This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/cfabec71-7ecb-4dbd-a421-99b9cd20903a/0/194F6EF659F1115C068AB59065D57F150E23F5B6.mft File: 194F6EF659F1115C068AB59065D57F150E23F5B6.mft (raw, json) Hash identifier: TjYsVK+xhgXn3NfEWEovl2fiM0eercYRH/fijWeT9EU= Subject key identifier: CC:DA:0B:55:47:EE:8F:D9:00:7C:FB:94:EA:6F:3C:07:18:73:4B:A1 Authority key identifier: 19:4F:6E:F6:59:F1:11:5C:06:8A:B5:90:65:D5:7F:15:0E:23:F5:B6 Certificate issuer: /CN=194F6EF659F1115C068AB59065D57F150E23F5B6 Certificate serial: 7CFAC96023D108387157DB629648694E322C997A Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/194F6EF659F1115C068AB59065D57F150E23F5B6.cer Subject info access: rsync://repo-rpki.idnic.net/repo/cfabec71-7ecb-4dbd-a421-99b9cd20903a/0/194F6EF659F1115C068AB59065D57F150E23F5B6.mft Manifest number: 020D Signing time: Sat 24 Jan 2026 18:02:24 +0000 Manifest this update: Sat 24 Jan 2026 17:57:24 +0000 Manifest next update: Wed 28 Jan 2026 01:40:24 +0000 Files and hashes: 1: 34332e3234302e3232352e302f32342d3234203d3e203633343933.roa (hash: iiMdXC5IwE7CrNkyDM/L6svytNKfCeHud3DpbhTkmXw=) 2: 194F6EF659F1115C068AB59065D57F150E23F5B6.crl (hash: FRhneijst3C5bCCCo2KxghWVYIx6o/YdcJX41u6qxf4=) 3: 34332e3234302e3232362e302f32342d3234203d3e20313530323130.roa (hash: o8nDAJaAvWinmc3Z4YAlpvVlMtuLdAP8yAjpUiEUK14=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/cfabec71-7ecb-4dbd-a421-99b9cd20903a/0/194F6EF659F1115C068AB59065D57F150E23F5B6.crl rsync://repo-rpki.idnic.net/repo/cfabec71-7ecb-4dbd-a421-99b9cd20903a/0/194F6EF659F1115C068AB59065D57F150E23F5B6.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/194F6EF659F1115C068AB59065D57F150E23F5B6.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 28 Jan 2026 01:40:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7c:fa:c9:60:23:d1:08:38:71:57:db:62:96:48:69:4e:32:2c:99:7a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=194F6EF659F1115C068AB59065D57F150E23F5B6 Validity Not Before: Jan 24 17:57:24 2026 GMT Not After : Jan 28 01:40:24 2026 GMT Subject: CN=CCDA0B5547EE8FD9007CFB94EA6F3C0718734BA1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:be:d5:62:b1:0b:16:07:dc:22:87:6e:59:b3: 91:9f:73:2a:ad:ac:d2:c2:7d:80:24:e6:54:e8:2f: 95:69:58:92:a2:d0:23:57:f8:b4:7d:43:20:f0:75: dd:61:1e:1b:ed:f4:98:43:2d:38:44:1d:a1:0b:14: bc:c7:1f:a7:6d:94:27:e8:b3:e5:9c:ed:35:a4:14: ba:f8:3d:84:68:0c:90:d1:26:ed:07:5e:0c:6e:d5: 9a:c3:f3:3c:c2:a8:c2:a2:94:9b:a4:a3:08:b3:6e: 97:9c:61:7b:fc:9b:3b:e2:aa:98:a7:b7:51:35:4c: ed:77:4a:cf:30:70:08:73:25:55:22:37:86:06:01: aa:f0:a3:86:82:22:e9:43:fb:21:55:4f:de:db:e2: a5:51:91:ea:dc:b0:90:d5:4a:cd:8f:7b:36:51:20: 7b:81:a0:6d:e5:24:8f:18:07:30:81:50:a6:b7:30: 68:d8:d9:d2:d6:09:5b:ab:b7:30:12:08:76:4e:90: aa:1f:7d:eb:b7:4d:99:6a:e4:ff:f3:a3:6d:67:bb: a0:17:31:62:b6:4c:30:45:66:d5:dc:12:cc:08:9a: 1a:38:45:69:9f:87:05:7f:9b:b6:ae:e8:14:19:eb: 6e:e8:96:88:cc:b9:99:89:90:83:5c:46:8f:cf:1b: 74:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CC:DA:0B:55:47:EE:8F:D9:00:7C:FB:94:EA:6F:3C:07:18:73:4B:A1 X509v3 Authority Key Identifier: keyid:19:4F:6E:F6:59:F1:11:5C:06:8A:B5:90:65:D5:7F:15:0E:23:F5:B6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/cfabec71-7ecb-4dbd-a421-99b9cd20903a/0/194F6EF659F1115C068AB59065D57F150E23F5B6.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/194F6EF659F1115C068AB59065D57F150E23F5B6.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/cfabec71-7ecb-4dbd-a421-99b9cd20903a/0/194F6EF659F1115C068AB59065D57F150E23F5B6.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b2:55:25:ec:50:71:8e:8f:69:a9:6f:e9:75:b1:a9:65:21:ad: 38:0b:8d:90:47:89:5a:60:f9:50:b3:e9:80:99:52:15:e4:1c: d0:ec:53:2f:dd:04:6e:85:f6:58:1c:8a:c2:9b:da:53:93:28: 76:a4:03:72:01:b2:da:52:a2:f8:d3:0f:8d:5e:de:e9:67:71: 11:da:0d:2a:c2:e9:6c:b6:71:d3:59:37:64:77:c3:0a:82:72: 45:cf:5d:38:f5:19:08:40:39:55:99:57:d7:39:1b:1c:2a:f6: 00:13:09:33:60:23:31:cb:c7:31:a1:ff:e7:4c:33:33:e2:95: 88:69:06:1b:99:e2:b6:c3:3f:00:0f:21:7e:41:01:04:d2:a9: 57:d7:d2:b2:23:ab:a4:85:54:97:7c:67:78:ca:d5:0d:87:c9: b3:ba:e2:17:18:27:b3:05:d9:a7:51:e4:85:13:f1:7f:36:aa: 30:d3:52:fd:f5:b7:02:a5:6c:15:3c:31:16:68:a9:2e:9b:03: 9e:5e:65:26:eb:eb:50:b2:c6:79:61:44:2d:16:c1:ed:4e:2c: 2a:e2:5b:27:b8:1b:fe:20:c2:dc:e2:da:b6:bb:17:cb:4e:c9: c1:a1:81:6e:fc:df:18:61:25:1d:e0:6b:de:ec:eb:85:95:59: 5e:4b:ad:16 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUfPrJYCPRCDhxV9tilkhpTjIsmXowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTk0RjZFRjY1OUYxMTE1QzA2OEFCNTkwNjVENTdGMTUw RTIzRjVCNjAeFw0yNjAxMjQxNzU3MjRaFw0yNjAxMjgwMTQwMjRaMDMxMTAvBgNV BAMTKENDREEwQjU1NDdFRThGRDkwMDdDRkI5NEVBNkYzQzA3MTg3MzRCQTEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDPvtVisQsWB9wih25Zs5Gfcyqt rNLCfYAk5lToL5VpWJKi0CNX+LR9QyDwdd1hHhvt9JhDLThEHaELFLzHH6dtlCfo s+Wc7TWkFLr4PYRoDJDRJu0HXgxu1ZrD8zzCqMKilJukowizbpecYXv8mzviqpin t1E1TO13Ss8wcAhzJVUiN4YGAarwo4aCIulD+yFVT97b4qVRkercsJDVSs2PezZR IHuBoG3lJI8YBzCBUKa3MGjY2dLWCVurtzASCHZOkKoffeu3TZlq5P/zo21nu6AX MWK2TDBFZtXcEswImho4RWmfhwV/m7au6BQZ627olojMuZmJkINcRo/PG3T9AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUzNoLVUfuj9kAfPuU6m88BxhzS6EwHwYDVR0j BBgwFoAUGU9u9lnxEVwGirWQZdV/FQ4j9bYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j ZmFiZWM3MS03ZWNiLTRkYmQtYTQyMS05OWI5Y2QyMDkwM2EvMC8xOTRGNkVGNjU5 RjExMTVDMDY4QUI1OTA2NUQ1N0YxNTBFMjNGNUI2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMTk0RjZFRjY1OUYxMTE1QzA2OEFCNTkwNjVENTdGMTUwRTIz RjVCNi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vY2ZhYmVjNzEtN2VjYi00ZGJkLWE0 MjEtOTliOWNkMjA5MDNhLzAvMTk0RjZFRjY1OUYxMTE1QzA2OEFCNTkwNjVENTdG MTUwRTIzRjVCNi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALJVJexQcY6Paalv6XWxqWUhrTgLjZBHiVpg +VCz6YCZUhXkHNDsUy/dBG6F9lgcisKb2lOTKHakA3IBstpSovjTD41e3ulncRHa DSrC6Wy2cdNZN2R3wwqCckXPXTj1GQhAOVWZV9c5Gxwq9gATCTNgIzHLxzGh/+dM MzPilYhpBhuZ4rbDPwAPIX5BAQTSqVfX0rIjq6SFVJd8Z3jK1Q2HybO64hcYJ7MF 2adR5IUT8X82qjDTUv31twKlbBU8MRZoqS6bA55eZSbr61CyxnlhRC0Wwe1OLCri Wye4G/4gwtzi2ra7F8tOycGhgW783xhhJR3ga97s64WVWV5LrRY= -----END CERTIFICATE-----Generated at Sun Jan 25 21:52:00 2026 by rpki-client