This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/d05e5a30-0802-4c5c-947e-98ef285f4f6b/0/20EF9BB996F984E995F9FF0658F0B90CB903B897.mft File: 20EF9BB996F984E995F9FF0658F0B90CB903B897.mft (raw, json) Hash identifier: aagDx6XZPv1PV3bme/0WbTkB22rR1RqOvh1uuuDLnQY= Subject key identifier: 89:5C:BE:B5:43:DD:5A:87:97:18:45:70:35:CD:0A:8A:73:22:D0:91 Authority key identifier: 20:EF:9B:B9:96:F9:84:E9:95:F9:FF:06:58:F0:B9:0C:B9:03:B8:97 Certificate issuer: /CN=20EF9BB996F984E995F9FF0658F0B90CB903B897 Certificate serial: 1D76BAC1A63B55131CAEEA847FF87517689B1459 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/20EF9BB996F984E995F9FF0658F0B90CB903B897.cer Subject info access: rsync://repo-rpki.idnic.net/repo/d05e5a30-0802-4c5c-947e-98ef285f4f6b/0/20EF9BB996F984E995F9FF0658F0B90CB903B897.mft Manifest number: 024F Signing time: Sun 25 Jan 2026 08:22:01 +0000 Manifest this update: Sun 25 Jan 2026 08:17:01 +0000 Manifest next update: Wed 28 Jan 2026 13:57:01 +0000 Files and hashes: 1: 3130332e3138392e3131302e302f32332d3233203d3e20313439373439.roa (hash: iDioe3jjxT7o8WJUfZMX4dcAtJo9aoi+lZoEhp66IbU=) 2: 20EF9BB996F984E995F9FF0658F0B90CB903B897.crl (hash: YqZY71N01PO2mlu+k2mMZcxVyLpYSftwraCRno5DO7c=) 3: 3130332e3138392e3131312e302f32342d3234203d3e20313439373439.roa (hash: gtfNgouP3xqwRZMc2rLq5YYKkcJUcC8NmXsS5NHSV5Y=) 4: 3130332e3138392e3131302e302f32342d3234203d3e20313439373439.roa (hash: vEIWSBdkXeXYMMZ1JkgEqdYq9VUkjPtTYb4B2b9jIwo=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/d05e5a30-0802-4c5c-947e-98ef285f4f6b/0/20EF9BB996F984E995F9FF0658F0B90CB903B897.crl rsync://repo-rpki.idnic.net/repo/d05e5a30-0802-4c5c-947e-98ef285f4f6b/0/20EF9BB996F984E995F9FF0658F0B90CB903B897.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/20EF9BB996F984E995F9FF0658F0B90CB903B897.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 28 Jan 2026 13:57:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1d:76:ba:c1:a6:3b:55:13:1c:ae:ea:84:7f:f8:75:17:68:9b:14:59 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=20EF9BB996F984E995F9FF0658F0B90CB903B897 Validity Not Before: Jan 25 08:17:01 2026 GMT Not After : Jan 28 13:57:01 2026 GMT Subject: CN=895CBEB543DD5A879718457035CD0A8A7322D091 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:ca:ad:16:7c:bd:20:cd:e9:c1:5f:ea:43:3a: fc:81:d3:39:02:85:cb:60:8a:d5:38:1b:eb:0a:b9: 98:a3:66:16:e5:49:7d:a4:1f:36:b5:56:53:7a:43: 40:03:ca:e8:f5:2f:50:ea:39:52:ed:0c:38:be:52: 34:1a:60:85:1d:b3:ba:97:2a:de:53:63:a6:c2:e1: f0:05:c6:f8:43:34:a7:3a:b1:ca:4e:4c:6f:b5:a2: 0c:70:ba:0f:97:69:61:6e:13:1d:7d:04:e3:cd:f2: d2:0f:bd:3a:ba:9b:0e:7c:47:78:8b:5b:35:4a:6b: ef:c0:50:63:8a:71:df:3e:cf:6d:05:c9:1e:b0:f2: e5:48:67:ef:2d:f1:b0:6e:90:98:dd:63:af:d4:7d: 2d:f8:b4:dc:05:1d:61:7b:1b:91:85:7e:f4:7c:d5: c9:43:65:7d:97:20:91:c5:5f:06:07:11:59:a7:cf: 68:60:15:3f:25:f6:bc:7f:d2:5a:64:b9:f6:0c:f7: 7f:39:e6:a9:87:78:3e:df:f2:9b:97:a2:de:d8:a1: bd:ba:2c:27:ad:74:db:c6:28:b1:6a:c0:b2:7d:f9: eb:22:3f:60:2e:2e:ee:f8:a7:6d:ba:b5:48:c3:a7: db:23:c1:05:c5:2a:c4:85:ff:f4:7d:af:ef:f7:73: 8d:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:5C:BE:B5:43:DD:5A:87:97:18:45:70:35:CD:0A:8A:73:22:D0:91 X509v3 Authority Key Identifier: keyid:20:EF:9B:B9:96:F9:84:E9:95:F9:FF:06:58:F0:B9:0C:B9:03:B8:97 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/d05e5a30-0802-4c5c-947e-98ef285f4f6b/0/20EF9BB996F984E995F9FF0658F0B90CB903B897.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/20EF9BB996F984E995F9FF0658F0B90CB903B897.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d05e5a30-0802-4c5c-947e-98ef285f4f6b/0/20EF9BB996F984E995F9FF0658F0B90CB903B897.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 53:93:52:47:b2:2b:f2:23:29:d3:82:9a:db:71:b0:72:da:e6: 33:5f:e7:1f:f4:17:76:af:57:2f:24:7e:a1:22:d2:3e:3c:1b: 05:b2:0c:10:79:85:b3:29:a3:03:95:07:f2:cf:98:c3:ee:be: 0e:c1:1d:93:c1:11:73:bd:67:68:4d:11:60:ff:60:dc:68:39: 3b:52:be:33:04:e7:73:60:b7:8f:4c:74:89:a9:a3:ad:09:9b: 5e:a4:f8:66:a9:41:73:a7:10:3c:aa:de:ed:90:53:0a:61:63: 4d:c9:2c:9c:f7:d3:a1:a6:c0:b4:77:ca:72:ee:aa:6d:cb:9a: 52:cf:0e:5a:d7:79:27:fe:b4:6d:ee:a0:ef:f2:37:87:39:89: 1f:c3:f9:91:85:3c:01:7a:d6:a6:81:32:31:4f:93:35:03:37: 39:d8:f8:09:fe:08:81:b8:8a:01:90:f4:5d:c7:bf:d1:34:b8: 3a:d5:7e:08:2e:fc:9a:41:d2:59:94:b7:ec:bc:39:dc:4c:5b: ed:01:68:62:a8:03:e6:9b:9a:45:08:7e:d0:02:55:57:11:35: b6:6a:ab:b2:70:f8:ed:3e:96:80:cf:7b:0b:42:db:1b:cb:3d: 3d:72:e1:a9:f4:e6:a7:f7:3f:0b:82:e7:ff:f5:ac:87:6a:e4: 7f:26:f9:a5 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUHXa6waY7VRMcruqEf/h1F2ibFFkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjBFRjlCQjk5NkY5ODRFOTk1RjlGRjA2NThGMEI5MENC OTAzQjg5NzAeFw0yNjAxMjUwODE3MDFaFw0yNjAxMjgxMzU3MDFaMDMxMTAvBgNV BAMTKDg5NUNCRUI1NDNERDVBODc5NzE4NDU3MDM1Q0QwQThBNzMyMkQwOTEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDWyq0WfL0gzenBX+pDOvyB0zkC hctgitU4G+sKuZijZhblSX2kHza1VlN6Q0ADyuj1L1DqOVLtDDi+UjQaYIUds7qX Kt5TY6bC4fAFxvhDNKc6scpOTG+1ogxwug+XaWFuEx19BOPN8tIPvTq6mw58R3iL WzVKa+/AUGOKcd8+z20FyR6w8uVIZ+8t8bBukJjdY6/UfS34tNwFHWF7G5GFfvR8 1clDZX2XIJHFXwYHEVmnz2hgFT8l9rx/0lpkufYM93855qmHeD7f8puXot7Yob26 LCetdNvGKLFqwLJ9+esiP2AuLu74p226tUjDp9sjwQXFKsSF//R9r+/3c42lAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUiVy+tUPdWoeXGEVwNc0KinMi0JEwHwYDVR0j BBgwFoAUIO+buZb5hOmV+f8GWPC5DLkDuJcwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k MDVlNWEzMC0wODAyLTRjNWMtOTQ3ZS05OGVmMjg1ZjRmNmIvMC8yMEVGOUJCOTk2 Rjk4NEU5OTVGOUZGMDY1OEYwQjkwQ0I5MDNCODk3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMjBFRjlCQjk5NkY5ODRFOTk1RjlGRjA2NThGMEI5MENCOTAz Qjg5Ny5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZDA1ZTVhMzAtMDgwMi00YzVjLTk0 N2UtOThlZjI4NWY0ZjZiLzAvMjBFRjlCQjk5NkY5ODRFOTk1RjlGRjA2NThGMEI5 MENCOTAzQjg5Ny5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFOTUkeyK/IjKdOCmttxsHLa5jNf5x/0F3av Vy8kfqEi0j48GwWyDBB5hbMpowOVB/LPmMPuvg7BHZPBEXO9Z2hNEWD/YNxoOTtS vjME53Ngt49MdImpo60Jm16k+GapQXOnEDyq3u2QUwphY03JLJz306GmwLR3ynLu qm3LmlLPDlrXeSf+tG3uoO/yN4c5iR/D+ZGFPAF61qaBMjFPkzUDNznY+An+CIG4 igGQ9F3Hv9E0uDrVfggu/JpB0lmUt+y8OdxMW+0BaGKoA+abmkUIftACVVcRNbZq q7Jw+O0+loDPewtC2xvLPT1y4an05qf3PwuC5//1rIdq5H8m+aU= -----END CERTIFICATE-----Generated at Mon Jan 26 02:35:34 2026 by rpki-client