This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/d4f6d86b-e3df-4e2f-936f-ed9b963503a1/0/C19B133025B2D947034F2B0FC582B9F2ABC7A6B2.mft File: C19B133025B2D947034F2B0FC582B9F2ABC7A6B2.mft (raw, json) Hash identifier: 2iQlC82b/fX7iXZ9dsv7MC64jAEmXPDS0KjO6aGqfOY= Subject key identifier: BD:2D:23:67:12:6C:39:8D:5F:11:B1:4A:5A:82:7A:23:E4:C0:05:D9 Authority key identifier: C1:9B:13:30:25:B2:D9:47:03:4F:2B:0F:C5:82:B9:F2:AB:C7:A6:B2 Certificate issuer: /CN=C19B133025B2D947034F2B0FC582B9F2ABC7A6B2 Certificate serial: 4976C7DBAAB1EA37490C871085D56FD96167A6EA Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C19B133025B2D947034F2B0FC582B9F2ABC7A6B2.cer Subject info access: rsync://repo-rpki.idnic.net/repo/d4f6d86b-e3df-4e2f-936f-ed9b963503a1/0/C19B133025B2D947034F2B0FC582B9F2ABC7A6B2.mft Manifest number: 01E7 Signing time: Fri 23 Jan 2026 19:31:23 +0000 Manifest this update: Fri 23 Jan 2026 19:26:23 +0000 Manifest next update: Tue 27 Jan 2026 01:38:23 +0000 Files and hashes: 1: C19B133025B2D947034F2B0FC582B9F2ABC7A6B2.crl (hash: oYc9eTyl/NDl5zqG7E98htDgYLkY8pfAdnY4TULG6pk=) 2: 3130332e3138362e322e302f32342d3234203d3e20313439383837.roa (hash: XKb8rxYeYuD4PKUeGTZQ0dDYWCAE/hKgR+dYvEQGg4I=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/d4f6d86b-e3df-4e2f-936f-ed9b963503a1/0/C19B133025B2D947034F2B0FC582B9F2ABC7A6B2.crl rsync://repo-rpki.idnic.net/repo/d4f6d86b-e3df-4e2f-936f-ed9b963503a1/0/C19B133025B2D947034F2B0FC582B9F2ABC7A6B2.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C19B133025B2D947034F2B0FC582B9F2ABC7A6B2.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 27 Jan 2026 01:38:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 49:76:c7:db:aa:b1:ea:37:49:0c:87:10:85:d5:6f:d9:61:67:a6:ea Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C19B133025B2D947034F2B0FC582B9F2ABC7A6B2 Validity Not Before: Jan 23 19:26:23 2026 GMT Not After : Jan 27 01:38:23 2026 GMT Subject: CN=BD2D2367126C398D5F11B14A5A827A23E4C005D9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:a2:7d:3e:93:85:68:b1:59:7c:c1:d5:a9:03: 49:5c:54:d5:48:df:21:bb:2f:05:63:4b:d8:ff:99: 02:42:b4:0d:a9:c6:4e:89:25:dc:bc:fc:45:53:8e: 89:89:18:5c:7e:1d:b3:08:ec:51:c9:3e:bc:36:21: 5d:ca:ae:9d:0b:e0:2d:de:65:40:fc:4a:88:b0:47: 8c:4f:41:4d:ff:48:6b:cf:01:8b:90:65:66:c8:38: 31:ba:fc:af:a4:b3:ba:38:93:63:3f:56:24:f1:72: ee:18:47:6e:c5:c4:eb:ba:9c:b7:7b:4e:a5:06:4c: e3:d2:e1:1a:c0:4b:8f:3a:14:0f:57:74:e7:df:06: d7:64:79:fb:ba:c9:15:9e:86:a1:51:33:0f:43:16: 56:e4:6a:da:7e:96:4e:79:93:32:1a:7e:2f:f8:18: d3:11:9c:7e:a2:63:5c:69:81:76:97:e3:6f:e9:40: 69:05:a6:de:45:03:62:67:6e:16:4d:bc:68:96:82: ce:34:a7:ce:ed:7b:b1:02:e9:c5:c7:f7:c7:c8:5e: 6a:af:e3:89:89:9f:f9:34:6a:81:c7:17:a6:0e:77: 4a:a6:ad:61:6b:47:f1:18:00:b2:3d:5e:87:54:ff: b5:12:f4:11:92:40:5b:9f:54:67:9a:da:cc:8f:d7: de:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:2D:23:67:12:6C:39:8D:5F:11:B1:4A:5A:82:7A:23:E4:C0:05:D9 X509v3 Authority Key Identifier: keyid:C1:9B:13:30:25:B2:D9:47:03:4F:2B:0F:C5:82:B9:F2:AB:C7:A6:B2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/d4f6d86b-e3df-4e2f-936f-ed9b963503a1/0/C19B133025B2D947034F2B0FC582B9F2ABC7A6B2.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C19B133025B2D947034F2B0FC582B9F2ABC7A6B2.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d4f6d86b-e3df-4e2f-936f-ed9b963503a1/0/C19B133025B2D947034F2B0FC582B9F2ABC7A6B2.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6f:57:35:87:26:8b:ec:33:f7:66:39:40:3c:a8:b5:f9:83:7d: 5b:b6:5d:aa:0d:87:d7:27:68:9b:da:5b:b1:7f:dc:7c:42:a4: 11:3a:08:df:05:b7:85:04:8b:e8:a5:35:1e:d3:5c:76:78:13: 75:62:6d:b3:7b:8d:d6:47:13:0d:b3:a0:4c:4e:af:ca:22:96: cc:45:af:2b:f5:4c:43:6d:5e:87:e4:27:03:21:52:8a:3f:59: af:8c:89:3e:2e:5f:e5:ae:1a:95:b5:36:d9:68:69:ac:3d:58: 5f:1d:22:68:9a:35:d0:75:a9:89:69:bc:36:6c:39:81:3b:f5: 65:e5:04:27:b6:60:c0:8a:1b:80:e5:ad:e7:ad:78:e4:76:fc: be:30:9c:e2:84:f9:3e:aa:ae:f3:d3:66:f7:8c:f5:a9:58:e2: 33:f7:a9:d9:a1:60:07:e0:25:b8:62:3e:b8:c9:a1:52:72:68: f9:90:3f:a9:53:8a:f9:ba:58:11:3a:92:d9:75:be:68:a0:02: 52:f9:80:aa:39:5b:87:c5:21:0c:bb:a6:08:ec:9d:02:e2:9f: 0c:b4:1c:c3:8a:e8:37:9e:db:bd:a0:ea:4b:32:a4:98:19:fe: 93:37:09:80:3d:98:b9:8b:da:90:36:dc:eb:c7:09:7a:ab:04: 54:dd:ca:0d -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUSXbH26qx6jdJDIcQhdVv2WFnpuowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzE5QjEzMzAyNUIyRDk0NzAzNEYyQjBGQzU4MkI5RjJB QkM3QTZCMjAeFw0yNjAxMjMxOTI2MjNaFw0yNjAxMjcwMTM4MjNaMDMxMTAvBgNV BAMTKEJEMkQyMzY3MTI2QzM5OEQ1RjExQjE0QTVBODI3QTIzRTRDMDA1RDkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDaon0+k4VosVl8wdWpA0lcVNVI 3yG7LwVjS9j/mQJCtA2pxk6JJdy8/EVTjomJGFx+HbMI7FHJPrw2IV3Krp0L4C3e ZUD8SoiwR4xPQU3/SGvPAYuQZWbIODG6/K+ks7o4k2M/ViTxcu4YR27FxOu6nLd7 TqUGTOPS4RrAS486FA9XdOffBtdkefu6yRWehqFRMw9DFlbkatp+lk55kzIafi/4 GNMRnH6iY1xpgXaX42/pQGkFpt5FA2JnbhZNvGiWgs40p87te7EC6cXH98fIXmqv 44mJn/k0aoHHF6YOd0qmrWFrR/EYALI9XodU/7US9BGSQFufVGea2syP197TAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUvS0jZxJsOY1fEbFKWoJ6I+TABdkwHwYDVR0j BBgwFoAUwZsTMCWy2UcDTysPxYK58qvHprIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k NGY2ZDg2Yi1lM2RmLTRlMmYtOTM2Zi1lZDliOTYzNTAzYTEvMC9DMTlCMTMzMDI1 QjJEOTQ3MDM0RjJCMEZDNTgyQjlGMkFCQzdBNkIyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQzE5QjEzMzAyNUIyRDk0NzAzNEYyQjBGQzU4MkI5RjJBQkM3 QTZCMi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZDRmNmQ4NmItZTNkZi00ZTJmLTkz NmYtZWQ5Yjk2MzUwM2ExLzAvQzE5QjEzMzAyNUIyRDk0NzAzNEYyQjBGQzU4MkI5 RjJBQkM3QTZCMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAG9XNYcmi+wz92Y5QDyotfmDfVu2XaoNh9cn aJvaW7F/3HxCpBE6CN8Ft4UEi+ilNR7TXHZ4E3VibbN7jdZHEw2zoExOr8oilsxF ryv1TENtXofkJwMhUoo/Wa+MiT4uX+WuGpW1Ntloaaw9WF8dImiaNdB1qYlpvDZs OYE79WXlBCe2YMCKG4DlreeteOR2/L4wnOKE+T6qrvPTZveM9alY4jP3qdmhYAfg JbhiPrjJoVJyaPmQP6lTivm6WBE6ktl1vmigAlL5gKo5W4fFIQy7pgjsnQLinwy0 HMOK6Dee272g6ksypJgZ/pM3CYA9mLmL2pA23OvHCXqrBFTdyg0= -----END CERTIFICATE-----Generated at Sun Jan 25 18:53:52 2026 by rpki-client