This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/d68c7a34-ba31-4d29-8384-186789b384f1/0/A1918C156A9ACFCDF2471DEAFC618EE162DCB340.mft File: A1918C156A9ACFCDF2471DEAFC618EE162DCB340.mft (raw, json) Hash identifier: 9Z9wnzxHoXOAh3AkXCYZTFnhCdprwOYf1NdRMM7R0ZI= Subject key identifier: 3B:5C:48:08:8C:F5:0C:E4:6A:BF:3A:CB:32:4B:F7:09:BE:63:64:2D Authority key identifier: A1:91:8C:15:6A:9A:CF:CD:F2:47:1D:EA:FC:61:8E:E1:62:DC:B3:40 Certificate issuer: /CN=A1918C156A9ACFCDF2471DEAFC618EE162DCB340 Certificate serial: 78C6165B487C59D8CA76451C234690AABD218450 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A1918C156A9ACFCDF2471DEAFC618EE162DCB340.cer Subject info access: rsync://repo-rpki.idnic.net/repo/d68c7a34-ba31-4d29-8384-186789b384f1/0/A1918C156A9ACFCDF2471DEAFC618EE162DCB340.mft Manifest number: 0240 Signing time: Fri 23 Jan 2026 14:21:41 +0000 Manifest this update: Fri 23 Jan 2026 14:16:41 +0000 Manifest next update: Mon 26 Jan 2026 19:58:41 +0000 Files and hashes: 1: 3130332e3136352e3234362e302f32332d3234203d3e20313339343630.roa (hash: +Y8f9IKZhXyPRNzOP8gLDO5FItamxPZwT5YuJiQ+z+Y=) 2: A1918C156A9ACFCDF2471DEAFC618EE162DCB340.crl (hash: yKeGKxY0S5MrHqcNm7l/FByVbUz5XyCClVmjhkYwhVk=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/d68c7a34-ba31-4d29-8384-186789b384f1/0/A1918C156A9ACFCDF2471DEAFC618EE162DCB340.crl rsync://repo-rpki.idnic.net/repo/d68c7a34-ba31-4d29-8384-186789b384f1/0/A1918C156A9ACFCDF2471DEAFC618EE162DCB340.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A1918C156A9ACFCDF2471DEAFC618EE162DCB340.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 26 Jan 2026 19:58:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 78:c6:16:5b:48:7c:59:d8:ca:76:45:1c:23:46:90:aa:bd:21:84:50 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A1918C156A9ACFCDF2471DEAFC618EE162DCB340 Validity Not Before: Jan 23 14:16:41 2026 GMT Not After : Jan 26 19:58:41 2026 GMT Subject: CN=3B5C48088CF50CE46ABF3ACB324BF709BE63642D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:b6:8a:b1:e0:3e:62:0e:17:72:cf:2d:f4:be: 6a:2f:5e:f4:ae:c6:44:5f:85:bc:f7:10:60:59:da: 87:1f:a3:b4:5b:42:23:63:da:c1:4a:47:84:da:64: e3:d9:e5:2b:27:c6:19:7c:8e:de:92:a7:58:2d:bc: 4f:8e:1d:db:83:a1:5e:79:5b:de:5e:21:8d:5a:93: 73:e6:e9:82:02:13:41:85:89:bd:0e:2b:92:4c:9b: 1b:d4:a7:f7:6c:e3:01:9f:e6:19:50:45:14:9d:0c: 04:67:ff:ea:3d:71:08:c7:5e:30:93:17:b9:53:45: 24:f8:8f:63:5e:18:97:78:11:5a:50:bd:43:76:04: 9b:11:87:14:af:cd:98:9b:b5:45:82:d5:bf:2a:a5: 9b:ee:b8:eb:bf:27:8c:e1:93:ba:f4:c5:c4:b5:5d: 23:67:db:bd:25:61:04:2e:5f:61:50:5a:1a:a1:b6: ed:1d:14:86:63:62:6e:45:af:02:29:5a:fe:69:96: ee:45:c6:f2:9d:84:93:95:02:f7:07:be:82:58:44: fd:1d:26:18:1a:8b:f1:98:d4:b3:03:44:d9:9a:1d: 4c:e9:b4:3e:dc:92:3c:50:f9:4d:69:9c:14:66:cc: 56:b5:82:94:6b:62:2a:bb:91:cb:0f:80:30:be:81: e5:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:5C:48:08:8C:F5:0C:E4:6A:BF:3A:CB:32:4B:F7:09:BE:63:64:2D X509v3 Authority Key Identifier: keyid:A1:91:8C:15:6A:9A:CF:CD:F2:47:1D:EA:FC:61:8E:E1:62:DC:B3:40 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/d68c7a34-ba31-4d29-8384-186789b384f1/0/A1918C156A9ACFCDF2471DEAFC618EE162DCB340.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A1918C156A9ACFCDF2471DEAFC618EE162DCB340.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d68c7a34-ba31-4d29-8384-186789b384f1/0/A1918C156A9ACFCDF2471DEAFC618EE162DCB340.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2f:13:6b:50:83:41:1d:76:76:c5:80:63:18:cc:e3:b9:a1:43: 02:35:43:b0:d0:a1:99:8e:c1:02:7c:37:5c:d9:e2:0d:d4:7a: 7c:9f:db:d2:1e:df:95:90:e6:2b:22:f6:1c:30:c4:29:31:de: b1:72:f2:db:2f:14:33:79:ce:bb:cf:a2:57:11:46:ce:cd:e7: 85:d4:6c:75:8d:02:d7:f7:97:80:ba:20:40:b5:89:63:a9:42: 2d:c2:2e:ac:43:93:b9:ec:b1:4d:e0:1e:52:53:6e:ae:7c:63: 95:e3:3b:f6:10:d7:40:4a:bc:69:83:99:69:07:3f:de:83:2d: e7:30:72:70:d5:9b:f3:dc:9c:be:9d:03:31:bb:6d:a4:30:be: b0:30:f0:7d:83:b7:cb:32:2d:bf:ec:50:b3:ed:09:2b:90:3f: 02:02:e6:19:5a:23:ab:32:59:cb:b4:1b:e7:1d:2c:8c:ce:93: 95:c7:b4:4d:c4:c5:f1:ea:a1:b0:f1:58:57:31:b0:d5:5b:75: 7a:bd:da:d9:13:24:b3:0b:bf:e6:5d:98:32:fa:6c:07:9a:ac: 7e:39:9f:77:4a:bb:dc:19:e8:79:a0:02:ae:fa:49:ec:75:14: 5a:75:24:d6:b9:18:b8:ce:91:83:e4:a5:15:01:4b:a7:01:e5: 40:8c:a7:5a -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUeMYWW0h8WdjKdkUcI0aQqr0hhFAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTE5MThDMTU2QTlBQ0ZDREYyNDcxREVBRkM2MThFRTE2 MkRDQjM0MDAeFw0yNjAxMjMxNDE2NDFaFw0yNjAxMjYxOTU4NDFaMDMxMTAvBgNV BAMTKDNCNUM0ODA4OENGNTBDRTQ2QUJGM0FDQjMyNEJGNzA5QkU2MzY0MkQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCytoqx4D5iDhdyzy30vmovXvSu xkRfhbz3EGBZ2ocfo7RbQiNj2sFKR4TaZOPZ5Ssnxhl8jt6Sp1gtvE+OHduDoV55 W95eIY1ak3Pm6YICE0GFib0OK5JMmxvUp/ds4wGf5hlQRRSdDARn/+o9cQjHXjCT F7lTRST4j2NeGJd4EVpQvUN2BJsRhxSvzZibtUWC1b8qpZvuuOu/J4zhk7r0xcS1 XSNn270lYQQuX2FQWhqhtu0dFIZjYm5FrwIpWv5plu5FxvKdhJOVAvcHvoJYRP0d Jhgai/GY1LMDRNmaHUzptD7ckjxQ+U1pnBRmzFa1gpRrYiq7kcsPgDC+geVbAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUO1xICIz1DORqvzrLMkv3Cb5jZC0wHwYDVR0j BBgwFoAUoZGMFWqaz83yRx3q/GGO4WLcs0AwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k NjhjN2EzNC1iYTMxLTRkMjktODM4NC0xODY3ODliMzg0ZjEvMC9BMTkxOEMxNTZB OUFDRkNERjI0NzFERUFGQzYxOEVFMTYyRENCMzQwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQTE5MThDMTU2QTlBQ0ZDREYyNDcxREVBRkM2MThFRTE2MkRD QjM0MC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZDY4YzdhMzQtYmEzMS00ZDI5LTgz ODQtMTg2Nzg5YjM4NGYxLzAvQTE5MThDMTU2QTlBQ0ZDREYyNDcxREVBRkM2MThF RTE2MkRDQjM0MC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAC8Ta1CDQR12dsWAYxjM47mhQwI1Q7DQoZmO wQJ8N1zZ4g3Uenyf29Ie35WQ5isi9hwwxCkx3rFy8tsvFDN5zrvPolcRRs7N54XU bHWNAtf3l4C6IEC1iWOpQi3CLqxDk7nssU3gHlJTbq58Y5XjO/YQ10BKvGmDmWkH P96DLecwcnDVm/PcnL6dAzG7baQwvrAw8H2Dt8syLb/sULPtCSuQPwIC5hlaI6sy Wcu0G+cdLIzOk5XHtE3ExfHqobDxWFcxsNVbdXq92tkTJLMLv+ZdmDL6bAearH45 n3dKu9wZ6HmgAq76Sex1FFp1JNa5GLjOkYPkpRUBS6cB5UCMp1o= -----END CERTIFICATE-----Generated at Sun Jan 25 18:55:37 2026 by rpki-client