This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/d044f918-9332-4257-b510-381c8590ff54/0/B126A372835801BBB738696C56DCF255D032D42F.mft File: B126A372835801BBB738696C56DCF255D032D42F.mft (raw, json) Hash identifier: ADBjxl4eSsAnWq/01Fipn80STPOdczLhPteqkSz0p1Y= Subject key identifier: 84:09:25:F8:B0:EE:25:A9:CC:AA:F3:DB:09:6C:5B:C2:D9:4F:04:D0 Authority key identifier: B1:26:A3:72:83:58:01:BB:B7:38:69:6C:56:DC:F2:55:D0:32:D4:2F Certificate issuer: /CN=B126A372835801BBB738696C56DCF255D032D42F Certificate serial: 04975095FE2AAA65039F06A1075566460AABCC66 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B126A372835801BBB738696C56DCF255D032D42F.cer Subject info access: rsync://repo-rpki.idnic.net/repo/d044f918-9332-4257-b510-381c8590ff54/0/B126A372835801BBB738696C56DCF255D032D42F.mft Manifest number: 03C2 Signing time: Fri 23 Jan 2026 15:42:00 +0000 Manifest this update: Fri 23 Jan 2026 15:37:00 +0000 Manifest next update: Tue 27 Jan 2026 01:00:00 +0000 Files and hashes: 1: B126A372835801BBB738696C56DCF255D032D42F.crl (hash: M1WircwOz47diFXAn1zxX8anIi5ttKh+b82y2EpUI8c=) 2: 3130332e3136362e33342e302f32332d3234203d3e203137393935.roa (hash: Nmtn3LlfweyxwcAEh/9aYsa4vVfStr8hvIJSQMmS8CI=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/d044f918-9332-4257-b510-381c8590ff54/0/B126A372835801BBB738696C56DCF255D032D42F.crl rsync://repo-rpki.idnic.net/repo/d044f918-9332-4257-b510-381c8590ff54/0/B126A372835801BBB738696C56DCF255D032D42F.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B126A372835801BBB738696C56DCF255D032D42F.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 27 Jan 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 04:97:50:95:fe:2a:aa:65:03:9f:06:a1:07:55:66:46:0a:ab:cc:66 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B126A372835801BBB738696C56DCF255D032D42F Validity Not Before: Jan 23 15:37:00 2026 GMT Not After : Jan 27 01:00:00 2026 GMT Subject: CN=840925F8B0EE25A9CCAAF3DB096C5BC2D94F04D0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:b2:48:ba:72:ef:f6:3f:c1:18:b5:a2:8a:fe: 31:0e:a5:ee:ab:3d:2d:18:4d:26:32:ab:16:fa:8f: 73:d1:64:b3:5c:41:2b:19:49:d9:36:b5:c1:e4:49: e1:3c:cf:78:43:03:7e:9a:8c:ad:05:da:0d:b1:49: 13:51:c1:f3:04:45:86:42:2c:a9:63:48:c0:cf:ee: 2f:15:ea:4f:92:30:53:6b:11:a6:8c:4b:54:5a:02: 8e:35:5f:db:10:34:04:b5:52:d6:63:91:e4:d8:9e: f2:d1:fa:fd:b9:3b:fb:d0:31:26:13:b5:13:cb:bc: 85:1a:7d:5a:95:69:d8:90:49:f0:df:96:c2:d2:b3: ea:77:57:ec:8a:79:df:23:f6:e8:8b:73:16:f0:9e: 04:12:c8:4f:24:9e:f7:23:cd:4f:2b:83:3c:70:52: 6f:36:ee:a8:cf:a6:87:95:53:0b:ac:e5:f1:d8:3a: 60:70:71:03:3e:ac:4e:f5:75:ab:2b:4b:59:1d:d4: 36:c7:52:ad:4d:93:d1:44:87:12:e8:bd:ef:43:cc: e7:10:dd:ed:34:66:15:f3:07:58:3f:e5:09:2f:03: cd:c7:35:b5:a0:ab:af:90:d9:96:33:9e:82:55:fe: 76:4c:3b:57:ee:a2:c7:5e:58:83:ee:22:6c:fc:bc: 22:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:09:25:F8:B0:EE:25:A9:CC:AA:F3:DB:09:6C:5B:C2:D9:4F:04:D0 X509v3 Authority Key Identifier: keyid:B1:26:A3:72:83:58:01:BB:B7:38:69:6C:56:DC:F2:55:D0:32:D4:2F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/d044f918-9332-4257-b510-381c8590ff54/0/B126A372835801BBB738696C56DCF255D032D42F.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B126A372835801BBB738696C56DCF255D032D42F.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d044f918-9332-4257-b510-381c8590ff54/0/B126A372835801BBB738696C56DCF255D032D42F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 25:2b:68:13:f0:ef:f8:49:73:00:65:0a:ef:93:f5:0e:b9:a9: 50:5a:10:eb:c5:16:08:4a:0c:93:6c:59:15:20:90:fb:64:1d: b3:8f:5b:f9:0a:01:f0:1a:e8:14:15:11:c7:10:ae:e9:c3:a3: 05:a7:50:b7:da:46:9c:33:4c:22:80:13:f2:7b:82:53:f8:0e: 45:ba:68:ef:bb:2e:40:0e:9f:d0:36:95:ff:50:86:fb:8c:31: 77:44:08:89:31:58:71:67:fa:26:8a:d1:50:42:88:9e:5b:4b: 73:2e:8b:35:f7:e1:a6:e9:21:e2:32:9e:1b:99:10:f2:a1:7a: 6b:54:45:0c:00:3c:e3:0a:6f:0d:a0:3a:cf:7b:79:1e:86:5a: ac:af:f8:ad:03:60:7f:74:28:32:f5:be:0a:96:8d:0a:10:e8: 4d:8c:1f:87:f9:6b:4e:e4:11:6b:1e:d9:84:eb:68:91:eb:61: 71:63:c1:0f:4c:a3:26:db:8e:be:07:c7:f5:b7:09:fe:0d:5e: 1b:d0:72:c3:df:ae:27:13:22:da:10:78:11:79:54:82:97:85: 8a:ce:8a:e5:96:67:a1:66:a9:f8:11:95:ae:42:6d:3c:cf:9c: af:46:6d:c9:c2:26:86:d0:b1:98:2a:3f:d4:b2:cb:02:5f:83: 42:aa:a4:72 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUBJdQlf4qqmUDnwahB1VmRgqrzGYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjEyNkEzNzI4MzU4MDFCQkI3Mzg2OTZDNTZEQ0YyNTVE MDMyRDQyRjAeFw0yNjAxMjMxNTM3MDBaFw0yNjAxMjcwMTAwMDBaMDMxMTAvBgNV BAMTKDg0MDkyNUY4QjBFRTI1QTlDQ0FBRjNEQjA5NkM1QkMyRDk0RjA0RDAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCwski6cu/2P8EYtaKK/jEOpe6r PS0YTSYyqxb6j3PRZLNcQSsZSdk2tcHkSeE8z3hDA36ajK0F2g2xSRNRwfMERYZC LKljSMDP7i8V6k+SMFNrEaaMS1RaAo41X9sQNAS1UtZjkeTYnvLR+v25O/vQMSYT tRPLvIUafVqVadiQSfDflsLSs+p3V+yKed8j9uiLcxbwngQSyE8knvcjzU8rgzxw Um827qjPpoeVUwus5fHYOmBwcQM+rE71dasrS1kd1DbHUq1Nk9FEhxLove9DzOcQ 3e00ZhXzB1g/5QkvA83HNbWgq6+Q2ZYznoJV/nZMO1fuosdeWIPuImz8vCLrAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUhAkl+LDuJanMqvPbCWxbwtlPBNAwHwYDVR0j BBgwFoAUsSajcoNYAbu3OGlsVtzyVdAy1C8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k MDQ0ZjkxOC05MzMyLTQyNTctYjUxMC0zODFjODU5MGZmNTQvMC9CMTI2QTM3Mjgz NTgwMUJCQjczODY5NkM1NkRDRjI1NUQwMzJENDJGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQjEyNkEzNzI4MzU4MDFCQkI3Mzg2OTZDNTZEQ0YyNTVEMDMy RDQyRi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZDA0NGY5MTgtOTMzMi00MjU3LWI1 MTAtMzgxYzg1OTBmZjU0LzAvQjEyNkEzNzI4MzU4MDFCQkI3Mzg2OTZDNTZEQ0Yy NTVEMDMyRDQyRi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACUraBPw7/hJcwBlCu+T9Q65qVBaEOvFFghK DJNsWRUgkPtkHbOPW/kKAfAa6BQVEccQrunDowWnULfaRpwzTCKAE/J7glP4DkW6 aO+7LkAOn9A2lf9QhvuMMXdECIkxWHFn+iaK0VBCiJ5bS3MuizX34abpIeIynhuZ EPKhemtURQwAPOMKbw2gOs97eR6GWqyv+K0DYH90KDL1vgqWjQoQ6E2MH4f5a07k EWse2YTraJHrYXFjwQ9Moybbjr4Hx/W3Cf4NXhvQcsPfricTItoQeBF5VIKXhYrO iuWWZ6FmqfgRla5CbTzPnK9GbcnCJobQsZgqP9SyywJfg0KqpHI= -----END CERTIFICATE-----Generated at Sun Jan 25 23:40:17 2026 by rpki-client