This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/bd871303-021a-4a0b-9efb-ae2db6c90d84/0/ACE2DABAA249D56AD968AD7D60A09642B626CA4D.mft File: ACE2DABAA249D56AD968AD7D60A09642B626CA4D.mft (raw, json) Hash identifier: OKB6vwf23oJLHIOV4CBENZQrDktQC4VEQ8DjFQTysKk= Subject key identifier: B5:A5:46:23:6F:8C:9D:53:6B:0A:BC:D8:E0:0D:A3:5D:92:AF:4D:6E Authority key identifier: AC:E2:DA:BA:A2:49:D5:6A:D9:68:AD:7D:60:A0:96:42:B6:26:CA:4D Certificate issuer: /CN=ACE2DABAA249D56AD968AD7D60A09642B626CA4D Certificate serial: 376531818F62F84E0133A02263BBB7DF39D8CFF8 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/ACE2DABAA249D56AD968AD7D60A09642B626CA4D.cer Subject info access: rsync://repo-rpki.idnic.net/repo/bd871303-021a-4a0b-9efb-ae2db6c90d84/0/ACE2DABAA249D56AD968AD7D60A09642B626CA4D.mft Manifest number: 0171 Signing time: Sat 24 Jan 2026 15:21:09 +0000 Manifest this update: Sat 24 Jan 2026 15:16:09 +0000 Manifest next update: Tue 27 Jan 2026 18:20:09 +0000 Files and hashes: 1: 3230332e332e39302e302f32342d3234203d3e20313531353938.roa (hash: qxf//YzvZquiMhJd5iJXlsIhTKmJQsFvO/D1AKj+2BM=) 2: ACE2DABAA249D56AD968AD7D60A09642B626CA4D.crl (hash: iVcRXf5tKQQ6En5XPx9gMHt5sEBI30SDeppB015rbak=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/bd871303-021a-4a0b-9efb-ae2db6c90d84/0/ACE2DABAA249D56AD968AD7D60A09642B626CA4D.crl rsync://repo-rpki.idnic.net/repo/bd871303-021a-4a0b-9efb-ae2db6c90d84/0/ACE2DABAA249D56AD968AD7D60A09642B626CA4D.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/ACE2DABAA249D56AD968AD7D60A09642B626CA4D.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 27 Jan 2026 18:20:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 37:65:31:81:8f:62:f8:4e:01:33:a0:22:63:bb:b7:df:39:d8:cf:f8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ACE2DABAA249D56AD968AD7D60A09642B626CA4D Validity Not Before: Jan 24 15:16:09 2026 GMT Not After : Jan 27 18:20:09 2026 GMT Subject: CN=B5A546236F8C9D536B0ABCD8E00DA35D92AF4D6E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:d5:39:62:eb:b9:35:20:9e:47:3c:96:16:5a: 57:cb:17:28:23:0a:f5:a1:c3:20:0b:2f:f7:38:82: d7:b7:00:c4:11:87:45:c5:eb:08:c0:40:e7:39:32: 8d:96:d6:18:b5:93:07:f6:c8:97:17:c2:8c:3d:2a: 85:3b:76:36:bd:28:db:cc:6a:f7:d5:a4:85:4b:57: 35:34:a5:f6:31:3d:d9:3f:8f:5e:df:cb:ec:ab:c1: 82:ab:94:1d:41:88:bc:24:35:a5:66:36:fa:2b:b0: 59:5e:57:95:e1:19:11:d5:41:1b:ef:94:e9:e4:fd: 53:3e:52:fb:75:cd:36:6e:37:8e:b7:fd:5a:56:44: 9d:5e:21:98:54:5e:cb:5a:93:55:20:b8:d4:e9:93: 8b:c1:18:e5:01:a2:f8:cf:4a:bd:c5:48:4a:f4:2e: 1b:99:ad:28:34:ed:39:a9:c0:c1:29:5b:92:92:43: 9c:dc:79:41:56:08:fb:30:59:63:86:e6:a9:8f:ee: 98:7c:54:21:0f:75:7c:c5:e4:a1:7c:4c:00:10:35: 61:12:05:4c:1b:02:b7:f2:ae:e4:47:41:7d:fc:37: 2c:7d:0b:57:55:24:c9:5e:7d:bb:de:d5:6a:ed:0f: 56:87:9a:30:52:95:00:32:42:0e:84:61:cf:2b:2c: 12:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B5:A5:46:23:6F:8C:9D:53:6B:0A:BC:D8:E0:0D:A3:5D:92:AF:4D:6E X509v3 Authority Key Identifier: keyid:AC:E2:DA:BA:A2:49:D5:6A:D9:68:AD:7D:60:A0:96:42:B6:26:CA:4D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/bd871303-021a-4a0b-9efb-ae2db6c90d84/0/ACE2DABAA249D56AD968AD7D60A09642B626CA4D.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/ACE2DABAA249D56AD968AD7D60A09642B626CA4D.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/bd871303-021a-4a0b-9efb-ae2db6c90d84/0/ACE2DABAA249D56AD968AD7D60A09642B626CA4D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption d1:4c:e2:bc:1c:ba:8b:f1:c2:ea:92:f5:d0:b8:c4:52:83:91: ba:cb:31:9e:20:b2:9c:23:f8:1d:a7:8c:1e:37:cc:01:54:ef: 4e:12:24:f9:58:14:4c:b2:b9:5f:c7:92:dc:75:6d:e6:55:45: 63:48:55:38:ce:e1:a3:63:ae:a8:ba:1a:47:af:60:98:e0:66: 33:27:37:4e:61:99:49:5d:76:eb:2f:46:a2:65:e2:c8:18:26: 72:3c:45:f1:db:d9:fa:d8:0f:3e:c0:76:a0:06:41:e3:f8:80: 44:92:d1:64:fb:43:04:2d:88:3b:7e:3c:e6:db:16:40:06:4a: 41:9c:a4:db:27:4e:a1:7b:9d:4b:54:a0:64:0e:3f:a1:67:ee: f0:67:14:0a:6a:6e:80:c3:42:89:2c:0c:5a:35:a7:74:7c:ee: a7:7e:bc:65:0d:bd:96:83:3b:8a:fd:d9:e0:0b:f5:ca:1a:16: 4a:06:71:77:92:cd:03:f6:d8:bf:2b:c8:cf:a2:45:0d:d9:c1: 31:59:d0:e4:45:53:3e:f7:92:07:d8:68:2e:dc:36:2e:23:0f: 5e:11:53:cd:06:07:b7:59:25:98:69:44:c3:51:80:7c:37:71: a3:47:49:2a:5d:a9:89:1c:21:9f:dd:ee:b1:b2:06:60:1b:ac: 20:70:75:9c -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUN2UxgY9i+E4BM6AiY7u33znYz/gwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUNFMkRBQkFBMjQ5RDU2QUQ5NjhBRDdENjBBMDk2NDJC NjI2Q0E0RDAeFw0yNjAxMjQxNTE2MDlaFw0yNjAxMjcxODIwMDlaMDMxMTAvBgNV BAMTKEI1QTU0NjIzNkY4QzlENTM2QjBBQkNEOEUwMERBMzVEOTJBRjRENkUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCr1Tli67k1IJ5HPJYWWlfLFygj CvWhwyALL/c4gte3AMQRh0XF6wjAQOc5Mo2W1hi1kwf2yJcXwow9KoU7dja9KNvM avfVpIVLVzU0pfYxPdk/j17fy+yrwYKrlB1BiLwkNaVmNvorsFleV5XhGRHVQRvv lOnk/VM+Uvt1zTZuN463/VpWRJ1eIZhUXstak1UguNTpk4vBGOUBovjPSr3FSEr0 LhuZrSg07TmpwMEpW5KSQ5zceUFWCPswWWOG5qmP7ph8VCEPdXzF5KF8TAAQNWES BUwbArfyruRHQX38Nyx9C1dVJMlefbve1WrtD1aHmjBSlQAyQg6EYc8rLBLxAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUtaVGI2+MnVNrCrzY4A2jXZKvTW4wHwYDVR0j BBgwFoAUrOLauqJJ1WrZaK19YKCWQrYmyk0wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i ZDg3MTMwMy0wMjFhLTRhMGItOWVmYi1hZTJkYjZjOTBkODQvMC9BQ0UyREFCQUEy NDlENTZBRDk2OEFEN0Q2MEEwOTY0MkI2MjZDQTRELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQUNFMkRBQkFBMjQ5RDU2QUQ5NjhBRDdENjBBMDk2NDJCNjI2 Q0E0RC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYmQ4NzEzMDMtMDIxYS00YTBiLTll ZmItYWUyZGI2YzkwZDg0LzAvQUNFMkRBQkFBMjQ5RDU2QUQ5NjhBRDdENjBBMDk2 NDJCNjI2Q0E0RC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBANFM4rwcuovxwuqS9dC4xFKDkbrLMZ4gspwj +B2njB43zAFU704SJPlYFEyyuV/Hktx1beZVRWNIVTjO4aNjrqi6GkevYJjgZjMn N05hmUlddusvRqJl4sgYJnI8RfHb2frYDz7AdqAGQeP4gESS0WT7QwQtiDt+PObb FkAGSkGcpNsnTqF7nUtUoGQOP6Fn7vBnFApqboDDQoksDFo1p3R87qd+vGUNvZaD O4r92eAL9coaFkoGcXeSzQP22L8ryM+iRQ3ZwTFZ0ORFUz73kgfYaC7cNi4jD14R U80GB7dZJZhpRMNRgHw3caNHSSpdqYkcIZ/d7rGyBmAbrCBwdZw= -----END CERTIFICATE-----Generated at Sun Jan 25 22:00:40 2026 by rpki-client