This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/d70d629a-96ed-451a-8787-34122282a706/0/08435803278DC5796EE67697996454D656195D4C.mft File: 08435803278DC5796EE67697996454D656195D4C.mft (raw, json) Hash identifier: lzrGAT+kdib4+kCkAn3U7urMAfl+b2u2+VCK4oXohmc= Subject key identifier: DC:CD:65:AF:43:15:1A:22:38:38:6C:2E:D4:8B:C8:1A:AD:A2:41:49 Authority key identifier: 08:43:58:03:27:8D:C5:79:6E:E6:76:97:99:64:54:D6:56:19:5D:4C Certificate issuer: /CN=08435803278DC5796EE67697996454D656195D4C Certificate serial: 15F72D573CE8A82AC35074C258802B85DE9C914F Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/08435803278DC5796EE67697996454D656195D4C.cer Subject info access: rsync://repo-rpki.idnic.net/repo/d70d629a-96ed-451a-8787-34122282a706/0/08435803278DC5796EE67697996454D656195D4C.mft Manifest number: 0132 Signing time: Sat 24 Jan 2026 17:40:48 +0000 Manifest this update: Sat 24 Jan 2026 17:35:48 +0000 Manifest next update: Tue 27 Jan 2026 17:59:48 +0000 Files and hashes: 1: 08435803278DC5796EE67697996454D656195D4C.crl (hash: RXHxrcnSE1ATAnupSFRXh5XdY3K+hHP9bmRrN4atXR4=) 2: 3130332e3138302e3136322e302f32342d3234203d3e20313439333737.roa (hash: ULnMVXnjf0tvwwqkUSO96TMRqJiDiyS4pTW21akFxig=) 3: 3130332e3233302e3234362e302f32342d3234203d3e20313331373735.roa (hash: lyCZVXNuC0Xf+K13v95LugLimZC5psd3n6Znwu42Lhs=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/d70d629a-96ed-451a-8787-34122282a706/0/08435803278DC5796EE67697996454D656195D4C.crl rsync://repo-rpki.idnic.net/repo/d70d629a-96ed-451a-8787-34122282a706/0/08435803278DC5796EE67697996454D656195D4C.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/08435803278DC5796EE67697996454D656195D4C.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 27 Jan 2026 17:59:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 15:f7:2d:57:3c:e8:a8:2a:c3:50:74:c2:58:80:2b:85:de:9c:91:4f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=08435803278DC5796EE67697996454D656195D4C Validity Not Before: Jan 24 17:35:48 2026 GMT Not After : Jan 27 17:59:48 2026 GMT Subject: CN=DCCD65AF43151A2238386C2ED48BC81AADA24149 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:03:b5:fc:1c:bf:ad:64:61:80:5d:81:58:fd: 5d:cc:82:f8:33:ae:2f:43:d6:82:65:76:94:ee:5e: b7:f1:55:6e:b1:ba:60:5e:af:2b:50:a4:ae:d5:27: f0:44:2f:18:48:b8:c0:7b:76:5f:3e:7e:85:43:2e: 2a:b1:b1:96:91:d0:3f:6b:5d:13:c2:b7:56:42:4f: 54:85:6a:4b:01:ea:4b:05:52:31:5f:46:da:7a:c2: 42:02:a6:51:91:dc:99:5a:4d:86:bc:70:49:3a:ba: 30:a6:66:2b:0c:a5:9b:6f:cd:c0:7b:43:0b:20:55: 87:ec:69:5f:c4:6a:5d:5e:5d:08:d1:7e:ee:15:e7: fe:60:2e:d0:63:c5:1e:6e:e5:67:8f:ab:4b:31:10: c6:2a:0f:ed:2a:e9:05:32:79:46:10:b3:40:a8:ad: 97:a7:f4:c0:0a:23:86:6c:f7:0a:c3:72:75:87:81: 2c:48:fe:cf:44:89:29:8f:6e:a4:16:d2:92:1d:aa: 36:54:7f:90:b3:56:bc:85:33:cb:1c:fc:48:38:d0: ca:5a:ee:7d:d3:6b:08:30:7b:92:71:f0:a9:e3:6e: 32:20:28:0c:cf:b6:11:09:11:a9:83:56:6b:bb:80: d2:7d:59:0c:6c:d1:af:eb:67:8a:18:51:22:d3:ae: 06:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:CD:65:AF:43:15:1A:22:38:38:6C:2E:D4:8B:C8:1A:AD:A2:41:49 X509v3 Authority Key Identifier: keyid:08:43:58:03:27:8D:C5:79:6E:E6:76:97:99:64:54:D6:56:19:5D:4C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/d70d629a-96ed-451a-8787-34122282a706/0/08435803278DC5796EE67697996454D656195D4C.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/08435803278DC5796EE67697996454D656195D4C.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d70d629a-96ed-451a-8787-34122282a706/0/08435803278DC5796EE67697996454D656195D4C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 97:43:cd:32:e1:b2:d1:71:2c:65:01:7d:64:d1:00:36:a2:58: 92:74:33:d2:73:22:28:5c:f4:cf:b5:a6:29:b6:d3:81:5c:aa: 28:f4:31:93:51:b5:5d:fa:32:11:9d:e3:62:57:64:c2:ea:2f: 7a:de:6a:32:1a:40:0a:22:0b:66:57:55:0f:75:56:25:d1:d6: a4:40:fb:4c:b7:f6:b7:62:6f:92:72:d0:6c:ef:8e:7c:cd:16: b3:2e:82:e2:f6:81:8b:9c:a3:b9:d3:39:fc:bd:53:a9:f3:d1: 6e:ce:fd:ac:f9:77:45:1e:c1:87:22:45:dd:86:0f:11:7b:46: 55:67:52:b9:cb:0e:44:32:ff:5d:75:3b:42:7e:b1:f0:06:3f: 36:06:c5:26:73:27:78:42:81:5a:96:bb:59:ff:d8:39:76:85: be:7f:27:2b:f5:1c:25:18:26:2b:83:87:d6:13:64:c9:c9:94: d6:ff:08:87:3e:f7:45:e4:2f:91:e6:81:14:e4:d9:a8:e5:a0: 93:99:bd:ed:ee:81:42:74:6a:cd:87:d7:15:48:81:f0:e8:21: 05:54:67:cc:b3:ad:de:06:80:d4:0a:ca:91:c7:bf:d4:3b:1f: 8c:45:56:d4:9f:5b:f5:fd:9b:f9:ef:f3:aa:20:70:cb:dc:cd: 44:81:b7:6d -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUFfctVzzoqCrDUHTCWIArhd6ckU8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDg0MzU4MDMyNzhEQzU3OTZFRTY3Njk3OTk2NDU0RDY1 NjE5NUQ0QzAeFw0yNjAxMjQxNzM1NDhaFw0yNjAxMjcxNzU5NDhaMDMxMTAvBgNV BAMTKERDQ0Q2NUFGNDMxNTFBMjIzODM4NkMyRUQ0OEJDODFBQURBMjQxNDkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCwA7X8HL+tZGGAXYFY/V3Mgvgz ri9D1oJldpTuXrfxVW6xumBerytQpK7VJ/BELxhIuMB7dl8+foVDLiqxsZaR0D9r XRPCt1ZCT1SFaksB6ksFUjFfRtp6wkICplGR3JlaTYa8cEk6ujCmZisMpZtvzcB7 QwsgVYfsaV/Eal1eXQjRfu4V5/5gLtBjxR5u5WePq0sxEMYqD+0q6QUyeUYQs0Co rZen9MAKI4Zs9wrDcnWHgSxI/s9EiSmPbqQW0pIdqjZUf5CzVryFM8sc/Eg40Mpa 7n3Tawgwe5Jx8KnjbjIgKAzPthEJEamDVmu7gNJ9WQxs0a/rZ4oYUSLTrgZXAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU3M1lr0MVGiI4OGwu1IvIGq2iQUkwHwYDVR0j BBgwFoAUCENYAyeNxXlu5naXmWRU1lYZXUwwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k NzBkNjI5YS05NmVkLTQ1MWEtODc4Ny0zNDEyMjI4MmE3MDYvMC8wODQzNTgwMzI3 OERDNTc5NkVFNjc2OTc5OTY0NTRENjU2MTk1RDRDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMDg0MzU4MDMyNzhEQzU3OTZFRTY3Njk3OTk2NDU0RDY1NjE5 NUQ0Qy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZDcwZDYyOWEtOTZlZC00NTFhLTg3 ODctMzQxMjIyODJhNzA2LzAvMDg0MzU4MDMyNzhEQzU3OTZFRTY3Njk3OTk2NDU0 RDY1NjE5NUQ0Qy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJdDzTLhstFxLGUBfWTRADaiWJJ0M9JzIihc 9M+1pim204Fcqij0MZNRtV36MhGd42JXZMLqL3reajIaQAoiC2ZXVQ91ViXR1qRA +0y39rdib5Jy0GzvjnzNFrMuguL2gYuco7nTOfy9U6nz0W7O/az5d0UewYciRd2G DxF7RlVnUrnLDkQy/111O0J+sfAGPzYGxSZzJ3hCgVqWu1n/2Dl2hb5/Jyv1HCUY JiuDh9YTZMnJlNb/CIc+90XkL5HmgRTk2ajloJOZve3ugUJ0as2H1xVIgfDoIQVU Z8yzrd4GgNQKypHHv9Q7H4xFVtSfW/X9m/nv86ogcMvczUSBt20= -----END CERTIFICATE-----Generated at Sun Jan 25 18:38:22 2026 by rpki-client