This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/c3b8ceab-fb5c-40a9-b889-2d1889a5004b/0/A68ED4D90CF8EAA8759CE84CF5FC68B56F62850E.mft File: A68ED4D90CF8EAA8759CE84CF5FC68B56F62850E.mft (raw, json) Hash identifier: MlUFivqjC0WwXxn7PH4/NVzd5uxluuz2jOPv5Gqn3E8= Subject key identifier: 1F:6C:08:52:37:31:B4:71:36:B7:86:94:05:37:80:B1:60:18:ED:8D Authority key identifier: A6:8E:D4:D9:0C:F8:EA:A8:75:9C:E8:4C:F5:FC:68:B5:6F:62:85:0E Certificate issuer: /CN=A68ED4D90CF8EAA8759CE84CF5FC68B56F62850E Certificate serial: 05392C0DC3872E4423D2F1C1A882E9542F05C3E0 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A68ED4D90CF8EAA8759CE84CF5FC68B56F62850E.cer Subject info access: rsync://repo-rpki.idnic.net/repo/c3b8ceab-fb5c-40a9-b889-2d1889a5004b/0/A68ED4D90CF8EAA8759CE84CF5FC68B56F62850E.mft Manifest number: 0294 Signing time: Sun 25 Jan 2026 20:41:23 +0000 Manifest this update: Sun 25 Jan 2026 20:36:23 +0000 Manifest next update: Thu 29 Jan 2026 03:44:23 +0000 Files and hashes: 1: A68ED4D90CF8EAA8759CE84CF5FC68B56F62850E.crl (hash: ET/DA64jE5/CQXmPA2qJPElTrK0NEhR2iT5J7TIqpbk=) 2: 3130332e3137312e37392e302f32342d3234203d3e20313432333932.roa (hash: aV5yiYhEjo0Djjw17Cd86FNmWGNEd83JMXu1qygwBWY=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/c3b8ceab-fb5c-40a9-b889-2d1889a5004b/0/A68ED4D90CF8EAA8759CE84CF5FC68B56F62850E.crl rsync://repo-rpki.idnic.net/repo/c3b8ceab-fb5c-40a9-b889-2d1889a5004b/0/A68ED4D90CF8EAA8759CE84CF5FC68B56F62850E.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A68ED4D90CF8EAA8759CE84CF5FC68B56F62850E.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 28 Jan 2026 14:00:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 05:39:2c:0d:c3:87:2e:44:23:d2:f1:c1:a8:82:e9:54:2f:05:c3:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A68ED4D90CF8EAA8759CE84CF5FC68B56F62850E Validity Not Before: Jan 25 20:36:23 2026 GMT Not After : Jan 29 03:44:23 2026 GMT Subject: CN=1F6C08523731B47136B78694053780B16018ED8D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:9d:1e:ab:43:05:03:a1:b4:35:20:e4:f1:ce: 8f:a1:29:12:ad:d9:1a:06:d0:0a:d1:c7:9d:a5:c5: 21:43:2c:79:25:ee:c9:c9:fb:29:16:5a:7b:e6:42: 92:5e:63:7b:48:ab:63:16:d9:42:e9:27:a0:21:00: 96:f8:43:6e:fe:ad:eb:3b:5d:ce:b1:a3:b4:cc:f0: 2f:b1:ca:e6:95:68:ac:15:21:12:7c:54:6a:d0:28: 79:02:f8:8b:79:36:79:73:9e:23:6a:d6:34:5f:a0: 94:0b:a6:93:58:e4:e6:db:dd:a3:f2:e1:00:f6:52: 5c:d0:ec:67:aa:ef:80:1e:d7:ad:25:5b:bc:16:d6: e2:85:92:08:76:52:86:7c:47:b5:13:fb:56:31:7b: bc:b0:d1:21:d9:cc:98:42:83:14:e0:d1:98:c5:69: 19:7a:61:7b:21:e8:f1:bd:e2:0f:ca:57:81:e5:a3: 17:19:90:13:b5:39:bf:4c:3a:85:39:fa:9b:c8:17: 8f:af:ec:a7:2e:8e:f7:b5:71:c1:41:e8:90:d9:2f: a7:8d:9c:5c:32:b8:ce:12:10:d8:13:b5:03:c4:bd: fc:a3:b1:22:57:2b:59:dd:d3:a4:3f:3c:e8:2b:7f: 69:ec:fe:f7:b2:8b:e3:5f:bf:81:29:cf:0a:5d:b0: 19:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:6C:08:52:37:31:B4:71:36:B7:86:94:05:37:80:B1:60:18:ED:8D X509v3 Authority Key Identifier: keyid:A6:8E:D4:D9:0C:F8:EA:A8:75:9C:E8:4C:F5:FC:68:B5:6F:62:85:0E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/c3b8ceab-fb5c-40a9-b889-2d1889a5004b/0/A68ED4D90CF8EAA8759CE84CF5FC68B56F62850E.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A68ED4D90CF8EAA8759CE84CF5FC68B56F62850E.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c3b8ceab-fb5c-40a9-b889-2d1889a5004b/0/A68ED4D90CF8EAA8759CE84CF5FC68B56F62850E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6c:5a:1e:79:ce:55:c0:e3:c3:27:03:12:8c:fa:b0:9b:2f:51: fd:f3:ea:b1:38:32:be:e3:32:26:36:66:17:9f:0f:ce:0f:7a: 6d:51:70:72:ce:9b:7b:1e:f5:98:7b:23:47:c4:36:39:fe:c6: 97:ac:19:57:8b:6a:c1:93:20:c3:85:b4:5e:e3:3a:9b:45:24: b5:f9:6a:aa:d3:b8:03:64:3d:9d:ea:9f:85:ae:01:8c:3c:7f: 76:de:08:35:d7:ff:5d:9b:19:7b:79:36:37:58:cf:aa:e4:96: 8c:84:97:36:13:b3:68:be:9f:a6:e8:c3:bc:60:72:b0:a9:fb: 5b:08:91:f3:ab:99:7f:3d:62:83:16:9e:bb:72:3c:01:d8:54: 26:ae:88:b6:28:99:60:04:a5:fd:e1:b7:20:8d:8e:5f:9e:b7: 51:a4:42:b2:aa:48:18:ac:ae:1f:00:40:ab:c2:0f:38:1b:10: 1b:48:e4:c9:87:a7:d3:4b:63:f4:ff:5d:9f:83:cf:a3:ea:65: 32:71:8c:70:83:83:8a:a1:42:fb:01:b4:00:ca:36:2e:a7:88: 16:f7:58:7c:0f:5e:34:9c:4f:d8:45:2a:5a:29:3c:2a:96:1e: 40:9b:38:98:c3:20:4c:ae:e2:57:ed:66:38:90:3d:0c:dd:05: cd:e7:91:c3 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUBTksDcOHLkQj0vHBqILpVC8Fw+AwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTY4RUQ0RDkwQ0Y4RUFBODc1OUNFODRDRjVGQzY4QjU2 RjYyODUwRTAeFw0yNjAxMjUyMDM2MjNaFw0yNjAxMjkwMzQ0MjNaMDMxMTAvBgNV BAMTKDFGNkMwODUyMzczMUI0NzEzNkI3ODY5NDA1Mzc4MEIxNjAxOEVEOEQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDYnR6rQwUDobQ1IOTxzo+hKRKt 2RoG0ArRx52lxSFDLHkl7snJ+ykWWnvmQpJeY3tIq2MW2ULpJ6AhAJb4Q27+res7 Xc6xo7TM8C+xyuaVaKwVIRJ8VGrQKHkC+It5NnlzniNq1jRfoJQLppNY5Obb3aPy 4QD2UlzQ7Geq74Ae160lW7wW1uKFkgh2UoZ8R7UT+1Yxe7yw0SHZzJhCgxTg0ZjF aRl6YXsh6PG94g/KV4HloxcZkBO1Ob9MOoU5+pvIF4+v7Kcujve1ccFB6JDZL6eN nFwyuM4SENgTtQPEvfyjsSJXK1nd06Q/POgrf2ns/veyi+Nfv4EpzwpdsBmtAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUH2wIUjcxtHE2t4aUBTeAsWAY7Y0wHwYDVR0j BBgwFoAUpo7U2Qz46qh1nOhM9fxotW9ihQ4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j M2I4Y2VhYi1mYjVjLTQwYTktYjg4OS0yZDE4ODlhNTAwNGIvMC9BNjhFRDREOTBD RjhFQUE4NzU5Q0U4NENGNUZDNjhCNTZGNjI4NTBFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQTY4RUQ0RDkwQ0Y4RUFBODc1OUNFODRDRjVGQzY4QjU2RjYy ODUwRS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYzNiOGNlYWItZmI1Yy00MGE5LWI4 ODktMmQxODg5YTUwMDRiLzAvQTY4RUQ0RDkwQ0Y4RUFBODc1OUNFODRDRjVGQzY4 QjU2RjYyODUwRS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGxaHnnOVcDjwycDEoz6sJsvUf3z6rE4Mr7j MiY2ZhefD84Pem1RcHLOm3se9Zh7I0fENjn+xpesGVeLasGTIMOFtF7jOptFJLX5 aqrTuANkPZ3qn4WuAYw8f3beCDXX/12bGXt5NjdYz6rkloyElzYTs2i+n6bow7xg crCp+1sIkfOrmX89YoMWnrtyPAHYVCauiLYomWAEpf3htyCNjl+et1GkQrKqSBis rh8AQKvCDzgbEBtI5MmHp9NLY/T/XZ+Dz6PqZTJxjHCDg4qhQvsBtADKNi6niBb3 WHwPXjScT9hFKlopPCqWHkCbOJjDIEyu4lftZjiQPQzdBc3nkcM= -----END CERTIFICATE-----Generated at Mon Jan 26 01:11:45 2026 by rpki-client