This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/d868cf22-d029-45e2-9e21-d9892d3af7a6/0/2D23C629ED956F1736B7DAECCD2AAF31C4F17C26.mft File: 2D23C629ED956F1736B7DAECCD2AAF31C4F17C26.mft (raw, json) Hash identifier: 7PWwlZvwvEWP/yleHELHXm30b2iVyWAjQ8Mj7QBBuek= Subject key identifier: EB:93:2A:7A:A7:A2:E8:D5:9F:60:30:D9:7B:13:9B:3A:C1:9E:E1:43 Authority key identifier: 2D:23:C6:29:ED:95:6F:17:36:B7:DA:EC:CD:2A:AF:31:C4:F1:7C:26 Certificate issuer: /CN=2D23C629ED956F1736B7DAECCD2AAF31C4F17C26 Certificate serial: 28ACC629B534C8276A02993F9684FD7FB8305E03 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2D23C629ED956F1736B7DAECCD2AAF31C4F17C26.cer Subject info access: rsync://repo-rpki.idnic.net/repo/d868cf22-d029-45e2-9e21-d9892d3af7a6/0/2D23C629ED956F1736B7DAECCD2AAF31C4F17C26.mft Manifest number: 0225 Signing time: Sun 25 Jan 2026 08:50:59 +0000 Manifest this update: Sun 25 Jan 2026 08:45:59 +0000 Manifest next update: Wed 28 Jan 2026 11:38:59 +0000 Files and hashes: 1: 3130332e3133382e31302e302f32342d3234203d3e20313338383335.roa (hash: G/xb7tdZk9UZaq4hfvb/m2IU6lYeHr5mMwL3BOuVZMU=) 2: 2D23C629ED956F1736B7DAECCD2AAF31C4F17C26.crl (hash: bUhIV1dAkVLBoP3iFPzv5Hg08qZVZ2wiJ2Cx4bgk9gw=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/d868cf22-d029-45e2-9e21-d9892d3af7a6/0/2D23C629ED956F1736B7DAECCD2AAF31C4F17C26.crl rsync://repo-rpki.idnic.net/repo/d868cf22-d029-45e2-9e21-d9892d3af7a6/0/2D23C629ED956F1736B7DAECCD2AAF31C4F17C26.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2D23C629ED956F1736B7DAECCD2AAF31C4F17C26.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 28 Jan 2026 11:38:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 28:ac:c6:29:b5:34:c8:27:6a:02:99:3f:96:84:fd:7f:b8:30:5e:03 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2D23C629ED956F1736B7DAECCD2AAF31C4F17C26 Validity Not Before: Jan 25 08:45:59 2026 GMT Not After : Jan 28 11:38:59 2026 GMT Subject: CN=EB932A7AA7A2E8D59F6030D97B139B3AC19EE143 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:eb:33:d1:ec:84:90:31:65:76:d0:89:a2:a1: bf:48:44:fe:9c:47:b1:60:ba:c2:1f:80:03:b7:61: ff:ed:ca:95:f9:0a:fa:97:46:ad:ce:ee:88:95:2a: 3f:f6:22:9d:cc:74:75:a3:d0:9d:4e:63:25:f6:a0: 93:8a:39:5d:cc:cb:b9:b2:d5:6a:6e:68:4d:23:97: 5b:e1:0c:8a:bf:47:f6:c5:01:f2:e7:ca:94:f6:c5: 6b:8e:c8:e9:30:c0:c8:65:6f:8d:0a:98:1e:08:29: e4:2e:cf:9c:a8:ce:53:fe:b3:ed:1e:3e:1e:f5:51: 3e:c4:b6:19:76:d8:ef:f3:82:50:c8:3a:9e:a4:db: 12:02:72:75:3a:e0:1a:ae:e9:da:2b:15:89:5f:b7: 9e:6b:d4:0e:c7:d1:97:26:9e:ad:ab:f0:aa:3a:73: 3a:0d:58:bc:8e:61:e1:03:e6:93:bb:13:d4:3c:f4: d4:85:46:d5:8d:db:ca:e5:97:ff:f0:f2:83:e3:5f: d9:b3:ec:92:81:58:82:f4:f8:c0:f7:a0:84:46:9e: ec:6e:c9:76:d9:77:dc:8e:52:52:ad:54:eb:20:01: 29:9b:43:a3:ad:e7:15:90:fc:ab:9d:dd:2e:49:51: 4d:49:aa:bc:e6:a4:ea:6a:7b:95:c5:2a:d6:b4:89: a6:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EB:93:2A:7A:A7:A2:E8:D5:9F:60:30:D9:7B:13:9B:3A:C1:9E:E1:43 X509v3 Authority Key Identifier: keyid:2D:23:C6:29:ED:95:6F:17:36:B7:DA:EC:CD:2A:AF:31:C4:F1:7C:26 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/d868cf22-d029-45e2-9e21-d9892d3af7a6/0/2D23C629ED956F1736B7DAECCD2AAF31C4F17C26.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2D23C629ED956F1736B7DAECCD2AAF31C4F17C26.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d868cf22-d029-45e2-9e21-d9892d3af7a6/0/2D23C629ED956F1736B7DAECCD2AAF31C4F17C26.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 79:a8:f6:8b:39:c4:49:e0:5a:cf:5b:1b:4a:5e:4b:eb:09:f6: 49:8c:ba:a0:f0:d6:9a:77:04:fd:3a:2b:6e:4d:b1:13:97:6d: d1:7e:cf:c7:03:fb:68:71:17:51:47:53:29:ad:3f:2c:64:ff: c5:5c:2e:c1:d5:12:e0:20:5e:33:9c:bc:49:e8:75:6f:9c:39: f3:10:86:bb:ea:b1:20:a2:37:da:5f:8c:e3:38:76:7b:8b:28: 11:ea:69:0a:c1:01:ea:6a:c2:0a:d1:1f:23:56:c2:a6:be:e1: d3:6c:79:3b:1f:f7:b2:0e:55:a8:f6:c3:97:3b:8a:f4:a2:48: 41:bf:bb:66:fb:a7:bd:61:90:8a:00:79:04:5b:2d:12:3e:42: 27:a4:1f:59:8e:ba:f4:df:18:f1:f5:b4:5b:fe:07:3a:1f:89: 35:d2:0f:59:4e:e4:be:0c:1c:72:0d:cf:21:b6:de:7e:6c:62: 2f:7d:cd:93:f7:e5:4d:35:9f:c7:79:7e:ff:19:77:70:b8:ce: 55:0e:80:c3:95:56:7f:45:73:51:6a:b9:64:f7:58:73:92:20: ef:74:e0:05:bb:01:f2:60:1c:a2:43:83:9d:5a:b3:1c:7d:01: b2:d7:ab:7a:f6:81:64:b6:a5:ff:17:57:f4:12:95:e1:cb:24: bb:9f:ea:c7 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUKKzGKbU0yCdqApk/loT9f7gwXgMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkQyM0M2MjlFRDk1NkYxNzM2QjdEQUVDQ0QyQUFGMzFD NEYxN0MyNjAeFw0yNjAxMjUwODQ1NTlaFw0yNjAxMjgxMTM4NTlaMDMxMTAvBgNV BAMTKEVCOTMyQTdBQTdBMkU4RDU5RjYwMzBEOTdCMTM5QjNBQzE5RUUxNDMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+6zPR7ISQMWV20Imiob9IRP6c R7FgusIfgAO3Yf/typX5CvqXRq3O7oiVKj/2Ip3MdHWj0J1OYyX2oJOKOV3My7my 1WpuaE0jl1vhDIq/R/bFAfLnypT2xWuOyOkwwMhlb40KmB4IKeQuz5yozlP+s+0e Ph71UT7Ethl22O/zglDIOp6k2xICcnU64Bqu6dorFYlft55r1A7H0Zcmnq2r8Ko6 czoNWLyOYeED5pO7E9Q89NSFRtWN28rll//w8oPjX9mz7JKBWIL0+MD3oIRGnuxu yXbZd9yOUlKtVOsgASmbQ6Ot5xWQ/Kud3S5JUU1JqrzmpOpqe5XFKta0iaZPAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU65Mqeqei6NWfYDDZexObOsGe4UMwHwYDVR0j BBgwFoAULSPGKe2Vbxc2t9rszSqvMcTxfCYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k ODY4Y2YyMi1kMDI5LTQ1ZTItOWUyMS1kOTg5MmQzYWY3YTYvMC8yRDIzQzYyOUVE OTU2RjE3MzZCN0RBRUNDRDJBQUYzMUM0RjE3QzI2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMkQyM0M2MjlFRDk1NkYxNzM2QjdEQUVDQ0QyQUFGMzFDNEYx N0MyNi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZDg2OGNmMjItZDAyOS00NWUyLTll MjEtZDk4OTJkM2FmN2E2LzAvMkQyM0M2MjlFRDk1NkYxNzM2QjdEQUVDQ0QyQUFG MzFDNEYxN0MyNi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHmo9os5xEngWs9bG0peS+sJ9kmMuqDw1pp3 BP06K25NsROXbdF+z8cD+2hxF1FHUymtPyxk/8VcLsHVEuAgXjOcvEnodW+cOfMQ hrvqsSCiN9pfjOM4dnuLKBHqaQrBAepqwgrRHyNWwqa+4dNseTsf97IOVaj2w5c7 ivSiSEG/u2b7p71hkIoAeQRbLRI+QiekH1mOuvTfGPH1tFv+BzofiTXSD1lO5L4M HHINzyG23n5sYi99zZP35U01n8d5fv8Zd3C4zlUOgMOVVn9Fc1FquWT3WHOSIO90 4AW7AfJgHKJDg51asxx9AbLXq3r2gWS2pf8XV/QSleHLJLuf6sc= -----END CERTIFICATE-----Generated at Sun Jan 25 22:00:43 2026 by rpki-client