This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/c85cbd95-574f-405b-8bde-0ddb9c9bddba/0/0A1DFCB4A43861E4A71BCD645792005485BFADFD.mft File: 0A1DFCB4A43861E4A71BCD645792005485BFADFD.mft (raw, json) Hash identifier: ZibRi3sWJ2W4/YK8kFbP65OlLqsfsneo1PZ40vgL+0k= Subject key identifier: 18:C6:B4:F0:46:A1:1A:75:41:9A:94:30:AC:F7:32:36:84:1F:EE:BC Authority key identifier: 0A:1D:FC:B4:A4:38:61:E4:A7:1B:CD:64:57:92:00:54:85:BF:AD:FD Certificate issuer: /CN=0A1DFCB4A43861E4A71BCD645792005485BFADFD Certificate serial: 7B074FD5F8A54607CD5CF57D643323AC05015523 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0A1DFCB4A43861E4A71BCD645792005485BFADFD.cer Subject info access: rsync://repo-rpki.idnic.net/repo/c85cbd95-574f-405b-8bde-0ddb9c9bddba/0/0A1DFCB4A43861E4A71BCD645792005485BFADFD.mft Manifest number: 0205 Signing time: Sun 25 Jan 2026 09:41:34 +0000 Manifest this update: Sun 25 Jan 2026 09:36:34 +0000 Manifest next update: Wed 28 Jan 2026 21:00:34 +0000 Files and hashes: 1: 3130332e3134372e3134342e302f32332d3234203d3e203137373639.roa (hash: 3VGbyCH6ddrGoq0lsoWNFafYhbKrpzTV4l4RHWPBamI=) 2: 0A1DFCB4A43861E4A71BCD645792005485BFADFD.crl (hash: Lfg7r2i3n3v59/kifwFuS8cw//3Yb2cJF+GW2GWnmjQ=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/c85cbd95-574f-405b-8bde-0ddb9c9bddba/0/0A1DFCB4A43861E4A71BCD645792005485BFADFD.crl rsync://repo-rpki.idnic.net/repo/c85cbd95-574f-405b-8bde-0ddb9c9bddba/0/0A1DFCB4A43861E4A71BCD645792005485BFADFD.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0A1DFCB4A43861E4A71BCD645792005485BFADFD.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 28 Jan 2026 14:00:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7b:07:4f:d5:f8:a5:46:07:cd:5c:f5:7d:64:33:23:ac:05:01:55:23 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0A1DFCB4A43861E4A71BCD645792005485BFADFD Validity Not Before: Jan 25 09:36:34 2026 GMT Not After : Jan 28 21:00:34 2026 GMT Subject: CN=18C6B4F046A11A75419A9430ACF73236841FEEBC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:ba:f5:42:a8:ec:8a:cf:ef:a7:c7:d4:e9:f3: 23:13:fe:69:fd:22:07:4c:e1:96:65:26:f4:86:51: 2a:03:24:11:1c:d1:8b:1d:1e:08:12:66:f8:1e:0e: b8:bb:a5:75:66:30:c0:30:3f:a4:65:77:f8:21:f2: bb:52:47:10:1c:a7:f7:5b:99:23:7e:97:8e:62:10: a5:ee:f7:98:a0:9d:89:09:84:66:b3:16:8a:38:77: 82:91:94:9a:91:ab:cb:ab:d6:59:34:bf:2e:79:ef: f5:c3:80:7b:5c:c4:35:ea:c7:ce:7f:79:ff:56:50: e0:53:1e:89:dd:d8:a9:92:a3:f7:4d:76:a2:bb:78: 48:fa:2f:aa:7a:37:e3:35:e5:71:58:9a:5a:e0:e9: 9f:48:bd:13:d4:60:9e:d2:83:b7:f0:08:c6:6d:02: e7:b1:75:01:9d:d8:e8:89:5e:39:dd:93:24:8b:52: c2:66:0e:09:84:5e:0d:5c:e1:41:38:f2:84:ce:73: af:a0:a2:a2:62:d9:0b:ac:c3:91:42:33:7f:aa:c6: 2e:38:bd:97:e3:a7:e6:22:ea:6e:d5:3c:2a:cc:b6: 8e:b3:0f:cb:19:b9:5f:ab:41:74:07:4c:8e:72:2f: ff:be:26:9e:c3:9a:c7:cf:58:fb:22:98:7e:72:1e: a8:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 18:C6:B4:F0:46:A1:1A:75:41:9A:94:30:AC:F7:32:36:84:1F:EE:BC X509v3 Authority Key Identifier: keyid:0A:1D:FC:B4:A4:38:61:E4:A7:1B:CD:64:57:92:00:54:85:BF:AD:FD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/c85cbd95-574f-405b-8bde-0ddb9c9bddba/0/0A1DFCB4A43861E4A71BCD645792005485BFADFD.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0A1DFCB4A43861E4A71BCD645792005485BFADFD.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c85cbd95-574f-405b-8bde-0ddb9c9bddba/0/0A1DFCB4A43861E4A71BCD645792005485BFADFD.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 16:80:58:a0:c5:a3:e4:00:63:d4:fd:c1:1f:15:17:6c:dd:a5: 60:9c:9d:af:76:e8:9d:37:bb:af:ab:eb:fc:21:6d:45:2e:40: 60:a0:f1:cc:b4:a6:c3:be:2d:89:eb:c0:37:68:d3:8e:18:c3: 9a:21:57:c6:e7:5b:48:e3:16:e3:10:23:dd:4c:50:9d:c5:26: 15:c2:05:e6:7a:8d:1d:00:40:6c:44:b2:17:5a:d5:c9:30:33: 7c:31:ee:c5:72:98:19:f8:b1:50:d9:8d:f6:04:33:84:63:15: 5a:65:6a:e0:0b:95:5e:33:63:b3:21:5b:8c:f0:de:d4:3e:61: ff:8b:5d:64:56:fc:b4:dc:37:14:ed:91:a3:4e:97:9e:0e:1f: 72:22:87:10:21:46:41:40:77:ff:74:c5:f8:6f:d7:cb:41:08: 69:2f:d0:5e:12:4a:12:13:33:b2:1d:ab:2d:a3:60:2e:b1:d1: 44:ac:1c:8f:86:cd:ab:13:15:44:2f:4a:b3:e0:ea:47:5e:8e: 0a:34:88:79:b9:47:2c:20:03:6d:4a:9a:ee:68:b5:7c:7a:05: 3a:b7:80:ec:2a:1d:6d:13:b5:eb:a8:e8:13:da:02:7a:11:e4: ff:a3:1e:e1:c7:f7:6d:39:f9:4b:9c:aa:83:dd:c8:cb:8f:07: 1a:d3:de:e8 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUewdP1filRgfNXPV9ZDMjrAUBVSMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMEExREZDQjRBNDM4NjFFNEE3MUJDRDY0NTc5MjAwNTQ4 NUJGQURGRDAeFw0yNjAxMjUwOTM2MzRaFw0yNjAxMjgyMTAwMzRaMDMxMTAvBgNV BAMTKDE4QzZCNEYwNDZBMTFBNzU0MTlBOTQzMEFDRjczMjM2ODQxRkVFQkMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDfuvVCqOyKz++nx9Tp8yMT/mn9 IgdM4ZZlJvSGUSoDJBEc0YsdHggSZvgeDri7pXVmMMAwP6Rld/gh8rtSRxAcp/db mSN+l45iEKXu95ignYkJhGazFoo4d4KRlJqRq8ur1lk0vy557/XDgHtcxDXqx85/ ef9WUOBTHond2KmSo/dNdqK7eEj6L6p6N+M15XFYmlrg6Z9IvRPUYJ7Sg7fwCMZt AuexdQGd2OiJXjndkySLUsJmDgmEXg1c4UE48oTOc6+goqJi2Qusw5FCM3+qxi44 vZfjp+Yi6m7VPCrMto6zD8sZuV+rQXQHTI5yL/++Jp7DmsfPWPsimH5yHqixAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUGMa08EahGnVBmpQwrPcyNoQf7rwwHwYDVR0j BBgwFoAUCh38tKQ4YeSnG81kV5IAVIW/rf0wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j ODVjYmQ5NS01NzRmLTQwNWItOGJkZS0wZGRiOWM5YmRkYmEvMC8wQTFERkNCNEE0 Mzg2MUU0QTcxQkNENjQ1NzkyMDA1NDg1QkZBREZELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMEExREZDQjRBNDM4NjFFNEE3MUJDRDY0NTc5MjAwNTQ4NUJG QURGRC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYzg1Y2JkOTUtNTc0Zi00MDViLThi ZGUtMGRkYjljOWJkZGJhLzAvMEExREZDQjRBNDM4NjFFNEE3MUJDRDY0NTc5MjAw NTQ4NUJGQURGRC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABaAWKDFo+QAY9T9wR8VF2zdpWCcna926J03 u6+r6/whbUUuQGCg8cy0psO+LYnrwDdo044Yw5ohV8bnW0jjFuMQI91MUJ3FJhXC BeZ6jR0AQGxEshda1ckwM3wx7sVymBn4sVDZjfYEM4RjFVplauALlV4zY7MhW4zw 3tQ+Yf+LXWRW/LTcNxTtkaNOl54OH3IihxAhRkFAd/90xfhv18tBCGkv0F4SShIT M7Idqy2jYC6x0USsHI+GzasTFUQvSrPg6kdejgo0iHm5RywgA21Kmu5otXx6BTq3 gOwqHW0Tteuo6BPaAnoR5P+jHuHH9205+UucqoPdyMuPBxrT3ug= -----END CERTIFICATE-----Generated at Sun Jan 25 20:33:01 2026 by rpki-client