This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/b652bf9c-634b-40b9-ac0c-a87b47d59f91/0/B48345F7F9FB4F14FFFE8BC5B74685D2A0993094.mft File: B48345F7F9FB4F14FFFE8BC5B74685D2A0993094.mft (raw, json) Hash identifier: 1fF6USd3V5B8+TFeM7dQA3OMuCxNZW1yV2TWaKmoxmw= Subject key identifier: 54:05:9D:4D:A9:A1:23:51:21:2D:3A:F0:30:DA:E6:C7:10:D8:77:92 Authority key identifier: B4:83:45:F7:F9:FB:4F:14:FF:FE:8B:C5:B7:46:85:D2:A0:99:30:94 Certificate issuer: /CN=B48345F7F9FB4F14FFFE8BC5B74685D2A0993094 Certificate serial: 18CFDC21601B9D3E6FC7C9937AE9E2236BADB436 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B48345F7F9FB4F14FFFE8BC5B74685D2A0993094.cer Subject info access: rsync://repo-rpki.idnic.net/repo/b652bf9c-634b-40b9-ac0c-a87b47d59f91/0/B48345F7F9FB4F14FFFE8BC5B74685D2A0993094.mft Manifest number: 01F9 Signing time: Sun 25 Jan 2026 13:40:05 +0000 Manifest this update: Sun 25 Jan 2026 13:35:05 +0000 Manifest next update: Wed 28 Jan 2026 18:46:05 +0000 Files and hashes: 1: 3130332e312e35302e302f32342d3234203d3e20313432333532.roa (hash: 0HtGEFB5lVL9KGTJaAeG0cG7Yc1XqVsEKqDCZP63hmI=) 2: 3130332e312e35302e302f32332d3233203d3e20313432333532.roa (hash: NK7iP85WMoAKxYMx5lbhJuhwp1xc1m7+bm7ki4OmrgU=) 3: 3130332e312e35312e302f32342d3234203d3e20313432333532.roa (hash: CD4KlQzH2eJhKNwTfYMuI96gq5Df2JYdd7khju1XQoY=) 4: B48345F7F9FB4F14FFFE8BC5B74685D2A0993094.crl (hash: BlxLq0p283p7bSE3nTqIlw7ayas5u2OvT1ofB5032Ew=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/b652bf9c-634b-40b9-ac0c-a87b47d59f91/0/B48345F7F9FB4F14FFFE8BC5B74685D2A0993094.crl rsync://repo-rpki.idnic.net/repo/b652bf9c-634b-40b9-ac0c-a87b47d59f91/0/B48345F7F9FB4F14FFFE8BC5B74685D2A0993094.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B48345F7F9FB4F14FFFE8BC5B74685D2A0993094.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 28 Jan 2026 14:00:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 18:cf:dc:21:60:1b:9d:3e:6f:c7:c9:93:7a:e9:e2:23:6b:ad:b4:36 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B48345F7F9FB4F14FFFE8BC5B74685D2A0993094 Validity Not Before: Jan 25 13:35:05 2026 GMT Not After : Jan 28 18:46:05 2026 GMT Subject: CN=54059D4DA9A12351212D3AF030DAE6C710D87792 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:95:38:dc:39:c6:b5:a7:dd:34:7d:6e:58:a7: d2:cb:d3:b4:43:01:d1:3a:45:85:79:47:eb:3b:33: 77:58:fc:46:7c:4e:7d:51:0f:98:09:8a:aa:05:a9: 4e:08:c7:e9:d5:5e:86:89:31:fc:ab:20:1c:f3:25: 24:66:1a:0c:82:db:4d:db:01:97:a4:61:b9:13:2c: 9b:72:ab:c1:a2:15:d0:0d:e9:20:d9:8c:2a:5d:a0: 40:bf:bc:80:db:5e:57:3a:3e:fa:5e:92:25:66:83: 0d:dc:da:8c:48:2d:15:e3:ea:0c:b9:00:e5:d6:c1: b8:9b:02:63:b6:17:19:fe:05:ad:f8:8b:28:57:51: e9:8f:37:2c:36:2e:e9:3d:eb:a6:f4:25:fa:2d:5e: a3:f4:10:0b:d6:55:16:36:fd:64:08:77:25:cf:30: 2a:d8:1e:dc:e9:45:f9:70:d2:e4:30:6d:5d:79:1c: e5:1e:c9:89:7e:52:d3:07:95:00:58:1c:d8:d2:05: eb:66:5d:27:d7:d7:b8:40:63:88:9c:df:b3:a6:01: 93:e2:63:1d:70:af:cd:0c:71:7b:26:36:b5:ba:97: 1e:0a:d3:2a:b4:d8:b9:7d:9f:c1:71:26:69:e8:eb: b9:de:f9:be:a2:83:f7:b9:89:1c:6e:56:2f:2b:13: ae:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 54:05:9D:4D:A9:A1:23:51:21:2D:3A:F0:30:DA:E6:C7:10:D8:77:92 X509v3 Authority Key Identifier: keyid:B4:83:45:F7:F9:FB:4F:14:FF:FE:8B:C5:B7:46:85:D2:A0:99:30:94 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/b652bf9c-634b-40b9-ac0c-a87b47d59f91/0/B48345F7F9FB4F14FFFE8BC5B74685D2A0993094.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B48345F7F9FB4F14FFFE8BC5B74685D2A0993094.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/b652bf9c-634b-40b9-ac0c-a87b47d59f91/0/B48345F7F9FB4F14FFFE8BC5B74685D2A0993094.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1a:61:ff:1c:bc:6e:54:cc:a2:9d:2e:43:d1:18:34:63:40:4d: 5c:b5:49:4c:bf:1e:bc:78:64:d8:5b:05:54:e0:53:15:80:da: 13:4d:98:77:80:fd:db:e9:22:91:ba:0f:14:94:df:81:f2:19: f9:68:bf:f5:7f:ab:94:47:39:c9:b5:81:9b:d2:df:ea:96:e3: 5e:b7:31:ef:d1:5d:35:e3:01:98:8b:87:49:23:7c:85:7a:f6: 4d:2b:c0:12:aa:5a:e2:dd:d3:3a:e6:f1:49:0b:04:50:3a:af: 2b:db:f0:d3:6e:2f:5b:c7:8d:00:76:e8:b1:f3:40:a8:c4:d0: 23:54:a7:05:81:81:f2:75:fb:2b:92:c7:9b:3c:76:78:20:e8: 6e:1f:23:72:01:1d:d6:ab:a5:28:f0:b2:d7:b6:79:6d:5f:35: 27:e2:a7:71:3c:5e:62:08:2e:c9:4f:78:2c:93:b1:57:90:67: 9f:29:4b:47:a8:f1:ce:56:ff:66:11:ac:78:37:70:67:d2:58: 77:db:c6:cb:a7:89:18:97:65:d5:78:fa:84:f8:69:29:4e:84: b0:20:de:1b:57:c8:10:65:8d:ce:c2:29:a1:92:33:4b:12:91: 5e:dc:ce:aa:d8:a1:0e:fb:ad:19:44:86:fb:c2:e4:a1:de:b1: e1:c8:01:a9 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUGM/cIWAbnT5vx8mTeuniI2uttDYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjQ4MzQ1RjdGOUZCNEYxNEZGRkU4QkM1Qjc0Njg1RDJB MDk5MzA5NDAeFw0yNjAxMjUxMzM1MDVaFw0yNjAxMjgxODQ2MDVaMDMxMTAvBgNV BAMTKDU0MDU5RDREQTlBMTIzNTEyMTJEM0FGMDMwREFFNkM3MTBEODc3OTIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC4lTjcOca1p900fW5Yp9LL07RD AdE6RYV5R+s7M3dY/EZ8Tn1RD5gJiqoFqU4Ix+nVXoaJMfyrIBzzJSRmGgyC203b AZekYbkTLJtyq8GiFdAN6SDZjCpdoEC/vIDbXlc6PvpekiVmgw3c2oxILRXj6gy5 AOXWwbibAmO2Fxn+Ba34iyhXUemPNyw2Luk966b0JfotXqP0EAvWVRY2/WQIdyXP MCrYHtzpRflw0uQwbV15HOUeyYl+UtMHlQBYHNjSBetmXSfX17hAY4ic37OmAZPi Yx1wr80McXsmNrW6lx4K0yq02Ll9n8FxJmno67ne+b6ig/e5iRxuVi8rE65vAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUVAWdTamhI1EhLTrwMNrmxxDYd5IwHwYDVR0j BBgwFoAUtINF9/n7TxT//ovFt0aF0qCZMJQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i NjUyYmY5Yy02MzRiLTQwYjktYWMwYy1hODdiNDdkNTlmOTEvMC9CNDgzNDVGN0Y5 RkI0RjE0RkZGRThCQzVCNzQ2ODVEMkEwOTkzMDk0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQjQ4MzQ1RjdGOUZCNEYxNEZGRkU4QkM1Qjc0Njg1RDJBMDk5 MzA5NC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYjY1MmJmOWMtNjM0Yi00MGI5LWFj MGMtYTg3YjQ3ZDU5ZjkxLzAvQjQ4MzQ1RjdGOUZCNEYxNEZGRkU4QkM1Qjc0Njg1 RDJBMDk5MzA5NC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABph/xy8blTMop0uQ9EYNGNATVy1SUy/Hrx4 ZNhbBVTgUxWA2hNNmHeA/dvpIpG6DxSU34HyGflov/V/q5RHOcm1gZvS3+qW4163 Me/RXTXjAZiLh0kjfIV69k0rwBKqWuLd0zrm8UkLBFA6ryvb8NNuL1vHjQB26LHz QKjE0CNUpwWBgfJ1+yuSx5s8dngg6G4fI3IBHdarpSjwste2eW1fNSfip3E8XmII LslPeCyTsVeQZ58pS0eo8c5W/2YRrHg3cGfSWHfbxsuniRiXZdV4+oT4aSlOhLAg 3htXyBBljc7CKaGSM0sSkV7czqrYoQ77rRlEhvvC5KHeseHIAak= -----END CERTIFICATE-----Generated at Mon Jan 26 02:25:41 2026 by rpki-client