This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/b6e504c5-d7ba-4fe9-9e56-792dc01a97cb/0/154CAF946B4FEF9C2EE0FFA245BBA429C03B4D2A.mft File: 154CAF946B4FEF9C2EE0FFA245BBA429C03B4D2A.mft (raw, json) Hash identifier: yEXV3tPNyEK4IGbyTQacUaWbdpW2rIU/KPMIdrUxlig= Subject key identifier: 0A:A0:05:54:43:63:44:DF:27:BE:22:42:65:19:78:9F:2D:99:C0:E0 Authority key identifier: 15:4C:AF:94:6B:4F:EF:9C:2E:E0:FF:A2:45:BB:A4:29:C0:3B:4D:2A Certificate issuer: /CN=154CAF946B4FEF9C2EE0FFA245BBA429C03B4D2A Certificate serial: 43469167A237C3F58C84F8BA36D5F361021C758C Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/154CAF946B4FEF9C2EE0FFA245BBA429C03B4D2A.cer Subject info access: rsync://repo-rpki.idnic.net/repo/b6e504c5-d7ba-4fe9-9e56-792dc01a97cb/0/154CAF946B4FEF9C2EE0FFA245BBA429C03B4D2A.mft Manifest number: CC Signing time: Sun 25 Jan 2026 19:51:32 +0000 Manifest this update: Sun 25 Jan 2026 19:46:32 +0000 Manifest next update: Thu 29 Jan 2026 03:12:32 +0000 Files and hashes: 1: 3130332e37352e35332e302f32342d3234203d3e203436303233.roa (hash: u/Rqg/DBL28ST9LkFtb756oaQy6poB4UdD9nfAM75kQ=) 2: 3130332e37352e35322e302f32342d3234203d3e203436303233.roa (hash: jrvWdDxnPwyaZeoT4XE3YhrJWOxok241/P+m4LKDews=) 3: 3130332e37352e35342e302f32342d3234203d3e203436303233.roa (hash: itzoTElJfDBgRSPccVv4bZDERMP8o0I1zPcdqucno78=) 4: 3130332e37352e35342e302f32332d3234203d3e203436303233.roa (hash: W72scnHA7zHvPLJz5BxsoijLHmQFgwe9kKm/vIV1T+I=) 5: 3130332e37352e35322e302f32332d3234203d3e203436303233.roa (hash: T0MXrhbK6xjnBNdXhOMqxz1Yf/0TdUbbbVSQf9Bnwwk=) 6: 3130332e37352e35352e302f32342d3234203d3e203436303233.roa (hash: BOb9anLJdpDwlKD+KK0kxGNWqYzi/fXunRvflhVgFzc=) 7: 154CAF946B4FEF9C2EE0FFA245BBA429C03B4D2A.crl (hash: 0z4xzaeTNHWM6sN703AzwDV386NPnzy7jcm42jABSCA=) 8: 3130332e37352e35322e302f32322d3234203d3e203436303233.roa (hash: qyDdwv5epobK+GRznDOnZgdcRlyuSTrE0I2ZxAmsKz4=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/b6e504c5-d7ba-4fe9-9e56-792dc01a97cb/0/154CAF946B4FEF9C2EE0FFA245BBA429C03B4D2A.crl rsync://repo-rpki.idnic.net/repo/b6e504c5-d7ba-4fe9-9e56-792dc01a97cb/0/154CAF946B4FEF9C2EE0FFA245BBA429C03B4D2A.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/154CAF946B4FEF9C2EE0FFA245BBA429C03B4D2A.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 29 Jan 2026 03:12:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 43:46:91:67:a2:37:c3:f5:8c:84:f8:ba:36:d5:f3:61:02:1c:75:8c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=154CAF946B4FEF9C2EE0FFA245BBA429C03B4D2A Validity Not Before: Jan 25 19:46:32 2026 GMT Not After : Jan 29 03:12:32 2026 GMT Subject: CN=0AA00554436344DF27BE22426519789F2D99C0E0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:77:cc:b3:d5:60:51:e4:35:39:1c:ad:b8:89: 87:4d:73:e1:ea:71:0f:eb:1d:5b:db:82:c7:79:28: d8:c5:d1:3e:60:c9:23:dc:71:e1:bc:b0:d2:4b:ed: 49:1d:7f:51:03:63:4a:94:c7:a4:f3:a7:e1:57:11: 68:5e:0c:77:ab:12:2c:ca:1b:42:d0:d7:b3:a4:0d: 08:26:10:b1:aa:0e:3b:3f:af:ee:5e:e6:2c:9e:f0: 5c:a6:67:fb:a0:16:b6:57:57:98:46:56:ca:7f:0e: 91:72:11:a3:ec:08:0a:d2:20:f5:93:dd:05:54:75: cb:60:18:d2:fe:b8:02:87:2b:29:80:2c:dd:bf:14: 5a:16:75:11:dc:74:ba:86:17:93:6e:ba:56:95:e8: e0:f9:b7:9b:d6:cb:cb:7a:df:5a:6d:da:b9:49:7a: 6a:50:27:54:9f:68:e1:1f:0f:c8:18:8f:70:d6:cf: bc:bd:b2:a6:4f:bb:49:f4:f0:cf:f3:41:97:8c:52: cf:f8:a9:4e:4b:fa:dd:08:1d:be:d2:69:f7:29:7c: 98:51:3a:ec:af:ad:0b:4e:91:62:9c:3a:23:44:3f: 50:d3:19:77:85:81:3a:7d:e2:77:15:e6:18:fa:0f: 22:63:83:bf:53:f5:5c:53:bd:54:4b:28:b2:3e:bb: 52:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:A0:05:54:43:63:44:DF:27:BE:22:42:65:19:78:9F:2D:99:C0:E0 X509v3 Authority Key Identifier: keyid:15:4C:AF:94:6B:4F:EF:9C:2E:E0:FF:A2:45:BB:A4:29:C0:3B:4D:2A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/b6e504c5-d7ba-4fe9-9e56-792dc01a97cb/0/154CAF946B4FEF9C2EE0FFA245BBA429C03B4D2A.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/154CAF946B4FEF9C2EE0FFA245BBA429C03B4D2A.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/b6e504c5-d7ba-4fe9-9e56-792dc01a97cb/0/154CAF946B4FEF9C2EE0FFA245BBA429C03B4D2A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8c:a3:23:81:08:6a:6c:8e:d7:9d:cb:4e:51:43:16:d4:82:0d: b7:82:49:0a:75:a8:a4:14:ed:8a:f3:b2:cb:21:db:7a:f8:86: 0a:92:93:88:d9:ca:f7:97:21:44:d6:ad:ec:0e:9b:e5:fb:43: 0a:ed:3c:34:b8:ce:19:5d:ec:a3:86:fc:0b:5f:89:8b:08:98: da:54:68:59:48:8d:bc:f4:36:ca:eb:1a:11:06:22:de:45:a9: 77:41:59:5d:fe:db:40:38:0c:e0:7f:b0:5b:fe:33:34:20:aa: 3a:25:87:2d:e6:e3:41:ac:53:87:5a:54:f2:04:2b:30:68:fe: c8:9b:54:90:5b:98:94:e1:af:4f:35:96:e7:2e:1d:2d:8e:2b: 59:f5:71:06:bb:1d:b9:6b:db:d8:0b:6b:83:46:77:72:b8:15: db:ff:2f:4f:9e:ca:ed:48:0f:a0:11:69:5b:7f:c7:4a:27:6d: e0:23:38:2f:38:c0:5f:43:d8:09:52:8b:c8:77:df:0f:09:70: 25:26:8d:d3:3c:bd:c5:d0:63:c6:7d:f6:78:3c:0c:f0:db:b7: bd:fb:0a:23:d7:22:a7:47:17:61:e8:32:83:9f:39:b9:b5:ce: 85:6b:4e:ee:df:0c:f4:89:4a:c9:ea:78:e9:83:b4:42:a3:d3: 9d:c0:36:76 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUQ0aRZ6I3w/WMhPi6NtXzYQIcdYwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTU0Q0FGOTQ2QjRGRUY5QzJFRTBGRkEyNDVCQkE0MjlD MDNCNEQyQTAeFw0yNjAxMjUxOTQ2MzJaFw0yNjAxMjkwMzEyMzJaMDMxMTAvBgNV BAMTKDBBQTAwNTU0NDM2MzQ0REYyN0JFMjI0MjY1MTk3ODlGMkQ5OUMwRTAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDOd8yz1WBR5DU5HK24iYdNc+Hq cQ/rHVvbgsd5KNjF0T5gySPcceG8sNJL7Ukdf1EDY0qUx6Tzp+FXEWheDHerEizK G0LQ17OkDQgmELGqDjs/r+5e5iye8FymZ/ugFrZXV5hGVsp/DpFyEaPsCArSIPWT 3QVUdctgGNL+uAKHKymALN2/FFoWdRHcdLqGF5NuulaV6OD5t5vWy8t631pt2rlJ empQJ1SfaOEfD8gYj3DWz7y9sqZPu0n08M/zQZeMUs/4qU5L+t0IHb7SafcpfJhR OuyvrQtOkWKcOiNEP1DTGXeFgTp94ncV5hj6DyJjg79T9VxTvVRLKLI+u1JPAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUCqAFVENjRN8nviJCZRl4ny2ZwOAwHwYDVR0j BBgwFoAUFUyvlGtP75wu4P+iRbukKcA7TSowDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i NmU1MDRjNS1kN2JhLTRmZTktOWU1Ni03OTJkYzAxYTk3Y2IvMC8xNTRDQUY5NDZC NEZFRjlDMkVFMEZGQTI0NUJCQTQyOUMwM0I0RDJBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMTU0Q0FGOTQ2QjRGRUY5QzJFRTBGRkEyNDVCQkE0MjlDMDNC NEQyQS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYjZlNTA0YzUtZDdiYS00ZmU5LTll NTYtNzkyZGMwMWE5N2NiLzAvMTU0Q0FGOTQ2QjRGRUY5QzJFRTBGRkEyNDVCQkE0 MjlDMDNCNEQyQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIyjI4EIamyO153LTlFDFtSCDbeCSQp1qKQU 7Yrzsssh23r4hgqSk4jZyveXIUTWrewOm+X7QwrtPDS4zhld7KOG/AtfiYsImNpU aFlIjbz0NsrrGhEGIt5FqXdBWV3+20A4DOB/sFv+MzQgqjolhy3m40GsU4daVPIE KzBo/sibVJBbmJThr081lucuHS2OK1n1cQa7Hblr29gLa4NGd3K4Fdv/L0+eyu1I D6ARaVt/x0onbeAjOC84wF9D2AlSi8h33w8JcCUmjdM8vcXQY8Z99ng8DPDbt737 CiPXIqdHF2HoMoOfObm1zoVrTu7fDPSJSsnqeOmDtEKj053ANnY= -----END CERTIFICATE-----Generated at Mon Jan 26 07:11:59 2026 by rpki-client