This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/d750a651-1a1a-4501-a8bc-9591e1109a27/0/2A2ABC86293A3DA3602C0DFBCED7D9924FE5A58B.mft File: 2A2ABC86293A3DA3602C0DFBCED7D9924FE5A58B.mft (raw, json) Hash identifier: Bo2HpWiplya+rDjtM0rVfclW08qW9k1DfBGPBV56bmI= Subject key identifier: A0:E6:E1:16:55:7B:C8:F6:C6:36:4E:B5:D5:E3:A8:D5:E1:7E:6B:0B Authority key identifier: 2A:2A:BC:86:29:3A:3D:A3:60:2C:0D:FB:CE:D7:D9:92:4F:E5:A5:8B Certificate issuer: /CN=2A2ABC86293A3DA3602C0DFBCED7D9924FE5A58B Certificate serial: 2EE3DFA546D4F2B0155907405979B6B858C01C24 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2A2ABC86293A3DA3602C0DFBCED7D9924FE5A58B.cer Subject info access: rsync://repo-rpki.idnic.net/repo/d750a651-1a1a-4501-a8bc-9591e1109a27/0/2A2ABC86293A3DA3602C0DFBCED7D9924FE5A58B.mft Manifest number: 0543 Signing time: Fri 23 Jan 2026 20:10:56 +0000 Manifest this update: Fri 23 Jan 2026 20:05:56 +0000 Manifest next update: Tue 27 Jan 2026 00:20:56 +0000 Files and hashes: 1: 2A2ABC86293A3DA3602C0DFBCED7D9924FE5A58B.crl (hash: e0OtV+eR+RNHNQqqoSm/WLJIpmdPisKpeZ2RoQWVzU0=) 2: 3130332e3134352e3234322e302f32332d3234203d3e20313339343534.roa (hash: D2W67nt589wKu+2Bfg+V0s/E2/ZjISUp5pz9rbCWuK0=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/d750a651-1a1a-4501-a8bc-9591e1109a27/0/2A2ABC86293A3DA3602C0DFBCED7D9924FE5A58B.crl rsync://repo-rpki.idnic.net/repo/d750a651-1a1a-4501-a8bc-9591e1109a27/0/2A2ABC86293A3DA3602C0DFBCED7D9924FE5A58B.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2A2ABC86293A3DA3602C0DFBCED7D9924FE5A58B.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 27 Jan 2026 00:20:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2e:e3:df:a5:46:d4:f2:b0:15:59:07:40:59:79:b6:b8:58:c0:1c:24 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2A2ABC86293A3DA3602C0DFBCED7D9924FE5A58B Validity Not Before: Jan 23 20:05:56 2026 GMT Not After : Jan 27 00:20:56 2026 GMT Subject: CN=A0E6E116557BC8F6C6364EB5D5E3A8D5E17E6B0B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:1f:dd:ec:9b:fb:06:2a:85:e2:8b:28:0e:ce: bb:15:39:2f:aa:0d:67:2a:65:13:16:79:cf:a1:c6: b9:fe:bc:fe:86:e2:f1:b4:65:9e:90:e1:41:4f:d4: 10:d7:60:0e:a0:da:38:a0:69:25:4b:ff:76:ea:91: 83:e1:9b:d6:32:10:63:d9:cc:26:81:37:aa:8e:5e: 0a:da:8f:7f:fd:91:6d:a3:fb:b5:2a:ff:a0:e7:21: 68:00:4c:ed:ef:ed:03:2d:0c:bf:11:f4:3a:dd:da: 71:e3:eb:f2:ce:68:b7:be:56:55:a7:f5:2c:8a:58: d8:07:68:ba:e8:f1:77:8a:5c:9d:c1:98:bd:a6:f2: 6f:f0:59:58:9f:d2:a5:36:3d:1b:ee:fe:fd:10:36: 6f:a3:b4:23:14:82:9d:b3:4e:34:c9:85:2f:dc:29: dd:6a:d3:5c:9d:9f:b9:52:ae:02:ca:8a:11:a6:e8: f5:ff:34:8b:c8:72:72:65:20:36:05:eb:3a:df:58: 1a:e9:93:48:9d:1c:a7:b8:da:b2:3c:e2:f1:16:d5: b7:b5:ee:00:71:c8:91:36:08:74:8f:1d:a2:6c:5f: 0a:fe:6b:9e:b4:81:e2:14:86:22:ea:8b:0b:82:23: ef:89:48:32:35:61:af:b8:06:42:18:67:8c:89:81: 33:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:E6:E1:16:55:7B:C8:F6:C6:36:4E:B5:D5:E3:A8:D5:E1:7E:6B:0B X509v3 Authority Key Identifier: keyid:2A:2A:BC:86:29:3A:3D:A3:60:2C:0D:FB:CE:D7:D9:92:4F:E5:A5:8B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/d750a651-1a1a-4501-a8bc-9591e1109a27/0/2A2ABC86293A3DA3602C0DFBCED7D9924FE5A58B.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2A2ABC86293A3DA3602C0DFBCED7D9924FE5A58B.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d750a651-1a1a-4501-a8bc-9591e1109a27/0/2A2ABC86293A3DA3602C0DFBCED7D9924FE5A58B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 46:61:ce:2d:2f:71:e3:1c:15:40:38:69:5a:cc:22:5e:5a:28: 02:29:3a:39:f6:a8:d0:22:66:c9:31:6a:5d:ad:86:a2:c0:78: 35:6d:8a:42:2c:37:20:81:7f:9e:14:f2:c2:d1:f6:b6:72:d6: d4:a2:34:e5:f0:90:d4:e7:f4:f5:89:ea:2b:97:f1:1d:87:fa: 63:55:7f:c3:bc:88:a7:a0:f7:a7:ae:14:1a:67:62:d9:fc:90: 6a:3f:1f:05:89:39:5e:8f:e5:e8:79:56:35:66:86:d2:88:09: e2:ee:a4:8d:43:a7:19:27:21:f1:6e:b1:18:8f:50:eb:21:9f: 59:cf:3f:ac:b7:91:21:ea:59:e7:81:0b:f0:d6:e0:fc:3e:ee: b1:bb:a0:48:cb:41:8c:d6:59:5d:e1:f7:2f:f7:cf:8a:13:ec: 34:5b:81:4e:31:ed:64:41:73:90:ea:22:f5:84:04:43:6e:2f: 81:94:86:7d:bc:ff:de:54:fa:a3:72:c4:7c:1e:1e:98:17:3e: cf:2a:53:ba:29:9c:f0:18:92:99:0d:f4:b7:ba:aa:9d:8d:7d: cc:6d:fd:41:59:37:5e:43:c7:fb:da:c6:fd:af:91:af:58:77: 6d:78:04:92:bc:e7:f6:c8:04:ff:b5:63:a4:aa:dc:49:fc:0a: 8b:09:27:8b -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIULuPfpUbU8rAVWQdAWXm2uFjAHCQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkEyQUJDODYyOTNBM0RBMzYwMkMwREZCQ0VEN0Q5OTI0 RkU1QTU4QjAeFw0yNjAxMjMyMDA1NTZaFw0yNjAxMjcwMDIwNTZaMDMxMTAvBgNV BAMTKEEwRTZFMTE2NTU3QkM4RjZDNjM2NEVCNUQ1RTNBOEQ1RTE3RTZCMEIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDCH93sm/sGKoXiiygOzrsVOS+q DWcqZRMWec+hxrn+vP6G4vG0ZZ6Q4UFP1BDXYA6g2jigaSVL/3bqkYPhm9YyEGPZ zCaBN6qOXgraj3/9kW2j+7Uq/6DnIWgATO3v7QMtDL8R9Drd2nHj6/LOaLe+VlWn 9SyKWNgHaLro8XeKXJ3BmL2m8m/wWVif0qU2PRvu/v0QNm+jtCMUgp2zTjTJhS/c Kd1q01ydn7lSrgLKihGm6PX/NIvIcnJlIDYF6zrfWBrpk0idHKe42rI84vEW1be1 7gBxyJE2CHSPHaJsXwr+a560geIUhiLqiwuCI++JSDI1Ya+4BkIYZ4yJgTMZAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUoObhFlV7yPbGNk611eOo1eF+awswHwYDVR0j BBgwFoAUKiq8hik6PaNgLA37ztfZkk/lpYswDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k NzUwYTY1MS0xYTFhLTQ1MDEtYThiYy05NTkxZTExMDlhMjcvMC8yQTJBQkM4NjI5 M0EzREEzNjAyQzBERkJDRUQ3RDk5MjRGRTVBNThCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMkEyQUJDODYyOTNBM0RBMzYwMkMwREZCQ0VEN0Q5OTI0RkU1 QTU4Qi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZDc1MGE2NTEtMWExYS00NTAxLWE4 YmMtOTU5MWUxMTA5YTI3LzAvMkEyQUJDODYyOTNBM0RBMzYwMkMwREZCQ0VEN0Q5 OTI0RkU1QTU4Qi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEZhzi0vceMcFUA4aVrMIl5aKAIpOjn2qNAi Zskxal2thqLAeDVtikIsNyCBf54U8sLR9rZy1tSiNOXwkNTn9PWJ6iuX8R2H+mNV f8O8iKeg96euFBpnYtn8kGo/HwWJOV6P5eh5VjVmhtKICeLupI1DpxknIfFusRiP UOshn1nPP6y3kSHqWeeBC/DW4Pw+7rG7oEjLQYzWWV3h9y/3z4oT7DRbgU4x7WRB c5DqIvWEBENuL4GUhn28/95U+qNyxHweHpgXPs8qU7opnPAYkpkN9Le6qp2Nfcxt /UFZN15Dx/vaxv2vka9Yd214BJK85/bIBP+1Y6Sq3En8CosJJ4s= -----END CERTIFICATE-----Generated at Sun Jan 25 18:57:19 2026 by rpki-client