This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/c81af021-1c01-4a2e-b5d3-c1bbb1650c43/0/0FBAD92F48DF15477E4DD93CDC7A5277FE93A8EB.mft File: 0FBAD92F48DF15477E4DD93CDC7A5277FE93A8EB.mft (raw, json) Hash identifier: J5UzdVsW5hesbsKUEqsSaJGb+7c7FLPLgb0t4lqJcXo= Subject key identifier: 24:FA:23:9E:08:1D:52:A7:80:EC:25:78:54:89:1D:27:85:B7:AA:14 Authority key identifier: 0F:BA:D9:2F:48:DF:15:47:7E:4D:D9:3C:DC:7A:52:77:FE:93:A8:EB Certificate issuer: /CN=0FBAD92F48DF15477E4DD93CDC7A5277FE93A8EB Certificate serial: 22B2E8A0442CD7A7382FCEC63948E86106A3B9DD Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0FBAD92F48DF15477E4DD93CDC7A5277FE93A8EB.cer Subject info access: rsync://repo-rpki.idnic.net/repo/c81af021-1c01-4a2e-b5d3-c1bbb1650c43/0/0FBAD92F48DF15477E4DD93CDC7A5277FE93A8EB.mft Manifest number: D2 Signing time: Sun 25 Jan 2026 18:11:07 +0000 Manifest this update: Sun 25 Jan 2026 18:06:07 +0000 Manifest next update: Thu 29 Jan 2026 00:52:07 +0000 Files and hashes: 1: 0FBAD92F48DF15477E4DD93CDC7A5277FE93A8EB.crl (hash: NGUvtvlEubkArKpUv4ovNtbHXTPIALjGE1+bjA7y5zQ=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/c81af021-1c01-4a2e-b5d3-c1bbb1650c43/0/0FBAD92F48DF15477E4DD93CDC7A5277FE93A8EB.crl rsync://repo-rpki.idnic.net/repo/c81af021-1c01-4a2e-b5d3-c1bbb1650c43/0/0FBAD92F48DF15477E4DD93CDC7A5277FE93A8EB.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0FBAD92F48DF15477E4DD93CDC7A5277FE93A8EB.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 28 Jan 2026 14:00:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 22:b2:e8:a0:44:2c:d7:a7:38:2f:ce:c6:39:48:e8:61:06:a3:b9:dd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0FBAD92F48DF15477E4DD93CDC7A5277FE93A8EB Validity Not Before: Jan 25 18:06:07 2026 GMT Not After : Jan 29 00:52:07 2026 GMT Subject: CN=24FA239E081D52A780EC257854891D2785B7AA14 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:26:31:38:ab:94:47:92:1b:cf:ff:2a:0a:e0: 16:58:d6:1d:b3:6c:57:74:5d:0f:71:dc:32:68:2d: 32:64:da:c9:51:a5:8a:dc:9b:82:52:ac:4d:4e:31: ef:ff:8d:55:34:a5:e4:93:23:42:69:60:01:23:95: 86:4b:e1:90:00:dc:8e:e6:4c:89:1d:ba:f0:88:41: ff:5a:f4:a5:7f:3e:2a:56:1b:6d:aa:ee:95:e5:fb: e9:5a:8d:9c:94:5d:c9:6a:3a:fd:ed:38:ff:25:8c: a5:e3:09:53:f9:b4:16:85:e9:15:5a:85:48:74:a8: a5:81:24:5a:6d:a4:a7:9d:80:d0:e7:ca:55:e1:b2: ac:7e:56:eb:39:95:db:ea:6a:73:d8:37:ca:15:a7: 40:83:eb:3c:46:5d:23:99:ff:87:c1:37:a5:62:6f: c4:e3:7b:35:df:e5:5e:9d:59:a0:95:a8:47:09:4b: bd:2d:ce:4a:14:88:f3:9c:89:c6:6d:4a:e2:72:42: ae:23:7b:60:73:be:b6:02:e5:6d:c2:fd:a6:e9:3e: 7d:47:8f:b0:ed:03:09:9f:da:88:25:37:69:a8:a8: 18:23:ec:3f:05:90:44:3d:21:c5:27:a4:91:8b:54: f3:b9:a9:56:e4:c2:92:c9:aa:e1:05:b8:b2:05:c4: 2f:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:FA:23:9E:08:1D:52:A7:80:EC:25:78:54:89:1D:27:85:B7:AA:14 X509v3 Authority Key Identifier: keyid:0F:BA:D9:2F:48:DF:15:47:7E:4D:D9:3C:DC:7A:52:77:FE:93:A8:EB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/c81af021-1c01-4a2e-b5d3-c1bbb1650c43/0/0FBAD92F48DF15477E4DD93CDC7A5277FE93A8EB.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0FBAD92F48DF15477E4DD93CDC7A5277FE93A8EB.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c81af021-1c01-4a2e-b5d3-c1bbb1650c43/0/0FBAD92F48DF15477E4DD93CDC7A5277FE93A8EB.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 99:98:24:dd:46:02:0f:81:c1:21:1c:16:31:db:35:40:f9:0a: 29:df:34:6e:92:ed:dd:75:2d:22:fd:b7:0d:b8:9d:61:6f:05: c0:d1:1f:a0:70:14:3b:b5:08:c8:10:b1:93:06:fe:1a:02:dc: 1b:57:10:b5:13:35:6b:bb:ae:bf:a1:29:86:5b:ea:2a:ce:20: b8:a0:60:48:b1:43:a3:00:22:10:d1:c7:c2:d0:00:4c:8c:b7: 39:6d:6b:07:65:84:45:b0:75:7c:f3:9e:1f:19:bf:02:3c:72: 27:8b:b2:d0:45:f7:a5:4b:e6:e6:66:7e:ab:d8:c7:b0:48:5b: e1:84:3c:a4:8c:eb:71:72:79:7e:19:e6:f3:ef:f0:e4:f2:4c: c7:dc:67:fb:74:4b:d0:c6:ce:64:65:7b:3d:c4:2c:1b:db:bf: 1d:83:3a:16:0b:b3:1a:69:79:1f:49:c1:d9:1a:84:e7:51:00: 84:29:c8:86:8c:92:42:99:56:5b:76:ba:42:0e:ba:8b:9a:ca: 87:c0:72:55:27:bd:56:06:ab:ff:d5:91:9c:0d:4a:90:b7:ea: ec:f0:8b:52:9e:42:c1:c1:7f:9f:3a:66:48:7b:b9:74:cf:2c: 21:92:26:75:f5:63:97:b9:10:e9:bb:bc:b3:68:9b:2e:ef:d1: 95:1c:99:70 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUIrLooEQs16c4L87GOUjoYQajud0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMEZCQUQ5MkY0OERGMTU0NzdFNEREOTNDREM3QTUyNzdG RTkzQThFQjAeFw0yNjAxMjUxODA2MDdaFw0yNjAxMjkwMDUyMDdaMDMxMTAvBgNV BAMTKDI0RkEyMzlFMDgxRDUyQTc4MEVDMjU3ODU0ODkxRDI3ODVCN0FBMTQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDCJjE4q5RHkhvP/yoK4BZY1h2z bFd0XQ9x3DJoLTJk2slRpYrcm4JSrE1OMe//jVU0peSTI0JpYAEjlYZL4ZAA3I7m TIkduvCIQf9a9KV/PipWG22q7pXl++lajZyUXclqOv3tOP8ljKXjCVP5tBaF6RVa hUh0qKWBJFptpKedgNDnylXhsqx+Vus5ldvqanPYN8oVp0CD6zxGXSOZ/4fBN6Vi b8TjezXf5V6dWaCVqEcJS70tzkoUiPOcicZtSuJyQq4je2BzvrYC5W3C/abpPn1H j7DtAwmf2oglN2moqBgj7D8FkEQ9IcUnpJGLVPO5qVbkwpLJquEFuLIFxC+LAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUJPojnggdUqeA7CV4VIkdJ4W3qhQwHwYDVR0j BBgwFoAUD7rZL0jfFUd+Tdk83HpSd/6TqOswDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j ODFhZjAyMS0xYzAxLTRhMmUtYjVkMy1jMWJiYjE2NTBjNDMvMC8wRkJBRDkyRjQ4 REYxNTQ3N0U0REQ5M0NEQzdBNTI3N0ZFOTNBOEVCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMEZCQUQ5MkY0OERGMTU0NzdFNEREOTNDREM3QTUyNzdGRTkz QThFQi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYzgxYWYwMjEtMWMwMS00YTJlLWI1 ZDMtYzFiYmIxNjUwYzQzLzAvMEZCQUQ5MkY0OERGMTU0NzdFNEREOTNDREM3QTUy NzdGRTkzQThFQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJmYJN1GAg+BwSEcFjHbNUD5CinfNG6S7d11 LSL9tw24nWFvBcDRH6BwFDu1CMgQsZMG/hoC3BtXELUTNWu7rr+hKYZb6irOILig YEixQ6MAIhDRx8LQAEyMtzltawdlhEWwdXzznh8ZvwI8cieLstBF96VL5uZmfqvY x7BIW+GEPKSM63FyeX4Z5vPv8OTyTMfcZ/t0S9DGzmRlez3ELBvbvx2DOhYLsxpp eR9JwdkahOdRAIQpyIaMkkKZVlt2ukIOuouayofAclUnvVYGq//VkZwNSpC36uzw i1KeQsHBf586Zkh7uXTPLCGSJnX1Y5e5EOm7vLNomy7v0ZUcmXA= -----END CERTIFICATE-----Generated at Mon Jan 26 02:30:52 2026 by rpki-client