This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/bee14382-d587-4e86-8e7e-6a264a58ea06/0/F23ACCA147720B423A9576F3E408691505B293A3.mft File: F23ACCA147720B423A9576F3E408691505B293A3.mft (raw, json) Hash identifier: hzyR9IAyPlfhITxSaatY9DXWC77avQmXR5YHzAS4DmM= Subject key identifier: AF:A6:13:1B:40:92:D6:D6:21:4A:65:02:9F:79:94:E1:0C:0E:45:EF Authority key identifier: F2:3A:CC:A1:47:72:0B:42:3A:95:76:F3:E4:08:69:15:05:B2:93:A3 Certificate issuer: /CN=F23ACCA147720B423A9576F3E408691505B293A3 Certificate serial: 7C5CB9703359CEEF0CBF7826986BD44CED3C1D54 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F23ACCA147720B423A9576F3E408691505B293A3.cer Subject info access: rsync://repo-rpki.idnic.net/repo/bee14382-d587-4e86-8e7e-6a264a58ea06/0/F23ACCA147720B423A9576F3E408691505B293A3.mft Manifest number: 0176 Signing time: Sat 24 Jan 2026 09:31:42 +0000 Manifest this update: Sat 24 Jan 2026 09:26:42 +0000 Manifest next update: Tue 27 Jan 2026 20:11:42 +0000 Files and hashes: 1: 3130332e3139302e32382e302f32342d3234203d3e20313439393438.roa (hash: BETPcfS1VcTumvWSwQRlY9PEvVDNhn9IgT3oOeof4jw=) 2: 3130332e3139302e32392e302f32342d3234203d3e20313439393438.roa (hash: bL4A3iMML3JwhDE2yFeN6uDiSzuObZzoT/f0gxHop3A=) 3: F23ACCA147720B423A9576F3E408691505B293A3.crl (hash: lVD5tDtUfS8F4Sf1rjb2R29thMRtPmymH8JkMi8RwjY=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/bee14382-d587-4e86-8e7e-6a264a58ea06/0/F23ACCA147720B423A9576F3E408691505B293A3.crl rsync://repo-rpki.idnic.net/repo/bee14382-d587-4e86-8e7e-6a264a58ea06/0/F23ACCA147720B423A9576F3E408691505B293A3.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F23ACCA147720B423A9576F3E408691505B293A3.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 27 Jan 2026 20:11:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7c:5c:b9:70:33:59:ce:ef:0c:bf:78:26:98:6b:d4:4c:ed:3c:1d:54 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F23ACCA147720B423A9576F3E408691505B293A3 Validity Not Before: Jan 24 09:26:42 2026 GMT Not After : Jan 27 20:11:42 2026 GMT Subject: CN=AFA6131B4092D6D6214A65029F7994E10C0E45EF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:e2:62:f1:37:31:7e:88:d0:19:60:0b:ed:60: 42:24:b1:9c:bd:45:4f:f6:67:72:f4:bb:8e:d8:8c: a6:a1:4e:c3:5b:c5:b3:c9:e9:88:86:af:13:de:1d: e0:2e:fc:8a:0c:1c:96:28:1c:b7:e0:63:99:68:35: 05:f2:91:6e:73:29:68:b6:2f:8d:65:b0:44:d4:36: 35:46:ab:47:ca:30:4b:55:f1:9d:00:61:1e:95:de: 75:fb:bb:2d:86:c7:93:a6:9b:49:1c:ee:8d:9d:cb: 30:50:34:6c:39:5b:a4:41:0d:99:ed:36:b7:27:2a: c3:ad:63:c9:c5:64:03:0b:b8:23:86:ce:ec:f3:45: a3:50:ad:c9:17:57:41:a2:44:9f:1b:ed:65:73:7a: 66:85:49:1e:54:a7:23:d7:e2:dc:15:2d:1f:96:ac: 0a:44:db:cd:e6:41:9b:12:d1:b1:17:6c:24:8e:09: 6c:99:01:b7:b3:58:86:68:a7:09:4e:f9:fb:33:0d: bf:d3:53:a3:a9:76:d8:cc:df:ff:ac:3e:4f:db:14: ba:63:99:3b:58:4e:4d:23:d4:d2:77:07:63:55:9f: 34:2a:84:97:b7:2a:80:5f:6a:e4:17:d4:e3:78:dc: 9e:c4:e8:f3:ba:46:bb:a5:58:e3:cf:29:e1:9b:d9: 18:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:A6:13:1B:40:92:D6:D6:21:4A:65:02:9F:79:94:E1:0C:0E:45:EF X509v3 Authority Key Identifier: keyid:F2:3A:CC:A1:47:72:0B:42:3A:95:76:F3:E4:08:69:15:05:B2:93:A3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/bee14382-d587-4e86-8e7e-6a264a58ea06/0/F23ACCA147720B423A9576F3E408691505B293A3.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F23ACCA147720B423A9576F3E408691505B293A3.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/bee14382-d587-4e86-8e7e-6a264a58ea06/0/F23ACCA147720B423A9576F3E408691505B293A3.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 14:1e:b5:6b:ab:6f:04:8c:41:a5:c2:35:f7:8d:ac:bd:90:65: 25:7b:22:eb:a1:c7:de:15:43:27:06:55:03:f9:3f:ac:57:8d: 4d:8e:d2:7a:60:ea:67:90:04:9d:55:4e:26:78:18:85:8c:08: 3d:88:63:f2:d4:aa:b6:7e:36:c6:1f:37:75:85:aa:c7:a5:f0: 01:97:ea:d7:fe:3e:1c:5a:b3:98:cd:37:75:e3:50:e6:5f:c1: 2f:c9:f8:17:c2:25:91:1e:31:00:81:05:e2:3b:1e:7e:15:73: 30:c9:70:49:e9:8b:db:ab:55:f5:fb:fb:05:c6:93:7c:5a:a7: a0:18:57:96:bd:c9:5d:69:97:58:01:32:f9:53:ad:da:18:f8: 47:00:2d:fa:f5:8a:f6:41:84:4c:7b:cc:47:dc:e4:a8:0d:ed: b9:c9:5c:95:4f:6a:11:c0:4f:7d:87:ba:f3:f3:f4:8a:ed:d3: 40:84:73:df:36:ec:15:5e:8d:57:0f:ff:fa:1e:20:f8:12:3c: 03:9d:b0:c6:9f:3e:18:6e:b6:71:c9:5b:b4:88:6e:6a:cc:05: cb:cd:4e:ec:4d:63:de:be:63:6b:66:6a:f2:b2:d3:19:8b:e0: 9b:ac:1c:34:db:8b:4f:b8:16:08:98:70:98:68:96:1a:49:54: 95:b2:ae:4c -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUfFy5cDNZzu8Mv3gmmGvUTO08HVQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjIzQUNDQTE0NzcyMEI0MjNBOTU3NkYzRTQwODY5MTUw NUIyOTNBMzAeFw0yNjAxMjQwOTI2NDJaFw0yNjAxMjcyMDExNDJaMDMxMTAvBgNV BAMTKEFGQTYxMzFCNDA5MkQ2RDYyMTRBNjUwMjlGNzk5NEUxMEMwRTQ1RUYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDg4mLxNzF+iNAZYAvtYEIksZy9 RU/2Z3L0u47YjKahTsNbxbPJ6YiGrxPeHeAu/IoMHJYoHLfgY5loNQXykW5zKWi2 L41lsETUNjVGq0fKMEtV8Z0AYR6V3nX7uy2Gx5Omm0kc7o2dyzBQNGw5W6RBDZnt NrcnKsOtY8nFZAMLuCOGzuzzRaNQrckXV0GiRJ8b7WVzemaFSR5UpyPX4twVLR+W rApE283mQZsS0bEXbCSOCWyZAbezWIZopwlO+fszDb/TU6OpdtjM3/+sPk/bFLpj mTtYTk0j1NJ3B2NVnzQqhJe3KoBfauQX1ON43J7E6PO6RrulWOPPKeGb2Rh5AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUr6YTG0CS1tYhSmUCn3mU4QwORe8wHwYDVR0j BBgwFoAU8jrMoUdyC0I6lXbz5AhpFQWyk6MwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i ZWUxNDM4Mi1kNTg3LTRlODYtOGU3ZS02YTI2NGE1OGVhMDYvMC9GMjNBQ0NBMTQ3 NzIwQjQyM0E5NTc2RjNFNDA4NjkxNTA1QjI5M0EzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRjIzQUNDQTE0NzcyMEI0MjNBOTU3NkYzRTQwODY5MTUwNUIy OTNBMy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYmVlMTQzODItZDU4Ny00ZTg2LThl N2UtNmEyNjRhNThlYTA2LzAvRjIzQUNDQTE0NzcyMEI0MjNBOTU3NkYzRTQwODY5 MTUwNUIyOTNBMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABQetWurbwSMQaXCNfeNrL2QZSV7Iuuhx94V QycGVQP5P6xXjU2O0npg6meQBJ1VTiZ4GIWMCD2IY/LUqrZ+NsYfN3WFqsel8AGX 6tf+Phxas5jNN3XjUOZfwS/J+BfCJZEeMQCBBeI7Hn4VczDJcEnpi9urVfX7+wXG k3xap6AYV5a9yV1pl1gBMvlTrdoY+EcALfr1ivZBhEx7zEfc5KgN7bnJXJVPahHA T32HuvPz9Irt00CEc9827BVejVcP//oeIPgSPAOdsMafPhhutnHJW7SIbmrMBcvN TuxNY96+Y2tmavKy0xmL4JusHDTbi0+4FgiYcJholhpJVJWyrkw= -----END CERTIFICATE-----Generated at Sun Jan 25 20:17:36 2026 by rpki-client