This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/d61b8ccc-6c22-424e-9614-8ab8ad28849c/0/A17DC55845B70106CEB3A498496454BE640F44AB.mft File: A17DC55845B70106CEB3A498496454BE640F44AB.mft (raw, json) Hash identifier: cw3LLDaMGEQ3rqtLcwz2ic4egM6mlxdZDwATS3zVxnk= Subject key identifier: 57:5A:DD:2C:5F:A0:90:9F:83:93:30:85:03:27:B7:9F:CD:F6:B5:B8 Authority key identifier: A1:7D:C5:58:45:B7:01:06:CE:B3:A4:98:49:64:54:BE:64:0F:44:AB Certificate issuer: /CN=A17DC55845B70106CEB3A498496454BE640F44AB Certificate serial: 13DC1C532643091D6348E083F7FA6C343327763B Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A17DC55845B70106CEB3A498496454BE640F44AB.cer Subject info access: rsync://repo-rpki.idnic.net/repo/d61b8ccc-6c22-424e-9614-8ab8ad28849c/0/A17DC55845B70106CEB3A498496454BE640F44AB.mft Manifest number: 0361 Signing time: Sun 25 Jan 2026 17:01:16 +0000 Manifest this update: Sun 25 Jan 2026 16:56:16 +0000 Manifest next update: Wed 28 Jan 2026 21:20:16 +0000 Files and hashes: 1: A17DC55845B70106CEB3A498496454BE640F44AB.crl (hash: /lEaJG6gkx388nyXxZbuc1gDKlOd9TGNIW7WoiYeeus=) 2: 3130332e33312e3234382e302f32332d3233203d3e20313339343237.roa (hash: XIFOVvwjJ/s65US6Rpd5t4HWg3Q6vfbVPqm9v9PqOGU=) 3: 3130332e35322e36302e302f32342d3234203d3e20313338383831.roa (hash: KQJJinQjYftmYqVjX+nqcS8sYhsgrCSBnaTeyaDu8pU=) 4: 3130332e33312e3234382e302f32342d3234203d3e20313339343237.roa (hash: 9cImEVaK5OCHdSpqIXpI9zJWU7YI86G2S7wFTBzx17w=) 5: 3130332e35322e36312e302f32342d3234203d3e20313339343237.roa (hash: w37lq4KLk82r5xEboaEt3iVD5XeAKizKn7xI0fxGzNY=) 6: 3130332e33312e3234392e302f32342d3234203d3e20313339343237.roa (hash: UUMwnrDm1U+Qlo7/OuS/vhT11bByA22cTFKLWGZAlwc=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/d61b8ccc-6c22-424e-9614-8ab8ad28849c/0/A17DC55845B70106CEB3A498496454BE640F44AB.crl rsync://repo-rpki.idnic.net/repo/d61b8ccc-6c22-424e-9614-8ab8ad28849c/0/A17DC55845B70106CEB3A498496454BE640F44AB.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A17DC55845B70106CEB3A498496454BE640F44AB.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 28 Jan 2026 14:00:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13:dc:1c:53:26:43:09:1d:63:48:e0:83:f7:fa:6c:34:33:27:76:3b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A17DC55845B70106CEB3A498496454BE640F44AB Validity Not Before: Jan 25 16:56:16 2026 GMT Not After : Jan 28 21:20:16 2026 GMT Subject: CN=575ADD2C5FA0909F839330850327B79FCDF6B5B8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:eb:eb:2f:c8:09:ee:25:80:f3:93:42:9b:d4: 89:51:41:a0:02:f0:e9:c8:e8:7d:a0:c0:02:29:9f: a5:2a:58:4e:5d:c2:d3:e4:0d:0d:05:03:79:79:31: 65:b3:86:e5:1d:a0:5b:a2:01:c6:8a:96:7c:09:09: eb:29:d8:93:a3:17:22:65:06:a8:e2:47:d0:8e:64: cb:40:29:10:94:a4:76:0a:04:a5:a6:22:55:5c:7d: 8f:70:ee:96:6b:82:e9:26:0a:ce:ea:25:07:5e:5f: 32:65:e1:53:4b:8b:50:39:69:a8:8b:f5:0e:9d:79: bf:82:37:bd:3a:38:67:bf:fc:6e:13:06:12:3f:b2: e3:c1:cd:c8:a8:7f:b1:73:76:cd:9b:2a:7b:de:8b: 41:f4:f9:be:89:a9:a3:d6:f8:6a:a2:5a:03:73:8a: 70:2f:9c:e4:71:2b:4e:4b:f0:40:33:1d:32:a1:57: 8b:d5:91:02:4e:56:4e:de:75:90:75:31:8a:9b:93: 02:28:c9:e0:b0:ef:65:f9:d6:68:71:da:c4:78:52: 63:79:1d:0d:ae:54:de:f3:ba:28:b7:b4:da:e3:df: b2:5d:91:cf:dc:1b:9d:e3:5b:a5:1b:33:9b:a8:76: 23:f7:07:09:0b:ab:d1:44:4c:74:33:99:03:ae:ec: 2e:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 57:5A:DD:2C:5F:A0:90:9F:83:93:30:85:03:27:B7:9F:CD:F6:B5:B8 X509v3 Authority Key Identifier: keyid:A1:7D:C5:58:45:B7:01:06:CE:B3:A4:98:49:64:54:BE:64:0F:44:AB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/d61b8ccc-6c22-424e-9614-8ab8ad28849c/0/A17DC55845B70106CEB3A498496454BE640F44AB.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A17DC55845B70106CEB3A498496454BE640F44AB.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d61b8ccc-6c22-424e-9614-8ab8ad28849c/0/A17DC55845B70106CEB3A498496454BE640F44AB.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 73:c8:89:8e:47:b7:be:fb:af:cc:a4:c9:d1:22:5c:02:b9:62: 2b:3c:36:e6:4d:06:44:e0:7c:f2:5d:e5:98:54:0e:d7:0f:2b: 68:f2:f0:20:1e:0a:10:35:ff:a1:26:11:9d:47:de:6d:f0:67: 3d:eb:0c:7f:f6:a5:65:4e:90:49:a0:d1:77:af:e7:4e:a6:da: b0:8b:61:65:78:d3:b4:67:37:9d:8a:65:c3:79:7e:60:3a:b2: ad:d9:84:41:d8:7c:7b:9b:89:99:16:11:9a:bd:17:88:da:67: 4e:26:0f:f0:02:e5:1b:15:8a:05:30:0b:4a:3e:43:40:57:17: 89:e9:c6:d6:03:14:82:92:a2:29:0e:17:4d:94:ab:26:94:ad: 65:74:44:0e:f8:3e:46:60:d8:78:b7:4d:b4:96:9b:8b:c3:da: 99:c2:7e:e1:ba:47:44:6f:a7:31:9f:83:a7:57:67:1c:b2:78: 5f:a1:12:41:d4:00:3b:a6:53:dd:09:66:1b:41:18:b8:99:67: 3e:b0:f2:da:a8:4d:d2:58:c3:e9:e0:45:7d:9f:d3:32:b1:8a: a4:24:cf:cd:95:9c:89:f3:4e:d8:84:f4:c9:67:68:49:36:78: 7b:8a:d3:8d:e0:38:77:34:2e:f0:81:21:eb:9d:00:69:fd:35: a2:c0:87:63 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUE9wcUyZDCR1jSOCD9/psNDMndjswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTE3REM1NTg0NUI3MDEwNkNFQjNBNDk4NDk2NDU0QkU2 NDBGNDRBQjAeFw0yNjAxMjUxNjU2MTZaFw0yNjAxMjgyMTIwMTZaMDMxMTAvBgNV BAMTKDU3NUFERDJDNUZBMDkwOUY4MzkzMzA4NTAzMjdCNzlGQ0RGNkI1QjgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDh6+svyAnuJYDzk0Kb1IlRQaAC 8OnI6H2gwAIpn6UqWE5dwtPkDQ0FA3l5MWWzhuUdoFuiAcaKlnwJCesp2JOjFyJl BqjiR9COZMtAKRCUpHYKBKWmIlVcfY9w7pZrgukmCs7qJQdeXzJl4VNLi1A5aaiL 9Q6deb+CN706OGe//G4TBhI/suPBzciof7Fzds2bKnvei0H0+b6JqaPW+GqiWgNz inAvnORxK05L8EAzHTKhV4vVkQJOVk7edZB1MYqbkwIoyeCw72X51mhx2sR4UmN5 HQ2uVN7zuii3tNrj37Jdkc/cG53jW6UbM5uodiP3BwkLq9FETHQzmQOu7C5LAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUV1rdLF+gkJ+DkzCFAye3n832tbgwHwYDVR0j BBgwFoAUoX3FWEW3AQbOs6SYSWRUvmQPRKswDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k NjFiOGNjYy02YzIyLTQyNGUtOTYxNC04YWI4YWQyODg0OWMvMC9BMTdEQzU1ODQ1 QjcwMTA2Q0VCM0E0OTg0OTY0NTRCRTY0MEY0NEFCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQTE3REM1NTg0NUI3MDEwNkNFQjNBNDk4NDk2NDU0QkU2NDBG NDRBQi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZDYxYjhjY2MtNmMyMi00MjRlLTk2 MTQtOGFiOGFkMjg4NDljLzAvQTE3REM1NTg0NUI3MDEwNkNFQjNBNDk4NDk2NDU0 QkU2NDBGNDRBQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHPIiY5Ht777r8ykydEiXAK5Yis8NuZNBkTg fPJd5ZhUDtcPK2jy8CAeChA1/6EmEZ1H3m3wZz3rDH/2pWVOkEmg0Xev506m2rCL YWV407RnN52KZcN5fmA6sq3ZhEHYfHubiZkWEZq9F4jaZ04mD/AC5RsVigUwC0o+ Q0BXF4npxtYDFIKSoikOF02UqyaUrWV0RA74PkZg2Hi3TbSWm4vD2pnCfuG6R0Rv pzGfg6dXZxyyeF+hEkHUADumU90JZhtBGLiZZz6w8tqoTdJYw+ngRX2f0zKxiqQk z82VnInzTtiE9MlnaEk2eHuK043gOHc0LvCBIeudAGn9NaLAh2M= -----END CERTIFICATE-----Generated at Mon Jan 26 02:34:15 2026 by rpki-client