This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/b899a15b-d5ae-45ec-8012-a6caab3dd88b/0/20FD166550369352D6C4C8AB8E9E4203C5D9ABEE.mft File: 20FD166550369352D6C4C8AB8E9E4203C5D9ABEE.mft (raw, json) Hash identifier: q7Yb7BNE5f0mRveoxTVtixSIGfi1EIaTzEhDU7MhGaY= Subject key identifier: F0:BC:84:48:A7:6C:E7:F9:06:4A:D8:D9:94:6D:AC:46:A0:52:D8:93 Authority key identifier: 20:FD:16:65:50:36:93:52:D6:C4:C8:AB:8E:9E:42:03:C5:D9:AB:EE Certificate issuer: /CN=20FD166550369352D6C4C8AB8E9E4203C5D9ABEE Certificate serial: 3035E304F8ADAE78EBD02E4EDD298F3C880BD4C5 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/20FD166550369352D6C4C8AB8E9E4203C5D9ABEE.cer Subject info access: rsync://repo-rpki.idnic.net/repo/b899a15b-d5ae-45ec-8012-a6caab3dd88b/0/20FD166550369352D6C4C8AB8E9E4203C5D9ABEE.mft Manifest number: 0235 Signing time: Sat 24 Jan 2026 08:00:51 +0000 Manifest this update: Sat 24 Jan 2026 07:55:51 +0000 Manifest next update: Tue 27 Jan 2026 19:03:51 +0000 Files and hashes: 1: 20FD166550369352D6C4C8AB8E9E4203C5D9ABEE.crl (hash: tTMZj6qSosyk3LCFGqtMBMMDqeJp0F34pHPrAWQd+v8=) 2: 3130332e3135362e3134362e302f32332d3234203d3e20313431303933.roa (hash: m4Ck3HJw6h63iOESyQS/p69JGf3Gj+AMerXfQa9rjpw=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/b899a15b-d5ae-45ec-8012-a6caab3dd88b/0/20FD166550369352D6C4C8AB8E9E4203C5D9ABEE.crl rsync://repo-rpki.idnic.net/repo/b899a15b-d5ae-45ec-8012-a6caab3dd88b/0/20FD166550369352D6C4C8AB8E9E4203C5D9ABEE.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/20FD166550369352D6C4C8AB8E9E4203C5D9ABEE.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 27 Jan 2026 19:03:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 30:35:e3:04:f8:ad:ae:78:eb:d0:2e:4e:dd:29:8f:3c:88:0b:d4:c5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=20FD166550369352D6C4C8AB8E9E4203C5D9ABEE Validity Not Before: Jan 24 07:55:51 2026 GMT Not After : Jan 27 19:03:51 2026 GMT Subject: CN=F0BC8448A76CE7F9064AD8D9946DAC46A052D893 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ef:97:52:2f:2e:34:b1:bc:d3:43:47:59:f5:fd: dd:22:2e:43:54:99:73:74:f1:63:0d:10:da:f5:19: df:b8:4e:57:b7:7e:80:74:10:b1:06:53:9c:63:af: 83:28:4e:87:bc:c2:95:54:17:e8:5a:bd:ac:36:98: 08:42:ce:0d:9f:64:7d:ed:71:e0:da:bb:29:fe:fe: 2d:08:e7:86:27:1b:54:6a:7d:60:8b:14:66:16:ef: 24:c1:a0:b9:54:5f:07:45:66:41:40:a3:60:cb:f8: 61:d5:e1:bb:7b:5f:38:cf:f3:c7:8c:34:dd:a4:8e: 1d:f6:3d:bd:67:b5:39:db:d6:86:71:34:ad:af:b3: af:df:12:86:4d:5e:e7:74:0d:aa:c0:fc:d4:e8:dc: af:a8:74:f2:fc:27:a0:f0:26:d9:be:c8:a8:05:a0: 5e:c1:85:72:6a:7d:4b:e2:a8:f8:46:11:86:e2:61: 25:17:6e:21:cd:d9:25:d4:b5:60:94:7e:1f:5b:f9: 55:8b:24:6a:9d:15:99:d7:ff:37:b5:12:83:24:4d: 2b:c7:9f:c0:49:8f:d4:e5:c3:94:97:c0:9e:d0:3e: 1a:de:e8:8b:f1:52:35:49:f1:1c:ff:82:13:96:8b: 44:ea:db:3e:8c:b9:8f:af:69:4e:50:d7:5c:d4:49: 44:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F0:BC:84:48:A7:6C:E7:F9:06:4A:D8:D9:94:6D:AC:46:A0:52:D8:93 X509v3 Authority Key Identifier: keyid:20:FD:16:65:50:36:93:52:D6:C4:C8:AB:8E:9E:42:03:C5:D9:AB:EE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/b899a15b-d5ae-45ec-8012-a6caab3dd88b/0/20FD166550369352D6C4C8AB8E9E4203C5D9ABEE.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/20FD166550369352D6C4C8AB8E9E4203C5D9ABEE.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/b899a15b-d5ae-45ec-8012-a6caab3dd88b/0/20FD166550369352D6C4C8AB8E9E4203C5D9ABEE.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a6:e9:e5:3b:86:8d:1f:48:c5:15:02:78:14:7c:0b:c0:50:36: 21:a0:01:69:dd:36:3e:53:ab:4c:c1:41:2d:ea:71:30:91:a3: a1:37:be:2c:93:a9:4c:99:80:94:28:10:ea:2d:5c:84:18:fd: 16:d3:c5:0d:bb:e9:30:aa:30:b3:fa:01:2c:0c:bd:c9:e7:97: 94:cc:b6:88:28:03:63:24:cd:87:3f:57:1e:7e:f7:48:a7:d6: ca:51:d3:01:42:cb:5d:3e:88:92:7a:31:7b:89:fb:49:4a:59: d4:f3:12:a0:45:04:9c:67:40:88:f6:d7:2a:1b:6c:40:62:ce: fa:f0:cb:fe:58:25:23:de:00:67:9a:da:d9:06:5d:49:12:3f: 61:b7:d9:43:95:9b:ad:fa:49:1c:c6:63:4f:c3:4c:bd:ef:a5: 0e:8f:a8:e6:db:e5:63:86:57:50:00:15:52:4a:1b:31:2c:48: 6b:5d:d2:88:f6:a4:25:37:fc:8b:d6:3f:28:a4:58:d3:04:1b: 4d:fa:c4:a6:04:98:76:c2:3b:30:51:9a:05:ff:63:a3:ab:ac: 3a:6b:60:c0:42:33:c7:06:fd:f2:d9:c2:53:22:32:bf:5b:f6: 6d:5f:63:c8:98:2e:2a:a9:8a:5e:41:cb:2d:9d:39:78:b0:aa: e1:78:10:f0 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUMDXjBPitrnjr0C5O3SmPPIgL1MUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjBGRDE2NjU1MDM2OTM1MkQ2QzRDOEFCOEU5RTQyMDND NUQ5QUJFRTAeFw0yNjAxMjQwNzU1NTFaFw0yNjAxMjcxOTAzNTFaMDMxMTAvBgNV BAMTKEYwQkM4NDQ4QTc2Q0U3RjkwNjRBRDhEOTk0NkRBQzQ2QTA1MkQ4OTMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDvl1IvLjSxvNNDR1n1/d0iLkNU mXN08WMNENr1Gd+4Tle3foB0ELEGU5xjr4MoToe8wpVUF+havaw2mAhCzg2fZH3t ceDauyn+/i0I54YnG1RqfWCLFGYW7yTBoLlUXwdFZkFAo2DL+GHV4bt7XzjP88eM NN2kjh32Pb1ntTnb1oZxNK2vs6/fEoZNXud0DarA/NTo3K+odPL8J6DwJtm+yKgF oF7BhXJqfUviqPhGEYbiYSUXbiHN2SXUtWCUfh9b+VWLJGqdFZnX/ze1EoMkTSvH n8BJj9Tlw5SXwJ7QPhre6IvxUjVJ8Rz/ghOWi0Tq2z6MuY+vaU5Q11zUSUSdAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU8LyESKds5/kGStjZlG2sRqBS2JMwHwYDVR0j BBgwFoAUIP0WZVA2k1LWxMirjp5CA8XZq+4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i ODk5YTE1Yi1kNWFlLTQ1ZWMtODAxMi1hNmNhYWIzZGQ4OGIvMC8yMEZEMTY2NTUw MzY5MzUyRDZDNEM4QUI4RTlFNDIwM0M1RDlBQkVFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMjBGRDE2NjU1MDM2OTM1MkQ2QzRDOEFCOEU5RTQyMDNDNUQ5 QUJFRS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYjg5OWExNWItZDVhZS00NWVjLTgw MTItYTZjYWFiM2RkODhiLzAvMjBGRDE2NjU1MDM2OTM1MkQ2QzRDOEFCOEU5RTQy MDNDNUQ5QUJFRS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKbp5TuGjR9IxRUCeBR8C8BQNiGgAWndNj5T q0zBQS3qcTCRo6E3viyTqUyZgJQoEOotXIQY/RbTxQ276TCqMLP6ASwMvcnnl5TM togoA2MkzYc/Vx5+90in1spR0wFCy10+iJJ6MXuJ+0lKWdTzEqBFBJxnQIj21yob bEBizvrwy/5YJSPeAGea2tkGXUkSP2G32UOVm636SRzGY0/DTL3vpQ6PqObb5WOG V1AAFVJKGzEsSGtd0oj2pCU3/IvWPyikWNMEG036xKYEmHbCOzBRmgX/Y6OrrDpr YMBCM8cG/fLZwlMiMr9b9m1fY8iYLiqpil5Byy2dOXiwquF4EPA= -----END CERTIFICATE-----Generated at Mon Jan 26 01:19:59 2026 by rpki-client