This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/ca124e6a-f51b-46d0-8ea3-76b2744558a6/0/B178402BEDE3EC5A5EE2E0E71F736A1360C06AF6.mft File: B178402BEDE3EC5A5EE2E0E71F736A1360C06AF6.mft (raw, json) Hash identifier: XQy/hYfP56p7SaoK2mgDNIiRk1Yb1UrVO4+xj3jq20E= Subject key identifier: 89:13:1C:D0:65:FB:B6:61:94:7A:BC:4B:95:A9:C5:C7:B3:3A:DE:4E Authority key identifier: B1:78:40:2B:ED:E3:EC:5A:5E:E2:E0:E7:1F:73:6A:13:60:C0:6A:F6 Certificate issuer: /CN=B178402BEDE3EC5A5EE2E0E71F736A1360C06AF6 Certificate serial: 4011EB7560AAEDACBE07800FF213E5FC79B1CD31 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B178402BEDE3EC5A5EE2E0E71F736A1360C06AF6.cer Subject info access: rsync://repo-rpki.idnic.net/repo/ca124e6a-f51b-46d0-8ea3-76b2744558a6/0/B178402BEDE3EC5A5EE2E0E71F736A1360C06AF6.mft Manifest number: 0118 Signing time: Sun 25 Jan 2026 03:02:03 +0000 Manifest this update: Sun 25 Jan 2026 02:57:03 +0000 Manifest next update: Wed 28 Jan 2026 04:15:03 +0000 Files and hashes: 1: 3130332e372e3130362e302f32332d3233203d3e20313531353939.roa (hash: gKuzS0cjEmgd3PQlr3qETih9wH6v1uECgkfmF5qpn9s=) 2: 3130332e372e3130362e302f32342d3234203d3e20313531353939.roa (hash: DxiuVfLvcjyo+Mn8zZEZyq9g9x9MYwq6EjUmb+7l6rM=) 3: B178402BEDE3EC5A5EE2E0E71F736A1360C06AF6.crl (hash: WS3X6TiUVJOVpiZOXbTfa6UVLRkBVFelqzT3woCRg+4=) 4: 3130332e372e3130372e302f32342d3234203d3e20313531353939.roa (hash: tHzJEc4tVJbK/5ReWDfkb8wKbAgEEvzCH+vbGF7LXac=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/ca124e6a-f51b-46d0-8ea3-76b2744558a6/0/B178402BEDE3EC5A5EE2E0E71F736A1360C06AF6.crl rsync://repo-rpki.idnic.net/repo/ca124e6a-f51b-46d0-8ea3-76b2744558a6/0/B178402BEDE3EC5A5EE2E0E71F736A1360C06AF6.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B178402BEDE3EC5A5EE2E0E71F736A1360C06AF6.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 28 Jan 2026 04:15:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 40:11:eb:75:60:aa:ed:ac:be:07:80:0f:f2:13:e5:fc:79:b1:cd:31 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B178402BEDE3EC5A5EE2E0E71F736A1360C06AF6 Validity Not Before: Jan 25 02:57:03 2026 GMT Not After : Jan 28 04:15:03 2026 GMT Subject: CN=89131CD065FBB661947ABC4B95A9C5C7B33ADE4E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:5e:1c:58:54:33:6e:21:87:2f:45:0e:27:a9: 7c:56:85:ab:88:85:18:c0:d0:00:e5:2c:4b:31:f5: ed:d9:72:dd:3b:dd:ec:64:da:7c:47:19:f7:30:ca: 3b:fc:91:b3:03:2c:36:29:d6:3e:13:0e:3e:71:45: be:bb:10:7a:ce:b6:d4:27:46:5c:d4:c0:3a:99:52: b4:cf:e8:e7:b3:b2:48:29:33:eb:0f:95:24:86:6a: b7:fd:b0:af:40:b1:1e:8e:65:e0:1c:68:01:14:c0: 08:7b:d0:ae:23:aa:27:ea:f5:08:f1:bb:d9:08:d2: 4c:b3:02:3a:fc:c0:32:96:b0:9f:f4:1a:f3:e7:1f: 89:6d:d1:ca:5a:66:b9:7c:22:e7:f8:e6:5a:c6:f8: 61:fc:39:8c:08:9a:2c:53:b4:46:f7:df:e3:bf:44: 2a:f3:6b:25:1d:f0:92:99:a0:a2:b8:ca:88:71:e6: 45:78:8e:fd:5c:d5:76:4f:a0:51:7c:40:9d:63:61: ff:98:cd:5d:31:92:0e:f2:67:d3:81:e8:10:e8:4b: b8:c4:52:38:ab:d1:7b:97:af:a5:ac:f6:b8:ba:66: 77:79:f0:14:39:c6:4c:dc:62:5e:92:1d:b2:5c:60: 8f:ed:82:e9:31:9c:07:fc:37:c2:c1:1a:ed:b0:7c: 09:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:13:1C:D0:65:FB:B6:61:94:7A:BC:4B:95:A9:C5:C7:B3:3A:DE:4E X509v3 Authority Key Identifier: keyid:B1:78:40:2B:ED:E3:EC:5A:5E:E2:E0:E7:1F:73:6A:13:60:C0:6A:F6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/ca124e6a-f51b-46d0-8ea3-76b2744558a6/0/B178402BEDE3EC5A5EE2E0E71F736A1360C06AF6.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B178402BEDE3EC5A5EE2E0E71F736A1360C06AF6.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ca124e6a-f51b-46d0-8ea3-76b2744558a6/0/B178402BEDE3EC5A5EE2E0E71F736A1360C06AF6.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 17:3b:17:7e:2b:aa:34:fb:7a:1c:4f:21:4d:ff:d5:9e:0a:4b: b9:ca:18:e0:bc:0d:0b:e9:9e:91:86:57:9c:c2:c1:eb:14:fa: 67:0a:c5:de:4d:4c:72:5c:0b:11:96:95:7a:da:d6:51:d1:26: 50:da:69:16:ec:35:b4:23:35:c8:85:16:a7:a9:ab:9a:13:ba: 16:37:94:36:66:a9:52:7d:a5:0b:d4:5b:ec:86:b8:da:dd:2a: ce:ea:3d:6a:e2:38:f8:d0:f5:bb:cc:2a:29:82:02:41:b1:6c: 12:c4:86:48:34:a2:35:0f:74:f3:1b:09:fb:93:f1:d7:a8:4a: f2:5c:98:e6:bd:76:8b:94:b4:5e:6d:7d:59:1f:37:00:1e:3a: 0d:f1:a8:2e:c4:33:8f:40:c2:7b:3d:f4:b5:1e:b2:06:a6:5f: 2f:1a:b1:bc:b0:30:72:c0:e6:6f:c2:25:79:33:ec:f3:b0:92: 69:57:81:50:55:47:16:34:8c:bc:fa:c1:1d:c5:1f:63:51:1b: 68:9e:3f:20:c0:9f:a4:3d:9b:67:38:33:a8:c0:05:d8:9f:43: 9f:5b:e6:19:e0:77:a4:dc:29:2a:39:3c:6a:c5:92:e3:77:50: 2f:bb:6f:2d:b6:4a:a8:01:46:d2:af:0c:ca:99:1f:6d:fe:0a: 10:32:91:86 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUQBHrdWCq7ay+B4AP8hPl/HmxzTEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjE3ODQwMkJFREUzRUM1QTVFRTJFMEU3MUY3MzZBMTM2 MEMwNkFGNjAeFw0yNjAxMjUwMjU3MDNaFw0yNjAxMjgwNDE1MDNaMDMxMTAvBgNV BAMTKDg5MTMxQ0QwNjVGQkI2NjE5NDdBQkM0Qjk1QTlDNUM3QjMzQURFNEUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+XhxYVDNuIYcvRQ4nqXxWhauI hRjA0ADlLEsx9e3Zct073exk2nxHGfcwyjv8kbMDLDYp1j4TDj5xRb67EHrOttQn RlzUwDqZUrTP6OezskgpM+sPlSSGarf9sK9AsR6OZeAcaAEUwAh70K4jqifq9Qjx u9kI0kyzAjr8wDKWsJ/0GvPnH4lt0cpaZrl8Iuf45lrG+GH8OYwImixTtEb33+O/ RCrzayUd8JKZoKK4yohx5kV4jv1c1XZPoFF8QJ1jYf+YzV0xkg7yZ9OB6BDoS7jE Ujir0XuXr6Ws9ri6Znd58BQ5xkzcYl6SHbJcYI/tgukxnAf8N8LBGu2wfAk1AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUiRMc0GX7tmGUerxLlanFx7M63k4wHwYDVR0j BBgwFoAUsXhAK+3j7Fpe4uDnH3NqE2DAavYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j YTEyNGU2YS1mNTFiLTQ2ZDAtOGVhMy03NmIyNzQ0NTU4YTYvMC9CMTc4NDAyQkVE RTNFQzVBNUVFMkUwRTcxRjczNkExMzYwQzA2QUY2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQjE3ODQwMkJFREUzRUM1QTVFRTJFMEU3MUY3MzZBMTM2MEMw NkFGNi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vY2ExMjRlNmEtZjUxYi00NmQwLThl YTMtNzZiMjc0NDU1OGE2LzAvQjE3ODQwMkJFREUzRUM1QTVFRTJFMEU3MUY3MzZB MTM2MEMwNkFGNi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABc7F34rqjT7ehxPIU3/1Z4KS7nKGOC8DQvp npGGV5zCwesU+mcKxd5NTHJcCxGWlXra1lHRJlDaaRbsNbQjNciFFqepq5oTuhY3 lDZmqVJ9pQvUW+yGuNrdKs7qPWriOPjQ9bvMKimCAkGxbBLEhkg0ojUPdPMbCfuT 8deoSvJcmOa9douUtF5tfVkfNwAeOg3xqC7EM49Awns99LUesgamXy8asbywMHLA 5m/CJXkz7POwkmlXgVBVRxY0jLz6wR3FH2NRG2iePyDAn6Q9m2c4M6jABdifQ59b 5hngd6TcKSo5PGrFkuN3UC+7by22SqgBRtKvDMqZH23+ChAykYY= -----END CERTIFICATE-----Generated at Mon Jan 26 02:30:52 2026 by rpki-client