This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/d00f9cc7-4a69-4c9e-bba6-4d9abb56eff6/0/580F61C23A4857BE23095E060FE36642F86DA6E8.mft File: 580F61C23A4857BE23095E060FE36642F86DA6E8.mft (raw, json) Hash identifier: 1EYr2uFT4vlj9W9yNDKnf7oxH+h/VhRtfI6U40x3sAQ= Subject key identifier: EF:40:2C:C6:EF:B4:49:B6:F4:BD:A6:4F:53:69:E4:07:3A:83:1C:D5 Authority key identifier: 58:0F:61:C2:3A:48:57:BE:23:09:5E:06:0F:E3:66:42:F8:6D:A6:E8 Certificate issuer: /CN=580F61C23A4857BE23095E060FE36642F86DA6E8 Certificate serial: 148BDE4E77F5AD1B49F3AAFBED036347A14EC7E4 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/580F61C23A4857BE23095E060FE36642F86DA6E8.cer Subject info access: rsync://repo-rpki.idnic.net/repo/d00f9cc7-4a69-4c9e-bba6-4d9abb56eff6/0/580F61C23A4857BE23095E060FE36642F86DA6E8.mft Manifest number: 030D Signing time: Sat 24 Jan 2026 05:10:39 +0000 Manifest this update: Sat 24 Jan 2026 05:05:39 +0000 Manifest next update: Tue 27 Jan 2026 09:27:39 +0000 Files and hashes: 1: 3130332e3137332e3233302e302f32342d3234203d3e20313437303837.roa (hash: oQhg18Sbo2ti9rlX+keHdmEowwBTrgS3kdu5j5Tcp6g=) 2: 323030313a6466373a633138303a3a2f34382d3438203d3e20313437303837.roa (hash: wDJx14AXcC6zyLSHO8xooP/SWPirYqE9vUnBStY8roQ=) 3: 580F61C23A4857BE23095E060FE36642F86DA6E8.crl (hash: 2o+evY/NihXBFIAUDZXiCEETrRQluzKuXsEUWzManQM=) 4: 3130332e3137332e3233302e302f32332d3233203d3e20313437303837.roa (hash: 6zcVUOjrvBXZsgJ0ACZdVFEnzsSrQV/HWX1p3BUV2ko=) 5: 3130332e3137332e3233312e302f32342d3234203d3e20313437303837.roa (hash: ZuAJ9UU5ofuu/a/pfpbxOKyZsNH+A+BhN1h6JCEwmPc=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/d00f9cc7-4a69-4c9e-bba6-4d9abb56eff6/0/580F61C23A4857BE23095E060FE36642F86DA6E8.crl rsync://repo-rpki.idnic.net/repo/d00f9cc7-4a69-4c9e-bba6-4d9abb56eff6/0/580F61C23A4857BE23095E060FE36642F86DA6E8.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/580F61C23A4857BE23095E060FE36642F86DA6E8.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 27 Jan 2026 09:27:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 14:8b:de:4e:77:f5:ad:1b:49:f3:aa:fb:ed:03:63:47:a1:4e:c7:e4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=580F61C23A4857BE23095E060FE36642F86DA6E8 Validity Not Before: Jan 24 05:05:39 2026 GMT Not After : Jan 27 09:27:39 2026 GMT Subject: CN=EF402CC6EFB449B6F4BDA64F5369E4073A831CD5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:39:0f:8a:88:34:d4:bb:2a:33:79:4e:72:1f: cb:8f:ed:f0:da:3c:e1:58:0f:b5:e0:7d:b2:44:17: 11:e6:c8:15:e9:8b:a3:97:d6:6d:2d:6d:7b:e9:bb: 7e:cb:10:ce:ab:df:01:ee:05:0d:20:f6:e1:5f:22: 07:e2:e6:7e:35:7d:7b:cd:e2:1e:fa:e1:bf:0b:88: d2:de:41:d3:94:c6:4e:e8:b4:3f:d8:be:92:b3:d8: 70:1d:46:8c:69:4e:0c:84:17:8e:b4:d0:39:d0:fb: af:37:32:92:a1:88:b6:0f:22:44:95:d2:97:e5:60: db:8c:03:fc:4d:bf:11:c3:f9:2f:73:7b:0d:2e:b8: ba:a2:8d:12:e5:9a:14:e9:6a:44:4a:fe:84:cb:df: 42:3a:2f:0c:68:b5:e7:fc:c1:18:03:e5:f7:54:83: f6:63:1d:9c:c3:ac:d9:89:c7:0d:6d:0d:80:1f:52: ce:72:d1:86:08:f5:63:3d:de:b1:73:cc:15:11:15: 8b:f4:3c:bb:05:73:1b:e5:83:d0:b8:80:18:ab:77: e2:23:b0:c4:c1:77:f7:d4:91:76:31:6a:84:66:3c: 31:5d:52:47:b6:e1:42:8f:f7:c1:28:9e:37:93:53: a8:57:88:5b:80:88:29:31:48:f7:83:ec:73:7d:d1: e1:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EF:40:2C:C6:EF:B4:49:B6:F4:BD:A6:4F:53:69:E4:07:3A:83:1C:D5 X509v3 Authority Key Identifier: keyid:58:0F:61:C2:3A:48:57:BE:23:09:5E:06:0F:E3:66:42:F8:6D:A6:E8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/d00f9cc7-4a69-4c9e-bba6-4d9abb56eff6/0/580F61C23A4857BE23095E060FE36642F86DA6E8.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/580F61C23A4857BE23095E060FE36642F86DA6E8.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d00f9cc7-4a69-4c9e-bba6-4d9abb56eff6/0/580F61C23A4857BE23095E060FE36642F86DA6E8.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1d:81:05:95:4a:19:38:4d:84:af:58:87:6f:b5:ef:93:e3:cf: 27:33:55:f1:2f:41:62:c9:28:df:ec:d7:75:ea:fa:44:98:20: 43:e2:7d:0c:81:fd:60:b5:94:87:f6:ac:c4:9a:5b:26:97:59: a0:f9:d8:83:5c:0f:12:e6:ae:b2:82:f7:df:0b:e4:60:93:06: fb:e4:2e:bc:07:b5:88:4a:ec:0d:73:c6:bd:64:c3:89:d0:ac: 24:02:ec:54:3c:cc:4a:ae:04:a5:8d:d8:93:d2:67:46:27:b7: 0b:7e:6c:b9:3a:ad:1d:4e:f6:b7:0c:58:24:44:14:81:ce:42: 6f:4b:4e:32:9c:b1:37:91:d8:dc:a8:1b:26:79:46:11:9d:a0: ff:1c:e9:b8:f9:8b:d9:43:b2:e3:70:65:aa:88:8e:2a:bb:4c: d8:37:13:65:8c:98:3c:20:1d:fc:69:b9:11:b1:e9:3c:92:38: 97:d5:7f:62:25:f6:8e:0c:cc:16:2b:99:a0:60:04:d8:23:9f: 49:06:a0:ce:6d:6a:6b:e1:ef:1c:1d:05:44:2a:31:93:cf:e9: 15:d5:60:4e:35:25:0b:d0:1b:33:2c:6d:57:dc:e1:04:57:06: 0d:b2:42:5e:40:d3:d7:d8:4b:fb:fd:db:c7:81:c9:2b:5c:2e: 4c:eb:d8:53 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUFIveTnf1rRtJ86r77QNjR6FOx+QwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTgwRjYxQzIzQTQ4NTdCRTIzMDk1RTA2MEZFMzY2NDJG ODZEQTZFODAeFw0yNjAxMjQwNTA1MzlaFw0yNjAxMjcwOTI3MzlaMDMxMTAvBgNV BAMTKEVGNDAyQ0M2RUZCNDQ5QjZGNEJEQTY0RjUzNjlFNDA3M0E4MzFDRDUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCnOQ+KiDTUuyozeU5yH8uP7fDa POFYD7XgfbJEFxHmyBXpi6OX1m0tbXvpu37LEM6r3wHuBQ0g9uFfIgfi5n41fXvN 4h764b8LiNLeQdOUxk7otD/YvpKz2HAdRoxpTgyEF4600DnQ+683MpKhiLYPIkSV 0pflYNuMA/xNvxHD+S9zew0uuLqijRLlmhTpakRK/oTL30I6Lwxotef8wRgD5fdU g/ZjHZzDrNmJxw1tDYAfUs5y0YYI9WM93rFzzBURFYv0PLsFcxvlg9C4gBird+Ij sMTBd/fUkXYxaoRmPDFdUke24UKP98EonjeTU6hXiFuAiCkxSPeD7HN90eEtAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU70Asxu+0Sbb0vaZPU2nkBzqDHNUwHwYDVR0j BBgwFoAUWA9hwjpIV74jCV4GD+NmQvhtpugwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k MDBmOWNjNy00YTY5LTRjOWUtYmJhNi00ZDlhYmI1NmVmZjYvMC81ODBGNjFDMjNB NDg1N0JFMjMwOTVFMDYwRkUzNjY0MkY4NkRBNkU4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNTgwRjYxQzIzQTQ4NTdCRTIzMDk1RTA2MEZFMzY2NDJGODZE QTZFOC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZDAwZjljYzctNGE2OS00YzllLWJi YTYtNGQ5YWJiNTZlZmY2LzAvNTgwRjYxQzIzQTQ4NTdCRTIzMDk1RTA2MEZFMzY2 NDJGODZEQTZFOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAB2BBZVKGThNhK9Yh2+175PjzyczVfEvQWLJ KN/s13Xq+kSYIEPifQyB/WC1lIf2rMSaWyaXWaD52INcDxLmrrKC998L5GCTBvvk LrwHtYhK7A1zxr1kw4nQrCQC7FQ8zEquBKWN2JPSZ0Yntwt+bLk6rR1O9rcMWCRE FIHOQm9LTjKcsTeR2NyoGyZ5RhGdoP8c6bj5i9lDsuNwZaqIjiq7TNg3E2WMmDwg HfxpuRGx6TySOJfVf2Il9o4MzBYrmaBgBNgjn0kGoM5tamvh7xwdBUQqMZPP6RXV YE41JQvQGzMsbVfc4QRXBg2yQl5A09fYS/v928eByStcLkzr2FM= -----END CERTIFICATE-----Generated at Sun Jan 25 18:47:49 2026 by rpki-client