This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/bdd1eacd-a067-4924-9284-bc6f10d8d5a8/0/0DA6D433710276BF7B8006C21C26AEF5F856AF21.mft File: 0DA6D433710276BF7B8006C21C26AEF5F856AF21.mft (raw, json) Hash identifier: HLt8dCrjpTKklWCdZ84c93JBUZPoOjFY5eiaZWHFt0s= Subject key identifier: B3:97:B2:9F:9B:F6:9D:CA:9F:DA:6F:1D:CE:46:E5:49:09:C2:65:2A Authority key identifier: 0D:A6:D4:33:71:02:76:BF:7B:80:06:C2:1C:26:AE:F5:F8:56:AF:21 Certificate issuer: /CN=0DA6D433710276BF7B8006C21C26AEF5F856AF21 Certificate serial: 1C9AD18E8C75EB4A8E371DA220D3C3A0415FCFD5 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0DA6D433710276BF7B8006C21C26AEF5F856AF21.cer Subject info access: rsync://repo-rpki.idnic.net/repo/bdd1eacd-a067-4924-9284-bc6f10d8d5a8/0/0DA6D433710276BF7B8006C21C26AEF5F856AF21.mft Manifest number: 013D Signing time: Sat 24 Jan 2026 12:31:49 +0000 Manifest this update: Sat 24 Jan 2026 12:26:49 +0000 Manifest next update: Tue 27 Jan 2026 16:23:49 +0000 Files and hashes: 1: 323430353a353130303a3a2f33322d3438203d3e203137383236.roa (hash: VwqZQ2hYIJIpswzvgku070aTaUCXAfj4FutWWR2nxCU=) 2: 0DA6D433710276BF7B8006C21C26AEF5F856AF21.crl (hash: fLz8pODjHRRGk6O3zu6lPsE/KWWgIG6mIEaneUXJmV0=) 3: 3230322e3134392e36342e302f31392d3234203d3e203137383236.roa (hash: sQjzMKfSbeLjhatpOUa2jqoPr0yDGU2BnKpmrQbbfNA=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/bdd1eacd-a067-4924-9284-bc6f10d8d5a8/0/0DA6D433710276BF7B8006C21C26AEF5F856AF21.crl rsync://repo-rpki.idnic.net/repo/bdd1eacd-a067-4924-9284-bc6f10d8d5a8/0/0DA6D433710276BF7B8006C21C26AEF5F856AF21.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0DA6D433710276BF7B8006C21C26AEF5F856AF21.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 27 Jan 2026 16:23:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1c:9a:d1:8e:8c:75:eb:4a:8e:37:1d:a2:20:d3:c3:a0:41:5f:cf:d5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0DA6D433710276BF7B8006C21C26AEF5F856AF21 Validity Not Before: Jan 24 12:26:49 2026 GMT Not After : Jan 27 16:23:49 2026 GMT Subject: CN=B397B29F9BF69DCA9FDA6F1DCE46E54909C2652A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:94:8e:ec:21:4d:c2:18:75:6c:e6:8d:70:88: 1b:3a:ff:9c:2e:ae:bd:54:c5:8c:3a:af:f5:5c:82: 13:f8:fc:57:b0:dd:83:ff:fa:ba:49:34:20:26:1f: 19:24:a5:78:12:e4:35:d7:09:07:e4:f8:f8:02:80: 4c:f7:78:31:80:9d:b0:8b:93:e7:d9:6e:ac:75:6a: b5:fd:54:72:f4:db:7b:54:df:38:26:2c:93:f8:90: c8:48:a5:97:23:19:db:20:e2:57:51:13:c8:87:a9: f4:d0:9d:40:1c:ca:5a:f4:82:ba:29:fa:92:e5:2b: 51:9e:aa:e2:4f:04:65:17:26:c8:de:da:c2:0f:72: 2e:10:48:56:34:bc:60:07:ab:51:59:60:63:dc:e4: ad:e2:40:59:3a:4e:65:05:ee:d5:78:3b:fb:fc:b3: b3:43:10:c0:89:12:86:7b:91:5e:f7:60:47:d8:2f: 8b:98:47:b5:95:69:aa:53:af:d9:08:22:3c:f7:21: 9b:19:2f:d6:b2:af:bf:2e:9e:09:3a:2b:45:92:63: 6d:6f:86:ba:ab:3f:e7:81:f6:67:87:2b:36:ba:40: c7:77:cb:fd:cb:fb:92:d9:c5:af:35:df:2b:33:f1: f2:d7:cd:70:b7:34:75:62:da:20:45:b8:ea:41:55: 53:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B3:97:B2:9F:9B:F6:9D:CA:9F:DA:6F:1D:CE:46:E5:49:09:C2:65:2A X509v3 Authority Key Identifier: keyid:0D:A6:D4:33:71:02:76:BF:7B:80:06:C2:1C:26:AE:F5:F8:56:AF:21 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/bdd1eacd-a067-4924-9284-bc6f10d8d5a8/0/0DA6D433710276BF7B8006C21C26AEF5F856AF21.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0DA6D433710276BF7B8006C21C26AEF5F856AF21.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/bdd1eacd-a067-4924-9284-bc6f10d8d5a8/0/0DA6D433710276BF7B8006C21C26AEF5F856AF21.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 66:a8:32:16:f4:f0:90:d3:be:f9:d7:6f:af:57:97:1f:64:6f: 9a:4d:c1:90:94:f9:40:c6:65:f5:0e:5d:28:ae:81:6c:97:b7: 9b:ff:4b:36:4a:ac:64:ff:f7:55:23:18:c9:9b:38:ac:fd:93: 61:40:be:64:12:f3:a9:c0:d1:12:9c:9b:d7:77:49:ab:16:f1: 53:7e:07:94:29:cc:47:40:fb:0c:0b:47:cc:df:22:8a:4e:ed: 3f:bb:4f:79:52:2b:5f:9e:7a:61:60:2f:cd:be:20:24:7b:26: ce:4b:f3:ac:4d:39:6e:da:b4:aa:d0:35:7b:11:12:c8:2b:e1: 26:0c:f3:b3:7e:06:ce:5d:3b:8c:34:ed:15:36:fd:df:98:de: 2b:c5:68:ea:a8:d8:30:05:7f:79:92:61:33:79:62:d6:f4:8c: a8:77:92:a5:04:63:a7:9a:2f:71:cb:19:ed:d0:88:29:fd:e3: 97:f9:fc:63:2d:e2:0b:e6:d8:15:a4:c9:f7:48:ef:ea:3d:60: 6b:c6:63:a7:3a:4e:37:e2:11:ff:3e:34:1f:8a:f7:24:3e:f6: 25:1d:6e:ed:82:50:ed:f7:72:5f:06:aa:43:9c:3e:8d:8f:d6: ff:c0:86:0c:82:a6:18:a8:e7:01:e7:98:c8:38:c4:8c:f4:77: 1b:66:a2:9a -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUHJrRjox160qONx2iINPDoEFfz9UwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMERBNkQ0MzM3MTAyNzZCRjdCODAwNkMyMUMyNkFFRjVG ODU2QUYyMTAeFw0yNjAxMjQxMjI2NDlaFw0yNjAxMjcxNjIzNDlaMDMxMTAvBgNV BAMTKEIzOTdCMjlGOUJGNjlEQ0E5RkRBNkYxRENFNDZFNTQ5MDlDMjY1MkEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCtlI7sIU3CGHVs5o1wiBs6/5wu rr1UxYw6r/VcghP4/Few3YP/+rpJNCAmHxkkpXgS5DXXCQfk+PgCgEz3eDGAnbCL k+fZbqx1arX9VHL023tU3zgmLJP4kMhIpZcjGdsg4ldRE8iHqfTQnUAcylr0grop +pLlK1GequJPBGUXJsje2sIPci4QSFY0vGAHq1FZYGPc5K3iQFk6TmUF7tV4O/v8 s7NDEMCJEoZ7kV73YEfYL4uYR7WVaapTr9kIIjz3IZsZL9ayr78ungk6K0WSY21v hrqrP+eB9meHKza6QMd3y/3L+5LZxa813ysz8fLXzXC3NHVi2iBFuOpBVVPhAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUs5eyn5v2ncqf2m8dzkblSQnCZSowHwYDVR0j BBgwFoAUDabUM3ECdr97gAbCHCau9fhWryEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i ZGQxZWFjZC1hMDY3LTQ5MjQtOTI4NC1iYzZmMTBkOGQ1YTgvMC8wREE2RDQzMzcx MDI3NkJGN0I4MDA2QzIxQzI2QUVGNUY4NTZBRjIxLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMERBNkQ0MzM3MTAyNzZCRjdCODAwNkMyMUMyNkFFRjVGODU2 QUYyMS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYmRkMWVhY2QtYTA2Ny00OTI0LTky ODQtYmM2ZjEwZDhkNWE4LzAvMERBNkQ0MzM3MTAyNzZCRjdCODAwNkMyMUMyNkFF RjVGODU2QUYyMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGaoMhb08JDTvvnXb69Xlx9kb5pNwZCU+UDG ZfUOXSiugWyXt5v/SzZKrGT/91UjGMmbOKz9k2FAvmQS86nA0RKcm9d3SasW8VN+ B5QpzEdA+wwLR8zfIopO7T+7T3lSK1+eemFgL82+ICR7Js5L86xNOW7atKrQNXsR Esgr4SYM87N+Bs5dO4w07RU2/d+Y3ivFaOqo2DAFf3mSYTN5Ytb0jKh3kqUEY6ea L3HLGe3QiCn945f5/GMt4gvm2BWkyfdI7+o9YGvGY6c6TjfiEf8+NB+K9yQ+9iUd bu2CUO33cl8GqkOcPo2P1v/AhgyCphio5wHnmMg4xIz0dxtmopo= -----END CERTIFICATE-----Generated at Sun Jan 25 20:33:01 2026 by rpki-client