2f:a4:42: 6e:f7:a3:3b:8f:bb:6e:0c:1b:ae:c4:d5:e7:a3:39: 53:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:C0:CE:E1:BB:7D:CC:67:C0:55:28:9D:4A:73:17:AF:AB:2D:D5:05 X509v3 Authority Key Identifier: keyid:1D:60:01:A4:F4:65:48:B3:7E:D8:71:CA:5C:F0:88:F7:AF:50:D7:54 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/b5632d99-32b2-467b-b7fe-0d25f853bfa6/0/1D6001A4F46548B37ED871CA5CF088F7AF50D754.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1D6001A4F46548B37ED871CA5CF088F7AF50D754.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/b5632d99-32b2-467b-b7fe-0d25f853bfa6/0/1D6001A4F46548B37ED871CA5CF088F7AF50D754.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5d:1b:0f:92:c9:0f:4b:17:70:9f:dd:0b:2e:87:b4:a8:27:d9: d3:73:be:3e:fa:d6:ae:76:3f:f4:14:1f:5c:f5:ec:d9:50:42: 69:d5:bd:12:4a:f6:f4:e4:42:58:8a:98:be:63:80:b6:95:2b: 8e:ab:48:02:85:87:4d:12:5b:4a:33:dd:ff:e6:9d:1b:0e:6c: c2:91:87:6f:8d:4c:01:e3:ad:b3:08:65:d2:d2:48:82:f2:12: 86:a3:a7:bf:b4:b1:53:4e:34:ae:84:78:06:96:eb:e7:8c:fc: dd:62:65:be:a3:db:24:06:58:db:7d:c3:25:05:3c:89:d3:dd: 4c:4a:bc:3e:96:2a:64:67:c6:5c:6d:84:4c:ce:13:8a:cb:9b: a7:13:d1:b5:2b:94:27:41:78:da:f6:ca:94:c1:fc:bb:b7:85: 73:28:99:65:f6:20:a2:34:9e:17:52:5e:45:a7:3e:cb:3f:61: a0:f3:96:5a:12:dd:ad:86:0e:c5:74:db:3c:c9:75:93:6a:f0: 31:5e:da:d7:46:59:b4:9a:05:d6:c1:05:12:e9:bb:03:36:4c: 74:3d:10:02:4e:6a:e8:87:71:07:9c:fb:f0:04:c7:26:f3:48: fc:e6:12:3a:cc:04:17:51:c2:28:82:d8:52:e6:f8:6a:76:23: a0:0b:83:c2 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUKTmCKxr51aoLJFFlO8qqC2Tar58wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUQ2MDAxQTRGNDY1NDhCMzdFRDg3MUNBNUNGMDg4RjdB RjUwRDc1NDAeFw0yNjAxMjQwOTE2NDhaFw0yNjAxMjcxNjIwNDhaMDMxMTAvBgNV BAMTKEQyQzBDRUUxQkI3RENDNjdDMDU1Mjg5RDRBNzMxN0FGQUIyREQ1MDUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDGObfUcEvXFCqGzJfcR1a2O04O BmChBMgBUPsfLMdLzH0nGWkwWNteK6ktm+BWK7C4qITyZC+MXdKbSKcgQ7KgHeYk 9WzYJqXpWkmUsWCU30xQQ96yZ/m722pcW8QGAEDhdJHQmVhBrB41Z/FuMwL5TSMw PBT/cpTzOTLOHBOxR/X+32UPPCZiKD9HthQYicF1jIXKdUpxgpl6R7HmstrrXf9j R/cCQfSXS6kuFO+z0oHmgWjTTksMRkomdR1EZXjZEirFtGsD9tMSDm2H41Z0Qq1z hbVrq8Ckl4rvgJSqj9RbU+yJj/C5GZVitC+kQm73ozuPu24MG67E1eejOVP3AgMB AAGjggI8MIICODAdBgNVHQ4EFgQU0sDO4bt9zGfAVSidSnMXr6st1QUwHwYDVR0j BBgwFoAUHWABpPRlSLN+2HHKXPCI969Q11QwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i NTYzMmQ5OS0zMmIyLTQ2N2ItYjdmZS0wZDI1Zjg1M2JmYTYvMC8xRDYwMDFBNEY0 NjU0OEIzN0VEODcxQ0E1Q0YwODhGN0FGNTBENzU0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMUQ2MDAxQTRGNDY1NDhCMzdFRDg3MUNBNUNGMDg4RjdBRjUw RDc1NC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYjU2MzJkOTktMzJiMi00NjdiLWI3 ZmUtMGQyNWY4NTNiZmE2LzAvMUQ2MDAxQTRGNDY1NDhCMzdFRDg3MUNBNUNGMDg4 RjdBRjUwRDc1NC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAF0bD5LJD0sXcJ/dCy6HtKgn2dNzvj761q52 P/QUH1z17NlQQmnVvRJK9vTkQliKmL5jgLaVK46rSAKFh00SW0oz3f/mnRsObMKR h2+NTAHjrbMIZdLSSILyEoajp7+0sVNONK6EeAaW6+eM/N1iZb6j2yQGWNt9wyUF PInT3UxKvD6WKmRnxlxthEzOE4rLm6cT0bUrlCdBeNr2ypTB/Lu3hXMomWX2IKI0 nhdSXkWnPss/YaDzlloS3a2GDsV02zzJdZNq8DFe2tdGWbSaBdbBBRLpuwM2THQ9 EAJOauiHcQec+/AExybzSPzmEjrMBBdRwiiC2FLm+Gp2I6ALg8I= -----END CERTIFICATE-----Generated at Sun Jan 25 20:32:36 2026 by rpki-client