This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/c79659a9-5505-494b-a03c-6ebacfadf931/0/D5677EFA13708711CDAFB67D9C4C8F5FFFA9A271.mft File: D5677EFA13708711CDAFB67D9C4C8F5FFFA9A271.mft (raw, json) Hash identifier: FbwhWeMt9brp8Ha9K2WcKxs21QhgDrBd6cCDWiwhh44= Subject key identifier: D7:9B:DB:CE:55:89:AC:03:2D:06:0B:A6:49:A5:64:C5:68:05:76:AC Authority key identifier: D5:67:7E:FA:13:70:87:11:CD:AF:B6:7D:9C:4C:8F:5F:FF:A9:A2:71 Certificate issuer: /CN=D5677EFA13708711CDAFB67D9C4C8F5FFFA9A271 Certificate serial: 1F66B34FBBD3F7DE43F921B71958DAA885669C1B Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D5677EFA13708711CDAFB67D9C4C8F5FFFA9A271.cer Subject info access: rsync://repo-rpki.idnic.net/repo/c79659a9-5505-494b-a03c-6ebacfadf931/0/D5677EFA13708711CDAFB67D9C4C8F5FFFA9A271.mft Manifest number: 0356 Signing time: Fri 23 Jan 2026 18:40:38 +0000 Manifest this update: Fri 23 Jan 2026 18:35:38 +0000 Manifest next update: Tue 27 Jan 2026 06:01:38 +0000 Files and hashes: 1: D5677EFA13708711CDAFB67D9C4C8F5FFFA9A271.crl (hash: 09FqNf8dr1J777g4usmmKTkrZsRK+6HPUZEquYqPHmc=) 2: 3130332e3134372e38342e302f32332d3234203d3e20313339393535.roa (hash: ZHafjJKgXW9RsmPF8VNVEw6T28/f2O0/FZCCLymCOMc=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/c79659a9-5505-494b-a03c-6ebacfadf931/0/D5677EFA13708711CDAFB67D9C4C8F5FFFA9A271.crl rsync://repo-rpki.idnic.net/repo/c79659a9-5505-494b-a03c-6ebacfadf931/0/D5677EFA13708711CDAFB67D9C4C8F5FFFA9A271.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D5677EFA13708711CDAFB67D9C4C8F5FFFA9A271.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 27 Jan 2026 06:01:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1f:66:b3:4f:bb:d3:f7:de:43:f9:21:b7:19:58:da:a8:85:66:9c:1b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D5677EFA13708711CDAFB67D9C4C8F5FFFA9A271 Validity Not Before: Jan 23 18:35:38 2026 GMT Not After : Jan 27 06:01:38 2026 GMT Subject: CN=D79BDBCE5589AC032D060BA649A564C5680576AC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:c4:b4:43:0b:2f:a3:42:5d:c2:72:00:77:66: 33:8a:73:3d:7b:55:17:f5:f1:f7:d4:96:ee:24:93: aa:25:b6:e3:c1:0f:43:85:52:2f:ac:79:8f:07:e5: e9:e3:3b:2c:1d:85:73:0b:38:51:ca:98:aa:2b:da: fa:b0:bc:63:ec:7d:b8:f5:90:fd:9b:9f:77:f6:10: 6e:e4:ca:0b:fc:e0:db:ef:03:41:dc:5a:f7:42:47: 98:75:e6:ce:87:82:dc:d7:7c:10:f5:e4:00:b7:ea: 58:08:9d:2d:c7:65:08:c1:db:f3:39:89:9f:e0:2d: 91:4d:70:ff:8d:b5:c9:eb:7e:cd:a7:ba:00:31:80: ce:7c:83:15:e1:7b:b3:75:ee:03:ba:cd:f2:c8:7d: 73:a9:13:cc:c1:4d:1f:0b:0c:04:37:c5:a3:90:59: f4:1a:e5:7d:b2:59:f6:cc:27:54:47:b4:7a:83:d9: 27:26:eb:64:7e:3d:48:e2:9f:31:30:bf:fa:65:0f: ee:9a:ac:70:a3:58:3b:c5:2b:d5:96:1a:4b:42:30: 72:df:22:ba:96:b3:80:c9:4f:d6:33:37:b8:8f:b7: 9d:c7:ef:77:b6:f9:fb:3f:2b:ac:58:6a:a4:5b:7a: 06:c5:83:40:f7:fd:38:15:74:f4:8d:74:a2:c0:97: b2:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:9B:DB:CE:55:89:AC:03:2D:06:0B:A6:49:A5:64:C5:68:05:76:AC X509v3 Authority Key Identifier: keyid:D5:67:7E:FA:13:70:87:11:CD:AF:B6:7D:9C:4C:8F:5F:FF:A9:A2:71 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/c79659a9-5505-494b-a03c-6ebacfadf931/0/D5677EFA13708711CDAFB67D9C4C8F5FFFA9A271.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D5677EFA13708711CDAFB67D9C4C8F5FFFA9A271.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c79659a9-5505-494b-a03c-6ebacfadf931/0/D5677EFA13708711CDAFB67D9C4C8F5FFFA9A271.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 47:3b:e5:32:ac:a6:69:5c:06:45:81:c8:7d:75:c8:46:15:e5: a3:44:33:82:ea:f0:af:6e:81:82:62:16:06:d9:a5:57:f9:82: 1e:cc:55:1b:d2:d4:87:b3:e6:ec:4a:24:36:a5:28:56:66:50: 3e:3b:04:76:7c:27:2b:e3:d3:9b:37:0c:f6:57:f3:99:e4:27: c9:f1:90:da:6f:ba:eb:a7:6b:a6:b9:30:17:69:cb:34:b5:83: 32:2f:84:d7:78:9f:a1:31:9e:90:6b:ba:86:c3:44:97:4b:55: 1e:d9:fa:c3:36:1e:67:6a:bb:5c:09:d9:74:9c:df:ea:85:5e: d7:e7:02:b7:c5:1e:6f:45:86:17:8e:35:49:5c:87:b5:9c:2b: 5e:0c:e4:97:0c:29:87:49:f0:35:6d:eb:66:28:db:0c:a0:be: bd:d7:bf:d6:2c:f6:38:35:1f:0b:4e:47:c6:12:5f:4f:d8:83: 6d:7e:6d:56:b3:00:ab:a1:67:17:c2:f5:ce:f3:5a:78:29:87: e1:fb:b9:02:52:d0:91:4d:64:30:df:10:c4:82:84:41:90:6e: e8:d8:cf:f4:98:eb:9f:23:4a:87:17:a1:63:d8:e5:39:eb:09: 52:5c:4a:46:16:17:cd:99:95:5f:5e:40:b6:a8:9e:63:0c:3f: 22:c1:88:cd -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUH2azT7vT995D+SG3GVjaqIVmnBswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDU2NzdFRkExMzcwODcxMUNEQUZCNjdEOUM0QzhGNUZG RkE5QTI3MTAeFw0yNjAxMjMxODM1MzhaFw0yNjAxMjcwNjAxMzhaMDMxMTAvBgNV BAMTKEQ3OUJEQkNFNTU4OUFDMDMyRDA2MEJBNjQ5QTU2NEM1NjgwNTc2QUMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCaxLRDCy+jQl3CcgB3ZjOKcz17 VRf18ffUlu4kk6oltuPBD0OFUi+seY8H5enjOywdhXMLOFHKmKor2vqwvGPsfbj1 kP2bn3f2EG7kygv84NvvA0HcWvdCR5h15s6HgtzXfBD15AC36lgInS3HZQjB2/M5 iZ/gLZFNcP+Ntcnrfs2nugAxgM58gxXhe7N17gO6zfLIfXOpE8zBTR8LDAQ3xaOQ WfQa5X2yWfbMJ1RHtHqD2Scm62R+PUjinzEwv/plD+6arHCjWDvFK9WWGktCMHLf IrqWs4DJT9YzN7iPt53H73e2+fs/K6xYaqRbegbFg0D3/TgVdPSNdKLAl7KTAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU15vbzlWJrAMtBgumSaVkxWgFdqwwHwYDVR0j BBgwFoAU1Wd++hNwhxHNr7Z9nEyPX/+ponEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j Nzk2NTlhOS01NTA1LTQ5NGItYTAzYy02ZWJhY2ZhZGY5MzEvMC9ENTY3N0VGQTEz NzA4NzExQ0RBRkI2N0Q5QzRDOEY1RkZGQTlBMjcxLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRDU2NzdFRkExMzcwODcxMUNEQUZCNjdEOUM0QzhGNUZGRkE5 QTI3MS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYzc5NjU5YTktNTUwNS00OTRiLWEw M2MtNmViYWNmYWRmOTMxLzAvRDU2NzdFRkExMzcwODcxMUNEQUZCNjdEOUM0QzhG NUZGRkE5QTI3MS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEc75TKspmlcBkWByH11yEYV5aNEM4Lq8K9u gYJiFgbZpVf5gh7MVRvS1Iez5uxKJDalKFZmUD47BHZ8Jyvj05s3DPZX85nkJ8nx kNpvuuuna6a5MBdpyzS1gzIvhNd4n6ExnpBruobDRJdLVR7Z+sM2Hmdqu1wJ2XSc 3+qFXtfnArfFHm9FhheONUlch7WcK14M5JcMKYdJ8DVt62Yo2wygvr3Xv9Ys9jg1 HwtOR8YSX0/Yg21+bVazAKuhZxfC9c7zWngph+H7uQJS0JFNZDDfEMSChEGQbujY z/SY658jSocXoWPY5TnrCVJcSkYWF82ZlV9eQLaonmMMPyLBiM0= -----END CERTIFICATE-----Generated at Mon Jan 26 01:23:37 2026 by rpki-client