This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/c55eac97-31b5-4f33-82f4-5241470cbbbe/0/233AF26D7DAE6C359EB03AD5C6FB4B4E05DDF23D.mft File: 233AF26D7DAE6C359EB03AD5C6FB4B4E05DDF23D.mft (raw, json) Hash identifier: ewJWV87YIlRAPVxncBGUAbXL/z+RM6f3QDQ+/gI0POg= Subject key identifier: 4A:A3:80:94:9D:1E:E7:E3:1D:0B:55:49:65:88:3E:BA:26:62:6A:45 Authority key identifier: 23:3A:F2:6D:7D:AE:6C:35:9E:B0:3A:D5:C6:FB:4B:4E:05:DD:F2:3D Certificate issuer: /CN=233AF26D7DAE6C359EB03AD5C6FB4B4E05DDF23D Certificate serial: 1F99B9090CF17F0578591974582C5ED74B9DCAED Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/233AF26D7DAE6C359EB03AD5C6FB4B4E05DDF23D.cer Subject info access: rsync://repo-rpki.idnic.net/repo/c55eac97-31b5-4f33-82f4-5241470cbbbe/0/233AF26D7DAE6C359EB03AD5C6FB4B4E05DDF23D.mft Manifest number: 0547 Signing time: Sun 25 Jan 2026 17:21:56 +0000 Manifest this update: Sun 25 Jan 2026 17:16:56 +0000 Manifest next update: Thu 29 Jan 2026 04:51:56 +0000 Files and hashes: 1: 3230322e3136352e33322e302f32302d3234203d3e203137353338.roa (hash: bVRLDmnlkDr+Er81GecVOu1gTofkGixwnSL4beQ/iNg=) 2: 233AF26D7DAE6C359EB03AD5C6FB4B4E05DDF23D.crl (hash: Dg778kSMF/DilUDzeQRqwRwAeUt7obmkORrmBzrpLuA=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/c55eac97-31b5-4f33-82f4-5241470cbbbe/0/233AF26D7DAE6C359EB03AD5C6FB4B4E05DDF23D.crl rsync://repo-rpki.idnic.net/repo/c55eac97-31b5-4f33-82f4-5241470cbbbe/0/233AF26D7DAE6C359EB03AD5C6FB4B4E05DDF23D.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/233AF26D7DAE6C359EB03AD5C6FB4B4E05DDF23D.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 28 Jan 2026 14:00:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1f:99:b9:09:0c:f1:7f:05:78:59:19:74:58:2c:5e:d7:4b:9d:ca:ed Signature Algorithm: sha256WithRSAEncryption Issuer: CN=233AF26D7DAE6C359EB03AD5C6FB4B4E05DDF23D Validity Not Before: Jan 25 17:16:56 2026 GMT Not After : Jan 29 04:51:56 2026 GMT Subject: CN=4AA380949D1EE7E31D0B554965883EBA26626A45 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:6b:cd:26:44:02:93:bf:2b:bf:f2:60:4f:9f: 56:de:bb:8c:49:86:2c:d8:51:56:3b:50:4a:65:a2: 0b:76:8a:27:83:04:d6:bb:67:5f:f1:58:76:70:f8: 37:71:f0:e6:13:18:6d:a1:70:f9:22:a9:40:34:50: 49:be:7b:69:3e:34:e1:b2:f7:29:7e:1a:96:bc:62: a7:8b:2b:d0:65:0c:06:5f:8e:85:78:8e:ba:69:72: 44:81:06:55:f4:96:02:f7:2c:63:70:84:40:a6:dd: b5:95:d6:c8:4d:91:6a:a7:aa:49:6f:4b:42:0d:c2: 93:6f:6d:2f:76:0e:04:04:5e:c9:4f:60:85:f9:2b: c8:05:6d:e4:fe:fa:ae:dd:33:5c:ee:63:1b:59:76: 58:7f:ab:90:1d:2e:63:92:16:ef:c6:e3:5b:75:ae: 04:5c:f3:54:3d:f1:2c:c9:25:71:a5:5f:99:d9:f3: 9c:fb:0e:d4:4d:00:bd:66:03:f1:7a:20:71:4c:c8: 5f:50:66:34:79:cc:da:03:77:e6:ff:fb:6a:15:b0: df:67:b3:c6:32:92:f0:b6:02:a0:96:d5:2d:9c:d7: 3a:a3:49:57:b7:58:b0:b4:1e:cb:ae:13:83:2a:a0: 3d:e9:3b:21:51:12:bf:9e:29:6a:85:fd:c9:76:3d: be:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:A3:80:94:9D:1E:E7:E3:1D:0B:55:49:65:88:3E:BA:26:62:6A:45 X509v3 Authority Key Identifier: keyid:23:3A:F2:6D:7D:AE:6C:35:9E:B0:3A:D5:C6:FB:4B:4E:05:DD:F2:3D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/c55eac97-31b5-4f33-82f4-5241470cbbbe/0/233AF26D7DAE6C359EB03AD5C6FB4B4E05DDF23D.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/233AF26D7DAE6C359EB03AD5C6FB4B4E05DDF23D.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c55eac97-31b5-4f33-82f4-5241470cbbbe/0/233AF26D7DAE6C359EB03AD5C6FB4B4E05DDF23D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 22:6c:15:2c:64:99:21:80:c3:d1:fa:bc:6b:65:ad:74:21:8f: c3:86:69:b8:37:9b:4c:6d:f7:f0:51:82:1a:1c:18:4c:f6:d9: 85:1b:4b:b8:c9:55:cb:d5:a1:bd:74:c9:4f:05:aa:19:c7:e4: e1:d2:4e:7b:83:53:7d:77:41:37:90:92:91:d4:53:f3:50:72: 66:1c:d6:aa:ca:eb:dd:c6:13:45:40:6a:b2:7e:b9:74:73:d7: 8d:93:5b:73:2e:b0:b5:4a:3b:56:f2:a2:ee:f7:06:4e:da:56: c5:27:db:05:dc:9a:b4:38:50:74:e6:ea:62:cd:3f:14:e5:a4: b0:98:38:77:c9:82:38:83:e3:cb:f8:a1:73:3b:b1:5c:18:56: ba:76:92:e2:14:27:12:67:c7:5f:c7:ab:bf:6a:54:2f:d5:2f: 0c:33:83:ea:4e:81:3d:e4:63:82:f3:cb:05:05:97:9f:36:89: 5a:7b:54:f4:07:63:09:20:39:fb:3e:a7:f0:2c:98:28:fd:25: 21:e1:95:80:0c:18:92:1b:15:ec:ba:ca:ec:60:e3:dd:d5:3b: cc:c2:66:4f:15:b8:ce:fc:7e:92:0b:ea:69:a2:d8:0c:79:05: 5c:e2:cf:d3:8a:82:40:14:73:e2:45:73:46:ce:6a:8c:81:be: eb:89:56:74 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUH5m5CQzxfwV4WRl0WCxe10udyu0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjMzQUYyNkQ3REFFNkMzNTlFQjAzQUQ1QzZGQjRCNEUw NURERjIzRDAeFw0yNjAxMjUxNzE2NTZaFw0yNjAxMjkwNDUxNTZaMDMxMTAvBgNV BAMTKDRBQTM4MDk0OUQxRUU3RTMxRDBCNTU0OTY1ODgzRUJBMjY2MjZBNDUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCWa80mRAKTvyu/8mBPn1beu4xJ hizYUVY7UEplogt2iieDBNa7Z1/xWHZw+Ddx8OYTGG2hcPkiqUA0UEm+e2k+NOGy 9yl+Gpa8YqeLK9BlDAZfjoV4jrppckSBBlX0lgL3LGNwhECm3bWV1shNkWqnqklv S0INwpNvbS92DgQEXslPYIX5K8gFbeT++q7dM1zuYxtZdlh/q5AdLmOSFu/G41t1 rgRc81Q98SzJJXGlX5nZ85z7DtRNAL1mA/F6IHFMyF9QZjR5zNoDd+b/+2oVsN9n s8YykvC2AqCW1S2c1zqjSVe3WLC0HsuuE4MqoD3pOyFREr+eKWqF/cl2Pb5RAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUSqOAlJ0e5+MdC1VJZYg+uiZiakUwHwYDVR0j BBgwFoAUIzrybX2ubDWesDrVxvtLTgXd8j0wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j NTVlYWM5Ny0zMWI1LTRmMzMtODJmNC01MjQxNDcwY2JiYmUvMC8yMzNBRjI2RDdE QUU2QzM1OUVCMDNBRDVDNkZCNEI0RTA1RERGMjNELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMjMzQUYyNkQ3REFFNkMzNTlFQjAzQUQ1QzZGQjRCNEUwNURE RjIzRC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYzU1ZWFjOTctMzFiNS00ZjMzLTgy ZjQtNTI0MTQ3MGNiYmJlLzAvMjMzQUYyNkQ3REFFNkMzNTlFQjAzQUQ1QzZGQjRC NEUwNURERjIzRC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACJsFSxkmSGAw9H6vGtlrXQhj8OGabg3m0xt 9/BRghocGEz22YUbS7jJVcvVob10yU8FqhnH5OHSTnuDU313QTeQkpHUU/NQcmYc 1qrK693GE0VAarJ+uXRz142TW3MusLVKO1byou73Bk7aVsUn2wXcmrQ4UHTm6mLN PxTlpLCYOHfJgjiD48v4oXM7sVwYVrp2kuIUJxJnx1/Hq79qVC/VLwwzg+pOgT3k Y4LzywUFl582iVp7VPQHYwkgOfs+p/AsmCj9JSHhlYAMGJIbFey6yuxg493VO8zC Zk8VuM78fpIL6mmi2Ax5BVziz9OKgkAUc+JFc0bOaoyBvuuJVnQ= -----END CERTIFICATE-----Generated at Sun Jan 25 22:00:40 2026 by rpki-client